@honua/mcp-server 0.2.5 → 0.2.6

package/README.md

@@ -67,7 +67,10 @@ and their approval authority are separate.
 This preview forwards canonical paginated tools, resources, resource templates,
 prompts, request metadata, tool progress, cancellation, and catalog-change
 notifications. It negotiates its own MCP identity and preserves the configured
-workflow view. It does not advertise subscriptions, sampling, roots,
+workflow view. When a client omits its view, the persistent connector selects
+the server's `full` view so Studio and the other GIS workflows remain
+discoverable on the same registration. This changes discovery only; Server
+RBAC and approval policy still govern every operation. It does not advertise subscriptions, sampling, roots,
 completions, or tasks. Durable workflow context, command reconciliation, browser
 pairing, and coordinated Console/Studio artifacts remain tracked in
 [the unified workspace workstream](https://github.com/honua-io/honua-server/issues/6297).

package/dist/src/agent/gateway.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../../../src/agent/gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAEnE,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAC;AA4B/E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAe,MAAM,oBAAoB,CAAC;AA0DrF,MAAM,MAAM,eAAe,GAAG,CAAC,UAAU,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAE9F,oFAAoF;AACpF,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,eAAe,EAC3B,IAAI,CAAC,EAAE,MAAM,EACb,SAAS,CAAC,EAAE,OAAO,KAAK,GACvB,OAAO,CAAC,MAAM,CAAC,CAqBjB;AAMD,gGAAgG;AAChG,qBAAa,iBAAiB;;IAgB1B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAlB1B,QAAQ,CAAC,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAKb;gBAUiB,OAAO,EAAE,YAAY,EACrB,QAAQ,GAAE,eAAsC,EAChD,MAAM,CAAC,EAAE,eAAe,YAAA,EACxB,OAAO,GAAE;QAAE,cAAc,CAAC,EAAE,OAAO,CAAA;KAAO;IAwGvD,OAAO,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAqD5C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAO5B,0FAA0F;IACpF,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAuH5C"}
+{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../../../src/agent/gateway.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAEnE,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAC;AA8B/E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAe,MAAM,oBAAoB,CAAC;AA2FrF,MAAM,MAAM,eAAe,GAAG,CAAC,UAAU,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAE9F,oFAAoF;AACpF,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,eAAe,EAC3B,IAAI,CAAC,EAAE,MAAM,EACb,SAAS,CAAC,EAAE,OAAO,KAAK,GACvB,OAAO,CAAC,MAAM,CAAC,CAqBjB;AAMD,gGAAgG;AAChG,qBAAa,iBAAiB;;IAgB1B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAlB1B,QAAQ,CAAC,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAKb;gBAUiB,OAAO,EAAE,YAAY,EACrB,QAAQ,GAAE,eAAsC,EAChD,MAAM,CAAC,EAAE,eAAe,YAAA,EACxB,OAAO,GAAE;QAAE,cAAc,CAAC,EAAE,OAAO,CAAA;KAAO;IAoGvD,OAAO,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAyD5C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAO5B,0FAA0F;IACpF,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAuH5C"}

package/dist/src/agent/gateway.js

@@ -1,11 +1,21 @@
+import { createHash } from "node:crypto";
 import { Client } from "@modelcontextprotocol/sdk/client/index.js";
 import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { CallToolRequestSchema, CallToolResultSchema, ErrorCode, GetPromptRequestSchema, GetPromptResultSchema, InitializeRequestSchema, ListPromptsRequestSchema, ListPromptsResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListToolsRequestSchema, ListToolsResultSchema, McpError, PromptListChangedNotificationSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, ToolListChangedNotificationSchema, } from "@modelcontextprotocol/sdk/types.js";
 import { z } from "zod";
+import { z as protocolZod } from "zod/v4";
 import { SERVER_VERSION } from "../index.js";
 import { WORKFLOW_VIEW_META_KEY, buildUpstreamHeaders, readWorkflowView } from "../proxy.js";
 import { WORKFLOW_KNOWLEDGE, WORKFLOW_KNOWLEDGE_URI } from "./workflow-knowledge.js";
+// Honua chunks large resource documents. The standard MCP schema strips
+// these extension fields before the handler runs, so declare them explicitly.
+const honuaReadResourceRequestSchema = ReadResourceRequestSchema.extend({
+    params: ReadResourceRequestSchema.shape.params.extend({
+        cursor: protocolZod.string().optional(),
+        maxChars: protocolZod.number().int().min(1).max(1_000_000).optional(),
+    }),
+});
 const PREFIX = "honua_agent_";
 const DEVOPS_PREFIX = "honua_agent_devops_";
 const knowledgeResource = {
@@ -14,6 +24,32 @@ const knowledgeResource = {
     description: "Versioned workflow semantics and evidence requirements; canonical tools remain authoritative.",
     mimeType: "application/json",
 };
+const knowledgeText = JSON.stringify(WORKFLOW_KNOWLEDGE);
+const knowledgeDigest = createHash("sha256").update(knowledgeText).digest("hex");
+function readKnowledgeWindow(params) {
+    let offset = 0;
+    if (params.cursor !== undefined) {
+        const invalid = () => new McpError(ErrorCode.InvalidParams, "Invalid workflow knowledge continuation cursor");
+        if (!/^[A-Za-z0-9_-]{1,256}$/.test(params.cursor))
+            throw invalid();
+        const decoded = Buffer.from(params.cursor, "base64url");
+        if (decoded.toString("base64url") !== params.cursor)
+            throw invalid();
+        const [digest, position, ...extra] = decoded.toString("utf8").split(":");
+        if (digest !== knowledgeDigest || extra.length !== 0 || !/^[1-9][0-9]*$/.test(position ?? ""))
+            throw invalid();
+        offset = Number(position);
+        if (!Number.isSafeInteger(offset) || offset >= knowledgeText.length)
+            throw invalid();
+    }
+    const end = Math.min(offset + (params.maxChars ?? 64_000), knowledgeText.length);
+    return {
+        contents: [{ uri: WORKFLOW_KNOWLEDGE_URI, mimeType: "application/json", text: knowledgeText.slice(offset, end) }],
+        ...(end < knowledgeText.length
+            ? { nextCursor: Buffer.from(`${knowledgeDigest}:${end}`).toString("base64url") }
+            : {}),
+    };
+}
 const installInput = z
     .object({
     confirm: z.literal(true),
@@ -180,12 +216,8 @@ export class HonuaAgentGateway {
         this.server.setRequestHandler(ListResourceTemplatesRequestSchema, (request, extra) => !this.#client
             ? { resourceTemplates: [] }
             : this.#withClient((client) => client.request(request, ListResourceTemplatesResultSchema, { signal: extra.signal })));
-        this.server.setRequestHandler(ReadResourceRequestSchema, (request, extra) => request.params.uri === WORKFLOW_KNOWLEDGE_URI
-            ? {
-                contents: [
-                    { uri: WORKFLOW_KNOWLEDGE_URI, mimeType: "application/json", text: JSON.stringify(WORKFLOW_KNOWLEDGE) },
-                ],
-            }
+        this.server.setRequestHandler(honuaReadResourceRequestSchema, (request, extra) => request.params.uri === WORKFLOW_KNOWLEDGE_URI
+            ? readKnowledgeWindow(request.params)
             : this.#withClient((client) => client.request(request, ReadResourceResultSchema, { signal: extra.signal })));
         this.server.setRequestHandler(ListPromptsRequestSchema, (request, extra) => !this.#client
             ? { prompts: [] }
@@ -226,7 +258,11 @@ export class HonuaAgentGateway {
         transport.onmessage = (message, extra) => {
             if ("method" in message && message.method === "initialize") {
                 try {
-                    this.#view = readWorkflowView(InitializeRequestSchema.parse(message));
+                    // Ordinary MCP hosts do not send Honua-specific view metadata. The
+                    // persistent connector spans GIS workflows, including Studio; the
+                    // Server's bounded default omits those tools. Membership and authority
+                    // remain Server-owned, and an explicit client view still takes priority.
+                    this.#view = readWorkflowView(InitializeRequestSchema.parse(message)) ?? "full";
                 }
                 catch {
                     if ("id" in message)

package/dist/src/agent/workflow-knowledge.d.ts

@@ -2,9 +2,9 @@
 export declare const WORKFLOW_KNOWLEDGE_URI = "honua://agent/knowledge/workflows/v1";
 export declare const WORKFLOW_KNOWLEDGE: {
     readonly schemaVersion: "honua.agent-workflow-knowledge/v1";
-    readonly knowledgeVersion: "2026-10-17.2";
+    readonly knowledgeVersion: "2026-10-19.2";
     readonly qualification: "contract-guidance-only";
-    readonly authority: readonly ["Use discovered canonical tool schemas; these workflow descriptions never grant authorization.", "Bind every step to the current principal, tenant and target. Recheck credentials and RBAC on each action.", "Persist resource, operation and command references from canonical responses. Model prose cannot create a verified observation.", "After a lost mutation response reconcile the durable command/operation before retry; never infer failure from a timeout.", "The human approval inbox and approving principal are distinct from the agent. AwaitingApproval is a successful handoff, not a published result.", "Keep bootstrap secrets, cloud credentials, signing keys and private environment values outside model context."];
+    readonly authority: readonly ["Use discovered canonical tool schemas; these workflow descriptions never grant authorization.", "Bind every step to the current principal, tenant and target. Recheck credentials and RBAC on each action.", "Persist resource, operation and command references from canonical responses. Model prose cannot create a verified observation.", "After a lost mutation response reconcile the durable command/operation before retry; never infer failure from a timeout.", "The human approval inbox and approving principal are distinct from the agent. AwaitingApproval is a successful handoff, not a published result.", "Keep bootstrap secrets, cloud credentials, signing keys and private environment values outside model context.", "Large JSON resources can arrive as incomplete text windows. Echo nextCursor as cursor for the same URI and concatenate text per URI before parsing. Bound pages and reject repeated cursors; a first chunk is not the complete process catalog or job result."];
     readonly workflows: readonly [{
         readonly id: "local-bootstrap";
         readonly intent: "Evaluate Honua locally from one persistent MCP registration.";
@@ -27,10 +27,10 @@ export declare const WORKFLOW_KNOWLEDGE: {
         readonly id: "data-and-services";
         readonly intent: "Connect or import data, publish a service and verify a query.";
         readonly preconditions: readonly ["Verified current target", "Caller import/connect and publish permissions", "Explicit source and destination"];
-        readonly actions: readonly ["Discover connection/import tools", "Validate source schema and geometry/CRS", "Execute canonical import or connection", "Publish via discovered service/layer tool", "Query the published layer"];
+        readonly actions: readonly ["Discover connection/import tools", "For an installed local Docker target register its catalog through the discovered secret-reference-only connection tool using the host-allowed env:HONUA_LOCAL_DB_PASSWORD reference; never request or reveal the password", "Verify the returned connection actually targets the ingest catalog before publication; an imported table with no registered connection is not ready to publish", "Validate source schema and geometry/CRS", "Execute canonical import or connection", "Publish via discovered service/layer tool", "Query the published layer"];
         readonly inputReferences: readonly ["connection/source reference", "upload/artifact reference", "destination schema"];
         readonly outputReferences: readonly ["import job id", "service id", "layer id or protocol-neutral source reference"];
-        readonly observedOutcomes: readonly ["terminal import outcome", "service catalog entry", "query result with expected schema and representative data"];
+        readonly observedOutcomes: readonly ["terminal import outcome", "stored target CRS verified against canonical table metadata, distinct from the detected source CRS", "service catalog entry", "query result with expected schema and representative data"];
         readonly failureRule: "An accepted job or publish request is not successful ingestion or query verification.";
     }, {
         readonly id: "studio-map-and-publication";
@@ -45,7 +45,7 @@ export declare const WORKFLOW_KNOWLEDGE: {
         readonly id: "processes";
         readonly intent: "Run a built-in process graph or develop separately sandboxed Python/.NET code and map its output.";
         readonly preconditions: readonly ["Discovered Processes capabilities", "Input resource references", "Explicit built-in versus custom-code execution mode"];
-        readonly actions: readonly ["Snapshot inputs and graph/code immutably", "Validate/build in the selected adapter", "Run with bounded resources", "Read sanitized diagnostics", "Correct and rerun as a new snapshot when needed", "Import output with normal artifact/import tools", "Query/map the imported output"];
+        readonly actions: readonly ["For built-in asynchronous jobs read the complete honua://catalog/processes resource; select executionKind=Job with Async support and its typed inputs", "Snapshot inputs and graph/code immutably", "Validate/build in the selected adapter", "Run with bounded resources", "Read sanitized diagnostics", "Correct and rerun as a new snapshot when needed", "Import output with normal artifact/import tools", "Query/map the imported output"];
         readonly inputReferences: readonly ["graph definition or isolated code snapshot", "input artifact/layer ids", "adapter/runtime version"];
         readonly outputReferences: readonly ["snapshot/build/run ids", "diagnostic references", "output artifact id", "imported layer reference"];
         readonly observedOutcomes: readonly ["failed and corrected run statuses", "cancellation status when requested", "output schema/CRS", "query/map evidence"];

package/dist/src/agent/workflow-knowledge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-knowledge.d.ts","sourceRoot":"","sources":["../../../src/agent/workflow-knowledge.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,eAAO,MAAM,sBAAsB,yCAAyC,CAAC;AAC7E,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyOrB,CAAC"}
+{"version":3,"file":"workflow-knowledge.d.ts","sourceRoot":"","sources":["../../../src/agent/workflow-knowledge.ts"],"names":[],"mappings":"AAEA,qFAAqF;AACrF,eAAO,MAAM,sBAAsB,yCAAyC,CAAC;AAC7E,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8OrB,CAAC"}

package/dist/src/agent/workflow-knowledge.js

@@ -1,8 +1,10 @@
+// Generated from src/studio-agent/workflow-knowledge.ts.
+// Update the canonical source, then run node scripts/sync-workflow-knowledge.mjs --write.
 /** Versioned semantic guidance, not an executor or a claim of live qualification. */
 export const WORKFLOW_KNOWLEDGE_URI = "honua://agent/knowledge/workflows/v1";
 export const WORKFLOW_KNOWLEDGE = {
     schemaVersion: "honua.agent-workflow-knowledge/v1",
-    knowledgeVersion: "2026-10-17.2",
+    knowledgeVersion: "2026-10-19.2",
     qualification: "contract-guidance-only",
     authority: [
         "Use discovered canonical tool schemas; these workflow descriptions never grant authorization.",
@@ -11,6 +13,7 @@ export const WORKFLOW_KNOWLEDGE = {
         "After a lost mutation response reconcile the durable command/operation before retry; never infer failure from a timeout.",
         "The human approval inbox and approving principal are distinct from the agent. AwaitingApproval is a successful handoff, not a published result.",
         "Keep bootstrap secrets, cloud credentials, signing keys and private environment values outside model context.",
+        "Large JSON resources can arrive as incomplete text windows. Echo nextCursor as cursor for the same URI and concatenate text per URI before parsing. Bound pages and reject repeated cursors; a first chunk is not the complete process catalog or job result.",
     ],
     workflows: [
         {
@@ -81,6 +84,8 @@ export const WORKFLOW_KNOWLEDGE = {
             ],
             actions: [
                 "Discover connection/import tools",
+                "For an installed local Docker target register its catalog through the discovered secret-reference-only connection tool using the host-allowed env:HONUA_LOCAL_DB_PASSWORD reference; never request or reveal the password",
+                "Verify the returned connection actually targets the ingest catalog before publication; an imported table with no registered connection is not ready to publish",
                 "Validate source schema and geometry/CRS",
                 "Execute canonical import or connection",
                 "Publish via discovered service/layer tool",
@@ -90,6 +95,7 @@ export const WORKFLOW_KNOWLEDGE = {
             outputReferences: ["import job id", "service id", "layer id or protocol-neutral source reference"],
             observedOutcomes: [
                 "terminal import outcome",
+                "stored target CRS verified against canonical table metadata, distinct from the detected source CRS",
                 "service catalog entry",
                 "query result with expected schema and representative data",
             ],
@@ -132,6 +138,7 @@ export const WORKFLOW_KNOWLEDGE = {
                 "Explicit built-in versus custom-code execution mode",
             ],
             actions: [
+                "For built-in asynchronous jobs read the complete honua://catalog/processes resource; select executionKind=Job with Async support and its typed inputs",
                 "Snapshot inputs and graph/code immutably",
                 "Validate/build in the selected adapter",
                 "Run with bounded resources",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@honua/mcp-server",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "description": "Platform-free MCP server for geospatial services: expose discovery, query, and analysis over any public ArcGIS/Esri FeatureServer or OGC API endpoint to any MCP client, with no platform lock-in",
   "license": "Apache-2.0",
   "author": "Honua",
@@ -97,9 +97,9 @@
     "@biomejs/biome": "1.9.4",
     "@honua/sdk-js": "file:..",
     "@types/node": "^24.3.1",
-    "@vitest/coverage-v8": "^4.0.16",
+    "@vitest/coverage-v8": "^4.1.11",
     "typescript": "^5.9.2",
-    "vitest": "^4.0.16"
+    "vitest": "^4.1.11"
   },
   "files": [
     "dist/src",