[GirelliG-it]

Summary

• Add closed CKAN search modes and preserve their enum types through profile contract, configuration, resolution, and tool construction.
• Retain CBS StatLine OData v3 and add the official data.overheid.nl CKAN v3 route at /data/api/3; neither catalog requires an API key.
• Use bounded local resource-metadata filtering for data.overheid.nl instead of its incompatible literal CKAN CSV filter.
• Reject unsupported OpenDataSoft configuration and keep the Dutch profile manual_only.

Safety and behavior

• Local-metadata search inspects at most twice the requested result count and admits only explicit, internally consistent plain-CSV metadata with a nonblank URL.
• The existing loader policy remains authoritative before guarded retrieval or DuckDB inspection.
• Query-driven URLs without .csv path evidence remain report-only.
• Existing server-literal CKAN selection behavior and shared run-deadline accounting are preserved.
• Persistent loading still requires the existing explicit authorization boundary.

Validation

• ruff check .
• ruff format --check .
• pytest -p no:cacheprovider -q -m "not integration" — 1,107 passed
• All pre-commit hooks passed.

A bounded compatibility audit made three metadata requests and examined 18 package observations, 17 unique packages, and 57 resources. It found five packages with loader-compatible CSV resources and no ordering traps within the audited sample.

A controlled RDW CSV retrieval completed within a 32 MiB ceiling with zero redirects and temporary-file cleanup. Deterministic inspection verified 6,650 non-empty rows across seven columns.

Remaining limitations

• The Dutch profile remains manual_only.
• Query-only CSV URLs remain report-only even when catalog metadata declares CSV.
• The compatibility audit is bounded rather than catalog-wide.
• Persistent DuckDB loading was not performed.