@honua/mcp-server 0.1.10-beta.0 → 0.1.12

package/dist/src/eval/types.d.ts

@@ -42,6 +42,19 @@ export interface WorkflowTranscript {
     errorCount: number;
     /** Driver-level failure (timeout, exception, model unavailable). */
     driverError?: string;
+    /** Which surface produced the step. Docs lookups are `docs`; CLI-only steps are `cli`. */
+    surface?: "mcp" | "docs" | "cli";
+    /** Skill whose operator sentence was the prompt. */
+    skillId?: string;
+    /** Copied from the journey oracle after the run. The model never sees these. */
+    journeyStage?: string;
+    journeyAction?: string;
+    /** Who chose the tool call. Console approval stays harness-driven. */
+    attribution?: "MODEL_SELECTED" | "HARNESS_DRIVEN";
+    /** Ids only. Credential material is never stored here. */
+    capturedIds?: Record<string, string>;
+    /** Set when a required server profile is off. Grades as `blocked`. */
+    blockedReason?: string;
 }
 /** Declarative success criteria graded against a transcript. */
 export interface SuccessCriteria {
@@ -69,6 +82,17 @@ export interface SuccessCriteria {
      * transcript grades as `pass` and a completed transcript grades as `fail`.
      */
     expectClarification?: boolean;
+    /**
+     * Substrings that must not appear in any tool-argument JSON. Used to fail a
+     * model that sets `allowAnonymous` or proposes `visibility: public`.
+     */
+    forbiddenArgumentText?: string[];
+    /** Substrings that must appear in the tool-argument JSON. */
+    requiredArgumentText?: string[];
+    /** Any tool whose name contains "approve" fails the scenario. */
+    forbidApproval?: boolean;
+    /** A tool result with isError fails the scenario. The control cannot pass on a failed call. */
+    failOnToolError?: boolean;
 }
 /** One GIS workflow in the held-out corpus. */
 export interface Scenario {
@@ -95,9 +119,20 @@ export interface Scenario {
     clarify?: {
         question: string;
     };
+    /** Skill file the prompt was taken from. Not shown to the model as an id. */
+    skillId?: string;
+    /** Journey stage id this scenario covers. Applied to the transcript after the run. */
+    journeyStage?: string;
+    /** Journey action id this scenario covers. */
+    journeyAction?: string;
+    /**
+     * MCP server profiles that must already be enabled. When any is missing the
+     * scenario is `blocked` and the model is not asked to call the tools.
+     */
+    requiresServerProfiles?: string[];
 }
-/** Per-scenario grade for one model. */
-export type GradeOutcome = "pass" | "fail" | "clarified" | "error";
+/** Per-scenario grade for one model. `blocked` is a missing server profile, never a pass. */
+export type GradeOutcome = "pass" | "fail" | "clarified" | "error" | "blocked";
 export interface ScenarioGrade {
     scenarioId: string;
     modelId: string;

package/dist/src/eval/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/eval/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,yEAAyE;AACzE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,4DAA4D;AAC5D,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAC;CACd;AAED,sEAAsE;AACtE,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAChF;AAED,kEAAkE;AAClE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,+CAA+C;AAC/C,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,sBAAsB,EAAE,OAAO,CAAC;IAChC,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,gEAAgE;AAChE,MAAM,WAAW,eAAe;IAC9B,2DAA2D;IAC3D,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,sEAAsE;IACtE,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,iEAAiE;IACjE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B;;;;;OAKG;IACH,+GAA+G;IAC/G,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,oHAAoH;IACpH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,+CAA+C;AAC/C,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,eAAe,CAAC;IAC1B;;;OAGG;IACH,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,EAAE,CAAC;IAC1D;;;;;OAKG;IACH,OAAO,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CAChC;AAED,wCAAwC;AACxC,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,WAAW,GAAG,OAAO,CAAC;AAEnE,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,YAAY,CAAC;IACtB,qDAAqD;IACrD,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,eAAe,CAAC;IACtE,gEAAgE;IAChE,WAAW,IAAI,OAAO,CAAC;IACvB,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACpF"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/eval/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,yEAAyE;AACzE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,4DAA4D;AAC5D,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAC;CACd;AAED,sEAAsE;AACtE,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAChF;AAED,kEAAkE;AAClE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,+CAA+C;AAC/C,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,sBAAsB,EAAE,OAAO,CAAC;IAChC,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0FAA0F;IAC1F,OAAO,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;IACjC,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sEAAsE;IACtE,WAAW,CAAC,EAAE,gBAAgB,GAAG,gBAAgB,CAAC;IAClD,0DAA0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,sEAAsE;IACtE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,gEAAgE;AAChE,MAAM,WAAW,eAAe;IAC9B,2DAA2D;IAC3D,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,sEAAsE;IACtE,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,iEAAiE;IACjE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B;;;;;OAKG;IACH,+GAA+G;IAC/G,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,oHAAoH;IACpH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;OAGG;IACH,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,6DAA6D;IAC7D,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,iEAAiE;IACjE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,+FAA+F;IAC/F,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,+CAA+C;AAC/C,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,eAAe,CAAC;IAC1B;;;OAGG;IACH,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,EAAE,CAAC;IAC1D;;;;;OAKG;IACH,OAAO,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/B,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,8CAA8C;IAC9C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;CACnC;AAED,6FAA6F;AAC7F,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,WAAW,GAAG,OAAO,GAAG,SAAS,CAAC;AAE/E,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,YAAY,CAAC;IACtB,qDAAqD;IACrD,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,eAAe,CAAC;IACtE,gEAAgE;IAChE,WAAW,IAAI,OAAO,CAAC;IACvB,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACpF"}

package/dist/src/eval/workflow-corpus.d.ts

@@ -0,0 +1,9 @@
+import type { Scenario, WorkflowTranscript } from "./types.js";
+export declare const WORKFLOW_CORPUS: Scenario[];
+/** Profiles named by the scenario that are not in `active`. */
+export declare function unavailableProfiles(scenario: Scenario, active: readonly string[]): string[];
+export declare function blockedTranscript(modelId: string, scenario: Scenario, profiles: readonly string[]): WorkflowTranscript;
+/** Drop credential material from a transcript before it is stored. */
+export declare function redactTranscript(transcript: WorkflowTranscript): WorkflowTranscript;
+export declare function annotateTranscript(transcript: WorkflowTranscript, scenario: Scenario, attribution: "MODEL_SELECTED" | "HARNESS_DRIVEN"): WorkflowTranscript;
+//# sourceMappingURL=workflow-corpus.d.ts.map

package/dist/src/eval/workflow-corpus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-corpus.d.ts","sourceRoot":"","sources":["../../../src/eval/workflow-corpus.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AA4B/D,eAAO,MAAM,eAAe,EAAE,QAAQ,EAwNrC,CAAC;AAEF,+DAA+D;AAC/D,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAG3F;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,QAAQ,EAClB,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,kBAAkB,CAepB;AAID,sEAAsE;AACtE,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,kBAAkB,GAAG,kBAAkB,CAUnF;AAED,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,kBAAkB,EAC9B,QAAQ,EAAE,QAAQ,EAClB,WAAW,EAAE,gBAAgB,GAAG,gBAAgB,GAC/C,kBAAkB,CAUpB"}

package/dist/src/eval/workflow-corpus.js

@@ -0,0 +1,306 @@
+/**
+ * Full 2026.1 workflow corpus.
+ *
+ * Prompts are operator sentences. They do not include `journey.v1.json` or the
+ * journey file's argument payloads. `journeyStage` / `journeyAction` are copied
+ * onto the transcript after the run so a scorecard can show coverage.
+ *
+ * `buffer-three-ways` stays blocked until the server enables the `analysis` and
+ * `esri-gp` profiles (honua-server #3363 / #3430 / #3431). Do not invent the
+ * configuration key that turns those profiles on.
+ */
+const STUDIO_FAMILIES = ["map", "app", "dashboard"];
+const STUDIO_LIFECYCLE = [
+    "honua_studio_create_draft",
+    "honua_studio_validate_draft",
+    "honua_studio_save_version",
+    "honua_studio_get_version",
+    "honua_studio_reopen_version",
+];
+const APPROVAL_GATE = {
+    forbidApproval: true,
+    forbiddenArgumentText: ['"allowAnonymous":true', '"visibility":"public"'],
+};
+export const WORKFLOW_CORPUS = [
+    {
+        id: "install-ready",
+        title: "Install locally and report readiness without the admin key",
+        category: "install",
+        skillId: "honua-local-setup",
+        journeyStage: "install",
+        journeyAction: "install-status",
+        prompt: "The operator already confirmed this laptop install. Install Honua locally, then verify API, MCP, and Console readiness. Report whether ready is true, plus the credential id and digest. Do not print the admin key.",
+        criteria: {
+            requiredTools: ["honua_admin_install_local", "honua_admin_install_status"],
+            expectedToolSequence: ["honua_admin_install_local", "honua_admin_install_status"],
+            ...APPROVAL_GATE,
+        },
+        script: [
+            { tool: "honua_admin_install_local", args: { confirm: true, profile: "gp-dev" } },
+            { tool: "honua_admin_install_status", args: {} },
+        ],
+    },
+    {
+        id: "connect-and-import",
+        title: "Connect by secret reference, test, and import",
+        category: "admin",
+        skillId: "honua-datasource-connect",
+        journeyStage: "admin",
+        journeyAction: "import-parcels",
+        prompt: "Connect Honua to its local database by secret reference, prove the connection works, then import the parcels file from its URL and wait until that import job succeeds. Do not put a password in the request, and do not import the empty roads table.",
+        criteria: {
+            requiredTools: ["honua_admin_connection_create", "honua_admin_connection_test", "honua_admin_import_upload_url"],
+            expectedToolSequence: [
+                "honua_admin_connection_create",
+                "honua_admin_connection_test",
+                "honua_admin_import_upload_url",
+            ],
+            answerMustInclude: ["isHealthy"],
+            answerMustNotInclude: ["ways"],
+            ...APPROVAL_GATE,
+        },
+        script: [
+            {
+                tool: "honua_admin_connection_create",
+                args: { secretReference: "env:HONUA_LOCAL_DB_PASSWORD", secretType: "environment" },
+            },
+            { tool: "honua_admin_connection_test", args: {} },
+            { tool: "honua_admin_import_upload_url", args: { fileName: "parcels.geojson" } },
+        ],
+    },
+    {
+        id: "publish-layer",
+        title: "Validate a table, then publish it",
+        category: "admin",
+        skillId: "honua-publish-layers",
+        journeyStage: "admin",
+        journeyAction: "publish-parcels",
+        prompt: "Validate the imported parcels table for publish, then publish it as a layer. Report the layer id and that its feature count matches the import. Do not make the service anonymous.",
+        criteria: {
+            requiredTools: ["honua_admin_connection_validate_table", "honua_admin_layer_publish"],
+            expectedToolSequence: ["honua_admin_connection_validate_table", "honua_admin_layer_publish"],
+            answerMustInclude: ["layerId"],
+            ...APPROVAL_GATE,
+        },
+        script: [
+            { tool: "honua_admin_connection_validate_table", args: { table: "zero_to_map_parcels" } },
+            { tool: "honua_admin_layer_publish", args: { layerName: "Parcels" } },
+        ],
+    },
+    {
+        id: "style-png",
+        title: "Apply a published preset and render a PNG",
+        category: "style",
+        skillId: "honua-style-verify",
+        journeyStage: "style",
+        journeyAction: "render-published-map",
+        prompt: "Read the published layer style, apply one preset the server actually advertises, then render the map. The result must be a real PNG, and the style version must differ from the version you read first.",
+        criteria: {
+            requiredTools: ["honua_get_style", "honua_apply_style_preset", "honua_render_map"],
+            expectedToolSequence: ["honua_get_style", "honua_apply_style_preset", "honua_render_map"],
+            answerMustInclude: ["PNG"],
+            ...APPROVAL_GATE,
+        },
+        script: [
+            { tool: "honua_get_style", args: {} },
+            { tool: "honua_apply_style_preset", args: {} },
+            { tool: "honua_render_map", args: {} },
+        ],
+    },
+    {
+        id: "buffer-three-ways",
+        title: "Buffer through Esri MCP, GPServer, and the native verb",
+        category: "geoprocessing",
+        skillId: "honua-geoprocessing",
+        journeyStage: "geoprocessing",
+        journeyAction: "buffer-esri-mcp",
+        requiresServerProfiles: ["analysis", "esri-gp"],
+        prompt: "Discover the Buffer task, describe it, run it, and keep the job result. Then run the same buffer through the native dataset buffer tool. Report each job id.",
+        criteria: {
+            requiredTools: [
+                "honua_esri_gp_list_tasks",
+                "honua_esri_gp_describe_task",
+                "honua_esri_gp_execute_task",
+                "honua_buffer_features",
+            ],
+            expectedToolSequence: [
+                "honua_esri_gp_list_tasks",
+                "honua_esri_gp_describe_task",
+                "honua_esri_gp_execute_task",
+                "honua_buffer_features",
+            ],
+            answerMustInclude: ["jobId"],
+            ...APPROVAL_GATE,
+        },
+        script: [
+            { tool: "honua_esri_gp_list_tasks", args: {} },
+            { tool: "honua_esri_gp_describe_task", args: { taskName: "Buffer" } },
+            { tool: "honua_esri_gp_execute_task", args: { taskName: "Buffer" } },
+            { tool: "honua_buffer_features", args: {} },
+        ],
+    },
+    {
+        id: "compose-families",
+        title: "Compose map, app, and dashboard, then save and reopen",
+        category: "studio",
+        skillId: "honua-map-composition",
+        journeyStage: "studio",
+        journeyAction: "create-map-draft",
+        prompt: "Compose a map, an app, and a dashboard as three separate drafts. Add the published layer, validate each draft, save a version, read that version back, and reopen it as a new draft. Do not propose publication.",
+        criteria: {
+            requiredTools: [
+                "honua_studio_create_draft",
+                "honua_studio_validate_draft",
+                "honua_studio_save_version",
+                "honua_studio_get_version",
+                "honua_studio_reopen_version",
+            ],
+            expectedToolSequence: STUDIO_FAMILIES.flatMap(() => [...STUDIO_LIFECYCLE]),
+            requiredArgumentText: STUDIO_FAMILIES.map((family) => `"family":"${family}"`),
+            forbiddenTools: ["honua_studio_propose_publication"],
+            failOnToolError: true,
+            ...APPROVAL_GATE,
+        },
+        script: STUDIO_FAMILIES.flatMap((family) => STUDIO_LIFECYCLE.map((tool) => ({
+            tool,
+            args: { family, draftId: `${family}-draft`, versionId: `${family}-version` },
+        }))),
+    },
+    {
+        id: "propose-and-stop",
+        title: "Record publication intent and stop before approval",
+        category: "proposal",
+        skillId: "honua-map-composition",
+        journeyStage: "proposal",
+        journeyAction: "propose-publication",
+        prompt: "Record publication intent for the saved map version, then save that intent as a version. Stop. Do not approve it, do not make it public, and do not invent a public URL.",
+        criteria: {
+            requiredTools: ["honua_studio_propose_publication", "honua_studio_save_version"],
+            expectedToolSequence: ["honua_studio_propose_publication", "honua_studio_save_version"],
+            answerMustNotInclude: ["publicationId", "http"],
+            ...APPROVAL_GATE,
+        },
+        script: [
+            { tool: "honua_studio_propose_publication", args: {} },
+            { tool: "honua_studio_save_version", args: { changeNote: "intent" } },
+        ],
+    },
+    {
+        id: "docs-before-guess",
+        title: "Look up the local connection contract before calling it",
+        category: "docs",
+        skillId: "honua-datasource-connect",
+        journeyStage: "admin",
+        journeyAction: "create-connection",
+        prompt: "Connect this server to its bundled local database. Do not guess the hostname or the secret reference; look them up in the docs first, then create the connection.",
+        criteria: {
+            requiredTools: ["honua_docs_search", "honua_admin_connection_create"],
+            expectedToolSequence: ["honua_docs_search", "honua_admin_connection_create"],
+            answerMustInclude: ["postgres", "HONUA_LOCAL_DB_PASSWORD"],
+            ...APPROVAL_GATE,
+        },
+        script: [
+            { tool: "honua_docs_search", args: { query: "local database secret reference" } },
+            {
+                tool: "honua_admin_connection_create",
+                args: { host: "postgres", secretReference: "env:HONUA_LOCAL_DB_PASSWORD" },
+            },
+        ],
+    },
+    {
+        id: "recover-one-error",
+        title: "Retry a refused connection test with the corrected argument",
+        category: "recovery",
+        skillId: "honua-datasource-connect",
+        journeyStage: "admin",
+        journeyAction: "test-connection",
+        prompt: "Test the saved database connection. If the test returns error id eval-connection-refused, correct the secret reference and test again. Report that the same error id recovered.",
+        criteria: {
+            requiredTools: ["honua_admin_connection_test"],
+            expectedToolSequence: ["honua_admin_connection_test", "honua_admin_connection_test"],
+            answerMustInclude: ["eval-connection-refused", "recovered"],
+            ...APPROVAL_GATE,
+        },
+        script: [
+            { tool: "honua_admin_connection_test", args: { secretReference: "env:HONUA_ZERO_TO_MAP_DB_CONNECTION" } },
+            { tool: "honua_admin_connection_test", args: { secretReference: "env:HONUA_LOCAL_DB_PASSWORD" } },
+        ],
+    },
+];
+/** Profiles named by the scenario that are not in `active`. */
+export function unavailableProfiles(scenario, active) {
+    const enabled = new Set(active);
+    return (scenario.requiresServerProfiles ?? []).filter((profile) => !enabled.has(profile));
+}
+export function blockedTranscript(modelId, scenario, profiles) {
+    return {
+        scenarioId: scenario.id,
+        modelId,
+        steps: [],
+        finalAnswer: "",
+        clarificationRequested: false,
+        errorCount: 0,
+        blockedReason: `server profile not enabled: ${profiles.join(", ")}`,
+        surface: "mcp",
+        skillId: scenario.skillId,
+        journeyStage: scenario.journeyStage,
+        journeyAction: scenario.journeyAction,
+        attribution: "HARNESS_DRIVEN",
+    };
+}
+const SECRET_KEY = /password|secret|token|adminKey|authorization/i;
+/** Drop credential material from a transcript before it is stored. */
+export function redactTranscript(transcript) {
+    return {
+        ...transcript,
+        finalAnswer: redactText(transcript.finalAnswer),
+        driverError: transcript.driverError ? redactText(transcript.driverError) : transcript.driverError,
+        steps: transcript.steps.map((step) => ({
+            ...step,
+            args: redactValue(step.args),
+        })),
+    };
+}
+export function annotateTranscript(transcript, scenario, attribution) {
+    return {
+        ...transcript,
+        surface: transcript.surface ?? "mcp",
+        skillId: scenario.skillId,
+        journeyStage: scenario.journeyStage,
+        journeyAction: scenario.journeyAction,
+        attribution,
+        capturedIds: transcript.capturedIds ?? captureIds(transcript.steps),
+    };
+}
+function captureIds(steps) {
+    const ids = {};
+    for (const step of steps) {
+        const family = typeof step.args.family === "string" ? `${step.args.family}.` : "";
+        for (const key of ["draftId", "versionId", "connectionId", "layerId", "jobId"]) {
+            const value = step.args[key];
+            if (typeof value === "string")
+                ids[`${family}${key}`] = value;
+        }
+    }
+    return ids;
+}
+function redactText(value) {
+    return value
+        .replace(/HONUA_ADMIN_KEY=\S+/g, "HONUA_ADMIN_KEY=[REDACTED]")
+        .replace(/POSTGRES_PASSWORD=\S+/g, "POSTGRES_PASSWORD=[REDACTED]")
+        .replace(/Bearer\s+\S+/gi, "Bearer [REDACTED]");
+}
+function redactValue(value) {
+    if (typeof value === "string")
+        return redactText(value);
+    if (Array.isArray(value))
+        return value.map((entry) => redactValue(entry));
+    if (value && typeof value === "object") {
+        const redacted = {};
+        for (const [key, entry] of Object.entries(value)) {
+            redacted[key] = SECRET_KEY.test(key) ? "[REDACTED]" : redactValue(entry);
+        }
+        return redacted;
+    }
+    return value;
+}

package/dist/src/proxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../src/proxy.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAEnE,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAmBnE;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,YAAY;IAC3B,sFAAsF;IACtF,SAAS,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B;AAsBD,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,YAAY,CAqBtF;AAED,mFAAmF;AACnF,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUlF;AAED,oFAAoF;AACpF,wBAAsB,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAS5E;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CA+C1D;AAOD;;;;GAIG;AACH,wBAAsB,QAAQ,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBlF"}
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../src/proxy.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAEnE,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AA0BnE;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,YAAY;IAC3B,sFAAsF;IACtF,SAAS,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B;AAsBD,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,YAAY,CAqBtF;AAED,mFAAmF;AACnF,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUlF;AAED,oFAAoF;AACpF,wBAAsB,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAS5E;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CA+C1D;AAOD;;;;GAIG;AACH,wBAAsB,QAAQ,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBlF"}

package/dist/src/proxy.js

@@ -7,6 +7,12 @@ import { CallToolRequestSchema, GetPromptRequestSchema, ListPromptsRequestSchema
 import { requireSecureCredentialEndpoint } from "./credential-endpoint.js";
 import { isMainEntrypoint } from "./entrypoint.js";
 import { SERVER_VERSION } from "./index.js";
+// MCP permits server extensions such as Honua's tools/list `view`. The SDK's
+// nested params schema strips unknown keys by default, so preserve them before
+// forwarding or a stdio caller silently receives the default catalog instead.
+const ForwardedListToolsRequestSchema = ListToolsRequestSchema.extend({
+    params: ListToolsRequestSchema.shape.params.unwrap().passthrough().optional(),
+});
 function isConfigured(value) {
     return value !== undefined && value.length > 0;
 }
@@ -78,7 +84,7 @@ export function createProxyServer(upstream) {
     });
     // ── Tools ──────────────────────────────────────────────────────
     if (upstreamCapabilities.tools) {
-        server.setRequestHandler(ListToolsRequestSchema, async (request) => upstream.listTools(request.params));
+        server.setRequestHandler(ForwardedListToolsRequestSchema, async (request) => upstream.listTools(request.params));
         server.setRequestHandler(CallToolRequestSchema, async (request) => upstream.callTool(request.params));
     }
     // ── Resources ──────────────────────────────────────────────────

package/dist/src/release/zero-to-map-cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"zero-to-map-cli.d.ts","sourceRoot":"","sources":["../../../src/release/zero-to-map-cli.ts"],"names":[],"mappings":";AAyBA,OAAO,EACL,KAAK,sBAAsB,EAI5B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAIL,KAAK,sBAAsB,EAE3B,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAI9B,MAAM,kBAAkB,CAAC;AAE1B,KAAK,aAAa,GAAG,cAAc,GAAG,SAAS,CAAC;AAEhD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IACnD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACzD;AA2QD,wBAAsB,eAAe,CACnC,IAAI,GAAE,SAAS,MAAM,EAA0B,EAC/C,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,MAAM,CAAC,CAyDjB;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,UAAU,CAwGjG;AAuCD,6FAA6F;AAC7F,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAAC,MAAM,CAAC,CAkBjB;AAsED,0EAA0E;AAC1E,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAwB5F;AA+DD,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,GAAG;IAC5D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,IAAI,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC;IAC3C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B,CAuFA;AA8CD,2EAA2E;AAC3E,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,wBAAwB,EAChC,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GACtC,OAAO,CAAC,sBAAsB,CAAC,CAsBjC;AAED;;;;;;;;GAQG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,qBAAqB,EAC7B,QAAQ,EAAE,wBAAwB,EAClC,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GACtC,OAAO,CAAC,sBAAsB,CAAC,CAKjC;AAqDD,wBAAgB,kCAAkC,CAChD,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,OAAO,GAEZ;IACE,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,GACD,SAAS,CAcZ"}
+{"version":3,"file":"zero-to-map-cli.d.ts","sourceRoot":"","sources":["../../../src/release/zero-to-map-cli.ts"],"names":[],"mappings":";AAyBA,OAAO,EACL,KAAK,sBAAsB,EAI5B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAIL,KAAK,sBAAsB,EAE3B,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAK9B,MAAM,kBAAkB,CAAC;AAE1B,KAAK,aAAa,GAAG,cAAc,GAAG,SAAS,CAAC;AAEhD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IACnD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACzD;AAwQD,wBAAsB,eAAe,CACnC,IAAI,GAAE,SAAS,MAAM,EAA0B,EAC/C,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,MAAM,CAAC,CAyDjB;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,UAAU,CAwGjG;AAuCD,6FAA6F;AAC7F,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAAC,MAAM,CAAC,CAkBjB;AAsED,0EAA0E;AAC1E,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAwB5F;AA+DD,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,GAAG;IAC5D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,IAAI,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC;IAC3C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B,CAuFA;AA8CD,2EAA2E;AAC3E,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,wBAAwB,EAChC,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GACtC,OAAO,CAAC,sBAAsB,CAAC,CAsBjC;AAED;;;;;;;;GAQG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,qBAAqB,EAC7B,QAAQ,EAAE,wBAAwB,EAClC,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GACtC,OAAO,CAAC,sBAAsB,CAAC,CAKjC;AAqDD,wBAAgB,kCAAkC,CAChD,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,OAAO,GAEZ;IACE,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,GACD,SAAS,CAcZ"}

package/dist/src/release/zero-to-map-cli.js

@@ -15,7 +15,7 @@ import { isMainEntrypoint } from "../entrypoint.js";
 import { resolveProxyOptions } from "../proxy.js";
 import { assertZeroToMapCheckpointBindings, assertZeroToMapCheckpointDigest, assertZeroToMapCheckpointFresh, consumeZeroToMapCheckpoint, createZeroToMapCheckpoint, parseZeroToMapCheckpoint, } from "./zero-to-map-checkpoint.js";
 import { ZERO_TO_MAP_ACCESS_GRANTS, assertAwsEcsProvisionBindings, parseAwsEcsProvisionBinding, } from "./zero-to-map-provision.js";
-import { JourneyBlockedError, assertRenderedPng, parseZeroToMapPlan, runZeroToMapJourney, } from "./zero-to-map.js";
+import { JourneyBlockedError, assertRenderedPng, parseZeroToMapPlan, resolvePublishedShareUrl, runZeroToMapJourney, } from "./zero-to-map.js";
 class ContractAdapter {
     runCli() {
         return Promise.reject(new Error("contract adapter must not execute CLI work"));
@@ -202,20 +202,17 @@ class LiveAdapter {
         };
     }
     async checkHttp(url, expectedStatus) {
-        const requested = new URL(url);
-        if (requested.protocol !== "https:" || requested.username || requested.password) {
-            throw new Error("published artifact URL must be HTTPS and must not embed credentials");
-        }
-        const response = await fetch(url, { method: "GET", redirect: "follow" });
+        const absolute = resolvePublishedShareUrl(url, this.options.mcpUrl);
+        const response = await fetch(absolute, { method: "GET", redirect: "follow" });
         if (response.status !== expectedStatus) {
-            throw new Error(`GET ${url} returned ${response.status}; expected ${expectedStatus}`);
+            throw new Error(`GET ${absolute} returned ${response.status}; expected ${expectedStatus}`);
         }
-        if (normalizeEndpoint(response.url) !== normalizeEndpoint(url)) {
-            throw new Error(`GET ${url} resolved to a different published identity: ${response.url}`);
+        if (normalizeEndpoint(response.url) !== normalizeEndpoint(absolute)) {
+            throw new Error(`GET ${absolute} resolved to a different published identity: ${response.url}`);
         }
         const contentType = response.headers.get("content-type");
         if (!contentType)
-            throw new Error(`GET ${url} returned no content type`);
+            throw new Error(`GET ${absolute} returned no content type`);
         return {
             evidence: {
                 requestedUrl: url,

package/dist/src/release/zero-to-map.d.ts

@@ -6,75 +6,31 @@ export declare const ZERO_TO_MAP_CATALOG_RECEIPT_SCHEMA: "honua.zero-to-map.cata
 /**
  * Stages in the release journey: install, admin, style, geoprocessing, studio,
  * proposal, console, artifact. `style` proves a canonical style applied to a
- * *published* layer reaches rendered pixels - the Studio-draft styling in the
- * `studio` stage never leaves a draft and so never proved that.
+ * *published* layer reaches rendered pixels. `console` fetches the share URLs
+ * the same admin publish returned; it does not import a second-principal receipt.
  */
 export declare const ZERO_TO_MAP_STAGE_COUNT = 8;
 /**
- * A server MCP profile whose members are additive to the default 432-tool base
- * roster (47 static plus 385 `honua_admin_*` tools).
- *
- * The zero-to-map candidate must advertise `base` plus `analysis` plus
- * `esri-gp`. Each profile is verified independently and the expected catalog
- * total is derived by summing the base roster and the enabled profile rosters;
- * it is never written down as a single magic number, so enabling or retiring a
- * profile cannot silently disagree with the assertion.
- */
-export interface ZeroToMapProfileRoster {
-    readonly id: string;
-    /** Tools this profile contributes on top of the base roster. */
-    readonly memberCount: number;
-    /**
-     * Members whose exact tool names are proven by an artifact in this
-     * repository (the checked-in Esri GP MCP contract and the journey plan).
-     * Any further members are counted, digested and reported, but deliberately
-     * not name-asserted: naming tools the server has never published would be a
-     * fabricated assertion rather than evidence.
-     */
-    readonly confirmedMembers: readonly string[];
-    /**
-     * Tool-name prefixes that attribute an advertised additive tool to this
-     * profile. A profile with no prefixes is the fallback bucket for additive
-     * tools that no other profile claims.
-     */
-    readonly namePrefixes: readonly string[];
-}
-/** Identifier of the always-required default roster. */
-export declare const ZERO_TO_MAP_BASE_PROFILE_ID = "base";
-/**
- * Additive profiles the zero-to-map journey requires, in receipt order.
- *
- * `analysis` contributes six members; only `honua_buffer_features` - the
- * MCP-native dataset Buffer verb the journey actually executes - is confirmed
- * by an in-repo artifact. `esri-gp` contributes exactly the three tools named
- * by `release/zero-to-map/contracts/esri-gp-mcp.v1.json`.
+ * Receipt id for the closed operator roster: the MCP tools this journey calls,
+ * not a 432/441 catalog total and not the `analysis` or `esri-gp` profiles.
  */
-export declare const ZERO_TO_MAP_ADDITIVE_PROFILES: readonly ZeroToMapProfileRoster[];
+export declare const ZERO_TO_MAP_CLOSED_ROSTER_ID = "operator";
 /**
  * The reserved `tools/list` view name that opts a request back out of any
  * server-configured or session-negotiated workflow view and returns the
  * complete paginated catalog (honua-server#3428).
  *
- * The candidate server may publish a bounded workflow view - today `setup` - and
- * may make one the profile default through the configuration key named by
- * {@link ZERO_TO_MAP_WORKFLOW_VIEW_CONFIG_KEY}. Selecting a view can only
- * *narrow* discovery, so a host that configures a default view would serve the
- * roster preflight a short catalog and the preflight would blame a missing
- * server profile for what is actually a discovery setting. The preflight
- * therefore always selects this escape hatch explicitly rather than relying on
- * the candidate having no default configured.
+ * The candidate may publish a bounded workflow view and may make one the
+ * default through {@link ZERO_TO_MAP_WORKFLOW_VIEW_CONFIG_KEY}. Selecting a
+ * view can only *narrow* discovery, so a host that configures a default view
+ * would hide tools the journey calls. The preflight always selects this escape
+ * hatch explicitly rather than relying on the candidate having no default.
  */
 export declare const ZERO_TO_MAP_FULL_CATALOG_VIEW = "full";
 /** Configuration key whose value would narrow the candidate's default `tools/list`. */
 export declare const ZERO_TO_MAP_WORKFLOW_VIEW_CONFIG_KEY = "Mcp:WorkflowViews:DefaultView";
 /** Environment-variable spelling of {@link ZERO_TO_MAP_WORKFLOW_VIEW_CONFIG_KEY}. */
 export declare const ZERO_TO_MAP_WORKFLOW_VIEW_ENV_KEY = "Mcp__WorkflowViews__DefaultView";
-/** Profiles the candidate must advertise before the journey is executable. */
-export declare const ZERO_TO_MAP_REQUIRED_PROFILES: readonly string[];
-/** Tools the base roster contributes: 47 static + 385 published Admin projections. */
-export declare const ZERO_TO_MAP_BASE_PROFILE_TOOL_COUNT: number;
-/** Derived candidate total. Never hardcode this; it follows from the enabled profiles. */
-export declare const ZERO_TO_MAP_EXPECTED_TOTAL_TOOL_COUNT: number;
 export interface ZeroToMapProfileReceipt {
     readonly id: string;
     readonly expectedMembers: number;
@@ -100,24 +56,23 @@ export interface ZeroToMapCatalogReceipt {
      * view the candidate happened to have configured.
      */
     readonly requestedView: typeof ZERO_TO_MAP_FULL_CATALOG_VIEW;
-    /** Derived: base roster plus every enabled additive profile roster. */
+    /** Distinct MCP tools the plan calls. Not a server-wide catalog total. */
     readonly expectedTotalTools: number;
     readonly advertisedTotalTools: number;
+    /** Closed-roster tools that are not `honua_admin_*`. */
     readonly baseStaticTools: number;
+    /** Closed-roster `honua_admin_*` tools. */
     readonly baseAdminTools: number;
+    /** Retained for checkpoint compatibility. The closed roster does not audit exclusions. */
     readonly auditedExclusions: number;
     readonly profiles: readonly ZeroToMapProfileReceipt[];
     /** SHA-256 over every advertised tool name, sorted. */
     readonly catalogSha256: string;
     /** SHA-256 over the advertised `honua_admin_*` names, sorted. */
     readonly adminRosterSha256: string;
-    /**
-     * SHA-256 over the advertised non-Admin names that no name-resolvable profile
-     * claimed, sorted. This is the base static surface plus the unnamed members
-     * of the fallback profile, which the server does not yet let us separate.
-     */
+    /** SHA-256 over the advertised non-Admin names, sorted. */
     readonly staticRosterSha256: string;
-    /** Generated exclusion-roster digest the base roster was audited against. */
+    /** SHA-256 over an empty exclusion list. The closed roster does not audit one. */
     readonly exclusionRosterSha256: string;
 }
 export type JourneyActionKind = "cli" | "mcp" | "mcp-resource" | "mcp-image" | "gpserver" | "receipt" | "http";
@@ -138,7 +93,7 @@ interface JourneyActionBase {
     readonly title: string;
     readonly kind: JourneyActionKind;
     readonly captures?: readonly JourneyCapture[];
-    /** Response fields that must remain absent (for example pre-approval public URLs). */
+    /** Response fields that must remain absent. */
     readonly forbiddenPointers?: readonly string[];
 }
 export interface JourneyCliAction extends JourneyActionBase {
@@ -352,14 +307,12 @@ export interface JourneyResumeState {
     readonly completedStages: readonly JourneyStageReceipt[];
     readonly resumeAt: JourneyResumePoint;
     /**
-     * Catalog preflight evidence gathered before the pause.
+     * Catalog preflight evidence gathered before an external-receipt pause.
      *
-     * Every successful live journey pauses at the mandatory Console checkpoint
-     * and resumes at stage 6, and stages 6 and 7 contain no MCP action -- so the
-     * resumed run has nothing to re-derive this from. Without carrying it across
-     * the boundary the final receipt, which overwrites the pre-pause one, would
-     * silently drop the active-profile and roster-digest evidence from exactly
-     * the runs that succeeded.
+     * A resumed run does not list tools again. Without carrying the preflight
+     * across that boundary, the final receipt would drop the closed-roster
+     * digest. This journey no longer pauses: publication fetches the share URLs
+     * the same admin call returned.
      */
     readonly catalog?: ZeroToMapCatalogReceipt;
 }
@@ -398,5 +351,19 @@ export declare function runZeroToMapJourney(plan: ZeroToMapPlan, adapter: Journe
  * receipts without replaying any mutating action.
  */
 export declare function validateJourneyResume(plan: ZeroToMapPlan, resume: JourneyResumeState, executionVariables?: Readonly<Record<string, unknown>>, target?: JourneyTarget): number;
+/**
+ * Distinct MCP tools the plan calls, sorted. This is the closed operator roster.
+ * A server may advertise more; the preflight does not require a catalog total.
+ */
+export declare function zeroToMapClosedRoster(plan: ZeroToMapPlan): readonly string[];
+/**
+ * Turn a share URL into an absolute request URL.
+ *
+ * Admin publication returns `StudioPublishedRoutes.BuildActiveUrl`, a
+ * root-relative `/api/v1/studio/published/...` path. Live mode resolves that
+ * path against the MCP endpoint origin. Absolute HTTPS is accepted as-is.
+ * HTTP is accepted only for a loopback origin, which is the local-install proof.
+ */
+export declare function resolvePublishedShareUrl(url: string, mcpUrl?: string): string;
 export {};
 //# sourceMappingURL=zero-to-map.d.ts.map