@ripla/godd-mcp 0.1.3-canary.76 → 0.1.3-canary.78

package/notes-api/app/routers/settings.py

@@ -3,6 +3,7 @@
 import logging
 
 from fastapi import APIRouter, Depends, HTTPException
+from fastapi.encoders import jsonable_encoder
 from pydantic import BaseModel
 from sqlalchemy import select
 from sqlalchemy.dialects.postgresql import insert
@@ -28,7 +29,7 @@ async def get_settings(db: AsyncSession = Depends(get_db)):
     try:
         result = await db.execute(select(NotesSetting))
         rows = result.scalars().all()
-        return {row.key: row.value for row in rows}
+        return jsonable_encoder({row.key: row.value for row in rows})
     except SQLAlchemyError:
         logger.exception("Failed to load application settings")
         raise HTTPException(

package/notes-api/tests/conftest.py

@@ -80,6 +80,8 @@ def make_mock_result(value=None):
 def mock_db():
     """Provide an AsyncMock DB session and override the get_db dependency."""
     session = AsyncMock()
+    # AsyncSession.add is synchronous; a default AsyncMock would return an un-awaited coroutine.
+    session.add = MagicMock()
 
     async def override_get_db() -> AsyncGenerator:
         yield session

package/notes-api/tests/test_audit.py

@@ -1,13 +1,20 @@
 """Tests for audit log service."""
 
 import uuid
-from unittest.mock import AsyncMock
+from unittest.mock import AsyncMock, MagicMock
 
 from app.services.audit import audit_log
 
 
-async def test_audit_log_creates_entry():
+def _async_db_session() -> AsyncMock:
+    """AsyncSession stand-in: .add is sync; awaitable methods stay AsyncMock."""
     db = AsyncMock()
+    db.add = MagicMock()
+    return db
+
+
+async def test_audit_log_creates_entry():
+    db = _async_db_session()
     user_id = uuid.uuid4()
 
     await audit_log(db, user_id, "save", detail={"filePath": "docs/test.md"})
@@ -21,7 +28,7 @@ async def test_audit_log_creates_entry():
 
 
 async def test_audit_log_with_ip_address():
-    db = AsyncMock()
+    db = _async_db_session()
     user_id = uuid.uuid4()
 
     await audit_log(db, user_id, "login", ip_address="192.168.1.1")
@@ -31,7 +38,7 @@ async def test_audit_log_with_ip_address():
 
 
 async def test_audit_log_nullable_user_id():
-    db = AsyncMock()
+    db = _async_db_session()
 
     await audit_log(db, None, "system_event")
 

package/notes-api/tests/test_security.py

@@ -74,6 +74,10 @@ class TestJWT:
             "username": "x",
             "exp": datetime.now(UTC) + timedelta(hours=1),
         }
-        token = jwt.encode(payload, "wrong-secret", algorithm="HS256")
+        token = jwt.encode(
+            payload,
+            "wrong-secret-but-long-enough-for-jwt-hs256-recommendation",
+            algorithm="HS256",
+        )
         with pytest.raises(Exception, match="Invalid or expired token"):
             verify_access_token(token)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ripla/godd-mcp",
-  "version": "0.1.3-canary.76",
+  "version": "0.1.3-canary.78",
   "type": "module",
   "description": "GoDD (Governance-orchestrated Driven Development) MCP Server - Encrypted prompt distribution via Model Context Protocol",
   "main": "dist/index.js",