[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10,"_11":12},"actionData","errors","root",{"_228":-5,"_231":232,"_233":234},"routes/shell",{"_40":41,"_227":-5,"_228":-5,"_229":230},"routes/repo",{"_33":-7,"_34":35,"_36":37,"_38":39,"_40":41,"_42":31,"_43":31,"_44":31,"_45":31,"_46":31,"_47":31,"_48":49,"_50":49,"_51":31,"_52":-7,"_53":-7,"_54":55,"_56":57,"_58":59,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68},"routes/repo.blob",{"_13":14,"_15":16,"_17":18,"_19":20,"_21":14,"_22":23,"_24":-5,"_25":26,"_27":28,"_28":29,"_30":31,"_32":14},"ref","8f4eba80fdd9a4cfb6bbbfba696b39228ce8a763","path","apps/server/src/mcp/hosted.test.ts","oid","4c394a963311ac2b1f1e11a55e2331fb2d296586","size",11821,"commit","mounts",[],"source","plain",{"_13":14,"_15":16},"kind","text","import { describe, expect, it } from \"bun:test\";\n\nimport { ulid } from \"@chopin/dialect\";\n\nimport { Sessions } from \"../auth/session\";\nimport { GitHubError } from \"../github/client\";\nimport * as Room from \"../plan/room\";\nimport * as Service from \"../plan/service\";\nimport * as Rooms from \"../rooms\";\nimport { MemoryStorage } from \"../storage/memory/adapter\";\nimport { hosted } from \"./hosted\";\n\nimport type { Server } from \"bun\";\nimport type { HostedAuth } from \"../auth/routes\";\nimport type {\n\tGitHub,\n\tGitHubTokenGrant,\n\tGitHubUser,\n\tInstallationPage,\n\tRepository,\n\tRepositoryPage,\n} from \"../github/client\";\nimport type { Socket, SocketData } from \"../wire\";\n\nclass GitHubBoundary implements GitHub {\n\treadonly userTokens: string[] = [];\n\taccessible = true;\n\trepositoryValue: Repository = {\n\t\tid: \"R_score\",\n\t\towner: \"octo-org\",\n\t\tname: \"score\",\n\t\tfullName: \"octo-org/score\",\n\t\tprivate: true,\n\t\turl: \"https://github.test/octo-org/score\",\n\t\tdefaultBranch: \"main\",\n\t\tpermissions: { pull: true, push: false, admin: false },\n\t};\n\n\tauthorize(): string {\n\t\treturn \"\";\n\t}\n\n\tasync exchange(): Promise {\n\t\treturn grant(\"access-token\");\n\t}\n\n\tasync refresh(): Promise {\n\t\treturn grant(\"refreshed-access-token\");\n\t}\n\n\tasync user(token: string): Promise {\n\t\tthis.userTokens.push(token);\n\t\tif (token === \"denied\") throw new GitHubError(\"bad credentials\", 401);\n\t\treturn { id: `U_${token}`, login: token, avatarUrl: \"https://github.test/avatar\" };\n\t}\n\n\tasync repositories(): Promise {\n\t\treturn { repositories: [], nextPage: undefined };\n\t}\n\n\tasync installations(): Promise {\n\t\treturn { installations: [], nextPage: undefined };\n\t}\n\n\tasync installationRepositories(): Promise {\n\t\treturn this.repositories();\n\t}\n\n\tasync repository(_token: string, owner: string, name: string): Promise {\n\t\treturn this.value(owner, name);\n\t}\n\n\tasync repositoryAccess(\n\t\t_token: string,\n\t\towner: string,\n\t\tname: string,\n\t): Promise {\n\t\treturn this.accessible ? this.value(owner, name) : undefined;\n\t}\n\n\tinvalidate(): void {}\n\n\tprivate value(owner: string, name: string): Repository {\n\t\treturn {\n\t\t\t...this.repositoryValue,\n\t\t\towner,\n\t\t\tname,\n\t\t\tfullName: `${owner}/${name}`,\n\t\t\turl: `https://github.test/${owner}/${name}`,\n\t\t};\n\t}\n}\n\nfunction grant(accessToken: string): GitHubTokenGrant {\n\treturn {\n\t\taccessToken,\n\t\taccessExpiresIn: 28_800,\n\t\trefreshToken: \"refresh-token\",\n\t\trefreshExpiresIn: 15_897_600,\n\t};\n}\n\nfunction setup() {\n\tlet now = new Date(\"2026-08-17T12:00:00.000Z\");\n\tlet storage = new MemoryStorage();\n\tlet github = new GitHubBoundary();\n\tlet key = new Uint8Array(32).fill(3);\n\tlet auth: HostedAuth = {\n\t\tconfig: {\n\t\t\torigin: \"https://chopin.test\",\n\t\t\tappSlug: \"chopin-test\",\n\t\t\tclientId: \"client-id\",\n\t\t\tclientSecret: \"client-secret\",\n\t\t\tencryptionKey: key,\n\t\t},\n\t\tstorage,\n\t\tgithub,\n\t\tsessions: new Sessions(storage, true, () => now),\n\t\tclock: () => now,\n\t};\n\treturn { auth, github, now, storage };\n}\n\nfunction request(authorization?: string | Headers): Request {\n\tlet headers = authorization instanceof Headers\n\t\t? authorization\n\t\t: authorization\n\t\t? new Headers({ authorization })\n\t\t: undefined;\n\treturn new Request(\"https://chopin.test/mcp\", { headers });\n}\n\nasync function plan(context: ReturnType) {\n\tawait context.storage.users.put({\n\t\tid: \"U_allowed\",\n\t\tlogin: \"allowed\",\n\t\tavatarUrl: \"\",\n\t\tnow: context.now,\n\t});\n\tlet channel = await context.storage.channels.create({\n\t\tid: crypto.randomUUID(),\n\t\trepositoryId: \"R_score\",\n\t\trepositoryOwner: \"octo-org\",\n\t\trepositoryName: \"score\",\n\t\ttitle: \"Release readiness\",\n\t\tcreatedBy: \"U_allowed\",\n\t\tnow: context.now,\n\t});\n\tlet lease = await context.storage.leases.acquire(\"writer\", \"mcp-test\", 60_000);\n\tif (!lease) throw new Error(\"could not acquire test lease\");\n\tlet server = { publish() {} } as unknown as Server;\n\tlet backend: Service.Backend = {\n\t\tstorage: context.storage,\n\t\tlease: () => lease,\n\t\tfatal: err => {\n\t\t\tthrow err;\n\t\t},\n\t};\n\treturn { channel, lease, server, plan: await Service.open(channel.id, backend, server) };\n}\n\ndescribe(\"the hosted MCP adapter\", () => {\n\tit(\"accepts exactly one bearer token and validates its GitHub identity per request\", async () => {\n\t\tlet { auth, github } = setup();\n\t\tlet adapter = hosted(auth);\n\t\tlet duplicate = new Headers();\n\t\tduplicate.append(\"authorization\", \"Bearer first\");\n\t\tduplicate.append(\"authorization\", \"Bearer second\");\n\n\t\texpect(await adapter.caller(request())).toBeUndefined();\n\t\texpect(await adapter.caller(request(\"Basic token\"))).toBeUndefined();\n\t\texpect(await adapter.caller(request(duplicate))).toBeUndefined();\n\t\texpect(await adapter.caller(request(\"Bearer denied\"))).toBeUndefined();\n\t\texpect(await adapter.caller(request(\"Bearer allowed\"))).toEqual({\n\t\t\toauthToken: \"allowed\",\n\t\t\tuser: {\n\t\t\t\tid: \"U_allowed\",\n\t\t\t\tlogin: \"allowed\",\n\t\t\t\tavatarUrl: \"https://github.test/avatar\",\n\t\t\t},\n\t\t});\n\t\texpect(await adapter.caller(request(\"bearer allowed\"))).toBeDefined();\n\t\texpect(await adapter.caller(request(\"Bearer token+/==\"))).toBeDefined();\n\t\texpect(github.userTokens).toEqual([\"denied\", \"allowed\", \"allowed\", \"token+/==\"]);\n\t});\n\n\tit(\"lists every channel under the currently readable repository node id\", async () => {\n\t\tlet { auth, github, now, storage } = setup();\n\t\tawait storage.users.put({ id: \"U_allowed\", login: \"allowed\", avatarUrl: \"\", now });\n\t\tfor (let index = 0; index < 101; index++) {\n\t\t\tawait storage.channels.create({\n\t\t\t\tid: crypto.randomUUID(),\n\t\t\t\trepositoryId: \"R_score\",\n\t\t\t\trepositoryOwner: \"octo-org\",\n\t\t\t\trepositoryName: \"score\",\n\t\t\t\ttitle: `Plan ${String(index).padStart(3, \"0\")}`,\n\t\t\t\tcreatedBy: \"U_allowed\",\n\t\t\t\tnow,\n\t\t\t});\n\t\t}\n\t\tawait storage.channels.create({\n\t\t\tid: crypto.randomUUID(),\n\t\t\trepositoryId: \"R_foreign\",\n\t\t\trepositoryOwner: \"elsewhere\",\n\t\t\trepositoryName: \"private\",\n\t\t\ttitle: \"Foreign title\",\n\t\t\tcreatedBy: \"U_allowed\",\n\t\t\tnow,\n\t\t});\n\t\tlet adapter = hosted(auth);\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller) throw new Error(\"test caller was not authenticated\");\n\n\t\tlet listed = await adapter.documents.list(caller, \"octo-org/score\");\n\t\texpect(listed).toHaveLength(101);\n\t\texpect(listed.map(document => document.title)).not.toContain(\"Foreign title\");\n\n\t\tgithub.repositoryValue = {\n\t\t\t...github.repositoryValue,\n\t\t\tpermissions: { pull: false, push: true, admin: false },\n\t\t};\n\t\texpect(await adapter.documents.list(caller, \"octo-org/score\")).toEqual([]);\n\t\tgithub.accessible = false;\n\t\texpect(await adapter.documents.list(caller, \"octo-org/score\")).toEqual([]);\n\t});\n\n\tit(\"reconstructs a stored checkpoint and journal with the validated plan revision\", async () => {\n\t\tlet context = setup();\n\t\tlet opened = await plan(context);\n\t\tlet mutation = Room.insertDecision(opened.plan.document, {\n\t\t\tid: ulid(),\n\t\t\tquote: \"Ship the release\",\n\t\t\tby: \"allowed\",\n\t\t\tat: \"2026-08-17T12:00:00.000Z\",\n\t\t\tnotes: [{ by: \"allowed\", text: \"The checks are green\" }],\n\t\t});\n\t\tif (!mutation) throw new Error(\"test mutation was empty\");\n\t\tawait Service.publish(opened.plan, opened.server, opened.channel.id, mutation);\n\t\tlet stored = await context.storage.collaboration.load(opened.channel.id, context.now);\n\t\texpect(stored?.updates).toHaveLength(1);\n\t\tlet expectedSource = Service.source(opened.plan);\n\t\tlet adapter = hosted(context.auth);\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller) throw new Error(\"test caller was not authenticated\");\n\n\t\texpect(await adapter.documents.read(caller, opened.channel.id)).toEqual({\n\t\t\tid: opened.channel.id,\n\t\t\ttitle: \"Release readiness\",\n\t\t\tsource: expectedSource,\n\t\t\trevision: 1,\n\t\t});\n\t\tawait Service.close(opened.plan);\n\t});\n\n\tit(\"reads an open plan from its authoritative live document\", async () => {\n\t\tlet context = setup();\n\t\tlet opened = await plan(context);\n\t\tlet mutation = Room.insertDecision(opened.plan.document, {\n\t\t\tid: ulid(),\n\t\t\tquote: \"Live and not checkpointed\",\n\t\t\tby: \"allowed\",\n\t\t\tat: \"2026-08-17T12:00:00.000Z\",\n\t\t\tnotes: [{ by: \"allowed\", text: \"Read the live document\" }],\n\t\t});\n\t\tif (!mutation) throw new Error(\"test mutation was empty\");\n\t\topened.plan.revision = 9;\n\t\tlet socket = {\n\t\t\tdata: { room: opened.channel.id, client: \"mcp-test\" },\n\t\t} as unknown as Socket;\n\t\tlet live = Rooms.join(socket);\n\t\tlive.plan = opened.plan;\n\t\tlet adapter = hosted(context.auth);\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller) throw new Error(\"test caller was not authenticated\");\n\n\t\ttry {\n\t\t\texpect(await adapter.documents.read(caller, opened.channel.id)).toEqual({\n\t\t\t\tid: opened.channel.id,\n\t\t\t\ttitle: \"Release readiness\",\n\t\t\t\tsource: Service.source(opened.plan),\n\t\t\t\trevision: 9,\n\t\t\t});\n\t\t} finally {\n\t\t\tRooms.forget(live);\n\t\t\tawait Service.close(opened.plan);\n\t\t}\n\t});\n\n\tit(\"makes an inaccessible channel indistinguishable from a missing channel\", async () => {\n\t\tlet context = setup();\n\t\tlet opened = await plan(context);\n\t\tawait Service.close(opened.plan);\n\t\tlet adapter = hosted(context.auth);\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller) throw new Error(\"test caller was not authenticated\");\n\t\tlet missing = await adapter.documents.read(caller, crypto.randomUUID());\n\t\tcontext.github.repositoryValue = {\n\t\t\t...context.github.repositoryValue,\n\t\t\tid: \"R_replaced\",\n\t\t\tpermissions: { pull: true, push: true, admin: true },\n\t\t};\n\n\t\texpect(await adapter.documents.read(caller, opened.channel.id)).toBe(missing);\n\t\tcontext.github.repositoryValue = {\n\t\t\t...context.github.repositoryValue,\n\t\t\tid: \"R_score\",\n\t\t\tpermissions: { pull: false, push: true, admin: true },\n\t\t};\n\t\texpect(await adapter.documents.read(caller, opened.channel.id)).toBe(missing);\n\t\texpect(missing).toBeUndefined();\n\t});\n\n\tit(\"treats malformed durable state as an absent channel\", async () => {\n\t\tlet context = setup();\n\t\tlet opened = await plan(context);\n\t\tawait Service.close(opened.plan);\n\t\tlet stored = await context.storage.collaboration.load(opened.channel.id, context.now);\n\t\tif (!stored?.snapshot) throw new Error(\"test channel has no checkpoint\");\n\t\tawait context.storage.collaboration.commit({\n\t\t\tchannelId: opened.channel.id,\n\t\t\tlease: opened.lease,\n\t\t\texpectedRevision: stored.channel.revision,\n\t\t\toperationId: crypto.randomUUID(),\n\t\t\tepoch: stored.snapshot.epoch,\n\t\t\tsidecar: { version: 1, revision: 40 },\n\t\t\tevents: [],\n\t\t\tnow: context.now,\n\t\t});\n\t\tlet adapter = hosted(context.auth);\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller) throw new Error(\"test caller was not authenticated\");\n\n\t\texpect(await adapter.documents.read(caller, opened.channel.id)).toBeUndefined();\n\t});\n\n\tit(\"treats an invalid open questionnaire as absent durable state\", async () => {\n\t\tlet context = setup();\n\t\tlet opened = await plan(context);\n\t\tawait Service.close(opened.plan);\n\t\tlet stored = await context.storage.collaboration.load(opened.channel.id, context.now);\n\t\tif (!stored?.snapshot) throw new Error(\"test channel has no checkpoint\");\n\t\tawait context.storage.collaboration.commit({\n\t\t\tchannelId: opened.channel.id,\n\t\t\tlease: opened.lease,\n\t\t\texpectedRevision: stored.channel.revision,\n\t\t\toperationId: crypto.randomUUID(),\n\t\t\tepoch: stored.snapshot.epoch,\n\t\t\tsidecar: {\n\t\t\t\tversion: 1,\n\t\t\t\trevision: 40,\n\t\t\t\tdocumentSeq: 0,\n\t\t\t\tquestions: [{ id: \"question-1\", status: \"open\", definition: {} }],\n\t\t\t\topenQuestions: [{\n\t\t\t\t\tid: \"question-1\",\n\t\t\t\t\tdefinition: {},\n\t\t\t\t\tmodel: [],\n\t\t\t\t\trevision: -1,\n\t\t\t\t}],\n\t\t\t\tthreads: [],\n\t\t\t\ttranscript: [],\n\t\t\t},\n\t\t\tevents: [],\n\t\t\tnow: context.now,\n\t\t});\n\t\tlet adapter = hosted(context.auth);\n\t\tlet caller = await adapter.caller(request(\"Bearer allowed\"));\n\t\tif (!caller) throw new Error(\"test caller was not authenticated\");\n\n\t\texpect(await adapter.documents.read(caller, opened.channel.id)).toBeUndefined();\n\t});\n});\n","editable",false,"branch","documentNavigation","repo","githubnext/chopin","repoId","7d1a8ac3-35b0-4dea-85d4-06a980f3bada","ownerId","org:89615882","site","nexthub","private","admin","settings","maintainer","triage","starred","stars",0,"watchers","watching","pinned","notify","views",[183,184,185,186,187,188,189,190,191,192,193,194,195],"navigation",{"_54":55,"_139":140,"_141":142,"_143":144,"_145":146,"_147":148,"_149":150},"sources",[],"viewer","meta",{"_131":132,"_133":134,"_135":136,"_42":31,"_137":126,"_138":31,"_48":49,"_50":49},"branches",[73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130],"tags",[69,70,71,72],"cloneUrl","https://git.nexthub.sh/githubnext/chopin.git","color-controls-slice-1","color-controls-slice-2","color-controls-slice-3","color-controls-slice-4","Krzysztof-Cieslak-patch-1","Krzysztof-Cieslak-patch-2","Maggie/app-preview-toolkit","Maggie/ci-playwright-install-timeout","Maggie/collaborative-visual-decision","Maggie/design-audit","Maggie/generic-visual-decision-runtime","Maggie/impeccable-chopin-metadata","Maggie/jev-chat-product","Maggie/jev-composed-assessment","Maggie/native-document-layouts","Maggie/openui-composition-product","Maggie/openui-composition-trial","Maggie/planner-visual-authoring","Maggie/planner-visual-requests","Maggie/visual-selection-eval","artifacts/pr-419-live-preview-20261009","automation/pr-maintenance-state","automation/use-effect/callout-disabled-picker-8cf9e49ba5c09471","automation/use-effect/collaboration-options-ref-4e3a5a08a879a5ae","automation/use-effect/room-workspace-effective-access-a57d40866c71bed0","chore/bun-1.4.2","color-controls","color-controls-plan","comments","design-pr-assets","design/archived-decisions-badge","design/channel-route-remount","design/chat-decision-entry","design/conversation-analysis-markers","design/decision-evidence","design/settled-line-icon","dev/integration","diagram-step-controls","feat/liveapp-frontend-pilot","feat/local-experiments","feat/local-launcher-tracer","fix/autolink-mdx-crash","github-pills/2-pills","github-pills/3-hover-card","maggie/app-preview-toolkit","maggie/ci-playwright-install-timeout","maggie/collaborative-visual-decision","maggie/design-audit","maggie/generic-visual-decision-runtime","maggie/impeccable-chopin-metadata","maggie/jev-composed-assessment","maggie/native-document-layouts","maggie/openui-composition-product","maggie/openui-composition-trial","maggie/planner-visual-authoring","maggie/planner-visual-requests","maggie/visual-selection-eval","main","plain-text-fence-chrome","tokens/09-copy","wireframes/2-renderer","wireframes/3-planner","description","Let's compose rich plans together","owner","githubnext","section","","head","empty","pins",[165,166,167],"documents",{"_160":161,"_162":163},"code",{"_156":157,"_158":159},"automations",{"_153":154,"_155":-5},"delivery",{"_151":49,"_152":-5},"tag","04zvKQ8QOrDUF8TO1Ovz0Zy8_TT","releases","applications","workflows",3,"deployments","commits",1000,"changes",13,"counts",{"_164":163},"total",11,"issue",{"_168":158,"_170":181,"_15":158,"_172":182,"_52":174,"_175":31,"_176":174,"_177":159},{"_168":178,"_170":179,"_15":178,"_172":180,"_52":174,"_175":31,"_176":174,"_177":49},{"_168":169,"_170":171,"_15":169,"_172":173,"_52":174,"_175":31,"_176":174,"_177":163},"id","issues","name","Issues","filters",{},true,"saved","pinnable","count","tasks","Tasks",{},"Changes",{},{"_168":158,"_170":181,"_15":158,"_172":226,"_52":174,"_175":31,"_176":174},{"_168":178,"_170":179,"_15":178,"_172":225,"_52":174,"_175":31,"_176":174},{"_168":169,"_170":171,"_15":169,"_172":224,"_52":174,"_175":31,"_176":174},{"_168":221,"_170":222,"_15":221,"_172":223,"_52":31,"_175":31,"_176":174},{"_168":218,"_170":219,"_15":218,"_172":220,"_52":31,"_175":31,"_176":174},{"_168":153,"_170":216,"_15":145,"_172":217,"_52":31,"_175":31,"_176":174},{"_168":155,"_170":213,"_15":214,"_172":215,"_52":31,"_175":31,"_176":174},{"_168":151,"_170":211,"_15":151,"_172":212,"_52":31,"_175":31,"_176":174},{"_168":207,"_170":208,"_15":209,"_172":210,"_52":31,"_175":31,"_176":174},{"_168":141,"_170":205,"_15":141,"_172":206,"_52":31,"_175":31,"_176":31},{"_168":202,"_170":203,"_15":202,"_172":204,"_52":31,"_175":31,"_176":31},{"_168":199,"_170":200,"_15":199,"_172":201,"_52":31,"_175":31,"_176":31},{"_168":196,"_170":197,"_15":196,"_172":198,"_52":31,"_175":31,"_176":31},"decisions","Decisions",{},"changelog","Changelog",{},"roadmap","Roadmap",{},"Documents",{},"activity","Activity","insights",{},"Releases",{},"Deployments","automations/deployments",{},"Workflows",{},"discussions","Discussions",{},"goals","Goals",{},{},{},{},"groups","user","agents",[],"now",1794506905300,"sidebar","expanded"]