@besales/mcp 1.0.0-beta.5 → 1.0.0-beta.9

package/scripts/sync-telegram-profile-photo.mjs

@@ -0,0 +1,57 @@
+// Узкое расширение отгруженной формы: прежние поля и ограничения остаются входом.
+import { readFileSync } from 'node:fs';
+import { z } from 'zod';
+import {
+  telegramPersonalProfileTools,
+  profilePhotoHelp,
+} from '../src/tools/definitions/telegram-personal-profile.js';
+import { mappingCases } from '../src/tools/registry-mapping.cases.js';
+import { writeGeneratedFile } from './generated-output.mjs';
+
+const name = 'besales_platform_telegram_personal_profile_bulk';
+const definition = telegramPersonalProfileTools.find((tool) => tool.name === name);
+const registryFile = new URL('../src/schemas/mcp-tools.json', import.meta.url);
+const registry = JSON.parse(readFileSync(registryFile, 'utf8'));
+const entry = registry.tools.find((tool) => tool.name === name);
+if (!entry || !definition) throw new Error('TELEGRAM_PROFILE_TOOL_MISSING');
+const derived = z.toJSONSchema(definition.schema, { io: 'input' });
+entry.inputSchema.properties.stored_file_id = derived.properties.stored_file_id;
+const changes = entry.inputSchema.allOf.find((rule) => rule.anyOf);
+if (!changes) throw new Error('TELEGRAM_PROFILE_CHANGES_RULE_MISSING');
+if (!changes.anyOf.some((rule) => rule.required?.includes('stored_file_id')))
+  changes.anyOf.push({ required: ['stored_file_id'] });
+const old = 'Фото через этот инструмент не меняется — только в приложении.';
+if (entry.description.includes(old))
+  entry.description = entry.description.replace(old, profilePhotoHelp);
+else {
+  const start = entry.description.indexOf('Фото: передай stored_file_id');
+  const end = entry.description.indexOf(' Требует manage:channels.', start);
+  if (start < 0 || end <= start) throw new Error('TELEGRAM_PROFILE_DESCRIPTION_DRIFT');
+  entry.description =
+    entry.description.slice(0, start) + profilePhotoHelp + entry.description.slice(end);
+}
+writeGeneratedFile(registryFile, JSON.stringify(registry, null, 2) + '\n');
+
+const routesFile = new URL('../src/schemas/mcp-v2-route-map.json', import.meta.url);
+const routes = JSON.parse(readFileSync(routesFile, 'utf8'));
+const variants = ['photo-selected', 'channel-face'];
+const samples = mappingCases.filter((row) => row.name === name && row.input.stored_file_id);
+if (samples.length !== variants.length) throw new Error('TELEGRAM_PROFILE_PHOTO_SAMPLES_MISSING');
+for (const [index, sample] of samples.entries()) {
+  const request = definition.createRequest(definition.schema.parse(sample.input));
+  const row = {
+    tool: name + '@' + variants[index],
+    canonicalArgs: sample.input,
+    expected: {
+      method: request.method,
+      path: request.path,
+      pathTemplate: '/channels/:channelId/telegram-personal/profile/bulk',
+      body: request.body,
+    },
+    backendTarget: 'besales-api',
+  };
+  const previous = routes.findIndex((candidate) => candidate.tool === row.tool);
+  if (previous < 0) routes.push(row);
+  else routes[previous] = row;
+}
+writeGeneratedFile(routesFile, JSON.stringify(routes, null, 2) + '\n');

package/scripts/sync-telegram-session-import.mjs

@@ -0,0 +1,39 @@
+// Реестр и опись выводятся из исполняемого определения, не из второй рукописной схемы.
+import { readFileSync } from 'node:fs';
+import { z } from 'zod';
+import {
+  telegramSessionImportDescription,
+  telegramSessionImportTools,
+} from '../src/tools/definitions/telegram-session-import.js';
+import { writeGeneratedFile } from './generated-output.mjs';
+
+const registryFile = new URL('../src/schemas/mcp-tools.json', import.meta.url);
+const registry = JSON.parse(readFileSync(registryFile, 'utf8'));
+for (const definition of telegramSessionImportTools) {
+  const { $schema: _dialect, ...inputSchema } = z.toJSONSchema(definition.schema);
+  const entry = {
+    name: definition.name,
+    description: telegramSessionImportDescription,
+    inputSchema,
+  };
+  const index = registry.tools.findIndex((tool) => tool.name === entry.name);
+  if (index < 0) registry.tools.push(entry);
+  else registry.tools[index] = entry;
+}
+writeGeneratedFile(registryFile, JSON.stringify(registry, null, 2) + '\n');
+
+const inventoryFile = new URL(
+  '../src/tools/__fixtures__/secret-read-inventory-additions.json',
+  import.meta.url,
+);
+const inventory = JSON.parse(readFileSync(inventoryFile, 'utf8'));
+const reader = 'src/tools/definitions/telegram-session-import.ts';
+const group = {
+  reader,
+  domain: 'channels-setup',
+  tools: telegramSessionImportTools.map((tool) => tool.name),
+};
+const index = inventory.groups.findIndex((entry) => entry.reader === reader);
+if (index < 0) inventory.groups.push(group);
+else inventory.groups[index] = group;
+writeGeneratedFile(inventoryFile, JSON.stringify(inventory, null, 2) + '\n');

package/scripts/sync-tool-inventory.mjs

@@ -1,9 +1,13 @@
-import { readFileSync, writeFileSync } from 'node:fs';
+import { writeGeneratedFile } from './generated-output.mjs';
+import { readFileSync } from 'node:fs';
 import ts from 'typescript';
 
 const source = readFileSync(new URL('../src/tools/inventory.ts', import.meta.url), 'utf8');
 const compiled = ts.transpileModule(source, {
-  compilerOptions: { module: ts.ModuleKind.ESNext, target: ts.ScriptTarget.ES2022 },
+  compilerOptions: {
+    module: ts.ModuleKind.ESNext,
+    target: ts.ScriptTarget.ES2022,
+  },
 }).outputText;
 const { renderToolInventoryMarkdown, toolInventoryCounts } = await import(
   'data:text/javascript;base64,' + Buffer.from(compiled).toString('base64')
@@ -13,15 +17,19 @@ const schema = JSON.parse(readFileSync(schemaUrl, 'utf8'));
 const names = schema.tools.filter((tool) => tool.status !== 'removed').map((tool) => tool.name);
 schema.summary.total_tools = names.length;
 schema.summary.tools_by_category = toolInventoryCounts(names);
-writeFileSync(schemaUrl, JSON.stringify(schema, null, 2) + '\n');
+writeGeneratedFile(schemaUrl, JSON.stringify(schema, null, 2) + '\n');
 const readmeUrl = new URL('../README.md', import.meta.url);
 const readme = readFileSync(readmeUrl, 'utf8');
 const begin = '<!-- BEGIN GENERATED TOOL INVENTORY -->';
 const end = '<!-- END GENERATED TOOL INVENTORY -->';
-const first = readme.indexOf(begin), last = readme.indexOf(end);
+const first = readme.indexOf(begin),
+  last = readme.indexOf(end);
 if (first < 0 || last < first) throw new Error('README inventory markers missing');
-writeFileSync(
+writeGeneratedFile(
   readmeUrl,
-  readme.slice(0, first + begin.length) + '\n\n' +
-  renderToolInventoryMarkdown(names) + '\n\n' + readme.slice(last),
+  readme.slice(0, first + begin.length) +
+    '\n\n' +
+    renderToolInventoryMarkdown(names) +
+    '\n\n' +
+    readme.slice(last),
 );

package/scripts/sync-trigger-argument-schema.mjs

@@ -1,13 +1,15 @@
-import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { writeGeneratedFile } from './generated-output.mjs';
+import { readFileSync } from 'node:fs';
 import { resolve } from 'node:path';
 import { pathToFileURL } from 'node:url';
 import openapiTS from 'openapi-typescript';
 import { z } from 'zod';
-import { linkTrackingTools } from '../dist/tools/definitions/link-tracking.js';
-import { triggerActionArgumentSchema } from '../dist/tools/definitions/trigger-argument.schema.js';
-import { toolDefinitions } from '../dist/tools/definitions.js';
-import { triggerActionItemSchema } from '../dist/tools/definitions/platform-setup.js';
-import { canonicalCallOperatorTaskSchema } from '../dist/tools/definitions/call-operator-task.schema.js';
+import { linkTrackingTools } from '../src/tools/definitions/link-tracking.js';
+import { triggerActionArgumentSchema } from '../src/tools/definitions/trigger-argument.schema.js';
+import { toolDefinitions } from '../src/tools/definitions.js';
+import { triggerActionItemSchema } from '../src/tools/definitions/platform-setup.js';
+import { canonicalCallOperatorTaskSchema } from '../src/tools/definitions/call-operator-task.schema.js';
+import { stagePoolFields } from '../src/tools/definitions/crm-stage-pool.schema.js';
 import { syncCallOperatorTaskSchema } from './sync-trigger-task-schema.mjs';
 
 // Границы опубликованных полей — из контракта выбранного API checkout, не из ручного JSON.
@@ -54,7 +56,10 @@ for (const [name, field] of [
   delete published.$schema;
   tool.inputSchema.properties[field] = published;
 }
-const argument = z.toJSONSchema(triggerActionArgumentSchema, { target: 'draft-7', io: 'input' });
+const argument = z.toJSONSchema(triggerActionArgumentSchema, {
+  target: 'draft-7',
+  io: 'input',
+});
 delete argument.$schema;
 for (const name of ['besales_trigger_upsert']) {
   const tool = registry.tools.find((entry) => entry.name === name);
@@ -65,14 +70,25 @@ for (const name of ['besales_trigger_upsert']) {
     throw new Error(`TRIGGER_ACTION_SCHEMA_MISSING:${name}`);
   const publishedAction = tool.inputSchema.properties.actions.items;
   publishedAction.properties.callOperatorConfig = action.properties.callOperatorConfig;
-  publishedAction.properties.config = action.properties.config;
+  const poolProperties = Object.fromEntries(
+    [...Object.keys(stagePoolFields), 'extra']
+      .filter((field) => publishedAction.properties.config.properties[field] !== undefined)
+      .map((field) => [field, publishedAction.properties.config.properties[field]]),
+  );
+  publishedAction.properties.config = {
+    ...action.properties.config,
+    properties: { ...action.properties.config.properties, ...poolProperties },
+  };
 }
 // Поля каталога публикуются из исполняемой схемы: null очистки и refine входят в носитель.
 for (const name of ['besales_tracked_link_create', 'besales_tracked_link_update']) {
   const definition = linkTrackingTools.find((entry) => entry.name === name);
   const tool = registry.tools.find((entry) => entry.name === name);
   if (!definition || !tool) throw new Error(`LINK_CATALOG_SCHEMA_MISSING:${name}`);
-  const derived = z.toJSONSchema(definition.schema, { target: 'draft-7', io: 'input' });
+  const derived = z.toJSONSchema(definition.schema, {
+    target: 'draft-7',
+    io: 'input',
+  });
   delete derived.$schema;
   if (!derived.properties?.personal_url_variable)
     throw new Error(`PERSONAL_URL_SCHEMA_MISSING:${name}`);
@@ -86,12 +102,13 @@ for (const name of ['besales_tracked_link_create', 'besales_tracked_link_update'
       throw new Error(`PERSONAL_URL_NULLABLE_SCHEMA_UNEXPECTED:${name}`);
     }
     // Отгруженная форма сохраняет ограничения строки и отдельное разрешение очистки через null.
-    personalUrlVariable = { ...anyOf[0], ...metadata, type: ['string', 'null'] };
+    personalUrlVariable = {
+      ...anyOf[0],
+      ...metadata,
+      type: ['string', 'null'],
+    };
   }
   tool.inputSchema.properties.personal_url_variable = personalUrlVariable;
 }
 const serialized = `${JSON.stringify(registry, null, 2)}\n`;
-writeFileSync(target, serialized);
-// Уже собранный пакет и публикуемый исходник обязаны рекламировать одинаковые ограничения.
-mkdirSync(new URL('../dist/schemas/', import.meta.url), { recursive: true });
-writeFileSync(new URL('../dist/schemas/mcp-tools.json', import.meta.url), serialized);
+writeGeneratedFile(target, serialized);

package/scripts/sync-trigger-event-schema.mjs

@@ -1,6 +1,7 @@
+import { writeGeneratedFile } from './generated-output.mjs';
 // Точечный вариант sync-api-contracts: только схема и описание событийного триггера.
 // Сохраняет ручные ограничения и все прочие инструменты; типы и маршруты уже актуальны.
-import { readFileSync, writeFileSync } from 'node:fs';
+import { readFileSync } from 'node:fs';
 import { z } from 'zod';
 import { toolDefinitions } from '../src/tools/definitions.ts';
 import { eventTriggerDescription } from '../src/tools/definitions/trigger-upsert.tool.ts';
@@ -9,12 +10,16 @@ import { syncSchemaDescriptions } from './sync-schema-descriptions.mjs';
 const registryPath = new URL('../src/schemas/mcp-tools.json', import.meta.url);
 const registry = JSON.parse(readFileSync(registryPath, 'utf8'));
 const name = 'besales_trigger_upsert';
-const definition = toolDefinitions.find(tool => tool.name === name);
-const tool = registry.tools.find(tool => tool.name === name);
+const definition = toolDefinitions.find((tool) => tool.name === name);
+const tool = registry.tools.find((tool) => tool.name === name);
 if (!definition || !tool) throw new Error(`REGISTRY_TOOL_MISSING:${name}`);
-const derived = z.toJSONSchema(definition.schema, { io: 'input', unrepresentable: 'any' });
+const derived = z.toJSONSchema(definition.schema, {
+  io: 'input',
+  unrepresentable: 'any',
+});
 if (!derived.properties?.trigger) throw new Error('EVENT_TRIGGER_SCHEMA_MISSING');
 tool.inputSchema.properties.trigger = derived.properties.trigger;
 syncSchemaDescriptions(tool.inputSchema, derived);
-if (!tool.description.includes(eventTriggerDescription)) tool.description += ' ' + eventTriggerDescription;
-writeFileSync(registryPath, JSON.stringify(registry, null, 2) + '\n');
+if (!tool.description.includes(eventTriggerDescription))
+  tool.description += ' ' + eventTriggerDescription;
+writeGeneratedFile(registryPath, JSON.stringify(registry, null, 2) + '\n');

package/scripts/sync-trigger-step-reference-schema.mjs

@@ -0,0 +1,21 @@
+import { writeGeneratedFile } from './generated-output.mjs';
+// Пересобирает только вход ссылок, сохраняя ручные ограничения остальных полей реестра.
+import { readFileSync } from 'node:fs';
+import { z } from 'zod';
+import { triggerSetupActionItemSchema } from '../src/tools/definitions/trigger-action-item.schema.ts';
+import { editOneStepDescription } from '../src/tools/definitions/trigger-upsert.tool.ts';
+
+const target = new URL('../src/schemas/mcp-tools.json', import.meta.url);
+const registry = JSON.parse(readFileSync(target, 'utf8'));
+const tool = registry.tools.find((item) => item.name === 'besales_trigger_upsert');
+const derived = z.toJSONSchema(triggerSetupActionItemSchema, {
+  io: 'input',
+  unrepresentable: 'any',
+});
+if (!tool?.inputSchema.properties.actions.items.properties || !derived.properties?.stepId)
+  throw new Error('TRIGGER_STEP_REFERENCE_SCHEMA_MISSING');
+for (const field of ['stepId', 'onError', 'stopOnSuccess'])
+  tool.inputSchema.properties.actions.items.properties[field] = derived.properties[field];
+if (!tool.description.includes(editOneStepDescription))
+  tool.description += ' ' + editOneStepDescription;
+writeGeneratedFile(target, JSON.stringify(registry, null, 2) + '\n');

package/scripts/sync-wave-id-schemas.mjs

@@ -1,7 +1,8 @@
-import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { writeGeneratedFile } from './generated-output.mjs';
+import { readFileSync } from 'node:fs';
 import { z } from 'zod';
 
-import { platformSetupWaveTools } from '../dist/tools/definitions/platform-setup-wave.js';
+import { platformSetupWaveTools } from '../src/tools/definitions/platform-setup-wave.js';
 
 // Ограничения берутся из исполняемых схем; подписи объясняют номера без имён таблиц.
 const numericPaths = {
@@ -46,10 +47,10 @@ for (const [name, paths] of Object.entries(numericPaths)) {
       throw new Error(`WAVE_ID_SCHEMA_MISSING:${name}:${path.join('.')}`);
     }
     for (const key of Object.keys(published)) delete published[key];
-    Object.assign(published, executable, { description: descriptions[path.at(-1)] });
+    Object.assign(published, executable, {
+      description: descriptions[path.at(-1)],
+    });
   }
 }
 const serialized = `${JSON.stringify(registry, null, 2)}\n`;
-writeFileSync(target, serialized);
-mkdirSync(new URL('../dist/schemas/', import.meta.url), { recursive: true });
-writeFileSync(new URL('../dist/schemas/mcp-tools.json', import.meta.url), serialized);
+writeGeneratedFile(target, serialized);

package/scripts/telegram-personal-profile-mutants.mjs

@@ -9,11 +9,19 @@ const published = 'src/schemas/mcp-tools.json';
 const temporary = mkdtempSync(join(tmpdir(), 'telegram-profile-mutants-'));
 function run(pattern, name) {
   const output = join(temporary, name + '.json');
-  const result = spawnSync(process.execPath, [
-    'node_modules/vitest/vitest.mjs', 'run', suite,
-    '--maxWorkers=1', '--reporter=json', '--outputFile=' + output,
-    ...(pattern ? ['--testNamePattern', pattern] : []),
-  ], { encoding: 'utf8', timeout: 180000 });
+  const result = spawnSync(
+    process.execPath,
+    [
+      'node_modules/vitest/vitest.mjs',
+      'run',
+      suite,
+      '--maxWorkers=1',
+      '--reporter=json',
+      '--outputFile=' + output,
+      ...(pattern ? ['--testNamePattern', pattern] : []),
+    ],
+    { encoding: 'utf8', timeout: 180000 },
+  );
   const report = JSON.parse(readFileSync(output, 'utf8'));
   return { result, report };
 }
@@ -29,6 +37,28 @@ try {
   }
   console.log('BASELINE PASS ' + baseline.report.numPassedTests);
   for (const entry of [
+    {
+      name: 'photo-mapping-removed',
+      file: tool,
+      pattern: 'одно фото из stored_file_id уходит выбранным номерам',
+      mutate: (text) => replaceOnce(text, '      avatar: input.stored_file_id,\n', ''),
+    },
+    {
+      name: 'photo-not-counted-as-change-published',
+      file: published,
+      pattern: 'одно фото из stored_file_id уходит выбранным номерам',
+      mutate: (text) => {
+        const registry = JSON.parse(text);
+        const schema = registry.tools.find(
+          (item) => item.name === 'besales_platform_telegram_personal_profile_bulk',
+        ).inputSchema;
+        const rule = schema.allOf.find((item) => item.anyOf);
+        const before = rule.anyOf.length;
+        rule.anyOf = rule.anyOf.filter((item) => !item.required?.includes('stored_file_id'));
+        if (rule.anyOf.length !== before - 1) throw new Error('MUTATION_ANCHOR_NOT_UNIQUE');
+        return JSON.stringify(registry, null, 2) + '\n';
+      },
+    },
     {
       // Главный мутант пачки: оба режима ников разрешены одновременно в Zod-схеме инструмента.
       name: 'username-modes-both-allowed-runtime',
@@ -53,7 +83,11 @@ try {
         ).inputSchema;
         const before = schema.allOf.length;
         schema.allOf = schema.allOf.filter(
-          (rule) => !(rule.not?.required?.includes('usernames') && rule.not.required.includes('username_base')),
+          (rule) =>
+            !(
+              rule.not?.required?.includes('usernames') &&
+              rule.not.required.includes('username_base')
+            ),
         );
         if (schema.allOf.length !== before - 1) throw new Error('MUTATION_ANCHOR_NOT_UNIQUE');
         return JSON.stringify(registry, null, 2) + '\n';
@@ -64,8 +98,7 @@ try {
       name: 'idempotency-key-default-header',
       file: tool,
       pattern: 'идёт заголовком x-idempotency-key',
-      mutate: (text) =>
-        replaceOnce(text, "    idempotencyKeyHeader: 'X-Idempotency-Key',\n", ''),
+      mutate: (text) => replaceOnce(text, "    idempotencyKeyHeader: 'X-Idempotency-Key',\n", ''),
     },
   ]) {
     const original = readFileSync(entry.file, 'utf8');
@@ -75,18 +108,26 @@ try {
       // Убитым считается только провал утверждения внутри названного теста: AssertionError
       // или отказ vitest expect(...).rejects («promise resolved … instead of rejecting»).
       // Ошибка загрузки набора не даёт assertionResults и остаётся INFRA_FAILURE.
-      const failures = report.testResults.flatMap((item) => item.assertionResults).filter((test) =>
-        test.status === 'failed' && test.fullName.includes(entry.pattern) &&
-        test.failureMessages.some(
-          (message) =>
-            message.includes('AssertionError') ||
-            /^Error: promise resolved .* instead of rejecting/su.test(message),
-        ),
-      );
+      const failures = report.testResults
+        .flatMap((item) => item.assertionResults)
+        .filter(
+          (test) =>
+            test.status === 'failed' &&
+            test.fullName.includes(entry.pattern) &&
+            test.failureMessages.some(
+              (message) =>
+                message.includes('AssertionError') ||
+                /^Error: promise resolved .* instead of rejecting/su.test(message),
+            ),
+        );
       if (result.status === 0 || result.signal || failures.length === 0) {
-        throw new Error('SURVIVED_OR_INFRA_FAILURE:' + entry.name + '\n' + result.stdout + result.stderr);
+        throw new Error(
+          'SURVIVED_OR_INFRA_FAILURE:' + entry.name + '\n' + result.stdout + result.stderr,
+        );
       }
-      console.log('KILLED ' + entry.name + ' ' + JSON.stringify(failures.map((test) => test.fullName)));
+      console.log(
+        'KILLED ' + entry.name + ' ' + JSON.stringify(failures.map((test) => test.fullName)),
+      );
     } finally {
       writeFileSync(entry.file, original);
     }

package/scripts/telegram-personal-proxy-mutants.mjs

@@ -0,0 +1,171 @@
+import { spawnSync } from 'node:child_process';
+import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+
+const suite = 'src/tools/definitions/telegram-personal-proxies.spec.ts';
+const tool = 'src/tools/definitions/telegram-personal-proxies.ts';
+const temporary = mkdtempSync(join(tmpdir(), 'telegram-proxy-mutants-'));
+function run(pattern, name, suitePath = suite) {
+  const output = join(temporary, name + '.json');
+  const result = spawnSync(process.execPath, [
+    'node_modules/vitest/vitest.mjs', 'run', suitePath,
+    '--maxWorkers=1', '--reporter=json', '--outputFile=' + output,
+    ...(pattern ? ['--testNamePattern', pattern] : []),
+  ], { encoding: 'utf8', timeout: 180000 });
+  const report = JSON.parse(readFileSync(output, 'utf8'));
+  return { result, report };
+}
+function replaceOnce(text, anchor, replacement) {
+  if (text.split(anchor).length !== 2) throw new Error('MUTATION_ANCHOR_NOT_UNIQUE');
+  return text.replace(anchor, replacement);
+}
+try {
+  const baseline = run(undefined, 'baseline');
+  if (baseline.result.status !== 0 || baseline.report.numPassedTests === 0) {
+    throw new Error('BASELINE_FAILED\n' + baseline.result.stdout + baseline.result.stderr);
+  }
+  console.log('BASELINE PASS ' + baseline.report.numPassedTests);
+  for (const [suffix, description] of [
+    ['proxy_delete', 'Явное согласие человека на удаление прокси.'],
+    ['account_proxy_change', 'Явное согласие человека: номер переподключится.'],
+  ]) {
+    for (const target of ['runtime', 'published']) {
+      const file = target === 'runtime' ? tool : 'src/schemas/mcp-tools.json';
+      const name = suffix + '-without-confirmation-' + target;
+      const pattern = suffix + ': без явного true отказ до HTTP';
+      const original = readFileSync(file, 'utf8');
+      try {
+        let mutated;
+        if (target === 'runtime') {
+          const anchor = `explicit_confirmation: z.literal(true).describe('${description}')`;
+          mutated = replaceOnce(original, anchor,
+            `explicit_confirmation: z.literal(true).optional().describe('${description}')`);
+        } else {
+          const registry = JSON.parse(original);
+          const schema = registry.tools.find((entry) =>
+            entry.name === 'besales_platform_telegram_personal_' + suffix,
+          ).inputSchema;
+          if (!schema.required.includes('explicit_confirmation')) throw new Error('MUTATION_ANCHOR_NOT_UNIQUE');
+          schema.required = schema.required.filter((field) => field !== 'explicit_confirmation');
+          mutated = JSON.stringify(registry, null, 2) + '\n';
+        }
+        writeFileSync(file, mutated);
+        const { result, report } = run(pattern, name);
+        // Убит только утверждением именованного теста; ошибка загрузки — INFRA_FAILURE.
+        const failures = report.testResults.flatMap((entry) => entry.assertionResults).filter((test) =>
+          test.status === 'failed' && test.fullName.includes(pattern) &&
+          test.failureMessages.some((message) =>
+            message.includes('AssertionError') ||
+            /^Error: promise resolved .* instead of rejecting/su.test(message),
+          ),
+        );
+        if (result.status === 0 || result.signal || failures.length === 0) {
+          throw new Error('SURVIVED_OR_INFRA_FAILURE:' + name + '\n' + result.stdout + result.stderr);
+        }
+        console.log('KILLED ' + name + ' ' + JSON.stringify(failures.map((test) => test.fullName)));
+      } finally {
+        writeFileSync(file, original);
+      }
+    }
+  }
+  const stockSuite = 'src/tools/definitions/telegram-proxy-stock.spec.ts';
+  const stockFile = 'src/tools/definitions/telegram-proxy-stock.ts';
+  const connectFile = 'src/tools/definitions/telegram-personal-connect.ts';
+  const apiClientFile = 'src/http/api-client.ts';
+  const resultFile = 'src/tools/result.ts';
+  const publishedFile = 'src/schemas/mcp-tools.json';
+  const stockBaseline = run(undefined, 'stock-baseline', stockSuite);
+  if (stockBaseline.result.status !== 0 || stockBaseline.report.numPassedTests === 0) {
+    throw new Error('BASELINE_FAILED\n' + stockBaseline.result.stdout + stockBaseline.result.stderr);
+  }
+  console.log('STOCK BASELINE PASS ' + stockBaseline.report.numPassedTests);
+  function publishedMutation(suffix, change) {
+    return (original) => {
+      const registry = JSON.parse(original);
+      const schema = registry.tools.find((entry) => entry.name === 'besales_platform_telegram_personal_' + suffix).inputSchema;
+      change(schema);
+      return JSON.stringify(registry, null, 2) + '\n';
+    };
+  }
+  function inTool(original, suffix, anchor, replacement) {
+    const start = original.indexOf("name: 'besales_platform_telegram_personal_" + suffix + "'");
+    if (start < 0) throw new Error('MUTATION_ANCHOR_NOT_UNIQUE');
+    const next = original.indexOf('  defineTool({', start);
+    const end = next < 0 ? original.length : next;
+    return original.slice(0, start) + replaceOnce(original.slice(start, end), anchor, replacement) + original.slice(end);
+  }
+  const mutations = [
+    ['stock-loose-schema', stockFile, 'proxy_stock_import_link: строгая схема отвергает секреты до HTTP',
+      (original) => inTool(original, 'proxy_stock_import_link', 'schema: z.object(workspace).strict()', 'schema: z.object(workspace).passthrough()')],
+    ['stock-delete-without-confirmation-runtime', stockFile, 'proxy_stock_delete: без явного true отказ до HTTP',
+      (original) => replaceOnce(original, "explicit_confirmation: z.literal(true).describe('Явное согласие человека на удаление прокси из запаса.')", "explicit_confirmation: z.literal(true).optional().describe('Явное согласие человека на удаление прокси из запаса.')")],
+    ['stock-delete-without-confirmation-published', publishedFile, 'proxy_stock_delete: без явного true отказ до HTTP',
+      publishedMutation('proxy_stock_delete', (schema) => { schema.required = schema.required.filter((field) => field !== 'explicit_confirmation'); })],
+    ...['proxy_take_from_stock', 'proxy_return_to_stock'].map((suffix) => [
+      suffix + '-changed-key', tool, suffix + ': повтор сохраняет настоящий заголовок и тело',
+      (original) => inTool(original, suffix, 'idempotencyKey: input.action_id', "idempotencyKey: '00000000-0000-4000-8000-000000000099'"),
+    ]),
+    ...['proxy_take_from_stock', 'proxy_return_to_stock'].map((suffix) => [
+      suffix + '-wrong-key-header', tool, suffix + ': повтор сохраняет настоящий заголовок и тело',
+      (original) => inTool(original, suffix, "idempotencyKeyHeader: 'X-Idempotency-Key'", "idempotencyKeyHeader: 'Idempotency-Key'"),
+    ]),
+    ['stock-details-at-top-level', apiClientFile, 'PROXY_STOCK_NOT_ENOUGH: доступность из details видна в тексте',
+      (original) => replaceOnce(original, "...proxyStockErrorDetails(asRecord(source?.['details']), code)", '...proxyStockErrorDetails(source, code)')],
+    ['stock-available-dropped', apiClientFile, 'PROXY_STOCK_NOT_ENOUGH: доступность из details видна в тексте',
+      (original) => replaceOnce(original, '? { available } : {}', '? {} : {}')],
+    ['stock-items-dropped', apiClientFile, 'PROXY_STOCK_REFUSED: причины из details видны по каждому id',
+      (original) => replaceOnce(original, 'return { items };', 'return {};')],
+    ['stock-unknown-reason-exposed', apiClientFile, 'PROXY_STOCK_REFUSED: причины из details видны по каждому id',
+      (original) => replaceOnce(original, "['NOT_FOUND', 'NOT_READY', 'BUSY', 'ADDRESS_IN_USE'].includes(reason)", 'true')],
+    ['stock-visible-reasons-dropped', resultFile, 'PROXY_STOCK_REFUSED: причины из details видны по каждому id',
+      (original) => replaceOnce(original, 'for (const item of details.items ?? []) parts.push(`${item.proxyId}: ${item.reason}.`);', '')],
+    ['stock-requested-dropped', apiClientFile, 'отказы подключения: available, requested и files читаются из details закрытым набором',
+      (original) => replaceOnce(original, '? { requested } : {}', '? {} : {}')],
+    ['stock-files-dropped', apiClientFile, 'отказы подключения: available, requested и files читаются из details закрытым набором',
+      (original) => replaceOnce(original, 'return { files };', 'return {};')],
+    ['stock-route-removed', 'src/schemas/mcp-v2-route-map.json', 'содержит ровно десять новых маршрутов',
+      (original) => JSON.stringify(JSON.parse(original).filter((entry) => entry.tool !== 'besales_platform_telegram_personal_connect_link'), null, 2) + '\n'],
+    ['stock-link-truncatable', stockFile, 'proxy_stock_import_link: ссылка neverTruncate',
+      (original) => replaceOnce(original, 'const resultPolicy = { neverTruncate: true, maxResultBytes: 16 * 1024 }', 'const resultPolicy = { neverTruncate: false, maxResultBytes: 16 * 1024 }')],
+    ['connect-link-truncatable', connectFile, 'connect_link: ссылка neverTruncate',
+      (original) => replaceOnce(original, 'resultPolicy: { neverTruncate: true, maxResultBytes: 16 * 1024 }', 'resultPolicy: { neverTruncate: false, maxResultBytes: 16 * 1024 }')],
+    ['plan-two-forms-runtime', connectFile, 'план: строгая форма',
+      (original) => replaceOnce(original, "z.object({ country_code: z.string().regex(/^[A-Z]{2}$/u) }).strict()", "z.object({ country_code: z.string().regex(/^[A-Z]{2}$/u) }).passthrough()")],
+    ['plan-two-forms-published', publishedFile, 'план: строгая форма',
+      publishedMutation('connect_link', (schema) => {
+        const plan = schema.properties.proxy_plan;
+        plan.anyOf = plan.oneOf;
+        delete plan.oneOf;
+        for (const form of plan.anyOf) delete form.additionalProperties;
+      })],
+    ['plan-without-channel-runtime', connectFile, 'план: строгая форма',
+      (original) => replaceOnce(original, 'channel_id: uuidSchema,', 'channel_id: uuidSchema.optional(),')],
+    ['plan-without-channel-published', publishedFile, 'план: строгая форма',
+      publishedMutation('connect_link', (schema) => { schema.required = []; })],
+    ['take-without-selection-runtime', tool, 'take: ровно одна форма',
+      (original) => replaceOnce(original, ': input.count === undefined)', ': false)')],
+    ['take-without-selection-published', publishedFile, 'take: ровно одна форма',
+      publishedMutation('proxy_take_from_stock', (schema) => { delete schema.oneOf; })],
+  ];
+  for (const [name, file, pattern, mutate] of mutations) {
+    const original = readFileSync(file, 'utf8');
+    try {
+      writeFileSync(file, mutate(original));
+      const { result, report } = run(pattern, name, stockSuite);
+      const failures = report.testResults.flatMap((entry) => entry.assertionResults).filter((test) =>
+        test.status === 'failed' && test.fullName.includes(pattern) &&
+        test.failureMessages.some((message) => message.includes('AssertionError') || /^Error: promise resolved .* instead of rejecting/su.test(message)),
+      );
+      if (result.status === 0 || result.signal || failures.length === 0) {
+        throw new Error('SURVIVED_OR_INFRA_FAILURE:' + name + '\n' + result.stdout + result.stderr);
+      }
+      console.log('KILLED ' + name + ' ' + JSON.stringify(failures.map((test) => test.fullName)));
+    } finally {
+      writeFileSync(file, original);
+    }
+  }
+
+} finally {
+  rmSync(temporary, { recursive: true, force: true });
+}