test: cover entity schema cache isolation by scope (PR #396)

[cursor]

Summary

Adds regression tests for the scope-aware live entity schema cache fix in #396. The production fix changed cache keys and bundled snapshot matching, but several critical paths lacked direct test coverage.

Risky behavior now covered

• buildLiveSchemaCacheKey — cache keys must include orgId/projectId for org/project scopes so different tenants do not share cached schemas
• bundledSnapshotMatchesScope — bundled snapshots tied to a specific org/project must not be served to callers with different scope identifiers
• Org-level cache isolation — two org-scoped harness_schema calls with different org_id values must not reuse each other's cached live schemas
• Preload cache warming — preloadBundledEntitySchemas must warm scope-specific keys so preloaded entries do not leak across org/project boundaries

Test files added/updated

File	Changes
tests/tools/entity-schema-cache-keys.test.ts	New — unit tests for buildLiveSchemaCacheKey / buildBundledSchemaKey
tests/tools/entity-schema-bundled.test.ts	bundledSnapshotMatchesScope, org-scope fallback, preload key isolation
tests/tools/harness-schema-tool.test.ts	Org-level live schema cache isolation

Why these tests reduce regression risk

The original bug caused wrong YAML schemas to be returned when agents queried harness_schema for a different org/project than a prior call — a silent data correctness failure with high blast radius across all live entity types (connector, environment, service, etc.). These tests lock the contract at three layers: pure cache-key generation, bundled snapshot gating, and end-to-end tool behavior.

Validation

pnpm test tests/tools/entity-schema-cache-keys.test.ts tests/tools/entity-schema-bundled.test.ts tests/tools/harness-schema-tool.test.ts
# 34 passed

  

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}