@vibecodetown/mcp-server 1.3.1 → 1.5.0

package/scripts/e2e-podman-test.sh

@@ -0,0 +1,91 @@
+#!/bin/bash
+#
+# E2E Test Runner using Podman Compose
+#
+# This script runs the E2E tests in a fully isolated container environment
+# using Podman (daemonless, rootless container engine).
+#
+# Prerequisites:
+#   - Podman installed: https://podman.io/getting-started/installation
+#   - podman-compose installed: pip install podman-compose
+#
+# Usage:
+#   npm run test:e2e:podman
+#   # or directly:
+#   bash scripts/e2e-podman-test.sh
+#
+
+set -e
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PROJECT_DIR="$(dirname "$SCRIPT_DIR")"
+
+cd "$PROJECT_DIR"
+
+echo "================================================"
+echo "  Vibe PM E2E Tests (Podman Isolated)"
+echo "================================================"
+echo ""
+
+# Check if podman is available
+if ! command -v podman &> /dev/null; then
+    echo "ERROR: podman is not installed."
+    echo "Install from: https://podman.io/getting-started/installation"
+    exit 1
+fi
+
+# Check if podman-compose is available
+if ! command -v podman-compose &> /dev/null; then
+    echo "ERROR: podman-compose is not installed."
+    echo "Install with: pip install podman-compose"
+    exit 1
+fi
+
+echo "[1/4] Building test containers..."
+podman-compose -f podman-compose.test.yml build
+
+echo ""
+echo "[2/4] Starting MCP server and waiting for health..."
+podman-compose -f podman-compose.test.yml up -d mcp-server
+
+# Wait for health check
+MAX_WAIT=60
+WAITED=0
+while [ $WAITED -lt $MAX_WAIT ]; do
+    if podman-compose -f podman-compose.test.yml ps | grep -q "healthy"; then
+        echo "MCP server is healthy!"
+        break
+    fi
+    echo "Waiting for MCP server... ($WAITED/$MAX_WAIT)"
+    sleep 5
+    WAITED=$((WAITED + 5))
+done
+
+if [ $WAITED -ge $MAX_WAIT ]; then
+    echo "ERROR: MCP server failed to become healthy"
+    podman-compose -f podman-compose.test.yml logs mcp-server
+    podman-compose -f podman-compose.test.yml down -v
+    exit 1
+fi
+
+echo ""
+echo "[3/4] Running E2E tests..."
+EXIT_CODE=0
+podman-compose -f podman-compose.test.yml run --rm test-runner || EXIT_CODE=$?
+
+echo ""
+echo "[4/4] Cleaning up..."
+podman-compose -f podman-compose.test.yml down -v
+
+echo ""
+if [ $EXIT_CODE -eq 0 ]; then
+    echo "================================================"
+    echo "  E2E Tests PASSED"
+    echo "================================================"
+else
+    echo "================================================"
+    echo "  E2E Tests FAILED (exit code: $EXIT_CODE)"
+    echo "================================================"
+fi
+
+exit $EXIT_CODE

package/scripts/generate-checksums.sh

@@ -0,0 +1,29 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+cd "$ROOT_DIR"
+
+OUT_FILE="bin/SHA256SUMS"
+
+tmp="$(mktemp)"
+trap 'rm -f "$tmp"' EXIT
+
+(
+  cd bin
+  # Deterministic ordering for reproducible diffs.
+  find . -type f \
+    ! -name "SHA256SUMS" \
+    ! -name "*.sha256" \
+    ! -name ".gitkeep" \
+    -print0 \
+    | sort -z \
+    | xargs -0 sha256sum
+) > "$tmp"
+
+mv "$tmp" "$OUT_FILE"
+trap - EXIT
+
+chmod 0644 "$OUT_FILE"
+
+echo "Wrote $OUT_FILE"

package/scripts/publish.sh

@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+# Pre-publish validation + dry-run for @vibecodetown/mcp-server
+set -euo pipefail
+cd "$(dirname "$0")/.."
+
+echo "=== Build ==="
+npm run build
+
+echo "=== Type Check ==="
+npx tsc --noEmit
+
+echo "=== Tests ==="
+npx vitest run --reporter=dot
+
+echo "=== npm publish (dry-run) ==="
+npm publish --access public --dry-run
+
+echo ""
+echo "Dry run OK. To publish for real:"
+echo "  npm publish --access public"

package/scripts/setup_infra.sh

@@ -0,0 +1,160 @@
+#!/bin/bash
+# ============================================================
+# Musu Engine — Infrastructure Setup (P36)
+# ============================================================
+# One-stop setup for local development infrastructure.
+# Installs Kind, creates K8s cluster, deploys PostgreSQL.
+#
+# Usage:
+#   npm run setup          # or
+#   bash scripts/setup_infra.sh
+#
+# Prerequisites:
+#   - Podman or Docker installed
+#   - kubectl installed
+# ============================================================
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PROJECT_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
+CLUSTER_NAME="musu-cluster"
+KIND_CONFIG="$PROJECT_ROOT/k8s/kind-config.yaml"
+NAMESPACE="vibe-pm"
+
+# Colors
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m' # No Color
+
+info()  { echo -e "${GREEN}[setup]${NC} $1"; }
+warn()  { echo -e "${YELLOW}[setup]${NC} $1"; }
+error() { echo -e "${RED}[setup]${NC} $1" >&2; }
+
+# ============================================================
+# 1. Check prerequisites
+# ============================================================
+
+check_command() {
+  if ! command -v "$1" &>/dev/null; then
+    error "$1 is not installed."
+    echo "  Install: $2"
+    return 1
+  fi
+  info "$1 found: $(command -v "$1")"
+}
+
+info "Checking prerequisites..."
+check_command kubectl "https://kubernetes.io/docs/tasks/tools/"
+
+# Check container runtime
+if command -v podman &>/dev/null; then
+  CONTAINER_RUNTIME="podman"
+  export KIND_EXPERIMENTAL_PROVIDER=podman
+  info "Container runtime: podman"
+elif command -v docker &>/dev/null; then
+  CONTAINER_RUNTIME="docker"
+  info "Container runtime: docker"
+else
+  error "Neither podman nor docker found. Install one of them first."
+  exit 1
+fi
+
+# ============================================================
+# 2. Install Kind if needed
+# ============================================================
+
+if ! command -v kind &>/dev/null; then
+  warn "Kind not found. Installing..."
+
+  ARCH=$(uname -m)
+  case "$ARCH" in
+    x86_64)  KIND_ARCH="amd64" ;;
+    aarch64) KIND_ARCH="arm64" ;;
+    arm64)   KIND_ARCH="arm64" ;;
+    *)       error "Unsupported architecture: $ARCH"; exit 1 ;;
+  esac
+
+  OS=$(uname -s | tr '[:upper:]' '[:lower:]')
+
+  KIND_URL="https://kind.sigs.k8s.io/dl/latest/kind-${OS}-${KIND_ARCH}"
+  info "Downloading Kind from $KIND_URL"
+
+  curl -Lo /tmp/kind "$KIND_URL"
+  chmod +x /tmp/kind
+  sudo mv /tmp/kind /usr/local/bin/kind
+
+  info "Kind installed: $(kind version)"
+else
+  info "Kind found: $(kind version)"
+fi
+
+# ============================================================
+# 3. Create Kind cluster
+# ============================================================
+
+if kind get clusters 2>/dev/null | grep -q "^${CLUSTER_NAME}$"; then
+  warn "Cluster '$CLUSTER_NAME' already exists. Skipping creation."
+else
+  info "Creating Kind cluster '$CLUSTER_NAME'..."
+  kind create cluster \
+    --name "$CLUSTER_NAME" \
+    --config "$KIND_CONFIG"
+  info "Cluster created."
+fi
+
+# Ensure kubectl context is set
+kubectl cluster-info --context "kind-${CLUSTER_NAME}" &>/dev/null || {
+  error "Failed to connect to cluster. Check Kind status."
+  exit 1
+}
+
+info "kubectl connected to kind-${CLUSTER_NAME}"
+
+# ============================================================
+# 4. Deploy K8s resources
+# ============================================================
+
+info "Applying K8s resources (kustomize overlay: local)..."
+kubectl apply -k "$PROJECT_ROOT/k8s/overlays/local/"
+
+# ============================================================
+# 5. Wait for DB to be ready
+# ============================================================
+
+info "Waiting for PostgreSQL pod to be ready (timeout: 90s)..."
+kubectl wait -n "$NAMESPACE" \
+  --for=condition=ready pod \
+  -l app.kubernetes.io/name=vibe-pm-db \
+  --timeout=90s
+
+info "PostgreSQL is ready."
+
+# ============================================================
+# 6. Connection info
+# ============================================================
+
+echo ""
+info "=== Infrastructure Setup Complete ==="
+echo ""
+echo "  PostgreSQL:"
+echo "    Host: 127.0.0.1:5432"
+echo "    User: vibe"
+echo "    Pass: <read-from-k8s-secret>"
+echo "    DB:   vibe_srv"
+echo "    URL:  postgresql://vibe:<strong-password>@localhost:5432/vibe_srv"
+echo ""
+echo "  Connect:"
+echo "    psql -h 127.0.0.1 -p 5432 -U vibe -d vibe_srv"
+echo ""
+echo "  Environment variable for npm start:"
+echo "    export VIBE_DB_URL=postgresql://vibe:<strong-password>@localhost:5432/vibe_srv"
+echo ""
+echo "  Apply schema (first time):"
+echo "    psql -h 127.0.0.1 -p 5432 -U vibe -d vibe_srv -f src/db_sync/schema/local.sql"
+echo ""
+echo "  Read DB password from secret:"
+echo "    kubectl get secret -n $NAMESPACE vibe-pm-db-secret -o jsonpath='{.data.password}' | base64 -d; echo"
+echo ""
+info "Done."

package/scripts/sync-third-party-notices.mjs

@@ -0,0 +1,18 @@
+import fs from "node:fs/promises";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+async function main() {
+  const dirname = path.dirname(fileURLToPath(import.meta.url));
+  const repoRoot = path.resolve(dirname, "..", "..", "..");
+  const source = path.join(repoRoot, "THIRD_PARTY_NOTICES.md");
+  const dest = path.resolve(dirname, "..", "THIRD_PARTY_NOTICES.md");
+
+  const content = await fs.readFile(source, "utf8");
+  await fs.writeFile(dest, content, "utf8");
+}
+
+main().catch((error) => {
+  console.error("[sync-third-party-notices] failed:", error);
+  process.exitCode = 1;
+});

package/scripts/test-mq-integration.mjs

@@ -0,0 +1,81 @@
+#!/usr/bin/env node
+
+import { spawnSync } from "node:child_process";
+import net from "node:net";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const repoRoot = path.resolve(__dirname, "..");
+const composeFile = path.join(repoRoot, "tests", "events", "docker-compose.mq.yml");
+
+function run(cmd, args, opts = {}) {
+  const result = spawnSync(cmd, args, {
+    cwd: repoRoot,
+    stdio: "inherit",
+    shell: process.platform === "win32",
+    ...opts,
+  });
+  if (result.status !== 0) {
+    throw new Error(`${cmd} ${args.join(" ")} failed with code ${result.status ?? "unknown"}`);
+  }
+}
+
+function waitForPort(host, port, timeoutMs) {
+  const started = Date.now();
+  return new Promise((resolve, reject) => {
+    const attempt = () => {
+      const socket = net.createConnection({ host, port });
+      socket.setTimeout(1500);
+      socket.once("connect", () => {
+        socket.end();
+        resolve();
+      });
+      const retry = () => {
+        socket.destroy();
+        if (Date.now() - started >= timeoutMs) {
+          reject(new Error(`timeout waiting for ${host}:${port}`));
+          return;
+        }
+        setTimeout(attempt, 750);
+      };
+      socket.once("error", retry);
+      socket.once("timeout", retry);
+    };
+    attempt();
+  });
+}
+
+async function main() {
+  run("docker", ["--version"]);
+
+  try {
+    run("docker", ["compose", "-f", composeFile, "up", "-d"]);
+    await waitForPort("127.0.0.1", 4222, 60_000);
+    await waitForPort("127.0.0.1", 6379, 60_000);
+
+    run(
+      "node",
+      ["./node_modules/vitest/vitest.mjs", "run", "tests/events/mq_integration_optin.test.ts"],
+      {
+        env: {
+          ...process.env,
+          MQ_INTEGRATION: "1",
+          MQ_URL_NATS: "nats://127.0.0.1:4222",
+          MQ_URL_REDIS: "redis://127.0.0.1:6379",
+        },
+      }
+    );
+  } finally {
+    try {
+      run("docker", ["compose", "-f", composeFile, "down", "-v"]);
+    } catch {
+      // Best-effort cleanup.
+    }
+  }
+}
+
+main().catch(err => {
+  console.error(`[test-mq-integration] ${err instanceof Error ? err.message : String(err)}`);
+  process.exit(1);
+});

package/scripts/test-musu-smoke.sh

@@ -0,0 +1,136 @@
+#!/bin/bash
+# MUSU Binary Smoke Test
+#
+# Tests:
+#   1. musu --help exits 0
+#   2. Start worker, check /health
+#   3. Read setup token, perform /auth/handshake
+#   4. Authenticated /v1/telemetry request
+#
+# Usage:
+#   MUSU_BIN_PATH=/path/to/musu bash scripts/test-musu-smoke.sh
+#
+# The binary can also be built with:
+#   cd src && cargo build --release -p musu-core
+
+set -e
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+
+# Resolve binary path
+if [ -n "$MUSU_BIN_PATH" ]; then
+  MUSU_BIN="$MUSU_BIN_PATH"
+elif [ -f "$SCRIPT_DIR/../../src/target/release/musu" ]; then
+  MUSU_BIN="$SCRIPT_DIR/../../src/target/release/musu"
+elif [ -f "$SCRIPT_DIR/../bin/musu-linux-x64" ]; then
+  MUSU_BIN="$SCRIPT_DIR/../bin/musu-linux-x64"
+else
+  echo "SKIP: musu binary not found."
+  echo "  Set MUSU_BIN_PATH or build with: cd src && cargo build --release -p musu-core"
+  exit 0
+fi
+
+echo "=== MUSU Binary Smoke Test ==="
+echo "Binary: $MUSU_BIN"
+echo ""
+
+# Use a temp dir for state (token file etc.)
+TMPDIR_STATE=$(mktemp -d)
+export MUSU_STATE_DIR="$TMPDIR_STATE"
+
+# Pick a random high port
+PORT=$((20000 + RANDOM % 10000))
+
+# Track child PID for cleanup
+PID=""
+cleanup() {
+  if [ -n "$PID" ] && kill -0 "$PID" 2>/dev/null; then
+    kill "$PID" 2>/dev/null || true
+    wait "$PID" 2>/dev/null || true
+  fi
+  rm -rf "$TMPDIR_STATE"
+}
+trap cleanup EXIT
+
+# --- Test 1: --help ---
+echo "--- Test 1: --help ---"
+$MUSU_BIN --help > /dev/null 2>&1 || { echo "FAIL: --help returned non-zero"; exit 1; }
+echo "PASS"
+
+# --- Test 2: Start server + health check ---
+echo ""
+echo "--- Test 2: Start server + /health ---"
+$MUSU_BIN --mode worker --port "$PORT" --security-level home --no-banner > /dev/null 2>&1 &
+PID=$!
+
+# Wait for server to start (up to 15s)
+READY=false
+for i in $(seq 1 30); do
+  if curl -sf "http://127.0.0.1:$PORT/health" > /dev/null 2>&1; then
+    READY=true
+    break
+  fi
+  sleep 0.5
+done
+
+if [ "$READY" != "true" ]; then
+  echo "FAIL: Server did not become healthy within 15s"
+  exit 1
+fi
+
+HEALTH=$(curl -sf "http://127.0.0.1:$PORT/health")
+echo "Health: $HEALTH"
+echo "$HEALTH" | grep -q '"ok"' || { echo "FAIL: unexpected health response"; exit 1; }
+echo "PASS"
+
+# --- Test 3: Token Drop Handshake ---
+echo ""
+echo "--- Test 3: Token Drop Handshake ---"
+TOKEN_PATH="$TMPDIR_STATE/musu-setup.token"
+
+if [ ! -f "$TOKEN_PATH" ]; then
+  echo "FAIL: Setup token file not found at $TOKEN_PATH"
+  exit 1
+fi
+
+TOKEN=$(cat "$TOKEN_PATH")
+echo "Token file found (${#TOKEN} chars)"
+
+HANDSHAKE=$(curl -sf -X POST "http://127.0.0.1:$PORT/auth/handshake" \
+  -H 'Content-Type: application/json' \
+  -d "{\"setup_token\":\"$TOKEN\"}")
+echo "Handshake: $HANDSHAKE"
+echo "$HANDSHAKE" | grep -q '"connected"' || { echo "FAIL: handshake did not return connected"; exit 1; }
+
+# Extract access_token (portable grep)
+ACCESS_TOKEN=$(echo "$HANDSHAKE" | python3 -c "import sys,json; print(json.load(sys.stdin)['access_token'])" 2>/dev/null \
+  || echo "$HANDSHAKE" | grep -o '"access_token":"[^"]*"' | head -1 | cut -d'"' -f4)
+
+if [ -z "$ACCESS_TOKEN" ]; then
+  echo "FAIL: could not extract access_token"
+  exit 1
+fi
+echo "Access token obtained"
+echo "PASS"
+
+# --- Test 4: Authenticated telemetry ---
+echo ""
+echo "--- Test 4: Authenticated /v1/telemetry ---"
+TELEMETRY=$(curl -sf "http://127.0.0.1:$PORT/v1/telemetry" \
+  -H "Authorization: Bearer $ACCESS_TOKEN")
+echo "Telemetry: $TELEMETRY"
+echo "$TELEMETRY" | grep -q 'cpu_percent' || { echo "FAIL: telemetry missing cpu_percent"; exit 1; }
+echo "PASS"
+
+# --- Test 5: Unauthenticated request rejected ---
+echo ""
+echo "--- Test 5: Unauthenticated request rejected ---"
+HTTP_CODE=$(curl -s -o /dev/null -w '%{http_code}' "http://127.0.0.1:$PORT/v1/telemetry")
+if [ "$HTTP_CODE" != "401" ]; then
+  echo "FAIL: expected 401, got $HTTP_CODE"
+  exit 1
+fi
+echo "PASS (401 returned)"
+
+echo ""
+echo "=== ALL MUSU SMOKE TESTS PASSED ==="

package/scripts/test-smoke.mjs

@@ -0,0 +1,24 @@
+#!/usr/bin/env node
+import { spawnSync } from "node:child_process";
+import path from "node:path";
+
+const testFiles = [
+  "tests/mcp/tools/status.test.ts",
+  "tests/mcp/tools/vibe_pm/setup.test.ts",
+  "tests/mcp/tools/vibe_pm/scorecard.test.ts",
+  "tests/mcp/tools/vibe_pm/verdict.test.ts",
+  "tests/mcp/tools/vibe_pm/signals_logger.test.ts",
+  "tests/workers/health.test.ts",
+  "tests/events/chaos.test.ts",
+];
+
+const vitestPath = path.join("node_modules", "vitest", "vitest.mjs");
+const args = [vitestPath, "run", ...testFiles];
+const result = spawnSync(process.execPath, args, { stdio: "inherit" });
+
+if (result.error) {
+  console.error(`[test:smoke] failed to start vitest: ${result.error.message}`);
+  process.exit(1);
+}
+
+process.exit(result.status ?? 1);

package/scripts/validate-agents.ts

@@ -0,0 +1,60 @@
+#!/usr/bin/env node
+/**
+ * Agent Catalog Validator — CI validation script.
+ *
+ * Loads catalogs/agents.json and runs catalog integrity checks.
+ * Exit code 0 = valid, 1 = errors found.
+ *
+ * Usage: node build/scripts/validate-agents.js
+ *   (or via vitest: tests/catalog/validate-agents.test.ts)
+ */
+
+import { readFile } from "fs/promises";
+import { resolve, dirname } from "path";
+import { fileURLToPath } from "url";
+import { validateCatalogIntegrity } from "../src/mcp/agents/manifest_validator.js";
+import type { AgentDef } from "../src/mcp/agents/types.js";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const CATALOGS_DIR = resolve(__dirname, "../catalogs");
+
+export async function validateAgentCatalog(): Promise<{
+  valid: boolean;
+  errors: string[];
+  warnings: string[];
+  agentCount: number;
+}> {
+  const raw = await readFile(resolve(CATALOGS_DIR, "agents.json"), "utf8");
+  const parsed = JSON.parse(raw) as { agents: AgentDef[] };
+  const result = validateCatalogIntegrity(parsed.agents);
+
+  return {
+    valid: result.valid,
+    errors: result.errors,
+    warnings: result.warnings,
+    agentCount: result.stats.totalAgents,
+  };
+}
+
+// CLI entry point
+const isMainModule = process.argv[1]?.endsWith("validate-agents.js") ||
+  process.argv[1]?.endsWith("validate-agents.ts");
+
+if (isMainModule) {
+  validateAgentCatalog()
+    .then((result) => {
+      console.log(`Agents: ${result.agentCount}`);
+      for (const w of result.warnings) console.log(`  WARN: ${w}`);
+      for (const e of result.errors) console.error(`  ERROR: ${e}`);
+      if (result.valid) {
+        console.log("Agent catalog is valid.");
+      } else {
+        console.error(`Agent catalog has ${result.errors.length} error(s).`);
+        process.exit(1);
+      }
+    })
+    .catch((err) => {
+      console.error("Unexpected error:", err);
+      process.exit(1);
+    });
+}