@gemus/mcp-proxy 0.1.9 → 0.1.10

package/src/__tests__/route.integration.test.ts

@@ -1,68 +0,0 @@
-import { describe, it, expect } from 'vitest'
-import { Client } from '@modelcontextprotocol/sdk/client/index.js'
-import { StreamableHTTPClientTransport } from '@modelcontextprotocol/sdk/client/streamableHttp.js'
-
-/**
- * Opt-in integration test against a REAL running gemus `/api/mcp` route (#1751). Validates the Mode-B
- * **key-only** contract the proxy + core delivery rely on: Bearer `mak_` auth with **no**
- * `X-Gemus-Session-Id` header, and addressing by an explicit real `workflowId`.
- *
- * Excluded from the default runner (`*.integration.test.ts`) and gated on env so it never runs in CI or
- * by accident. To run against local dev:
- *   GEMUS_IT_KEY=mak_... GEMUS_IT_WORKFLOW=<realWorkflowId> \
- *   pnpm exec vitest run packages/gemus-mcp-proxy/src/__tests__/route.integration.test.ts
- * (GEMUS_IT_URL defaults to http://localhost:3000/api/mcp.) All calls here are read-only (no mutation).
- *
- * connect-per-call invariant: every case opens + closes its own client (fresh connectionNonce, #1744).
- */
-const KEY = process.env.GEMUS_IT_KEY
-const URL_ = process.env.GEMUS_IT_URL || 'http://localhost:3000/api/mcp'
-const WORKFLOW = process.env.GEMUS_IT_WORKFLOW
-
-/** Key-only client: Bearer only, deliberately NO X-Gemus-Session-Id (the Mode-B contract). */
-async function connectKeyOnly() {
-  const client = new Client({ name: 'gemus-proxy-it', version: '0.1.0' })
-  const transport = new StreamableHTTPClientTransport(new URL(URL_), {
-    requestInit: { headers: { Authorization: `Bearer ${KEY}` } },
-  })
-  await client.connect(transport)
-  return client
-}
-
-describe.skipIf(!KEY)('key-only /api/mcp route (real, opt-in)', () => {
-  it('relays the full tool surface incl. execute/batch_execute (no session header)', async () => {
-    const client = await connectKeyOnly()
-    try {
-      const { tools } = await client.listTools()
-      const names = tools.map((t) => t.name)
-      expect(names).toEqual(expect.arrayContaining(['execute', 'batch_execute', 'canvas_read', 'canvas_edit']))
-    } finally {
-      await client.close()
-    }
-  })
-
-  it('serves resources (skills / knowledge) through the key-only connection', async () => {
-    const client = await connectKeyOnly()
-    try {
-      const { resources } = await client.listResources()
-      // The route exposes skill:// / knowledge:// resources; a tool-only passthrough would drop these.
-      expect(Array.isArray(resources)).toBe(true)
-    } finally {
-      await client.close()
-    }
-  })
-
-  it.skipIf(!WORKFLOW)('addresses a real workflow by explicit workflowId (key-only, no activeContext)', async () => {
-    const client = await connectKeyOnly()
-    try {
-      // canvas_read is read-only; success proves key-only addressing by explicit workflowId works
-      // without a session header (what deliverImageToNode relies on in Mode B).
-      const res = (await client.callTool({ name: 'canvas_read', arguments: { workflowId: WORKFLOW } })) as {
-        isError?: boolean
-      }
-      expect(res.isError).not.toBe(true)
-    } finally {
-      await client.close()
-    }
-  })
-})