[openapi-mcp S4] Projection domain module

[rickylabs]

Summary

Adds the pure OpenAPI projection kernel for @netscript/mcp: deterministic operation indexing, refusal-first canonical identity, the description ladder, and response-derived schema views. The implementation is proof-locked to the committed no-database OpenAPI measurement, including its exact empty error view.

Scope

• Archetype / area: Archetype 2 pure domain slice · packages/mcp · tooling
• Part of Epic: OpenAPI→MCP service introspection — agent-legible service APIs #1126
• Issue: [openapi-mcp S4] Projection domain module: index, canonical identity, ladder, error views #1130
• Closes [openapi-mcp S4] Projection domain module: index, canonical identity, ladder, error views #1130

Slices

• S0 lock the proof-consumed harness plan — 991d9c55b
• S1 publish the operation-index contract — 7f9659074
• S2 enforce canonical identity and ambiguity refusal — fe5292bd9, tightened in 563201a33
• S3 prove all description-ladder rungs with the real generated spec — 8beeebcb3
• S4 derive declared schema views with an exact empty no-DB errors view — 563201a33
• S5 record full Archetype-2, JSR, and package validation evidence — 34527e88f
• S6 complete independent evaluation and refresh the generated publish manifest — 79d1510bc, 0094071a9
• S7 park and remove the undeclared command-surface regroup from the lane diff — 282319280

Acceptance Evidence

issue: 1130
entries:
  - box-index: 1
    evidence: "packages/mcp/tests/description-ladder_test.ts; packages/mcp/tests/fixtures/openapi/no-db-generated-openapi.json; https://github.com/rickylabs/netscript/pull/1195#issuecomment-5172614906"
  - box-index: 2
    evidence: "packages/mcp/tests/canonical-identity_test.ts; packages/mcp/tests/fixtures/openapi/identity-ambiguity.json; https://github.com/rickylabs/netscript/pull/1195#issuecomment-5172661538"
  - box-index: 3
    evidence: "packages/mcp/tests/schema-views_test.ts; packages/mcp/tests/fixtures/openapi/no-db-generated-openapi.json; https://github.com/rickylabs/netscript/pull/1195#issuecomment-5172661538"

Validation

• package deno task test — PASS, 78 passed / 0 failed
• scoped check — PASS, 77 files / 0 diagnostics
• scoped lint with package config — PASS, 77 files / 0 findings
• scoped format on the changed projection TypeScript surface — PASS, 9 files / 0 findings; the package-wide wrapper sees only the restored baseline mod.ts line
• deno task quality:gate — PASS
• deno task doc:lint --root packages/mcp --pretty — PASS, 0 diagnostics across 3 entrypoints
• structured JSR audit — PASS with only the pre-existing flows-cardinality warning and known dry-run banner overcount
• package deno task publish:dry-run — PASS
• deno task check:publish-assets — PASS after regenerating the MCP manifest for the new subpath
• current review-thread gate — PASS, 0 threads / 0 unanswered
• independent OpenHands IMPL-EVAL — PASS
• raw deno.lock diff — empty

Harness

• Run dir: .llm/runs/feat-openapi-mcp-projection-domain--w2/
• Phase: orchestrator pre-merge handoff — PLAN-EVAL is composed per milestone-run.md under the orchestrator waiver.
• Composed evaluation: Augment was unavailable due to account credits; independent OpenHands passed with no substitute blocker; the orchestrator retains the pre-merge ruling.

Drift / Debt

• Authorized process drift: local formal PLAN-EVAL is replaced by the milestone composed path.
• Stage-D scope correction: the exact pre-correction head is parked on feat/mcp-command-policy-parked; every command file and consumer is restored to the PR base, with no projection dependency.
• Test-only task permission was corrected for existing temp-directory tests.
• Scoped lint/fmt used the package config after the root workspace config failed to parse under Deno 2.9.3.
• The first OpenHands run failed before verdict on an unprefixed model id; one provider-prefixed retry passed.
• Existing MCP-A6-V2-SHAPE debt is untouched; no new debt is introduced.

Definition of Done

• Branch name and labels follow the taxonomy, including exactly one status: label and milestone 0.0.5.
• All three issue acceptance gates have linked fixture/test evidence.
• The new public subpath is documented and full-export doc-lint is clean.
• Required scoped check/lint/fmt, package tests, quality:gate, JSR audit, and publish dry-run pass.
• Composed implementation evaluation and current review-thread gate pass.
• No breaking change, lock-file churn, lint ignore, quality allowance, or unrelated source churn is introduced.