@honua/mcp-server 0.1.1-beta.0 → 0.1.4-beta.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 Honua
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -9,6 +9,11 @@ bound to their own platform; this one is bound to none.
 **Release status: beta.** Tool contracts are certified against live and fixture
 targets on every release; remaining pre-1.0 work is hardening, not surface change.
 
+**Scores are published, not claimed.** How well different client models actually
+drive this surface — and where they fail — is in the
+[cross-model MCP eval scorecard](../docs/generated/mcp-eval-scorecard.md),
+generated from the dated run artifacts committed under [`evals/`](evals/README.md).
+
 Two modes:
 
 - **Standalone (platform-free) — the front door.** The `honua-mcp` bin runs the
@@ -21,9 +26,48 @@ Two modes:
 
 ## Requirements
 
-- Node.js `>=20`
+- Node.js `>=20.19`
 - Any reachable FeatureServer/OGC endpoint (public or Honua)
 
+## Install
+
+The server is published as
+[`@honua/mcp-server`](https://www.npmjs.com/package/@honua/mcp-server) with two
+bins: `honua-mcp` (the platform-free stdio server) and `honua-mcp-proxy` (the
+bridge to a Honua deployment's hosted `/mcp` catalog). No checkout, no build:
+
+```bash
+# one-off
+npx -y -p @honua/mcp-server honua-mcp   # reads HONUA_BASE_URL from the environment
+
+# or keep it installed
+npm install -g @honua/mcp-server
+```
+
+Claude Desktop, Claude Code, Cursor, and other MCP clients launch it as a stdio
+server. Copy-paste client config (`.mcp.json` / `mcp.json` / Claude Desktop's
+`claude_desktop_config.json`):
+
+```json
+{
+  "mcpServers": {
+    "honua": {
+      "command": "npx",
+      "args": ["-y", "-p", "@honua/mcp-server", "honua-mcp"],
+      "env": {
+        "HONUA_BASE_URL": "https://services.arcgis.com/P3ePLMYs2RVChkJx/arcgis",
+        "HONUA_TRANSPORT": "rest"
+      }
+    }
+  }
+}
+```
+
+That example points at a public ArcGIS endpoint — swap `HONUA_BASE_URL` for
+your own FeatureServer folder, OGC API root, or Honua deployment. Contributors
+running from a checkout: `npm install && npm run build`, then
+`node dist/src/index.js` with the same environment.
+
 ## Platform-free mode (any ArcGIS / OGC endpoint)
 
 Point `HONUA_BASE_URL` at any origin/folder that serves the standard GeoServices
@@ -31,12 +75,16 @@ REST paths (`/rest/services`, `/FeatureServer/{id}/query`). Example — the publ
 US Census 2020 apportionment FeatureServer on `services.arcgis.com`:
 
 ```bash
-npm install
-npm run build
 HONUA_BASE_URL="https://services.arcgis.com/P3ePLMYs2RVChkJx/arcgis" \
-  HONUA_TRANSPORT="rest" node dist/src/index.js
+  HONUA_TRANSPORT="rest" npx -y -p @honua/mcp-server honua-mcp
 ```
 
+The same applies to a bare **OGC API** service root: point `HONUA_BASE_URL` at
+the root, address sources with the neutral `<protocol>:<address>` form
+(`ogc-features:<collectionId>`), and pass `layout: "ogc-api"` on calls against
+a third-party root (see the addressing table below). STAC works the same way
+with `layout: "stac-api"` or `"stac-static"`.
+
 Tools that require a Honua-only surface (server-side styling via OGC API – Styles,
 a `/rest/services` catalog) **degrade gracefully** on a plain endpoint: they
 return a structured result
@@ -66,8 +114,9 @@ When `HONUA_API_KEY` is configured, use `https://` for non-localhost servers.
 
 All read-only:
 
-- `honua_list_services` — discover services (degrades if the target has no catalog)
-- `honua_describe_layer`
+- `honua_list_sources` — **protocol-neutral discovery.** Returns `<protocol>:<address>` source references plus each source's real capabilities. Every protocol family degrades independently with a reason.
+- `honua_list_services` — GeoServices-specific service catalog (prefer `honua_list_sources`)
+- `honua_describe_layer` — source schema, protocol, and advertised capabilities
 - `honua_query_features`
 - `honua_count_features`
 - `honua_get_extent`
@@ -75,6 +124,100 @@ All read-only:
 - `honua_explain_capability_gap`
 - `honua_get_style`, `honua_apply_style_preset` — structured-unavailable on a plain FeatureServer
 
+### Protocol-neutral tool contract
+
+The tool vocabulary is the SDK's `Dataset` → `Source` → `Query` → `Result` contract,
+not GeoServices with extra fields. **No tool schema requires an Esri-only field.**
+
+**Addressing.** A source is one string, `<protocol>:<address>`, exactly as
+`honua_list_sources` emits it:
+
+| protocol | address | example |
+| --- | --- | --- |
+| `geoservices-feature-service` (alias `geoservices`) | `<serviceId>/<layerId>` | `geoservices-feature-service:Parks/0` |
+| `geoservices-map-service` | `<serviceId>/<layerId>` | `geoservices-map-service:Basemap/2` |
+| `ogc-features` (alias `ogc`) | `<collectionId>` | `ogc-features:hotels` |
+| `ogc-records` | `<collectionId>` | `ogc-records:catalog` |
+| `stac` | `<collectionId>` | `stac:sentinel-2-l2a` |
+| `wfs` | `<typeName>` | `wfs:topp:states` |
+| `odata` | `<entitySet>` | `odata:People` |
+
+An unrecognized protocol token is **refused with the accepted forms** rather than
+guessed at. Pass `layout` (`ogc-api` / `auto` / `stac-api` / `stac-static`) when the
+OGC/STAC source lives at a third-party service root rather than the Honua facade.
+
+**Filtering.** `filter` is the SDK's typed semantic filter, which compiles to
+GeoServices SQL-92, CQL2, FES 2.0, or OData `$filter` depending on the backend —
+one filter, same meaning everywhere:
+
+```jsonc
+{
+  "source": "ogc-features:obs",
+  "filter": {
+    "op": "and",
+    "args": [
+      { "op": "eq", "field": "stn_id", "value": 2147 },
+      { "op": "gt", "field": "value", "value": 95 }
+    ]
+  },
+  "orderBy": [{ "field": "value", "direction": "desc" }],
+  "limit": 10
+}
+```
+
+Nodes: `eq`/`ne`/`lt`/`lte`/`gt`/`gte` (`field`, `value`), `in` (`values`),
+`between` (`lower`, `upper`), `is-null`/`is-not-null`, `like` (`pattern`,
+`caseSensitive`), `and`/`or` (`args`), `not` (`arg`), the spatial predicates
+`intersects`/`contains`/`within`/`crosses`/`touches`/`overlaps`/`bbox-intersects`
+(`geometry` or `bbox`), and the temporal predicates
+`before`/`after`/`during`/`time-intersects` (`field`, `value`).
+
+**Geometry** is GeoJSON (RFC 7946), or a `bbox` as `[minX, minY, maxX, maxY]`.
+An envelope tested with `intersects` travels as the portable spatial constraint
+(the OGC `bbox` parameter / a GeoServices geometry parameter); a richer geometry
+or predicate becomes a typed spatial filter, which compiles where supported and
+fails closed where it is not. **Time** is `temporal` — `{ "instant": … }` or
+`{ "start": …, "end": … }`, with an optional `field`; without a field it targets
+the source's own time dimension (`time=` / `datetime=`).
+
+**Results** carry the neutral source identity, GeoJSON geometry, and — when the
+protocol served the request a weaker way — an explicit `degraded` array (e.g. OGC
+API Features has no server-side aggregation, so `honua_statistics` says it
+aggregated client-side rather than presenting the number as authoritative).
+
+**Capability honesty.** A request the backing protocol cannot express returns an
+`isError` result with a structured envelope, never a silently empty feature list:
+
+```json
+{
+  "code": "capability_not_supported",
+  "error": {
+    "kind": "ExecutionFailed",
+    "message": "Capability \"queryAggregate\" is not supported by protocol \"wmts\"",
+    "capability": "queryAggregate",
+    "protocol": "wmts",
+    "guidance": "…what to do instead…"
+  }
+}
+```
+
+### Deprecated inputs (still accepted)
+
+Nothing was removed. The following remain as **optional** compatibility inputs so
+existing MCP clients keep working, and are marked `[DEPRECATED]` in their schema
+descriptions:
+
+- `serviceId` + `layerId` — the GeoServices pair. Equivalent to
+  `source: "geoservices-feature-service:<serviceId>/<layerId>"`. Passing
+  `serviceId` without `layerId` is refused rather than defaulted to layer 0.
+- `where` — source-native filter text, whose language depends on the backend. Use
+  `filter` for a protocol-neutral one.
+- `geometry` as Esri-JSON, with `geometryType` — converted on the way in.
+
+One behavioural note: a source addressed the **deprecated** way keeps the legacy
+Esri-JSON geometry output; a source addressed with `source` gets GeoJSON. Set
+`geometryFormat` explicitly to override either default.
+
 Hosts that use signed safe-agent plans can import
 `@honua/mcp-server/agent-execution`. Its `createReadOnlyMcpAgentExecutor` binds
 one named read tool to `@honua/sdk-js/agent-safety`'s exact approved-operation,
@@ -184,10 +327,37 @@ The fixture is recorded by `scripts/record-census-fixtures.mjs` into
 `src/certification/census-data.ts`; the evaluator that replays it is verified for
 parity against the live recordings in `test/certification/census-fixture-client.test.ts`.
 
+### Non-GeoServices certification lane
+
+A `standalone`-shaped lane can prove the surface works against Esri and still say
+nothing about vendor neutrality. So a second target — **`standalone-ogc`**
+(`HONUA_MCP_CERT_TARGET=standalone-ogc`, or `--target standalone-ogc`) — runs the
+**same tool catalog** against an in-process fixture of a plain **OGC API Features**
+endpoint, replaying collections recorded from the public
+[pygeoapi demo](https://demo.pygeoapi.io/master) (the pinned `ogc-features` target
+in `config/live-conformance-endpoints.v1.json`). Nothing Esri exists there: the
+GeoServices entry points all reject, so a tool that still secretly required
+`serviceId`/`layerId` fails loudly instead of passing by accident.
+
+```bash
+npm run certify:standalone-ogc            # non-GeoServices cert (OGC API Features fixture)
+npm run test:certification:standalone-ogc # CI gate variant
+```
+
+The fixture serves the OGC API Features Part 1 parameters (`limit`, `offset`,
+`bbox`, `datetime`, `properties`, `sortby`) plus the Part 3 `filter` +
+`filter-lang=cql2-text` the neutral contract compiles to — including a CQL2
+evaluator that **refuses** a construct it cannot evaluate exactly (`S_*` spatial
+predicates) rather than matching every row. Re-record with
+`node scripts/record-ogc-fixtures.mjs`.
+
 Artifacts are written to the package root as
 `mcp-certification-results.json` and `mcp-certification-results.md` (gitignored;
 uploaded by CI). To certify against a **live** honua-server, set `HONUA_BASE_URL`
-(and `HONUA_TRANSPORT`, `HONUA_MCP_SERVICE_ID`, `HONUA_MCP_LAYER_ID`); the
+(and `HONUA_TRANSPORT`, `HONUA_MCP_SERVICE_ID`, `HONUA_MCP_LAYER_ID`; optionally
+`HONUA_MCP_SOURCE` for a neutral `<protocol>:<address>` source ref,
+`HONUA_MCP_ADDRESS` for the geocoding scenario, `HONUA_MCP_STYLE_ID`, and
+`HONUA_MCP_STATISTIC_FIELD`); the
 harness then drives a real `HonuaClient` instead of the fixture.
 
 The standard schemas are vendored under
@@ -226,6 +396,13 @@ notifications are forwarded.
 
 ## Cross-model workflow eval (provability)
 
+**Published results:
+[Cross-model MCP eval scorecard](../docs/generated/mcp-eval-scorecard.md)** —
+generated from the committed run artifacts in [`evals/runs/`](evals/runs), with
+the deterministic control row, every non-passing run, and the protocol
+certification failures. It ships on the docs site; its freshness is a CI gate
+(`npm run docs:mcp-scorecard:check` from the repo root).
+
 The package ships a **cross-model workflow eval** that proves the "any client →
 any workflow" claim: a held-out corpus of GIS workflows (`src/eval/corpus.ts`)
 is driven through the MCP surface by different client LLMs and graded for
@@ -273,6 +450,24 @@ hallucinated place name fails. The grading taxonomy is documented in
 npm run eval:standalone       # deterministic control over the census fixture (offline)
 ```
 
+### Non-GeoServices semantic corpus (`src/eval/ogc-corpus.ts`)
+
+The **ogc** corpus runs the identical catalog against the plain OGC API Features
+fixture, addressing every source as `ogc-features:<collectionId>` — no `serviceId`,
+no `layerId`, anywhere in the corpus (a test asserts that). Its assertions are
+anchored to the recorded pygeoapi data (5 observations, 31 Utah cities:
+`avg(value)=96.14`, `sum(POP_2000)=354212`, `stn_id=2147 ⇒ 2 rows`, the
+2001–2004 interval ⇒ 3 rows), and it exercises the typed filter, a GeoJSON/bbox
+spatial constraint, and canonical temporal predicates. Three scenarios grade
+*honesty* rather than data: client-side aggregation must be reported as degraded,
+an extent that came from the declared collection extent must say so, and a CQL2
+spatial predicate the endpoint does not publish must come back as a structured
+capability refusal — never as an empty result set.
+
+```bash
+npm run eval:ogc              # deterministic control over the OGC API Features fixture (offline)
+```
+
 ### Live lane (paid, manual only)
 
 The **operator corpus** (`src/eval/operator-corpus.ts`, 8 harder scenarios) is

package/dist/src/certification/census-fixture-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"census-fixture-client.d.ts","sourceRoot":"","sources":["../../../src/certification/census-fixture-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAOjD,OAAO,EAML,KAAK,SAAS,EACf,MAAM,kBAAkB,CAAC;AA4F1B,gEAAgE;AAChE,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,EAAE,CAOjE;AAyFD,qFAAqF;AACrF,wBAAgB,6BAA6B,IAAI,WAAW,CAiE3D"}
+{"version":3,"file":"census-fixture-client.d.ts","sourceRoot":"","sources":["../../../src/certification/census-fixture-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAOjD,OAAO,EAML,KAAK,SAAS,EACf,MAAM,kBAAkB,CAAC;AA4F1B,gEAAgE;AAChE,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,EAAE,CAOjE;AA8FD,qFAAqF;AACrF,wBAAgB,6BAA6B,IAAI,WAAW,CAiE3D"}

package/dist/src/certification/census-fixture-client.js

@@ -154,6 +154,11 @@ function projectAttributes(row, outFields) {
         return { ...row };
     }
     const requested = Array.isArray(outFields) ? outFields : outFields.split(",").map((f) => f.trim());
+    // A FeatureServer serializes `outFields` as a comma list, so `["*"]` reaches
+    // the wire as `outFields=*` and selects every field. Mirror that here.
+    if (requested.some((field) => field.trim() === "*")) {
+        return { ...row };
+    }
     const attributes = {};
     for (const field of requested) {
         const value = fieldValue(row, field);

package/dist/src/certification/certifier.d.ts

@@ -1,7 +1,7 @@
 import type { Client } from "@modelcontextprotocol/sdk/client/index.js";
 import { type AuthMode, type SuiteProvenance } from "../provenance.js";
 import { AUTH_ERROR_CODES } from "./contracts.js";
-import type { CertTargetMode } from "./target.js";
+import { type CertTargetMode } from "./target.js";
 /** Per-tool certification record (machine-readable). */
 export interface ToolCertification {
     name: string;

package/dist/src/certification/certifier.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"certifier.d.ts","sourceRoot":"","sources":["../../../src/certification/certifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACxE,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,eAAe,EAGrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,gBAAgB,EAMjB,MAAM,gBAAgB,CAAC;AAYxB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,wDAAwD;AACxD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,IAAI,CAAC;IACjB,6EAA6E;IAC7E,WAAW,EAAE,OAAO,CAAC;IACrB,8EAA8E;IAC9E,eAAe,EAAE,OAAO,CAAC;IACzB,oEAAoE;IACpE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gFAAgF;IAChF,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3B,kFAAkF;IAClF,QAAQ,EAAE,OAAO,CAAC;IAClB,4EAA4E;IAC5E,SAAS,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC3C,0GAA0G;IAC1G,yBAAyB,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1C,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,yCAAyC;AACzC,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,IAAI,CAAC;CAClB;AAED,6EAA6E;AAC7E,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,eAAe,GAAG,iBAAiB,CAAC;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,oEAAoE;AACpE,MAAM,WAAW,aAAa;IAC5B,QAAQ,EACJ,eAAe,GACf,aAAa,GACb,sBAAsB,GACtB,iBAAiB,GACjB,kBAAkB,GAClB,qBAAqB,GACrB,4BAA4B,GAC5B,qBAAqB,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IACxC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,CAAC,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,QAAQ,EAAE;QACR,YAAY,EAAE,MAAM,CAAC;QACrB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,OAAO,EAAE,eAAe,GAAG,MAAM,CAAC;QAClC,UAAU,EAAE,cAAc,CAAC;QAC3B,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,QAAQ,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACjE,iFAAiF;IACjF,UAAU,EAAE,eAAe,CAAC;IAC5B,OAAO,EAAE;QACP,IAAI,EAAE,OAAO,CAAC;QACd,eAAe,EAAE,MAAM,CAAC;QACxB,gBAAgB,EAAE,MAAM,CAAC;QACzB,uBAAuB,EAAE,MAAM,CAAC;QAChC,eAAe,EAAE,MAAM,CAAC;QACxB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,oBAAoB,EAAE,MAAM,CAAC;QAC7B,mBAAmB,EAAE,MAAM,CAAC;QAC5B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,gBAAgB,EAAE,MAAM,CAAC;QACzB,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,MAAM,CAAC;QACxB,gBAAgB,EAAE,MAAM,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,SAAS,EAAE,qBAAqB,EAAE,CAAC;IACnC,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,IAAI,CAAA;KAAE,EAAE,CAAC;IAC9C,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,SAAS,EAAE,QAAQ,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,UAAU,EAAE,cAAc,CAAC;IAC3B,mEAAmE;IACnE,OAAO,EAAE,eAAe,GAAG,MAAM,CAAC;IAClC,qDAAqD;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,6EAA6E;IAC7E,sBAAsB,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC7D,iFAAiF;IACjF,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAID,6EAA6E;AAC7E,wBAAgB,cAAc,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CAAE,GAAG,OAAO,CAMxG;AASD;;;;GAIG;AACH,wBAAsB,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA0EnF;AAubD,OAAO,EAAE,gBAAgB,EAAE,CAAC"}
+{"version":3,"file":"certifier.d.ts","sourceRoot":"","sources":["../../../src/certification/certifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACxE,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,eAAe,EAGrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,gBAAgB,EAMjB,MAAM,gBAAgB,CAAC;AAaxB,OAAO,EAAE,KAAK,cAAc,EAA0B,MAAM,aAAa,CAAC;AAE1E,wDAAwD;AACxD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,IAAI,CAAC;IACjB,6EAA6E;IAC7E,WAAW,EAAE,OAAO,CAAC;IACrB,8EAA8E;IAC9E,eAAe,EAAE,OAAO,CAAC;IACzB,oEAAoE;IACpE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gFAAgF;IAChF,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3B,kFAAkF;IAClF,QAAQ,EAAE,OAAO,CAAC;IAClB,4EAA4E;IAC5E,SAAS,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC3C,0GAA0G;IAC1G,yBAAyB,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1C,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,yCAAyC;AACzC,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,IAAI,CAAC;CAClB;AAED,6EAA6E;AAC7E,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,eAAe,GAAG,iBAAiB,CAAC;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,oEAAoE;AACpE,MAAM,WAAW,aAAa;IAC5B,QAAQ,EACJ,eAAe,GACf,aAAa,GACb,sBAAsB,GACtB,iBAAiB,GACjB,kBAAkB,GAClB,qBAAqB,GACrB,4BAA4B,GAC5B,qBAAqB,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IACxC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,CAAC,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,QAAQ,EAAE;QACR,YAAY,EAAE,MAAM,CAAC;QACrB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,OAAO,EAAE,eAAe,GAAG,MAAM,CAAC;QAClC,UAAU,EAAE,cAAc,CAAC;QAC3B,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,QAAQ,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACjE,iFAAiF;IACjF,UAAU,EAAE,eAAe,CAAC;IAC5B,OAAO,EAAE;QACP,IAAI,EAAE,OAAO,CAAC;QACd,eAAe,EAAE,MAAM,CAAC;QACxB,gBAAgB,EAAE,MAAM,CAAC;QACzB,uBAAuB,EAAE,MAAM,CAAC;QAChC,eAAe,EAAE,MAAM,CAAC;QACxB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,oBAAoB,EAAE,MAAM,CAAC;QAC7B,mBAAmB,EAAE,MAAM,CAAC;QAC5B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,gBAAgB,EAAE,MAAM,CAAC;QACzB,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,MAAM,CAAC;QACxB,gBAAgB,EAAE,MAAM,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,SAAS,EAAE,qBAAqB,EAAE,CAAC;IACnC,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,IAAI,CAAA;KAAE,EAAE,CAAC;IAC9C,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,SAAS,EAAE,QAAQ,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,UAAU,EAAE,cAAc,CAAC;IAC3B,mEAAmE;IACnE,OAAO,EAAE,eAAe,GAAG,MAAM,CAAC;IAClC,qDAAqD;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,6EAA6E;IAC7E,sBAAsB,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC7D,iFAAiF;IACjF,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAID,6EAA6E;AAC7E,wBAAgB,cAAc,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CAAE,GAAG,OAAO,CAMxG;AAwBD;;;;GAIG;AACH,wBAAsB,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA0EnF;AAyaD,OAAO,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/src/certification/certifier.js

@@ -3,7 +3,9 @@ import { AUTH_ERROR_CODES, checkAuthContract, checkInvalidArgsContract, checkPag
 import { buildInvalidArgsInputs, buildRoundTripInputs, resolveRoundTripEnv } from "./fixtures.js";
 import { checkConformance, checkWellFormed, validateAgainstSchema } from "./json-schema.js";
 import { runDeepContracts } from "./lifecycle.js";
+import { OGC_COLLECTION_IDS } from "./ogc-data.js";
 import { PLATFORM_FREE_DEGRADATIONS, buildReferenceToolLookup, loadSchemaFile, loadSchemaIndex, } from "./schema-index.js";
+import { isStandaloneTargetMode } from "./target.js";
 const STANDARD_SOURCE = "geospatial-mcp@54cbd49 (spec/schemas)";
 /** Determine whether a discovered tool is safe to round-trip (read-only). */
 export function isReadOnlyTool(tool) {
@@ -13,6 +15,20 @@ export function isReadOnlyTool(tool) {
     const mutating = /(create|update|delete|publish|apply_.*write|execute|edit|deploy|cancel|propose)/i;
     return !mutating.test(tool.name);
 }
+/**
+ * Bind the round-trip inputs to what the target actually serves.
+ *
+ * The non-GeoServices lane has no `serviceId`/`layerId` at all, so the
+ * source-addressed tools round-trip through the protocol-neutral reference for
+ * a recorded OGC collection instead (#1005). An explicit `HONUA_MCP_SOURCE`
+ * always wins.
+ */
+function withTargetRoundTripDefaults(env, targetMode) {
+    if (targetMode !== "standalone-ogc" || env.sourceRef) {
+        return env;
+    }
+    return { ...env, sourceRef: `ogc-features:${OGC_COLLECTION_IDS[0]}`, statisticField: env.statisticField ?? "value" };
+}
 /**
  * Connect an MCP client to the certified surface and produce a deterministic
  * certification report. The client is already connected (offline mock upstream,
@@ -20,7 +36,7 @@ export function isReadOnlyTool(tool) {
  */
 export async function certify(options) {
     const { client } = options;
-    const roundTripEnv = resolveRoundTripEnv(options.env);
+    const roundTripEnv = withTargetRoundTripDefaults(resolveRoundTripEnv(options.env), options.targetMode);
     const roundTripInputs = buildRoundTripInputs(roundTripEnv);
     const index = loadSchemaIndex();
     const referenceLookup = buildReferenceToolLookup(index);
@@ -31,7 +47,7 @@ export async function certify(options) {
     // The platform-free standalone target has no Honua publishing surface, so
     // reference-shape tools (e.g. apply_style_preset) intentionally degrade their
     // platform-bound required properties. Conformance is evaluated accordingly.
-    const platformFree = options.targetMode === "standalone";
+    const platformFree = isStandaloneTargetMode(options.targetMode);
     const tools = [];
     const advertisedNames = new Set();
     for (const tool of advertisedTools) {
@@ -47,7 +63,7 @@ export async function certify(options) {
     contracts.push(paginationCheck("tools", toolPages));
     contracts.push(paginationCheck("resources", resourcePages));
     collectOutputSchemaContracts(tools, contracts);
-    contracts.push(await runErrorShapeContract(client, advertisedTools, options.targetMode));
+    contracts.push(await runErrorShapeContract(client, advertisedTools));
     await runAuthContracts(options, advertisedTools, advertisedResources, contracts);
     // Deep contracts: mutating round-trip, unauthenticated-write refusal, async job
     // lifecycle, and query pagination. Safe by construction — mutations only run
@@ -155,7 +171,7 @@ async function certifyTool(client, tool, referenceLookup, roundTripInputs, platf
     let structuredOutputValidated = null;
     const fixtureInput = roundTripInputs[tool.name];
     if (readOnly && fixtureInput !== undefined) {
-        const outcome = await roundTripTool(client, tool, fixtureInput, errors, notes);
+        const outcome = await roundTripTool(client, tool, fixtureInput, errors);
         roundTrip = outcome.roundTrip;
         structuredOutputValidated = outcome.structuredOutputValidated;
     }
@@ -179,7 +195,7 @@ async function certifyTool(client, tool, referenceLookup, roundTripInputs, platf
         notes,
     };
 }
-async function roundTripTool(client, tool, input, errors, notes) {
+async function roundTripTool(client, tool, input, errors) {
     try {
         const result = (await client.callTool({ name: tool.name, arguments: input }));
         if (result.isError) {
@@ -240,21 +256,13 @@ function collectOutputSchemaContracts(tools, contracts) {
         });
     }
 }
-async function runErrorShapeContract(client, advertised, targetMode) {
-    // The platform-free standalone surface is built on the high-level MCP server,
-    // which rejects invalid arguments with a JSON-RPC -32602 (InvalidParams) error
-    // BEFORE the tool body runs — a valid MCP-native structured error, but not the
-    // Honua GeoprocessingError envelope this contract asserts. That envelope is a
-    // Honua-operator richness a plain FeatureServer does not (and need not) provide,
-    // so we skip-with-reason rather than fail. Other targets are unaffected.
-    if (targetMode === "standalone") {
-        return {
-            contract: "error-shape",
-            target: "(standalone)",
-            status: "skipped",
-            detail: "standalone surface uses MCP-native input validation (JSON-RPC -32602 InvalidParams); the GeoprocessingError envelope is a Honua-operator surface feature",
-        };
-    }
+async function runErrorShapeContract(client, advertised) {
+    // The platform-free surface used to skip this contract: its tools relied on
+    // MCP-native input validation (JSON-RPC -32602 InvalidParams), which is a
+    // valid structured error but not the GeoprocessingError envelope asserted
+    // here. Since #1005 the source-addressed tools validate the request
+    // themselves and emit that envelope, so the contract is exercised on every
+    // target.
     const invalidInputs = buildInvalidArgsInputs();
     const advertisedNames = new Set(advertised.map((t) => t.name));
     const target = Object.keys(invalidInputs).find((name) => advertisedNames.has(name));

package/dist/src/certification/cli.js

@@ -23,7 +23,7 @@ function parseArgs(argv) {
         else if (arg === "--target") {
             const value = argv[++i];
             if (!value) {
-                throw new Error("--target requires a target mode (offline | remote | stdio-proxy | standalone)");
+                throw new Error("--target requires a target mode (offline | remote | stdio-proxy | standalone | standalone-ogc)");
             }
             target = value;
         }

package/dist/src/certification/cql2.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Minimal CQL2-text evaluator for the offline OGC API Features fixture (#1005).
+ *
+ * The neutral tool contract lowers `Query.filter` onto CQL2 text for the OGC
+ * family, so an offline fixture that ignored `filter=` would certify a filter
+ * path that never actually filtered. This evaluator parses the exact subset the
+ * SDK's CQL2 compiler emits — comparisons, `IN`, `BETWEEN`, `IS [NOT] NULL`,
+ * `LIKE`/`CASEI`, `AND`/`OR`/`NOT`, parentheses, and `DATE()`/`TIMESTAMP()`
+ * literals — and REFUSES anything else rather than silently matching every row,
+ * which would turn a filter regression into a passing test.
+ *
+ * It is a fixture, not a CQL2 implementation: spatial predicates are out of
+ * scope here (the fixture serves spatial constraints through the `bbox`
+ * parameter, exactly as OGC API Features Part 1 defines).
+ */
+export declare class Cql2UnsupportedError extends Error {
+    constructor(message: string);
+}
+type Row = Record<string, unknown>;
+type Predicate = (row: Row) => boolean;
+/** Compile a CQL2-text expression into a row predicate. */
+export declare function compileCql2(filter: string): Predicate;
+export {};
+//# sourceMappingURL=cql2.d.ts.map