import { describe, expect, it } from "@effect/vitest"; import { protectedResourceMetadataUrlFor, resourceUrlFor, toolkitSlugFromRequest } from "./auth";import { classifyMcpPath, prepareMcpOrgScope } from "./mount"; describe("cloud MCP toolkit route normalization", () => {  it("classifies toolkit MCP and protected-resource metadata paths", () => {    expect(classifyMcpPath("/mcp/toolkits/deploy")).toEqual({      kind: "mcp",      organizationId: null,      toolkitSlug: "deploy",    });    expect(classifyMcpPath("/acme/mcp/toolkits/deploy")).toEqual({      kind: "mcp",      organizationId: "acme",      toolkitSlug: "deploy",    });    expect(classifyMcpPath("/.well-known/oauth-protected-resource/mcp/toolkits/deploy")).toEqual({      kind: "oauth-protected-resource",      organizationId: null,      toolkitSlug: "deploy",    });    expect(      classifyMcpPath("/.well-known/oauth-protected-resource/acme/mcp/toolkits/deploy"),    ).toEqual({      kind: "oauth-protected-resource",      organizationId: "acme",      toolkitSlug: "deploy",    });  });   it("rewrites org-scoped toolkit metadata to the mounted toolkit metadata route", () => {    const request = new Request(      "https://executor.sh/.well-known/oauth-protected-resource/acme/mcp/toolkits/deploy?x=1",      { headers: { "x-executor-mcp-organization": "spoofed" } },    );     const rewritten = prepareMcpOrgScope(request);    const url = new URL(rewritten.url);     expect(url.pathname).toBe("/.well-known/oauth-protected-resource/mcp/toolkits/deploy");    expect(url.search).toBe("?x=1");    expect(rewritten.headers.get("x-executor-mcp-organization")).toBe("acme");    expect(toolkitSlugFromRequest(rewritten)).toBe("deploy");  });   it("builds toolkit-specific resource and metadata URLs", () => {    expect(resourceUrlFor(null, "deploy")).toBe("https://executor.sh/mcp/toolkits/deploy");    expect(resourceUrlFor("acme", "deploy")).toBe("https://executor.sh/acme/mcp/toolkits/deploy");    expect(protectedResourceMetadataUrlFor(null, "deploy")).toBe(      "https://executor.sh/.well-known/oauth-protected-resource/mcp/toolkits/deploy",    );    expect(protectedResourceMetadataUrlFor("acme", "deploy")).toBe(      "https://executor.sh/.well-known/oauth-protected-resource/acme/mcp/toolkits/deploy",    );  });});