feat: lean foundry profile defaults and concise env guidance

data/palantir-mcp-inventory.csv

@@ -0,0 +1,274 @@
+category,group,name,http_method
+mcp_tool,palantir-mcp,palantir-mcp_build_datasets,
+mcp_tool,palantir-mcp,palantir-mcp_get_build_status,
+mcp_tool,palantir-mcp,palantir-mcp_search_dataset_builds,
+mcp_tool,palantir-mcp,palantir-mcp_get_job_status,
+mcp_tool,palantir-mcp,palantir-mcp_get_foundry_ontology_rid,
+mcp_tool,palantir-mcp,palantir-mcp_search_foundry_ontology,
+mcp_tool,palantir-mcp,palantir-mcp_search_foundry_functions,
+mcp_tool,palantir-mcp,palantir-mcp_view_foundry_object_type,
+mcp_tool,palantir-mcp,palantir-mcp_view_foundry_action_type,
+mcp_tool,palantir-mcp,palantir-mcp_get_ontology_sdk_context,
+mcp_tool,palantir-mcp,palantir-mcp_get_ontology_sdk_examples,
+mcp_tool,palantir-mcp,palantir-mcp_list_platform_sdk_apis,
+mcp_tool,palantir-mcp,palantir-mcp_get_platform_sdk_api_reference,
+mcp_tool,palantir-mcp,palantir-mcp_list_resources_in_foundry_folder,
+mcp_tool,palantir-mcp,palantir-mcp_get_project_imports,
+mcp_tool,palantir-mcp,palantir-mcp_create_and_write_to_foundry_dataset,
+mcp_tool,palantir-mcp,palantir-mcp_get_foundry_dataset_schema,
+mcp_tool,palantir-mcp,palantir-mcp_create_foundry_rest_api_data_source,
+mcp_tool,palantir-mcp,palantir-mcp_get_or_create_network_egress_policy,
+mcp_tool,palantir-mcp,palantir-mcp_get_resource_graph,
+mcp_tool,palantir-mcp,palantir-mcp_query_ontology_objects,
+mcp_tool,palantir-mcp,palantir-mcp_aggregate_ontology_objects,
+mcp_tool,palantir-mcp,palantir-mcp_get_repository_context,
+mcp_tool,palantir-mcp,palantir-mcp_create_foundry_branch,
+mcp_tool,palantir-mcp,palantir-mcp_create_foundry_proposal,
+mcp_tool,palantir-mcp,palantir-mcp_generate_new_ontology_sdk_version,
+mcp_tool,palantir-mcp,palantir-mcp_get_python_transforms_documentation,
+mcp_tool,palantir-mcp,palantir-mcp_get_ml_documentation,
+mcp_tool,palantir-mcp,palantir-mcp_get_typescript_v1_functions_documentation,
+mcp_tool,palantir-mcp,palantir-mcp_get_typescript_v2_functions_documentation,
+mcp_tool,palantir-mcp,palantir-mcp_get_custom_widget_documentation,
+mcp_tool,palantir-mcp,palantir-mcp_get_compute_modules_documentation,
+mcp_tool,palantir-mcp,palantir-mcp_search_foundry_documentation,
+mcp_tool,palantir-mcp,palantir-mcp_clone_code_repository_locally,
+mcp_tool,palantir-mcp,palantir-mcp_close_foundry_branch,
+mcp_tool,palantir-mcp,palantir-mcp_close_foundry_proposal,
+mcp_tool,palantir-mcp,palantir-mcp_connect_to_dev_console_app,
+mcp_tool,palantir-mcp,palantir-mcp_convert_to_osdk_react,
+mcp_tool,palantir-mcp,palantir-mcp_create_code_repository_pull_request,
+mcp_tool,palantir-mcp,palantir-mcp_create_foundry_rest_api_data_source_webhook,
+mcp_tool,palantir-mcp,palantir-mcp_create_or_update_foundry_link_type,
+mcp_tool,palantir-mcp,palantir-mcp_create_or_update_foundry_object_type,
+mcp_tool,palantir-mcp,palantir-mcp_create_python_transforms_code_repository,
+mcp_tool,palantir-mcp,palantir-mcp_delete_foundry_link_type,
+mcp_tool,palantir-mcp,palantir-mcp_delete_foundry_object_type,
+mcp_tool,palantir-mcp,palantir-mcp_install_sdk_package,
+mcp_tool,palantir-mcp,palantir-mcp_run_sql_query_on_foundry_dataset,
+mcp_tool,palantir-mcp,palantir-mcp_view_foundry_branch,
+mcp_tool,palantir-mcp,palantir-mcp_view_foundry_link_type,
+mcp_tool,palantir-mcp,palantir-mcp_view_foundry_proposal,
+mcp_tool,palantir-mcp,palantir-mcp_view_osdk_definition,
+platform_api,aipAgents,aipAgentsListSessionsForAgents,get
+platform_api,aipAgents,aipAgentsGetAgent,get
+platform_api,aipAgents,aipAgentsListAgentVersions,get
+platform_api,aipAgents,aipAgentsGetAgentVersion,get
+platform_api,aipAgents,aipAgentsListSessions,get
+platform_api,aipAgents,aipAgentsCreateSession,post
+platform_api,aipAgents,aipAgentsGetSession,get
+platform_api,aipAgents,aipAgentsDeleteSession,delete
+platform_api,aipAgents,aipAgentsBlockingContinueSession,post
+platform_api,aipAgents,aipAgentsCancelSession,post
+platform_api,aipAgents,aipAgentsGetContent,get
+platform_api,aipAgents,aipAgentsGetRagContextForSession,put
+platform_api,aipAgents,aipAgentsGetSessionTrace,get
+platform_api,aipAgents,aipAgentsStreamingContinueSession,post
+platform_api,aipAgents,aipAgentsUpdateSessionTitle,put
+platform_api,admin,adminListAuthenticationProviders,get
+platform_api,admin,adminGetAuthenticationProvider,get
+platform_api,admin,adminPreregisterGroup,post
+platform_api,admin,adminPreregisterUser,post
+platform_api,admin,adminListGroups,get
+platform_api,admin,adminCreateGroup,post
+platform_api,admin,adminGetGroupsBatch,post
+platform_api,admin,adminSearchGroups,post
+platform_api,admin,adminGetGroup,get
+platform_api,admin,adminDeleteGroup,delete
+platform_api,admin,adminListGroupMembers,get
+platform_api,admin,adminAddGroupMembers,post
+platform_api,admin,adminRemoveGroupMembers,post
+platform_api,admin,adminGetGroupMembershipExpirationPolicy,get
+platform_api,admin,adminReplaceGroupMembershipExpirationPolicy,put
+platform_api,admin,adminGetGroupProviderInfo,get
+platform_api,admin,adminReplaceGroupProviderInfo,put
+platform_api,admin,adminListMarkingCategories,get
+platform_api,admin,adminGetMarkingCategory,get
+platform_api,admin,adminListMarkings,get
+platform_api,admin,adminCreateMarking,post
+platform_api,admin,adminGetMarkingsBatch,post
+platform_api,admin,adminGetMarking,get
+platform_api,admin,adminReplaceMarking,put
+platform_api,admin,adminListMarkingMembers,get
+platform_api,admin,adminAddMarkingMembers,post
+platform_api,admin,adminRemoveMarkingMembers,post
+platform_api,admin,adminListMarkingRoleAssignments,get
+platform_api,admin,adminAddMarkingRoleAssignments,post
+platform_api,admin,adminRemoveMarkingRoleAssignments,post
+platform_api,admin,adminGetOrganization,get
+platform_api,admin,adminReplaceOrganization,put
+platform_api,admin,adminListAvailableRolesOrganization,get
+platform_api,admin,adminListOrganizationRoleAssignments,get
+platform_api,admin,adminAddOrganizationRoleAssignments,post
+platform_api,admin,adminRemoveOrganizationRoleAssignments,post
+platform_api,admin,adminListUsers,get
+platform_api,admin,adminGetUsersBatch,post
+platform_api,admin,adminGetCurrentUser,get
+platform_api,admin,adminSearchUsers,post
+platform_api,admin,adminGetUser,get
+platform_api,admin,adminDeleteUser,delete
+platform_api,admin,adminGetMarkingsUser,get
+platform_api,admin,adminListGroupMemberships,get
+platform_api,admin,adminGetProfilePictureOfUser,get
+platform_api,admin,adminGetUserProviderInfo,get
+platform_api,admin,adminReplaceUserProviderInfo,put
+platform_api,admin,adminRevokeAllTokensUser,post
+platform_api,connectivity,connectivityCreateConnection,post
+platform_api,connectivity,connectivityGetConfigurationConnectionsBatch,post
+platform_api,connectivity,connectivityGetConnection,get
+platform_api,connectivity,connectivityListFileImports,get
+platform_api,connectivity,connectivityCreateFileImport,post
+platform_api,connectivity,connectivityGetFileImport,get
+platform_api,connectivity,connectivityReplaceFileImport,put
+platform_api,connectivity,connectivityDeleteFileImport,delete
+platform_api,connectivity,connectivityExecuteFileImport,post
+platform_api,connectivity,connectivityGetConfiguration,get
+platform_api,connectivity,connectivityListTableImports,get
+platform_api,connectivity,connectivityCreateTableImport,post
+platform_api,connectivity,connectivityGetTableImport,get
+platform_api,connectivity,connectivityReplaceTableImport,put
+platform_api,connectivity,connectivityDeleteTableImport,delete
+platform_api,connectivity,connectivityExecuteTableImport,post
+platform_api,connectivity,connectivityUpdateExportSettingsForConnection,post
+platform_api,connectivity,connectivityUpdateSecretsForConnection,post
+platform_api,connectivity,connectivityUploadCustomJdbcDriversConnection,post
+platform_api,connectivity,connectivityCreateVirtualTable,post
+platform_api,datasets,datasetsCreateDataset,post
+platform_api,datasets,datasetsGetSchemaDatasetsBatch,post
+platform_api,datasets,datasetsCreateView,post
+platform_api,datasets,datasetsGetView,get
+platform_api,datasets,datasetsAddBackingDatasets,post
+platform_api,datasets,datasetsAddPrimaryKey,post
+platform_api,datasets,datasetsRemoveBackingDatasets,post
+platform_api,datasets,datasetsReplaceBackingDatasets,put
+platform_api,datasets,datasetsGetDataset,get
+platform_api,datasets,datasetsListBranches,get
+platform_api,datasets,datasetsCreateBranch,post
+platform_api,datasets,datasetsGetBranch,get
+platform_api,datasets,datasetsDeleteBranch,delete
+platform_api,datasets,datasetsGetBranchTransactionHistory,get
+platform_api,datasets,datasetsListFiles,get
+platform_api,datasets,datasetsGetFile,get
+platform_api,datasets,datasetsDeleteFile,delete
+platform_api,datasets,datasetsGetFileContent,get
+platform_api,datasets,datasetsUploadFile,post
+platform_api,datasets,datasetsGetDatasetHealthCheckReports,get
+platform_api,datasets,datasetsGetDatasetHealthChecks,get
+platform_api,datasets,datasetsGetDatasetSchedules,get
+platform_api,datasets,datasetsGetDatasetSchema,get
+platform_api,datasets,datasetsGetDatasetJobs,post
+platform_api,datasets,datasetsPutDatasetSchema,put
+platform_api,datasets,datasetsReadTableDataset,get
+platform_api,datasets,datasetsListTransactionsOfDataset,get
+platform_api,datasets,datasetsCreateTransaction,post
+platform_api,datasets,datasetsGetTransaction,get
+platform_api,datasets,datasetsAbortTransaction,post
+platform_api,datasets,datasetsCommitTransaction,post
+platform_api,filesystem,filesystemCreateFolder,post
+platform_api,filesystem,filesystemGetFoldersBatch,post
+platform_api,filesystem,filesystemGetFolder,get
+platform_api,filesystem,filesystemListChildrenOfFolder,get
+platform_api,filesystem,filesystemCreateProject,post
+platform_api,filesystem,filesystemCreateProjectFromTemplate,post
+platform_api,filesystem,filesystemGetProject,get
+platform_api,filesystem,filesystemAddOrganizations,post
+platform_api,filesystem,filesystemListOrganizationsOfProject,get
+platform_api,filesystem,filesystemRemoveOrganizations,post
+platform_api,filesystem,filesystemGetResourcesBatch,post
+platform_api,filesystem,filesystemGetByPath,get
+platform_api,filesystem,filesystemGetByPathResourcesBatch,post
+platform_api,filesystem,filesystemGetResource,get
+platform_api,filesystem,filesystemDeleteResource,delete
+platform_api,filesystem,filesystemAddMarkings,post
+platform_api,filesystem,filesystemGetAccessRequirements,get
+platform_api,filesystem,filesystemListMarkingsOfResource,get
+platform_api,filesystem,filesystemPermanentlyDeleteResource,post
+platform_api,filesystem,filesystemRemoveMarkings,post
+platform_api,filesystem,filesystemRestoreResource,post
+platform_api,filesystem,filesystemListResourceRoles,get
+platform_api,filesystem,filesystemAddResourceRoles,post
+platform_api,filesystem,filesystemRemoveResourceRoles,post
+platform_api,filesystem,filesystemListSpaces,get
+platform_api,mediaSets,mediaSetsUploadMedia,put
+platform_api,mediaSets,mediaSetsPutMediaItem,post
+platform_api,mediaSets,mediaSetsGetMediaItemRidByPath,get
+platform_api,mediaSets,mediaSetsGetMediaItemInfo,get
+platform_api,mediaSets,mediaSetsReadMediaItem,get
+platform_api,mediaSets,mediaSetsGetMediaItemMetadata,get
+platform_api,mediaSets,mediaSetsReadOriginalMediaItem,get
+platform_api,mediaSets,mediaSetsGetMediaItemReference,get
+platform_api,mediaSets,mediaSetsCreateMediaTransaction,post
+platform_api,mediaSets,mediaSetsAbortMediaTransaction,post
+platform_api,mediaSets,mediaSetsCommitMediaTransaction,post
+platform_api,ontologies,ontologiesListOntologiesV2,get
+platform_api,ontologies,ontologiesUploadAttachmentV2,post
+platform_api,ontologies,ontologiesGetAttachmentV2,get
+platform_api,ontologies,ontologiesGetAttachmentContentV2,get
+platform_api,ontologies,ontologiesGetOntologyV2,get
+platform_api,ontologies,ontologiesListActionTypesV2,get
+platform_api,ontologies,ontologiesGetActionTypeByRid,get
+platform_api,ontologies,ontologiesGetActionTypeV2,get
+platform_api,ontologies,ontologiesApplyActionV2,post
+platform_api,ontologies,ontologiesApplyActionBatchV2,post
+platform_api,ontologies,ontologiesGetOntologyFullMetadata,get
+platform_api,ontologies,ontologiesListInterfaceTypes,get
+platform_api,ontologies,ontologiesGetInterfaceType,get
+platform_api,ontologies,ontologiesAggregateObjectSetV2,post
+platform_api,ontologies,ontologiesCreateTemporaryObjectSetV2,post
+platform_api,ontologies,ontologiesLoadObjectSetV2,post
+platform_api,ontologies,ontologiesLoadObjectSetV2MultipleObjectTypes,post
+platform_api,ontologies,ontologiesLoadObjectSetV2ObjectsOrInterfaces,post
+platform_api,ontologies,ontologiesListObjectTypesV2,get
+platform_api,ontologies,ontologiesGetObjectTypeV2,get
+platform_api,ontologies,ontologiesUploadMediaContent,post
+platform_api,ontologies,ontologiesListOutgoingLinkTypesV2,get
+platform_api,ontologies,ontologiesGetOutgoingLinkTypeV2,get
+platform_api,ontologies,ontologiesListObjectsV2,get
+platform_api,ontologies,ontologiesAggregateObjectsV2,post
+platform_api,ontologies,ontologiesSearchObjectsV2,post
+platform_api,ontologies,ontologiesGetObjectV2,get
+platform_api,ontologies,ontologiesListPropertyAttachments,get
+platform_api,ontologies,ontologiesGetAttachmentPropertyContentV2,get
+platform_api,ontologies,ontologiesGetAttachmentPropertyByRidV2,get
+platform_api,ontologies,ontologiesGetAttachmentPropertyContentByRidV2,get
+platform_api,ontologies,ontologiesDecrypt,get
+platform_api,ontologies,ontologiesListLinkedObjectsV2,get
+platform_api,ontologies,ontologiesGetLinkedObjectV2,get
+platform_api,ontologies,ontologiesReadMediaContent,get
+platform_api,ontologies,ontologiesGetLatestValue,get
+platform_api,ontologies,ontologiesGetFirstPoint,get
+platform_api,ontologies,ontologiesGetLastPoint,get
+platform_api,ontologies,ontologiesStreamPoints,post
+platform_api,ontologies,ontologiesStreamValues,post
+platform_api,ontologies,ontologiesExecuteQueryV2,post
+platform_api,ontologies,ontologiesListQueryTypesV2,get
+platform_api,ontologies,ontologiesGetQueryTypeV2,get
+platform_api,ontologies,ontologiesListOntologyValueTypes,get
+platform_api,ontologies,ontologiesGetOntologyValueType,get
+platform_api,orchestration,orchestrationCreateBuild,post
+platform_api,orchestration,orchestrationGetBuildsBatch,post
+platform_api,orchestration,orchestrationGetBuild,get
+platform_api,orchestration,orchestrationCancelBuild,post
+platform_api,orchestration,orchestrationListJobsOfBuild,get
+platform_api,orchestration,orchestrationGetJobsBatch,post
+platform_api,orchestration,orchestrationGetJob,get
+platform_api,orchestration,orchestrationGetScheduleVersion,get
+platform_api,orchestration,orchestrationGetScheduleOfScheduleVersion,get
+platform_api,orchestration,orchestrationCreateSchedule,post
+platform_api,orchestration,orchestrationGetSchedulesBatch,post
+platform_api,orchestration,orchestrationGetSchedule,get
+platform_api,orchestration,orchestrationReplaceSchedule,put
+platform_api,orchestration,orchestrationDeleteSchedule,delete
+platform_api,orchestration,orchestrationGetAffectedResourcesSchedule,post
+platform_api,orchestration,orchestrationPauseSchedule,post
+platform_api,orchestration,orchestrationRunSchedule,post
+platform_api,orchestration,orchestrationListRunsOfSchedule,get
+platform_api,orchestration,orchestrationUnpauseSchedule,post
+platform_api,sqlQueries,sqlQueriesExecuteSqlQuery,post
+platform_api,sqlQueries,sqlQueriesCancelSqlQuery,post
+platform_api,sqlQueries,sqlQueriesGetResultsSqlQuery,get
+platform_api,sqlQueries,sqlQueriesGetStatusSqlQuery,get
+platform_api,streams,streamsCreateStreamingDataset,post
+platform_api,streams,streamsCreateStream,post
+platform_api,streams,streamsGetStream,get
+platform_api,streams,streamsResetStream,post

package.json

@@ -29,26 +29,26 @@
   ],
   "private": false,
   "peerDependencies": {
-    "@opencode-ai/plugin": "^1.1.51"
+    "@opencode-ai/plugin": "^1.2.6"
   },
   "devDependencies": {
-    "@opencode-ai/plugin": "1.1.51",
-    "@eslint/js": "^9.39.1",
-    "@types/node": "^20.11.5",
-    "@typescript-eslint/eslint-plugin": "8.47.0",
-    "@typescript-eslint/parser": "8.47.0",
-    "bun-types": "latest",
-    "eslint": "^9.39.1",
+    "@eslint/js": "10.0.1",
+    "@opencode-ai/plugin": "1.2.6",
+    "@types/node": "25.2.3",
+    "@typescript-eslint/eslint-plugin": "8.56.0",
+    "@typescript-eslint/parser": "8.56.0",
+    "bun-types": "1.3.9",
+    "eslint": "10.0.0",
     "eslint-config-prettier": "10.1.8",
     "eslint-plugin-prettier": "^5.1.3",
     "hyparquet-writer": "^0.12.0",
     "prettier": "^3.2.4",
-    "typescript-eslint": "^8.47.0",
-    "vitest": "^3.2.4"
+    "typescript-eslint": "^8.56.0",
+    "vitest": "4.0.18"
   },
   "dependencies": {
     "cborg": "^4.5.8",
-    "hyparquet": "^1.24.1",
+    "hyparquet": "^1.25.0",
     "jsonc-parser": "^3.3.1"
   }
 }

src/__tests__/allowlist.test.ts

@@ -0,0 +1,24 @@
+import { describe, expect, it } from 'vitest';
+
+import { computeAllowedTools } from '../palantir-mcp/allowlist.ts';
+
+describe('computeAllowedTools', () => {
+  it('uses default-enable with explicit deny rules and role separation', () => {
+    const result = computeAllowedTools('default', [
+      'list_datasets',
+      'create_thing',
+      'search_foundry_documentation',
+      'custom_probe',
+    ]);
+
+    expect(result.librarianAllow.has('list_datasets')).toBe(true);
+    expect(result.librarianAllow.has('search_foundry_documentation')).toBe(true);
+    expect(result.librarianAllow.has('custom_probe')).toBe(true);
+    expect(result.librarianAllow.has('create_thing')).toBe(false);
+
+    expect(result.foundryAllow.has('list_datasets')).toBe(true);
+    expect(result.foundryAllow.has('custom_probe')).toBe(true);
+    expect(result.foundryAllow.has('create_thing')).toBe(true);
+    expect(result.foundryAllow.has('search_foundry_documentation')).toBe(false);
+  });
+});

src/__tests__/autoBootstrap.test.ts

@@ -13,6 +13,7 @@ type McpServerConfig = {
 };
 
 type AgentConfig = {
+  mode?: string;
   tools?: Record<string, unknown>;
 };
 
@@ -78,10 +79,13 @@ describe('autoBootstrapPalantirMcpIfConfigured', () => {
 
     expect(cfg.agent?.['foundry-librarian']).toBeTruthy();
     expect(cfg.agent?.foundry).toBeTruthy();
+    expect(cfg.agent?.['foundry-librarian']?.mode).toBe('subagent');
+    expect(cfg.agent?.foundry?.mode).toBe('all');
 
     expect(cfg.agent?.['foundry-librarian']?.tools?.['palantir-mcp_list_datasets']).toBe(true);
     expect(cfg.agent?.['foundry-librarian']?.tools?.['palantir-mcp_get_dataset']).toBe(true);
     expect(cfg.agent?.['foundry-librarian']?.tools?.['palantir-mcp_create_thing']).toBe(false);
+    expect(cfg.agent?.foundry?.tools?.['palantir-mcp_create_thing']).toBe(true);
   });
 
   it('is idempotent for repeated runs', async () => {

src/__tests__/configHook.test.ts

@@ -50,9 +50,17 @@ describe('plugin config hook', () => {
     expect(cfg.command?.['refresh-docs-rescrape']?.template).toBeTruthy();
     expect(cfg.command?.['setup-palantir-mcp']?.template).toBeTruthy();
     expect(cfg.command?.['rescan-palantir-mcp-tools']?.template).toBeTruthy();
+    expect(cfg.command?.['setup-palantir-mcp']?.description).toContain(
+      'Missing env: FOUNDRY_URL, FOUNDRY_TOKEN'
+    );
+    expect(cfg.command?.['rescan-palantir-mcp-tools']?.description).toContain(
+      'Missing env: FOUNDRY_TOKEN'
+    );
 
     expect(cfg.agent?.['foundry-librarian']).toBeTruthy();
     expect(cfg.agent?.foundry).toBeTruthy();
+    expect(cfg.agent?.['foundry-librarian']?.mode).toBe('subagent');
+    expect(cfg.agent?.foundry?.mode).toBe('all');
     expect(ensureDocsSpy).toHaveBeenCalledWith(
       expect.objectContaining({
         dbPath: path.join(tmpDir, 'data', 'docs.parquet'),