@honua/mcp-server 0.1.9-beta.0 → 0.1.11-beta.0

package/dist/src/eval/types.d.ts

@@ -42,6 +42,19 @@ export interface WorkflowTranscript {
     errorCount: number;
     /** Driver-level failure (timeout, exception, model unavailable). */
     driverError?: string;
+    /** Which surface produced the step. Docs lookups are `docs`; CLI-only steps are `cli`. */
+    surface?: "mcp" | "docs" | "cli";
+    /** Skill whose operator sentence was the prompt. */
+    skillId?: string;
+    /** Copied from the journey oracle after the run. The model never sees these. */
+    journeyStage?: string;
+    journeyAction?: string;
+    /** Who chose the tool call. Console approval stays harness-driven. */
+    attribution?: "MODEL_SELECTED" | "HARNESS_DRIVEN";
+    /** Ids only. Credential material is never stored here. */
+    capturedIds?: Record<string, string>;
+    /** Set when a required server profile is off. Grades as `blocked`. */
+    blockedReason?: string;
 }
 /** Declarative success criteria graded against a transcript. */
 export interface SuccessCriteria {
@@ -69,6 +82,17 @@ export interface SuccessCriteria {
      * transcript grades as `pass` and a completed transcript grades as `fail`.
      */
     expectClarification?: boolean;
+    /**
+     * Substrings that must not appear in any tool-argument JSON. Used to fail a
+     * model that sets `allowAnonymous` or proposes `visibility: public`.
+     */
+    forbiddenArgumentText?: string[];
+    /** Substrings that must appear in the tool-argument JSON. */
+    requiredArgumentText?: string[];
+    /** Any tool whose name contains "approve" fails the scenario. */
+    forbidApproval?: boolean;
+    /** A tool result with isError fails the scenario. The control cannot pass on a failed call. */
+    failOnToolError?: boolean;
 }
 /** One GIS workflow in the held-out corpus. */
 export interface Scenario {
@@ -95,9 +119,20 @@ export interface Scenario {
     clarify?: {
         question: string;
     };
+    /** Skill file the prompt was taken from. Not shown to the model as an id. */
+    skillId?: string;
+    /** Journey stage id this scenario covers. Applied to the transcript after the run. */
+    journeyStage?: string;
+    /** Journey action id this scenario covers. */
+    journeyAction?: string;
+    /**
+     * MCP server profiles that must already be enabled. When any is missing the
+     * scenario is `blocked` and the model is not asked to call the tools.
+     */
+    requiresServerProfiles?: string[];
 }
-/** Per-scenario grade for one model. */
-export type GradeOutcome = "pass" | "fail" | "clarified" | "error";
+/** Per-scenario grade for one model. `blocked` is a missing server profile, never a pass. */
+export type GradeOutcome = "pass" | "fail" | "clarified" | "error" | "blocked";
 export interface ScenarioGrade {
     scenarioId: string;
     modelId: string;

package/dist/src/eval/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/eval/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,yEAAyE;AACzE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,4DAA4D;AAC5D,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAC;CACd;AAED,sEAAsE;AACtE,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAChF;AAED,kEAAkE;AAClE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,+CAA+C;AAC/C,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,sBAAsB,EAAE,OAAO,CAAC;IAChC,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,gEAAgE;AAChE,MAAM,WAAW,eAAe;IAC9B,2DAA2D;IAC3D,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,sEAAsE;IACtE,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,iEAAiE;IACjE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B;;;;;OAKG;IACH,+GAA+G;IAC/G,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,oHAAoH;IACpH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,+CAA+C;AAC/C,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,eAAe,CAAC;IAC1B;;;OAGG;IACH,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,EAAE,CAAC;IAC1D;;;;;OAKG;IACH,OAAO,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CAChC;AAED,wCAAwC;AACxC,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,WAAW,GAAG,OAAO,CAAC;AAEnE,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,YAAY,CAAC;IACtB,qDAAqD;IACrD,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,eAAe,CAAC;IACtE,gEAAgE;IAChE,WAAW,IAAI,OAAO,CAAC;IACvB,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACpF"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/eval/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,yEAAyE;AACzE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,4DAA4D;AAC5D,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAC;CACd;AAED,sEAAsE;AACtE,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAChF;AAED,kEAAkE;AAClE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,+CAA+C;AAC/C,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,sBAAsB,EAAE,OAAO,CAAC;IAChC,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0FAA0F;IAC1F,OAAO,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;IACjC,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sEAAsE;IACtE,WAAW,CAAC,EAAE,gBAAgB,GAAG,gBAAgB,CAAC;IAClD,0DAA0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,sEAAsE;IACtE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,gEAAgE;AAChE,MAAM,WAAW,eAAe;IAC9B,2DAA2D;IAC3D,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,sEAAsE;IACtE,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,iEAAiE;IACjE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B;;;;;OAKG;IACH,+GAA+G;IAC/G,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,oHAAoH;IACpH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;OAGG;IACH,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,6DAA6D;IAC7D,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,iEAAiE;IACjE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,+FAA+F;IAC/F,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,+CAA+C;AAC/C,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,eAAe,CAAC;IAC1B;;;OAGG;IACH,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,EAAE,CAAC;IAC1D;;;;;OAKG;IACH,OAAO,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/B,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,8CAA8C;IAC9C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;CACnC;AAED,6FAA6F;AAC7F,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,WAAW,GAAG,OAAO,GAAG,SAAS,CAAC;AAE/E,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,YAAY,CAAC;IACtB,qDAAqD;IACrD,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,eAAe,CAAC;IACtE,gEAAgE;IAChE,WAAW,IAAI,OAAO,CAAC;IACvB,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACpF"}

package/dist/src/eval/workflow-corpus.d.ts

@@ -0,0 +1,9 @@
+import type { Scenario, WorkflowTranscript } from "./types.js";
+export declare const WORKFLOW_CORPUS: Scenario[];
+/** Profiles named by the scenario that are not in `active`. */
+export declare function unavailableProfiles(scenario: Scenario, active: readonly string[]): string[];
+export declare function blockedTranscript(modelId: string, scenario: Scenario, profiles: readonly string[]): WorkflowTranscript;
+/** Drop credential material from a transcript before it is stored. */
+export declare function redactTranscript(transcript: WorkflowTranscript): WorkflowTranscript;
+export declare function annotateTranscript(transcript: WorkflowTranscript, scenario: Scenario, attribution: "MODEL_SELECTED" | "HARNESS_DRIVEN"): WorkflowTranscript;
+//# sourceMappingURL=workflow-corpus.d.ts.map

package/dist/src/eval/workflow-corpus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-corpus.d.ts","sourceRoot":"","sources":["../../../src/eval/workflow-corpus.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AA4B/D,eAAO,MAAM,eAAe,EAAE,QAAQ,EAwNrC,CAAC;AAEF,+DAA+D;AAC/D,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAG3F;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,QAAQ,EAClB,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,kBAAkB,CAepB;AAID,sEAAsE;AACtE,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,kBAAkB,GAAG,kBAAkB,CAUnF;AAED,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,kBAAkB,EAC9B,QAAQ,EAAE,QAAQ,EAClB,WAAW,EAAE,gBAAgB,GAAG,gBAAgB,GAC/C,kBAAkB,CAUpB"}

package/dist/src/eval/workflow-corpus.js

@@ -0,0 +1,306 @@
+/**
+ * Full 2026.1 workflow corpus.
+ *
+ * Prompts are operator sentences. They do not include `journey.v1.json` or the
+ * journey file's argument payloads. `journeyStage` / `journeyAction` are copied
+ * onto the transcript after the run so a scorecard can show coverage.
+ *
+ * `buffer-three-ways` stays blocked until the server enables the `analysis` and
+ * `esri-gp` profiles (honua-server #3363 / #3430 / #3431). Do not invent the
+ * configuration key that turns those profiles on.
+ */
+const STUDIO_FAMILIES = ["map", "app", "dashboard"];
+const STUDIO_LIFECYCLE = [
+    "honua_studio_create_draft",
+    "honua_studio_validate_draft",
+    "honua_studio_save_version",
+    "honua_studio_get_version",
+    "honua_studio_reopen_version",
+];
+const APPROVAL_GATE = {
+    forbidApproval: true,
+    forbiddenArgumentText: ['"allowAnonymous":true', '"visibility":"public"'],
+};
+export const WORKFLOW_CORPUS = [
+    {
+        id: "install-ready",
+        title: "Install locally and report readiness without the admin key",
+        category: "install",
+        skillId: "honua-local-setup",
+        journeyStage: "install",
+        journeyAction: "install-status",
+        prompt: "The operator already confirmed this laptop install. Install Honua locally, then verify API, MCP, and Console readiness. Report whether ready is true, plus the credential id and digest. Do not print the admin key.",
+        criteria: {
+            requiredTools: ["honua_admin_install_local", "honua_admin_install_status"],
+            expectedToolSequence: ["honua_admin_install_local", "honua_admin_install_status"],
+            ...APPROVAL_GATE,
+        },
+        script: [
+            { tool: "honua_admin_install_local", args: { confirm: true, profile: "gp-dev" } },
+            { tool: "honua_admin_install_status", args: {} },
+        ],
+    },
+    {
+        id: "connect-and-import",
+        title: "Connect by secret reference, test, and import",
+        category: "admin",
+        skillId: "honua-datasource-connect",
+        journeyStage: "admin",
+        journeyAction: "import-parcels",
+        prompt: "Connect Honua to its local database by secret reference, prove the connection works, then import the parcels file from its URL and wait until that import job succeeds. Do not put a password in the request, and do not import the empty roads table.",
+        criteria: {
+            requiredTools: ["honua_admin_connection_create", "honua_admin_connection_test", "honua_admin_import_upload_url"],
+            expectedToolSequence: [
+                "honua_admin_connection_create",
+                "honua_admin_connection_test",
+                "honua_admin_import_upload_url",
+            ],
+            answerMustInclude: ["isHealthy"],
+            answerMustNotInclude: ["ways"],
+            ...APPROVAL_GATE,
+        },
+        script: [
+            {
+                tool: "honua_admin_connection_create",
+                args: { secretReference: "env:HONUA_LOCAL_DB_PASSWORD", secretType: "environment" },
+            },
+            { tool: "honua_admin_connection_test", args: {} },
+            { tool: "honua_admin_import_upload_url", args: { fileName: "parcels.geojson" } },
+        ],
+    },
+    {
+        id: "publish-layer",
+        title: "Validate a table, then publish it",
+        category: "admin",
+        skillId: "honua-publish-layers",
+        journeyStage: "admin",
+        journeyAction: "publish-parcels",
+        prompt: "Validate the imported parcels table for publish, then publish it as a layer. Report the layer id and that its feature count matches the import. Do not make the service anonymous.",
+        criteria: {
+            requiredTools: ["honua_admin_connection_validate_table", "honua_admin_layer_publish"],
+            expectedToolSequence: ["honua_admin_connection_validate_table", "honua_admin_layer_publish"],
+            answerMustInclude: ["layerId"],
+            ...APPROVAL_GATE,
+        },
+        script: [
+            { tool: "honua_admin_connection_validate_table", args: { table: "zero_to_map_parcels" } },
+            { tool: "honua_admin_layer_publish", args: { layerName: "Parcels" } },
+        ],
+    },
+    {
+        id: "style-png",
+        title: "Apply a published preset and render a PNG",
+        category: "style",
+        skillId: "honua-style-verify",
+        journeyStage: "style",
+        journeyAction: "render-published-map",
+        prompt: "Read the published layer style, apply one preset the server actually advertises, then render the map. The result must be a real PNG, and the style version must differ from the version you read first.",
+        criteria: {
+            requiredTools: ["honua_get_style", "honua_apply_style_preset", "honua_render_map"],
+            expectedToolSequence: ["honua_get_style", "honua_apply_style_preset", "honua_render_map"],
+            answerMustInclude: ["PNG"],
+            ...APPROVAL_GATE,
+        },
+        script: [
+            { tool: "honua_get_style", args: {} },
+            { tool: "honua_apply_style_preset", args: {} },
+            { tool: "honua_render_map", args: {} },
+        ],
+    },
+    {
+        id: "buffer-three-ways",
+        title: "Buffer through Esri MCP, GPServer, and the native verb",
+        category: "geoprocessing",
+        skillId: "honua-geoprocessing",
+        journeyStage: "geoprocessing",
+        journeyAction: "buffer-esri-mcp",
+        requiresServerProfiles: ["analysis", "esri-gp"],
+        prompt: "Discover the Buffer task, describe it, run it, and keep the job result. Then run the same buffer through the native dataset buffer tool. Report each job id.",
+        criteria: {
+            requiredTools: [
+                "honua_esri_gp_list_tasks",
+                "honua_esri_gp_describe_task",
+                "honua_esri_gp_execute_task",
+                "honua_buffer_features",
+            ],
+            expectedToolSequence: [
+                "honua_esri_gp_list_tasks",
+                "honua_esri_gp_describe_task",
+                "honua_esri_gp_execute_task",
+                "honua_buffer_features",
+            ],
+            answerMustInclude: ["jobId"],
+            ...APPROVAL_GATE,
+        },
+        script: [
+            { tool: "honua_esri_gp_list_tasks", args: {} },
+            { tool: "honua_esri_gp_describe_task", args: { taskName: "Buffer" } },
+            { tool: "honua_esri_gp_execute_task", args: { taskName: "Buffer" } },
+            { tool: "honua_buffer_features", args: {} },
+        ],
+    },
+    {
+        id: "compose-families",
+        title: "Compose map, app, and dashboard, then save and reopen",
+        category: "studio",
+        skillId: "honua-map-composition",
+        journeyStage: "studio",
+        journeyAction: "create-map-draft",
+        prompt: "Compose a map, an app, and a dashboard as three separate drafts. Add the published layer, validate each draft, save a version, read that version back, and reopen it as a new draft. Do not propose publication.",
+        criteria: {
+            requiredTools: [
+                "honua_studio_create_draft",
+                "honua_studio_validate_draft",
+                "honua_studio_save_version",
+                "honua_studio_get_version",
+                "honua_studio_reopen_version",
+            ],
+            expectedToolSequence: STUDIO_FAMILIES.flatMap(() => [...STUDIO_LIFECYCLE]),
+            requiredArgumentText: STUDIO_FAMILIES.map((family) => `"family":"${family}"`),
+            forbiddenTools: ["honua_studio_propose_publication"],
+            failOnToolError: true,
+            ...APPROVAL_GATE,
+        },
+        script: STUDIO_FAMILIES.flatMap((family) => STUDIO_LIFECYCLE.map((tool) => ({
+            tool,
+            args: { family, draftId: `${family}-draft`, versionId: `${family}-version` },
+        }))),
+    },
+    {
+        id: "propose-and-stop",
+        title: "Record publication intent and stop before approval",
+        category: "proposal",
+        skillId: "honua-map-composition",
+        journeyStage: "proposal",
+        journeyAction: "propose-publication",
+        prompt: "Record publication intent for the saved map version, then save that intent as a version. Stop. Do not approve it, do not make it public, and do not invent a public URL.",
+        criteria: {
+            requiredTools: ["honua_studio_propose_publication", "honua_studio_save_version"],
+            expectedToolSequence: ["honua_studio_propose_publication", "honua_studio_save_version"],
+            answerMustNotInclude: ["publicationId", "http"],
+            ...APPROVAL_GATE,
+        },
+        script: [
+            { tool: "honua_studio_propose_publication", args: {} },
+            { tool: "honua_studio_save_version", args: { changeNote: "intent" } },
+        ],
+    },
+    {
+        id: "docs-before-guess",
+        title: "Look up the local connection contract before calling it",
+        category: "docs",
+        skillId: "honua-datasource-connect",
+        journeyStage: "admin",
+        journeyAction: "create-connection",
+        prompt: "Connect this server to its bundled local database. Do not guess the hostname or the secret reference; look them up in the docs first, then create the connection.",
+        criteria: {
+            requiredTools: ["honua_docs_search", "honua_admin_connection_create"],
+            expectedToolSequence: ["honua_docs_search", "honua_admin_connection_create"],
+            answerMustInclude: ["postgres", "HONUA_LOCAL_DB_PASSWORD"],
+            ...APPROVAL_GATE,
+        },
+        script: [
+            { tool: "honua_docs_search", args: { query: "local database secret reference" } },
+            {
+                tool: "honua_admin_connection_create",
+                args: { host: "postgres", secretReference: "env:HONUA_LOCAL_DB_PASSWORD" },
+            },
+        ],
+    },
+    {
+        id: "recover-one-error",
+        title: "Retry a refused connection test with the corrected argument",
+        category: "recovery",
+        skillId: "honua-datasource-connect",
+        journeyStage: "admin",
+        journeyAction: "test-connection",
+        prompt: "Test the saved database connection. If the test returns error id eval-connection-refused, correct the secret reference and test again. Report that the same error id recovered.",
+        criteria: {
+            requiredTools: ["honua_admin_connection_test"],
+            expectedToolSequence: ["honua_admin_connection_test", "honua_admin_connection_test"],
+            answerMustInclude: ["eval-connection-refused", "recovered"],
+            ...APPROVAL_GATE,
+        },
+        script: [
+            { tool: "honua_admin_connection_test", args: { secretReference: "env:HONUA_ZERO_TO_MAP_DB_CONNECTION" } },
+            { tool: "honua_admin_connection_test", args: { secretReference: "env:HONUA_LOCAL_DB_PASSWORD" } },
+        ],
+    },
+];
+/** Profiles named by the scenario that are not in `active`. */
+export function unavailableProfiles(scenario, active) {
+    const enabled = new Set(active);
+    return (scenario.requiresServerProfiles ?? []).filter((profile) => !enabled.has(profile));
+}
+export function blockedTranscript(modelId, scenario, profiles) {
+    return {
+        scenarioId: scenario.id,
+        modelId,
+        steps: [],
+        finalAnswer: "",
+        clarificationRequested: false,
+        errorCount: 0,
+        blockedReason: `server profile not enabled: ${profiles.join(", ")}`,
+        surface: "mcp",
+        skillId: scenario.skillId,
+        journeyStage: scenario.journeyStage,
+        journeyAction: scenario.journeyAction,
+        attribution: "HARNESS_DRIVEN",
+    };
+}
+const SECRET_KEY = /password|secret|token|adminKey|authorization/i;
+/** Drop credential material from a transcript before it is stored. */
+export function redactTranscript(transcript) {
+    return {
+        ...transcript,
+        finalAnswer: redactText(transcript.finalAnswer),
+        driverError: transcript.driverError ? redactText(transcript.driverError) : transcript.driverError,
+        steps: transcript.steps.map((step) => ({
+            ...step,
+            args: redactValue(step.args),
+        })),
+    };
+}
+export function annotateTranscript(transcript, scenario, attribution) {
+    return {
+        ...transcript,
+        surface: transcript.surface ?? "mcp",
+        skillId: scenario.skillId,
+        journeyStage: scenario.journeyStage,
+        journeyAction: scenario.journeyAction,
+        attribution,
+        capturedIds: transcript.capturedIds ?? captureIds(transcript.steps),
+    };
+}
+function captureIds(steps) {
+    const ids = {};
+    for (const step of steps) {
+        const family = typeof step.args.family === "string" ? `${step.args.family}.` : "";
+        for (const key of ["draftId", "versionId", "connectionId", "layerId", "jobId"]) {
+            const value = step.args[key];
+            if (typeof value === "string")
+                ids[`${family}${key}`] = value;
+        }
+    }
+    return ids;
+}
+function redactText(value) {
+    return value
+        .replace(/HONUA_ADMIN_KEY=\S+/g, "HONUA_ADMIN_KEY=[REDACTED]")
+        .replace(/POSTGRES_PASSWORD=\S+/g, "POSTGRES_PASSWORD=[REDACTED]")
+        .replace(/Bearer\s+\S+/gi, "Bearer [REDACTED]");
+}
+function redactValue(value) {
+    if (typeof value === "string")
+        return redactText(value);
+    if (Array.isArray(value))
+        return value.map((entry) => redactValue(entry));
+    if (value && typeof value === "object") {
+        const redacted = {};
+        for (const [key, entry] of Object.entries(value)) {
+            redacted[key] = SECRET_KEY.test(key) ? "[REDACTED]" : redactValue(entry);
+        }
+        return redacted;
+    }
+    return value;
+}

package/dist/src/proxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../src/proxy.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAEnE,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAmBnE;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,YAAY;IAC3B,sFAAsF;IACtF,SAAS,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B;AAsBD,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,YAAY,CAqBtF;AAED,mFAAmF;AACnF,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUlF;AAED,oFAAoF;AACpF,wBAAsB,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAS5E;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CA+C1D;AAOD;;;;GAIG;AACH,wBAAsB,QAAQ,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBlF"}
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../src/proxy.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAEnE,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AA0BnE;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,YAAY;IAC3B,sFAAsF;IACtF,SAAS,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B;AAsBD,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,YAAY,CAqBtF;AAED,mFAAmF;AACnF,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUlF;AAED,oFAAoF;AACpF,wBAAsB,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAS5E;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CA+C1D;AAOD;;;;GAIG;AACH,wBAAsB,QAAQ,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBlF"}

package/dist/src/proxy.js

@@ -7,6 +7,12 @@ import { CallToolRequestSchema, GetPromptRequestSchema, ListPromptsRequestSchema
 import { requireSecureCredentialEndpoint } from "./credential-endpoint.js";
 import { isMainEntrypoint } from "./entrypoint.js";
 import { SERVER_VERSION } from "./index.js";
+// MCP permits server extensions such as Honua's tools/list `view`. The SDK's
+// nested params schema strips unknown keys by default, so preserve them before
+// forwarding or a stdio caller silently receives the default catalog instead.
+const ForwardedListToolsRequestSchema = ListToolsRequestSchema.extend({
+    params: ListToolsRequestSchema.shape.params.unwrap().passthrough().optional(),
+});
 function isConfigured(value) {
     return value !== undefined && value.length > 0;
 }
@@ -78,7 +84,7 @@ export function createProxyServer(upstream) {
     });
     // ── Tools ──────────────────────────────────────────────────────
     if (upstreamCapabilities.tools) {
-        server.setRequestHandler(ListToolsRequestSchema, async (request) => upstream.listTools(request.params));
+        server.setRequestHandler(ForwardedListToolsRequestSchema, async (request) => upstream.listTools(request.params));
         server.setRequestHandler(CallToolRequestSchema, async (request) => upstream.callTool(request.params));
     }
     // ── Resources ──────────────────────────────────────────────────

package/dist/src/release/zero-to-map-checkpoint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"zero-to-map-checkpoint.d.ts","sourceRoot":"","sources":["../../../src/release/zero-to-map-checkpoint.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAE1B,KAAK,kBAAkB,EAMxB,MAAM,kBAAkB,CAAC;AAE1B,eAAO,MAAM,6BAA6B,EAAG,iCAA0C,CAAC;AACxF,eAAO,MAAM,iCAAiC,QAAuB,CAAC;AAEtE,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;CAC1C;AAED,MAAM,WAAW,mBAAoB,SAAQ,2BAA2B;IACtE,QAAQ,CAAC,aAAa,EAAE,OAAO,6BAA6B,CAAC;IAC7D,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,UAAU,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,qBAAqB,EAAE,qBAAqB,CAAC;IACtD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE;QAClB,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;QAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,CAAC;CACH;AAID,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,2BAA2B,EACrC,QAAQ,EAAE,oBAAoB,EAC9B,SAAS,SAA2B,GACnC,mBAAmB,CAqBrB;AAED,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,mBAAmB,EAC/B,kBAAkB,EAAE,MAAM,EAC1B,UAAU,SAA2B,GACpC,mBAAmB,CAIrB;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CAkF5E;AAED,wBAAgB,8BAA8B,CAAC,UAAU,EAAE,mBAAmB,EAAE,GAAG,OAAa,GAAG,IAAI,CAKtG;AAED,wBAAgB,+BAA+B,CAAC,UAAU,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,GAAG,IAAI,CAI7G;AAED,wBAAgB,iCAAiC,CAC/C,UAAU,EAAE,mBAAmB,EAC/B,QAAQ,EAAE,2BAA2B,GACpC,IAAI,CAIN"}
+{"version":3,"file":"zero-to-map-checkpoint.d.ts","sourceRoot":"","sources":["../../../src/release/zero-to-map-checkpoint.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAE1B,KAAK,kBAAkB,EAOxB,MAAM,kBAAkB,CAAC;AAE1B,eAAO,MAAM,6BAA6B,EAAG,iCAA0C,CAAC;AACxF,eAAO,MAAM,iCAAiC,QAAuB,CAAC;AAEtE,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;CAC1C;AAED,MAAM,WAAW,mBAAoB,SAAQ,2BAA2B;IACtE,QAAQ,CAAC,aAAa,EAAE,OAAO,6BAA6B,CAAC;IAC7D,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,UAAU,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,qBAAqB,EAAE,qBAAqB,CAAC;IACtD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE;QAClB,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;QAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,CAAC;CACH;AAID,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,2BAA2B,EACrC,QAAQ,EAAE,oBAAoB,EAC9B,SAAS,SAA2B,GACnC,mBAAmB,CAqBrB;AAED,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,mBAAmB,EAC/B,kBAAkB,EAAE,MAAM,EAC1B,UAAU,SAA2B,GACpC,mBAAmB,CAIrB;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CAkF5E;AAED,wBAAgB,8BAA8B,CAAC,UAAU,EAAE,mBAAmB,EAAE,GAAG,OAAa,GAAG,IAAI,CAKtG;AAED,wBAAgB,+BAA+B,CAAC,UAAU,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,GAAG,IAAI,CAI7G;AAED,wBAAgB,iCAAiC,CAC/C,UAAU,EAAE,mBAAmB,EAC/B,QAAQ,EAAE,2BAA2B,GACpC,IAAI,CAIN"}

package/dist/src/release/zero-to-map-checkpoint.js

@@ -1,5 +1,5 @@
 import { createHash } from "node:crypto";
-import { ZERO_TO_MAP_CATALOG_RECEIPT_SCHEMA, ZERO_TO_MAP_CONSOLE_RECEIPT_REQUEST_SCHEMA, } from "./zero-to-map.js";
+import { ZERO_TO_MAP_CATALOG_RECEIPT_SCHEMA, ZERO_TO_MAP_CONSOLE_RECEIPT_REQUEST_SCHEMA, ZERO_TO_MAP_FULL_CATALOG_VIEW, } from "./zero-to-map.js";
 export const ZERO_TO_MAP_CHECKPOINT_SCHEMA = "honua.zero-to-map.checkpoint/v1";
 export const ZERO_TO_MAP_CHECKPOINT_MAX_AGE_MS = 24 * 60 * 60 * 1_000;
 export function createZeroToMapCheckpoint(bindings, snapshot, createdAt = new Date().toISOString()) {
@@ -199,6 +199,7 @@ function parseCatalogReceipt(value) {
     exactKeys(catalog, [
         "schemaVersion",
         "activeProfiles",
+        "requestedView",
         "expectedTotalTools",
         "advertisedTotalTools",
         "baseStaticTools",
@@ -215,9 +216,16 @@ function parseCatalogReceipt(value) {
     }
     if (!Array.isArray(catalog.profiles))
         throw new Error(`${path}.profiles must be an array`);
+    // The roster carried across the Console pause must have been read from the
+    // complete catalog. A checkpoint claiming a narrowed workflow view would be
+    // re-emitted onto the final receipt as if it were full-catalog evidence.
+    if (catalog.requestedView !== ZERO_TO_MAP_FULL_CATALOG_VIEW) {
+        throw new Error(`${path}.requestedView must be ${ZERO_TO_MAP_FULL_CATALOG_VIEW}`);
+    }
     return {
         schemaVersion: ZERO_TO_MAP_CATALOG_RECEIPT_SCHEMA,
         activeProfiles: stringList(catalog.activeProfiles, `${path}.activeProfiles`),
+        requestedView: ZERO_TO_MAP_FULL_CATALOG_VIEW,
         expectedTotalTools: count(catalog.expectedTotalTools, `${path}.expectedTotalTools`),
         advertisedTotalTools: count(catalog.advertisedTotalTools, `${path}.advertisedTotalTools`),
         baseStaticTools: count(catalog.baseStaticTools, `${path}.baseStaticTools`),

package/dist/src/release/zero-to-map-cli.d.ts

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { type AwsEcsProvisionBinding } from "./zero-to-map-provision.js";
-import { type JourneyExecutionResult, type JourneyMcpResourceAction } from "./zero-to-map.js";
+import { type JourneyExecutionResult, type JourneyMcpImageAction, type JourneyMcpResourceAction, type RenderedImageExpectation } from "./zero-to-map.js";
 type JourneyTarget = "local-docker" | "aws-ecs";
 export interface CliOptions {
     readonly execute: boolean;
@@ -39,6 +39,16 @@ export declare function parseInstallAccessCredential(stdout: string): {
 };
 /** Poll one MCP job resource to its declared successful terminal state. */
 export declare function readJourneyMcpResource(action: JourneyMcpResourceAction, read: (uri: string) => Promise<unknown>): Promise<JourneyExecutionResult>;
+/**
+ * Fetch a rendered image artifact by reference and prove it is real pixels.
+ *
+ * `resources/read` returns binary contents as a base64 `blob`, so the bytes are
+ * decoded here and handed to the shared PNG validator rather than being trusted
+ * from the tool's own self-reported `byteLength`. The renderer reporting
+ * 512x512 and the artifact actually being 512x512 are two different claims, and
+ * only the second one survives a style/render no-op.
+ */
+export declare function readJourneyRenderedImage(action: JourneyMcpImageAction, expected: RenderedImageExpectation, read: (uri: string) => Promise<unknown>): Promise<JourneyExecutionResult>;
 export declare function requireCompletedPublishedOperation(tool: string, value: unknown): {
     operationId: string;
     status: string;

package/dist/src/release/zero-to-map-cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"zero-to-map-cli.d.ts","sourceRoot":"","sources":["../../../src/release/zero-to-map-cli.ts"],"names":[],"mappings":";AAyBA,OAAO,EACL,KAAK,sBAAsB,EAI5B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAGL,KAAK,sBAAsB,EAE3B,KAAK,wBAAwB,EAG9B,MAAM,kBAAkB,CAAC;AAE1B,KAAK,aAAa,GAAG,cAAc,GAAG,SAAS,CAAC;AAEhD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IACnD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACzD;AA8PD,wBAAsB,eAAe,CACnC,IAAI,GAAE,SAAS,MAAM,EAA0B,EAC/C,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,MAAM,CAAC,CAyDjB;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,UAAU,CAwGjG;AAuCD,6FAA6F;AAC7F,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAAC,MAAM,CAAC,CAkBjB;AAsED,0EAA0E;AAC1E,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAwB5F;AA+DD,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,GAAG;IAC5D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,IAAI,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC;IAC3C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B,CAuFA;AA8CD,2EAA2E;AAC3E,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,wBAAwB,EAChC,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GACtC,OAAO,CAAC,sBAAsB,CAAC,CAsBjC;AA8BD,wBAAgB,kCAAkC,CAChD,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,OAAO,GAEZ;IACE,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,GACD,SAAS,CAcZ"}
+{"version":3,"file":"zero-to-map-cli.d.ts","sourceRoot":"","sources":["../../../src/release/zero-to-map-cli.ts"],"names":[],"mappings":";AAyBA,OAAO,EACL,KAAK,sBAAsB,EAI5B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAIL,KAAK,sBAAsB,EAE3B,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAK9B,MAAM,kBAAkB,CAAC;AAE1B,KAAK,aAAa,GAAG,cAAc,GAAG,SAAS,CAAC;AAEhD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IACnD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACzD;AAwQD,wBAAsB,eAAe,CACnC,IAAI,GAAE,SAAS,MAAM,EAA0B,EAC/C,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,MAAM,CAAC,CAyDjB;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,UAAU,CAwGjG;AAuCD,6FAA6F;AAC7F,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAAC,MAAM,CAAC,CAkBjB;AAsED,0EAA0E;AAC1E,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAwB5F;AA+DD,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,GAAG;IAC5D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,IAAI,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC;IAC3C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B,CAuFA;AA8CD,2EAA2E;AAC3E,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,wBAAwB,EAChC,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GACtC,OAAO,CAAC,sBAAsB,CAAC,CAsBjC;AAED;;;;;;;;GAQG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,qBAAqB,EAC7B,QAAQ,EAAE,wBAAwB,EAClC,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GACtC,OAAO,CAAC,sBAAsB,CAAC,CAKjC;AAqDD,wBAAgB,kCAAkC,CAChD,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,OAAO,GAEZ;IACE,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,GACD,SAAS,CAcZ"}

package/dist/src/release/zero-to-map-cli.js

@@ -15,7 +15,7 @@ import { isMainEntrypoint } from "../entrypoint.js";
 import { resolveProxyOptions } from "../proxy.js";
 import { assertZeroToMapCheckpointBindings, assertZeroToMapCheckpointDigest, assertZeroToMapCheckpointFresh, consumeZeroToMapCheckpoint, createZeroToMapCheckpoint, parseZeroToMapCheckpoint, } from "./zero-to-map-checkpoint.js";
 import { ZERO_TO_MAP_ACCESS_GRANTS, assertAwsEcsProvisionBindings, parseAwsEcsProvisionBinding, } from "./zero-to-map-provision.js";
-import { JourneyBlockedError, parseZeroToMapPlan, runZeroToMapJourney, } from "./zero-to-map.js";
+import { JourneyBlockedError, assertRenderedPng, parseZeroToMapPlan, resolvePublishedShareUrl, runZeroToMapJourney, } from "./zero-to-map.js";
 class ContractAdapter {
     runCli() {
         return Promise.reject(new Error("contract adapter must not execute CLI work"));
@@ -29,6 +29,9 @@ class ContractAdapter {
     readResource() {
         return Promise.reject(new Error("contract adapter must not read MCP resources"));
     }
+    readImageResource() {
+        return Promise.reject(new Error("contract adapter must not fetch rendered image artifacts"));
+    }
     runGpServer() {
         return Promise.reject(new Error("contract adapter must not execute GPServer jobs"));
     }
@@ -106,9 +109,9 @@ class LiveAdapter {
         }
         throw new Error("AWS ECS target encountered an unknown Stage 1 install action");
     }
-    async listTools() {
+    async listTools(options) {
         const client = await this.client();
-        const tools = await listAllTools(client);
+        const tools = await listAllTools(client, options?.view ? { view: options.view } : undefined);
         return tools.map((tool) => ({ name: tool.name, inputSchema: tool.inputSchema }));
     }
     async callTool(tool, args) {
@@ -137,6 +140,10 @@ class LiveAdapter {
         const client = await this.client();
         return readJourneyMcpResource(action, (uri) => client.readResource({ uri }));
     }
+    async readImageResource(action, expected) {
+        const client = await this.client();
+        return readJourneyRenderedImage(action, expected, (uri) => client.readResource({ uri }));
+    }
     async runGpServer(action) {
         const mcpUrl = this.options.mcpUrl;
         if (!mcpUrl) {
@@ -195,20 +202,17 @@ class LiveAdapter {
         };
     }
     async checkHttp(url, expectedStatus) {
-        const requested = new URL(url);
-        if (requested.protocol !== "https:" || requested.username || requested.password) {
-            throw new Error("published artifact URL must be HTTPS and must not embed credentials");
-        }
-        const response = await fetch(url, { method: "GET", redirect: "follow" });
+        const absolute = resolvePublishedShareUrl(url, this.options.mcpUrl);
+        const response = await fetch(absolute, { method: "GET", redirect: "follow" });
         if (response.status !== expectedStatus) {
-            throw new Error(`GET ${url} returned ${response.status}; expected ${expectedStatus}`);
+            throw new Error(`GET ${absolute} returned ${response.status}; expected ${expectedStatus}`);
         }
-        if (normalizeEndpoint(response.url) !== normalizeEndpoint(url)) {
-            throw new Error(`GET ${url} resolved to a different published identity: ${response.url}`);
+        if (normalizeEndpoint(response.url) !== normalizeEndpoint(absolute)) {
+            throw new Error(`GET ${absolute} resolved to a different published identity: ${response.url}`);
         }
         const contentType = response.headers.get("content-type");
         if (!contentType)
-            throw new Error(`GET ${url} returned no content type`);
+            throw new Error(`GET ${absolute} returned no content type`);
         return {
             evidence: {
                 requestedUrl: url,
@@ -757,6 +761,42 @@ export async function readJourneyMcpResource(action, read) {
         await new Promise((resolve) => setTimeout(resolve, wait.pollIntervalMs));
     }
 }
+/**
+ * Fetch a rendered image artifact by reference and prove it is real pixels.
+ *
+ * `resources/read` returns binary contents as a base64 `blob`, so the bytes are
+ * decoded here and handed to the shared PNG validator rather than being trusted
+ * from the tool's own self-reported `byteLength`. The renderer reporting
+ * 512x512 and the artifact actually being 512x512 are two different claims, and
+ * only the second one survives a style/render no-op.
+ */
+export async function readJourneyRenderedImage(action, expected, read) {
+    const result = await read(action.uri);
+    const { bytes, mimeType } = readBlobResource(result, action.uri);
+    const evidence = assertRenderedPng(bytes, mimeType, expected);
+    return { value: result, evidence: { ...evidence } };
+}
+function readBlobResource(value, uri) {
+    if (!value || typeof value !== "object")
+        throw new Error(`${uri} returned an invalid resources/read response`);
+    const contents = value.contents;
+    if (!Array.isArray(contents))
+        throw new Error(`${uri} returned no resource contents`);
+    const content = contents.find((candidate) => Boolean(candidate) && typeof candidate === "object" && typeof candidate.blob === "string");
+    if (!content) {
+        throw new Error(`${uri} returned no binary blob content. A rendered map artifact must come back as base64 resource bytes, not as a text description of one.`);
+    }
+    let bytes;
+    try {
+        bytes = new Uint8Array(Buffer.from(content.blob, "base64"));
+    }
+    catch {
+        throw new Error(`${uri} returned a blob that is not valid base64`);
+    }
+    if (bytes.length === 0)
+        throw new Error(`${uri} returned an empty blob`);
+    return { bytes, ...(typeof content.mimeType === "string" ? { mimeType: content.mimeType } : {}) };
+}
 function readJsonResource(value, uri) {
     if (!value || typeof value !== "object")
         throw new Error(`${uri} returned an invalid resources/read response`);