@besales/mcp 1.0.0-beta.2 → 1.0.0-beta.5

package/scripts/sync-trigger-task-schema.mjs

@@ -0,0 +1,45 @@
+/** Обновляет поля внутри объекта, сохраняя nullable-обёртку и её ограничения. */
+export function syncCallOperatorTaskSchema(action, canonical, callOperator) {
+  const config = action.properties.callOperatorConfig;
+  const branches = config.anyOf ?? config.oneOf;
+  const object = branches
+    ? branches.length === 2 && branches.some((branch) => branch.type === 'null')
+      ? branches.find((branch) => branch.type === 'object' && branch.properties)
+      : undefined
+    : config;
+  if (!object?.properties?.taskText || !object.properties.taskDueHours) {
+    throw new Error('CALL_OPERATOR_CONFIG_SCHEMA_UNEXPECTED');
+  }
+  for (const [name, alias] of [
+    ['task_text', 'taskText'],
+    ['task_due_hours', 'taskDueHours'],
+  ]) {
+    const property = callOperator.properties[name];
+    const nullable = property.anyOf?.some((branch) => branch.type === 'null');
+    const value = property.anyOf?.find((branch) => branch.type !== 'null');
+    const runtime = canonical.properties[name].anyOf.find((branch) => branch.type !== 'null');
+    // refine считает Unicode; JSON Schema maxLength считает те же кодовые точки.
+    if (
+      !nullable ||
+      (name === 'task_text'
+        ? value?.type !== 'string' || value.maxLength !== 500
+        : value?.type !== runtime.type ||
+          value.minimum !== runtime.minimum ||
+          value.maximum !== runtime.maximum)
+    ) {
+      throw new Error(`CALL_OPERATOR_TASK_CONTRACT_DRIFT:${name}`);
+    }
+    canonical.properties[name] = {
+      ...property,
+      description: canonical.properties[name].description,
+    };
+    object.properties[alias] = {
+      ...property,
+      description: object.properties[alias].description,
+    };
+  }
+  action.properties.config = {
+    ...action.properties.config,
+    properties: canonical.properties,
+  };
+}

package/scripts/telegram-personal-confirmation-mutants.mjs

@@ -0,0 +1,74 @@
+import { spawnSync } from 'node:child_process';
+import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+
+const suite = 'src/tools/definitions/telegram-personal-restrictions.spec.ts';
+const temporary = mkdtempSync(join(tmpdir(), 'telegram-confirmation-'));
+function run(pattern, name) {
+  const output = join(temporary, name + '.json');
+  const result = spawnSync(process.execPath, [
+    'node_modules/vitest/vitest.mjs', 'run', suite,
+    '--maxWorkers=1', '--reporter=json', '--outputFile=' + output,
+    ...(pattern ? ['--testNamePattern', pattern] : []),
+  ], { encoding: 'utf8', timeout: 180000 });
+  const report = JSON.parse(readFileSync(output, 'utf8'));
+  return { result, report };
+}
+try {
+  const baseline = run(undefined, 'baseline');
+  if (baseline.result.status !== 0 || baseline.report.numPassedTests === 0) {
+    throw new Error('BASELINE_FAILED\n' + baseline.result.stdout + baseline.result.stderr);
+  }
+  console.log('BASELINE PASS ' + baseline.report.numPassedTests);
+  for (const entry of [
+    {
+      name: 'appeal-runtime-confirmation-optional',
+      file: 'src/tools/definitions/telegram-personal-restrictions.ts',
+      pattern: 'без явного true',
+      mutate: (text) => {
+        const anchor = 'explicit_confirmation: z\n      .literal(true)';
+        if (text.split(anchor).length !== 2) throw new Error('MUTATION_ANCHOR_NOT_UNIQUE');
+        return text.replace(anchor, anchor + '.optional()');
+      },
+    },
+    {
+      name: 'appeal-published-confirmation-optional',
+      file: 'src/schemas/mcp-tools.json',
+      pattern: 'omits optional text in schema and HTTP, retaining explicit confirmation',
+      mutate: (text) => {
+        const registry = JSON.parse(text);
+        const schema = registry.tools.find((tool) =>
+          tool.name === 'besales_platform_telegram_personal_restriction_appeal',
+        ).inputSchema;
+        schema.required = schema.required.filter((field) => field !== 'explicit_confirmation');
+        return JSON.stringify(registry, null, 2) + '\n';
+      },
+    },
+  ]) {
+    const original = readFileSync(entry.file, 'utf8');
+    try {
+      writeFileSync(entry.file, entry.mutate(original));
+      const { result, report } = run(entry.pattern, entry.name);
+      // Убитым считается только провал утверждения внутри названного теста: AssertionError
+      // или отказ vitest expect(...).rejects («promise resolved … instead of rejecting»).
+      // Ошибка загрузки набора не даёт assertionResults и остаётся INFRA_FAILURE.
+      const failures = report.testResults.flatMap((item) => item.assertionResults).filter((test) =>
+        test.status === 'failed' && test.fullName.includes(entry.pattern) &&
+        test.failureMessages.some(
+          (message) =>
+            message.includes('AssertionError') ||
+            /^Error: promise resolved .* instead of rejecting/su.test(message),
+        ),
+      );
+      if (result.status === 0 || result.signal || failures.length === 0) {
+        throw new Error('SURVIVED_OR_INFRA_FAILURE:' + entry.name + '\n' + result.stdout + result.stderr);
+      }
+      console.log('KILLED ' + entry.name + ' ' + JSON.stringify(failures.map((test) => test.fullName)));
+    } finally {
+      writeFileSync(entry.file, original);
+    }
+  }
+} finally {
+  rmSync(temporary, { recursive: true, force: true });
+}

package/scripts/telegram-personal-profile-mutants.mjs

@@ -0,0 +1,96 @@
+import { spawnSync } from 'node:child_process';
+import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+
+const suite = 'src/tools/definitions/telegram-personal-profile.spec.ts';
+const tool = 'src/tools/definitions/telegram-personal-profile.ts';
+const published = 'src/schemas/mcp-tools.json';
+const temporary = mkdtempSync(join(tmpdir(), 'telegram-profile-mutants-'));
+function run(pattern, name) {
+  const output = join(temporary, name + '.json');
+  const result = spawnSync(process.execPath, [
+    'node_modules/vitest/vitest.mjs', 'run', suite,
+    '--maxWorkers=1', '--reporter=json', '--outputFile=' + output,
+    ...(pattern ? ['--testNamePattern', pattern] : []),
+  ], { encoding: 'utf8', timeout: 180000 });
+  const report = JSON.parse(readFileSync(output, 'utf8'));
+  return { result, report };
+}
+// Единственное вхождение якоря: иначе мутация могла бы тихо попасть не туда.
+function replaceOnce(text, anchor, replacement) {
+  if (text.split(anchor).length !== 2) throw new Error('MUTATION_ANCHOR_NOT_UNIQUE');
+  return text.replace(anchor, replacement);
+}
+try {
+  const baseline = run(undefined, 'baseline');
+  if (baseline.result.status !== 0 || baseline.report.numPassedTests === 0) {
+    throw new Error('BASELINE_FAILED\n' + baseline.result.stdout + baseline.result.stderr);
+  }
+  console.log('BASELINE PASS ' + baseline.report.numPassedTests);
+  for (const entry of [
+    {
+      // Главный мутант пачки: оба режима ников разрешены одновременно в Zod-схеме инструмента.
+      name: 'username-modes-both-allowed-runtime',
+      file: tool,
+      pattern: 'оба режима сразу отвергаются до HTTP',
+      mutate: (text) =>
+        replaceOnce(
+          text,
+          "    if (input.username_base !== undefined) {\n      refuse(\n        'username_base',",
+          "    if (input.username_base !== undefined && false) {\n      refuse(\n        'username_base',",
+        ),
+    },
+    {
+      // То же в опубликованной схеме: снят запрет «usernames вместе с username_base».
+      name: 'username-modes-both-allowed-published',
+      file: published,
+      pattern: 'оба режима сразу отвергаются до HTTP',
+      mutate: (text) => {
+        const registry = JSON.parse(text);
+        const schema = registry.tools.find(
+          (item) => item.name === 'besales_platform_telegram_personal_profile_bulk',
+        ).inputSchema;
+        const before = schema.allOf.length;
+        schema.allOf = schema.allOf.filter(
+          (rule) => !(rule.not?.required?.includes('usernames') && rule.not.required.includes('username_base')),
+        );
+        if (schema.allOf.length !== before - 1) throw new Error('MUTATION_ANCHOR_NOT_UNIQUE');
+        return JSON.stringify(registry, null, 2) + '\n';
+      },
+    },
+    {
+      // Ключ идемпотентности уходит под общим именем, которого профильный маршрут ядра не читает.
+      name: 'idempotency-key-default-header',
+      file: tool,
+      pattern: 'идёт заголовком x-idempotency-key',
+      mutate: (text) =>
+        replaceOnce(text, "    idempotencyKeyHeader: 'X-Idempotency-Key',\n", ''),
+    },
+  ]) {
+    const original = readFileSync(entry.file, 'utf8');
+    try {
+      writeFileSync(entry.file, entry.mutate(original));
+      const { result, report } = run(entry.pattern, entry.name);
+      // Убитым считается только провал утверждения внутри названного теста: AssertionError
+      // или отказ vitest expect(...).rejects («promise resolved … instead of rejecting»).
+      // Ошибка загрузки набора не даёт assertionResults и остаётся INFRA_FAILURE.
+      const failures = report.testResults.flatMap((item) => item.assertionResults).filter((test) =>
+        test.status === 'failed' && test.fullName.includes(entry.pattern) &&
+        test.failureMessages.some(
+          (message) =>
+            message.includes('AssertionError') ||
+            /^Error: promise resolved .* instead of rejecting/su.test(message),
+        ),
+      );
+      if (result.status === 0 || result.signal || failures.length === 0) {
+        throw new Error('SURVIVED_OR_INFRA_FAILURE:' + entry.name + '\n' + result.stdout + result.stderr);
+      }
+      console.log('KILLED ' + entry.name + ' ' + JSON.stringify(failures.map((test) => test.fullName)));
+    } finally {
+      writeFileSync(entry.file, original);
+    }
+  }
+} finally {
+  rmSync(temporary, { recursive: true, force: true });
+}