[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10,"_11":12},"actionData","errors","root",{"_228":-5,"_231":232,"_233":234},"routes/shell",{"_40":41,"_227":-5,"_228":-5,"_229":230},"routes/repo",{"_33":-7,"_34":35,"_36":37,"_38":39,"_40":41,"_42":31,"_43":31,"_44":31,"_45":31,"_46":31,"_47":31,"_48":49,"_50":49,"_51":31,"_52":-7,"_53":-7,"_54":55,"_56":57,"_58":59,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68},"routes/repo.blob",{"_13":14,"_15":16,"_17":18,"_19":20,"_21":14,"_22":23,"_24":-5,"_25":26,"_27":28,"_28":29,"_30":31,"_32":14},"ref","0026d951eaead48c8f3ffc8f3cd54d1ff2e0924c","path","apps/server/src/harness/github-tools.test.ts","oid","54f068e695b3bd17806385db1308a46bde5b62e6","size",19775,"commit","mounts",[],"source","plain",{"_13":14,"_15":16},"kind","text","import { describe, expect, test } from \"bun:test\";\nimport { tool } from \"ai\";\nimport { z } from \"zod\";\n\nimport { bindRepository, GITHUB_TOOL_SCHEMAS, githubTools } from \"./github-tools\";\n\nimport type { ActiveOwnerBinding } from \"../agent/active-owner\";\nimport type { HostedRepository } from \"../agent/repository\";\nimport type { MCPClientConfig } from \"@ai-sdk/mcp\";\nimport type { Tool, ToolSet } from \"ai\";\n\nconst CHOPIN_LIST_DESCRIPTION = \"List pull requests in the selected repository.\";\nconst CHOPIN_READ_DESCRIPTION =\n\t\"Read one pull request in the selected repository: its details, diff, status, \"\n\t+ \"changed files, commits, review comments, reviews, issue comments, or check runs.\";\n\nfunction repository(overrides: Partial = {}): HostedRepository {\n\treturn { id: \"R_1\", owner: \"acme\", name: \"widgets\", defaultBranch: \"main\", ...overrides };\n}\n\nfunction fakeOwner(overrides: Partial = {}): ActiveOwnerBinding {\n\treturn {\n\t\tchannelId: \"channel-1\",\n\t\ttoken: \"gh-owner-token\",\n\t\trepository: repository(),\n\t\townerSessionId: crypto.randomUUID(),\n\t\townerGeneration: 1,\n\t\tcredentialRevision: 1,\n\t\texpiresAt: new Date(Date.now() + 60_000),\n\t\tsignal: new AbortController().signal,\n\t\tcurrentToken: () => \"gh-owner-token\",\n\t\trevalidate: async () => true,\n\t\trelease: () => {},\n\t\t...overrides,\n\t};\n}\n\nfunction remoteTool(name: string): Tool {\n\treturn tool({\n\t\tdescription: `remote description for ${name} (must never be used)`,\n\t\tinputSchema: z.object({\n\t\t\towner: z.string().optional(),\n\t\t\trepo: z.string().optional(),\n\t\t\tpullNumber: z.number().optional(),\n\t\t\tstate: z.string().optional(),\n\t\t\tperPage: z.number().optional(),\n\t\t\tmethod: z.string().optional(),\n\t\t}),\n\t\texecute: async () => ({ name, remote: true }),\n\t});\n}\n\ntype FakeClient = {\n\ttools(options: { schemas: Record }): Promise;\n\tclose(): Promise;\n};\n\nfunction fakeCreateClient(\n\ttoolNames: string[],\n\toptions: { onCreate?: (config: MCPClientConfig) => void; onClose?: () => void } = {},\n): (config: MCPClientConfig) => Promise {\n\treturn async config => {\n\t\toptions.onCreate?.(config);\n\t\treturn {\n\t\t\tasync tools({ schemas }: { schemas: Record }) {\n\t\t\t\tlet allowed = Object.keys(schemas);\n\t\t\t\tlet out: ToolSet = {};\n\t\t\t\tfor (let name of toolNames) {\n\t\t\t\t\tif (allowed.includes(name)) out[name] = remoteTool(name);\n\t\t\t\t}\n\t\t\t\treturn out;\n\t\t\t},\n\t\t\tasync close() {\n\t\t\t\toptions.onClose?.();\n\t\t\t},\n\t\t};\n\t};\n}\n\ntest(\"GitHub schema allowlist has exactly two tools and all nine pull_request_read methods\", () => {\n\texpect(Object.keys(GITHUB_TOOL_SCHEMAS).sort()).toEqual([\n\t\t\"list_pull_requests\",\n\t\t\"pull_request_read\",\n\t]);\n\tlet methods = [\n\t\t\"get\",\n\t\t\"get_diff\",\n\t\t\"get_status\",\n\t\t\"get_files\",\n\t\t\"get_commits\",\n\t\t\"get_review_comments\",\n\t\t\"get_reviews\",\n\t\t\"get_comments\",\n\t\t\"get_check_runs\",\n\t] as const;\n\texpect(GITHUB_TOOL_SCHEMAS.pull_request_read.inputSchema.shape.method.options)\n\t\t.toEqual([...methods]);\n\tfor (let method of methods) {\n\t\texpect(\n\t\t\tGITHUB_TOOL_SCHEMAS.pull_request_read.inputSchema.safeParse({\n\t\t\t\tmethod,\n\t\t\t\tpullNumber: 1,\n\t\t\t}).success,\n\t\t).toBe(true);\n\t}\n\texpect(\n\t\tGITHUB_TOOL_SCHEMAS.pull_request_read.inputSchema.safeParse({\n\t\t\tmethod: \"search_pull_requests\",\n\t\t\tpullNumber: 1,\n\t\t}).success,\n\t).toBe(false);\n\texpect(Object.keys(GITHUB_TOOL_SCHEMAS.pull_request_read.inputSchema.shape))\n\t\t.not.toContain(\"owner\");\n\texpect(Object.keys(GITHUB_TOOL_SCHEMAS.pull_request_read.inputSchema.shape))\n\t\t.not.toContain(\"repo\");\n});\n\ndescribe(\"bindRepository\", () => {\n\ttest(\"overwrites forged owner/repo input from context, ignoring the caller's values\", async () => {\n\t\tlet calls: unknown[] = [];\n\t\tlet fake: ToolSet = {\n\t\t\tpull_request_read: tool({\n\t\t\t\tdescription: \"remote description (must not appear)\",\n\t\t\t\tinputSchema: z.object({\n\t\t\t\t\towner: z.string().optional(),\n\t\t\t\t\trepo: z.string().optional(),\n\t\t\t\t\tpullNumber: z.number(),\n\t\t\t\t}),\n\t\t\t\texecute: async input => {\n\t\t\t\t\tcalls.push(input);\n\t\t\t\t\treturn \"ok\";\n\t\t\t\t},\n\t\t\t}),\n\t\t};\n\t\tlet bound = bindRepository(fake, { pull_request_read: \"Chopin's own description\" });\n\t\texpect(bound.pull_request_read?.description).toBe(\"Chopin's own description\");\n\t\tawait bound.pull_request_read?.execute?.(\n\t\t\t{ owner: \"forged-owner\", repo: \"forged-repo\", pullNumber: 7 },\n\t\t\t{\n\t\t\t\ttoolCallId: \"call-1\",\n\t\t\t\tmessages: [],\n\t\t\t\tcontext: { repository: repository({ owner: \"real-owner\", name: \"real-repo\" }) },\n\t\t\t},\n\t\t);\n\t\texpect(calls).toEqual([{ owner: \"real-owner\", repo: \"real-repo\", pullNumber: 7 }]);\n\t});\n\n\ttest(\"preserves optional, empty, and verbatim input fields outside owner/repo\", async () => {\n\t\tlet calls: unknown[] = [];\n\t\tlet fake: ToolSet = {\n\t\t\tlist_pull_requests: tool({\n\t\t\t\tdescription: \"remote description (must not appear)\",\n\t\t\t\tinputSchema: z.object({ state: z.string().optional(), perPage: z.number().optional() }),\n\t\t\t\texecute: async input => {\n\t\t\t\t\tcalls.push(input);\n\t\t\t\t\treturn \"ok\";\n\t\t\t\t},\n\t\t\t}),\n\t\t};\n\t\tlet bound = bindRepository(fake, { list_pull_requests: \"Chopin's list description\" });\n\t\tlet context = { repository: repository() };\n\t\tawait bound.list_pull_requests?.execute?.({}, { toolCallId: \"1\", messages: [], context });\n\t\tawait bound.list_pull_requests?.execute?.(\n\t\t\t{ state: \"open\", perPage: 10 },\n\t\t\t{ toolCallId: \"2\", messages: [], context },\n\t\t);\n\t\texpect(calls).toEqual([\n\t\t\t{ owner: \"acme\", repo: \"widgets\" },\n\t\t\t{ owner: \"acme\", repo: \"widgets\", state: \"open\", perPage: 10 },\n\t\t]);\n\t});\n\n\ttest(\"keeps the MCP tool's model-output converter so results reach a model as content parts\", () => {\n\t\tlet toModelOutput = () => ({ type: \"text\" as const, value: \"converted\" });\n\t\tlet fake: ToolSet = {\n\t\t\tlist_pull_requests: tool({\n\t\t\t\tdescription: \"remote description (must not appear)\",\n\t\t\t\tinputSchema: z.object({}),\n\t\t\t\texecute: async () => ({ content: [{ type: \"text\", text: \"[]\" }] }),\n\t\t\t\ttoModelOutput,\n\t\t\t}),\n\t\t};\n\t\tlet bound = bindRepository(fake, { list_pull_requests: \"Chopin's list description\" });\n\t\texpect(bound.list_pull_requests?.toModelOutput).toBe(toModelOutput);\n\t});\n\n\ttest(\"reports a tool with no mapped Chopin description as MissingTool, never using the remote one\", () => {\n\t\tlet fake: ToolSet = {\n\t\t\tlist_pull_requests: tool({\n\t\t\t\tdescription: \"remote description (must not leak)\",\n\t\t\t\tinputSchema: z.object({}),\n\t\t\t\texecute: async () => \"ok\",\n\t\t\t}),\n\t\t};\n\t\texpect(() => bindRepository(fake, {})).toThrow(\"GitHub tool list_pull_requests is unavailable\");\n\t});\n\n\ttest(\"reports a tool with no execute function as MissingTool instead of dropping it silently\", () => {\n\t\tlet fake: ToolSet = {\n\t\t\tlist_pull_requests: tool({ inputSchema: z.object({}), outputSchema: z.string() }),\n\t\t};\n\t\texpect(() => bindRepository(fake, { list_pull_requests: \"Chopin's list description\" }))\n\t\t\t.toThrow(\"GitHub tool list_pull_requests is unavailable\");\n\t});\n});\n\ndescribe(\"githubTools\", () => {\n\ttest(\"requests the read-only pull_requests toolset with the owner's token over HTTP\", async () => {\n\t\tlet seen: MCPClientConfig | undefined;\n\t\tlet createClient = fakeCreateClient([\"list_pull_requests\", \"pull_request_read\"], {\n\t\t\tonCreate: config => {\n\t\t\t\tseen = config;\n\t\t\t},\n\t\t});\n\t\tlet owner = fakeOwner({ token: \"specific-owner-token\" });\n\t\tlet result = await githubTools(owner, { createClient });\n\t\texpect(result.ok).toBe(true);\n\t\texpect(seen?.transport).toMatchObject({\n\t\t\ttype: \"http\",\n\t\t\turl: \"https://api.githubcopilot.com/mcp/\",\n\t\t\theaders: {\n\t\t\t\tAuthorization: \"Bearer specific-owner-token\",\n\t\t\t\t\"X-MCP-Readonly\": \"true\",\n\t\t\t\t\"X-MCP-Toolsets\": \"pull_requests\",\n\t\t\t},\n\t\t});\n\t});\n\n\ttest(\"returns exactly list_pull_requests and pull_request_read with Chopin's own descriptions\", async () => {\n\t\tlet createClient = fakeCreateClient([\n\t\t\t\"list_pull_requests\",\n\t\t\t\"pull_request_read\",\n\t\t\t\"search_pull_requests\",\n\t\t\t\"search_code\",\n\t\t]);\n\t\tlet result = await githubTools(fakeOwner(), { createClient });\n\t\texpect(result.ok).toBe(true);\n\t\tif (!result.ok) throw new Error(\"expected success\");\n\t\texpect(Object.keys(result.value).sort()).toEqual([\"list_pull_requests\", \"pull_request_read\"]);\n\t\texpect(result.value.list_pull_requests?.description).toBe(CHOPIN_LIST_DESCRIPTION);\n\t\texpect(result.value.pull_request_read?.description).toBe(CHOPIN_READ_DESCRIPTION);\n\t});\n\n\ttest(\"a tool missing from the remote server maps to MissingTool\", async () => {\n\t\tlet createClient = fakeCreateClient([\"list_pull_requests\"]);\n\t\tlet result = await githubTools(fakeOwner(), { createClient });\n\t\texpect(result).toEqual({\n\t\t\tok: false,\n\t\t\terror: { kind: \"MissingTool\", name: \"pull_request_read\" },\n\t\t});\n\t});\n\n\ttest(\"a non-executable allowlisted tool maps to MissingTool\", async () => {\n\t\tlet closed = 0;\n\t\tlet result = await githubTools(fakeOwner(), {\n\t\t\tcreateClient: async () => ({\n\t\t\t\ttools: async () => ({\n\t\t\t\t\tlist_pull_requests: remoteTool(\"list_pull_requests\"),\n\t\t\t\t\tpull_request_read: tool({ inputSchema: z.object({}), outputSchema: z.string() }),\n\t\t\t\t}),\n\t\t\t\tclose: async () => {\n\t\t\t\t\tclosed++;\n\t\t\t\t},\n\t\t\t}),\n\t\t});\n\t\texpect(result).toEqual({\n\t\t\tok: false,\n\t\t\terror: { kind: \"MissingTool\", name: \"pull_request_read\" },\n\t\t});\n\t\texpect(closed).toBe(1);\n\t});\n\n\ttest(\"a connection failure maps to Unavailable\", async () => {\n\t\tlet cause = new Error(\"network down\");\n\t\tlet createClient = async (): Promise => {\n\t\t\tthrow cause;\n\t\t};\n\t\tlet result = await githubTools(fakeOwner(), { createClient });\n\t\texpect(result).toEqual({ ok: false, error: { kind: \"Unavailable\", cause } });\n\t});\n\n\ttest(\"a failure while listing tools maps to Unavailable and closes the client\", async () => {\n\t\tlet closed = 0;\n\t\tlet createClient = async () => ({\n\t\t\tasync tools() {\n\t\t\t\tthrow new Error(\"tools listing failed\");\n\t\t\t},\n\t\t\tasync close() {\n\t\t\t\tclosed++;\n\t\t\t},\n\t\t});\n\t\tlet result = await githubTools(fakeOwner(), { createClient });\n\t\texpect(result.ok).toBe(false);\n\t\tif (result.ok) throw new Error(\"expected failure\");\n\t\texpect(result.error.kind).toBe(\"Unavailable\");\n\t\texpect(closed).toBe(1);\n\t});\n\n\ttest(\"reuses one client across a per-turn release, not just within one call\", async () => {\n\t\tlet sessionId = crypto.randomUUID();\n\t\tlet created = 0;\n\t\tlet createClient = fakeCreateClient([\"list_pull_requests\", \"pull_request_read\"], {\n\t\t\tonCreate: () => {\n\t\t\t\tcreated++;\n\t\t\t},\n\t\t});\n\n\t\tlet firstController = new AbortController();\n\t\tlet first = await githubTools(\n\t\t\tfakeOwner({ ownerSessionId: sessionId, signal: firstController.signal }),\n\t\t\t{ createClient },\n\t\t);\n\t\tfirstController.abort(new Error(\"released\"));\n\n\t\tlet secondController = new AbortController();\n\t\tlet second = await githubTools(\n\t\t\tfakeOwner({ ownerSessionId: sessionId, signal: secondController.signal }),\n\t\t\t{ createClient },\n\t\t);\n\n\t\texpect(created).toBe(1);\n\t\texpect(second).toBe(first);\n\t});\n\n\ttest(\"a channel reset retains a shared credential's client until rotation or expiry\", async () => {\n\t\tlet sessionId = crypto.randomUUID();\n\t\tlet firstController = new AbortController();\n\t\tlet secondController = new AbortController();\n\t\tlet created = 0;\n\t\tlet closed = 0;\n\t\tlet remoteCalls: unknown[] = [];\n\t\tlet clientClosed = false;\n\t\tlet createClient = async () => {\n\t\t\tcreated++;\n\t\t\treturn {\n\t\t\t\tasync tools() {\n\t\t\t\t\tlet bound = tool({\n\t\t\t\t\t\tinputSchema: z.object({ state: z.string().optional() }),\n\t\t\t\t\t\texecute: async input => {\n\t\t\t\t\t\t\tif (clientClosed) throw new Error(\"Attempted to send a request from a closed client\");\n\t\t\t\t\t\t\tremoteCalls.push(input);\n\t\t\t\t\t\t\treturn \"ok\";\n\t\t\t\t\t\t},\n\t\t\t\t\t});\n\t\t\t\t\treturn { list_pull_requests: bound, pull_request_read: bound };\n\t\t\t\t},\n\t\t\t\tasync close() {\n\t\t\t\t\tclosed++;\n\t\t\t\t\tclientClosed = true;\n\t\t\t\t},\n\t\t\t};\n\t\t};\n\t\tlet ownerA = fakeOwner({\n\t\t\townerSessionId: sessionId,\n\t\t\tchannelId: \"channel-a\",\n\t\t\tsignal: firstController.signal,\n\t\t});\n\t\tlet ownerB = fakeOwner({\n\t\t\townerSessionId: sessionId,\n\t\t\tchannelId: \"channel-b\",\n\t\t\tsignal: secondController.signal,\n\t\t});\n\t\tlet a = await githubTools(ownerA, { createClient });\n\t\tlet b = await githubTools(ownerB, { createClient });\n\t\texpect(a.ok && b.ok).toBe(true);\n\t\texpect(created).toBe(1);\n\t\tfirstController.abort(new Error(\"owner-reset\"));\n\t\tawait Promise.resolve();\n\t\texpect(closed).toBe(0);\n\t\tif (!b.ok) throw new Error(\"shared tools missing\");\n\t\tawait b.value.list_pull_requests?.execute?.({ owner: \"wrong\", repo: \"wrong\", state: \"open\" }, {\n\t\t\tcontext: { repository: repository({ owner: \"next\", name: \"chopin\" }) },\n\t\t\tmessages: [],\n\t\t\ttoolCallId: \"test\",\n\t\t});\n\t\texpect(remoteCalls).toEqual([{ owner: \"next\", repo: \"chopin\", state: \"open\" }]);\n\t\tsecondController.abort(new Error(\"credential-rotated\"));\n\t\tawait Promise.resolve();\n\t\texpect(closed).toBe(1);\n\t});\n\n\ttest(\"credential expiry closes a shared client even after another channel resets\", async () => {\n\t\tlet sessionId = crypto.randomUUID();\n\t\tlet first = new AbortController();\n\t\tlet second = new AbortController();\n\t\tlet closed = 0;\n\t\tlet createClient = fakeCreateClient([\"list_pull_requests\", \"pull_request_read\"], {\n\t\t\tonClose: () => closed++,\n\t\t});\n\t\tawait githubTools(fakeOwner({ ownerSessionId: sessionId, signal: first.signal }), {\n\t\t\tcreateClient,\n\t\t});\n\t\tawait githubTools(fakeOwner({ ownerSessionId: sessionId, signal: second.signal }), {\n\t\t\tcreateClient,\n\t\t});\n\t\tfirst.abort(new Error(\"owner-reset\"));\n\t\texpect(closed).toBe(0);\n\t\tsecond.abort(new Error(\"credential-expired\"));\n\t\tawait Promise.resolve();\n\t\texpect(closed).toBe(1);\n\t});\n\n\ttest(\"closes the cached client and reconnects when the credential rotates\", async () => {\n\t\tlet sessionId = crypto.randomUUID();\n\t\tlet created = 0;\n\t\tlet closed = 0;\n\t\tlet createClient = fakeCreateClient([\"list_pull_requests\", \"pull_request_read\"], {\n\t\t\tonCreate: () => {\n\t\t\t\tcreated++;\n\t\t\t},\n\t\t\tonClose: () => {\n\t\t\t\tclosed++;\n\t\t\t},\n\t\t});\n\n\t\tlet firstController = new AbortController();\n\t\tawait githubTools(\n\t\t\tfakeOwner({\n\t\t\t\townerSessionId: sessionId,\n\t\t\t\tcredentialRevision: 1,\n\t\t\t\tsignal: firstController.signal,\n\t\t\t}),\n\t\t\t{ createClient },\n\t\t);\n\t\tfirstController.abort(new Error(\"credential-rotated\"));\n\t\tawait new Promise(resolve => setTimeout(resolve, 0));\n\t\texpect(closed).toBe(1);\n\n\t\tawait githubTools(\n\t\t\tfakeOwner({\n\t\t\t\townerSessionId: sessionId,\n\t\t\t\tcredentialRevision: 2,\n\t\t\t\ttoken: \"rotated-token\",\n\t\t\t\tsignal: new AbortController().signal,\n\t\t\t}),\n\t\t\t{ createClient },\n\t\t);\n\t\texpect(created).toBe(2);\n\t});\n\n\ttest(\"refuses an already-aborted owner binding without creating a client\", async () => {\n\t\tlet sessionId = crypto.randomUUID();\n\t\tlet created = 0;\n\t\tlet createClient = fakeCreateClient([\"list_pull_requests\", \"pull_request_read\"], {\n\t\t\tonCreate: () => {\n\t\t\t\tcreated++;\n\t\t\t},\n\t\t});\n\t\tlet controller = new AbortController();\n\t\tawait githubTools(fakeOwner({ ownerSessionId: sessionId, signal: controller.signal }), {\n\t\t\tcreateClient,\n\t\t});\n\t\texpect(created).toBe(1);\n\n\t\tcontroller.abort(new Error(\"credential-rotated\"));\n\t\tlet result = await githubTools(\n\t\t\tfakeOwner({ ownerSessionId: sessionId, signal: controller.signal }),\n\t\t\t{ createClient },\n\t\t);\n\t\texpect(created).toBe(1);\n\t\texpect(result).toEqual({\n\t\t\tok: false,\n\t\t\terror: { kind: \"Unavailable\", cause: controller.signal.reason },\n\t\t});\n\t});\n\n\ttest(\"does not reuse a cached client whose token no longer matches the owner binding\", async () => {\n\t\tlet sessionId = crypto.randomUUID();\n\t\tlet created = 0;\n\t\tlet createClient = fakeCreateClient([\"list_pull_requests\", \"pull_request_read\"], {\n\t\t\tonCreate: () => {\n\t\t\t\tcreated++;\n\t\t\t},\n\t\t});\n\t\tawait githubTools(fakeOwner({ ownerSessionId: sessionId, token: \"token-a\" }), { createClient });\n\t\tawait githubTools(fakeOwner({ ownerSessionId: sessionId, token: \"token-b\" }), { createClient });\n\t\texpect(created).toBe(2);\n\t});\n\n\ttest(\"closes the cached client at expiry even without an abort\", async () => {\n\t\tlet closed = 0;\n\t\tlet createClient = fakeCreateClient([\"list_pull_requests\", \"pull_request_read\"], {\n\t\t\tonClose: () => {\n\t\t\t\tclosed++;\n\t\t\t},\n\t\t});\n\t\tawait githubTools(fakeOwner({ expiresAt: new Date(Date.now() + 20) }), { createClient });\n\t\texpect(closed).toBe(0);\n\t\tawait new Promise(resolve => setTimeout(resolve, 60));\n\t\texpect(closed).toBe(1);\n\t});\n\n\ttest(\"discards and closes a client whose owner binding aborted while tools were loading\", async () => {\n\t\tlet closed = 0;\n\t\tlet controller = new AbortController();\n\t\tlet release!: () => void;\n\t\tlet gate = new Promise(resolve => {\n\t\t\trelease = resolve;\n\t\t});\n\t\tlet createClient = async () => ({\n\t\t\tasync tools() {\n\t\t\t\tawait gate;\n\t\t\t\treturn {\n\t\t\t\t\tlist_pull_requests: remoteTool(\"list_pull_requests\"),\n\t\t\t\t\tpull_request_read: remoteTool(\"pull_request_read\"),\n\t\t\t\t};\n\t\t\t},\n\t\t\tasync close() {\n\t\t\t\tclosed++;\n\t\t\t},\n\t\t});\n\t\tlet pending = githubTools(fakeOwner({ signal: controller.signal }), { createClient });\n\t\tcontroller.abort(new Error(\"credential-rotated\"));\n\t\trelease();\n\t\tlet result = await pending;\n\t\texpect(result.ok).toBe(false);\n\t\tif (result.ok) throw new Error(\"expected failure\");\n\t\texpect(result.error.kind).toBe(\"Unavailable\");\n\t\texpect(closed).toBe(1);\n\t});\n\n\ttest(\"rotation after a released turn closes the previous credential's client\", async () => {\n\t\tlet sessionId = crypto.randomUUID();\n\t\tlet closed = 0;\n\t\tlet createClient = fakeCreateClient([\"list_pull_requests\", \"pull_request_read\"], {\n\t\t\tonClose: () => closed++,\n\t\t});\n\t\tlet controller = new AbortController();\n\t\tawait githubTools(fakeOwner({ ownerSessionId: sessionId, signal: controller.signal }), {\n\t\t\tcreateClient,\n\t\t});\n\t\tcontroller.abort(new Error(\"released\"));\n\t\tawait githubTools(\n\t\t\tfakeOwner({\n\t\t\t\townerSessionId: sessionId,\n\t\t\t\tcredentialRevision: 2,\n\t\t\t\ttoken: \"new-token\",\n\t\t\t}),\n\t\t\t{ createClient },\n\t\t);\n\t\tawait new Promise(resolve => setTimeout(resolve, 0));\n\t\texpect(closed).toBe(1);\n\t});\n\n\ttest(\"concurrent opens for one credential share a single MCP connection\", async () => {\n\t\tlet created = 0;\n\t\tlet release!: () => void;\n\t\tlet gate = new Promise(resolve => release = resolve);\n\t\tlet client = fakeCreateClient([\"list_pull_requests\", \"pull_request_read\"], {\n\t\t\tonCreate: () => created++,\n\t\t});\n\t\tlet createClient: typeof client = async config => {\n\t\t\tlet connected = await client(config);\n\t\t\tawait gate;\n\t\t\treturn connected;\n\t\t};\n\t\tlet owner = fakeOwner();\n\t\tlet first = githubTools(owner, { createClient });\n\t\tlet second = githubTools(owner, { createClient });\n\t\trelease();\n\t\tlet results = await Promise.all([first, second]);\n\t\texpect(created).toBe(1);\n\t\texpect(results[0]).toBe(results[1]);\n\t});\n\n\ttest(\"a superseded in-flight connection cannot replace a rotated credential\", async () => {\n\t\tlet sessionId = crypto.randomUUID();\n\t\tlet created = 0;\n\t\tlet closed = 0;\n\t\tlet release!: () => void;\n\t\tlet gate = new Promise(resolve => release = resolve);\n\t\tlet client = fakeCreateClient([\"list_pull_requests\", \"pull_request_read\"], {\n\t\t\tonCreate: () => created++,\n\t\t\tonClose: () => closed++,\n\t\t});\n\t\tlet createClient: typeof client = async config => {\n\t\t\tlet connected = await client(config);\n\t\t\tif (\n\t\t\t\tnew Headers((config.transport as { headers?: Record }).headers)\n\t\t\t\t\t.get(\"authorization\") === \"Bearer older\"\n\t\t\t) await gate;\n\t\t\treturn connected;\n\t\t};\n\t\tlet older = githubTools(fakeOwner({ ownerSessionId: sessionId, token: \"older\" }), {\n\t\t\tcreateClient,\n\t\t});\n\t\tlet newer = await githubTools(\n\t\t\tfakeOwner({\n\t\t\t\townerSessionId: sessionId,\n\t\t\t\tcredentialRevision: 2,\n\t\t\t\ttoken: \"newer\",\n\t\t\t}),\n\t\t\t{ createClient },\n\t\t);\n\t\trelease();\n\t\texpect((await older).ok).toBe(false);\n\t\texpect(newer.ok).toBe(true);\n\t\texpect(created).toBe(2);\n\t\texpect(closed).toBe(1);\n\t});\n\n\ttest(\"does not cache a client for a different owner credential\", async () => {\n\t\tlet created = 0;\n\t\tlet createClient = fakeCreateClient([\"list_pull_requests\", \"pull_request_read\"], {\n\t\t\tonCreate: () => {\n\t\t\t\tcreated++;\n\t\t\t},\n\t\t});\n\t\tawait githubTools(fakeOwner({ ownerSessionId: \"session-a\" }), { createClient });\n\t\tawait githubTools(fakeOwner({ ownerSessionId: \"session-b\" }), { createClient });\n\t\texpect(created).toBe(2);\n\t});\n});\n","editable",false,"branch","documentNavigation","repo","githubnext/chopin","repoId","7d1a8ac3-35b0-4dea-85d4-06a980f3bada","ownerId","org:89615882","site","nexthub","private","admin","settings","maintainer","triage","starred","stars",0,"watchers","watching","pinned","notify","views",[183,184,185,186,187,188,189,190,191,192,193,194,195],"navigation",{"_54":55,"_139":140,"_141":142,"_143":144,"_145":146,"_147":148,"_149":150},"sources",[],"viewer","meta",{"_131":132,"_133":134,"_135":136,"_42":31,"_137":126,"_138":31,"_48":49,"_50":49},"branches",[73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130],"tags",[69,70,71,72],"cloneUrl","https://git.nexthub.sh/githubnext/chopin.git","color-controls-slice-1","color-controls-slice-2","color-controls-slice-3","color-controls-slice-4","Krzysztof-Cieslak-patch-1","Krzysztof-Cieslak-patch-2","Maggie/app-preview-toolkit","Maggie/ci-playwright-install-timeout","Maggie/collaborative-visual-decision","Maggie/design-audit","Maggie/generic-visual-decision-runtime","Maggie/impeccable-chopin-metadata","Maggie/jev-chat-product","Maggie/jev-composed-assessment","Maggie/native-document-layouts","Maggie/openui-composition-product","Maggie/openui-composition-trial","Maggie/planner-visual-authoring","Maggie/planner-visual-requests","Maggie/visual-selection-eval","artifacts/pr-419-live-preview-20261009","automation/pr-maintenance-state","automation/use-effect/callout-disabled-picker-8cf9e49ba5c09471","automation/use-effect/collaboration-options-ref-4e3a5a08a879a5ae","automation/use-effect/room-workspace-effective-access-a57d40866c71bed0","chore/bun-1.4.2","color-controls","color-controls-plan","comments","design-pr-assets","design/archived-decisions-badge","design/channel-route-remount","design/chat-decision-entry","design/conversation-analysis-markers","design/decision-evidence","design/settled-line-icon","dev/integration","diagram-step-controls","feat/liveapp-frontend-pilot","feat/local-experiments","feat/local-launcher-tracer","fix/autolink-mdx-crash","github-pills/2-pills","github-pills/3-hover-card","maggie/app-preview-toolkit","maggie/ci-playwright-install-timeout","maggie/collaborative-visual-decision","maggie/design-audit","maggie/generic-visual-decision-runtime","maggie/impeccable-chopin-metadata","maggie/jev-composed-assessment","maggie/native-document-layouts","maggie/openui-composition-product","maggie/openui-composition-trial","maggie/planner-visual-authoring","maggie/planner-visual-requests","maggie/visual-selection-eval","main","plain-text-fence-chrome","tokens/09-copy","wireframes/2-renderer","wireframes/3-planner","description","Let's compose rich plans together","owner","githubnext","section","","head","empty","pins",[165,166,167],"documents",{"_160":161,"_162":163},"code",{"_156":157,"_158":159},"automations",{"_153":154,"_155":-5},"delivery",{"_151":49,"_152":-5},"tag","04zvKQ8QOrDUF8TO1Ovz0Zy8_TT","releases","applications","workflows",3,"deployments","commits",1000,"changes",13,"counts",{"_164":163},"total",11,"issue",{"_168":158,"_170":181,"_15":158,"_172":182,"_52":174,"_175":31,"_176":174,"_177":159},{"_168":178,"_170":179,"_15":178,"_172":180,"_52":174,"_175":31,"_176":174,"_177":49},{"_168":169,"_170":171,"_15":169,"_172":173,"_52":174,"_175":31,"_176":174,"_177":163},"id","issues","name","Issues","filters",{},true,"saved","pinnable","count","tasks","Tasks",{},"Changes",{},{"_168":158,"_170":181,"_15":158,"_172":226,"_52":174,"_175":31,"_176":174},{"_168":178,"_170":179,"_15":178,"_172":225,"_52":174,"_175":31,"_176":174},{"_168":169,"_170":171,"_15":169,"_172":224,"_52":174,"_175":31,"_176":174},{"_168":221,"_170":222,"_15":221,"_172":223,"_52":31,"_175":31,"_176":174},{"_168":218,"_170":219,"_15":218,"_172":220,"_52":31,"_175":31,"_176":174},{"_168":153,"_170":216,"_15":145,"_172":217,"_52":31,"_175":31,"_176":174},{"_168":155,"_170":213,"_15":214,"_172":215,"_52":31,"_175":31,"_176":174},{"_168":151,"_170":211,"_15":151,"_172":212,"_52":31,"_175":31,"_176":174},{"_168":207,"_170":208,"_15":209,"_172":210,"_52":31,"_175":31,"_176":174},{"_168":141,"_170":205,"_15":141,"_172":206,"_52":31,"_175":31,"_176":31},{"_168":202,"_170":203,"_15":202,"_172":204,"_52":31,"_175":31,"_176":31},{"_168":199,"_170":200,"_15":199,"_172":201,"_52":31,"_175":31,"_176":31},{"_168":196,"_170":197,"_15":196,"_172":198,"_52":31,"_175":31,"_176":31},"decisions","Decisions",{},"changelog","Changelog",{},"roadmap","Roadmap",{},"Documents",{},"activity","Activity","insights",{},"Releases",{},"Deployments","automations/deployments",{},"Workflows",{},"discussions","Discussions",{},"goals","Goals",{},{},{},{},"groups","user","agents",[],"now",1794440431032,"sidebar","expanded"]