TORCH/test/fleet/mcp-adapter.test.mjs

import assert from 'node:assert/strict';
import { execFileSync, spawn } from 'node:child_process';
import { mkdtempSync, writeFileSync } from 'node:fs';
import { tmpdir } from 'node:os';
import { join } from 'node:path';
import test from 'node:test';
import { createClaudeAdapter } from '../../src/adapters/claude.mjs';
import { createCodexAdapter } from '../../src/adapters/codex.mjs';
import { openControlPlane } from '../../src/control-plane/service.mjs';
import { analyzeRepository } from '../../src/kernel/analyze.mjs';
import { proposeDomains } from '../../src/kernel/domains.mjs';
import { inspectRepository } from '../../src/kernel/git.mjs';
import { installProject } from '../../src/kernel/install.mjs';
import {
  callTorchTool, createTorchToolset, TORCH_CORE_MCP_TOOL_NAMES, TORCH_MCP_TOOL_NAMES,
} from '../../src/mcp/tools.mjs';

const MCP_SERVER = new URL('../../src/mcp/server.mjs', import.meta.url).pathname;

function fixture() {
  const root = mkdtempSync(join(tmpdir(), 'torch-mcp-'));
  execFileSync('git', ['init', '-b', 'main', root]);
  execFileSync('git', ['-C', root, 'config', 'user.email', '[email protected]']);
  execFileSync('git', ['-C', root, 'config', 'user.name', 'TORCH Test']);
  writeFileSync(join(root, 'app.js'), 'export const app = true;\n');
  execFileSync('git', ['-C', root, 'add', '.']);
  execFileSync('git', ['-C', root, 'commit', '-m', 'fixture']);
  const repository = inspectRepository(root);
  const proposal = proposeDomains({ repository, analysis: analyzeRepository(repository) });
  proposal.review = {
    status: 'approved', reviewedAt: '2026-09-27T00:00:00Z', reviewedBy: 'fixture-owner', notes: [],
  };
  const env = { ...process.env, XDG_DATA_HOME: join(root, '.data') };
  installProject({ repository, proposal, env, projectId: 'mcp-fixture' });
  return { root, env, worker: proposal.domains[0].id };
}

test('SCN-mcp-parity: every specified MCP tool exists and invokes the same durable service as CLI callers', () => {
  const context = fixture();
  const control = openControlPlane({ repositoryRoot: context.root, env: context.env });
  assert.deepEqual([...createTorchToolset(control).keys()], TORCH_CORE_MCP_TOOL_NAMES);
  const sent = callTorchTool(control, 'torch_send_message', {
    sender: 'session-manager', recipient: context.worker, body: 'MCP-visible task', task: 'TASK-MCP',
  });
  const read = callTorchTool(control, 'torch_read_messages', {
    recipient: context.worker, unacknowledged_only: true,
  });
  assert.equal(read.messages[0].id, sent.id);
  assert.equal(read.messages[0].references.task, 'TASK-MCP');
  const owner = callTorchTool(control, 'torch_who_owns', { path: 'app.js' });
  assert.equal(owner.owners.some((candidate) => candidate.areaId === context.worker), true);
  assert.throws(
    () => callTorchTool(control, 'torch_send_message', { sender: 'forged', recipient: context.worker, body: 'No' }),
    (error) => error.code === 'UNKNOWN_FLEET_IDENTITY',
  );
  assert.throws(
    () => callTorchTool(control, 'torch_send_message', {
      sender: 'session-manager', recipient: context.worker, body: 'Impersonated manager',
    }, { actorId: context.worker }),
    (error) => error.code === 'FLEET_IDENTITY_MISMATCH',
  );
  control.close();
});

test('SCN-approval-request: named AI approver receives a durable request and only that approver can decide', () => {
  const context = fixture();
  const control = openControlPlane({ repositoryRoot: context.root, env: context.env });
  const requester = createTorchToolset(control, { actorId: context.worker });
  const request = requester.get('torch_request_approval').invoke({
    approver: 'session-manager', title: 'Review API boundary', summary: 'Confirm this interface before implementation.',
    task: 'TASK-APPROVAL', evidence: 'docs/api.md',
  });
  assert.equal(request.status, 'pending');
  assert.equal(requester.get('torch_list_approvals').invoke({}).approvals[0].id, request.id);
  assert.throws(
    () => requester.get('torch_decide_approval').invoke({ approval_id: request.id, decision: 'approved' }),
    (error) => error.code === 'APPROVER_AUTHORITY_REQUIRED',
  );
  const manager = createTorchToolset(control, { actorId: 'session-manager' });
  const decided = manager.get('torch_decide_approval').invoke({
    approval_id: request.id, decision: 'approved', expected_revision: request.revision, note: 'Contract reviewed.',
  });
  assert.equal(decided.status, 'approved');
  assert.equal(decided.decidedBy, 'session-manager');
  assert.equal(control.readMessages({ recipient: context.worker }).some((message) =>
    message.kind === 'approval-decision' && message.references.task === 'TASK-APPROVAL'), true);
  assert.throws(
    () => manager.get('torch_decide_approval').invoke({ approval_id: request.id, decision: 'rejected' }),
    (error) => error.code === 'APPROVAL_NOT_PENDING',
  );
  assert.throws(
    () => requester.get('torch_list_approvals').invoke({ actor_id: 'owner' }),
    (error) => error.code === 'UNKNOWN_FLEET_IDENTITY',
  );
  control.close();
});

test('SCN-claude-adapter: planning is deterministic, capabilities are honest, and no process launches without authority', () => {
  const context = fixture();
  const calls = [];
  const adapter = createClaudeAdapter({
    executable: '/opt/claude/bin/claude',
    idFactory: () => 'runtime-123',
    runner: (command, args) => {
      calls.push({ command, args });
      if (args[0] === 'agents') return { status: 0, stdout: '[{"sessionId":"runtime-123","status":"idle"}]' };
      return { status: 0, stdout: '' };
    },
  });
  assert.equal(adapter.capabilities.liveSteering, false);
  assert.equal(adapter.capabilities.sendOrSteer, 'durable-fallback');
  const configuration = adapter.configure({
    repositoryRoot: context.root, areaId: context.worker, mcpEntry: MCP_SERVER,
  });
  assert.equal(configuration.mcp.name, `torch-${context.worker}`);
  assert.equal(configuration.mcp.args.at(-1), context.worker);
  const launch = adapter.createSession({
    areaId: context.worker, title: 'Core', worktree: '/tmp/core', promptFile: '/tmp/core.md',
    firstMessage: 'Resume TASK-1.', model: 'opus', mcp: configuration.mcp,
  });
  assert.equal(launch.runtimeSessionId, null);
  assert.equal(launch.requiresRuntimeIdCapture, true);
  assert.deepEqual(launch.launch.args.slice(0, 5), [
    '--bg', '--model', 'opus', '-n', 'TORCH · Core',
  ]);
  assert.equal(launch.launch.args.includes('--session-id'), false);
  const mcpIndex = launch.launch.args.indexOf('--mcp-config');
  const launchMcp = JSON.parse(launch.launch.args[mcpIndex + 1]).mcpServers[`torch-${context.worker}`];
  assert.equal(launchMcp.command, process.execPath);
  assert.equal(launchMcp.args.at(-1), context.worker);
  assert.equal(calls.length, 0, 'creating a launch plan must not execute Claude');
  assert.equal(adapter.captureRuntimeId({
    areaId: context.worker, stdout: 'runtime-123\n',
  }).runtimeSessionId, 'runtime-123');
  assert.throws(
    () => adapter.captureRuntimeId({ areaId: context.worker, stdout: 'starting\nruntime-123\n' }),
    (error) => error.code === 'RUNTIME_ID_NOT_CAPTURED',
  );
  assert.equal(adapter.getStatus({ runtimeSessionId: 'runtime-123' }).status, 'idle');
  assert.equal(calls.length, 1);
  assert.throws(() => adapter.installHooks(), (error) => error.code === 'RUNTIME_CAPABILITY_UNSUPPORTED');

  const noRunner = createClaudeAdapter({ idFactory: () => 'never-run' });
  assert.throws(() => noRunner.listSessions(), (error) => error.code === 'RUNTIME_EXECUTION_NOT_AUTHORIZED');

  const stoppedCalls = [];
  const stoppable = createClaudeAdapter({
    runner: (command, args) => {
      stoppedCalls.push({ command, args });
      if (args[0] === 'agents') {
        return { status: 0, stdout: '[{"sessionId":"owned-session","status":"idle","cwd":"/tmp/owned-worktree"}]' };
      }
      return { status: 0, stdout: '' };
    },
  });
  const stopped = stoppable.stopSession({
    runtimeSessionId: 'owned-session', worktree: '/tmp/owned-worktree',
  });
  assert.equal(stopped.stopped, true);
  assert.equal(stopped.verifiedWorktree, '/tmp/owned-worktree');
  assert.deepEqual(stoppedCalls.map((call) => call.args[0]), ['agents', 'stop']);
  assert.throws(
    () => stoppable.stopSession({ runtimeSessionId: 'owned-session', worktree: '/tmp/not-owned' }),
    (error) => error.code === 'RUNTIME_OWNERSHIP_MISMATCH',
  );
  const unverifiable = createClaudeAdapter({
    runner: () => ({ status: 0, stdout: '[{"sessionId":"opaque-session","status":"idle"}]' }),
  });
  assert.throws(
    () => unverifiable.stopSession({ runtimeSessionId: 'opaque-session', worktree: '/tmp/owned-worktree' }),
    (error) => error.code === 'RUNTIME_OWNERSHIP_UNVERIFIED',
  );
});

test('SCN-codex-adapter: turns are resumable, identity-bound, durable, and capability-honest', () => {
  const context = fixture();
  const control = openControlPlane({ repositoryRoot: context.root, env: context.env });
  const calls = [];
  const adapter = createCodexAdapter({
    executable: '/opt/codex/bin/codex',
    runner: (command, args) => { calls.push({ command, args }); return { status: 1, stderr: 'not attached' }; },
  });
  assert.deepEqual(adapter.configuration, {
    model: 'gpt-6-luna', reasoning: 'high',
    launchPolicy: { approval: 'approve-for-me' },
  });
  const configuration = adapter.configure({
    repositoryRoot: context.root, areaId: context.worker, mcpEntry: MCP_SERVER,
  });
  assert.equal(configuration.mutationPerformed, false);
  assert.equal(configuration.mcp.command, process.execPath);
  assert.equal(configuration.mcp.args[0], MCP_SERVER);
  assert.equal(configuration.mcp.args.includes(context.worker), true);

  const launch = adapter.createSession({
    areaId: context.worker, worktree: '/tmp/codex-core', promptFile: '/tmp/codex-core.md',
    firstMessage: 'Resume TASK-2.', model: 'gpt-test', mcp: configuration.mcp,
  });
  assert.equal(launch.runtimeSessionId, null);
  assert.equal(launch.requiresRuntimeIdCapture, true);
  assert.equal(launch.completionState, 'idle');
  assert.deepEqual(launch.launch.args.slice(0, 3), ['--cd', '/tmp/codex-core', '--approve-for-me']);
  assert.equal(launch.launch.args.includes('--sandbox'), false);
  assert.equal(launch.launch.args.indexOf('--approve-for-me') < launch.launch.args.indexOf('exec'), true);
  assert.equal(launch.launch.args.includes('--model'), true);
  assert.equal(launch.launch.args.includes('gpt-test'), true);
  assert.equal(launch.launch.args.includes('model_reasoning_effort="high"'), true);
  assert.equal(launch.launch.args.indexOf('model_reasoning_effort="high"') < launch.launch.args.indexOf('exec'), true);
  assert.deepEqual(launch.launch.args.slice(launch.launch.args.indexOf('exec'), launch.launch.args.indexOf('exec') + 2), [
    'exec', '--json',
  ]);
  assert.equal(launch.launch.args.includes(`mcp_servers.torch-${context.worker}.command=${JSON.stringify(process.execPath)}`), true);
  assert.equal(launch.launch.args.some((arg) => arg.includes(MCP_SERVER)), true);
  assert.equal(calls.length, 0, 'creating a launch plan must not execute Codex');
  assert.equal(adapter.captureRuntimeId({
    areaId: context.worker,
    stdout: '{"type":"thread.started","thread_id":"codex-thread-123"}\n{"type":"turn.completed"}\n',
  }).runtimeSessionId, 'codex-thread-123');

  const resumed = adapter.resumeSession({
    areaId: context.worker, runtimeSessionId: 'codex-thread-123', worktree: '/tmp/codex-core',
    message: 'Continue.', mcp: configuration.mcp,
  });
  assert.equal(resumed.launch.args.includes('--sandbox'), false);
  assert.equal(resumed.launch.args.indexOf('--cd') < resumed.launch.args.indexOf('exec'), true);
  assert.equal(resumed.launch.args.indexOf('--approve-for-me') < resumed.launch.args.indexOf('exec'), true);
  assert.equal(resumed.launch.args.indexOf('exec') < resumed.launch.args.indexOf('resume'), true);
  assert.equal(resumed.launch.args.indexOf('resume') < resumed.launch.args.indexOf('--json'), true);
  assert.equal(resumed.launch.args.includes('codex-thread-123'), true);
  assert.equal(resumed.launch.args.includes('model_reasoning_effort="high"'), true);
  assert.equal(resumed.launch.args.some((arg) => arg.includes(MCP_SERVER)), true);

  const delivery = adapter.sendOrSteer({
    controlPlane: control, recipient: context.worker, body: 'Check your durable inbox.',
    runtimeSessionId: 'codex-thread-123',
  });
  assert.equal(delivery.delivery, 'durable');
  assert.equal(delivery.liveSteeringAttempted, true);
  assert.equal(control.readMessages({ recipient: context.worker }).at(-1).body, 'Check your durable inbox.');
  assert.throws(() => adapter.listSessions(), (error) => error.code === 'RUNTIME_CAPABILITY_UNSUPPORTED');
  assert.throws(() => adapter.stopSession(), (error) => error.code === 'RUNTIME_CAPABILITY_UNSUPPORTED');
  control.close();
});

test('SCN-mcp-stdio: an MCP host can initialize and list the TORCH tool surface over stdio', async () => {
  const context = fixture();
  const child = spawn(process.execPath, [MCP_SERVER, '--root', context.root, '--area', context.worker], {
    cwd: context.root, env: context.env, stdio: ['pipe', 'pipe', 'pipe'],
  });
  const responses = new Map();
  let stdout = '';
  let stderr = '';
  child.stderr.on('data', (chunk) => { stderr += chunk; });
  child.stdout.on('data', (chunk) => {
    stdout += chunk;
    const lines = stdout.split('\n');
    stdout = lines.pop();
    for (const line of lines.filter(Boolean)) {
      const message = JSON.parse(line);
      if (message.id !== undefined) responses.get(message.id)?.(message);
    }
  });
  const request = (message) => new Promise((resolve, reject) => {
    const timeout = setTimeout(() => reject(new Error(`MCP response timeout. stderr: ${stderr}`)), 5000);
    responses.set(message.id, (response) => { clearTimeout(timeout); resolve(response); });
    child.stdin.write(`${JSON.stringify(message)}\n`);
  });
  try {
    const initialized = await request({
      jsonrpc: '2.0', id: 1, method: 'initialize',
      params: { protocolVersion: '2025-06-18', capabilities: {}, clientInfo: { name: 'torch-test', version: '1.0.0' } },
    });
    assert.equal(initialized.result.serverInfo.name, 'torch-agent-fleet');
    child.stdin.write(`${JSON.stringify({ jsonrpc: '2.0', method: 'notifications/initialized' })}\n`);
    const listed = await request({ jsonrpc: '2.0', id: 2, method: 'tools/list', params: {} });
    assert.deepEqual(listed.result.tools.map((tool) => tool.name), TORCH_MCP_TOOL_NAMES);
  } finally {
    child.stdin.end();
    await new Promise((resolve) => {
      const timeout = setTimeout(() => { child.kill('SIGTERM'); resolve(); }, 1000);
      child.once('exit', () => { clearTimeout(timeout); resolve(); });
    });
  }
});