q792602257
e0e9ae7bda
test(mcp): K2 — transport + auth integration scenarios
...
- StreamableHTTP_FullFlow: initialize → tools/list → tools/call
- LegacySSE_FullFlow: same flow over /mcp/sse
- BearerVsQueryToken: header + ?token= both authenticate
- MCPSDKVersionNegotiation: unknown version -> graceful response
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-05-08 13:24:36 +08:00
q792602257
20b449bb37
test(mcp): K3 — scope + visibility + audit integration scenarios
...
- ScopeViolation_Tool: token without create_issue can't call it
- ScopeViolation_Project: token can't access projects outside scope.project_ids
- VisibilityRespect: service-layer visibility blocks private projects
- WriteToolAudit: audit_logs contains via_mcp:true + mcp_token_id
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-05-08 13:20:11 +08:00
q792602257
f2ed098f32
test(mcp): integration scaffold — 14 scenarios per spec §8.2
...
- Matrix dispatcher with 14 sub-test stubs
- Suite struct with setup/cleanup lifecycle
- All sub-tests start as t.Skip stubs; filled in K2-K5
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-05-08 13:11:04 +08:00
q792602257