@argosvix/mcp-server 0.26.2-alpha.1 → 0.28.0-alpha.1

package/dist/tools.test.js

@@ -19,45 +19,56 @@ describe("MCP version source of truth", () => {
     });
 });
 describe("MCP tools metadata", () => {
-    it("exposes 57 tools (56 prior + axis 4 Tier 2 第二弾: auto_silence_noisy_alert)", () => {
+    it("exposes 71 tools (70 prior + Team read 1 件: list_members。 招待/ロール変更/削除の mutation は承認ゲート経由前提で非提供)", () => {
         expect(tools.map((t) => t.name).sort()).toEqual([
             "acknowledge_alert",
             "aggregate_calls",
+            "apply_promo_code_to_customer",
             "auto_silence_noisy_alert",
             "bulk_delete_calls",
             "classify_calls_batch",
             "compare_eval_runs",
             "create_alert",
             "create_annotation",
+            "create_budget_gate",
             "create_eval_criterion",
+            "create_policy_gate",
             "create_project",
             "create_prompt",
             "create_saved_view",
             "delete_alert",
             "delete_annotation",
+            "delete_budget_gate",
             "delete_eval_criterion",
+            "delete_policy_gate",
             "delete_project",
             "delete_prompt",
             "delete_saved_view",
             "detect_anomaly",
             "export_calls",
+            "extend_customer_trial",
             "get_account_health",
             "get_alert",
             "get_annotation",
+            "get_approval",
+            "get_budget_gate",
             "get_cost_summary",
             "get_eval_criterion",
             "get_eval_run",
             "get_llm_budget",
             "get_percentiles",
+            "get_policy_gate",
             "get_prompt",
             "get_safety_assessment",
             "list_alert_events",
             "list_alerts",
             "list_annotations_by_label",
             "list_annotations_for_call",
+            "list_approvals",
             "list_audit_log",
             "list_eval_criteria",
             "list_eval_runs",
+            "list_members",
             "list_projects",
             "list_prompts",
             "list_safety_assessments",
@@ -69,6 +80,7 @@ describe("MCP tools metadata", () => {
             "raise_llm_budget",
             "rename_project",
             "rename_prompt",
+            "request_approval",
             "retry_failed_webhook",
             "run_eval",
             "silence_alert",
@@ -76,7 +88,9 @@ describe("MCP tools metadata", () => {
             "unsilence_alert",
             "update_alert",
             "update_annotation",
+            "update_budget_gate",
             "update_eval_criterion",
+            "update_policy_gate",
             "update_prompt",
         ]);
     });
@@ -90,21 +104,22 @@ describe("MCP tools metadata", () => {
     it("create_alert.alertType enum matches backend ALERT_TYPES (= enum drift 回帰防止)", () => {
         // backend packages/backend/src/types.ts ALERT_TYPES と完全一致させる。
         // ここが drift すると mismatch した type の create_alert が backend で 400 になる。
-        // 2026-06-06 narrative gap fix carry: 既存 hard-coded list は backend と drift
-        // していた (= cost_daily / cost_monthly / latency_p95 は backend に存在しない、
-        // backend は cost_threshold / monthly_budget / latency_degradation 名)。
-        // gate constant も 同じ MCP description から copy していたため drift を検出
-        // できていなかった。 backend `src/alerts/types.ts` の ALERT_TYPES を source of
-        // truth として hard-code 更新。
-        const BACKEND_ALERT_TYPES = [
-            "cost_threshold",
-            "error_rate",
-            "latency_degradation",
-            "monthly_budget",
-            "anomaly_cost",
-            "anomaly_latency",
-            "anomaly_error_rate",
-        ];
+        // 2026-06-06 R37 medium #1 fix carry: 旧 hard-coded list は backend と drift
+        // していた (= 旧 list: cost_daily / cost_monthly / latency_p95、 backend reality:
+        // cost_threshold / monthly_budget / latency_degradation)。 同 hard-code を MCP
+        // description から copy していたため drift gate test 自体が drift を検出できない
+        // 構造軸だった。 backend `src/alerts/types.ts` の ALERT_TYPES を test 時点で
+        // fs.readFileSync で 読み出して regex 抽出 → これで source of truth が backend
+        // 側に固定、 backend が enum を 追加すると 本 test が 自動的に拾って fail する。
+        const here2 = dirname(fileURLToPath(import.meta.url));
+        const backendTypesPath = resolve(here2, "..", "..", "backend", "src", "alerts", "types.ts");
+        const backendTypesContent = readFileSync(backendTypesPath, "utf8");
+        const arrayMatch = backendTypesContent.match(/export const ALERT_TYPES = \[([\s\S]*?)\] as const;/);
+        if (!arrayMatch) {
+            throw new Error("ALERT_TYPES export not found in backend/src/alerts/types.ts (= drift gate が source-of-truth を 見失った、 backend の ALERT_TYPES export 形を 確認してください)");
+        }
+        const BACKEND_ALERT_TYPES = Array.from(arrayMatch[1].matchAll(/"([^"]+)"/g)).map((m) => m[1]);
+        expect(BACKEND_ALERT_TYPES.length).toBeGreaterThan(0);
         const createAlert = tools.find((t) => t.name === "create_alert");
         const schema = createAlert?.inputSchema;
         const enumValues = schema?.properties?.alertType?.enum ?? [];
@@ -166,6 +181,20 @@ describe("dispatchTool", () => {
         // 7d 後ろから now まで = 終端より始端が前
         expect(new Date(body.startTime).getTime()).toBeLessThan(new Date(body.endTime).getTime());
     });
+    it("R74 HIGH 1 regression: query_calls の latencyMin/Max が outgoing body に乗る (= allowlist 落ち防止)", async () => {
+        const res = await dispatchTool({
+            name: "query_calls",
+            args: { latencyMin: 1500, latencyMax: 2500 },
+            apiKey: "argosvix_live_test",
+            apiBase: "https://ingest.example.com",
+        });
+        expect(res.isError).toBeUndefined();
+        const fetchMock = global.fetch;
+        const init = fetchMock.mock.calls[0]?.[1];
+        const body = JSON.parse(init.body);
+        expect(body.latencyMin).toBe(1500);
+        expect(body.latencyMax).toBe(2500);
+    });
     it("get_cost_summary uses /v1/query/aggregate endpoint", async () => {
         const res = await dispatchTool({
             name: "get_cost_summary",
@@ -177,6 +206,28 @@ describe("dispatchTool", () => {
         const parsed = JSON.parse(res.content[0]?.text ?? "{}");
         expect(parsed.groups[0].provider).toBe("openai");
     });
+    it("list_members GETs /v1/memberships (= #31 Team read tool)", async () => {
+        vi.stubGlobal("fetch", vi.fn(async () => new Response(JSON.stringify({
+            members: [
+                { id: "mem_1", email: "a@example.com", role: "admin", status: "active" },
+            ],
+        }), { status: 200, headers: { "content-type": "application/json" } })));
+        const res = await dispatchTool({
+            name: "list_members",
+            args: {},
+            apiKey: "argosvix_live_test",
+            apiBase: "https://ingest.example.com",
+        });
+        expect(res.isError).toBeUndefined();
+        const fetchMock = global.fetch;
+        const fetchedUrl = String(fetchMock.mock.calls[0]?.[0]);
+        expect(fetchedUrl).toContain("/v1/memberships");
+        // read tool = GET (= 明示 method 指定なし → callApi default GET)
+        const init = fetchMock.mock.calls[0]?.[1];
+        expect(init?.method ?? "GET").toBe("GET");
+        const parsed = JSON.parse(res.content[0]?.text ?? "{}");
+        expect(parsed.members[0].role).toBe("admin");
+    });
     it("classify_calls_batch POSTs to /v1/safety-assessments/scan-batch with maxRecords", async () => {
         vi.stubGlobal("fetch", vi.fn(async () => new Response(JSON.stringify({ scanned: 10, assessed: 9, flagged: 1, failures: 0, skipped: 1 }), { status: 200 })));
         const res = await dispatchTool({
@@ -1443,5 +1494,151 @@ describe("dispatchTool", () => {
         expect(url).toContain("limit=5");
         expect(url).not.toContain("account_id");
     });
+    // 2026-06-09 v1.7 hygiene #13 carry = v1.5/v1.6 で追加した 7 safety/eval
+    // read tools の path + method 固定 test。 既存は metadata gate のみで dispatch
+    // path/body 軸の structural drift 防御がなかった軸を carry。
+    // R51 LOW carry (2026-06-10): toContain → new URL(...).pathname + exact searchParams
+    // で suffix/prefix drift を 構造的に検出 (= 旧 path = `/v1/eval-runs` が
+    // `/v1/eval-runs/foo` でも pass する弱さを narrow)。
+    function urlOf(call) {
+        return new URL(String(call));
+    }
+    it("list_eval_criteria GETs /v1/eval-criteria", async () => {
+        vi.stubGlobal("fetch", vi.fn(async () => new Response(JSON.stringify({ criteria: [] }), {
+            status: 200,
+            headers: { "content-type": "application/json" },
+        })));
+        await dispatchTool({
+            name: "list_eval_criteria",
+            args: {},
+            apiKey: "argosvix_live_test",
+            apiBase: "https://ingest.example.com",
+        });
+        const fetchMock = global.fetch;
+        const u = urlOf(fetchMock.mock.calls[0]?.[0]);
+        const init = fetchMock.mock.calls[0]?.[1];
+        expect(u.pathname).toBe("/v1/eval-criteria");
+        expect(Array.from(u.searchParams.keys())).toEqual([]);
+        expect(init.method ?? "GET").toBe("GET");
+    });
+    it("get_eval_criterion GETs /v1/eval-criteria/:id", async () => {
+        vi.stubGlobal("fetch", vi.fn(async () => new Response(JSON.stringify({ id: 42, name: "accuracy" }), {
+            status: 200,
+            headers: { "content-type": "application/json" },
+        })));
+        await dispatchTool({
+            name: "get_eval_criterion",
+            args: { criterionId: 42 },
+            apiKey: "argosvix_live_test",
+            apiBase: "https://ingest.example.com",
+        });
+        const fetchMock = global.fetch;
+        const u = urlOf(fetchMock.mock.calls[0]?.[0]);
+        const init = fetchMock.mock.calls[0]?.[1];
+        expect(u.pathname).toBe("/v1/eval-criteria/42");
+        expect(Array.from(u.searchParams.keys())).toEqual([]);
+        expect(init.method ?? "GET").toBe("GET");
+    });
+    it("list_safety_assessments GETs /v1/safety-assessments with call_id + limit", async () => {
+        vi.stubGlobal("fetch", vi.fn(async () => new Response(JSON.stringify({ assessments: [] }), {
+            status: 200,
+            headers: { "content-type": "application/json" },
+        })));
+        await dispatchTool({
+            name: "list_safety_assessments",
+            args: { callId: "call_abc123", limit: 25 },
+            apiKey: "argosvix_live_test",
+            apiBase: "https://ingest.example.com",
+        });
+        const fetchMock = global.fetch;
+        const u = urlOf(fetchMock.mock.calls[0]?.[0]);
+        const init = fetchMock.mock.calls[0]?.[1];
+        expect(u.pathname).toBe("/v1/safety-assessments");
+        expect(u.searchParams.get("call_id")).toBe("call_abc123");
+        expect(u.searchParams.get("limit")).toBe("25");
+        expect(init.method ?? "GET").toBe("GET");
+    });
+    it("get_safety_assessment GETs /v1/safety-assessments/:id", async () => {
+        vi.stubGlobal("fetch", vi.fn(async () => new Response(JSON.stringify({ id: 7, flagged: 0 }), {
+            status: 200,
+            headers: { "content-type": "application/json" },
+        })));
+        await dispatchTool({
+            name: "get_safety_assessment",
+            args: { assessmentId: 7 },
+            apiKey: "argosvix_live_test",
+            apiBase: "https://ingest.example.com",
+        });
+        const fetchMock = global.fetch;
+        const u = urlOf(fetchMock.mock.calls[0]?.[0]);
+        const init = fetchMock.mock.calls[0]?.[1];
+        expect(u.pathname).toBe("/v1/safety-assessments/7");
+        expect(Array.from(u.searchParams.keys())).toEqual([]);
+        expect(init.method ?? "GET").toBe("GET");
+    });
+    it("list_eval_runs GETs /v1/eval-runs with limit", async () => {
+        vi.stubGlobal("fetch", vi.fn(async () => new Response(JSON.stringify({ runs: [] }), {
+            status: 200,
+            headers: { "content-type": "application/json" },
+        })));
+        await dispatchTool({
+            name: "list_eval_runs",
+            args: { limit: 15 },
+            apiKey: "argosvix_live_test",
+            apiBase: "https://ingest.example.com",
+        });
+        const fetchMock = global.fetch;
+        const u = urlOf(fetchMock.mock.calls[0]?.[0]);
+        const init = fetchMock.mock.calls[0]?.[1];
+        expect(u.pathname).toBe("/v1/eval-runs");
+        expect(u.searchParams.get("limit")).toBe("15");
+        expect(init.method ?? "GET").toBe("GET");
+    });
+    it("get_eval_run GETs /v1/eval-runs/:id", async () => {
+        vi.stubGlobal("fetch", vi.fn(async () => new Response(JSON.stringify({ id: 99, status: "completed" }), {
+            status: 200,
+            headers: { "content-type": "application/json" },
+        })));
+        await dispatchTool({
+            name: "get_eval_run",
+            args: { runId: 99 },
+            apiKey: "argosvix_live_test",
+            apiBase: "https://ingest.example.com",
+        });
+        const fetchMock = global.fetch;
+        const u = urlOf(fetchMock.mock.calls[0]?.[0]);
+        const init = fetchMock.mock.calls[0]?.[1];
+        expect(u.pathname).toBe("/v1/eval-runs/99");
+        expect(Array.from(u.searchParams.keys())).toEqual([]);
+        expect(init.method ?? "GET").toBe("GET");
+    });
+    it("run_eval POSTs to /v1/eval-runs with name + recentCount + idempotencyKey", async () => {
+        vi.stubGlobal("fetch", vi.fn(async () => new Response(JSON.stringify({ id: 100, status: "queued" }), {
+            status: 200,
+            headers: { "content-type": "application/json" },
+        })));
+        await dispatchTool({
+            name: "run_eval",
+            args: {
+                name: "baseline-2026-06-09",
+                recentCount: 30,
+                idempotencyKey: "idem-abc",
+            },
+            apiKey: "argosvix_live_test",
+            apiBase: "https://ingest.example.com",
+        });
+        const fetchMock = global.fetch;
+        const u = urlOf(fetchMock.mock.calls[0]?.[0]);
+        const init = fetchMock.mock.calls[0]?.[1];
+        expect(u.pathname).toBe("/v1/eval-runs");
+        expect(Array.from(u.searchParams.keys())).toEqual([]);
+        expect(init.method).toBe("POST");
+        const body = JSON.parse(init.body);
+        expect(body).toEqual({
+            name: "baseline-2026-06-09",
+            recentCount: 30,
+            idempotencyKey: "idem-abc",
+        });
+    });
 });
 //# sourceMappingURL=tools.test.js.map