liqa/test/mcp.controller.spec.ts

import { INestApplication } from '@nestjs/common';
import request from 'supertest';
import { buildTestApp } from './app.harness';

/**
 * MCP controller integration tests.
 *
 * The MCP endpoint speaks the Model Context Protocol (streamable HTTP
 * transport).  We test:
 *  - that the endpoint is reachable and returns a recognised MCP response
 *  - that tool invocations for read-only, non-browser tools work end-to-end
 *  - that tools with bad inputs return error payloads (not HTTP 5xx)
 *
 * Browser-dependent tools (open_url, exec_code) require a live Playwright
 * session and are not covered here.
 */
describe('McpController', () => {
  let app: INestApplication;

  beforeAll(async () => {
    app = await buildTestApp();
  });

  afterAll(async () => {
    await app.close();
  });

  /** Parse the JSON-RPC payload from an SSE response body. */
  function parseSse(text: string): Record<string, unknown> {
    const match = text.match(/^data:\s*(.+)$/m);
    if (!match) throw new Error(`No SSE data line found in: ${text}`);
    return JSON.parse(match[1]) as Record<string, unknown>;
  }

  /** Send a single MCP tool call and return the parsed response body. */
  async function mcpCall(toolName: string, args: Record<string, unknown> = {}) {
    const res = await request(app.getHttpServer())
      .post('/mcp')
      .set('Content-Type', 'application/json')
      .set('Accept', 'application/json, text/event-stream')
      .send({
        jsonrpc: '2.0',
        id: 1,
        method: 'tools/call',
        params: { name: toolName, arguments: args },
      });
    return { status: res.status, rpc: parseSse(res.text) };
  }

  // ── Connectivity ───────────────────────────────────────────────────────────

  describe('POST /mcp — connectivity', () => {
    it('is reachable and returns a non-5xx status', async () => {
      const res = await request(app.getHttpServer())
        .post('/mcp')
        .set('Content-Type', 'application/json')
        .set('Accept', 'application/json, text/event-stream')
        .send({
          jsonrpc: '2.0',
          id: 1,
          method: 'initialize',
          params: {
            protocolVersion: '2024-11-05',
            capabilities: {},
            clientInfo: { name: 'test', version: '0' },
          },
        });
      expect(res.status).toBe(200);
    });
  });

  // ── list_keys tool ─────────────────────────────────────────────────────────

  describe('list_keys', () => {
    it('returns a result with text content containing a JSON array', async () => {
      const { status, rpc } = await mcpCall('list_keys');
      expect(status).toBe(200);
      const result = rpc.result as { content: { text: string }[] };
      expect(Array.isArray(JSON.parse(result.content[0].text))).toBe(true);
    });
  });

  // ── list_sessions tool ─────────────────────────────────────────────────────

  describe('list_sessions', () => {
    it('returns a paginated result with a data array', async () => {
      const { status, rpc } = await mcpCall('list_sessions');
      expect(status).toBe(200);
      const result = rpc.result as { content: { text: string }[] };
      const body = JSON.parse(result.content[0].text) as { data: unknown[]; total: number };
      expect(Array.isArray(body.data)).toBe(true);
      expect(typeof body.total).toBe('number');
    });
  });

  // ── list_environments tool ─────────────────────────────────────────────────

  describe('list_environments', () => {
    it('returns a paginated result with a data array', async () => {
      const { status, rpc } = await mcpCall('list_environments');
      expect(status).toBe(200);
      const result = rpc.result as { content: { text: string }[] };
      const body = JSON.parse(result.content[0].text) as { data: unknown[]; total: number };
      expect(Array.isArray(body.data)).toBe(true);
      expect(typeof body.total).toBe('number');
    });
  });

  // ── create_environment tool ────────────────────────────────────────────────

  describe('create_environment', () => {
    it('creates an environment via MCP', async () => {
      const { status, rpc } = await mcpCall('create_environment', {
        name: 'mcp-test-env',
        urls: { id_url: 'https://id.example.com' },
      });
      expect(status).toBe(200);
      const result = rpc.result as { content: { text: string }[] };
      const created = JSON.parse(result.content[0].text) as { name: string };
      expect(created.name).toBe('mcp-test-env');
    });
  });

  // ── delete_session tool with unknown id ────────────────────────────────────

  describe('delete_session', () => {
    it('returns an MCP error result for a non-existent session id', async () => {
      const { status, rpc } = await mcpCall('delete_session', { id: 999999 });
      expect(status).toBe(200);
      // MCP wraps service errors as isError:true content, not HTTP errors
      const result = rpc.result as { isError: boolean };
      expect(result.isError).toBe(true);
    });
  });
});