import { randomBytes } from "node:crypto"; import { expect } from "@effect/vitest";import { Effect } from "effect";import { composePluginApi } from "@executor-js/api/server";import {  MICROSOFT_AUTH_TEMPLATE_SLUG,  MICROSOFT_AUTHORIZATION_URL,  MICROSOFT_GRAPH_OPENAPI_URL,  MICROSOFT_TOKEN_URL,  microsoftCatalog,  microsoftGraphAdapter,} from "@executor-js/plugin-openapi/providers/microsoft";import { openApiHttpPlugin } from "@executor-js/plugin-openapi/api";import {  AuthTemplateSlug,  ConnectionName,  IntegrationSlug,  OAuthClientSlug,} from "@executor-js/sdk/shared"; import { scenario } from "../src/scenario";import { Api, Target } from "../src/services"; const api = composePluginApi([  openApiHttpPlugin({ presets: microsoftCatalog, specFormats: [microsoftGraphAdapter] }),] as const); type ToolView = {  readonly name: string;}; const unique = (prefix: string) => `${prefix}_${randomBytes(4).toString("hex")}`;const MICROSOFT_FILES_PRESET_ID = "files"; // Compiling the Graph spec inside dev workerd needs more headroom than GitHub's// 2-core runners have. Local runs and the production Workers streaming path are// unaffected, so CI keeps this narrow catalog scenario quarantined.const CI_GRAPH_SPEC_SKIP = process.env.CI  ? "compiling the full Microsoft Graph spec exhausts the 2-core CI runner and kills the dev stack for the rest of the shard"  : undefined; scenario(  "Microsoft Graph: catalog add stores the OneDrive files service",  { timeout: 180_000, skip: CI_GRAPH_SPEC_SKIP },  Effect.gen(function* () {    const target = yield* Target;    const { client: makeApiClient } = yield* Api;    const identity = yield* target.newIdentity();    const client = yield* makeApiClient(api, identity);     const integration = unique("msgraph_files");    const connection = ConnectionName.make("main");    const oauthClient = OAuthClientSlug.make(unique("msgraph_app"));     yield* Effect.ensuring(      Effect.gen(function* () {        const added = yield* client.openapi.addSpec({          payload: {            spec: {              kind: "url",              url: `${MICROSOFT_GRAPH_OPENAPI_URL}#preset=${MICROSOFT_FILES_PRESET_ID}`,            },            slug: integration,            name: "Microsoft Graph Files",            family: "microsoft",            specFormat: "microsoft-graph",          },        });        expect(added.slug, "the Microsoft Graph integration keeps the requested slug").toBe(          integration,        );        expect(          added.toolCount,          "the Microsoft files catalog preset extracts a focused operation subtree",        ).toBeGreaterThan(10);         const config = yield* client.openapi.getConfig({          params: { slug: integration },        });        const delegatedScopes = config?.authenticationTemplate?.flatMap((template) =>          template.slug === MICROSOFT_AUTH_TEMPLATE_SLUG && template.kind === "oauth2"            ? [...template.scopes]            : [],        );        expect(delegatedScopes, "the files delegated OAuth asks for file scopes").toContain(          "Files.ReadWrite.All",        );         yield* client.oauth.createClient({          payload: {            owner: "org",            slug: oauthClient,            authorizationUrl: MICROSOFT_AUTHORIZATION_URL,            tokenUrl: MICROSOFT_TOKEN_URL,            grant: "authorization_code",            clientId: "client-id",            clientSecret: "client-secret",          },        });         const started = yield* client.oauth.start({          payload: {            client: oauthClient,            clientOwner: "org",            owner: "org",            name: ConnectionName.make("oauth"),            integration: IntegrationSlug.make(integration),            template: AuthTemplateSlug.make(MICROSOFT_AUTH_TEMPLATE_SLUG),          },        });        expect(started.status, "authorization-code OAuth returns a browser redirect").toBe(          "redirect",        );        const authorizationUrl = started.status === "redirect" ? started.authorizationUrl : "";        const authorizeUrl = new URL(authorizationUrl || "https://invalid.example");        expect(          authorizeUrl.toString().length,          "Microsoft files OAuth authorize URLs stay under ordinary proxy limits",        ).toBeLessThan(2_000);        expect(          authorizeUrl.searchParams.get("scope"),          "Microsoft files OAuth asks for the focused scope set",        ).toBe(delegatedScopes?.join(" "));         yield* client.connections.create({          payload: {            owner: "org",            name: connection,            integration: IntegrationSlug.make(integration),            template: AuthTemplateSlug.make(MICROSOFT_AUTH_TEMPLATE_SLUG),            value: "token-xyz",          },        });         const tools = yield* client.tools.list({          query: { integration: IntegrationSlug.make(integration), connection },        });        const names = tools.map((tool: ToolView) => tool.name);        const driveTools = names.filter((name) => name.toLowerCase().includes("drive"));        const shareTools = names.filter((name) => name.toLowerCase().includes("share"));        expect(driveTools, "the retrieved catalog includes Microsoft drive operations").not.toEqual(          [],        );        expect(          shareTools,          "the retrieved catalog includes Microsoft sharing operations",        ).not.toEqual([]);      }),      Effect.gen(function* () {        yield* client.connections          .remove({            params: {              owner: "org",              integration: IntegrationSlug.make(integration),              name: connection,            },          })          .pipe(Effect.ignore);        yield* client.openapi          .removeSpec({ params: { slug: IntegrationSlug.make(integration) } })          .pipe(Effect.ignore);        yield* client.oauth          .removeClient({            params: { slug: oauthClient },            payload: { owner: "org" },          })          .pipe(Effect.ignore);      }),    );  }),);