@honua/mcp-server 0.1.15 → 0.1.16
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -44,7 +44,12 @@ The placeholders above illustrate the shape and are deliberately invalid as
|
|
|
44
44
|
qualification input. Discover the view from the server's capabilities; do not
|
|
45
45
|
invent profile switches or assemble a replacement tool roster in the client.
|
|
46
46
|
Retain complete descriptions, input/output schemas, annotations and `_meta`.
|
|
47
|
-
The server's opaque digests are compared to the reviewed pin. The
|
|
47
|
+
The server's opaque digests are compared exactly to the reviewed pin. The three
|
|
48
|
+
server digest fields use `sha256:` followed by 64 lowercase hexadecimal
|
|
49
|
+
characters. Do not strip the prefix: older local validation accepted bare
|
|
50
|
+
digests that could never match the server's canonical metadata. The independent
|
|
51
|
+
manifest-file SHA-256 argument remains 64 lowercase hexadecimal characters
|
|
52
|
+
without a prefix. The receipt also
|
|
48
53
|
computes independent normalized descriptor hashes for HTTP and stdio; these
|
|
49
54
|
use a different serialization from the server and have distinct field names.
|
|
50
55
|
|
|
@@ -44,8 +44,8 @@ export function parseSetupCatalogManifest(bytes, expectedSha256) {
|
|
|
44
44
|
throw new Error("Manifest requires an immutable server image digest");
|
|
45
45
|
}
|
|
46
46
|
for (const key of ["revisionDigest", "membershipDigest", "descriptorDigest"]) {
|
|
47
|
-
if (typeof value[key] !== "string" || !/^[a-f0-9]{64}$/.test(value[key])) {
|
|
48
|
-
throw new Error(`Manifest requires server-authored ${key}`);
|
|
47
|
+
if (typeof value[key] !== "string" || !/^sha256:[a-f0-9]{64}$/.test(value[key])) {
|
|
48
|
+
throw new Error(`Manifest requires canonical sha256: server-authored ${key}`);
|
|
49
49
|
}
|
|
50
50
|
}
|
|
51
51
|
if (!record(value.serverInfo) ||
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@honua/mcp-server",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.16",
|
|
4
4
|
"description": "Platform-free MCP server for geospatial services: expose discovery, query, and analysis over any public ArcGIS/Esri FeatureServer or OGC API endpoint to any MCP client, with no platform lock-in",
|
|
5
5
|
"license": "Apache-2.0",
|
|
6
6
|
"author": "Honua",
|