fodda-mcp 1.46.31 → 1.46.97

package/dist/test_service_to_service_auth.js

@@ -0,0 +1,199 @@
+import axios from 'axios';
+import crypto from 'crypto';
+import assert from 'assert';
+const TEST_PORT = 8991;
+const FODDA_INTERNAL_API_KEY = 'test_internal_secret_key_12345';
+const FODDA_MCP_SECRET = 'test_mcp_hmac_secret_67890';
+process.env.PORT = String(TEST_PORT);
+process.env.FODDA_INTERNAL_API_KEY = FODDA_INTERNAL_API_KEY;
+process.env.FODDA_MCP_SECRET = FODDA_MCP_SECRET;
+// Import index.js to boot the MCP server on TEST_PORT
+await import('./index.js');
+function parseMcpResponse(data) {
+    if (typeof data === 'object' && data !== null)
+        return data;
+    if (typeof data === 'string') {
+        const line = data.split('\n').find((l) => l.startsWith('data: '));
+        if (line) {
+            return JSON.parse(line.slice(6));
+        }
+        return JSON.parse(data);
+    }
+    return data;
+}
+async function runServiceToServiceAuthTests() {
+    console.log('=== Service-to-Service Connection & Bearer Auth Verification Suite ===\n');
+    const baseUrl = `http://localhost:${TEST_PORT}`;
+    // Wait for server /health to respond
+    let ready = false;
+    for (let i = 0; i < 30; i++) {
+        try {
+            const h = await axios.get(`${baseUrl}/health`);
+            if (h.status === 200) {
+                ready = true;
+                break;
+            }
+        }
+        catch {
+            await new Promise((r) => setTimeout(r, 200));
+        }
+    }
+    assert(ready, 'Server failed to start on TEST_PORT');
+    console.log(`[test-server] Verified server healthy on port ${TEST_PORT}\n`);
+    try {
+        // ── TEST 1: Pure Legacy Query String (Should fail with -32001) ──
+        console.log('--- Test 1: Legacy Query-String Request (No Headers) ---');
+        try {
+            await axios.post(`${baseUrl}/mcp?api_key=sk_live_legacy&user_id=legacy@example.com`, {
+                jsonrpc: '2.0',
+                id: 1,
+                method: 'tools/list'
+            }, {
+                headers: { 'Content-Type': 'application/json' }
+            });
+            assert.fail('Expected 401 for pure legacy URL query parameters');
+        }
+        catch (err) {
+            assert.strictEqual(err.response?.status, 401, 'Status must be 401');
+            assert.strictEqual(err.response?.data?.error?.code, -32001, 'Error code must be -32001');
+            assert(err.response?.data?.error?.message?.includes('this connection URL is outdated'), 'Message must indicate outdated URL');
+            console.log('  ✅ Correctly rejected legacy query-string client with -32001');
+        }
+        // ── TEST 2: Authorization: Bearer <apiKey> on /mcp (Stateless tools/list direct curl test) ──
+        console.log('\n--- Test 2: Stateless tools/list with Authorization: Bearer Header ---');
+        const res2 = await axios.post(`${baseUrl}/mcp`, {
+            jsonrpc: '2.0',
+            id: 1,
+            method: 'tools/list'
+        }, {
+            headers: {
+                'Content-Type': 'application/json',
+                'Authorization': 'Bearer sk_live_test_analyst'
+            }
+        });
+        assert.strictEqual(res2.status, 200, 'Status must be 200 OK');
+        const parsed2 = parseMcpResponse(res2.data);
+        assert(Array.isArray(parsed2?.result?.tools), 'Must return tools array');
+        assert(parsed2.result.tools.length > 0, 'Must have registered tools');
+        console.log(`  ✅ Successfully returned ${parsed2.result.tools.length} tools via direct Bearer auth`);
+        // ── TEST 3: Bearer Header with legacy query params present (Bypass check) ──
+        console.log('\n--- Test 3: Bearer Header overriding legacy query params on /mcp ---');
+        const res3 = await axios.post(`${baseUrl}/mcp?api_key=sk_live_test_analyst&user_id=user@example.com`, {
+            jsonrpc: '2.0',
+            id: 2,
+            method: 'tools/list'
+        }, {
+            headers: {
+                'Content-Type': 'application/json',
+                'Authorization': 'Bearer sk_live_test_analyst'
+            }
+        });
+        assert.strictEqual(res3.status, 200, 'Status must be 200 OK');
+        const parsed3 = parseMcpResponse(res3.data);
+        assert.strictEqual(parsed3?.error, undefined, 'Must not return JSON-RPC error');
+        assert(parsed3?.result?.tools?.length > 0, 'Must return tools');
+        console.log('  ✅ Bearer header cleanly bypassed -32001 deprecation error');
+        // ── TEST 4: Internal Service Auth via X-Internal-Key ──
+        console.log('\n--- Test 4: Internal Service Auth via X-Internal-Key ---');
+        const res4 = await axios.post(`${baseUrl}/mcp?api_key=internal_call&user_id=service@fodda.ai`, {
+            jsonrpc: '2.0',
+            id: 3,
+            method: 'tools/list'
+        }, {
+            headers: {
+                'Content-Type': 'application/json',
+                'X-Internal-Key': FODDA_INTERNAL_API_KEY,
+                'X-User-Email': 'researcher@fodda.ai'
+            }
+        });
+        assert.strictEqual(res4.status, 200, 'Status must be 200 OK');
+        const parsed4 = parseMcpResponse(res4.data);
+        assert(parsed4?.result?.tools?.length > 0, 'Must list tools for internal key');
+        console.log('  ✅ X-Internal-Key successfully authenticated and bypassed deprecation');
+        // ── TEST 5: Internal Service Auth via HMAC X-Fodda-Signature ──
+        console.log('\n--- Test 5: Internal Service Auth via HMAC X-Fodda-Signature ---');
+        const timestamp = Date.now().toString();
+        const body5 = {
+            jsonrpc: '2.0',
+            id: 4,
+            method: 'tools/list'
+        };
+        const payload5 = `${timestamp}.${JSON.stringify(body5)}`;
+        const signature5 = crypto.createHmac('sha256', FODDA_MCP_SECRET).update(payload5).digest('hex');
+        const res5 = await axios.post(`${baseUrl}/mcp?api_key=system&user_id=system@fodda.ai`, body5, {
+            headers: {
+                'Content-Type': 'application/json',
+                'X-Fodda-Timestamp': timestamp,
+                'X-Fodda-Signature': signature5
+            }
+        });
+        assert.strictEqual(res5.status, 200, 'Status must be 200 OK');
+        const parsed5 = parseMcpResponse(res5.data);
+        assert(parsed5?.result?.tools?.length > 0, 'Must list tools for valid HMAC');
+        console.log('  ✅ Valid HMAC signature successfully authenticated and bypassed deprecation');
+        // ── TEST 6: User Identity Resolution from X-User-Email & X-User-Id in stateful session ──
+        console.log('\n--- Test 6: Stateful initialize handshake with X-User-Email ---');
+        const res6 = await axios.post(`${baseUrl}/mcp`, {
+            jsonrpc: '2.0',
+            id: 5,
+            method: 'initialize',
+            params: {
+                protocolVersion: '2024-11-05',
+                capabilities: {},
+                clientInfo: { name: 'fodda-sandbox', version: '1.0.0' }
+            }
+        }, {
+            headers: {
+                'Content-Type': 'application/json',
+                'Authorization': 'Bearer sk_live_test_sandbox',
+                'X-User-Email': 'sandbox_tester@example.com'
+            }
+        });
+        assert.strictEqual(res6.status, 200, 'Status must be 200 OK');
+        const sessionId = res6.headers['mcp-session-id'];
+        assert(sessionId, 'Server must emit Mcp-Session-Id header');
+        console.log(`  ✅ Initialized stateful session with session ID: ${sessionId}`);
+        // Call tools/list with session ID
+        const res6b = await axios.post(`${baseUrl}/mcp`, {
+            jsonrpc: '2.0',
+            id: 6,
+            method: 'tools/list'
+        }, {
+            headers: {
+                'Content-Type': 'application/json',
+                'Mcp-Session-Id': sessionId
+            }
+        });
+        assert.strictEqual(res6b.status, 200, 'Status must be 200 OK');
+        const parsed6b = parseMcpResponse(res6b.data);
+        assert(parsed6b?.result?.tools?.length > 0, 'Must list tools with session ID');
+        console.log('  ✅ Subsequent tool listing succeeded on initialized session');
+        // ── TEST 7: SDK StreamableHTTPClientTransport connection (Matching mcpChatService) ──
+        console.log('\n--- Test 7: StreamableHTTPClientTransport SDK with Authorization Header ---');
+        const { Client } = await import('@modelcontextprotocol/sdk/client/index.js');
+        const { StreamableHTTPClientTransport } = await import('@modelcontextprotocol/sdk/client/streamableHttp.js');
+        const clientTransport = new StreamableHTTPClientTransport(new URL(`${baseUrl}/mcp`), {
+            requestInit: {
+                headers: {
+                    'Authorization': 'Bearer sk_live_test_sandbox_sdk',
+                    'X-User-Email': 'sdk_user@example.com'
+                }
+            }
+        });
+        const mcpClient = new Client({ name: 'fodda-sandbox', version: '1.0.0' });
+        await mcpClient.connect(clientTransport);
+        const toolsResult = await mcpClient.listTools();
+        assert(Array.isArray(toolsResult.tools), 'SDK listTools must return tools array');
+        assert(toolsResult.tools.length > 0, 'SDK must receive tools');
+        console.log(`  ✅ SDK Client connected and listed ${toolsResult.tools.length} tools via StreamableHTTPClientTransport`);
+        await mcpClient.close();
+        console.log('\n🎉 ALL SERVICE-TO-SERVICE AUTH TESTS PASSED CLEANLY! 🎉');
+        process.exit(0);
+    }
+    catch (err) {
+        console.error('Test Suite Failed:', err);
+        process.exit(1);
+    }
+}
+runServiceToServiceAuthTests();
+//# sourceMappingURL=test_service_to_service_auth.js.map

package/dist/test_service_to_service_auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test_service_to_service_auth.js","sourceRoot":"","sources":["../src/test_service_to_service_auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,MAAM,SAAS,GAAG,IAAI,CAAC;AACvB,MAAM,sBAAsB,GAAG,gCAAgC,CAAC;AAChE,MAAM,gBAAgB,GAAG,4BAA4B,CAAC;AACtD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;AACrC,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,sBAAsB,CAAC;AAC5D,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;AAEhD,sDAAsD;AACtD,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;AAE3B,SAAS,gBAAgB,CAAC,IAAS;IAC/B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3D,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1E,IAAI,IAAI,EAAE,CAAC;YACP,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,4BAA4B;IACvC,OAAO,CAAC,GAAG,CAAC,0EAA0E,CAAC,CAAC;IAExF,MAAM,OAAO,GAAG,oBAAoB,SAAS,EAAE,CAAC;IAEhD,qCAAqC;IACrC,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1B,IAAI,CAAC;YACD,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,SAAS,CAAC,CAAC;YAC/C,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACnB,KAAK,GAAG,IAAI,CAAC;gBACb,MAAM;YACV,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACL,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACjD,CAAC;IACL,CAAC;IACD,MAAM,CAAC,KAAK,EAAE,qCAAqC,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,iDAAiD,SAAS,IAAI,CAAC,CAAC;IAE5E,IAAI,CAAC;QACD,mEAAmE;QACnE,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;QACxE,IAAI,CAAC;YACD,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,wDAAwD,EAAE;gBACjF,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,CAAC;gBACL,MAAM,EAAE,YAAY;aACvB,EAAE;gBACC,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAClD,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;YACpE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC;YACzF,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,iCAAiC,CAAC,EAAE,oCAAoC,CAAC,CAAC;YAC9H,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;QACjF,CAAC;QAED,+FAA+F;QAC/F,OAAO,CAAC,GAAG,CAAC,0EAA0E,CAAC,CAAC;QACxF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,MAAM,EAAE;YAC5C,OAAO,EAAE,KAAK;YACd,EAAE,EAAE,CAAC;YACL,MAAM,EAAE,YAAY;SACvB,EAAE;YACC,OAAO,EAAE;gBACL,cAAc,EAAE,kBAAkB;gBAClC,eAAe,EAAE,6BAA6B;aACjD;SACJ,CAAC,CAAC;QACH,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,yBAAyB,CAAC,CAAC;QACzE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,4BAA4B,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,6BAA6B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,+BAA+B,CAAC,CAAC;QAErG,8EAA8E;QAC9E,OAAO,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;QACtF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,4DAA4D,EAAE;YAClG,OAAO,EAAE,KAAK;YACd,EAAE,EAAE,CAAC;YACL,MAAM,EAAE,YAAY;SACvB,EAAE;YACC,OAAO,EAAE;gBACL,cAAc,EAAE,kBAAkB;gBAClC,eAAe,EAAE,6BAA6B;aACjD;SACJ,CAAC,CAAC;QACH,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,gCAAgC,CAAC,CAAC;QAChF,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,CAAC,EAAE,mBAAmB,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;QAE3E,yDAAyD;QACzD,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,qDAAqD,EAAE;YAC3F,OAAO,EAAE,KAAK;YACd,EAAE,EAAE,CAAC;YACL,MAAM,EAAE,YAAY;SACvB,EAAE;YACC,OAAO,EAAE;gBACL,cAAc,EAAE,kBAAkB;gBAClC,gBAAgB,EAAE,sBAAsB;gBACxC,cAAc,EAAE,qBAAqB;aACxC;SACJ,CAAC,CAAC;QACH,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,CAAC,EAAE,kCAAkC,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;QAEtF,iEAAiE;QACjE,OAAO,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;QAClF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG;YACV,OAAO,EAAE,KAAK;YACd,EAAE,EAAE,CAAC;YACL,MAAM,EAAE,YAAY;SACvB,CAAC;QACF,MAAM,QAAQ,GAAG,GAAG,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEhG,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,6CAA6C,EAAE,KAAK,EAAE;YAC1F,OAAO,EAAE;gBACL,cAAc,EAAE,kBAAkB;gBAClC,mBAAmB,EAAE,SAAS;gBAC9B,mBAAmB,EAAE,UAAU;aAClC;SACJ,CAAC,CAAC;QACH,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,CAAC,EAAE,gCAAgC,CAAC,CAAC;QAC7E,OAAO,CAAC,GAAG,CAAC,8EAA8E,CAAC,CAAC;QAE5F,2FAA2F;QAC3F,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,MAAM,EAAE;YAC5C,OAAO,EAAE,KAAK;YACd,EAAE,EAAE,CAAC;YACL,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE;gBACJ,eAAe,EAAE,YAAY;gBAC7B,YAAY,EAAE,EAAE;gBAChB,UAAU,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE;aAC1D;SACJ,EAAE;YACC,OAAO,EAAE;gBACL,cAAc,EAAE,kBAAkB;gBAClC,eAAe,EAAE,6BAA6B;gBAC9C,cAAc,EAAE,4BAA4B;aAC/C;SACJ,CAAC,CAAC;QACH,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACjD,MAAM,CAAC,SAAS,EAAE,wCAAwC,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,qDAAqD,SAAS,EAAE,CAAC,CAAC;QAE9E,kCAAkC;QAClC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,MAAM,EAAE;YAC7C,OAAO,EAAE,KAAK;YACd,EAAE,EAAE,CAAC;YACL,MAAM,EAAE,YAAY;SACvB,EAAE;YACC,OAAO,EAAE;gBACL,cAAc,EAAE,kBAAkB;gBAClC,gBAAgB,EAAE,SAAS;aAC9B;SACJ,CAAC,CAAC;QACH,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,CAAC,EAAE,iCAAiC,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;QAE5E,uFAAuF;QACvF,OAAO,CAAC,GAAG,CAAC,+EAA+E,CAAC,CAAC;QAC7F,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,2CAA2C,CAAC,CAAC;QAC7E,MAAM,EAAE,6BAA6B,EAAE,GAAG,MAAM,MAAM,CAAC,oDAAoD,CAAC,CAAC;QAE7G,MAAM,eAAe,GAAG,IAAI,6BAA6B,CAAC,IAAI,GAAG,CAAC,GAAG,OAAO,MAAM,CAAC,EAAE;YACjF,WAAW,EAAE;gBACT,OAAO,EAAE;oBACL,eAAe,EAAE,iCAAiC;oBAClD,cAAc,EAAE,sBAAsB;iBACzC;aACJ;SACJ,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1E,MAAM,SAAS,CAAC,OAAO,CAAC,eAAsB,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,uCAAuC,CAAC,CAAC;QAClF,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,wBAAwB,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,uCAAuC,WAAW,CAAC,KAAK,CAAC,MAAM,0CAA0C,CAAC,CAAC;QACvH,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QAExB,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACL,CAAC;AAED,4BAA4B,EAAE,CAAC"}

package/dist/test_sources_live.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=test_sources_live.d.ts.map

package/dist/test_sources_live.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test_sources_live.d.ts","sourceRoot":"","sources":["../src/test_sources_live.ts"],"names":[],"mappings":""}

package/dist/test_sources_live.js

@@ -0,0 +1,30 @@
+import dotenv from 'dotenv';
+dotenv.config();
+import { Client } from '@modelcontextprotocol/sdk/client/index.js';
+import { StreamableHTTPClientTransport } from '@modelcontextprotocol/sdk/client/streamableHttp.js';
+const DEPLOYED_MCP_URL = process.env.TEST_URL || 'https://mcp.fodda.ai/mcp';
+const FODDA_API_KEY = process.env.FODDA_API_KEY || 'sk_live_abcdef';
+async function testSourcesLive() {
+    console.log(`=== Testing sources_used stringification fix on Revision fodda-mcp-00443-kvt ===\n`);
+    const transport = new StreamableHTTPClientTransport(new URL(`${DEPLOYED_MCP_URL}?api_key=${FODDA_API_KEY}&session_kind=internal-test`));
+    const client = new Client({ name: 'live-sources-verifier', version: '1.0.0' });
+    await client.connect(transport);
+    console.log('Calling consult_human_agent with analyst_id: "anu-lingala-macro"...');
+    const result = await client.callTool({
+        name: 'consult_human_agent',
+        arguments: {
+            analyst_id: 'anu-lingala-macro',
+            query: 'What are the major cultural macro-trends right now?'
+        }
+    });
+    const text = result.content[0]?.text || '';
+    console.log(`\nResult output:\n"${text.slice(-500)}"\n`);
+    if (text.includes('--- SOURCES USED ---') && !text.includes('- Source\n- Source')) {
+        console.log('🎉 SUCCESS: sources_used footer printed real source names (no stringification bug)!');
+    }
+    await client.close();
+}
+testSourcesLive().catch(err => {
+    console.error('❌ Error:', err.message || err);
+});
+//# sourceMappingURL=test_sources_live.js.map

package/dist/test_sources_live.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test_sources_live.js","sourceRoot":"","sources":["../src/test_sources_live.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,MAAM,CAAC,MAAM,EAAE,CAAC;AAEhB,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAEnG,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,0BAA0B,CAAC;AAC5E,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,gBAAgB,CAAC;AAEpE,KAAK,UAAU,eAAe;IAC1B,OAAO,CAAC,GAAG,CAAC,oFAAoF,CAAC,CAAC;IAElG,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAC/C,IAAI,GAAG,CAAC,GAAG,gBAAgB,YAAY,aAAa,6BAA6B,CAAC,CACrF,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/E,MAAM,MAAM,CAAC,OAAO,CAAC,SAAgB,CAAC,CAAC;IAEvC,OAAO,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;QACjC,IAAI,EAAE,qBAAqB;QAC3B,SAAS,EAAE;YACP,UAAU,EAAE,mBAAmB;YAC/B,KAAK,EAAE,qDAAqD;SAC/D;KACJ,CAAC,CAAC;IAEH,MAAM,IAAI,GAAI,MAAM,CAAC,OAAe,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAEzD,IAAI,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAChF,OAAO,CAAC,GAAG,CAAC,qFAAqF,CAAC,CAAC;IACvG,CAAC;IAED,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;AACzB,CAAC;AAED,eAAe,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;IAC1B,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC"}

package/dist/test_specialist_and_analyst_tiers.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=test_specialist_and_analyst_tiers.d.ts.map

package/dist/test_specialist_and_analyst_tiers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test_specialist_and_analyst_tiers.d.ts","sourceRoot":"","sources":["../src/test_specialist_and_analyst_tiers.ts"],"names":[],"mappings":""}

package/dist/test_specialist_and_analyst_tiers.js

@@ -0,0 +1,155 @@
+import assert from 'assert';
+import { createServer } from './toolHandlers.js';
+async function mockFoddaRequest(method, path, apiKey, userId, body) {
+    if (path === '/v1/graphs/catalog')
+        return { graphs: [] };
+    if (path === '/v1/analysts')
+        return [
+            {
+                analyst_id: 'ben-dietz-sic',
+                name: 'Ben Dietz',
+                graphSubType: 'Digital Twin',
+                expertIn: 'youth culture, streetwear, underground music',
+                description: 'Cultural strategist and host of [SIC] Weekly',
+                topics: ['streetwear', 'culture']
+            },
+            {
+                analyst_id: 'brand-cmo',
+                name: 'Brand CMO',
+                graphSubType: 'Executive',
+                expertIn: 'enterprise brand marketing, corporate governance',
+                description: 'Corporate CMO lens grounded in SEC filings',
+                topics: ['brand', 'marketing', 'earnings']
+            },
+            {
+                analyst_id: 'john-ruskin',
+                name: 'John Ruskin',
+                graphSubType: 'Classic Digital Twin',
+                expertIn: 'craftsmanship, aesthetic philosophy, moral critique',
+                description: 'Victorian art critic and social thinker',
+                topics: ['art', 'craftsmanship', 'philosophy']
+            },
+            {
+                analyst_id: 'retail-synthetic',
+                name: 'Retail Synthetic Analyst',
+                graphSubType: 'Synthetic Expert',
+                expertIn: 'omnichannel retail logistics',
+                description: 'Synthetic retail domain lens',
+                topics: ['retail', 'logistics']
+            }
+        ];
+    if (path === '/v1/human-agents/book-a-call-map')
+        return {};
+    if (path === '/v1/search/expert') {
+        return {
+            total: 3,
+            on_topic_total: 3,
+            results: [
+                { id: '1', title: 'Streetwear drop model evolving', graphId: 'ben-dietz-sic', score: 0.85 }
+            ]
+        };
+    }
+    if (path === '/v1/human-agents/consult') {
+        return {
+            result: 'Deep research into youth streetwear indicates emerging micro-communities.',
+            coverage: 'in',
+            sources_used: [
+                { title: 'Subculture Signal', url: 'https://fodda.ai/signals/1' }
+            ],
+            receivedBody: body
+        };
+    }
+    return {};
+}
+async function mockWaverunnerRequest() { return {}; }
+async function runTests() {
+    console.log('--- Testing Specialist Intelligence & 4-Tier Analyst Classification ---');
+    const server = await createServer('sk_test', 'test_user', mockFoddaRequest, mockWaverunnerRequest, () => 'widget_1', () => 'http://localhost');
+    // @ts-ignore
+    const tools = server._registeredTools;
+    // 1. Verify get_specialist_intelligence and get_expert_intelligence exist
+    assert.ok(tools['get_specialist_intelligence'], 'get_specialist_intelligence must be registered');
+    assert.ok(tools['get_expert_intelligence'], 'get_expert_intelligence legacy alias must be registered');
+    console.log('✅ Tool Registration Passed: get_specialist_intelligence & get_expert_intelligence alias present');
+    // 2. Call list_analysts with no filter (all)
+    const listTool = tools['list_analysts'];
+    const allRes = await listTool.handler({});
+    const allData = JSON.parse(allRes.content[0].text);
+    assert.strictEqual(allData.analysts.length, 4, 'Should return 4 analysts');
+    const ben = allData.analysts.find((a) => a.analyst_id === 'ben-dietz-sic');
+    assert.strictEqual(ben.category, 'human_agent');
+    assert.strictEqual(ben.category_label, 'Human Agent');
+    assert.strictEqual(ben.twin_type, 'Expert Digital Twin');
+    assert.strictEqual(ben.is_verified_real_person, true);
+    assert.strictEqual(ben.consult_tool, 'consult_human_agent');
+    const cmo = allData.analysts.find((a) => a.analyst_id === 'brand-cmo');
+    assert.strictEqual(cmo.category, 'c_suite_agent');
+    assert.strictEqual(cmo.category_label, 'C-Suite Agent');
+    assert.strictEqual(cmo.is_verified_real_person, false);
+    assert.strictEqual(cmo.consult_tool, 'consult_analyst');
+    const ruskin = allData.analysts.find((a) => a.analyst_id === 'john-ruskin');
+    assert.strictEqual(ruskin.category, 'classic_agent');
+    assert.strictEqual(ruskin.category_label, 'Classic Agent');
+    assert.strictEqual(ruskin.twin_type, 'Classic Agent');
+    assert.strictEqual(ruskin.is_verified_real_person, false);
+    assert.strictEqual(ruskin.consult_tool, 'consult_analyst');
+    const synthetic = allData.analysts.find((a) => a.analyst_id === 'retail-synthetic');
+    assert.strictEqual(synthetic.category, 'synthetic_agent');
+    assert.strictEqual(synthetic.category_label, 'Synthetic Agent');
+    assert.strictEqual(synthetic.is_verified_real_person, false);
+    console.log('✅ 4-Tier Categorization Passed: Human Agent, Classic Agent, C-Suite, and Synthetic correctly classified');
+    // 3. Test list_analysts category filtering
+    const humanOnlyRes = await listTool.handler({ category: 'human_agent' });
+    const humanOnlyData = JSON.parse(humanOnlyRes.content[0].text);
+    assert.strictEqual(humanOnlyData.analysts.length, 1);
+    assert.strictEqual(humanOnlyData.analysts[0].analyst_id, 'ben-dietz-sic');
+    const cSuiteOnlyRes = await listTool.handler({ category: 'c_suite_agent' });
+    const cSuiteData = JSON.parse(cSuiteOnlyRes.content[0].text);
+    assert.strictEqual(cSuiteData.analysts.length, 1);
+    assert.strictEqual(cSuiteData.analysts[0].analyst_id, 'brand-cmo');
+    console.log('✅ Category Filtering Passed: list_analysts correctly filters by category');
+    // 4. Test list_analysts natural query filtering
+    const queryRes = await listTool.handler({ query: 'underground streetwear' });
+    const queryData = JSON.parse(queryRes.content[0].text);
+    assert.strictEqual(queryData.analysts.length, 1);
+    assert.strictEqual(queryData.analysts[0].analyst_id, 'ben-dietz-sic');
+    console.log('✅ Query Filtering Passed: list_analysts matches natural language query to analyst lane');
+    // 5. Test consult_human_agent deep / homework mode
+    let lastConsultBody = null;
+    const customFoddaRequest = async (method, path, key, uid, body) => {
+        if (path === '/v1/human-agents/consult') {
+            lastConsultBody = body;
+            return {
+                result: 'Detailed breakdown with evidence',
+                coverage: 'in',
+                sources_used: []
+            };
+        }
+        return mockFoddaRequest(method, path, key, uid, body);
+    };
+    const consultServer = await createServer('sk_test', 'test_user', customFoddaRequest, mockWaverunnerRequest, () => 'widget_1', () => 'http://localhost');
+    // @ts-ignore
+    const consultTools = consultServer._registeredTools;
+    const consultTool = consultTools['consult_human_agent'];
+    // Case A: explicit deep: true
+    await consultTool.handler({
+        analyst_id: 'ben-dietz-sic',
+        query: 'Analyze luxury streetwear collaboration trends',
+        deep: true
+    });
+    assert.strictEqual(lastConsultBody?.deep, true, 'Must pass deep: true when deep param is set');
+    // Case B: natural query "do your homework"
+    lastConsultBody = null;
+    await consultTool.handler({
+        analyst_id: 'ben-dietz-sic',
+        query: 'Can you do your homework and find concrete data on streetwear drops?'
+    });
+    assert.strictEqual(lastConsultBody?.deep, true, 'Must auto-detect homework intent from query and pass deep: true');
+    console.log('✅ Multi-Turn Homework Passed: consult_human_agent triggers deep background research');
+    console.log('\nAll Specialist & 4-Tier Agent tests passed successfully!');
+}
+runTests().catch(err => {
+    console.error('Test run failed:', err);
+    process.exit(1);
+});
+//# sourceMappingURL=test_specialist_and_analyst_tiers.js.map

package/dist/test_specialist_and_analyst_tiers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test_specialist_and_analyst_tiers.js","sourceRoot":"","sources":["../src/test_specialist_and_analyst_tiers.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,KAAK,UAAU,gBAAgB,CAAC,MAAsB,EAAE,IAAY,EAAE,MAAc,EAAE,MAAc,EAAE,IAAU;IAC5G,IAAI,IAAI,KAAK,oBAAoB;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACzD,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO;YAChC;gBACI,UAAU,EAAE,eAAe;gBAC3B,IAAI,EAAE,WAAW;gBACjB,YAAY,EAAE,cAAc;gBAC5B,QAAQ,EAAE,8CAA8C;gBACxD,WAAW,EAAE,8CAA8C;gBAC3D,MAAM,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC;aACpC;YACD;gBACI,UAAU,EAAE,WAAW;gBACvB,IAAI,EAAE,WAAW;gBACjB,YAAY,EAAE,WAAW;gBACzB,QAAQ,EAAE,kDAAkD;gBAC5D,WAAW,EAAE,4CAA4C;gBACzD,MAAM,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC;aAC7C;YACD;gBACI,UAAU,EAAE,aAAa;gBACzB,IAAI,EAAE,aAAa;gBACnB,YAAY,EAAE,sBAAsB;gBACpC,QAAQ,EAAE,qDAAqD;gBAC/D,WAAW,EAAE,yCAAyC;gBACtD,MAAM,EAAE,CAAC,KAAK,EAAE,eAAe,EAAE,YAAY,CAAC;aACjD;YACD;gBACI,UAAU,EAAE,kBAAkB;gBAC9B,IAAI,EAAE,0BAA0B;gBAChC,YAAY,EAAE,kBAAkB;gBAChC,QAAQ,EAAE,8BAA8B;gBACxC,WAAW,EAAE,8BAA8B;gBAC3C,MAAM,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC;aAClC;SACJ,CAAC;IACF,IAAI,IAAI,KAAK,kCAAkC;QAAE,OAAO,EAAE,CAAC;IAC3D,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QAC/B,OAAO;YACH,KAAK,EAAE,CAAC;YACR,cAAc,EAAE,CAAC;YACjB,OAAO,EAAE;gBACL,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,gCAAgC,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE;aAC9F;SACJ,CAAC;IACN,CAAC;IACD,IAAI,IAAI,KAAK,0BAA0B,EAAE,CAAC;QACtC,OAAO;YACH,MAAM,EAAE,2EAA2E;YACnF,QAAQ,EAAE,IAAI;YACd,YAAY,EAAE;gBACV,EAAE,KAAK,EAAE,mBAAmB,EAAE,GAAG,EAAE,4BAA4B,EAAE;aACpE;YACD,YAAY,EAAE,IAAI;SACrB,CAAC;IACN,CAAC;IACD,OAAO,EAAE,CAAC;AACd,CAAC;AAED,KAAK,UAAU,qBAAqB,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC;AAErD,KAAK,UAAU,QAAQ;IACnB,OAAO,CAAC,GAAG,CAAC,yEAAyE,CAAC,CAAC;IAEvF,MAAM,MAAM,GAAG,MAAM,YAAY,CAC7B,SAAS,EACT,WAAW,EACX,gBAAuB,EACvB,qBAA4B,EAC5B,GAAG,EAAE,CAAC,UAAU,EAChB,GAAG,EAAE,CAAC,kBAAkB,CAC3B,CAAC;IAEF,aAAa;IACb,MAAM,KAAK,GAAG,MAAM,CAAC,gBAAgB,CAAC;IAEtC,0EAA0E;IAC1E,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,6BAA6B,CAAC,EAAE,gDAAgD,CAAC,CAAC;IAClG,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAAE,yDAAyD,CAAC,CAAC;IACvG,OAAO,CAAC,GAAG,CAAC,iGAAiG,CAAC,CAAC;IAE/G,6CAA6C;IAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC,eAAe,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAE3E,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,eAAe,CAAC,CAAC;IAChF,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAChD,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;IACtD,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;IACzD,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;IAE5D,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,WAAW,CAAC,CAAC;IAC5E,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAClD,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;IACxD,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;IAExD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,aAAa,CAAC,CAAC;IACjF,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACrD,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;IAC3D,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACtD,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;IAC1D,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;IAE3D,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,kBAAkB,CAAC,CAAC;IACzF,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IAC1D,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IAChE,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;IAE7D,OAAO,CAAC,GAAG,CAAC,yGAAyG,CAAC,CAAC;IAEvH,2CAA2C;IAC3C,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC;IACzE,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACrD,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IAE1E,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7D,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAClD,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAEnE,OAAO,CAAC,GAAG,CAAC,0EAA0E,CAAC,CAAC;IAExF,gDAAgD;IAChD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACjD,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,CAAC,wFAAwF,CAAC,CAAC;IAEtG,mDAAmD;IACnD,IAAI,eAAe,GAAQ,IAAI,CAAC;IAChC,MAAM,kBAAkB,GAAG,KAAK,EAAE,MAAc,EAAE,IAAY,EAAE,GAAW,EAAE,GAAW,EAAE,IAAU,EAAE,EAAE;QACpG,IAAI,IAAI,KAAK,0BAA0B,EAAE,CAAC;YACtC,eAAe,GAAG,IAAI,CAAC;YACvB,OAAO;gBACH,MAAM,EAAE,kCAAkC;gBAC1C,QAAQ,EAAE,IAAI;gBACd,YAAY,EAAE,EAAE;aACnB,CAAC;QACN,CAAC;QACD,OAAO,gBAAgB,CAAC,MAAa,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,MAAM,YAAY,CACpC,SAAS,EACT,WAAW,EACX,kBAAyB,EACzB,qBAA4B,EAC5B,GAAG,EAAE,CAAC,UAAU,EAChB,GAAG,EAAE,CAAC,kBAAkB,CAC3B,CAAC;IACF,aAAa;IACb,MAAM,YAAY,GAAG,aAAa,CAAC,gBAAgB,CAAC;IACpD,MAAM,WAAW,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAC;IAExD,8BAA8B;IAC9B,MAAM,WAAW,CAAC,OAAO,CAAC;QACtB,UAAU,EAAE,eAAe;QAC3B,KAAK,EAAE,gDAAgD;QACvD,IAAI,EAAE,IAAI;KACb,CAAC,CAAC;IACH,MAAM,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,6CAA6C,CAAC,CAAC;IAE/F,2CAA2C;IAC3C,eAAe,GAAG,IAAI,CAAC;IACvB,MAAM,WAAW,CAAC,OAAO,CAAC;QACtB,UAAU,EAAE,eAAe;QAC3B,KAAK,EAAE,sEAAsE;KAChF,CAAC,CAAC;IACH,MAAM,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,iEAAiE,CAAC,CAAC;IAEnH,OAAO,CAAC,GAAG,CAAC,qFAAqF,CAAC,CAAC;IAEnG,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;AAC9E,CAAC;AAED,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC,CAAC,CAAC"}

package/dist/test_v2_2_visual_hardening.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Verification Test: v2.2 MCP Visual House Style & Server SVG Template Hardening
+ */
+export {};
+//# sourceMappingURL=test_v2_2_visual_hardening.d.ts.map

package/dist/test_v2_2_visual_hardening.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test_v2_2_visual_hardening.d.ts","sourceRoot":"","sources":["../src/test_v2_2_visual_hardening.ts"],"names":[],"mappings":"AAAA;;GAEG"}