@dobbyai/mcp-external 1.0.4 → 1.2.0

package/dist/__tests__/schedule-tools.test.js

@@ -0,0 +1,285 @@
+/**
+ * Schedule MCP Tools Tests
+ *
+ * Tests for scheduled agent task execution:
+ * create_schedule, list_schedules, pause_schedule, delete_schedule
+ */
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { createRegistry, toMcpResult } from '@dobbyai/capability-core';
+// Mock DobbyClient
+const mockClient = {
+    apiUrl: 'http://localhost:3000',
+    apiKey: 'test-api-key',
+    createSchedule: vi.fn(),
+    listSchedules: vi.fn(),
+    pauseSchedule: vi.fn(),
+    deleteSchedule: vi.fn(),
+};
+// ADR-019: the legacy handle* functions are gone — dispatch goes through the
+// capability registry (handlers are verbatim copies; MCP output byte-identical).
+const registry = createRegistry();
+const callCap = async (id, client, args) => toMcpResult(await registry.get(id).handler({ client: client }, args));
+// ============================================
+// Create Schedule
+// ============================================
+describe('Schedule: Create Schedule', () => {
+    beforeEach(() => {
+        vi.resetAllMocks();
+    });
+    it('creates a daily recurring schedule', async () => {
+        mockClient.createSchedule.mockResolvedValueOnce({
+            schedule: {
+                id: 'sched_abc123',
+                name: 'Daily code review',
+                scheduleType: 'recurring',
+                scheduleDescription: 'Daily at 09:00',
+                nextRunAt: '2026-03-06T09:00:00.000Z',
+                overlapPolicy: 'skip',
+                taskTitle: 'Review pending PRs',
+            },
+        });
+        const result = await callCap('create_schedule', mockClient, {
+            name: 'Daily code review',
+            task_title: 'Review pending PRs',
+            task_description: 'Review all open pull requests and provide feedback',
+            schedule_type: 'recurring',
+            frequency: 'daily',
+            time: '09:00',
+            timezone: 'Asia/Jerusalem',
+        });
+        expect(mockClient.createSchedule).toHaveBeenCalledOnce();
+        expect(result.content[0].text).toContain('Schedule created successfully');
+        expect(result.content[0].text).toContain('sched_abc123');
+        expect(result.content[0].text).toContain('Daily at 09:00');
+    });
+    it('creates a weekly recurring schedule', async () => {
+        mockClient.createSchedule.mockResolvedValueOnce({
+            schedule: {
+                id: 'sched_def456',
+                name: 'Weekly security scan',
+                scheduleType: 'recurring',
+                scheduleDescription: 'Every Monday at 08:00',
+                nextRunAt: '2026-03-10T08:00:00.000Z',
+                overlapPolicy: 'skip',
+                taskTitle: 'Security vulnerability scan',
+            },
+        });
+        const result = await callCap('create_schedule', mockClient, {
+            name: 'Weekly security scan',
+            task_title: 'Security vulnerability scan',
+            task_description: 'Run security scan on the entire codebase',
+            schedule_type: 'recurring',
+            frequency: 'weekly',
+            time: '08:00',
+            timezone: 'Asia/Jerusalem',
+            day_of_week: 1,
+        });
+        expect(mockClient.createSchedule).toHaveBeenCalledOnce();
+        const callArgs = mockClient.createSchedule.mock.calls[0][0];
+        expect(callArgs.schedule_config.frequency).toBe('weekly');
+        expect(callArgs.schedule_config.dayOfWeek).toBe(1);
+        expect(result.content[0].text).toContain('sched_def456');
+    });
+    it('creates a one-time schedule', async () => {
+        mockClient.createSchedule.mockResolvedValueOnce({
+            schedule: {
+                id: 'sched_onetime1',
+                name: 'Release day deploy check',
+                scheduleType: 'one_time',
+                scheduleDescription: null,
+                nextRunAt: '2026-03-15T14:00:00.000Z',
+                overlapPolicy: 'allow',
+                taskTitle: 'Pre-deployment checklist',
+            },
+        });
+        const result = await callCap('create_schedule', mockClient, {
+            name: 'Release day deploy check',
+            task_title: 'Pre-deployment checklist',
+            task_description: 'Verify all systems before v2.0 deployment',
+            schedule_type: 'one_time',
+            schedule_at: '2026-03-15T14:00:00.000Z',
+            overlap_policy: 'allow',
+        });
+        expect(mockClient.createSchedule).toHaveBeenCalledOnce();
+        const callArgs = mockClient.createSchedule.mock.calls[0][0];
+        expect(callArgs.schedule_type).toBe('one_time');
+        expect(callArgs.schedule_at).toBe('2026-03-15T14:00:00.000Z');
+        expect(callArgs.overlap_policy).toBe('allow');
+        expect(result.content[0].text).toContain('sched_onetime1');
+    });
+    it('uses default values when optional params omitted', async () => {
+        mockClient.createSchedule.mockResolvedValueOnce({
+            schedule: {
+                id: 'sched_default1',
+                name: 'Test schedule',
+                scheduleType: 'recurring',
+                scheduleDescription: 'Daily at 09:00',
+                nextRunAt: '2026-03-06T09:00:00.000Z',
+                overlapPolicy: 'skip',
+                taskTitle: 'Test task',
+            },
+        });
+        const result = await callCap('create_schedule', mockClient, {
+            name: 'Test schedule',
+            task_title: 'Test task',
+            task_description: 'A test description',
+            schedule_type: 'recurring',
+        });
+        const callArgs = mockClient.createSchedule.mock.calls[0][0];
+        expect(callArgs.task_priority).toBe('medium');
+        expect(callArgs.overlap_policy).toBe('skip');
+        expect(callArgs.schedule_config.frequency).toBe('daily');
+        expect(callArgs.schedule_config.time).toBe('09:00');
+        expect(callArgs.schedule_config.timezone).toBe('Asia/Jerusalem');
+    });
+});
+// ============================================
+// List Schedules
+// ============================================
+describe('Schedule: List Schedules', () => {
+    beforeEach(() => {
+        vi.resetAllMocks();
+    });
+    it('lists schedules with status and run info', async () => {
+        mockClient.listSchedules.mockResolvedValueOnce({
+            schedules: [
+                {
+                    id: 'sched_abc123',
+                    name: 'Daily code review',
+                    enabled: true,
+                    paused: false,
+                    scheduleDescription: 'Daily at 09:00',
+                    nextRunAt: '2026-03-06T09:00:00.000Z',
+                    lastRunAt: '2026-03-05T09:00:00.000Z',
+                    lastRunStatus: 'success',
+                    totalRuns: 42,
+                    totalSuccesses: 41,
+                    totalFailures: 1,
+                },
+                {
+                    id: 'sched_def456',
+                    name: 'Weekly security scan',
+                    enabled: true,
+                    paused: true,
+                    scheduleDescription: 'Every Monday at 08:00',
+                    nextRunAt: null,
+                    lastRunAt: '2026-03-03T08:00:00.000Z',
+                    lastRunStatus: 'failed',
+                    totalRuns: 10,
+                    totalSuccesses: 8,
+                    totalFailures: 2,
+                },
+            ],
+        });
+        const result = await callCap('list_schedules', mockClient, {});
+        expect(mockClient.listSchedules).toHaveBeenCalledOnce();
+        expect(result.content[0].text).toContain('Agent Schedules (2)');
+        expect(result.content[0].text).toContain('Daily code review');
+        expect(result.content[0].text).toContain('Weekly security scan');
+        expect(result.content[0].text).toContain('Active');
+        expect(result.content[0].text).toContain('Paused');
+    });
+    it('shows empty state when no schedules', async () => {
+        mockClient.listSchedules.mockResolvedValueOnce({
+            schedules: [],
+        });
+        const result = await callCap('list_schedules', mockClient, {});
+        expect(result.content[0].text).toContain('No agent schedules found');
+    });
+    it('passes filter options to client', async () => {
+        mockClient.listSchedules.mockResolvedValueOnce({ schedules: [] });
+        await callCap('list_schedules', mockClient, {
+            enabled_only: true,
+            limit: 5,
+        });
+        expect(mockClient.listSchedules).toHaveBeenCalledWith({
+            enabled_only: true,
+            limit: 5,
+        });
+    });
+});
+// ============================================
+// Pause Schedule
+// ============================================
+describe('Schedule: Pause/Resume', () => {
+    beforeEach(() => {
+        vi.resetAllMocks();
+    });
+    it('pauses a schedule with reason', async () => {
+        mockClient.pauseSchedule.mockResolvedValueOnce({ success: true });
+        const result = await callCap('pause_schedule', mockClient, {
+            schedule_id: 'sched_abc123',
+            action: 'pause',
+            reason: 'Holiday freeze',
+        });
+        expect(mockClient.pauseSchedule).toHaveBeenCalledWith({
+            schedule_id: 'sched_abc123',
+            action: 'pause',
+            reason: 'Holiday freeze',
+        });
+        expect(result.content[0].text).toContain('paused');
+        expect(result.content[0].text).toContain('Holiday freeze');
+    });
+    it('resumes a paused schedule', async () => {
+        mockClient.pauseSchedule.mockResolvedValueOnce({ success: true });
+        const result = await callCap('pause_schedule', mockClient, {
+            schedule_id: 'sched_abc123',
+            action: 'resume',
+        });
+        expect(mockClient.pauseSchedule).toHaveBeenCalledWith({
+            schedule_id: 'sched_abc123',
+            action: 'resume',
+            reason: undefined,
+        });
+        expect(result.content[0].text).toContain('resumed');
+    });
+});
+// ============================================
+// Delete Schedule
+// ============================================
+describe('Schedule: Delete', () => {
+    beforeEach(() => {
+        vi.resetAllMocks();
+    });
+    it('deletes a schedule by ID', async () => {
+        mockClient.deleteSchedule.mockResolvedValueOnce({ success: true });
+        const result = await callCap('delete_schedule', mockClient, {
+            schedule_id: 'sched_abc123',
+        });
+        expect(mockClient.deleteSchedule).toHaveBeenCalledWith('sched_abc123');
+        expect(result.content[0].text).toContain('deleted');
+        expect(result.content[0].text).toContain('sched_abc123');
+    });
+});
+// ============================================
+// Tool Definitions
+// ============================================
+describe('Schedule: Tool Definitions', () => {
+    it('exports all 4 schedule tools', async () => {
+        const { scheduleTools } = await import('../tools/schedules.js');
+        expect(scheduleTools.create_schedule).toBeDefined();
+        expect(scheduleTools.list_schedules).toBeDefined();
+        expect(scheduleTools.pause_schedule).toBeDefined();
+        expect(scheduleTools.delete_schedule).toBeDefined();
+    });
+    it('create_schedule has correct required fields', async () => {
+        const { scheduleTools } = await import('../tools/schedules.js');
+        const schema = scheduleTools.create_schedule.inputSchema;
+        expect(schema.required).toContain('name');
+        expect(schema.required).toContain('task_title');
+        expect(schema.required).toContain('task_description');
+        expect(schema.required).toContain('schedule_type');
+    });
+    it('pause_schedule requires schedule_id and action', async () => {
+        const { scheduleTools } = await import('../tools/schedules.js');
+        const schema = scheduleTools.pause_schedule.inputSchema;
+        expect(schema.required).toContain('schedule_id');
+        expect(schema.required).toContain('action');
+    });
+    it('delete_schedule requires schedule_id', async () => {
+        const { scheduleTools } = await import('../tools/schedules.js');
+        const schema = scheduleTools.delete_schedule.inputSchema;
+        expect(schema.required).toContain('schedule_id');
+    });
+});
+//# sourceMappingURL=schedule-tools.test.js.map

package/dist/__tests__/schedule-tools.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedule-tools.test.js","sourceRoot":"","sources":["../../src/__tests__/schedule-tools.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvE,mBAAmB;AACnB,MAAM,UAAU,GAAG;IACjB,MAAM,EAAE,uBAAuB;IAC/B,MAAM,EAAE,cAAc;IACtB,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;IACvB,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;IACtB,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;IACtB,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;CACjB,CAAC;AAET,6EAA6E;AAC7E,iFAAiF;AACjF,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;AAClC,MAAM,OAAO,GAAG,KAAK,EAAE,EAAU,EAAE,MAAe,EAAE,IAA6B,EAAE,EAAE,CACnF,WAAW,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAa,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;AAEhF,+CAA+C;AAC/C,kBAAkB;AAClB,+CAA+C;AAE/C,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,UAAU,CAAC,cAAc,CAAC,qBAAqB,CAAC;YAC9C,QAAQ,EAAE;gBACR,EAAE,EAAE,cAAc;gBAClB,IAAI,EAAE,mBAAmB;gBACzB,YAAY,EAAE,WAAW;gBACzB,mBAAmB,EAAE,gBAAgB;gBACrC,SAAS,EAAE,0BAA0B;gBACrC,aAAa,EAAE,MAAM;gBACrB,SAAS,EAAE,oBAAoB;aAChC;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,iBAAiB,EAAE,UAAU,EAAE;YAC1D,IAAI,EAAE,mBAAmB;YACzB,UAAU,EAAE,oBAAoB;YAChC,gBAAgB,EAAE,oDAAoD;YACtE,aAAa,EAAE,WAAW;YAC1B,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,gBAAgB;SAC3B,CAAC,CAAC;QAEH,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,oBAAoB,EAAE,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;QAC1E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,UAAU,CAAC,cAAc,CAAC,qBAAqB,CAAC;YAC9C,QAAQ,EAAE;gBACR,EAAE,EAAE,cAAc;gBAClB,IAAI,EAAE,sBAAsB;gBAC5B,YAAY,EAAE,WAAW;gBACzB,mBAAmB,EAAE,uBAAuB;gBAC5C,SAAS,EAAE,0BAA0B;gBACrC,aAAa,EAAE,MAAM;gBACrB,SAAS,EAAE,6BAA6B;aACzC;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,iBAAiB,EAAE,UAAU,EAAE;YAC1D,IAAI,EAAE,sBAAsB;YAC5B,UAAU,EAAE,6BAA6B;YACzC,gBAAgB,EAAE,0CAA0C;YAC5D,aAAa,EAAE,WAAW;YAC1B,SAAS,EAAE,QAAQ;YACnB,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,gBAAgB;YAC1B,WAAW,EAAE,CAAC;SACf,CAAC,CAAC;QAEH,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,oBAAoB,EAAE,CAAC;QACzD,MAAM,QAAQ,GAAG,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1D,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,UAAU,CAAC,cAAc,CAAC,qBAAqB,CAAC;YAC9C,QAAQ,EAAE;gBACR,EAAE,EAAE,gBAAgB;gBACpB,IAAI,EAAE,0BAA0B;gBAChC,YAAY,EAAE,UAAU;gBACxB,mBAAmB,EAAE,IAAI;gBACzB,SAAS,EAAE,0BAA0B;gBACrC,aAAa,EAAE,OAAO;gBACtB,SAAS,EAAE,0BAA0B;aACtC;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,iBAAiB,EAAE,UAAU,EAAE;YAC1D,IAAI,EAAE,0BAA0B;YAChC,UAAU,EAAE,0BAA0B;YACtC,gBAAgB,EAAE,2CAA2C;YAC7D,aAAa,EAAE,UAAU;YACzB,WAAW,EAAE,0BAA0B;YACvC,cAAc,EAAE,OAAO;SACxB,CAAC,CAAC;QAEH,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,oBAAoB,EAAE,CAAC;QACzD,MAAM,QAAQ,GAAG,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC9D,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,UAAU,CAAC,cAAc,CAAC,qBAAqB,CAAC;YAC9C,QAAQ,EAAE;gBACR,EAAE,EAAE,gBAAgB;gBACpB,IAAI,EAAE,eAAe;gBACrB,YAAY,EAAE,WAAW;gBACzB,mBAAmB,EAAE,gBAAgB;gBACrC,SAAS,EAAE,0BAA0B;gBACrC,aAAa,EAAE,MAAM;gBACrB,SAAS,EAAE,WAAW;aACvB;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,iBAAiB,EAAE,UAAU,EAAE;YAC1D,IAAI,EAAE,eAAe;YACrB,UAAU,EAAE,WAAW;YACvB,gBAAgB,EAAE,oBAAoB;YACtC,aAAa,EAAE,WAAW;SAC3B,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzD,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+CAA+C;AAC/C,iBAAiB;AACjB,+CAA+C;AAE/C,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,UAAU,CAAC,aAAa,CAAC,qBAAqB,CAAC;YAC7C,SAAS,EAAE;gBACT;oBACE,EAAE,EAAE,cAAc;oBAClB,IAAI,EAAE,mBAAmB;oBACzB,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,KAAK;oBACb,mBAAmB,EAAE,gBAAgB;oBACrC,SAAS,EAAE,0BAA0B;oBACrC,SAAS,EAAE,0BAA0B;oBACrC,aAAa,EAAE,SAAS;oBACxB,SAAS,EAAE,EAAE;oBACb,cAAc,EAAE,EAAE;oBAClB,aAAa,EAAE,CAAC;iBACjB;gBACD;oBACE,EAAE,EAAE,cAAc;oBAClB,IAAI,EAAE,sBAAsB;oBAC5B,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,IAAI;oBACZ,mBAAmB,EAAE,uBAAuB;oBAC5C,SAAS,EAAE,IAAI;oBACf,SAAS,EAAE,0BAA0B;oBACrC,aAAa,EAAE,QAAQ;oBACvB,SAAS,EAAE,EAAE;oBACb,cAAc,EAAE,CAAC;oBACjB,aAAa,EAAE,CAAC;iBACjB;aACF;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAE/D,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,oBAAoB,EAAE,CAAC;QACxD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,UAAU,CAAC,aAAa,CAAC,qBAAqB,CAAC;YAC7C,SAAS,EAAE,EAAE;SACd,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAE/D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,UAAU,CAAC,aAAa,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QAElE,MAAM,OAAO,CAAC,gBAAgB,EAAE,UAAU,EAAE;YAC1C,YAAY,EAAE,IAAI;YAClB,KAAK,EAAE,CAAC;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC;YACpD,YAAY,EAAE,IAAI;YAClB,KAAK,EAAE,CAAC;SACT,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+CAA+C;AAC/C,iBAAiB;AACjB,+CAA+C;AAE/C,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,UAAU,CAAC,aAAa,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAElE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,EAAE,UAAU,EAAE;YACzD,WAAW,EAAE,cAAc;YAC3B,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,gBAAgB;SACzB,CAAC,CAAC;QAEH,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC;YACpD,WAAW,EAAE,cAAc;YAC3B,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,gBAAgB;SACzB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,UAAU,CAAC,aAAa,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAElE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,EAAE,UAAU,EAAE;YACzD,WAAW,EAAE,cAAc;YAC3B,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;QAEH,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC;YACpD,WAAW,EAAE,cAAc;YAC3B,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+CAA+C;AAC/C,kBAAkB;AAClB,+CAA+C;AAE/C,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,UAAU,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAEnE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,iBAAiB,EAAE,UAAU,EAAE;YAC1D,WAAW,EAAE,cAAc;SAC5B,CAAC,CAAC;QAEH,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;QACvE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+CAA+C;AAC/C,mBAAmB;AACnB,+CAA+C;AAE/C,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAEhE,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,CAAC;QACpD,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAEhE,MAAM,MAAM,GAAG,aAAa,CAAC,eAAe,CAAC,WAAW,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACtD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAEhE,MAAM,MAAM,GAAG,aAAa,CAAC,cAAc,CAAC,WAAW,CAAC;QACxD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAEhE,MAAM,MAAM,GAAG,aAAa,CAAC,eAAe,CAAC,WAAW,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/server-gateway-key.test.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Server HTTP-mode Gateway Key Tests
+ *
+ * The CallTool handler must split the session families:
+ * - gk_* Bearer session → context.gatewayKey = the token (restores the
+ *   checkGatewayAuth pre-check + gateway metering that commit 157db598b
+ *   disabled for ALL families).
+ * - dobby_at_ / sk_live_ session → context.gatewayKey stays undefined (the
+ *   pre-check short-circuits to allowed) and the per-request DobbyClient
+ *   carries a LAZY, session-memoized provider that exchanges the token for a
+ *   gk_tmp_* via the web app's internal endpoint.
+ *
+ * Drives the REAL server factory (server.ts) over real Streamable HTTP with a
+ * stub introspection issuer — only tools/index.handleToolCall is spied, so we
+ * can inspect the exact ToolContext the handler builds.
+ */
+export {};
+//# sourceMappingURL=server-gateway-key.test.d.ts.map

package/dist/__tests__/server-gateway-key.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-gateway-key.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/server-gateway-key.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG"}

package/dist/__tests__/server-gateway-key.test.js

@@ -0,0 +1,148 @@
+/**
+ * Server HTTP-mode Gateway Key Tests
+ *
+ * The CallTool handler must split the session families:
+ * - gk_* Bearer session → context.gatewayKey = the token (restores the
+ *   checkGatewayAuth pre-check + gateway metering that commit 157db598b
+ *   disabled for ALL families).
+ * - dobby_at_ / sk_live_ session → context.gatewayKey stays undefined (the
+ *   pre-check short-circuits to allowed) and the per-request DobbyClient
+ *   carries a LAZY, session-memoized provider that exchanges the token for a
+ *   gk_tmp_* via the web app's internal endpoint.
+ *
+ * Drives the REAL server factory (server.ts) over real Streamable HTTP with a
+ * stub introspection issuer — only tools/index.handleToolCall is spied, so we
+ * can inspect the exact ToolContext the handler builds.
+ */
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+const { handleToolCallSpy } = vi.hoisted(() => ({
+    handleToolCallSpy: vi.fn(),
+}));
+vi.mock('../tools/index.js', async (importOriginal) => {
+    const actual = await importOriginal();
+    return {
+        ...actual,
+        handleToolCall: handleToolCallSpy,
+    };
+});
+/**
+ * Spin up a stub issuer + the real HTTP server, run initialize → tools/call
+ * with the given bearer, and return the ToolContext handleToolCall received.
+ */
+async function callToolOverHttp(bearer) {
+    const express = (await import('express')).default;
+    const { startHttpServer } = await import('../http-server.js');
+    const { createServer } = await import('../server.js');
+    const issuer = express();
+    issuer.use(express.json());
+    issuer.post('/oauth/token/introspect', (_req, res) => {
+        res.json({
+            active: true,
+            user_id: 'pu_gw',
+            org_id: 'org_gw',
+            tenant_id: 'tenant_gw',
+            scope: 'mcp:execute mcp:*',
+            client_id: 'key_gw',
+            exp: Math.floor(Date.now() / 1000) + 3600,
+        });
+    });
+    const issuerServer = issuer.listen(0);
+    const issuerPort = issuerServer.address().port;
+    const { server, tokenVerifier } = await startHttpServer({
+        port: 0,
+        issuerUrl: `http://127.0.0.1:${issuerPort}`,
+        mcpPublicUrl: 'http://127.0.0.1:0',
+        createMcpServer: () => createServer({ mode: 'http' }),
+    });
+    const mcpPort = server.address().port;
+    const mcpUrl = `http://127.0.0.1:${mcpPort}/mcp`;
+    const headers = {
+        Authorization: `Bearer ${bearer}`,
+        'Content-Type': 'application/json',
+        Accept: 'application/json, text/event-stream',
+    };
+    try {
+        const initRes = await fetch(mcpUrl, {
+            method: 'POST',
+            headers,
+            body: JSON.stringify({
+                jsonrpc: '2.0',
+                id: 1,
+                method: 'initialize',
+                params: {
+                    protocolVersion: '2025-03-26',
+                    capabilities: {},
+                    clientInfo: { name: 'gw-probe', version: '0' },
+                },
+            }),
+        });
+        expect(initRes.status).toBe(200);
+        const sessionId = initRes.headers.get('mcp-session-id');
+        const callRes = await fetch(mcpUrl, {
+            method: 'POST',
+            headers: { ...headers, 'Mcp-Session-Id': sessionId },
+            body: JSON.stringify({
+                jsonrpc: '2.0',
+                id: 2,
+                method: 'tools/call',
+                params: { name: 'create_task', arguments: { title: 'probe' } },
+            }),
+        });
+        expect(callRes.status).toBe(200);
+        await callRes.text();
+    }
+    finally {
+        tokenVerifier.clearCache();
+        server.close();
+        issuerServer.close();
+    }
+    expect(handleToolCallSpy).toHaveBeenCalledTimes(1);
+    return handleToolCallSpy.mock.calls[0][2];
+}
+describe('CallTool handler — gateway key by session family (HTTP mode)', () => {
+    beforeEach(() => {
+        handleToolCallSpy.mockReset().mockResolvedValue({
+            content: [{ type: 'text', text: 'ok' }],
+        });
+    });
+    afterEach(() => {
+        vi.unstubAllGlobals();
+        vi.unstubAllEnvs();
+    });
+    it('gk_ Bearer session: context.gatewayKey = the token (pre-check + metering restored)', async () => {
+        const context = await callToolOverHttp('gk_user_test_abc');
+        expect(context.gatewayKey).toBe('gk_user_test_abc');
+        expect(context.client.apiKey).toBe('gk_user_test_abc');
+        // gatewayBearer falls back to the apiKey — which IS the gateway key
+        expect(await context.client.gatewayBearer()).toBe('gk_user_test_abc');
+    });
+    it('dobby_at_ (OAuth) session: context.gatewayKey stays undefined', async () => {
+        const context = await callToolOverHttp('dobby_at_test_token');
+        expect(context.gatewayKey).toBeUndefined();
+        expect(context.client.apiKey).toBe('dobby_at_test_token');
+    });
+    it('dobby_at_ session client lazily resolves a gk_tmp_ via the internal endpoint — memoized', async () => {
+        const context = await callToolOverHttp('dobby_at_test_token2');
+        // The provider was NOT invoked during the tool call (lazy)
+        // — now stub the exchange and resolve it explicitly.
+        vi.stubEnv('INTERNAL_SERVICE_SECRET', 'it-secret');
+        const fetchMock = vi.fn().mockResolvedValue({
+            ok: true,
+            json: () => Promise.resolve({
+                success: true,
+                data: { gateway_key: 'gk_tmp_from_web' },
+            }),
+        });
+        vi.stubGlobal('fetch', fetchMock);
+        expect(await context.client.gatewayBearer()).toBe('gk_tmp_from_web');
+        expect(fetchMock).toHaveBeenCalledTimes(1);
+        const [url, init] = fetchMock.mock.calls[0];
+        expect(String(url)).toContain('/api/v1/internal/mcp/gateway-key');
+        expect(init.headers['x-internal-secret']).toBe('it-secret');
+        expect(init.headers.Authorization).toBe('Bearer dobby_at_test_token2');
+        // Session-memoized: a second resolution reuses the same promise
+        expect(await context.client.gatewayBearer()).toBe('gk_tmp_from_web');
+        expect(fetchMock).toHaveBeenCalledTimes(1);
+    });
+});
+//# sourceMappingURL=server-gateway-key.test.js.map

package/dist/__tests__/server-gateway-key.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-gateway-key.test.js","sourceRoot":"","sources":["../../src/__tests__/server-gateway-key.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAGzE,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;CAC3B,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACpD,MAAM,MAAM,GAAG,MAAM,cAAc,EAAsC,CAAC;IAC1E,OAAO;QACL,GAAG,MAAM;QACT,cAAc,EAAE,iBAAiB;KAClC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,KAAK,UAAU,gBAAgB,CAAC,MAAc;IAC5C,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IAClD,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC9D,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IAEtD,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC;IACzB,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3B,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACnD,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,OAAO;YAChB,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,WAAW;YACtB,KAAK,EAAE,mBAAmB;YAC1B,SAAS,EAAE,QAAQ;YACnB,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI;SAC1C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,UAAU,GAAI,YAAY,CAAC,OAAO,EAAuB,CAAC,IAAI,CAAC;IAErE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,eAAe,CAAC;QACtD,IAAI,EAAE,CAAC;QACP,SAAS,EAAE,oBAAoB,UAAU,EAAE;QAC3C,YAAY,EAAE,oBAAoB;QAClC,eAAe,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;KACtD,CAAC,CAAC;IACH,MAAM,OAAO,GAAI,MAAM,CAAC,OAAO,EAAuB,CAAC,IAAI,CAAC;IAC5D,MAAM,MAAM,GAAG,oBAAoB,OAAO,MAAM,CAAC;IAEjD,MAAM,OAAO,GAA2B;QACtC,aAAa,EAAE,UAAU,MAAM,EAAE;QACjC,cAAc,EAAE,kBAAkB;QAClC,MAAM,EAAE,qCAAqC;KAC9C,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE;YAClC,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,CAAC;gBACL,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE;oBACN,eAAe,EAAE,YAAY;oBAC7B,YAAY,EAAE,EAAE;oBAChB,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE;iBAC/C;aACF,CAAC;SACH,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAE,CAAC;QAEzD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE;YAClC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE;YACpD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,CAAC;gBACL,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;aAC/D,CAAC;SACH,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,UAAU,EAAE,CAAC;QAC3B,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,YAAY,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,iBAAiB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACnD,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAgB,CAAC;AAC3D,CAAC;AAED,QAAQ,CAAC,8DAA8D,EAAE,GAAG,EAAE;IAC5E,UAAU,CAAC,GAAG,EAAE;QACd,iBAAiB,CAAC,SAAS,EAAE,CAAC,iBAAiB,CAAC;YAC9C,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;SACxC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACtB,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;QAClG,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;QAE3D,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACpD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACvD,oEAAoE;QACpE,MAAM,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;QAE9D,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,aAAa,EAAE,CAAC;QAC3C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;QACvG,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;QAE/D,2DAA2D;QAC3D,qDAAqD;QACrD,EAAE,CAAC,OAAO,CAAC,yBAAyB,EAAE,WAAW,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC1C,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,GAAG,EAAE,CACT,OAAO,CAAC,OAAO,CAAC;gBACd,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,EAAE,WAAW,EAAE,iBAAiB,EAAE;aACzC,CAAC;SACL,CAAC,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAElC,MAAM,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACrE,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;QAClE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAEvE,gEAAgE;QAChE,MAAM,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACrE,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/server-user-scoped.test.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Server HTTP-mode User-Scoped PAT Routing Tests (ADR-020 W1b/W1c/W2)
+ *
+ * A user-scoped PAT (`dobby_pat_*`) carries NO tenant/org pin — the introspect
+ * endpoint returns `user_scoped: true` with `tenant_id: null` / `org_id: null`
+ * and the AGGREGATE (max) role. The CallTool handler must therefore resolve the
+ * per-call target from the tool ARGUMENTS, not from the token:
+ *
+ *  - ORG_CLIENT_TOOLS (memory_store_*, rubric_*, orchestration_config_list) →
+ *    require an `org_id` arg, which becomes client.organizationId + ctx.orgId;
+ *    tenantId stays undefined. Missing → helpful error, handleToolCall NOT run.
+ *  - ORG_ARG_TOOLS (export_policies, validate_policies, apply_guardrail,
+ *    import_policies) → carry their own `organization_id`; the branch must NOT
+ *    demand a tenant_id.
+ *  - everything else is tenant-scoped → require a `tenant_id` arg → ctx.tenantId,
+ *    plus a per-TENANT-memoized gk_tmp_ provider on the client. Missing → error.
+ *  - ListTools for a user-scoped session appends the two synthetic discovery
+ *    tools (list_my_tenants + list_my_orgs); a tenant-pinned session gets neither.
+ *
+ * Drives the REAL server factory (server.ts) over real Streamable HTTP with a
+ * stub introspection issuer — only tools/index.handleToolCall is spied, so we
+ * inspect the exact ToolContext the handler built, and we also return the parsed
+ * tools/call JSON-RPC result so the "missing arg" branches can assert isError.
+ *
+ * Fixture note — `tenant_role: 'tenant_owner'` (NOT the plain `'owner'` shown in
+ * the ADR-020 ticket example): introspection emits roles in the capability-core
+ * vocabulary (web `aggregate-roles.ts` maps DB `owner` → `tenant_owner`), and the
+ * MCP role-cap (capability-core `roleCapAllows`) only recognizes `tenant_owner`
+ * — `'owner'` is an unknown role and fails the cap (verified), which would make
+ * every call hit a role denial before handleToolCall. `tenant_owner` is the real
+ * in-band value and satisfies the spec's intent (calls reach handleToolCall).
+ */
+export {};
+//# sourceMappingURL=server-user-scoped.test.d.ts.map

package/dist/__tests__/server-user-scoped.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-user-scoped.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/server-user-scoped.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG"}