@ansvar/singapore-law-mcp 1.1.0

package/LICENSE

@@ -0,0 +1,110 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work.
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to the Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner.
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by the Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work; and
+
+      (d) If the Work includes a "NOTICE" text file, You must include
+          a readable copy of the attribution notices contained
+          within such NOTICE file.
+
+   5. Submission of Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor.
+
+   7. Disclaimer of Warranty.
+
+   8. Limitation of Liability.
+
+   9. Accepting Warranty or Additional Liability.
+
+   Copyright 2024 Ansvar Systems AB
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,359 @@
+# Singapore Law MCP Server
+
+**The SSO alternative for the AI age.**
+
+[![npm version](https://badge.fury.io/js/%40ansvar/singapore-law-mcp.svg)](https://www.npmjs.com/package/@ansvar/singapore-law-mcp)
+[![MCP Registry](https://img.shields.io/badge/MCP-Registry-blue)](https://registry.modelcontextprotocol.io)
+[![License](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
+[![GitHub stars](https://img.shields.io/github/stars/Ansvar-Systems/Singapore-law-mcp?style=social)](https://github.com/Ansvar-Systems/Singapore-law-mcp)
+[![CI](https://github.com/Ansvar-Systems/Singapore-law-mcp/actions/workflows/ci.yml/badge.svg)](https://github.com/Ansvar-Systems/Singapore-law-mcp/actions/workflows/ci.yml)
+
+Query **Singapore legislation** -- covering data protection, cybersecurity, corporate law, and more -- directly from Claude, Cursor, or any MCP-compatible client.
+
+If you're building legal tech, compliance tools, or doing Singapore legal research, this is your verified reference database.
+
+Built by [Ansvar Systems](https://ansvar.eu) -- Stockholm, Sweden
+
+---
+
+## Why This Exists
+
+Singapore legal research is scattered across official government databases, commercial legal platforms, and institutional archives. Whether you're:
+- A **lawyer** validating citations in a brief or contract
+- A **compliance officer** checking if a statute is still in force
+- A **legal tech developer** building tools on Singapore law
+- A **researcher** tracing legislative history
+
+...you shouldn't need dozens of browser tabs and manual PDF cross-referencing. Ask Claude. Get the exact provision. With context.
+
+This MCP server makes Singapore law **searchable, cross-referenceable, and AI-readable**.
+
+---
+
+## Quick Start
+
+### Use Remotely (No Install Needed)
+
+> Connect directly to the hosted version -- zero dependencies, nothing to install.
+
+**Endpoint:** `https://singapore-law-mcp.vercel.app/mcp`
+
+| Client | How to Connect |
+|--------|---------------|
+| **Claude.ai** | Settings > Connectors > Add Integration > paste URL |
+| **Claude Code** | `claude mcp add singapore-law --transport http https://singapore-law-mcp.vercel.app/mcp` |
+| **Claude Desktop** | Add to config (see below) |
+| **GitHub Copilot** | Add to VS Code settings (see below) |
+
+**Claude Desktop** -- add to `claude_desktop_config.json`:
+
+```json
+{
+  "mcpServers": {
+    "singapore-law": {
+      "type": "url",
+      "url": "https://singapore-law-mcp.vercel.app/mcp"
+    }
+  }
+}
+```
+
+**GitHub Copilot** -- add to VS Code `settings.json`:
+
+```json
+{
+  "github.copilot.chat.mcp.servers": {
+    "singapore-law": {
+      "type": "http",
+      "url": "https://singapore-law-mcp.vercel.app/mcp"
+    }
+  }
+}
+```
+
+### Use Locally (npm)
+
+```bash
+npx @ansvar/singapore-law-mcp
+```
+
+**Claude Desktop** -- add to `claude_desktop_config.json`:
+
+**macOS:** `~/Library/Application Support/Claude/claude_desktop_config.json`
+**Windows:** `%APPDATA%\Claude\claude_desktop_config.json`
+
+```json
+{
+  "mcpServers": {
+    "singapore-law": {
+      "command": "npx",
+      "args": ["-y", "@ansvar/singapore-law-mcp"]
+    }
+  }
+}
+```
+
+**Cursor / VS Code:**
+
+```json
+{
+  "mcp.servers": {
+    "singapore-law": {
+      "command": "npx",
+      "args": ["-y", "@ansvar/singapore-law-mcp"]
+    }
+  }
+}
+```
+
+---
+
+## Example Queries
+
+Once connected, just ask naturally:
+
+- *"What does the Singapore data protection law say about consent?"*
+- *"Search for cybersecurity requirements in Singapore legislation"*
+- *"Is this statute still in force?"*
+- *"Find provisions about personal data in Singapore law"*
+- *"What EU directives does this Singapore law implement?"*
+- *"Which Singapore laws implement the GDPR?"*
+- *"Validate this legal citation"*
+- *"Build a legal stance on data breach notification requirements"*
+
+---
+
+## Key Legislation Covered
+
+| Act | Year | Significance |
+|-----|------|-------------|
+| **Personal Data Protection Act (PDPA)** | 2012 (amended 2020) | Comprehensive data protection law; mandatory data breach notification since 1 February 2021; significant fines up to S$1 million per breach |
+| **Cybersecurity Act** | 2018 | Framework for protection of Critical Information Infrastructure (CII); establishes the Cyber Security Agency (CSA) |
+| **Computer Misuse Act** | 1993 (amended) | Criminalises unauthorised access to computer material, computer service, and cyberattacks |
+| **Electronic Transactions Act** | 2010 | Legal recognition of electronic records and electronic signatures |
+| **Companies Act** | 1967 (revised) | Corporate governance, registration, directors' duties |
+| **Spam Control Act** | 2007 | Regulation of unsolicited commercial electronic messages |
+| **Constitution of the Republic of Singapore** | 1963 | Supreme law; Article 9 protects liberty of the person |
+
+---
+
+## Deployment Tier
+
+**SMALL** -- Single tier, bundled SQLite database shipped with the npm package.
+
+**Estimated database size:** ~80-150 MB (full corpus of Singapore federal legislation)
+
+---
+
+## Available Tools (13)
+
+### Core Legal Research Tools (8)
+
+| Tool | Description |
+|------|-------------|
+| `search_legislation` | FTS5 full-text search across all provisions with BM25 ranking |
+| `get_provision` | Retrieve specific provision by statute + chapter/section |
+| `check_currency` | Check if statute is in force, amended, or repealed |
+| `validate_citation` | Validate citation against database (zero-hallucination check) |
+| `build_legal_stance` | Aggregate citations from statutes for a legal topic |
+| `format_citation` | Format citations per Singapore conventions (full/short/pinpoint) |
+| `list_sources` | List all available statutes with metadata |
+| `about` | Server info, capabilities, and coverage summary |
+
+### EU/International Law Integration Tools (5)
+
+| Tool | Description |
+|------|-------------|
+| `get_eu_basis` | Get EU directives/regulations for Singapore statute |
+| `get_singapore_implementations` | Find Singapore laws implementing EU act |
+| `search_eu_implementations` | Search EU documents with Singapore implementation counts |
+| `get_provision_eu_basis` | Get EU law references for specific provision |
+| `validate_eu_compliance` | Check implementation status of EU directives |
+
+---
+
+## Why This Works
+
+**Verbatim Source Text (No LLM Processing):**
+- All statute text is ingested from official Singapore government sources
+- Provisions are returned **unchanged** from SQLite FTS5 database rows
+- Zero LLM summarization or paraphrasing -- the database contains regulation text, not AI interpretations
+
+**Smart Context Management:**
+- Search returns ranked provisions with BM25 scoring (safe for context)
+- Provision retrieval gives exact text by statute identifier + chapter/section
+- Cross-references help navigate without loading everything at once
+
+**Technical Architecture:**
+```
+Official Sources --> Parse --> SQLite --> FTS5 snippet() --> MCP response
+                     ^                       ^
+              Provision parser         Verbatim database query
+```
+
+### Traditional Research vs. This MCP
+
+| Traditional Approach | This MCP Server |
+|---------------------|-----------------|
+| Search official databases by statute number | Search by plain language |
+| Navigate multi-chapter statutes manually | Get the exact provision with context |
+| Manual cross-referencing between laws | `build_legal_stance` aggregates across sources |
+| "Is this statute still in force?" --> check manually | `check_currency` tool --> answer in seconds |
+| Find EU basis --> dig through EUR-Lex | `get_eu_basis` --> linked EU directives instantly |
+| No API, no integration | MCP protocol --> AI-native |
+
+---
+
+## Data Sources & Freshness
+
+All content is sourced from authoritative Singapore legal databases:
+
+- **[Singapore Statutes Online](https://sso.agc.gov.sg)** -- Official Singapore government legal database
+
+**Verified data only** -- every citation is validated against official sources. Zero LLM-generated content.
+
+---
+
+## Security
+
+This project uses multiple layers of automated security scanning:
+
+| Scanner | What It Does | Schedule |
+|---------|-------------|----------|
+| **CodeQL** | Static analysis for security vulnerabilities | Weekly + PRs |
+| **Semgrep** | SAST scanning (OWASP top 10, secrets, TypeScript) | Every push |
+| **Gitleaks** | Secret detection across git history | Every push |
+| **Trivy** | CVE scanning on filesystem and npm dependencies | Daily |
+| **Socket.dev** | Supply chain attack detection | PRs |
+| **Dependabot** | Automated dependency updates | Weekly |
+
+See [SECURITY.md](SECURITY.md) for the full policy and vulnerability reporting.
+
+---
+
+## Important Disclaimers
+
+### Legal Advice
+
+> **THIS TOOL IS NOT LEGAL ADVICE**
+>
+> Statute text is sourced from official Singapore government publications. However:
+> - This is a **research tool**, not a substitute for professional legal counsel
+> - **Court case coverage is limited** -- do not rely solely on this for case law research
+> - **Verify critical citations** against primary sources for court filings
+> - **EU cross-references** are extracted from statute text, not EUR-Lex full text
+
+**Before using professionally, read:** [DISCLAIMER.md](DISCLAIMER.md) | [SECURITY.md](SECURITY.md)
+
+### Client Confidentiality
+
+Queries go through the Claude API. For privileged or confidential matters, use on-premise deployment.
+
+---
+
+## Development
+
+### Setup
+
+```bash
+git clone https://github.com/Ansvar-Systems/Singapore-law-mcp
+cd Singapore-law-mcp
+npm install
+npm run build
+npm test
+```
+
+### Running Locally
+
+```bash
+npm run dev                                       # Start MCP server
+npx @anthropic/mcp-inspector node dist/index.js   # Test with MCP Inspector
+```
+
+---
+
+## Related Projects: Complete Compliance Suite
+
+This server is part of **Ansvar's Compliance Suite** -- MCP servers that work together for end-to-end compliance coverage:
+
+### [@ansvar/eu-regulations-mcp](https://github.com/Ansvar-Systems/EU_compliance_MCP)
+**Query 49 EU regulations directly from Claude** -- GDPR, AI Act, DORA, NIS2, MiFID II, eIDAS, and more. Full regulatory text with article-level search. `npx @ansvar/eu-regulations-mcp`
+
+### [@ansvar/us-regulations-mcp](https://github.com/Ansvar-Systems/US_Compliance_MCP)
+**Query US federal and state compliance laws** -- HIPAA, CCPA, SOX, GLBA, FERPA, and more. `npx @ansvar/us-regulations-mcp`
+
+### [@ansvar/security-controls-mcp](https://github.com/Ansvar-Systems/security-controls-mcp)
+**Query 261 security frameworks** -- ISO 27001, NIST CSF, SOC 2, CIS Controls, SCF, and more. `npx @ansvar/security-controls-mcp`
+
+### [@ansvar/automotive-cybersecurity-mcp](https://github.com/Ansvar-Systems/Automotive-MCP)
+**Query UNECE R155/R156 and ISO 21434** -- Automotive cybersecurity compliance. `npx @ansvar/automotive-cybersecurity-mcp`
+
+**30+ national law MCPs** covering Australia, Brazil, Canada, China, Denmark, Finland, France, Germany, Ghana, Iceland, India, Ireland, Israel, Italy, Japan, Kenya, Netherlands, Nigeria, Norway, Singapore, Slovenia, South Korea, Sweden, Switzerland, Thailand, UAE, UK, and more.
+
+---
+
+## Contributing
+
+Contributions welcome! See [CONTRIBUTING.md](CONTRIBUTING.md) for guidelines.
+
+Priority areas:
+- Court case law expansion
+- EU cross-reference improvements
+- Historical statute versions and amendment tracking
+- Additional statutory instruments and regulations
+
+---
+
+## Roadmap
+
+- [x] Core statute database with FTS5 search
+- [x] EU/international law cross-references
+- [x] Vercel Streamable HTTP deployment
+- [x] npm package publication
+- [ ] Court case law expansion
+- [ ] Historical statute versions (amendment tracking)
+- [ ] Preparatory works / explanatory memoranda
+- [ ] Lower court and tribunal decisions
+
+---
+
+## Citation
+
+If you use this MCP server in academic research:
+
+```bibtex
+@software{singapore_law_mcp_2025,
+  author = {Ansvar Systems AB},
+  title = {Singapore Law MCP Server: AI-Powered Legal Research Tool},
+  year = {2025},
+  url = {https://github.com/Ansvar-Systems/Singapore-law-mcp},
+  note = {Singapore legal database with full-text search and EU cross-references}
+}
+```
+
+---
+
+## License
+
+Apache License 2.0. See [LICENSE](./LICENSE) for details.
+
+### Data Licenses
+
+- **Statutes & Legislation:** Singapore Government (Singapore Open Data Licence)
+- **EU Metadata:** EUR-Lex (EU public domain)
+
+---
+
+## About Ansvar Systems
+
+We build AI-accelerated compliance and legal research tools for the global market. This MCP server started as our internal reference tool -- turns out everyone building compliance tools has the same research frustrations.
+
+So we're open-sourcing it.
+
+**[ansvar.eu](https://ansvar.eu)** -- Stockholm, Sweden
+
+---
+
+<p align="center">
+  <sub>Built with care in Stockholm, Sweden</sub>
+</p>

package/dist/__tests__/contract/golden.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=golden.test.d.ts.map

package/dist/__tests__/contract/golden.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"golden.test.d.ts","sourceRoot":"","sources":["../../../__tests__/contract/golden.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/contract/golden.test.js

@@ -0,0 +1,215 @@
+import { describe, it, expect, beforeAll, afterAll } from 'vitest';
+import { createHash } from 'node:crypto';
+import { readFileSync, rmdirSync, rmSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { dirname, join } from 'node:path';
+import { Client } from '@modelcontextprotocol/sdk/client/index.js';
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { InMemoryTransport } from '@modelcontextprotocol/sdk/inMemory.js';
+import Database from '@ansvar/mcp-sqlite';
+import { registerTools } from '../../src/tools/registry.js';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+function normalizeText(text) {
+    return text.replace(/\s+/g, ' ').replace(/[\r\n]+/g, ' ').trim().toLowerCase();
+}
+function sha256(text) {
+    return createHash('sha256').update(normalizeText(text)).digest('hex');
+}
+function extractCitationUrls(data) {
+    const urls = [];
+    const text = JSON.stringify(data);
+    const urlRegex = /https?:\/\/[^\s"'<>]+/g;
+    let match;
+    while ((match = urlRegex.exec(text)) !== null) {
+        urls.push(match[0]);
+    }
+    return urls;
+}
+async function fetchWithTimeout(url, timeoutMs = 10_000) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        return await fetch(url, { signal: controller.signal });
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+function stringifyData(data) {
+    if (typeof data === 'string')
+        return data;
+    return JSON.stringify(data, null, 0) ?? '';
+}
+async function callTool(mcpClient, name, args) {
+    try {
+        const result = await mcpClient.callTool({ name, arguments: args });
+        const content = result.content;
+        const text = content?.[0]?.text ?? '';
+        if (result.isError) {
+            return { tool: name, ok: false, error: { code: 'TOOL_ERROR', message: text } };
+        }
+        try {
+            const data = JSON.parse(text);
+            return { tool: name, ok: true, data };
+        }
+        catch {
+            return { tool: name, ok: true, data: text };
+        }
+    }
+    catch (err) {
+        return {
+            tool: name,
+            ok: false,
+            error: { code: 'CALL_ERROR', message: err.message },
+        };
+    }
+}
+// ---------------------------------------------------------------------------
+// Load fixtures & set up MCP client/server
+// ---------------------------------------------------------------------------
+const fixturesPath = join(__dirname, '..', '..', 'fixtures', 'golden-tests.json');
+const fixtureContent = readFileSync(fixturesPath, 'utf-8');
+const fixture = JSON.parse(fixtureContent);
+const isNightly = process.env['CONTRACT_MODE'] === 'nightly';
+let mcpClient;
+let db;
+// ---------------------------------------------------------------------------
+// Contract test runner
+// ---------------------------------------------------------------------------
+describe(`Contract tests: ${fixture.mcp_name}`, () => {
+    beforeAll(async () => {
+        const dbPath = process.env['SG_LAW_DB_PATH'] ?? join(__dirname, '..', '..', 'data', 'database.db');
+        // Clean up stale lock dir and WAL files
+        try {
+            rmdirSync(dbPath + '.lock');
+        }
+        catch { /* ignore */ }
+        try {
+            rmSync(dbPath + '-wal', { force: true });
+        }
+        catch { /* ignore */ }
+        try {
+            rmSync(dbPath + '-shm', { force: true });
+        }
+        catch { /* ignore */ }
+        db = new Database(dbPath, { readonly: true });
+        db.pragma('foreign_keys = ON');
+        const server = new Server({ name: 'singapore-law-test', version: '0.0.0' }, { capabilities: { tools: {} } });
+        registerTools(server, db);
+        mcpClient = new Client({ name: 'test-client', version: '0.0.0' }, { capabilities: {} });
+        const [clientTransport, serverTransport] = InMemoryTransport.createLinkedPair();
+        await server.connect(serverTransport);
+        await mcpClient.connect(clientTransport);
+    }, 30_000);
+    afterAll(() => {
+        db?.close();
+    });
+    for (const test of fixture.tests) {
+        describe(`[${test.id}] ${test.description}`, () => {
+            let result;
+            it('runs without throwing', async () => {
+                result = await callTool(mcpClient, test.tool, test.input);
+                expect(result).toBeDefined();
+                expect(result.tool).toBe(test.tool);
+            });
+            if (test.assertions.result_not_empty) {
+                it('result is not empty', async () => {
+                    result ??= await callTool(mcpClient, test.tool, test.input);
+                    if (result.ok) {
+                        expect(result.data).toBeDefined();
+                    }
+                    else {
+                        expect(result.error).toBeDefined();
+                    }
+                });
+            }
+            if (test.assertions.text_contains) {
+                for (const needle of test.assertions.text_contains) {
+                    it(`result contains text "${needle}"`, async () => {
+                        result ??= await callTool(mcpClient, test.tool, test.input);
+                        const haystack = stringifyData(result.data).toLowerCase();
+                        expect(haystack).toContain(needle.toLowerCase());
+                    });
+                }
+            }
+            if (test.assertions.any_result_contains) {
+                for (const needle of test.assertions.any_result_contains) {
+                    it(`any result item contains "${needle}"`, async () => {
+                        result ??= await callTool(mcpClient, test.tool, test.input);
+                        const haystack = stringifyData(result.data).toLowerCase();
+                        expect(haystack).toContain(needle.toLowerCase());
+                    });
+                }
+            }
+            if (test.assertions.fields_present) {
+                it(`result has fields: ${test.assertions.fields_present.join(', ')}`, async () => {
+                    result ??= await callTool(mcpClient, test.tool, test.input);
+                    expect(result.ok).toBe(true);
+                    const data = result.data;
+                    expect(data).toBeDefined();
+                    for (const field of test.assertions.fields_present) {
+                        expect(data).toHaveProperty(field);
+                    }
+                });
+            }
+            if (test.assertions.text_not_empty) {
+                it('result text is not empty', async () => {
+                    result ??= await callTool(mcpClient, test.tool, test.input);
+                    const text = stringifyData(result.data);
+                    expect(text.trim().length).toBeGreaterThan(0);
+                });
+            }
+            if (test.assertions.min_results !== undefined) {
+                it(`returns at least ${test.assertions.min_results} results`, async () => {
+                    result ??= await callTool(mcpClient, test.tool, test.input);
+                    const data = result.data;
+                    const items = Array.isArray(data)
+                        ? data
+                        : Array.isArray(data?.results)
+                            ? data.results
+                            : [];
+                    expect(items.length).toBeGreaterThanOrEqual(test.assertions.min_results);
+                });
+            }
+            if (test.assertions.citation_url_pattern) {
+                it(`citation URLs match pattern: ${test.assertions.citation_url_pattern}`, async () => {
+                    result ??= await callTool(mcpClient, test.tool, test.input);
+                    const urls = extractCitationUrls(result.data);
+                    const pattern = new RegExp(test.assertions.citation_url_pattern);
+                    expect(urls.length).toBeGreaterThan(0);
+                    for (const url of urls) {
+                        expect(url).toMatch(pattern);
+                    }
+                });
+            }
+            if (test.assertions.upstream_text_hash) {
+                const hashAssertion = test.assertions.upstream_text_hash;
+                it.skipIf(!isNightly)(`upstream text hash matches for ${hashAssertion.url}`, async () => {
+                    const response = await fetchWithTimeout(hashAssertion.url);
+                    expect(response.ok).toBe(true);
+                    const body = await response.text();
+                    const hash = sha256(body);
+                    expect(hash).toBe(hashAssertion.expected_sha256);
+                }, 30_000);
+            }
+            if (test.assertions.citation_resolves) {
+                it.skipIf(!isNightly)('citation URLs resolve (HTTP 200)', async () => {
+                    result ??= await callTool(mcpClient, test.tool, test.input);
+                    const urls = extractCitationUrls(result.data);
+                    expect(urls.length).toBeGreaterThan(0);
+                    for (const url of urls) {
+                        const response = await fetchWithTimeout(url);
+                        expect(response.ok, `Expected HTTP 200 for ${url}, got ${response.status}`).toBe(true);
+                    }
+                }, 60_000);
+            }
+            if (test.assertions.handles_gracefully) {
+                it('handles gracefully (no unhandled exception)', async () => {
+                    result ??= await callTool(mcpClient, test.tool, test.input);
+                    expect(result.tool).toBe(test.tool);
+                });
+            }
+        });
+    }
+});
+//# sourceMappingURL=golden.test.js.map