@hypequery/mcp 0.6.0 → 0.8.0

package/dist/discovery-executor.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Discovery without execution.
+ *
+ * A hosted gateway lists tools for one principal against one activated
+ * deployment, and does that before — and independently of — being able to run
+ * anything. `HypequeryMCPExecutor` cannot serve that: it requires a
+ * `DatasetClient` it would never call, and refuses to construct at all when a
+ * dataset is tenant-scoped and no fixed `tenantId` is configured. Both are
+ * correct for a local server, where one process serves one tenant and every
+ * listed tool is runnable. Neither holds for a gateway, which resolves a tenant
+ * per request through the deployment data plane.
+ *
+ * The alternative would be a second manifest generator in the gateway, which
+ * `CORE-03` exists to prevent: the tool schemas an agent is given and the
+ * validators a query is checked against have to come from one catalog.
+ *
+ * So this shares the schema compiler and the catalog tools, and refuses the two
+ * tools that need a query engine. Listing a tool it will not run is deliberate:
+ * the manifest a client caches must be the one it will keep seeing once
+ * execution is wired in behind it, or every client re-lists on the day that
+ * lands.
+ */
+import type { CallToolResult, GetPromptResult, ListPromptsResult, ListToolsResult } from '@modelcontextprotocol/sdk/types.js';
+import type { MCPToolExecutor } from './executor.js';
+import type { DatasetRegistry, MCPCatalogBudget, MCPQueryLimits } from './types.js';
+/**
+ * Provenance a client needs to cache a manifest and know when it went stale.
+ *
+ * Namespaced under `com.hypequery/` in the result's `_meta`, as the MCP spec
+ * requires of implementation-defined keys.
+ */
+export interface MCPToolManifestMeta {
+    /** The immutable generation these tools were listed from. */
+    readonly activationRevision?: string;
+    /** Content-addressed identity of the contract behind them. */
+    readonly deploymentIdentity?: string;
+    /** How the tools were shaped — `catalog` for the fixed compatibility set. */
+    readonly toolMode?: string;
+}
+export interface MCPDiscoveryExecutorConfig {
+    /** Datasets to advertise. Already narrowed to what the caller may see. */
+    datasets: DatasetRegistry;
+    /**
+     * Datasets offered as a `query_dataset` target. Defaults to all of them.
+     *
+     * A deployment authorizes a dataset and each of its metrics through separate
+     * endpoint policies, so a caller can be entitled to a metric on a dataset it
+     * may not query directly. Such a dataset still belongs in `datasets` — its
+     * metrics are reachable, and it may be joined to — but naming it here would
+     * advertise a target execution refuses.
+     */
+    queryableDatasets?: readonly string[];
+    /** Server-side query ceilings, so advertised schemas match what will run. */
+    queryLimits?: MCPQueryLimits;
+    /**
+     * Tool-count and manifest-byte ceilings.
+     *
+     * This is where they bite. A gateway lists one manifest per authorized
+     * catalog, and a large deployment's `query_dataset` schema names every
+     * dataset, dimension, measure, and filter field it published. Exceeding the
+     * budget raises `MCPCatalogBudgetError`, which a caller is expected to catch
+     * and answer by choosing a narrower tool mode.
+     */
+    catalogBudget?: MCPCatalogBudget;
+    /** Attached to `listTools`, so a client can pin what it listed. */
+    meta?: MCPToolManifestMeta;
+}
+/**
+ * A read-only executor over a catalog.
+ *
+ * `list_datasets`, `get_dataset_schema`, and the prompts read the agent-safe
+ * catalog and need no query engine, so they answer normally. `query_dataset`
+ * and `query_metric` are advertised with their exact schemas and refuse.
+ */
+export declare class HypequeryMCPDiscoveryExecutor implements MCPToolExecutor {
+    private readonly config;
+    private readonly querySchemas;
+    private readonly catalogBudget;
+    private readonly meta;
+    constructor(config: MCPDiscoveryExecutorConfig);
+    /** The catalog these tools were compiled from, for caching by content. */
+    getManifestHash(): string;
+    listTools(): Promise<ListToolsResult>;
+    callTool(name: string, args?: Record<string, unknown>): Promise<CallToolResult>;
+    listPrompts(): Promise<ListPromptsResult>;
+    getPrompt(name: string, args?: Record<string, string>): Promise<GetPromptResult>;
+}
+export declare function createMCPDiscoveryExecutor(config: MCPDiscoveryExecutorConfig): MCPToolExecutor;
+//# sourceMappingURL=discovery-executor.d.ts.map

package/dist/discovery-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery-executor.d.ts","sourceRoot":"","sources":["../src/discovery-executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,eAAe,EAChB,MAAM,oCAAoC,CAAC;AAG5C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAYrD,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEpF;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,6DAA6D;IAC7D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,8DAA8D;IAC9D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,0BAA0B;IACzC,0EAA0E;IAC1E,QAAQ,EAAE,eAAe,CAAC;IAC1B;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,6EAA6E;IAC7E,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,gBAAgB,CAAC;IACjC,mEAAmE;IACnE,IAAI,CAAC,EAAE,mBAAmB,CAAC;CAC5B;AAeD;;;;;;GAMG;AACH,qBAAa,6BAA8B,YAAW,eAAe;IAKvD,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgC;IAC7D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAyB;IACvD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAqC;gBAE7B,MAAM,EAAE,0BAA0B;IAY/D,0EAA0E;IAC1E,eAAe,IAAI,MAAM;IAInB,SAAS,IAAI,OAAO,CAAC,eAAe,CAAC;IAUrC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC;IAyB/E,WAAW,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAczC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC;CAMvF;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,0BAA0B,GACjC,eAAe,CAEjB"}

package/dist/discovery-executor.js

@@ -0,0 +1,116 @@
+/**
+ * Discovery without execution.
+ *
+ * A hosted gateway lists tools for one principal against one activated
+ * deployment, and does that before — and independently of — being able to run
+ * anything. `HypequeryMCPExecutor` cannot serve that: it requires a
+ * `DatasetClient` it would never call, and refuses to construct at all when a
+ * dataset is tenant-scoped and no fixed `tenantId` is configured. Both are
+ * correct for a local server, where one process serves one tenant and every
+ * listed tool is runnable. Neither holds for a gateway, which resolves a tenant
+ * per request through the deployment data plane.
+ *
+ * The alternative would be a second manifest generator in the gateway, which
+ * `CORE-03` exists to prevent: the tool schemas an agent is given and the
+ * validators a query is checked against have to come from one catalog.
+ *
+ * So this shares the schema compiler and the catalog tools, and refuses the two
+ * tools that need a query engine. Listing a tool it will not run is deliberate:
+ * the manifest a client caches must be the one it will keep seeing once
+ * execution is wired in behind it, or every client re-lists on the day that
+ * lands.
+ */
+import { MCPToolError } from './errors.js';
+import { datasetGuidePrompt } from './prompts/dataset-guide.js';
+import { getDatasetSchemaTool } from './tools/introspect.js';
+import { listDatasetsTool } from './tools/list-datasets.js';
+import { buildMCPToolManifest } from './tools/tool-manifest.js';
+import { buildMCPQuerySchemas } from './tools/utils/canonical-query-schemas.js';
+import { assertManifestWithinBudget, resolveCatalogBudget, } from './tools/utils/catalog-budget.js';
+import { createMCPErrorResponse } from './tools/utils/tool-response.js';
+const NOT_EXECUTABLE = 'This endpoint lists datasets and metrics but does not execute queries.';
+function metaEntries(meta) {
+    if (meta === undefined)
+        return undefined;
+    const entries = Object.entries({
+        'com.hypequery/activationRevision': meta.activationRevision,
+        'com.hypequery/deploymentIdentity': meta.deploymentIdentity,
+        'com.hypequery/toolMode': meta.toolMode,
+    }).filter((entry) => entry[1] !== undefined);
+    return entries.length === 0 ? undefined : Object.fromEntries(entries);
+}
+/**
+ * A read-only executor over a catalog.
+ *
+ * `list_datasets`, `get_dataset_schema`, and the prompts read the agent-safe
+ * catalog and need no query engine, so they answer normally. `query_dataset`
+ * and `query_metric` are advertised with their exact schemas and refuse.
+ */
+export class HypequeryMCPDiscoveryExecutor {
+    config;
+    querySchemas;
+    catalogBudget;
+    meta;
+    constructor(config) {
+        this.config = config;
+        // Deliberately no tenant assertion. A gateway has no fixed tenant to
+        // declare, and none is needed: nothing here reaches a table.
+        this.querySchemas = buildMCPQuerySchemas(config.datasets ?? {}, config.queryLimits, config.queryableDatasets);
+        this.catalogBudget = resolveCatalogBudget(config.catalogBudget);
+        this.meta = metaEntries(config.meta);
+    }
+    /** The catalog these tools were compiled from, for caching by content. */
+    getManifestHash() {
+        return this.querySchemas.manifestHash;
+    }
+    async listTools() {
+        // Budgeted before `_meta` is attached, so the ceiling measures the catalog
+        // rather than the provenance a gateway chose to stamp on it.
+        const manifest = assertManifestWithinBudget(buildMCPToolManifest(this.querySchemas), this.catalogBudget);
+        return this.meta === undefined ? manifest : { ...manifest, _meta: this.meta };
+    }
+    async callTool(name, args) {
+        try {
+            switch (name) {
+                case 'list_datasets':
+                    return await listDatasetsTool(this.config.datasets);
+                case 'get_dataset_schema':
+                    return await getDatasetSchemaTool(this.config.datasets, args);
+                case 'query_dataset':
+                case 'query_metric':
+                    // Not `MCP_UNKNOWN_TOOL`: the tool exists and is listed, and telling a
+                    // client it does not would invite it to stop asking for good.
+                    throw new MCPToolError('MCP_EXECUTION_FAILED', NOT_EXECUTABLE, {
+                        retryable: false,
+                    });
+                default:
+                    throw new MCPToolError('MCP_UNKNOWN_TOOL', `Unknown tool: ${name}`);
+            }
+        }
+        catch (error) {
+            return createMCPErrorResponse(error);
+        }
+    }
+    async listPrompts() {
+        return {
+            prompts: [{
+                    name: 'dataset_guide',
+                    description: 'Guide for querying datasets with natural language',
+                    arguments: [{
+                            name: 'dataset',
+                            description: 'Name of the dataset to get guidance for',
+                            required: false,
+                        }],
+                }],
+        };
+    }
+    async getPrompt(name, args) {
+        if (name === 'dataset_guide') {
+            return datasetGuidePrompt(this.config.datasets, args?.dataset);
+        }
+        throw new Error(`Unknown prompt: ${name}`);
+    }
+}
+export function createMCPDiscoveryExecutor(config) {
+    return new HypequeryMCPDiscoveryExecutor(config);
+}

package/dist/errors.d.ts

@@ -1,4 +1,4 @@
-export type MCPToolErrorCode = 'MCP_INVALID_ARGUMENTS' | 'MCP_NOT_FOUND' | 'MCP_UNKNOWN_TOOL' | 'MCP_UNAUTHORIZED' | 'MCP_STALE_CONTRACT' | 'MCP_REQUEST_CANCELLED' | 'MCP_QUERY_TIMEOUT' | 'MCP_RESULT_TOO_LARGE' | 'MCP_EXECUTION_FAILED';
+export type MCPToolErrorCode = 'MCP_INVALID_ARGUMENTS' | 'MCP_NOT_FOUND' | 'MCP_UNKNOWN_TOOL' | 'MCP_UNAUTHORIZED' | 'MCP_STALE_CONTRACT' | 'MCP_REQUEST_CANCELLED' | 'MCP_QUERY_TIMEOUT' | 'MCP_RESULT_TOO_LARGE' | 'MCP_CATALOG_TOO_LARGE' | 'MCP_EXECUTION_FAILED';
 export type MCPToolErrorCategory = 'correctable_input' | 'unauthorized' | 'stale_contract' | 'budget' | 'internal';
 /** @deprecated Use MCPToolErrorCode. */
 export type MCPExecutionErrorCode = Extract<MCPToolErrorCode, 'MCP_REQUEST_CANCELLED' | 'MCP_QUERY_TIMEOUT' | 'MCP_RESULT_TOO_LARGE'>;
@@ -24,6 +24,20 @@ export declare class MCPExecutionBudgetError extends MCPToolError {
     readonly code: MCPExecutionErrorCode;
     constructor(code: MCPExecutionErrorCode, message: string);
 }
+/**
+ * A catalog too large to advertise.
+ *
+ * Separate from `MCPExecutionBudgetError` because it is not raised by a query:
+ * it is raised while listing, before any call exists, and a hosted gateway is
+ * expected to catch it and choose a smaller tool mode rather than surface it to
+ * a client. Truncating instead would be worse — an agent would be shown fewer
+ * targets than the validators behind it accept, and the manifest hash would
+ * stop identifying the catalog it was built from.
+ */
+export declare class MCPCatalogBudgetError extends MCPToolError {
+    readonly code: 'MCP_CATALOG_TOO_LARGE';
+    constructor(message: string);
+}
 export declare function classifyMCPToolError(error: unknown): MCPErrorDetails;
 export declare function formatMCPToolError(error: unknown): string;
 //# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GACxB,uBAAuB,GACvB,eAAe,GACf,kBAAkB,GAClB,kBAAkB,GAClB,oBAAoB,GACpB,uBAAuB,GACvB,mBAAmB,GACnB,sBAAsB,GACtB,sBAAsB,CAAC;AAE3B,MAAM,MAAM,oBAAoB,GAC5B,mBAAmB,GACnB,cAAc,GACd,gBAAgB,GAChB,QAAQ,GACR,UAAU,CAAC;AAEf,wCAAwC;AACxC,MAAM,MAAM,qBAAqB,GAAG,OAAO,CACzC,gBAAgB,EAChB,uBAAuB,GAAG,mBAAmB,GAAG,sBAAsB,CACvE,CAAC;AAEF,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,gBAAgB,CAAC;IACvB,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;CACtB;AAsBD,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;gBAG5B,IAAI,EAAE,gBAAgB,EACtB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;QACP,QAAQ,CAAC,EAAE,oBAAoB,CAAC;QAChC,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,WAAW,CAAC,EAAE,OAAO,CAAC;KAClB;CAUT;AAED,qBAAa,uBAAwB,SAAQ,YAAY;IACvD,SAAiB,IAAI,EAAE,qBAAqB,CAAC;gBAEjC,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,MAAM;CAOzD;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAkBpE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAGzD"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GACxB,uBAAuB,GACvB,eAAe,GACf,kBAAkB,GAClB,kBAAkB,GAClB,oBAAoB,GACpB,uBAAuB,GACvB,mBAAmB,GACnB,sBAAsB,GACtB,uBAAuB,GACvB,sBAAsB,CAAC;AAE3B,MAAM,MAAM,oBAAoB,GAC5B,mBAAmB,GACnB,cAAc,GACd,gBAAgB,GAChB,QAAQ,GACR,UAAU,CAAC;AAEf,wCAAwC;AACxC,MAAM,MAAM,qBAAqB,GAAG,OAAO,CACzC,gBAAgB,EAChB,uBAAuB,GAAG,mBAAmB,GAAG,sBAAsB,CACvE,CAAC;AAEF,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,gBAAgB,CAAC;IACvB,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;CACtB;AA0BD,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;gBAG5B,IAAI,EAAE,gBAAgB,EACtB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;QACP,QAAQ,CAAC,EAAE,oBAAoB,CAAC;QAChC,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,WAAW,CAAC,EAAE,OAAO,CAAC;KAClB;CAUT;AAED,qBAAa,uBAAwB,SAAQ,YAAY;IACvD,SAAiB,IAAI,EAAE,qBAAqB,CAAC;gBAEjC,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,MAAM;CAOzD;AAED;;;;;;;;;GASG;AACH,qBAAa,qBAAsB,SAAQ,YAAY;IACrD,SAAiB,IAAI,EAAE,uBAAuB,CAAC;gBAEnC,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAkBpE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAGzD"}

package/dist/errors.js

@@ -8,8 +8,12 @@ function defaultErrorMetadata(code) {
             return { category: 'unauthorized', retryable: false, correctable: false };
         case 'MCP_STALE_CONTRACT':
             return { category: 'stale_contract', retryable: true, correctable: false };
+        // `MCP_CATALOG_TOO_LARGE` is not retryable: the same catalog produces the
+        // same manifest every time. A caller fixes it by publishing fewer targets
+        // or choosing a tool mode that does not name every one of them.
         case 'MCP_REQUEST_CANCELLED':
         case 'MCP_RESULT_TOO_LARGE':
+        case 'MCP_CATALOG_TOO_LARGE':
             return { category: 'budget', retryable: false, correctable: false };
         case 'MCP_QUERY_TIMEOUT':
             return { category: 'budget', retryable: true, correctable: false };
@@ -41,6 +45,22 @@ export class MCPExecutionBudgetError extends MCPToolError {
         this.name = 'MCPExecutionBudgetError';
     }
 }
+/**
+ * A catalog too large to advertise.
+ *
+ * Separate from `MCPExecutionBudgetError` because it is not raised by a query:
+ * it is raised while listing, before any call exists, and a hosted gateway is
+ * expected to catch it and choose a smaller tool mode rather than surface it to
+ * a client. Truncating instead would be worse — an agent would be shown fewer
+ * targets than the validators behind it accept, and the manifest hash would
+ * stop identifying the catalog it was built from.
+ */
+export class MCPCatalogBudgetError extends MCPToolError {
+    constructor(message) {
+        super('MCP_CATALOG_TOO_LARGE', message, { category: 'budget', retryable: false });
+        this.name = 'MCPCatalogBudgetError';
+    }
+}
 export function classifyMCPToolError(error) {
     if (error instanceof MCPToolError) {
         return {

package/dist/executor.d.ts

@@ -1,6 +1,6 @@
 import type { CallToolResult, GetPromptResult, ListPromptsResult, ListToolsResult } from '@modelcontextprotocol/sdk/types.js';
 import type { DatasetClient } from '@hypequery/datasets';
-import type { DatasetRegistry, MCPExecutionBudget, MCPQueryLimits } from './types.js';
+import type { DatasetRegistry, MCPCatalogBudget, MCPExecutionBudget, MCPQueryLimits } from './types.js';
 export interface MCPExecutorConfig {
     /** Dataset registry - map of dataset names to instances. */
     datasets: DatasetRegistry;
@@ -14,6 +14,8 @@ export interface MCPExecutorConfig {
     queryLimits?: MCPQueryLimits;
     /** Query deadline and serialized-result byte ceilings. */
     executionBudget?: MCPExecutionBudget;
+    /** Tool-count and manifest-byte ceilings applied when listing tools. */
+    catalogBudget?: MCPCatalogBudget;
 }
 export interface MCPServerConfig extends MCPExecutorConfig {
     /** Server name shown to MCP clients. */
@@ -39,6 +41,7 @@ export declare class HypequeryMCPExecutor implements MCPToolExecutor {
     private readonly config;
     private readonly querySchemas;
     private readonly executionBudget;
+    private readonly catalogBudget;
     constructor(config: MCPExecutorConfig);
     getManifestHash(): string;
     listTools(): Promise<ListToolsResult>;

package/dist/executor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../src/executor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,eAAe,EAChB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAEV,aAAa,EACd,MAAM,qBAAqB,CAAC;AAe7B,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAOtF,MAAM,WAAW,iBAAiB;IAChC,4DAA4D;IAC5D,QAAQ,EAAE,eAAe,CAAC;IAC1B,wEAAwE;IACxE,SAAS,EAAE,aAAa,CAAC;IACzB,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,wEAAwE;IACxE,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B,0DAA0D;IAC1D,eAAe,CAAC,EAAE,kBAAkB,CAAC;CACtC;AAED,MAAM,WAAW,eAAgB,SAAQ,iBAAiB;IACxD,wCAAwC;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,IAAI,OAAO,CAAC,eAAe,CAAC,CAAC;IACtC,QAAQ,CACN,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3B,WAAW,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC1C,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACjF,eAAe,IAAI,MAAM,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,qBAAa,oBAAqB,YAAW,eAAe;IAI9C,OAAO,CAAC,QAAQ,CAAC,MAAM;IAHnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgC;IAC7D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA2B;gBAE9B,MAAM,EAAE,iBAAiB;IAOtD,eAAe,IAAI,MAAM;IAInB,SAAS,IAAI,OAAO,CAAC,eAAe,CAAC;IAIrC,QAAQ,CACZ,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,cAAc,CAAC;IAwDpB,WAAW,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAkBzC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC;CAOvF;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,oBAAoB,CAEjF"}
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../src/executor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,eAAe,EAChB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAEV,aAAa,EACd,MAAM,qBAAqB,CAAC;AAoB7B,OAAO,KAAK,EACV,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACf,MAAM,YAAY,CAAC;AAOpB,MAAM,WAAW,iBAAiB;IAChC,4DAA4D;IAC5D,QAAQ,EAAE,eAAe,CAAC;IAC1B,wEAAwE;IACxE,SAAS,EAAE,aAAa,CAAC;IACzB,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,wEAAwE;IACxE,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B,0DAA0D;IAC1D,eAAe,CAAC,EAAE,kBAAkB,CAAC;IACrC,wEAAwE;IACxE,aAAa,CAAC,EAAE,gBAAgB,CAAC;CAClC;AAED,MAAM,WAAW,eAAgB,SAAQ,iBAAiB;IACxD,wCAAwC;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,IAAI,OAAO,CAAC,eAAe,CAAC,CAAC;IACtC,QAAQ,CACN,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3B,WAAW,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC1C,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACjF,eAAe,IAAI,MAAM,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,qBAAa,oBAAqB,YAAW,eAAe;IAK9C,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgC;IAC7D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA2B;IAC3D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAyB;gBAE1B,MAAM,EAAE,iBAAiB;IAQtD,eAAe,IAAI,MAAM;IAInB,SAAS,IAAI,OAAO,CAAC,eAAe,CAAC;IAIrC,QAAQ,CACZ,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,cAAc,CAAC;IAwDpB,WAAW,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAkBzC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC;CAOvF;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,oBAAoB,CAEjF"}

package/dist/executor.js

@@ -6,6 +6,7 @@ import { queryDatasetTool } from './tools/query-dataset.js';
 import { queryMetricTool } from './tools/query-metric.js';
 import { buildMCPToolManifest } from './tools/tool-manifest.js';
 import { buildMCPQuerySchemas } from './tools/utils/canonical-query-schemas.js';
+import { assertManifestWithinBudget, resolveCatalogBudget, } from './tools/utils/catalog-budget.js';
 import { assertWithinBudget, resolveExecutionBudget, } from './tools/utils/execution-budget.js';
 import { resolveQueryLimits } from './tools/utils/query-limits.js';
 import { validateMCPServerTenantConfig } from './utils/tenant-config.js';
@@ -21,18 +22,20 @@ export class HypequeryMCPExecutor {
     config;
     querySchemas;
     executionBudget;
+    catalogBudget;
     constructor(config) {
         this.config = config;
         validateMCPServerTenantConfig(config);
         resolveQueryLimits(undefined, config.queryLimits);
         this.executionBudget = resolveExecutionBudget(config.executionBudget);
+        this.catalogBudget = resolveCatalogBudget(config.catalogBudget);
         this.querySchemas = buildMCPQuerySchemas(config.datasets ?? {}, config.queryLimits);
     }
     getManifestHash() {
         return this.querySchemas.manifestHash;
     }
     async listTools() {
-        return buildMCPToolManifest(this.querySchemas);
+        return assertManifestWithinBudget(buildMCPToolManifest(this.querySchemas), this.catalogBudget);
     }
     async callTool(name, args, signal) {
         try {

package/dist/index.d.ts

@@ -6,6 +6,7 @@
  */
 export { HypequeryMCPServer, createMCPServer, type MCPServerConfig } from './server.js';
 export { HypequeryMCPExecutor, createMCPExecutor, type MCPExecutorConfig, type MCPToolExecutor, } from './executor.js';
+export { HypequeryMCPDiscoveryExecutor, createMCPDiscoveryExecutor, type MCPDiscoveryExecutorConfig, type MCPToolManifestMeta, } from './discovery-executor.js';
 export { HypequeryMCPProtocolServer, createMCPProtocolServer, type MCPProtocolServerOptions, } from './protocol-server.js';
 export { connectMCPServerStdio, startStdioMCPServer } from './stdio.js';
 export { listDatasetsTool } from './tools/list-datasets.js';
@@ -13,8 +14,8 @@ export { getDatasetSchemaTool, getTrustedDatasetSchema } from './tools/introspec
 export { queryMetricTool } from './tools/query-metric.js';
 export { queryDatasetTool } from './tools/query-dataset.js';
 export { datasetGuidePrompt } from './prompts/dataset-guide.js';
-export type { DatasetRegistry, QueryMetricArgs, QueryDatasetArgs, QueryToolOptions, MCPExecutionBudget, MCPQueryLimits, SchemaToolOptions, GetDatasetSchemaArgs, MCPToolResponse, DatasetSchema, DimensionSchema, MetricSchema, RelationshipSchema, DatasetListItem, DatasetsListResponse, QueryResultResponse, QueryResultMeta, } from './types.js';
-export { MCPExecutionBudgetError, MCPToolError, classifyMCPToolError, formatMCPToolError, type MCPErrorDetails, type MCPExecutionErrorCode, type MCPToolErrorCode, type MCPToolErrorCategory, } from './errors.js';
-export { MAX_QUERY_LIMIT, DEFAULT_QUERY_LIMIT, MAX_QUERY_OFFSET, MAX_QUERY_DIMENSIONS, MAX_QUERY_MEASURES, MAX_QUERY_FILTERS, MAX_QUERY_ORDER_BY, DEFAULT_QUERY_TIMEOUT_MS, MAX_QUERY_TIMEOUT_MS, DEFAULT_RESPONSE_BYTES, MAX_RESPONSE_BYTES, } from './types.js';
+export type { DatasetRegistry, QueryMetricArgs, QueryDatasetArgs, QueryToolOptions, MCPExecutionBudget, MCPCatalogBudget, MCPQueryLimits, SchemaToolOptions, GetDatasetSchemaArgs, MCPToolResponse, DatasetSchema, DimensionSchema, MetricSchema, RelationshipSchema, DatasetListItem, DatasetsListResponse, QueryResultResponse, QueryResultMeta, } from './types.js';
+export { MCPCatalogBudgetError, MCPExecutionBudgetError, MCPToolError, classifyMCPToolError, formatMCPToolError, type MCPErrorDetails, type MCPExecutionErrorCode, type MCPToolErrorCode, type MCPToolErrorCategory, } from './errors.js';
+export { MAX_QUERY_LIMIT, DEFAULT_QUERY_LIMIT, MAX_QUERY_OFFSET, MAX_QUERY_DIMENSIONS, MAX_QUERY_MEASURES, MAX_QUERY_FILTERS, MAX_QUERY_ORDER_BY, DEFAULT_QUERY_TIMEOUT_MS, MAX_QUERY_TIMEOUT_MS, DEFAULT_RESPONSE_BYTES, MAX_RESPONSE_BYTES, DEFAULT_MANIFEST_TOOLS, MAX_MANIFEST_TOOLS, DEFAULT_MANIFEST_BYTES, MAX_MANIFEST_BYTES, } from './types.js';
 export { MCP_PACKAGE_VERSION } from './version.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,KAAK,eAAe,GACrB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,KAAK,wBAAwB,GAC9B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AACtF,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAGhE,YAAY,EACV,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,oBAAoB,EACpB,eAAe,EACf,aAAa,EACb,eAAe,EACf,YAAY,EACZ,kBAAkB,EAClB,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,uBAAuB,EACvB,YAAY,EACZ,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,GAC1B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,KAAK,eAAe,GACrB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,6BAA6B,EAC7B,0BAA0B,EAC1B,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,GACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,KAAK,wBAAwB,GAC9B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AACtF,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAGhE,YAAY,EACV,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACd,iBAAiB,EACjB,oBAAoB,EACpB,eAAe,EACf,aAAa,EACb,eAAe,EACf,YAAY,EACZ,kBAAkB,EAClB,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,YAAY,EACZ,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,GAC1B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -6,6 +6,7 @@
  */
 export { HypequeryMCPServer, createMCPServer } from './server.js';
 export { HypequeryMCPExecutor, createMCPExecutor, } from './executor.js';
+export { HypequeryMCPDiscoveryExecutor, createMCPDiscoveryExecutor, } from './discovery-executor.js';
 export { HypequeryMCPProtocolServer, createMCPProtocolServer, } from './protocol-server.js';
 export { connectMCPServerStdio, startStdioMCPServer } from './stdio.js';
 export { listDatasetsTool } from './tools/list-datasets.js';
@@ -13,6 +14,6 @@ export { getDatasetSchemaTool, getTrustedDatasetSchema } from './tools/introspec
 export { queryMetricTool } from './tools/query-metric.js';
 export { queryDatasetTool } from './tools/query-dataset.js';
 export { datasetGuidePrompt } from './prompts/dataset-guide.js';
-export { MCPExecutionBudgetError, MCPToolError, classifyMCPToolError, formatMCPToolError, } from './errors.js';
-export { MAX_QUERY_LIMIT, DEFAULT_QUERY_LIMIT, MAX_QUERY_OFFSET, MAX_QUERY_DIMENSIONS, MAX_QUERY_MEASURES, MAX_QUERY_FILTERS, MAX_QUERY_ORDER_BY, DEFAULT_QUERY_TIMEOUT_MS, MAX_QUERY_TIMEOUT_MS, DEFAULT_RESPONSE_BYTES, MAX_RESPONSE_BYTES, } from './types.js';
+export { MCPCatalogBudgetError, MCPExecutionBudgetError, MCPToolError, classifyMCPToolError, formatMCPToolError, } from './errors.js';
+export { MAX_QUERY_LIMIT, DEFAULT_QUERY_LIMIT, MAX_QUERY_OFFSET, MAX_QUERY_DIMENSIONS, MAX_QUERY_MEASURES, MAX_QUERY_FILTERS, MAX_QUERY_ORDER_BY, DEFAULT_QUERY_TIMEOUT_MS, MAX_QUERY_TIMEOUT_MS, DEFAULT_RESPONSE_BYTES, MAX_RESPONSE_BYTES, DEFAULT_MANIFEST_TOOLS, MAX_MANIFEST_TOOLS, DEFAULT_MANIFEST_BYTES, MAX_MANIFEST_BYTES, } from './types.js';
 export { MCP_PACKAGE_VERSION } from './version.js';

package/dist/tools/utils/canonical-query-schemas.d.ts

@@ -5,5 +5,13 @@ import type { DatasetRegistry, MCPQueryLimits } from '../../types.js';
  * type also accepts legacy metadata-only objects; retain a generic validator for
  * those compatibility inputs until the publishing API replaces them.
  */
-export declare function buildMCPQuerySchemas(datasets: DatasetRegistry, configured?: MCPQueryLimits): CanonicalSemanticQuerySchemas;
+export declare function buildMCPQuerySchemas(datasets: DatasetRegistry, configured?: MCPQueryLimits, 
+/**
+ * Datasets offered as a `query_dataset` target. Defaults to all of them.
+ *
+ * A dataset outside this list keeps its metrics and its joins; it is only
+ * withheld as a direct target, which a hosted gateway needs when a caller is
+ * entitled to a metric on a dataset it may not query itself.
+ */
+queryableDatasets?: readonly string[]): CanonicalSemanticQuerySchemas;
 //# sourceMappingURL=canonical-query-schemas.d.ts.map

package/dist/tools/utils/canonical-query-schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"canonical-query-schemas.d.ts","sourceRoot":"","sources":["../../../src/tools/utils/canonical-query-schemas.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,6BAA6B,EAEnC,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AA0BtE;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,eAAe,EACzB,UAAU,CAAC,EAAE,cAAc,GAC1B,6BAA6B,CAqF/B"}
+{"version":3,"file":"canonical-query-schemas.d.ts","sourceRoot":"","sources":["../../../src/tools/utils/canonical-query-schemas.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,6BAA6B,EAEnC,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AA0BtE;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,eAAe,EACzB,UAAU,CAAC,EAAE,cAAc;AAC3B;;;;;;GAMG;AACH,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,GACpC,6BAA6B,CAqG/B"}

package/dist/tools/utils/canonical-query-schemas.js

@@ -26,8 +26,17 @@ function withLegacyDirectMetrics(datasets) {
  * type also accepts legacy metadata-only objects; retain a generic validator for
  * those compatibility inputs until the publishing API replaces them.
  */
-export function buildMCPQuerySchemas(datasets, configured) {
+export function buildMCPQuerySchemas(datasets, configured, 
+/**
+ * Datasets offered as a `query_dataset` target. Defaults to all of them.
+ *
+ * A dataset outside this list keeps its metrics and its joins; it is only
+ * withheld as a direct target, which a hosted gateway needs when a caller is
+ * entitled to a metric on a dataset it may not query itself.
+ */
+queryableDatasets) {
     const limits = resolveQueryLimits(undefined, configured);
+    const queryable = queryableDatasets === undefined ? undefined : new Set(queryableDatasets);
     const entries = Object.entries(datasets).sort(([left], [right]) => (left < right ? -1 : left > right ? 1 : 0));
     if (entries.length === 0) {
         const queryDatasetJsonSchema = toSemanticJsonSchema(queryDatasetArgsSchema);
@@ -45,7 +54,11 @@ export function buildMCPQuerySchemas(datasets, configured) {
         });
     }
     if (entries.every(([, dataset]) => isCanonicalSchemaSource(dataset))) {
-        return buildCanonicalSemanticQuerySchemas(withLegacyDirectMetrics(datasets), { grainField: 'grain', ...limits });
+        return buildCanonicalSemanticQuerySchemas(withLegacyDirectMetrics(datasets), {
+            grainField: 'grain',
+            ...limits,
+            ...(queryableDatasets === undefined ? {} : { queryableDatasets }),
+        });
     }
     const datasetSchemas = [];
     const metricSchemas = [];
@@ -54,9 +67,11 @@ export function buildMCPQuerySchemas(datasets, configured) {
     for (const [name, dataset] of entries) {
         if (isCanonicalSchemaSource(dataset)) {
             const exact = buildCanonicalSemanticQuerySchemas(withLegacyDirectMetrics({ [name]: dataset }), { grainField: 'grain', ...limits });
-            datasetSchemas.push(exact.queryDataset);
+            if (queryable === undefined || queryable.has(name)) {
+                datasetSchemas.push(exact.queryDataset);
+                datasetJsonSchemas.push(exact.queryDatasetJsonSchema);
+            }
             metricSchemas.push(exact.queryMetric);
-            datasetJsonSchemas.push(exact.queryDatasetJsonSchema);
             metricJsonSchemas.push(exact.queryMetricJsonSchema);
         }
         else {
@@ -67,16 +82,18 @@ export function buildMCPQuerySchemas(datasets, configured) {
                 dataset: z.literal(name),
                 metric: z.string().min(1),
             });
-            datasetSchemas.push(queryDataset);
+            if (queryable === undefined || queryable.has(name)) {
+                datasetSchemas.push(queryDataset);
+                datasetJsonSchemas.push(advertiseDatasetQueryLimits(toSemanticJsonSchema(queryDataset), { [name]: dataset }, configured, true));
+            }
             metricSchemas.push(queryMetric);
-            datasetJsonSchemas.push(advertiseDatasetQueryLimits(toSemanticJsonSchema(queryDataset), { [name]: dataset }, configured, true));
             metricJsonSchemas.push(advertiseDatasetQueryLimits(toSemanticJsonSchema(queryMetric), { [name]: dataset }, configured, false));
         }
     }
-    const queryDataset = unionSchemas(datasetSchemas);
-    const queryMetric = unionSchemas(metricSchemas);
-    const queryDatasetJsonSchema = unionJsonSchemas(datasetJsonSchemas);
-    const queryMetricJsonSchema = unionJsonSchemas(metricJsonSchemas);
+    const queryDataset = unionSchemas(datasetSchemas, z.object({ dataset: z.never() }).strict());
+    const queryMetric = unionSchemas(metricSchemas, z.object({ dataset: z.never(), metric: z.never() }).strict());
+    const queryDatasetJsonSchema = unionJsonSchemas(datasetJsonSchemas, toSemanticJsonSchema(queryDataset));
+    const queryMetricJsonSchema = unionJsonSchemas(metricJsonSchemas, toSemanticJsonSchema(queryMetric));
     const manifestHash = createHash('sha256').update(JSON.stringify({
         query_dataset: queryDatasetJsonSchema,
         query_metric: queryMetricJsonSchema,
@@ -96,12 +113,18 @@ function isCanonicalSchemaSource(dataset) {
     return source.__type === 'dataset'
         || ('requiresTenant' in source && 'supportedGrains' in source && 'orderableFields' in source);
 }
-function unionSchemas(schemas) {
+function unionSchemas(schemas, empty) {
+    // No variants means nothing is offered under this tool. `z.union([])` throws,
+    // and a permissive fallback would advertise every dataset instead of none.
+    if (schemas.length === 0)
+        return empty;
     return schemas.length === 1
         ? schemas[0]
         : z.union(schemas);
 }
-function unionJsonSchemas(schemas) {
+function unionJsonSchemas(schemas, empty) {
+    if (schemas.length === 0)
+        return empty;
     return schemas.length === 1
         ? schemas[0]
         : { type: 'object', anyOf: schemas };

package/dist/tools/utils/catalog-budget.d.ts

@@ -0,0 +1,16 @@
+import { type MCPCatalogBudget } from '../../types.js';
+import type { ListToolsResult } from '@modelcontextprotocol/sdk/types.js';
+export interface EffectiveCatalogBudget {
+    readonly maxTools: number;
+    readonly maxManifestBytes: number;
+}
+export declare function resolveCatalogBudget(configured?: MCPCatalogBudget): EffectiveCatalogBudget;
+/**
+ * Refuses a manifest too large to advertise, and says which ceiling it hit.
+ *
+ * Both counts are reported so a caller choosing a tool mode can tell a catalog
+ * with too many targets from one with a few enormous ones; the answers are
+ * different — fewer tools versus fewer enum members per tool.
+ */
+export declare function assertManifestWithinBudget(manifest: ListToolsResult, budget: EffectiveCatalogBudget): ListToolsResult;
+//# sourceMappingURL=catalog-budget.d.ts.map

package/dist/tools/utils/catalog-budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-budget.d.ts","sourceRoot":"","sources":["../../../src/tools/utils/catalog-budget.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,gBAAgB,EACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAE1E,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAeD,wBAAgB,oBAAoB,CAClC,UAAU,GAAE,gBAAqB,GAChC,sBAAsB,CAUxB;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,eAAe,EACzB,MAAM,EAAE,sBAAsB,GAC7B,eAAe,CAcjB"}

package/dist/tools/utils/catalog-budget.js

@@ -0,0 +1,33 @@
+import { MCPCatalogBudgetError } from '../../errors.js';
+import { DEFAULT_MANIFEST_BYTES, DEFAULT_MANIFEST_TOOLS, MAX_MANIFEST_BYTES, MAX_MANIFEST_TOOLS, } from '../../types.js';
+function ceiling(value, fallback, maximum, name) {
+    const resolved = value ?? fallback;
+    if (!Number.isSafeInteger(resolved) || resolved < 1 || resolved > maximum) {
+        throw new Error(`${name} must be an integer between 1 and ${maximum}`);
+    }
+    return resolved;
+}
+export function resolveCatalogBudget(configured = {}) {
+    return Object.freeze({
+        maxTools: ceiling(configured.maxTools, DEFAULT_MANIFEST_TOOLS, MAX_MANIFEST_TOOLS, 'maxTools'),
+        maxManifestBytes: ceiling(configured.maxManifestBytes, DEFAULT_MANIFEST_BYTES, MAX_MANIFEST_BYTES, 'maxManifestBytes'),
+    });
+}
+/**
+ * Refuses a manifest too large to advertise, and says which ceiling it hit.
+ *
+ * Both counts are reported so a caller choosing a tool mode can tell a catalog
+ * with too many targets from one with a few enormous ones; the answers are
+ * different — fewer tools versus fewer enum members per tool.
+ */
+export function assertManifestWithinBudget(manifest, budget) {
+    if (manifest.tools.length > budget.maxTools) {
+        throw new MCPCatalogBudgetError(`The tool manifest advertises ${manifest.tools.length} tools; maximum is ${budget.maxTools}`);
+    }
+    const size = Buffer.byteLength(JSON.stringify(manifest), 'utf8');
+    if (size > budget.maxManifestBytes) {
+        throw new MCPCatalogBudgetError(`The tool manifest is ${size} bytes across ${manifest.tools.length} tools; `
+            + `maximum is ${budget.maxManifestBytes} bytes`);
+    }
+    return manifest;
+}

package/dist/types.d.ts

@@ -49,6 +49,34 @@ export interface MCPExecutionBudget {
     /** Maximum UTF-8 bytes in the serialized query response. Defaults to 1 MiB. */
     maxResponseBytes?: number;
 }
+/**
+ * Ceilings on the tool manifest itself, rather than on any one call.
+ *
+ * Every other budget here bounds a query. This one bounds what a client is
+ * handed before it makes one: `query_dataset` and `query_metric` carry exact
+ * enums of every published dataset, dimension, measure, and filter field, so a
+ * large catalog produces a large manifest — paid by every client on every
+ * connection, and spent out of the model's context before a question is asked.
+ *
+ * A breach raises `MCPCatalogBudgetError`. It is not truncated: an agent shown
+ * fewer targets than the validators accept would be misled, and the manifest
+ * hash would no longer identify the catalog behind it.
+ */
+export interface MCPCatalogBudget {
+    /**
+     * Maximum tools a manifest may advertise. Defaults to 64, ceiling 256.
+     *
+     * The local server publishes a fixed four. This exists for the hosted tool
+     * modes that publish one tool per dataset or per verified metric, where the
+     * count follows the catalog and needs a stop.
+     */
+    maxTools?: number;
+    /**
+     * Maximum UTF-8 bytes in the serialized manifest. Defaults to 256 KiB,
+     * ceiling 1 MiB.
+     */
+    maxManifestBytes?: number;
+}
 /** Server-side ceilings applied in addition to Dataset limits. */
 export interface MCPQueryLimits {
     /** Rows used when a tool call omits `limit`. Defaults to 100. */
@@ -174,4 +202,8 @@ export declare const DEFAULT_QUERY_TIMEOUT_MS = 30000;
 export declare const MAX_QUERY_TIMEOUT_MS = 120000;
 export declare const DEFAULT_RESPONSE_BYTES = 1048576;
 export declare const MAX_RESPONSE_BYTES = 10485760;
+export declare const DEFAULT_MANIFEST_TOOLS = 64;
+export declare const MAX_MANIFEST_TOOLS = 256;
+export declare const DEFAULT_MANIFEST_BYTES = 262144;
+export declare const MAX_MANIFEST_BYTES = 1048576;
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EACV,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,wBAAwB,EACxB,kBAAkB,EAClB,YAAY,EACZ,SAAS,EACT,aAAa,EACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,KAAK,CAAC;AAEtC;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,eAAe,CAAC,EAAE,kBAAkB,CAAC;IACrC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,yEAAyE;IACzE,WAAW,CAAC,EAAE,UAAU,CAAC;CAC1B;AAED,6DAA6D;AAC7D,MAAM,WAAW,kBAAkB;IACjC,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,kEAAkE;AAClE,MAAM,WAAW,cAAc;IAC7B,iEAAiE;IACjE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,mEAAmE;IACnE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mDAAmD;IACnD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0CAA0C;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+CAA+C;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,qGAAqG;IACrG,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,KAAK,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAEhD;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAEpD;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAEhD;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAE9C;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAE9C;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AAE1D;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,UAAU,CAAC,EAAE;QACX,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;IACF,6CAA6C;IAC7C,KAAK,CAAC,EAAE;QACN,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAC;QAClC,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IAChC,IAAI,EAAE,eAAe,CAAC;CACvB;AAED;;GAEG;AACH,eAAO,MAAM,eAAe,QAAQ,CAAC;AACrC,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,eAAO,MAAM,gBAAgB,QAAQ,CAAC;AACtC,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC,eAAO,MAAM,iBAAiB,MAAM,CAAC;AACrC,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAC/C,eAAO,MAAM,oBAAoB,SAAU,CAAC;AAC5C,eAAO,MAAM,sBAAsB,UAAY,CAAC;AAChD,eAAO,MAAM,kBAAkB,WAAa,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EACV,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,wBAAwB,EACxB,kBAAkB,EAClB,YAAY,EACZ,SAAS,EACT,aAAa,EACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,KAAK,CAAC;AAEtC;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,eAAe,CAAC,EAAE,kBAAkB,CAAC;IACrC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,yEAAyE;IACzE,WAAW,CAAC,EAAE,UAAU,CAAC;CAC1B;AAED,6DAA6D;AAC7D,MAAM,WAAW,kBAAkB;IACjC,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,kEAAkE;AAClE,MAAM,WAAW,cAAc;IAC7B,iEAAiE;IACjE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,mEAAmE;IACnE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mDAAmD;IACnD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0CAA0C;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+CAA+C;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,qGAAqG;IACrG,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,KAAK,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAEhD;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAEpD;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAEhD;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAE9C;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAE9C;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AAE1D;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,UAAU,CAAC,EAAE;QACX,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;IACF,6CAA6C;IAC7C,KAAK,CAAC,EAAE;QACN,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAC;QAClC,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IAChC,IAAI,EAAE,eAAe,CAAC;CACvB;AAED;;GAEG;AACH,eAAO,MAAM,eAAe,QAAQ,CAAC;AACrC,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,eAAO,MAAM,gBAAgB,QAAQ,CAAC;AACtC,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC,eAAO,MAAM,iBAAiB,MAAM,CAAC;AACrC,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAC/C,eAAO,MAAM,oBAAoB,SAAU,CAAC;AAC5C,eAAO,MAAM,sBAAsB,UAAY,CAAC;AAChD,eAAO,MAAM,kBAAkB,WAAa,CAAC;AAC7C,eAAO,MAAM,sBAAsB,KAAK,CAAC;AACzC,eAAO,MAAM,kBAAkB,MAAM,CAAC;AACtC,eAAO,MAAM,sBAAsB,SAAU,CAAC;AAC9C,eAAO,MAAM,kBAAkB,UAAY,CAAC"}

package/dist/types.js

@@ -15,3 +15,7 @@ export const DEFAULT_QUERY_TIMEOUT_MS = 30_000;
 export const MAX_QUERY_TIMEOUT_MS = 120_000;
 export const DEFAULT_RESPONSE_BYTES = 1_048_576;
 export const MAX_RESPONSE_BYTES = 10_485_760;
+export const DEFAULT_MANIFEST_TOOLS = 64;
+export const MAX_MANIFEST_TOOLS = 256;
+export const DEFAULT_MANIFEST_BYTES = 262_144;
+export const MAX_MANIFEST_BYTES = 1_048_576;

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const MCP_PACKAGE_VERSION = "0.6.0";
+export declare const MCP_PACKAGE_VERSION = "0.8.0";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -2,4 +2,4 @@
 //
 // Resolved at build time rather than read from package.json at import time, so
 // importing this package touches no filesystem and survives bundling.
-export const MCP_PACKAGE_VERSION = '0.6.0';
+export const MCP_PACKAGE_VERSION = '0.8.0';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hypequery/mcp",
-  "version": "0.6.0",
+  "version": "0.8.0",
   "description": "Governed ClickHouse MCP server for semantic metrics, datasets, Claude, Cursor, and AI agents",
   "keywords": [
     "mcp",
@@ -33,7 +33,7 @@
     "dist"
   ],
   "dependencies": {
-    "@hypequery/datasets": "^0.14.0",
+    "@hypequery/datasets": "^0.16.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "zod": "^3.23.8"
   },
@@ -41,7 +41,7 @@
     "@types/node": "^20.11.30",
     "typescript": "^5.7.3",
     "vitest": "^3.2.6",
-    "@hypequery/clickhouse": "2.10.0"
+    "@hypequery/clickhouse": "2.11.0"
   },
   "repository": {
     "type": "git",