@frontmcp/testing 1.2.1 → 1.4.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/testing",
-  "version": "1.2.1",
+  "version": "1.4.0",
   "description": "E2E testing framework for FrontMCP servers - MCP client, auth mocks, Playwright integration",
   "author": "AgentFront <info@agentfront.dev>",
   "homepage": "https://docs.agentfront.dev",
@@ -87,12 +87,12 @@
     "./esm": null
   },
   "peerDependencies": {
-    "@frontmcp/sdk": "1.2.1",
-    "@frontmcp/ui": "1.2.1",
+    "@frontmcp/sdk": "1.4.0",
+    "@frontmcp/ui": "1.4.0",
     "@playwright/test": "^1.40.0",
     "jest": "^29.0.0 || ^30.0.0",
     "@jest/globals": "^29.0.0 || ^30.0.0",
-    "@frontmcp/lazy-zod": "1.2.1"
+    "@frontmcp/lazy-zod": "1.4.0"
   },
   "peerDependenciesMeta": {
     "@frontmcp/ui": {
@@ -112,8 +112,8 @@
     "node": ">=24.0.0"
   },
   "dependencies": {
-    "@frontmcp/utils": "1.2.1",
-    "@frontmcp/protocol": "1.2.1",
+    "@frontmcp/utils": "1.4.0",
+    "@frontmcp/protocol": "1.4.0",
     "jose": "^6.0.11",
     "tslib": "^2.3.0"
   },

package/perf/index.js

@@ -2911,15 +2911,39 @@ var TestTokenFactory = class {
   publicKey = null;
   jwk = null;
   keyId;
+  /** HS256 shared secret (gateway mode). Null → RS256 + JWKS (default). */
+  hmacSecret;
   constructor(options = {}) {
     this.issuer = options.issuer ?? "https://test.frontmcp.local";
     this.audience = options.audience ?? "frontmcp-test";
     this.keyId = `test-key-${Date.now()}`;
+    this.hmacSecret = options.hmacSecret ? new TextEncoder().encode(options.hmacSecret) : null;
+  }
+  /** True when this factory signs HS256 with a shared secret (gateway mode). */
+  get isHmac() {
+    return this.hmacSecret !== null;
+  }
+  /** The JWS `alg` this factory signs with. */
+  get alg() {
+    return this.isHmac ? "HS256" : "RS256";
+  }
+  /**
+   * The signing key: the shared HMAC secret in gateway mode, otherwise the
+   * generated RSA private key (lazily created via ensureKeys()).
+   */
+  signingKey() {
+    if (this.hmacSecret) return this.hmacSecret;
+    if (!this.privateKey) {
+      throw new Error("Private key not initialized");
+    }
+    return this.privateKey;
   }
   /**
-   * Initialize the key pair (called automatically on first use)
+   * Initialize the key pair (called automatically on first use). No-op in HS256
+   * mode — there is no asymmetric keypair, just the shared secret.
    */
   async ensureKeys() {
+    if (this.isHmac) return;
     if (this.privateKey && this.publicKey) return;
     const { publicKey, privateKey } = await (0, import_jose.generateKeyPair)("RS256", {
       extractable: true
@@ -2947,10 +2971,8 @@ var TestTokenFactory = class {
       scope: options.scopes?.join(" "),
       ...options.claims
     };
-    if (!this.privateKey) {
-      throw new Error("Private key not initialized");
-    }
-    const token = await new import_jose.SignJWT(payload).setProtectedHeader({ alg: "RS256", kid: this.keyId }).sign(this.privateKey);
+    const header = this.isHmac ? { alg: this.alg, typ: "JWT" } : { alg: this.alg, kid: this.keyId };
+    const token = await new import_jose.SignJWT(payload).setProtectedHeader(header).sign(this.signingKey());
     return token;
   }
   /**
@@ -3009,10 +3031,8 @@ var TestTokenFactory = class {
       exp: now - 3600
       // Expired 1 hour ago
     };
-    if (!this.privateKey) {
-      throw new Error("Private key not initialized");
-    }
-    const token = await new import_jose.SignJWT(payload).setProtectedHeader({ alg: "RS256", kid: this.keyId }).sign(this.privateKey);
+    const header = this.isHmac ? { alg: this.alg, typ: "JWT" } : { alg: this.alg, kid: this.keyId };
+    const token = await new import_jose.SignJWT(payload).setProtectedHeader(header).sign(this.signingKey());
     return token;
   }
   /**
@@ -3020,7 +3040,8 @@ var TestTokenFactory = class {
    */
   createTokenWithInvalidSignature(options) {
     const now = Math.floor(Date.now() / 1e3);
-    const header = Buffer.from(JSON.stringify({ alg: "RS256", kid: this.keyId })).toString("base64url");
+    const headerObj = this.isHmac ? { alg: this.alg, typ: "JWT" } : { alg: this.alg, kid: this.keyId };
+    const header = Buffer.from(JSON.stringify(headerObj)).toString("base64url");
     const payload = Buffer.from(
       JSON.stringify({
         iss: this.issuer,
@@ -3034,9 +3055,15 @@ var TestTokenFactory = class {
     return `${header}.${payload}.${signature}`;
   }
   /**
-   * Get the public JWKS for verifying tokens
+   * Get the public JWKS for verifying tokens.
+   *
+   * Only meaningful in RS256 mode — HS256 (gateway) tokens are verified against
+   * the shared secret, not a published public key, so there is no JWKS to serve.
    */
   async getPublicJwks() {
+    if (this.isHmac) {
+      throw new Error("getPublicJwks() is not available in HS256 mode (gateway tokens use a shared secret)");
+    }
     await this.ensureKeys();
     if (!this.jwk) {
       throw new Error("JWK not initialized");
@@ -3098,6 +3125,7 @@ var E2E_PORT_RANGES = {
   "demo-e2e-orchestrated": { start: 50100, size: 10 },
   "demo-e2e-transparent": { start: 50110, size: 10 },
   "demo-e2e-cimd": { start: 50120, size: 10 },
+  "demo-e2e-remote-proxy": { start: 50130, size: 10 },
   // Feature E2E tests (50200-50299)
   "demo-e2e-skills": { start: 50200, size: 10 },
   "demo-e2e-remote": { start: 50210, size: 10 },

package/raw-client/index.d.ts

@@ -4,4 +4,5 @@
  */
 export { Client as McpClient } from '@frontmcp/protocol';
 export { StdioClientTransport as McpStdioClientTransport } from '@frontmcp/protocol';
+export { isTcpPortListening } from './port-probe';
 //# sourceMappingURL=index.d.ts.map

package/raw-client/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/raw-client/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,oBAAoB,IAAI,uBAAuB,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/raw-client/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,oBAAoB,IAAI,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC"}

package/raw-client/port-probe.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Resolve `true` iff a TCP server is currently accepting connections on
+ * `host:port`, otherwise `false`.
+ *
+ * A refused connection (`ECONNREFUSED`) or a timeout resolves to `false`; a
+ * successful connect resolves to `true` and the probe socket is closed
+ * immediately. Probing loopback makes "nothing listening" fail fast, so the
+ * timeout only guards against a silently-dropped connection.
+ *
+ * @param port - TCP port to probe
+ * @param host - Host/interface to probe (default `127.0.0.1`)
+ * @param timeoutMs - Max time to wait for a connection (default `1500`)
+ */
+export declare function isTcpPortListening(port: number, host?: string, timeoutMs?: number): Promise<boolean>;
+//# sourceMappingURL=port-probe.d.ts.map

package/raw-client/port-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"port-probe.d.ts","sourceRoot":"","sources":["../../src/raw-client/port-probe.ts"],"names":[],"mappings":"AAQA;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,SAAc,EAAE,SAAS,SAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAoBvG"}

package/server/port-registry.d.ts

@@ -67,6 +67,10 @@ export declare const E2E_PORT_RANGES: {
         readonly start: 50120;
         readonly size: 10;
     };
+    readonly 'demo-e2e-remote-proxy': {
+        readonly start: 50130;
+        readonly size: 10;
+    };
     readonly 'demo-e2e-skills': {
         readonly start: 50200;
         readonly size: 10;

package/server/port-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"port-registry.d.ts","sourceRoot":"","sources":["../../src/server/port-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAQH;;;;;;GAMG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0DlB,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,MAAM,OAAO,eAAe,CAAC;AAuBtD;;GAEG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAM7E;AAED;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,MAAM,EACf,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CAiEzD;AAkFD;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGtD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAWxE;AAED;;GAEG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAGrD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAM/F"}
+{"version":3,"file":"port-registry.d.ts","sourceRoot":"","sources":["../../src/server/port-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAQH;;;;;;GAMG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2DlB,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,MAAM,OAAO,eAAe,CAAC;AAuBtD;;GAEG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAM7E;AAED;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,MAAM,EACf,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CAiEzD;AAkFD;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGtD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAWxE;AAED;;GAEG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAGrD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAM/F"}