chore(repo): restructure as monorepo with server and client workspaces

- move NestJS app into server/ subdirectory
- add client/ React+TypeScript (Vite) app with Hello World
- update docker-compose to build and run both services
- add root package.json declaring npm workspaces
- update .gitignore to cover node_modules and dist at all depths

server/test/mcp.controller.spec.ts

@@ -0,0 +1,141 @@
+import { INestApplication } from "@nestjs/common";
+import request from "supertest";
+import { buildTestApp } from "./app.harness";
+
+/**
+ * MCP controller integration tests.
+ *
+ * The MCP endpoint speaks the Model Context Protocol (streamable HTTP
+ * transport).  We test:
+ *  - that the endpoint is reachable and returns a recognised MCP response
+ *  - that tool invocations for read-only, non-browser tools work end-to-end
+ *  - that tools with bad inputs return error payloads (not HTTP 5xx)
+ *
+ * Browser-dependent tools (open_url, exec_code) require a live Playwright
+ * session and are not covered here.
+ */
+describe("McpController", () => {
+  let app: INestApplication;
+
+  beforeAll(async () => {
+    app = await buildTestApp();
+  });
+
+  afterAll(async () => {
+    await app.close();
+  });
+
+  /** Parse the JSON-RPC payload from an SSE response body. */
+  function parseSse(text: string): Record<string, unknown> {
+    const match = text.match(/^data:\s*(.+)$/m);
+    if (!match) throw new Error(`No SSE data line found in: ${text}`);
+    return JSON.parse(match[1]) as Record<string, unknown>;
+  }
+
+  /** Send a single MCP tool call and return the parsed response body. */
+  async function mcpCall(toolName: string, args: Record<string, unknown> = {}) {
+    const res = await request(app.getHttpServer())
+      .post("/mcp")
+      .set("Content-Type", "application/json")
+      .set("Accept", "application/json, text/event-stream")
+      .send({
+        jsonrpc: "2.0",
+        id: 1,
+        method: "tools/call",
+        params: { name: toolName, arguments: args },
+      });
+    return { status: res.status, rpc: parseSse(res.text) };
+  }
+
+  // ── Connectivity ───────────────────────────────────────────────────────────
+
+  describe("POST /mcp — connectivity", () => {
+    it("is reachable and returns a non-5xx status", async () => {
+      const res = await request(app.getHttpServer())
+        .post("/mcp")
+        .set("Content-Type", "application/json")
+        .set("Accept", "application/json, text/event-stream")
+        .send({
+          jsonrpc: "2.0",
+          id: 1,
+          method: "initialize",
+          params: {
+            protocolVersion: "2024-11-05",
+            capabilities: {},
+            clientInfo: { name: "test", version: "0" },
+          },
+        });
+      expect(res.status).toBe(200);
+    });
+  });
+
+  // ── list_keys tool ─────────────────────────────────────────────────────────
+
+  describe("list_keys", () => {
+    it("returns a result with text content containing a JSON array", async () => {
+      const { status, rpc } = await mcpCall("list_keys");
+      expect(status).toBe(200);
+      const result = rpc.result as { content: { text: string }[] };
+      expect(Array.isArray(JSON.parse(result.content[0].text))).toBe(true);
+    });
+  });
+
+  // ── list_sessions tool ─────────────────────────────────────────────────────
+
+  describe("list_sessions", () => {
+    it("returns a paginated result with a data array", async () => {
+      const { status, rpc } = await mcpCall("list_sessions");
+      expect(status).toBe(200);
+      const result = rpc.result as { content: { text: string }[] };
+      const body = JSON.parse(result.content[0].text) as {
+        data: unknown[];
+        total: number;
+      };
+      expect(Array.isArray(body.data)).toBe(true);
+      expect(typeof body.total).toBe("number");
+    });
+  });
+
+  // ── list_environments tool ─────────────────────────────────────────────────
+
+  describe("list_environments", () => {
+    it("returns a paginated result with a data array", async () => {
+      const { status, rpc } = await mcpCall("list_environments");
+      expect(status).toBe(200);
+      const result = rpc.result as { content: { text: string }[] };
+      const body = JSON.parse(result.content[0].text) as {
+        data: unknown[];
+        total: number;
+      };
+      expect(Array.isArray(body.data)).toBe(true);
+      expect(typeof body.total).toBe("number");
+    });
+  });
+
+  // ── create_environment tool ────────────────────────────────────────────────
+
+  describe("create_environment", () => {
+    it("creates an environment via MCP", async () => {
+      const { status, rpc } = await mcpCall("create_environment", {
+        name: "mcp-test-env",
+        urls: { id_url: "https://id.example.com" },
+      });
+      expect(status).toBe(200);
+      const result = rpc.result as { content: { text: string }[] };
+      const created = JSON.parse(result.content[0].text) as { name: string };
+      expect(created.name).toBe("mcp-test-env");
+    });
+  });
+
+  // ── delete_session tool with unknown id ────────────────────────────────────
+
+  describe("delete_session", () => {
+    it("returns an MCP error result for a non-existent session id", async () => {
+      const { status, rpc } = await mcpCall("delete_session", { id: 999999 });
+      expect(status).toBe(200);
+      // MCP wraps service errors as isError:true content, not HTTP errors
+      const result = rpc.result as { isError: boolean };
+      expect(result.isError).toBe(true);
+    });
+  });
+});