@leadfund/lead-mcp 202610.1.0 → 202610.2.0

package/test/http.test.mjs

@@ -0,0 +1,284 @@
+/**
+ * HTTP(S) 传输端到端测试
+ *
+ * <p>覆盖两种云端协议：</p>
+ * <ul>
+ *     <li>{@code sse}  —— GET /sse 建流 + POST /messages 回传</li>
+ *     <li>{@code http} —— Streamable HTTP 的 POST /mcp</li>
+ * </ul>
+ *
+ * <p>同时验证鉴权：没有 Bearer 令牌一律 401。</p>
+ *
+ * <p>运行：node test/http.test.mjs</p>
+ */
+
+import { spawn } from "node:child_process";
+import { createServer } from "node:http";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import assert from "node:assert/strict";
+
+const CLI = path.join(
+  path.dirname(new URL(import.meta.url).pathname),
+  "..",
+  "src",
+  "cli.js",
+);
+const AUTH_TOKEN = "test-token-123";
+
+let passed = 0;
+
+/**
+ * 断言
+ *
+ * @param {string} name 用例名
+ * @param {Function} fn 断言函数
+ */
+async function test(name, fn) {
+  try {
+    await fn();
+    passed += 1;
+    console.log(`✓ ${name}`);
+  } catch (error) {
+    console.error(`✗ ${name}\n  ${error.message}`);
+    process.exitCode = 1;
+  }
+}
+
+/**
+ * 起一个 mock 的 dmmp-system
+ */
+async function startMockBackend() {
+  const server = createServer((req, res) => {
+    let body = "";
+    req.on("data", (c) => {
+      body += c;
+    });
+    req.on("end", () => {
+      res.setHeader("Content-Type", "application/json");
+      res.end(
+        JSON.stringify({
+          code: 0,
+          message: "接口调用成功",
+          data: {
+            found: true,
+            memberId: "M10086",
+            memberIdList: ["M10086"],
+            name: "张*",
+            mobileFormat: "138****0000",
+            idTypeFormat: "身份证",
+            idNoFormat: "310101********1234",
+            idValidityFormat: "长期有效",
+          },
+        }),
+      );
+    });
+  });
+  await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
+  return { server, port: server.address().port };
+}
+
+/**
+ * 起一个 lead-mcp 的 HTTP 模式实例
+ */
+async function startHttpMode(transport, extraArgs = []) {
+  const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "lead-mcp-http-"));
+  const child = spawn(
+    process.execPath,
+    [
+      CLI,
+      "--transport",
+      transport,
+      "--auth-token",
+      AUTH_TOKEN,
+      "--http-port",
+      "0",
+      ...extraArgs,
+    ],
+    { stdio: ["pipe", "pipe", "pipe"] },
+  );
+
+  let stderr = "";
+  child.stderr.on("data", (c) => {
+    stderr += c.toString();
+  });
+
+  // 从启动日志里拿实际端口（--http-port 0 表示随机端口）
+  const port = await new Promise((resolve, reject) => {
+    const timer = setTimeout(
+      () => reject(new Error(`启动超时\n${stderr}`)),
+      15000,
+    );
+    child.stderr.on("data", () => {
+      const match = stderr.match(/端点=http:\/\/[^:]+:(\d+)/);
+      if (match) {
+        clearTimeout(timer);
+        resolve(Number(match[1]));
+      }
+    });
+  });
+
+  return { child, port, getStderr: () => stderr };
+}
+
+/**
+ * SSE：建立流，拿到 sessionId，再通过 POST /messages 发 initialize
+ */
+async function sseHandshake(port, withAuth = true) {
+  const headers = withAuth ? { Authorization: `Bearer ${AUTH_TOKEN}` } : {};
+  const controller = new AbortController();
+  const res = await fetch(`http://127.0.0.1:${port}/sse`, {
+    headers,
+    signal: controller.signal,
+  });
+
+  const reader = res.body.getReader();
+  const decoder = new TextDecoder();
+  let buffer = "";
+  let sessionId = null;
+  let firstMessage = null;
+
+  // 读第一帧：event: endpoint 里带 sessionId
+  while (!sessionId) {
+    const { value, done } = await reader.read();
+    if (done) break;
+    buffer += decoder.decode(value, { stream: true });
+    const match = buffer.match(/sessionId=([0-9a-f-]+)/);
+    if (match) {
+      sessionId = match[1];
+    }
+  }
+
+  const post = async (message) => {
+    await fetch(`http://127.0.0.1:${port}/messages?sessionId=${sessionId}`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json", ...headers },
+      body: JSON.stringify(message),
+    });
+  };
+
+  await post({
+    jsonrpc: "2.0",
+    id: 1,
+    method: "initialize",
+    params: {
+      protocolVersion: "2024-11-05",
+      capabilities: {},
+      clientInfo: { name: "http-test", version: "0.0.1" },
+    },
+  });
+
+  // 从流里读 initialize 的响应
+  const deadline = Date.now() + 10000;
+  while (!firstMessage && Date.now() < deadline) {
+    const { value, done } = await reader.read();
+    if (done) break;
+    buffer += decoder.decode(value, { stream: true });
+    const match = buffer.match(/data: (\{.*?\})\r?\n/);
+    if (match) {
+      firstMessage = JSON.parse(match[1]);
+    }
+  }
+
+  controller.abort();
+  return { sessionId, firstMessage };
+}
+
+async function main() {
+  const mock = await startMockBackend();
+  const baseUrl = `http://127.0.0.1:${mock.port}`;
+
+  // 配置文件里指定后端地址
+  const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "lead-mcp-cfg-"));
+  const configFile = path.join(tmpDir, "config.json");
+  fs.writeFileSync(
+    configFile,
+    JSON.stringify({ environments: { test: [baseUrl] } }),
+  );
+
+  // ---- SSE ----
+  const sse = await startHttpMode("sse", [
+    "--base-url",
+    baseUrl,
+    "--env",
+    "test",
+  ]);
+
+  await test("SSE：未带令牌返回 401", async () => {
+    const res = await fetch(`http://127.0.0.1:${sse.port}/sse`);
+    assert.equal(res.status, 401);
+  });
+
+  await test("SSE：健康检查不鉴权", async () => {
+    const res = await fetch(`http://127.0.0.1:${sse.port}/health`);
+    assert.equal(res.status, 200);
+    const body = await res.json();
+    assert.equal(body.ok, true);
+    assert.equal(body.transport, "sse");
+  });
+
+  await test("SSE：握手并能查到客户信息", async () => {
+    const { sessionId, firstMessage } = await sseHandshake(sse.port);
+    assert.ok(sessionId, "应拿到 sessionId");
+    assert.ok(firstMessage, "应收到 initialize 响应");
+    assert.equal(firstMessage.result.serverInfo.name, "lead-mcp");
+  });
+
+  sse.child.kill();
+
+  // ---- Streamable HTTP ----
+  const stream = await startHttpMode("http", ["--base-url", baseUrl]);
+
+  await test("HTTP：未带令牌返回 401", async () => {
+    const res = await fetch(`http://127.0.0.1:${stream.port}/mcp`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ jsonrpc: "2.0", id: 1, method: "initialize" }),
+    });
+    assert.equal(res.status, 401);
+  });
+
+  await test("HTTP：initialize 返回服务器信息", async () => {
+    const res = await fetch(`http://127.0.0.1:${stream.port}/mcp`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Accept: "application/json, text/event-stream",
+        Authorization: `Bearer ${AUTH_TOKEN}`,
+      },
+      body: JSON.stringify({
+        jsonrpc: "2.0",
+        id: 1,
+        method: "initialize",
+        params: {
+          protocolVersion: "2024-11-05",
+          capabilities: {},
+          clientInfo: { name: "http-test", version: "0.0.1" },
+        },
+      }),
+    });
+    assert.equal(res.status, 200);
+    const text = await res.text();
+    // Streamable HTTP 可能以 SSE 帧返回，data 后面是完整的嵌套 JSON
+    const match = text.match(/data: (\{[\s\S]*\})/) ?? text.match(/(\{[\s\S]*\})/);
+    assert.ok(match, `应返回 MCP 响应，实际: ${text.slice(0, 200)}`);
+    const body = JSON.parse(match[1]);
+    assert.equal(body.result.serverInfo.name, "lead-mcp");
+  });
+
+  stream.child.kill();
+  mock.server.close();
+  fs.rmSync(tmpDir, { recursive: true, force: true });
+
+  if (process.exitCode) {
+    console.error("\n有用例失败 ❌");
+  } else {
+    console.log(`\n全部通过（${passed} 个用例）✅`);
+  }
+}
+
+main().catch((error) => {
+  console.error("HTTP 测试失败:", error);
+  process.exit(1);
+});