feat: render_map_tool — single visualization primitive (server-side refs)

CHANGELOG.md

@@ -1,5 +1,33 @@
 ## Unreleased
 
+### New Features
+
+- **`render_map_tool` — single visualization primitive** for Mapbox MCP. Takes
+  a `MapAppPayload` and displays a live Mapbox GL JS map. All other geo
+  tools (directions, isochrone, optimization, search, map-matching,
+  ground-location, polygon-ops) return a ready-to-render `_mapApp` payload
+  on their `structuredContent`; the LLM passes it to `render_map_tool` to
+  show a map. This is the only tool that declares `_meta.ui.resourceUri`,
+  so MCP App hosts (which only fully render the iframe for the last tool
+  in a chained sequence) always render successfully — the visualization
+  step is terminal by design.
+- **`MapAppPayload` schema** (`src/utils/mapAppPayload.ts`) — the wire
+  format between data tools and `render_map_tool`. Thin pass-through over
+  Mapbox Style spec `paint`/`layout` objects so any layer/marker/legend
+  combination expressible in GL JS is expressible in the payload.
+- **Per-tool payload builders** — `buildDirectionsMapPayload`,
+  `buildIsochroneMapPayload`, `buildOptimizationMapPayload`,
+  `buildSearchMapPayload`, `buildMapMatchingPayload`,
+  `buildGroundLocationPayload`, `buildPolygonOpsMapPayload`. Each is a
+  pure function over its tool's response: ~20-80 lines, no HTML, no
+  iframe wiring.
+- **Shared `renderMapAppHtml`** (`src/resources/ui-apps/mapAppHtml.ts`) —
+  one ~330-line iframe template that consumes any `MapAppPayload`. Used
+  by both the MCP Apps resource (`MapAppUIResource`) and any client that
+  wants to bake initial data in.
+- **Polyline decoding moves tool-side** via `decodePolyline` /
+  `decodePolylineWithFallback` so the iframe only ever receives GeoJSON.
+
 ### Security
 
 - chore: upgrade @opentelemetry/\* packages to latest (fixes protobufjs GHSA-xq3m-2v4x-88gg critical CVE) (#183)

package.json

@@ -76,7 +76,6 @@
     "mcp"
   ],
   "dependencies": {
-    "@mcp-ui/server": "^6.1.0",
     "@modelcontextprotocol/ext-apps": "^1.1.1",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@opentelemetry/api": "^1.9.1",