mcp-integration-harness 0.3.0 → 0.4.0

package/README.md

@@ -103,6 +103,34 @@ depending on who asked. A list is `{ items: [...] }`.
 
 Exemptions are a `Record<tool, reason>` and rot in the same three directions.
 
+## `expectPortableToolSchemas`
+
+Whether the schemas a server advertises are ones every client can read.
+
+```ts
+const { tools } = await harness.client.listTools();
+expectPortableToolSchemas(tools);
+```
+
+Four spellings are legal JSON Schema and still get a tool refused or silently
+stripped by some MCP clients:
+
+| Written as                   | Comes from                           | Write instead                           |
+| ---------------------------- | ------------------------------------ | --------------------------------------- |
+| `"additionalProperties": {}` | `z.looseObject`, `.catchall()`       | `.meta({ additionalProperties: true })` |
+| `"anything": {}`             | `z.unknown()`, `z.any()`             | the type the value really has           |
+| `"type": ["string", "null"]` | `z.string().nullable()` from zod 4.5 | `.describe()` **before** `.nullable()`  |
+| `"$ref": "https://…"`        | a hand-written schema                | inline it, or `#/$defs/…`               |
+
+All four are spellings rather than contracts: each has an equivalent form that
+says the same thing to a validator. Which is why this check takes no exemption
+map — a reason could only ever read "not fixed yet".
+
+It runs against the schema **as it goes on the wire**, which is the only place
+it can run: zod emitted `anyOf` for a nullable string up to 4.4 and a `type`
+array from 4.5 on, so the same source produces a portable schema or a
+non-portable one depending on a patch release of a dependency.
+
 ## `assertLoopback`
 
 The guard that matters more than the tests it protects.
@@ -144,6 +172,8 @@ would otherwise run your suite as you. Those names are blanked explicitly.
 | `toolCoverage`                        | The same comparison without asserting, for printing the numbers                 |
 | `expectEveryToolDeclaresOutputSchema` | Every advertised tool declares an output schema with an object root             |
 | `outputSchemaCoverage`                | The same comparison without asserting                                           |
+| `expectPortableToolSchemas`           | Every advertised schema avoids the four spellings clients mishandle             |
+| `schemaPortability`                   | The same lint without asserting, returning the findings                         |
 | `assertLoopback(url)`                 | Throws unless the URL is on this machine                                        |
 | `waitForHttp(url, opts)`              | Polls until an HTTP backend is ready, and says what the last attempt got        |
 | `waitForTcp(host, port)`              | The same for a backend that is not HTTP — IMAP, SMTP — optionally on a greeting |

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 export { startServer, tokenOf, type CallOptions, type ElicitBehaviour, type LiveHarness, type StartServerOptions, type ToolResult, } from './harness.js';
 export { expectEveryToolDeclaresOutputSchema, expectEveryToolExercised, outputSchemaCoverage, toolCoverage, type AdvertisedTool, type CoverageReport, type OutputSchemaReport, type SkipReasons, } from './coverage.js';
+export { expectPortableToolSchemas, schemaPortability, type SchemaBearingTool, type SchemaFinding, type SchemaLintRule, } from './schema-lint.js';
 export { assertLoopback, assertLoopbackHost } from './loopback.js';
 export { waitForHttp, waitForTcp, type TcpWaitOptions, type WaitOptions, } from './wait.js';

package/dist/index.js

@@ -1,5 +1,6 @@
 export { startServer, tokenOf, } from './harness.js';
 export { expectEveryToolDeclaresOutputSchema, expectEveryToolExercised, outputSchemaCoverage, toolCoverage, } from './coverage.js';
+export { expectPortableToolSchemas, schemaPortability, } from './schema-lint.js';
 export { assertLoopback, assertLoopbackHost } from './loopback.js';
 export { waitForHttp, waitForTcp, } from './wait.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,OAAO,GAMR,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,mCAAmC,EACnC,wBAAwB,EACxB,oBAAoB,EACpB,YAAY,GAKb,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnE,OAAO,EACL,WAAW,EACX,UAAU,GAGX,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,OAAO,GAMR,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,mCAAmC,EACnC,wBAAwB,EACxB,oBAAoB,EACpB,YAAY,GAKb,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,yBAAyB,EACzB,iBAAiB,GAIlB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnE,OAAO,EACL,WAAW,EACX,UAAU,GAGX,MAAM,WAAW,CAAC"}

package/dist/schema-lint.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Portability rules for the JSON Schemas a server advertises.
+ *
+ * A schema can be perfectly legal JSON Schema and still be refused or
+ * mishandled by a client, and the four rules below are the ones this family of
+ * servers has actually walked into. All four are spellings rather than
+ * contracts: each has an equivalent form that says the same thing to a
+ * validator and survives the trip to every client.
+ *
+ * The checks run against the schema as it goes out on the wire, which is the
+ * only place they can run. Zod is what writes that schema here, and what it
+ * writes changes between its own releases: `z.string().nullable()` emitted
+ * `anyOf` up to zod 4.4 and a `"type": ["string", "null"]` array from 4.5 on.
+ * A source-level rule would have missed that; a wire-level one cannot.
+ */
+/** Which spelling a finding is about. */
+export type SchemaLintRule = 'untyped-schema' | 'boolean-schema' | 'type-union' | 'remote-ref';
+export interface SchemaFinding {
+    rule: SchemaLintRule;
+    /** The tool whose schema carries it. */
+    tool: string;
+    /** `inputSchema` or `outputSchema`, plus the path inside it. */
+    path: string;
+    /** What is wrong, and what to write instead. */
+    message: string;
+}
+/** One entry of `tools/list`, as much of it as this check reads. */
+export interface SchemaBearingTool {
+    name: string;
+    inputSchema?: unknown;
+    outputSchema?: unknown;
+}
+/**
+ * Lints the advertised schemas, without asserting.
+ *
+ * Separate from the assertion for the reason {@link toolCoverage} is: the count
+ * is worth a line in a CI log on a green run too.
+ */
+export declare function schemaPortability(tools: readonly SchemaBearingTool[]): SchemaFinding[];
+/**
+ * Fails unless every advertised schema is one every client can read.
+ *
+ * No exemption map, unlike the checks in `coverage.ts`. Those excuse what a
+ * *backend* cannot provide, which is a fact about the world and needs writing
+ * down. There is nothing to excuse here: every finding has an equivalent
+ * spelling that says the same thing, so a reason could only ever read "not
+ * fixed yet".
+ */
+export declare function expectPortableToolSchemas(tools: readonly SchemaBearingTool[]): void;

package/dist/schema-lint.js

@@ -0,0 +1,224 @@
+/**
+ * Portability rules for the JSON Schemas a server advertises.
+ *
+ * A schema can be perfectly legal JSON Schema and still be refused or
+ * mishandled by a client, and the four rules below are the ones this family of
+ * servers has actually walked into. All four are spellings rather than
+ * contracts: each has an equivalent form that says the same thing to a
+ * validator and survives the trip to every client.
+ *
+ * The checks run against the schema as it goes out on the wire, which is the
+ * only place they can run. Zod is what writes that schema here, and what it
+ * writes changes between its own releases: `z.string().nullable()` emitted
+ * `anyOf` up to zod 4.4 and a `"type": ["string", "null"]` array from 4.5 on.
+ * A source-level rule would have missed that; a wire-level one cannot.
+ */
+/** Keywords that constrain the instance. Anything else only annotates it. */
+const CONSTRAINING_KEYWORDS = new Set([
+    // Assertions
+    'type',
+    'enum',
+    'const',
+    'multipleOf',
+    'maximum',
+    'exclusiveMaximum',
+    'minimum',
+    'exclusiveMinimum',
+    'maxLength',
+    'minLength',
+    'pattern',
+    'maxItems',
+    'minItems',
+    'uniqueItems',
+    'maxContains',
+    'minContains',
+    'maxProperties',
+    'minProperties',
+    'required',
+    'dependentRequired',
+    'format',
+    'contentEncoding',
+    'contentMediaType',
+    'contentSchema',
+    // Applicators
+    'items',
+    'prefixItems',
+    'contains',
+    'additionalItems',
+    'unevaluatedItems',
+    'properties',
+    'patternProperties',
+    'additionalProperties',
+    'propertyNames',
+    'unevaluatedProperties',
+    'dependentSchemas',
+    'allOf',
+    'anyOf',
+    'oneOf',
+    'not',
+    // References
+    '$ref',
+    '$dynamicRef',
+    '$recursiveRef',
+]);
+/**
+ * Keywords whose value may be a bare boolean without anyone minding.
+ *
+ * `"additionalProperties": true` is the ordinary way to write an open object
+ * and every client reads it. A bare `true` anywhere a schema *object* is
+ * expected is a different matter.
+ */
+const BOOLEAN_VALUED_KEYWORDS = new Set([
+    'additionalProperties',
+    'unevaluatedProperties',
+    'additionalItems',
+    'unevaluatedItems',
+]);
+const SUBSCHEMA_KEYWORDS = [
+    'items',
+    'contains',
+    'not',
+    'propertyNames',
+    'if',
+    'then',
+    'else',
+    'additionalProperties',
+    'unevaluatedProperties',
+    'additionalItems',
+    'unevaluatedItems',
+    'contentSchema',
+];
+const SUBSCHEMA_ARRAY_KEYWORDS = ['allOf', 'anyOf', 'oneOf', 'prefixItems'];
+const SUBSCHEMA_MAP_KEYWORDS = [
+    'properties',
+    'patternProperties',
+    'dependentSchemas',
+    'dependencies',
+    '$defs',
+    'definitions',
+];
+const JSON_SCHEMA_TYPES = new Set([
+    'null',
+    'boolean',
+    'object',
+    'array',
+    'number',
+    'string',
+    'integer',
+]);
+/** Guards against a `$ref` cycle turning the walk into a hang. */
+const MAX_DEPTH = 64;
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function constrainsInstance(node) {
+    if (Object.keys(node).some((key) => CONSTRAINING_KEYWORDS.has(key))) {
+        return true;
+    }
+    // `if` alone constrains nothing; with a branch beside it, it does.
+    return 'if' in node && ('then' in node || 'else' in node);
+}
+function isPlainTypeUnion(type) {
+    if (!Array.isArray(type) || type.length === 0)
+        return false;
+    return type.every((entry) => typeof entry === 'string' && JSON_SCHEMA_TYPES.has(entry));
+}
+function walk(node, path, keyword, depth, emit) {
+    if (depth > MAX_DEPTH)
+        return;
+    if (typeof node === 'boolean') {
+        if (keyword !== undefined && BOOLEAN_VALUED_KEYWORDS.has(keyword))
+            return;
+        emit('boolean-schema', path, `bare \`${String(node)}\` where a schema object is expected. Write ` +
+            (node
+                ? 'the object form — `{}` under `not`, or the type the value really has.'
+                : '`{"not": {}}`; deleting the entry allows the property instead of forbidding it.'));
+        return;
+    }
+    if (!isRecord(node))
+        return;
+    if (isPlainTypeUnion(node.type)) {
+        emit('type-union', path, `\`type\` is an array (${JSON.stringify(node.type)}). Several clients ` +
+            'read `type` as a single string and drop the constraint or refuse the ' +
+            'tool. Split it into `anyOf` branches — in zod, put `.describe()` on ' +
+            'the inner type *before* `.nullable()`, which stops it folding the two ' +
+            'into one `type` array.');
+    }
+    const ref = node.$ref;
+    if (typeof ref === 'string' && ref !== '' && !ref.startsWith('#')) {
+        emit('remote-ref', path, `\`$ref\` points outside this document (\`${ref}\`). Clients do not ` +
+            'fetch remote schemas. Inline it, or move it into `$defs`.');
+    }
+    if (!constrainsInstance(node) && keyword !== 'not') {
+        emit('untyped-schema', path, 'no validation keyword at all, so this accepts any value — the object ' +
+            'spelling of a bare `true`, which some clients refuse or mishandle. ' +
+            'In zod: `.meta({ additionalProperties: true })` on a `looseObject` or ' +
+            'a `catchall`, and the real type instead of `z.unknown()`.');
+    }
+    for (const key of SUBSCHEMA_MAP_KEYWORDS) {
+        const map = node[key];
+        if (!isRecord(map))
+            continue;
+        for (const [name, child] of Object.entries(map)) {
+            walk(child, `${path}.${key}.${name}`, key, depth + 1, emit);
+        }
+    }
+    for (const key of SUBSCHEMA_ARRAY_KEYWORDS) {
+        const list = node[key];
+        if (!Array.isArray(list))
+            continue;
+        list.forEach((child, index) => {
+            walk(child, `${path}.${key}[${index}]`, key, depth + 1, emit);
+        });
+    }
+    for (const key of SUBSCHEMA_KEYWORDS) {
+        if (!(key in node))
+            continue;
+        const child = node[key];
+        if (key === 'items' && Array.isArray(child)) {
+            child.forEach((entry, index) => {
+                walk(entry, `${path}.${key}[${index}]`, key, depth + 1, emit);
+            });
+            continue;
+        }
+        walk(child, `${path}.${key}`, key, depth + 1, emit);
+    }
+}
+/**
+ * Lints the advertised schemas, without asserting.
+ *
+ * Separate from the assertion for the reason {@link toolCoverage} is: the count
+ * is worth a line in a CI log on a green run too.
+ */
+export function schemaPortability(tools) {
+    const findings = [];
+    for (const tool of tools) {
+        for (const kind of ['inputSchema', 'outputSchema']) {
+            const schema = tool[kind];
+            if (schema === undefined)
+                continue;
+            walk(schema, kind, undefined, 0, (rule, path, message) => {
+                findings.push({ rule, tool: tool.name, path, message });
+            });
+        }
+    }
+    return findings;
+}
+/**
+ * Fails unless every advertised schema is one every client can read.
+ *
+ * No exemption map, unlike the checks in `coverage.ts`. Those excuse what a
+ * *backend* cannot provide, which is a fact about the world and needs writing
+ * down. There is nothing to excuse here: every finding has an equivalent
+ * spelling that says the same thing, so a reason could only ever read "not
+ * fixed yet".
+ */
+export function expectPortableToolSchemas(tools) {
+    const findings = schemaPortability(tools);
+    if (findings.length === 0)
+        return;
+    const lines = findings.map((finding) => `  ${finding.tool} — ${finding.path}: ${finding.message}`);
+    throw new Error(`${findings.length} schema portability problem(s) across ` +
+        `${tools.length} tool(s):\n\n${lines.join('\n\n')}`);
+}
+//# sourceMappingURL=schema-lint.js.map

package/dist/schema-lint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-lint.js","sourceRoot":"","sources":["../src/schema-lint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,6EAA6E;AAC7E,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,aAAa;IACb,MAAM;IACN,MAAM;IACN,OAAO;IACP,YAAY;IACZ,SAAS;IACT,kBAAkB;IAClB,SAAS;IACT,kBAAkB;IAClB,WAAW;IACX,WAAW;IACX,SAAS;IACT,UAAU;IACV,UAAU;IACV,aAAa;IACb,aAAa;IACb,aAAa;IACb,eAAe;IACf,eAAe;IACf,UAAU;IACV,mBAAmB;IACnB,QAAQ;IACR,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,cAAc;IACd,OAAO;IACP,aAAa;IACb,UAAU;IACV,iBAAiB;IACjB,kBAAkB;IAClB,YAAY;IACZ,mBAAmB;IACnB,sBAAsB;IACtB,eAAe;IACf,uBAAuB;IACvB,kBAAkB;IAClB,OAAO;IACP,OAAO;IACP,OAAO;IACP,KAAK;IACL,aAAa;IACb,MAAM;IACN,aAAa;IACb,eAAe;CAChB,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,sBAAsB;IACtB,uBAAuB;IACvB,iBAAiB;IACjB,kBAAkB;CACnB,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG;IACzB,OAAO;IACP,UAAU;IACV,KAAK;IACL,eAAe;IACf,IAAI;IACJ,MAAM;IACN,MAAM;IACN,sBAAsB;IACtB,uBAAuB;IACvB,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;CAChB,CAAC;AACF,MAAM,wBAAwB,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;AAC5E,MAAM,sBAAsB,GAAG;IAC7B,YAAY;IACZ,mBAAmB;IACnB,kBAAkB;IAClB,cAAc;IACd,OAAO;IACP,aAAa;CACd,CAAC;AAEF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,MAAM;IACN,SAAS;IACT,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,SAAS;CACV,CAAC,CAAC;AAEH,kEAAkE;AAClE,MAAM,SAAS,GAAG,EAAE,CAAC;AAuBrB,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,kBAAkB,CAAC,IAA6B;IACvD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,mEAAmE;IACnE,OAAO,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAa;IACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,OAAO,IAAI,CAAC,KAAK,CACf,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CACrE,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CACX,IAAa,EACb,IAAY,EACZ,OAA2B,EAC3B,KAAa,EACb,IAAmE;IAEnE,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO;IAE9B,IAAI,OAAO,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,OAAO,KAAK,SAAS,IAAI,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO;QAC1E,IAAI,CACF,gBAAgB,EAChB,IAAI,EACJ,UAAU,MAAM,CAAC,IAAI,CAAC,8CAA8C;YAClE,CAAC,IAAI;gBACH,CAAC,CAAC,uEAAuE;gBACzE,CAAC,CAAC,iFAAiF,CAAC,CACzF,CAAC;QACF,OAAO;IACT,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO;IAE5B,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,IAAI,CACF,YAAY,EACZ,IAAI,EACJ,yBAAyB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB;YACrE,uEAAuE;YACvE,sEAAsE;YACtE,wEAAwE;YACxE,wBAAwB,CAC3B,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC;IACtB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,IAAI,CACF,YAAY,EACZ,IAAI,EACJ,4CAA4C,GAAG,sBAAsB;YACnE,2DAA2D,CAC9D,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACnD,IAAI,CACF,gBAAgB,EAChB,IAAI,EACJ,uEAAuE;YACrE,qEAAqE;YACrE,wEAAwE;YACxE,2DAA2D,CAC9D,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,sBAAsB,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,GAAG,IAAI,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,wBAAwB,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC5B,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,GAAG,IAAI,KAAK,GAAG,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACrC,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC;YAAE,SAAS;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,GAAG,KAAK,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;gBAC7B,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,GAAG,IAAI,KAAK,GAAG,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;YAChE,CAAC,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAmC;IAEnC,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,CAAC,aAAa,EAAE,cAAc,CAAU,EAAE,CAAC;YAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,IAAI,MAAM,KAAK,SAAS;gBAAE,SAAS;YACnC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;gBACvD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YAC1D,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAmC;IAEnC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAElC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CACxB,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CACvE,CAAC;IACF,MAAM,IAAI,KAAK,CACb,GAAG,QAAQ,CAAC,MAAM,wCAAwC;QACxD,GAAG,KAAK,CAAC,MAAM,gBAAgB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CACtD,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-integration-harness",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Drive an MCP server over real stdio against a real backend, and prove every tool was exercised",
   "keywords": [
     "mcp",