@besales/mcp 1.0.0-beta.4 → 1.0.0-beta.7

package/scripts/telegram-personal-profile-mutants.mjs

@@ -0,0 +1,96 @@
+import { spawnSync } from 'node:child_process';
+import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+
+const suite = 'src/tools/definitions/telegram-personal-profile.spec.ts';
+const tool = 'src/tools/definitions/telegram-personal-profile.ts';
+const published = 'src/schemas/mcp-tools.json';
+const temporary = mkdtempSync(join(tmpdir(), 'telegram-profile-mutants-'));
+function run(pattern, name) {
+  const output = join(temporary, name + '.json');
+  const result = spawnSync(process.execPath, [
+    'node_modules/vitest/vitest.mjs', 'run', suite,
+    '--maxWorkers=1', '--reporter=json', '--outputFile=' + output,
+    ...(pattern ? ['--testNamePattern', pattern] : []),
+  ], { encoding: 'utf8', timeout: 180000 });
+  const report = JSON.parse(readFileSync(output, 'utf8'));
+  return { result, report };
+}
+// Единственное вхождение якоря: иначе мутация могла бы тихо попасть не туда.
+function replaceOnce(text, anchor, replacement) {
+  if (text.split(anchor).length !== 2) throw new Error('MUTATION_ANCHOR_NOT_UNIQUE');
+  return text.replace(anchor, replacement);
+}
+try {
+  const baseline = run(undefined, 'baseline');
+  if (baseline.result.status !== 0 || baseline.report.numPassedTests === 0) {
+    throw new Error('BASELINE_FAILED\n' + baseline.result.stdout + baseline.result.stderr);
+  }
+  console.log('BASELINE PASS ' + baseline.report.numPassedTests);
+  for (const entry of [
+    {
+      // Главный мутант пачки: оба режима ников разрешены одновременно в Zod-схеме инструмента.
+      name: 'username-modes-both-allowed-runtime',
+      file: tool,
+      pattern: 'оба режима сразу отвергаются до HTTP',
+      mutate: (text) =>
+        replaceOnce(
+          text,
+          "    if (input.username_base !== undefined) {\n      refuse(\n        'username_base',",
+          "    if (input.username_base !== undefined && false) {\n      refuse(\n        'username_base',",
+        ),
+    },
+    {
+      // То же в опубликованной схеме: снят запрет «usernames вместе с username_base».
+      name: 'username-modes-both-allowed-published',
+      file: published,
+      pattern: 'оба режима сразу отвергаются до HTTP',
+      mutate: (text) => {
+        const registry = JSON.parse(text);
+        const schema = registry.tools.find(
+          (item) => item.name === 'besales_platform_telegram_personal_profile_bulk',
+        ).inputSchema;
+        const before = schema.allOf.length;
+        schema.allOf = schema.allOf.filter(
+          (rule) => !(rule.not?.required?.includes('usernames') && rule.not.required.includes('username_base')),
+        );
+        if (schema.allOf.length !== before - 1) throw new Error('MUTATION_ANCHOR_NOT_UNIQUE');
+        return JSON.stringify(registry, null, 2) + '\n';
+      },
+    },
+    {
+      // Ключ идемпотентности уходит под общим именем, которого профильный маршрут ядра не читает.
+      name: 'idempotency-key-default-header',
+      file: tool,
+      pattern: 'идёт заголовком x-idempotency-key',
+      mutate: (text) =>
+        replaceOnce(text, "    idempotencyKeyHeader: 'X-Idempotency-Key',\n", ''),
+    },
+  ]) {
+    const original = readFileSync(entry.file, 'utf8');
+    try {
+      writeFileSync(entry.file, entry.mutate(original));
+      const { result, report } = run(entry.pattern, entry.name);
+      // Убитым считается только провал утверждения внутри названного теста: AssertionError
+      // или отказ vitest expect(...).rejects («promise resolved … instead of rejecting»).
+      // Ошибка загрузки набора не даёт assertionResults и остаётся INFRA_FAILURE.
+      const failures = report.testResults.flatMap((item) => item.assertionResults).filter((test) =>
+        test.status === 'failed' && test.fullName.includes(entry.pattern) &&
+        test.failureMessages.some(
+          (message) =>
+            message.includes('AssertionError') ||
+            /^Error: promise resolved .* instead of rejecting/su.test(message),
+        ),
+      );
+      if (result.status === 0 || result.signal || failures.length === 0) {
+        throw new Error('SURVIVED_OR_INFRA_FAILURE:' + entry.name + '\n' + result.stdout + result.stderr);
+      }
+      console.log('KILLED ' + entry.name + ' ' + JSON.stringify(failures.map((test) => test.fullName)));
+    } finally {
+      writeFileSync(entry.file, original);
+    }
+  }
+} finally {
+  rmSync(temporary, { recursive: true, force: true });
+}

package/scripts/telegram-personal-proxy-mutants.mjs

@@ -0,0 +1,171 @@
+import { spawnSync } from 'node:child_process';
+import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+
+const suite = 'src/tools/definitions/telegram-personal-proxies.spec.ts';
+const tool = 'src/tools/definitions/telegram-personal-proxies.ts';
+const temporary = mkdtempSync(join(tmpdir(), 'telegram-proxy-mutants-'));
+function run(pattern, name, suitePath = suite) {
+  const output = join(temporary, name + '.json');
+  const result = spawnSync(process.execPath, [
+    'node_modules/vitest/vitest.mjs', 'run', suitePath,
+    '--maxWorkers=1', '--reporter=json', '--outputFile=' + output,
+    ...(pattern ? ['--testNamePattern', pattern] : []),
+  ], { encoding: 'utf8', timeout: 180000 });
+  const report = JSON.parse(readFileSync(output, 'utf8'));
+  return { result, report };
+}
+function replaceOnce(text, anchor, replacement) {
+  if (text.split(anchor).length !== 2) throw new Error('MUTATION_ANCHOR_NOT_UNIQUE');
+  return text.replace(anchor, replacement);
+}
+try {
+  const baseline = run(undefined, 'baseline');
+  if (baseline.result.status !== 0 || baseline.report.numPassedTests === 0) {
+    throw new Error('BASELINE_FAILED\n' + baseline.result.stdout + baseline.result.stderr);
+  }
+  console.log('BASELINE PASS ' + baseline.report.numPassedTests);
+  for (const [suffix, description] of [
+    ['proxy_delete', 'Явное согласие человека на удаление прокси.'],
+    ['account_proxy_change', 'Явное согласие человека: номер переподключится.'],
+  ]) {
+    for (const target of ['runtime', 'published']) {
+      const file = target === 'runtime' ? tool : 'src/schemas/mcp-tools.json';
+      const name = suffix + '-without-confirmation-' + target;
+      const pattern = suffix + ': без явного true отказ до HTTP';
+      const original = readFileSync(file, 'utf8');
+      try {
+        let mutated;
+        if (target === 'runtime') {
+          const anchor = `explicit_confirmation: z.literal(true).describe('${description}')`;
+          mutated = replaceOnce(original, anchor,
+            `explicit_confirmation: z.literal(true).optional().describe('${description}')`);
+        } else {
+          const registry = JSON.parse(original);
+          const schema = registry.tools.find((entry) =>
+            entry.name === 'besales_platform_telegram_personal_' + suffix,
+          ).inputSchema;
+          if (!schema.required.includes('explicit_confirmation')) throw new Error('MUTATION_ANCHOR_NOT_UNIQUE');
+          schema.required = schema.required.filter((field) => field !== 'explicit_confirmation');
+          mutated = JSON.stringify(registry, null, 2) + '\n';
+        }
+        writeFileSync(file, mutated);
+        const { result, report } = run(pattern, name);
+        // Убит только утверждением именованного теста; ошибка загрузки — INFRA_FAILURE.
+        const failures = report.testResults.flatMap((entry) => entry.assertionResults).filter((test) =>
+          test.status === 'failed' && test.fullName.includes(pattern) &&
+          test.failureMessages.some((message) =>
+            message.includes('AssertionError') ||
+            /^Error: promise resolved .* instead of rejecting/su.test(message),
+          ),
+        );
+        if (result.status === 0 || result.signal || failures.length === 0) {
+          throw new Error('SURVIVED_OR_INFRA_FAILURE:' + name + '\n' + result.stdout + result.stderr);
+        }
+        console.log('KILLED ' + name + ' ' + JSON.stringify(failures.map((test) => test.fullName)));
+      } finally {
+        writeFileSync(file, original);
+      }
+    }
+  }
+  const stockSuite = 'src/tools/definitions/telegram-proxy-stock.spec.ts';
+  const stockFile = 'src/tools/definitions/telegram-proxy-stock.ts';
+  const connectFile = 'src/tools/definitions/telegram-personal-connect.ts';
+  const apiClientFile = 'src/http/api-client.ts';
+  const resultFile = 'src/tools/result.ts';
+  const publishedFile = 'src/schemas/mcp-tools.json';
+  const stockBaseline = run(undefined, 'stock-baseline', stockSuite);
+  if (stockBaseline.result.status !== 0 || stockBaseline.report.numPassedTests === 0) {
+    throw new Error('BASELINE_FAILED\n' + stockBaseline.result.stdout + stockBaseline.result.stderr);
+  }
+  console.log('STOCK BASELINE PASS ' + stockBaseline.report.numPassedTests);
+  function publishedMutation(suffix, change) {
+    return (original) => {
+      const registry = JSON.parse(original);
+      const schema = registry.tools.find((entry) => entry.name === 'besales_platform_telegram_personal_' + suffix).inputSchema;
+      change(schema);
+      return JSON.stringify(registry, null, 2) + '\n';
+    };
+  }
+  function inTool(original, suffix, anchor, replacement) {
+    const start = original.indexOf("name: 'besales_platform_telegram_personal_" + suffix + "'");
+    if (start < 0) throw new Error('MUTATION_ANCHOR_NOT_UNIQUE');
+    const next = original.indexOf('  defineTool({', start);
+    const end = next < 0 ? original.length : next;
+    return original.slice(0, start) + replaceOnce(original.slice(start, end), anchor, replacement) + original.slice(end);
+  }
+  const mutations = [
+    ['stock-loose-schema', stockFile, 'proxy_stock_import_link: строгая схема отвергает секреты до HTTP',
+      (original) => inTool(original, 'proxy_stock_import_link', 'schema: z.object(workspace).strict()', 'schema: z.object(workspace).passthrough()')],
+    ['stock-delete-without-confirmation-runtime', stockFile, 'proxy_stock_delete: без явного true отказ до HTTP',
+      (original) => replaceOnce(original, "explicit_confirmation: z.literal(true).describe('Явное согласие человека на удаление прокси из запаса.')", "explicit_confirmation: z.literal(true).optional().describe('Явное согласие человека на удаление прокси из запаса.')")],
+    ['stock-delete-without-confirmation-published', publishedFile, 'proxy_stock_delete: без явного true отказ до HTTP',
+      publishedMutation('proxy_stock_delete', (schema) => { schema.required = schema.required.filter((field) => field !== 'explicit_confirmation'); })],
+    ...['proxy_take_from_stock', 'proxy_return_to_stock'].map((suffix) => [
+      suffix + '-changed-key', tool, suffix + ': повтор сохраняет настоящий заголовок и тело',
+      (original) => inTool(original, suffix, 'idempotencyKey: input.action_id', "idempotencyKey: '00000000-0000-4000-8000-000000000099'"),
+    ]),
+    ...['proxy_take_from_stock', 'proxy_return_to_stock'].map((suffix) => [
+      suffix + '-wrong-key-header', tool, suffix + ': повтор сохраняет настоящий заголовок и тело',
+      (original) => inTool(original, suffix, "idempotencyKeyHeader: 'X-Idempotency-Key'", "idempotencyKeyHeader: 'Idempotency-Key'"),
+    ]),
+    ['stock-details-at-top-level', apiClientFile, 'PROXY_STOCK_NOT_ENOUGH: доступность из details видна в тексте',
+      (original) => replaceOnce(original, "...proxyStockErrorDetails(asRecord(source?.['details']), code)", '...proxyStockErrorDetails(source, code)')],
+    ['stock-available-dropped', apiClientFile, 'PROXY_STOCK_NOT_ENOUGH: доступность из details видна в тексте',
+      (original) => replaceOnce(original, '? { available } : {}', '? {} : {}')],
+    ['stock-items-dropped', apiClientFile, 'PROXY_STOCK_REFUSED: причины из details видны по каждому id',
+      (original) => replaceOnce(original, 'return { items };', 'return {};')],
+    ['stock-unknown-reason-exposed', apiClientFile, 'PROXY_STOCK_REFUSED: причины из details видны по каждому id',
+      (original) => replaceOnce(original, "['NOT_FOUND', 'NOT_READY', 'BUSY', 'ADDRESS_IN_USE'].includes(reason)", 'true')],
+    ['stock-visible-reasons-dropped', resultFile, 'PROXY_STOCK_REFUSED: причины из details видны по каждому id',
+      (original) => replaceOnce(original, 'for (const item of details.items ?? []) parts.push(`${item.proxyId}: ${item.reason}.`);', '')],
+    ['stock-requested-dropped', apiClientFile, 'отказы подключения: available, requested и files читаются из details закрытым набором',
+      (original) => replaceOnce(original, '? { requested } : {}', '? {} : {}')],
+    ['stock-files-dropped', apiClientFile, 'отказы подключения: available, requested и files читаются из details закрытым набором',
+      (original) => replaceOnce(original, 'return { files };', 'return {};')],
+    ['stock-route-removed', 'src/schemas/mcp-v2-route-map.json', 'содержит ровно десять новых маршрутов',
+      (original) => JSON.stringify(JSON.parse(original).filter((entry) => entry.tool !== 'besales_platform_telegram_personal_connect_link'), null, 2) + '\n'],
+    ['stock-link-truncatable', stockFile, 'proxy_stock_import_link: ссылка neverTruncate',
+      (original) => replaceOnce(original, 'const resultPolicy = { neverTruncate: true, maxResultBytes: 16 * 1024 }', 'const resultPolicy = { neverTruncate: false, maxResultBytes: 16 * 1024 }')],
+    ['connect-link-truncatable', connectFile, 'connect_link: ссылка neverTruncate',
+      (original) => replaceOnce(original, 'resultPolicy: { neverTruncate: true, maxResultBytes: 16 * 1024 }', 'resultPolicy: { neverTruncate: false, maxResultBytes: 16 * 1024 }')],
+    ['plan-two-forms-runtime', connectFile, 'план: строгая форма',
+      (original) => replaceOnce(original, "z.object({ country_code: z.string().regex(/^[A-Z]{2}$/u) }).strict()", "z.object({ country_code: z.string().regex(/^[A-Z]{2}$/u) }).passthrough()")],
+    ['plan-two-forms-published', publishedFile, 'план: строгая форма',
+      publishedMutation('connect_link', (schema) => {
+        const plan = schema.properties.proxy_plan;
+        plan.anyOf = plan.oneOf;
+        delete plan.oneOf;
+        for (const form of plan.anyOf) delete form.additionalProperties;
+      })],
+    ['plan-without-channel-runtime', connectFile, 'план: строгая форма',
+      (original) => replaceOnce(original, 'channel_id: uuidSchema,', 'channel_id: uuidSchema.optional(),')],
+    ['plan-without-channel-published', publishedFile, 'план: строгая форма',
+      publishedMutation('connect_link', (schema) => { schema.required = []; })],
+    ['take-without-selection-runtime', tool, 'take: ровно одна форма',
+      (original) => replaceOnce(original, ': input.count === undefined)', ': false)')],
+    ['take-without-selection-published', publishedFile, 'take: ровно одна форма',
+      publishedMutation('proxy_take_from_stock', (schema) => { delete schema.oneOf; })],
+  ];
+  for (const [name, file, pattern, mutate] of mutations) {
+    const original = readFileSync(file, 'utf8');
+    try {
+      writeFileSync(file, mutate(original));
+      const { result, report } = run(pattern, name, stockSuite);
+      const failures = report.testResults.flatMap((entry) => entry.assertionResults).filter((test) =>
+        test.status === 'failed' && test.fullName.includes(pattern) &&
+        test.failureMessages.some((message) => message.includes('AssertionError') || /^Error: promise resolved .* instead of rejecting/su.test(message)),
+      );
+      if (result.status === 0 || result.signal || failures.length === 0) {
+        throw new Error('SURVIVED_OR_INFRA_FAILURE:' + name + '\n' + result.stdout + result.stderr);
+      }
+      console.log('KILLED ' + name + ' ' + JSON.stringify(failures.map((test) => test.fullName)));
+    } finally {
+      writeFileSync(file, original);
+    }
+  }
+
+} finally {
+  rmSync(temporary, { recursive: true, force: true });
+}