@dobbyai/mcp-external 1.0.4 → 1.2.0

package/dist/__tests__/auth.test.js

@@ -0,0 +1,161 @@
+/**
+ * MCP Auth Tests
+ *
+ * Tests for OAuth proxy provider and token verifier.
+ */
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+import { InvalidTokenError, ServerError, } from '@modelcontextprotocol/sdk/server/auth/errors.js';
+import { TokenVerifier } from '../auth/token-verifier.js';
+import { createOAuthProvider } from '../auth/oauth-provider.js';
+describe('TokenVerifier', () => {
+    let verifier;
+    beforeEach(() => {
+        verifier = new TokenVerifier('https://dobby-ai.com');
+        vi.restoreAllMocks();
+    });
+    afterEach(() => {
+        verifier.clearCache();
+    });
+    const validTokenResponse = {
+        active: true,
+        user_id: 'pu_user123',
+        org_id: 'org_abc',
+        tenant_id: 'tenant_xyz',
+        scope: 'mcp:read mcp:execute',
+        client_id: 'mcp_client1',
+        exp: Math.floor(Date.now() / 1000) + 3600,
+    };
+    it('validates a valid token against remote endpoint', async () => {
+        global.fetch = vi.fn().mockResolvedValue({
+            ok: true,
+            json: () => Promise.resolve(validTokenResponse),
+        });
+        const authInfo = await verifier.verifyAccessToken('dobby_at_valid_token');
+        expect(authInfo.token).toBe('dobby_at_valid_token');
+        expect(authInfo.clientId).toBe('mcp_client1');
+        expect(authInfo.scopes).toEqual(['mcp:read', 'mcp:execute']);
+        expect(authInfo.extra?.org_id).toBe('org_abc');
+        expect(authInfo.extra?.tenant_id).toBe('tenant_xyz');
+    });
+    it('caches token verification results', async () => {
+        global.fetch = vi.fn().mockResolvedValue({
+            ok: true,
+            json: () => Promise.resolve(validTokenResponse),
+        });
+        // First call hits remote
+        await verifier.verifyAccessToken('dobby_at_cached_token');
+        expect(fetch).toHaveBeenCalledTimes(1);
+        // Second call uses cache
+        await verifier.verifyAccessToken('dobby_at_cached_token');
+        expect(fetch).toHaveBeenCalledTimes(1);
+    });
+    it('throws InvalidTokenError on invalid/expired token (401) — maps to HTTP 401, not 500', async () => {
+        global.fetch = vi.fn().mockResolvedValue({
+            ok: false,
+            status: 401,
+        });
+        await expect(verifier.verifyAccessToken('dobby_at_bad'))
+            .rejects.toThrow('Invalid or expired access token');
+        await expect(verifier.verifyAccessToken('dobby_at_bad'))
+            .rejects.toBeInstanceOf(InvalidTokenError);
+    });
+    it('throws InvalidTokenError on inactive token (RFC 7662 active:false)', async () => {
+        global.fetch = vi.fn().mockResolvedValue({
+            ok: true,
+            json: () => Promise.resolve({ active: false }),
+        });
+        await expect(verifier.verifyAccessToken('dobby_at_inactive'))
+            .rejects.toThrow('Invalid or expired access token');
+        await expect(verifier.verifyAccessToken('dobby_at_inactive'))
+            .rejects.toBeInstanceOf(InvalidTokenError);
+    });
+    it('throws InvalidTokenError when token missing org_id or tenant_id', async () => {
+        global.fetch = vi.fn().mockResolvedValue({
+            ok: true,
+            json: () => Promise.resolve({ active: true, user_id: 'u1' }),
+        });
+        await expect(verifier.verifyAccessToken('dobby_at_no_context'))
+            .rejects.toThrow('not bound to a tenant');
+        await expect(verifier.verifyAccessToken('dobby_at_no_context'))
+            .rejects.toBeInstanceOf(InvalidTokenError);
+    });
+    it('accepts a user-scoped PAT with no tenant/org pin (ADR-020) and carries the aggregate role', async () => {
+        global.fetch = vi.fn().mockResolvedValue({
+            ok: true,
+            json: () => Promise.resolve({
+                active: true,
+                user_id: 'pu_pat_user',
+                org_id: null,
+                tenant_id: null,
+                user_scoped: true,
+                scope: 'mcp:read mcp:execute mcp:*',
+                client_id: 'key_pat1',
+                exp: Math.floor(Date.now() / 1000) + 3600,
+                // aggregate (max) role across all memberships
+                tenant_role: 'tenant_owner',
+                org_role: 'org_owner',
+                is_super_admin: false,
+            }),
+        });
+        const authInfo = await verifier.verifyAccessToken('dobby_pat_usertoken');
+        // The tenant-less token is admitted BECAUSE it is user_scoped.
+        expect(authInfo.extra?.user_scoped).toBe(true);
+        expect(authInfo.extra?.tenant_id).toBeNull();
+        expect(authInfo.extra?.org_id).toBeNull();
+        // Aggregate role flows through the SAME extra.tenant_role plumbing that
+        // ListTools/CallTool gating already reads — no ListTools change needed.
+        expect(authInfo.extra?.tenant_role).toBe('tenant_owner');
+        expect(authInfo.extra?.is_super_admin).toBe(false);
+    });
+    it('throws ServerError on unexpected introspection failure (e.g. 500)', async () => {
+        global.fetch = vi.fn().mockResolvedValue({
+            ok: false,
+            status: 500,
+        });
+        await expect(verifier.verifyAccessToken('dobby_at_backend_down'))
+            .rejects.toThrow('Token validation failed (500)');
+        await expect(verifier.verifyAccessToken('dobby_at_backend_down'))
+            .rejects.toBeInstanceOf(ServerError);
+    });
+    it('evicts oldest entry when cache exceeds max size', async () => {
+        global.fetch = vi.fn().mockResolvedValue({
+            ok: true,
+            json: () => Promise.resolve(validTokenResponse),
+        });
+        // Fill cache beyond max (1000) — simplified test with a few entries
+        for (let i = 0; i < 5; i++) {
+            await verifier.verifyAccessToken(`dobby_at_token_${i}`);
+        }
+        expect(verifier.cacheSize).toBe(5);
+    });
+    it('calls correct introspection URL', async () => {
+        global.fetch = vi.fn().mockResolvedValue({
+            ok: true,
+            json: () => Promise.resolve(validTokenResponse),
+        });
+        await verifier.verifyAccessToken('dobby_at_url_test');
+        expect(fetch).toHaveBeenCalledWith('https://dobby-ai.com/oauth/token/introspect', expect.objectContaining({
+            method: 'POST',
+            headers: expect.objectContaining({
+                'Authorization': 'Bearer dobby_at_url_test',
+            }),
+        }));
+    });
+    it('strips trailing slash from issuer URL', () => {
+        const v = new TokenVerifier('https://dobby-ai.com/');
+        // The verifier should store the URL without trailing slash
+        expect(v.issuerUrl).toBe('https://dobby-ai.com');
+    });
+});
+describe('createOAuthProvider', () => {
+    it('returns provider and tokenVerifier', () => {
+        const result = createOAuthProvider({
+            issuerUrl: 'https://dobby-ai.com',
+            mcpPublicUrl: 'https://mcp.dobby-ai.com',
+        });
+        expect(result.provider).toBeDefined();
+        expect(result.tokenVerifier).toBeDefined();
+        expect(result.tokenVerifier).toBeInstanceOf(TokenVerifier);
+    });
+});
+//# sourceMappingURL=auth.test.js.map

package/dist/__tests__/auth.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.test.js","sourceRoot":"","sources":["../../src/__tests__/auth.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EACL,iBAAiB,EACjB,WAAW,GACZ,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,aAAa,EAAa,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,IAAI,QAAuB,CAAC;IAE5B,UAAU,CAAC,GAAG,EAAE;QACd,QAAQ,GAAG,IAAI,aAAa,CAAC,sBAAsB,CAAC,CAAC;QACrD,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,QAAQ,CAAC,UAAU,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,MAAM,kBAAkB,GAAG;QACzB,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,YAAY;QACvB,KAAK,EAAE,sBAAsB;QAC7B,SAAS,EAAE,aAAa;QACxB,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI;KAC1C,CAAC;IAEF,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YACvC,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAChD,CAAQ,CAAC;QAEV,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CAAC;QAE1E,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACpD,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC9C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YACvC,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAChD,CAAQ,CAAC;QAEV,yBAAyB;QACzB,MAAM,QAAQ,CAAC,iBAAiB,CAAC,uBAAuB,CAAC,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAEvC,yBAAyB;QACzB,MAAM,QAAQ,CAAC,iBAAiB,CAAC,uBAAuB,CAAC,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACnG,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YACvC,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;SACZ,CAAQ,CAAC;QAEV,MAAM,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;aACrD,OAAO,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;QACtD,MAAM,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;aACrD,OAAO,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YACvC,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;SAC/C,CAAQ,CAAC;QAEV,MAAM,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;aAC1D,OAAO,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;QACtD,MAAM,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;aAC1D,OAAO,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YACvC,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;SAC7D,CAAQ,CAAC;QAEV,MAAM,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;aAC5D,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC5C,MAAM,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;aAC5D,OAAO,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2FAA2F,EAAE,KAAK,IAAI,EAAE;QACzG,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YACvC,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,GAAG,EAAE,CACT,OAAO,CAAC,OAAO,CAAC;gBACd,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,aAAa;gBACtB,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,IAAI;gBACf,WAAW,EAAE,IAAI;gBACjB,KAAK,EAAE,4BAA4B;gBACnC,SAAS,EAAE,UAAU;gBACrB,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI;gBACzC,8CAA8C;gBAC9C,WAAW,EAAE,cAAc;gBAC3B,QAAQ,EAAE,WAAW;gBACrB,cAAc,EAAE,KAAK;aACtB,CAAC;SACL,CAAQ,CAAC;QAEV,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;QAEzE,+DAA+D;QAC/D,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7C,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1C,wEAAwE;QACxE,wEAAwE;QACxE,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACzD,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YACvC,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;SACZ,CAAQ,CAAC;QAEV,MAAM,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,uBAAuB,CAAC,CAAC;aAC9D,OAAO,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;QACpD,MAAM,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,uBAAuB,CAAC,CAAC;aAC9D,OAAO,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YACvC,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAChD,CAAQ,CAAC;QAEV,oEAAoE;QACpE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,QAAQ,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YACvC,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAChD,CAAQ,CAAC;QAEV,MAAM,QAAQ,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;QAEtD,MAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAChC,6CAA6C,EAC7C,MAAM,CAAC,gBAAgB,CAAC;YACtB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC;gBAC/B,eAAe,EAAE,0BAA0B;aAC5C,CAAC;SACH,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,GAAG,IAAI,aAAa,CAAC,uBAAuB,CAAC,CAAC;QACrD,2DAA2D;QAC3D,MAAM,CAAE,CAAS,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,MAAM,GAAG,mBAAmB,CAAC;YACjC,SAAS,EAAE,sBAAsB;YACjC,YAAY,EAAE,0BAA0B;SACzC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/doctor.test.d.ts

@@ -0,0 +1,16 @@
+/**
+ * dobby-mcp doctor — preflight credential/transport diagnosis tests.
+ *
+ * classifyApiKey is a PURE prefix classifier (no I/O) — tested directly, with a
+ * hard assertion that it never leaks more than the first 8 chars of the key.
+ *
+ * runDoctor orchestrates the live checks: it mocks createDobbyClient (health)
+ * and resolveGatewayKey (client-side gateway-key resolution) so we can drive
+ * every branch — blocked vs ready, health skipped vs called, and the
+ * transport-dependent gateway-tools messaging (http mints per request, stdio
+ * needs a static gk_ key). Env (DOBBY_API_KEY / DOBBY_TENANT_ID /
+ * DOBBY_GATEWAY_KEY) is reset around every test so a stray shell/CI value can't
+ * bleed into a case.
+ */
+export {};
+//# sourceMappingURL=doctor.test.d.ts.map

package/dist/__tests__/doctor.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/doctor.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG"}

package/dist/__tests__/doctor.test.js

@@ -0,0 +1,258 @@
+/**
+ * dobby-mcp doctor — preflight credential/transport diagnosis tests.
+ *
+ * classifyApiKey is a PURE prefix classifier (no I/O) — tested directly, with a
+ * hard assertion that it never leaks more than the first 8 chars of the key.
+ *
+ * runDoctor orchestrates the live checks: it mocks createDobbyClient (health)
+ * and resolveGatewayKey (client-side gateway-key resolution) so we can drive
+ * every branch — blocked vs ready, health skipped vs called, and the
+ * transport-dependent gateway-tools messaging (http mints per request, stdio
+ * needs a static gk_ key). Env (DOBBY_API_KEY / DOBBY_TENANT_ID /
+ * DOBBY_GATEWAY_KEY) is reset around every test so a stray shell/CI value can't
+ * bleed into a case.
+ */
+import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
+const { checkHealthMock, createDobbyClientMock, resolveGatewayKeyMock } = vi.hoisted(() => ({
+    checkHealthMock: vi.fn(),
+    createDobbyClientMock: vi.fn(),
+    resolveGatewayKeyMock: vi.fn(),
+}));
+vi.mock("../lib/dobby-client.js", () => ({
+    createDobbyClient: createDobbyClientMock,
+}));
+vi.mock("../server.js", () => ({
+    resolveGatewayKey: resolveGatewayKeyMock,
+}));
+import { classifyApiKey, runDoctor, formatDoctorReport, } from "../doctor.js";
+// ── env isolation ─────────────────────────────────────────────────────────
+const ENV_KEYS = [
+    "DOBBY_API_KEY",
+    "DOBBY_TENANT_ID",
+    "DOBBY_GATEWAY_KEY",
+    "DOBBY_API_URL",
+];
+let savedEnv;
+beforeEach(() => {
+    savedEnv = {};
+    for (const k of ENV_KEYS) {
+        savedEnv[k] = process.env[k];
+        delete process.env[k];
+    }
+    vi.clearAllMocks();
+    // Re-establish defaults after clearAllMocks (it zeroes mockResolvedValue too).
+    checkHealthMock.mockResolvedValue(true);
+    createDobbyClientMock.mockReturnValue({ checkHealth: checkHealthMock });
+    // Default: no gateway key resolves (each case overrides as needed).
+    resolveGatewayKeyMock.mockReturnValue(undefined);
+});
+afterEach(() => {
+    for (const k of ENV_KEYS) {
+        if (savedEnv[k] === undefined)
+            delete process.env[k];
+        else
+            process.env[k] = savedEnv[k];
+    }
+});
+// Helper: find a check by name in a report.
+function check(report, name) {
+    const c = report.checks.find((x) => x.name === name);
+    if (!c)
+        throw new Error(`no check named "${name}" in report`);
+    return c;
+}
+// ============================================
+// classifyApiKey — pure prefix classification
+// ============================================
+describe("classifyApiKey", () => {
+    it("undefined key → fail", () => {
+        const c = classifyApiKey(undefined);
+        expect(c.name).toBe("API key");
+        expect(c.status).toBe("fail");
+        expect(c.detail).toMatch(/DOBBY_API_KEY/);
+    });
+    it("empty-string key → fail", () => {
+        const c = classifyApiKey("");
+        expect(c.status).toBe("fail");
+    });
+    it.each(["gk_user_abc", "gk_svc_x", "gk_tmp_x"])("gateway key %s → ok, detail mentions BOTH read and gateway", (key) => {
+        const c = classifyApiKey(key);
+        expect(c.status).toBe("ok");
+        // "read/tenant AND gateway/execute" — assert both concepts appear.
+        expect(c.detail.toLowerCase()).toMatch(/read/);
+        expect(c.detail.toLowerCase()).toMatch(/gateway/);
+    });
+    it("sk_live_ tenant key → ok, detail says gateway needs a gk_ key", () => {
+        const c = classifyApiKey("sk_live_x");
+        expect(c.status).toBe("ok");
+        expect(c.detail.toLowerCase()).toMatch(/gateway/);
+        expect(c.detail).toMatch(/gk_/);
+    });
+    it("dobby_pat_ token → warn, detail mentions STDIO and remote", () => {
+        const c = classifyApiKey("dobby_pat_x");
+        expect(c.status).toBe("warn");
+        expect(c.detail).toMatch(/STDIO/);
+        expect(c.detail.toLowerCase()).toMatch(/remote/);
+    });
+    it("unrecognized prefix (dk_x) → warn, detail mentions placeholders + valid prefixes", () => {
+        const c = classifyApiKey("dk_x");
+        expect(c.status).toBe("warn");
+        expect(c.detail.toLowerCase()).toMatch(/placeholder/);
+        // Points at the valid gateway/tenant prefixes.
+        expect(c.detail).toMatch(/gk_user_|gk_svc_|gk_tmp_/);
+        expect(c.detail).toMatch(/sk_live_/);
+    });
+    it("NEVER leaks more than the first 8 chars of the key in detail (no full-key leak)", () => {
+        // A long, distinctive secret. Only the first 8 chars may appear.
+        const secretTail = "SUPERSECRETTAIL9999";
+        const cases = [
+            `gk_user_${secretTail}`,
+            `gk_svc_${secretTail}`,
+            `gk_tmp_${secretTail}`,
+            `sk_live_${secretTail}`,
+            `dobby_pat_${secretTail}`,
+            `dk_${secretTail}`,
+        ];
+        for (const key of cases) {
+            const c = classifyApiKey(key);
+            // The unique tail must NOT appear anywhere in the detail.
+            expect(c.detail).not.toContain(secretTail);
+            // And nothing beyond the first 8 chars of the key should appear.
+            const beyond8 = key.slice(8);
+            if (beyond8.length > 0) {
+                expect(c.detail).not.toContain(beyond8);
+            }
+        }
+    });
+});
+// ============================================
+// runDoctor — orchestration
+// ============================================
+describe("runDoctor", () => {
+    it('(a) no apiKey → blocked=true AND "API key" check status=fail', async () => {
+        const report = await runDoctor({ transport: "stdio" });
+        expect(report.blocked).toBe(true);
+        expect(check(report, "API key").status).toBe("fail");
+    });
+    it('(b) apiKey gk_user_ + tenantId + resolved gateway key + healthy → blocked=false AND "Gateway tools" ok', async () => {
+        resolveGatewayKeyMock.mockReturnValue("gk_user_resolved123");
+        checkHealthMock.mockResolvedValue(true);
+        const report = await runDoctor({
+            apiKey: "gk_user_x",
+            tenantId: "tenant_abc",
+            transport: "stdio",
+        });
+        expect(report.blocked).toBe(false);
+        expect(check(report, "Gateway tools").status).toBe("ok");
+        // Health WAS run and succeeded.
+        expect(checkHealthMock).toHaveBeenCalledTimes(1);
+        expect(check(report, "API reachable").status).toBe("ok");
+    });
+    it('(c) apiKey present but tenantId missing → "API reachable" warn + "Skipped", health NOT called', async () => {
+        const report = await runDoctor({ apiKey: "gk_user_x", transport: "stdio" });
+        const reachable = check(report, "API reachable");
+        expect(reachable.status).toBe("warn");
+        expect(reachable.detail).toMatch(/Skipped/);
+        expect(checkHealthMock).not.toHaveBeenCalled();
+        expect(createDobbyClientMock).not.toHaveBeenCalled();
+    });
+    it('(c) tenantId present but apiKey missing → "API reachable" warn + "Skipped", health NOT called', async () => {
+        const report = await runDoctor({
+            tenantId: "tenant_abc",
+            transport: "stdio",
+        });
+        const reachable = check(report, "API reachable");
+        expect(reachable.status).toBe("warn");
+        expect(reachable.detail).toMatch(/Skipped/);
+        expect(checkHealthMock).not.toHaveBeenCalled();
+    });
+    it('(d) resolveGatewayKey undefined + transport=http → "Gateway tools" warn, detail mentions per-request minting', async () => {
+        resolveGatewayKeyMock.mockReturnValue(undefined);
+        const report = await runDoctor({
+            apiKey: "sk_live_x",
+            tenantId: "tenant_abc",
+            transport: "http",
+        });
+        const gw = check(report, "Gateway tools");
+        expect(gw.status).toBe("warn");
+        // http branch: a gk_tmp_ is minted per request.
+        expect(gw.detail.toLowerCase()).toMatch(/per request|minted/);
+        expect(gw.detail).not.toMatch(/DOBBY_GATEWAY_KEY/);
+    });
+    it('(d) resolveGatewayKey undefined + transport=stdio → "Gateway tools" warn, detail mentions DOBBY_GATEWAY_KEY / does NOT', async () => {
+        resolveGatewayKeyMock.mockReturnValue(undefined);
+        const report = await runDoctor({
+            apiKey: "sk_live_x",
+            tenantId: "tenant_abc",
+            transport: "stdio",
+        });
+        const gw = check(report, "Gateway tools");
+        expect(gw.status).toBe("warn");
+        // stdio branch: needs a static key; mentions DOBBY_GATEWAY_KEY + "does NOT".
+        expect(gw.detail).toMatch(/DOBBY_GATEWAY_KEY/);
+        expect(gw.detail).toMatch(/does NOT/);
+    });
+    it('(d) the http vs stdio "Gateway tools" details actually DIFFER for the same missing-key input', async () => {
+        resolveGatewayKeyMock.mockReturnValue(undefined);
+        const httpReport = await runDoctor({
+            apiKey: "sk_live_x",
+            tenantId: "tenant_abc",
+            transport: "http",
+        });
+        const stdioReport = await runDoctor({
+            apiKey: "sk_live_x",
+            tenantId: "tenant_abc",
+            transport: "stdio",
+        });
+        expect(check(httpReport, "Gateway tools").detail).not.toBe(check(stdioReport, "Gateway tools").detail);
+    });
+    it('a health check that returns false surfaces "API reachable" fail (and blocks)', async () => {
+        checkHealthMock.mockResolvedValue(false);
+        const report = await runDoctor({
+            apiKey: "gk_user_x",
+            tenantId: "tenant_abc",
+            transport: "stdio",
+        });
+        expect(check(report, "API reachable").status).toBe("fail");
+        expect(report.blocked).toBe(true);
+    });
+    it("reads creds from process.env when opts omit them (env-driven STDIO path)", async () => {
+        process.env.DOBBY_API_KEY = "gk_user_fromenv";
+        process.env.DOBBY_TENANT_ID = "tenant_fromenv";
+        resolveGatewayKeyMock.mockReturnValue("gk_user_fromenv");
+        const report = await runDoctor({ transport: "stdio" });
+        // classify picked up the env key.
+        expect(check(report, "API key").status).toBe("ok");
+        expect(check(report, "Tenant ID").detail).toBe("tenant_fromenv");
+        expect(checkHealthMock).toHaveBeenCalledTimes(1);
+    });
+});
+// ============================================
+// formatDoctorReport — rendering
+// ============================================
+describe("formatDoctorReport", () => {
+    const sampleReport = {
+        checks: [
+            { name: "API URL", status: "ok", detail: "https://dobby-ai.com" },
+            { name: "API key", status: "warn", detail: "Tenant key" },
+        ],
+        blocked: false,
+    };
+    it("renders a line per check (each check name appears)", () => {
+        const out = formatDoctorReport(sampleReport);
+        for (const c of sampleReport.checks) {
+            expect(out).toContain(c.name);
+            expect(out).toContain(c.detail);
+        }
+    });
+    it("not blocked → footer says Ready", () => {
+        const out = formatDoctorReport({ ...sampleReport, blocked: false });
+        expect(out).toMatch(/Ready/);
+        expect(out).not.toMatch(/Blocked/);
+    });
+    it("blocked → footer says Blocked", () => {
+        const out = formatDoctorReport({ ...sampleReport, blocked: true });
+        expect(out).toMatch(/Blocked/);
+    });
+});
+//# sourceMappingURL=doctor.test.js.map

package/dist/__tests__/doctor.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.test.js","sourceRoot":"","sources":["../../src/__tests__/doctor.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAEzE,MAAM,EAAE,eAAe,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,GACrE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAChB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE;IACxB,qBAAqB,EAAE,EAAE,CAAC,EAAE,EAAE;IAC9B,qBAAqB,EAAE,EAAE,CAAC,EAAE,EAAE;CAC/B,CAAC,CAAC,CAAC;AAEN,EAAE,CAAC,IAAI,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAAC,CAAC;IACvC,iBAAiB,EAAE,qBAAqB;CACzC,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7B,iBAAiB,EAAE,qBAAqB;CACzC,CAAC,CAAC,CAAC;AAEJ,OAAO,EACL,cAAc,EACd,SAAS,EACT,kBAAkB,GAEnB,MAAM,cAAc,CAAC;AAEtB,6EAA6E;AAC7E,MAAM,QAAQ,GAAG;IACf,eAAe;IACf,iBAAiB;IACjB,mBAAmB;IACnB,eAAe;CACP,CAAC;AAEX,IAAI,QAA4C,CAAC;AAEjD,UAAU,CAAC,GAAG,EAAE;IACd,QAAQ,GAAG,EAAE,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7B,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,EAAE,CAAC,aAAa,EAAE,CAAC;IACnB,+EAA+E;IAC/E,eAAe,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACxC,qBAAqB,CAAC,eAAe,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC;IACxE,oEAAoE;IACpE,qBAAqB,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;;YAChD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,4CAA4C;AAC5C,SAAS,KAAK,CAAC,MAAoB,EAAE,IAAY;IAC/C,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACrD,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,aAAa,CAAC,CAAC;IAC9D,OAAO,CAAC,CAAC;AACX,CAAC;AAED,+CAA+C;AAC/C,8CAA8C;AAC9C,+CAA+C;AAE/C,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CAAC,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAC9C,4DAA4D,EAC5D,CAAC,GAAG,EAAE,EAAE;QACN,MAAM,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,mEAAmE;QACnE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC,CACF,CAAC;IAEF,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;QACtC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,CAAC,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;QACxC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACtD,+CAA+C;QAC/C,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QACrD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,iEAAiE;QACjE,MAAM,UAAU,GAAG,qBAAqB,CAAC;QACzC,MAAM,KAAK,GAAG;YACZ,WAAW,UAAU,EAAE;YACvB,UAAU,UAAU,EAAE;YACtB,UAAU,UAAU,EAAE;YACtB,WAAW,UAAU,EAAE;YACvB,aAAa,UAAU,EAAE;YACzB,MAAM,UAAU,EAAE;SACnB,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;YAC9B,0DAA0D;YAC1D,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAC3C,iEAAiE;YACjE,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC7B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+CAA+C;AAC/C,4BAA4B;AAC5B,+CAA+C;AAE/C,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QAEvD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wGAAwG,EAAE,KAAK,IAAI,EAAE;QACtH,qBAAqB,CAAC,eAAe,CAAC,qBAAqB,CAAC,CAAC;QAC7D,eAAe,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAExC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC;YAC7B,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,YAAY;YACtB,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,gCAAgC;QAChC,MAAM,CAAC,eAAe,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+FAA+F,EAAE,KAAK,IAAI,EAAE;QAC7G,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QAE5E,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QACjD,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC/C,MAAM,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+FAA+F,EAAE,KAAK,IAAI,EAAE;QAC7G,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC;YAC7B,QAAQ,EAAE,YAAY;YACtB,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QACjD,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8GAA8G,EAAE,KAAK,IAAI,EAAE;QAC5H,qBAAqB,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAEjD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC;YAC7B,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,YAAY;YACtB,SAAS,EAAE,MAAM;SAClB,CAAC,CAAC;QAEH,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QAC1C,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,gDAAgD;QAChD,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC9D,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wHAAwH,EAAE,KAAK,IAAI,EAAE;QACtI,qBAAqB,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAEjD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC;YAC7B,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,YAAY;YACtB,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;QAEH,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QAC1C,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,6EAA6E;QAC7E,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAC/C,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8FAA8F,EAAE,KAAK,IAAI,EAAE;QAC5G,qBAAqB,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAEjD,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC;YACjC,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,YAAY;YACtB,SAAS,EAAE,MAAM;SAClB,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC;YAClC,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,YAAY;YACtB,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CACxD,KAAK,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,MAAM,CAC3C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,eAAe,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAEzC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC;YAC7B,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,YAAY;YACtB,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,iBAAiB,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,gBAAgB,CAAC;QAC/C,qBAAqB,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QAEvD,kCAAkC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACjE,MAAM,CAAC,eAAe,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+CAA+C;AAC/C,iCAAiC;AACjC,+CAA+C;AAE/C,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,MAAM,YAAY,GAAiB;QACjC,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,sBAAsB,EAAE;YACjE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE;SAC1D;QACD,OAAO,EAAE,KAAK;KACf,CAAC;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,GAAG,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;QAC7C,KAAK,MAAM,CAAC,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,GAAG,GAAG,kBAAkB,CAAC,EAAE,GAAG,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,GAAG,GAAG,kBAAkB,CAAC,EAAE,GAAG,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/external-agents-tools.test.d.ts

@@ -0,0 +1,11 @@
+/**
+ * External Agents MCP Tools Tests
+ *
+ * Tests the 10 MCP tools that wrap /api/v1/gateway/external-agents/* endpoints:
+ *   register/list/get/update/deregister
+ *   trigger/get_triggers
+ *   create_schedule/delete_schedule
+ *   get_costs
+ */
+export {};
+//# sourceMappingURL=external-agents-tools.test.d.ts.map

package/dist/__tests__/external-agents-tools.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-agents-tools.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/external-agents-tools.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}