@honua/mcp-server 0.1.14 → 0.1.16

package/certification/geospatial-mcp-schemas/tools/propose_operation.schema.json

@@ -2,14 +2,19 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://geospatial-mcp.honua.io/spec/schemas/tools/propose_operation.schema.json",
   "title": "propose_operation inputSchema",
-  "description": "Argument shape for the control-plane proposal tool (advertised name honua_propose_operation). Proposes an in-scope mutating control-plane operation for human approval (never autonomously executed), consistent with the ADR-0028 no-direct-AI-mutation boundary in taxonomy.md §Non-Goals. x-honua-reference-shape: tracks the reference implementation.",
+  "description": "Argument shape for the control-plane proposal tool (advertised name honua_propose_operation). Proposes an in-scope mutating control-plane operation for human approval on a deterministic server; the proposal is NEVER autonomously executed — execution stays approval-gated behind the human console inbox — consistent with the ADR-0028 posture (deterministic server, approval-gated mutation, no autonomous AI data edits) in taxonomy.md §Non-Goals. x-honua-reference-shape: tracks the reference implementation.",
   "x-honua-reference-shape": true,
+  "x-honua-supported-kinds": {
+    "description": "Capability discovery: the kind enum is the full, wire-compatible OperationClass vocabulary, but not every member is routable by a given server at runtime. Clients learn which kinds are actually routable from the reference self-describing capability surface (list_capabilities) rather than assuming the full enum. In the reference implementation, Seed is currently NOT routable through the operation gateway; AdminConfigChange, Deploy, and MetadataRelease are. Advertising a non-routable kind yields a NotSupported outcome; the enum is retained unchanged so the wire contract stays stable as kinds become routable.",
+    "routable": ["AdminConfigChange", "Deploy", "MetadataRelease"],
+    "notRoutable": ["Seed"]
+  },
   "type": "object",
   "required": ["kind"],
   "properties": {
     "kind": {
       "type": "string",
-      "description": "In-scope mutating control-plane operation class to propose.",
+      "description": "In-scope mutating control-plane operation class to propose. Wire-compatible OperationClass enum; the routable subset is discoverable at runtime (see x-honua-supported-kinds). Seed is currently not routable in the reference.",
       "enum": ["AdminConfigChange", "Deploy", "MetadataRelease", "Seed"]
     },
     "reason": {

package/certification/geospatial-mcp-schemas/tools/propose_rollback.schema.json

@@ -0,0 +1,29 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://geospatial-mcp.honua.io/spec/schemas/tools/propose_rollback.schema.json",
+  "title": "propose_rollback inputSchema",
+  "description": "Argument shape for the platform-rollback proposal tool (advertised name honua_propose_rollback). Proposes rolling a deploy target back to its prior revision by requesting a NEW FORWARD Deploy operation to that prior revision — it is NOT an in-flight-operation abort/undo and does not reverse an operation already running; it converges the target forward onto the previous known-good revision. Like propose_operation, this proposes an in-scope mutating control-plane operation for human approval and is NEVER autonomously executed: a deterministic server records the proposal and returns a proposal id / honua://proposals/{id}; execution stays approval-gated behind the human console inbox. Consistent with the honua-server ADR-0028 posture reconciled by the standard's ADR-0028 (deterministic server, approval-gated mutation, no autonomous AI data edits). Uses platform_release / server_upgrade vocabulary; distinct from the hosted-content honua://deployments/{deployment_id} resource. x-honua-reference-shape: this shape tracks the reference implementation.",
+  "x-honua-reference-shape": true,
+  "type": "object",
+  "required": ["targetId"],
+  "properties": {
+    "targetId": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Deploy target to roll back (from deploy_operations[].target.targetId or ops findings/health subject.targetId)."
+    },
+    "toRevision": {
+      "type": "string",
+      "description": "Optional prior revision to roll forward to. When omitted, the server selects the target's most recent prior succeeded Deploy revision (a rolled-back latest deploy is demoted; the prior succeeded deploy is chosen)."
+    },
+    "reason": {
+      "type": "string",
+      "description": "Operator-facing reason recorded on the proposal."
+    },
+    "idempotencyKey": {
+      "type": "string",
+      "description": "Stable idempotency key for the underlying forward Deploy operation."
+    }
+  },
+  "additionalProperties": false
+}

package/certification/geospatial-mcp-schemas/tools/remove_control.schema.json

@@ -0,0 +1,114 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://geospatial-mcp.honua.io/spec/schemas/tools/remove_control.schema.json",
+  "title": "remove_control inputSchema",
+  "description": "Argument shape for remove_control (composition profile, ADR-0031). Removes one control, by id, from a composition document's `controls` collection. Target addressing matches add_control: a composition document (mapPackageId or appPackageId) at the standard level, with the reference implementation's draft-lifecycle spelling (draftId + generation) admitted as x-honua-reference-shape. Removing an unknown controlId is an error, not a no-op. Removing a control leaves any interaction bound to `control:{id}` unresolvable, so an implementation MUST either reject the removal or remove those bindings with it — silently keeping a dangling binding is not conformant. See docs/adr/0031-composition-controls.md. Exactly one target must be supplied: mapPackageId, appPackageId, or the x-honua-reference-shape draftId (which requires generation, and generation may not appear without it). The oneOf enforces that; without it a call with no destination, several destinations, a bare draftId, or a stray generation all validated against a contract no server can route.",
+  "type": "object",
+  "additionalProperties": true,
+  "required": [
+    "controlId"
+  ],
+  "properties": {
+    "mapPackageId": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Target MapPackage composition document. Exactly one of mapPackageId / appPackageId / draftId identifies the target."
+    },
+    "appPackageId": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Target AppPackage composition document. Exactly one of mapPackageId / appPackageId / draftId identifies the target."
+    },
+    "draftId": {
+      "type": "string",
+      "minLength": 1,
+      "description": "x-honua-reference-shape: reference-implementation draft-lifecycle target. Requires generation."
+    },
+    "generation": {
+      "type": "integer",
+      "minimum": 0,
+      "description": "x-honua-reference-shape: optimistic-concurrency generation of the draft being mutated; the call fails on generation conflict."
+    },
+    "controlId": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 200,
+      "description": "Id of the control to remove."
+    },
+    "cascadeInteractions": {
+      "type": "boolean",
+      "default": false,
+      "description": "When true, interactions whose on.ref or do.ref is `control:{controlId}` are removed with the control. When false (default), the call fails if any interaction still references it, so a document never silently retains an unresolvable binding."
+    }
+  },
+  "oneOf": [
+    {
+      "required": [
+        "mapPackageId"
+      ],
+      "not": {
+        "anyOf": [
+          {
+            "required": [
+              "appPackageId"
+            ]
+          },
+          {
+            "required": [
+              "draftId"
+            ]
+          },
+          {
+            "required": [
+              "generation"
+            ]
+          }
+        ]
+      }
+    },
+    {
+      "required": [
+        "appPackageId"
+      ],
+      "not": {
+        "anyOf": [
+          {
+            "required": [
+              "mapPackageId"
+            ]
+          },
+          {
+            "required": [
+              "draftId"
+            ]
+          },
+          {
+            "required": [
+              "generation"
+            ]
+          }
+        ]
+      }
+    },
+    {
+      "required": [
+        "draftId",
+        "generation"
+      ],
+      "not": {
+        "anyOf": [
+          {
+            "required": [
+              "mapPackageId"
+            ]
+          },
+          {
+            "required": [
+              "appPackageId"
+            ]
+          }
+        ]
+      }
+    }
+  ]
+}

package/certification/geospatial-mcp-schemas/tools/remove_exploration_context.schema.json

@@ -0,0 +1,42 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://geospatial-mcp.honua.io/spec/schemas/tools/remove_exploration_context.schema.json",
+  "title": "remove_exploration_context inputSchema",
+  "description": "Argument shape for remove_exploration_context (composition profile, ADR-0032). Removes one exploration context, by id, from a composition document's `explorationContexts` collection. Target addressing matches create_exploration_context: a composition document (mapPackageId or appPackageId) at the standard level, with the reference implementation's draft-lifecycle spelling (draftId + generation) admitted as x-honua-reference-shape. Removing an unknown explorationContextId is an error, not a no-op. Removing a context leaves every component that names it bound to nothing, so an implementation MUST either reject the removal or clear those bindings with it — silently orphaning a binding is not conformant. See docs/adr/0032-shared-exploration-contexts.md.",
+  "type": "object",
+  "additionalProperties": true,
+  "required": ["explorationContextId"],
+  "properties": {
+    "mapPackageId": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Target MapPackage composition document. Exactly one of mapPackageId / appPackageId / draftId identifies the target."
+    },
+    "appPackageId": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Target AppPackage composition document. Exactly one of mapPackageId / appPackageId / draftId identifies the target."
+    },
+    "draftId": {
+      "type": "string",
+      "minLength": 1,
+      "description": "x-honua-reference-shape: reference-implementation draft-lifecycle target. Requires generation."
+    },
+    "generation": {
+      "type": "integer",
+      "minimum": 0,
+      "description": "x-honua-reference-shape: optimistic-concurrency generation of the draft being mutated; the call fails on generation conflict."
+    },
+    "explorationContextId": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 200,
+      "description": "Id of the exploration context to remove."
+    },
+    "cascadeBindings": {
+      "type": "boolean",
+      "default": false,
+      "description": "When true, every component naming this context has its explorationContextId and role cleared, leaving the components in place and independent. When false (default), the call fails while any component is still bound, so a document never silently retains an unresolvable binding. This mirrors remove_control's cascadeInteractions."
+    }
+  }
+}

package/certification/geospatial-mcp-schemas/tools/remove_interaction.schema.json

@@ -0,0 +1,99 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://geospatial-mcp.honua.io/spec/schemas/tools/remove_interaction.schema.json",
+  "title": "remove_interaction inputSchema",
+  "description": "Argument shape for remove_interaction (composition profile, ADR-0030). Removes one declarative event→action binding, by id, from a composition document. Target addressing matches bind_interaction: a composition document (mapPackageId or appPackageId) at the standard level, with the reference implementation's draft-lifecycle spelling (draftId + generation) admitted as x-honua-reference-shape. Removing an unknown interactionId is an error, not a no-op. See docs/adr/0030-declarative-interactions-and-layout.md. Exactly one target must be supplied: mapPackageId, appPackageId, or the x-honua-reference-shape draftId (which requires generation). The oneOf below enforces that; without it a call with no target, with both package ids, or with draftId and no generation validated against a contract no server can route.",
+  "type": "object",
+  "additionalProperties": true,
+  "required": [
+    "interactionId"
+  ],
+  "properties": {
+    "mapPackageId": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Target MapPackage composition document. Exactly one of mapPackageId / appPackageId / draftId identifies the target."
+    },
+    "appPackageId": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Target AppPackage composition document. Exactly one of mapPackageId / appPackageId / draftId identifies the target."
+    },
+    "draftId": {
+      "type": "string",
+      "minLength": 1,
+      "description": "x-honua-reference-shape: reference-implementation draft-lifecycle target. Requires generation."
+    },
+    "generation": {
+      "type": "integer",
+      "minimum": 0,
+      "description": "x-honua-reference-shape: optimistic-concurrency generation of the draft being mutated; the call fails on generation conflict."
+    },
+    "interactionId": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 200,
+      "description": "Id of the interaction to remove."
+    }
+  },
+  "oneOf": [
+    {
+      "required": [
+        "mapPackageId"
+      ],
+      "not": {
+        "anyOf": [
+          {
+            "required": [
+              "appPackageId"
+            ]
+          },
+          {
+            "required": [
+              "draftId"
+            ]
+          }
+        ]
+      }
+    },
+    {
+      "required": [
+        "appPackageId"
+      ],
+      "not": {
+        "anyOf": [
+          {
+            "required": [
+              "mapPackageId"
+            ]
+          },
+          {
+            "required": [
+              "draftId"
+            ]
+          }
+        ]
+      }
+    },
+    {
+      "required": [
+        "draftId",
+        "generation"
+      ],
+      "not": {
+        "anyOf": [
+          {
+            "required": [
+              "mapPackageId"
+            ]
+          },
+          {
+            "required": [
+              "appPackageId"
+            ]
+          }
+        ]
+      }
+    }
+  ]
+}

package/certification/setup-parity.md

@@ -44,7 +44,12 @@ The placeholders above illustrate the shape and are deliberately invalid as
 qualification input. Discover the view from the server's capabilities; do not
 invent profile switches or assemble a replacement tool roster in the client.
 Retain complete descriptions, input/output schemas, annotations and `_meta`.
-The server's opaque digests are compared to the reviewed pin. The receipt also
+The server's opaque digests are compared exactly to the reviewed pin. The three
+server digest fields use `sha256:` followed by 64 lowercase hexadecimal
+characters. Do not strip the prefix: older local validation accepted bare
+digests that could never match the server's canonical metadata. The independent
+manifest-file SHA-256 argument remains 64 lowercase hexadecimal characters
+without a prefix. The receipt also
 computes independent normalized descriptor hashes for HTTP and stdio; these
 use a different serialization from the server and have distinct field names.
 

package/dist/src/certification/certifier.d.ts

@@ -1,6 +1,7 @@
 import type { Client } from "@modelcontextprotocol/sdk/client/index.js";
 import { type AuthMode, type SuiteProvenance } from "../provenance.js";
 import { AUTH_ERROR_CODES } from "./contracts.js";
+import { type RosterResolution } from "./roster.js";
 import { type CertTargetMode } from "./target.js";
 /** Per-tool certification record (machine-readable). */
 export interface ToolCertification {
@@ -38,9 +39,14 @@ export interface KnownGap {
 }
 /** A cross-cutting contract check against the certified surface. */
 export interface ContractCheck {
-    contract: "output-schema" | "error-shape" | "auth-unauthenticated" | "list-pagination" | "query-pagination" | "mutating-round-trip" | "mutating-permission-denied" | "async-job-lifecycle";
+    contract: "output-schema" | "error-shape" | "auth-unauthenticated" | "list-pagination" | "query-pagination" | "mutating-round-trip" | "mutating-permission-denied" | "async-job-lifecycle" | "roster-parity" | "round-trip-target";
     target: string;
-    status: "passed" | "failed" | "skipped";
+    /**
+     * `blocked` means the check could not run for a reason outside the surface
+     * (e.g. the server roster is not published at the pinned sha). A blocked
+     * contract is never a pass: it keeps the summary from passing.
+     */
+    status: "passed" | "failed" | "skipped" | "blocked";
     detail: string;
 }
 export interface CertificationReport {
@@ -78,6 +84,7 @@ export interface CertificationReport {
         contractsPassed: number;
         contractsFailed: number;
         contractsSkipped: number;
+        contractsBlocked: number;
         knownGaps: number;
         failures: number;
     };
@@ -107,6 +114,14 @@ export interface CertifyOptions {
     authMode?: AuthMode;
     /** Environment used to resolve round-trip identifiers. */
     env?: NodeJS.ProcessEnv;
+    /**
+     * honua-server tool roster for the `roster-parity` contract. Omitted for
+     * targets that are not the product `/mcp` (the in-process fixture, the
+     * platform-free surface), where the contract is skipped with that reason.
+     */
+    roster?: RosterResolution;
+    /** Whether the certified topology has a durable control plane (Redis). Default true. */
+    durableControlPlane?: boolean;
 }
 /** Determine whether a discovered tool is safe to round-trip (read-only). */
 export declare function isReadOnlyTool(tool: {

package/dist/src/certification/certifier.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"certifier.d.ts","sourceRoot":"","sources":["../../../src/certification/certifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACxE,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,eAAe,EAGrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,gBAAgB,EAMjB,MAAM,gBAAgB,CAAC;AAaxB,OAAO,EAAE,KAAK,cAAc,EAA0B,MAAM,aAAa,CAAC;AAE1E,wDAAwD;AACxD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,IAAI,CAAC;IACjB,6EAA6E;IAC7E,WAAW,EAAE,OAAO,CAAC;IACrB,8EAA8E;IAC9E,eAAe,EAAE,OAAO,CAAC;IACzB,oEAAoE;IACpE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gFAAgF;IAChF,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3B,kFAAkF;IAClF,QAAQ,EAAE,OAAO,CAAC;IAClB,4EAA4E;IAC5E,SAAS,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC3C,0GAA0G;IAC1G,yBAAyB,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1C,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,yCAAyC;AACzC,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,IAAI,CAAC;CAClB;AAED,6EAA6E;AAC7E,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,eAAe,GAAG,iBAAiB,CAAC;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,oEAAoE;AACpE,MAAM,WAAW,aAAa;IAC5B,QAAQ,EACJ,eAAe,GACf,aAAa,GACb,sBAAsB,GACtB,iBAAiB,GACjB,kBAAkB,GAClB,qBAAqB,GACrB,4BAA4B,GAC5B,qBAAqB,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IACxC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,CAAC,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,QAAQ,EAAE;QACR,YAAY,EAAE,MAAM,CAAC;QACrB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,OAAO,EAAE,eAAe,GAAG,MAAM,CAAC;QAClC,UAAU,EAAE,cAAc,CAAC;QAC3B,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,QAAQ,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACjE,iFAAiF;IACjF,UAAU,EAAE,eAAe,CAAC;IAC5B,OAAO,EAAE;QACP,IAAI,EAAE,OAAO,CAAC;QACd,eAAe,EAAE,MAAM,CAAC;QACxB,gBAAgB,EAAE,MAAM,CAAC;QACzB,uBAAuB,EAAE,MAAM,CAAC;QAChC,eAAe,EAAE,MAAM,CAAC;QACxB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,oBAAoB,EAAE,MAAM,CAAC;QAC7B,mBAAmB,EAAE,MAAM,CAAC;QAC5B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,gBAAgB,EAAE,MAAM,CAAC;QACzB,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,MAAM,CAAC;QACxB,gBAAgB,EAAE,MAAM,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,SAAS,EAAE,qBAAqB,EAAE,CAAC;IACnC,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,IAAI,CAAA;KAAE,EAAE,CAAC;IAC9C,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,SAAS,EAAE,QAAQ,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,UAAU,EAAE,cAAc,CAAC;IAC3B,mEAAmE;IACnE,OAAO,EAAE,eAAe,GAAG,MAAM,CAAC;IAClC,qDAAqD;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,6EAA6E;IAC7E,sBAAsB,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC7D,iFAAiF;IACjF,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAID,6EAA6E;AAC7E,wBAAgB,cAAc,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CAAE,GAAG,OAAO,CAMxG;AAwBD;;;;GAIG;AACH,wBAAsB,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA0EnF;AAyaD,OAAO,EAAE,gBAAgB,EAAE,CAAC"}
+{"version":3,"file":"certifier.d.ts","sourceRoot":"","sources":["../../../src/certification/certifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACxE,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,eAAe,EAGrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,gBAAgB,EAMjB,MAAM,gBAAgB,CAAC;AAKxB,OAAO,EAAE,KAAK,gBAAgB,EAA2C,MAAM,aAAa,CAAC;AAgB7F,OAAO,EAAE,KAAK,cAAc,EAA0B,MAAM,aAAa,CAAC;AAE1E,wDAAwD;AACxD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,IAAI,CAAC;IACjB,6EAA6E;IAC7E,WAAW,EAAE,OAAO,CAAC;IACrB,8EAA8E;IAC9E,eAAe,EAAE,OAAO,CAAC;IACzB,oEAAoE;IACpE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gFAAgF;IAChF,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3B,kFAAkF;IAClF,QAAQ,EAAE,OAAO,CAAC;IAClB,4EAA4E;IAC5E,SAAS,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC3C,0GAA0G;IAC1G,yBAAyB,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1C,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,yCAAyC;AACzC,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,IAAI,CAAC;CAClB;AAED,6EAA6E;AAC7E,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,eAAe,GAAG,iBAAiB,CAAC;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,oEAAoE;AACpE,MAAM,WAAW,aAAa;IAC5B,QAAQ,EACJ,eAAe,GACf,aAAa,GACb,sBAAsB,GACtB,iBAAiB,GACjB,kBAAkB,GAClB,qBAAqB,GACrB,4BAA4B,GAC5B,qBAAqB,GACrB,eAAe,GACf,mBAAmB,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;IACpD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,CAAC,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,QAAQ,EAAE;QACR,YAAY,EAAE,MAAM,CAAC;QACrB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,OAAO,EAAE,eAAe,GAAG,MAAM,CAAC;QAClC,UAAU,EAAE,cAAc,CAAC;QAC3B,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,QAAQ,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACjE,iFAAiF;IACjF,UAAU,EAAE,eAAe,CAAC;IAC5B,OAAO,EAAE;QACP,IAAI,EAAE,OAAO,CAAC;QACd,eAAe,EAAE,MAAM,CAAC;QACxB,gBAAgB,EAAE,MAAM,CAAC;QACzB,uBAAuB,EAAE,MAAM,CAAC;QAChC,eAAe,EAAE,MAAM,CAAC;QACxB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,oBAAoB,EAAE,MAAM,CAAC;QAC7B,mBAAmB,EAAE,MAAM,CAAC;QAC5B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,gBAAgB,EAAE,MAAM,CAAC;QACzB,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,MAAM,CAAC;QACxB,gBAAgB,EAAE,MAAM,CAAC;QACzB,gBAAgB,EAAE,MAAM,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,SAAS,EAAE,qBAAqB,EAAE,CAAC;IACnC,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,IAAI,CAAA;KAAE,EAAE,CAAC;IAC9C,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,SAAS,EAAE,QAAQ,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,UAAU,EAAE,cAAc,CAAC;IAC3B,mEAAmE;IACnE,OAAO,EAAE,eAAe,GAAG,MAAM,CAAC;IAClC,qDAAqD;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,6EAA6E;IAC7E,sBAAsB,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC7D,iFAAiF;IACjF,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB;;;;OAIG;IACH,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,wFAAwF;IACxF,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAID,6EAA6E;AAC7E,wBAAgB,cAAc,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CAAE,GAAG,OAAO,CAMxG;AAwBD;;;;GAIG;AACH,wBAAsB,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAuGnF;AAycD,OAAO,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/src/certification/certifier.js

@@ -4,9 +4,11 @@ import { buildInvalidArgsInputs, buildRoundTripInputs, resolveRoundTripEnv } fro
 import { checkConformance, checkWellFormed, validateAgainstSchema } from "./json-schema.js";
 import { runDeepContracts } from "./lifecycle.js";
 import { OGC_COLLECTION_IDS } from "./ogc-data.js";
+import { checkRosterParity, describeRosterParity } from "./roster.js";
+import { DISCOVER_SERVICE_ID, discoverRoundTripTarget, wantsDiscovery, withoutServiceBoundInputs, } from "./round-trip-target.js";
 import { PLATFORM_FREE_DEGRADATIONS, buildReferenceToolLookup, loadSchemaFile, loadSchemaIndex, } from "./schema-index.js";
 import { isStandaloneTargetMode } from "./target.js";
-const STANDARD_SOURCE = "geospatial-mcp@54cbd49 (spec/schemas)";
+const STANDARD_SOURCE = "geospatial-mcp@4fac81c (spec/schemas)";
 /** Determine whether a discovered tool is safe to round-trip (read-only). */
 export function isReadOnlyTool(tool) {
     if (tool.annotations && typeof tool.annotations.readOnlyHint === "boolean") {
@@ -36,8 +38,7 @@ function withTargetRoundTripDefaults(env, targetMode) {
  */
 export async function certify(options) {
     const { client } = options;
-    const roundTripEnv = withTargetRoundTripDefaults(resolveRoundTripEnv(options.env), options.targetMode);
-    const roundTripInputs = buildRoundTripInputs(roundTripEnv);
+    let roundTripEnv = withTargetRoundTripDefaults(resolveRoundTripEnv(options.env), options.targetMode);
     const index = loadSchemaIndex();
     const referenceLookup = buildReferenceToolLookup(index);
     const serverInfo = client.getServerVersion() ?? { name: "unknown", version: "0.0.0" };
@@ -48,10 +49,27 @@ export async function certify(options) {
     // reference-shape tools (e.g. apply_style_preset) intentionally degrade their
     // platform-bound required properties. Conformance is evaluated accordingly.
     const platformFree = isStandaloneTargetMode(options.targetMode);
+    const advertisedNames = new Set(advertisedTools.map((t) => t.name));
+    // `HONUA_MCP_SERVICE_ID=discover`: bind the round trips to the first layer the
+    // candidate actually publishes instead of a seeded id it may not have.
+    let targetResolution;
+    let env = options.env;
+    if (wantsDiscovery(roundTripEnv)) {
+        targetResolution = await discoverRoundTripTarget(client, advertisedNames);
+        if (targetResolution.status === "passed") {
+            roundTripEnv = { ...roundTripEnv, serviceId: targetResolution.serviceId, layerId: targetResolution.layerId };
+            env = {
+                ...(options.env ?? process.env),
+                HONUA_MCP_SERVICE_ID: targetResolution.serviceId,
+                HONUA_MCP_LAYER_ID: String(targetResolution.layerId),
+            };
+        }
+    }
+    const roundTripInputs = targetResolution?.status === "blocked"
+        ? withoutServiceBoundInputs(buildRoundTripInputs(roundTripEnv))
+        : buildRoundTripInputs(roundTripEnv);
     const tools = [];
-    const advertisedNames = new Set();
     for (const tool of advertisedTools) {
-        advertisedNames.add(tool.name);
         tools.push(await certifyTool(client, tool, referenceLookup, roundTripInputs, platformFree));
     }
     const resources = advertisedResources.map((r) => ({
@@ -64,7 +82,7 @@ export async function certify(options) {
     contracts.push(paginationCheck("resources", resourcePages));
     collectOutputSchemaContracts(tools, contracts);
     contracts.push(await runErrorShapeContract(client, advertisedTools));
-    await runAuthContracts(options, advertisedTools, advertisedResources, contracts);
+    await runAuthContracts(options, advertisedTools, advertisedResources, contracts, roundTripInputs);
     // Deep contracts: mutating round-trip, unauthenticated-write refusal, async job
     // lifecycle, and query pagination. Safe by construction — mutations only run
     // against the disposable offline mock or an explicit scratch target.
@@ -73,9 +91,19 @@ export async function certify(options) {
         advertisedToolNames: advertisedNames,
         isDisposableBackend: options.backend === "mock-upstream",
         connectUnauthenticated: options.connectUnauthenticated,
-        env: options.env,
+        env,
+        ...(targetResolution?.status === "blocked" ? { targetUnavailable: targetResolution.detail } : {}),
     });
     contracts.push(...deep);
+    if (targetResolution) {
+        contracts.push({
+            contract: "round-trip-target",
+            target: `HONUA_MCP_SERVICE_ID=${DISCOVER_SERVICE_ID}`,
+            status: targetResolution.status,
+            detail: targetResolution.detail,
+        });
+    }
+    contracts.push(rosterParityContract(options, advertisedNames));
     const knownGaps = collectKnownGaps(index, advertisedNames, referenceLookup);
     const gitSha = resolveSuiteGitSha(options.env);
     const provenance = {
@@ -288,7 +316,7 @@ async function runErrorShapeContract(client, advertised) {
         };
     }
 }
-async function runAuthContracts(options, advertised, resources, contracts) {
+async function runAuthContracts(options, advertised, resources, contracts, roundTripInputs) {
     if (!options.connectUnauthenticated) {
         contracts.push({
             contract: "auth-unauthenticated",
@@ -310,7 +338,6 @@ async function runAuthContracts(options, advertised, resources, contracts) {
         // tools/call without credentials.
         const toolTarget = advertised.find((t) => isReadOnlyTool(t)) ?? advertised[0];
         if (toolTarget) {
-            const roundTripInputs = buildRoundTripInputs(resolveRoundTripEnv(options.env));
             const args = roundTripInputs[toolTarget.name] ?? {};
             contracts.push(await authCheckToolsCall(unauth, toolTarget.name, args));
         }
@@ -373,6 +400,34 @@ function contractFromOutcome(contract, target, outcome) {
         detail: outcome.ok ? "contract satisfied" : outcome.errors.join("; "),
     };
 }
+function rosterParityContract(options, advertisedNames) {
+    const roster = options.roster;
+    if (!roster) {
+        return {
+            contract: "roster-parity",
+            target: "tools/list",
+            status: "skipped",
+            detail: "roster parity runs only against a live honua-server /mcp; this target is not the product surface",
+        };
+    }
+    if (roster.status === "blocked") {
+        return {
+            contract: "roster-parity",
+            target: "tools/list",
+            status: "blocked",
+            detail: `${roster.reason} [${roster.source}]`,
+        };
+    }
+    const result = checkRosterParity(advertisedNames, roster.roster, {
+        durableControlPlane: options.durableControlPlane ?? true,
+    });
+    return {
+        contract: "roster-parity",
+        target: "tools/list",
+        status: result.ok ? "passed" : "failed",
+        detail: `${describeRosterParity(result, advertisedNames.size)} [${roster.source}]`,
+    };
+}
 function collectKnownGaps(index, advertisedNames, referenceLookup) {
     const gaps = [];
     // Advertised names that resolve to a standard entry through the SDK-local
@@ -415,13 +470,15 @@ function assembleReport(args) {
     const toolsConformant = conformanceChecked.filter((t) => t.conformant === true).length;
     const toolsRoundTripped = tools.filter((t) => t.roundTrip === "passed").length;
     const toolsOutputValidated = tools.filter((t) => t.structuredOutputValidated === true).length;
-    const contractsChecked = contracts.filter((c) => c.status !== "skipped").length;
+    const contractsChecked = contracts.filter((c) => c.status === "passed" || c.status === "failed").length;
     const contractsPassed = contracts.filter((c) => c.status === "passed").length;
     const contractsFailed = contracts.filter((c) => c.status === "failed").length;
     const contractsSkipped = contracts.filter((c) => c.status === "skipped").length;
+    const contractsBlocked = contracts.filter((c) => c.status === "blocked").length;
     const toolFailures = tools.reduce((acc, t) => acc + t.errors.length, 0);
     const failures = toolFailures + contractsFailed;
-    const pass = failures === 0;
+    // A blocked contract is evidence that could not be gathered, never a pass.
+    const pass = failures === 0 && contractsBlocked === 0;
     return {
         schemaVersion: 2,
         generatedAt: new Date().toISOString(),
@@ -449,6 +506,7 @@ function assembleReport(args) {
             contractsPassed,
             contractsFailed,
             contractsSkipped,
+            contractsBlocked,
             knownGaps: knownGaps.length,
             failures,
         },

package/dist/src/certification/cli.js

@@ -47,11 +47,14 @@ async function main() {
     const status = s.pass ? "PASS" : "FAIL";
     process.stdout.write(`MCP certification ${status} [${report.protocol.targetMode}]: ${s.toolsConformant}/${s.toolsConformanceChecked} conformant, ` +
         `${s.toolsOutputValidated} output-validated, ${s.contractsPassed}/${s.contractsChecked} contracts, ` +
-        `${s.contractsSkipped} skipped, ${s.knownGaps} known gaps, ${s.failures} failures.\n`);
+        `${s.contractsSkipped} skipped, ${s.contractsBlocked} blocked, ${s.knownGaps} known gaps, ${s.failures} failures.\n`);
     const skipped = report.contracts.filter((c) => c.status === "skipped");
     for (const c of skipped) {
         process.stdout.write(`  SKIP [${c.contract} / ${c.target}]: ${c.detail}\n`);
     }
+    for (const c of report.contracts.filter((contract) => contract.status === "blocked")) {
+        process.stdout.write(`  BLOCKED [${c.contract} / ${c.target}]: ${c.detail}\n`);
+    }
     process.stdout.write(`Artifacts: ${paths.json}\n           ${paths.markdown}\n`);
     if (!artifactOnly && !report.summary.pass) {
         process.exitCode = 1;

package/dist/src/certification/lifecycle.d.ts

@@ -8,6 +8,8 @@ export interface DeepContractOptions {
     /** Open a fresh unauthenticated client (for the permission-denied case). */
     connectUnauthenticated?: (() => Promise<Client>) | undefined;
     env?: NodeJS.ProcessEnv;
+    /** Set when no published layer could be discovered; query pagination is skipped with this reason. */
+    targetUnavailable?: string;
 }
 /** Run all deep contracts, returning one ContractCheck per contract (never throws). */
 export declare function runDeepContracts(options: DeepContractOptions): Promise<ContractCheck[]>;

package/dist/src/certification/lifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../../src/certification/lifecycle.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAoCpD,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,mBAAmB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,iFAAiF;IACjF,mBAAmB,EAAE,OAAO,CAAC;IAC7B,4EAA4E;IAC5E,sBAAsB,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC7D,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAcD,uFAAuF;AACvF,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAW7F"}
+{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../../src/certification/lifecycle.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAoCpD,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,mBAAmB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,iFAAiF;IACjF,mBAAmB,EAAE,OAAO,CAAC;IAC7B,4EAA4E;IAC5E,sBAAsB,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAC7D,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,qGAAqG;IACrG,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAcD,uFAAuF;AACvF,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAW7F"}

package/dist/src/certification/lifecycle.js

@@ -283,6 +283,9 @@ async function runQueryPagination(options, target) {
     if (!options.advertisedToolNames.has(QUERY_TOOL)) {
         return skip(contract, QUERY_TOOL, `${QUERY_TOOL} not advertised by this surface`);
     }
+    if (options.targetUnavailable) {
+        return skip(contract, QUERY_TOOL, `no published layer to page: ${options.targetUnavailable}`);
+    }
     const { client } = options;
     try {
         const pages = [];

package/dist/src/certification/operator-catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"operator-catalog.d.ts","sourceRoot":"","sources":["../../../src/certification/operator-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAUnE,OAAO,EAAE,KAAK,UAAU,EAA6D,MAAM,mBAAmB,CAAC;AAE/G;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,gFAAgF;AAChF,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,IAAI,EAAE,iBAAiB,GAAG,mBAAmB,GAAG,kBAAkB,GAAG,WAAW,GAAG,kBAAkB,CAAC;IACtG,+FAA+F;IAC/F,KAAK,EAAE;QACL,IAAI,EACA,kBAAkB,GAClB,qBAAqB,GACrB,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,GACjB,SAAS,GACT,WAAW,GACX,qBAAqB,CAAC;QAC1B,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;KACtE,CAAC;CACH;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,UAAU,CAAC;IACxB,YAAY,EAAE,UAAU,CAAC;IACzB,QAAQ,EAAE,OAAO,CAAC;IAClB,6EAA6E;IAC7E,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AA0BD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,IAAI,YAAY,EAAE,CA6UnD;AAOD,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,sBAAsB,IAAI,gBAAgB,EAAE,CA2B3D;AAED,2EAA2E;AAC3E,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAoCpC,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAuHD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,GAAE,sBAA2B,GAAG,MAAM,CAsGxF"}
+{"version":3,"file":"operator-catalog.d.ts","sourceRoot":"","sources":["../../../src/certification/operator-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAUnE,OAAO,EAAE,KAAK,UAAU,EAA6D,MAAM,mBAAmB,CAAC;AAE/G;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,gFAAgF;AAChF,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,IAAI,EAAE,iBAAiB,GAAG,mBAAmB,GAAG,kBAAkB,GAAG,WAAW,GAAG,kBAAkB,CAAC;IACtG,+FAA+F;IAC/F,KAAK,EAAE;QACL,IAAI,EACA,kBAAkB,GAClB,qBAAqB,GACrB,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,GACjB,SAAS,GACT,WAAW,GACX,qBAAqB,CAAC;QAC1B,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;KACtE,CAAC;CACH;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,UAAU,CAAC;IACxB,YAAY,EAAE,UAAU,CAAC;IACzB,QAAQ,EAAE,OAAO,CAAC;IAClB,6EAA6E;IAC7E,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AA0BD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,IAAI,YAAY,EAAE,CAiUnD;AAOD,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,sBAAsB,IAAI,gBAAgB,EAAE,CA2B3D;AAED,2EAA2E;AAC3E,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAoCpC,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAuHD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,GAAE,sBAA2B,GAAG,MAAM,CAsGxF"}

package/dist/src/certification/operator-catalog.js

@@ -238,18 +238,6 @@ export function buildOperatorTools() {
             readOnly: false,
             sampleOutput: { jobId: "job-001", status: "Cancelling" },
         },
-        {
-            name: "honua_propose_operation",
-            title: "Propose operation",
-            description: "Propose an in-scope control-plane operation for human approval.",
-            inputSchema: vendoredInputSchema("honua_propose_operation"),
-            outputSchema: OBJECT_SCHEMA({ proposalId: { type: "string" }, status: { type: "string" } }, [
-                "proposalId",
-                "status",
-            ]),
-            readOnly: false,
-            sampleOutput: { proposalId: "prop-001", status: "PendingApproval" },
-        },
         {
             name: "honua_publish_service",
             title: "Publish service",

package/dist/src/certification/report.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../../src/certification/report.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,0EAA0E;AAC1E,wBAAgB,cAAc,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CA2HlE"}
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../../src/certification/report.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,0EAA0E;AAC1E,wBAAgB,cAAc,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CA4HlE"}