test: extend coding standards enforcement and fix handler error paths

[cursor]

Summary

Extends the automated coding-standards guardrails introduced in #406 and fixes two handler error-handling gaps.

Changes

New test suites (pnpm standards:check)

• handler-contract.test.ts — API handlers must import/use toMcpError + errorResult; outer catch blocks throw toMcpError for infrastructure failures; harness_list pagination defaults (page=0, size=20, max=100); no process.stdout.write in src/.
• toolset-extractors.test.ts — Blocks new inline responseExtractor functions outside a grandfathered allowlist; caps inline extractor count at 14 until promoted to extractors.ts.

Registry contract

• registry-contract.test.ts — create/update/delete operations must not use risk: "read" (execute actions with risk: "read" remain allowed — they are intentional read-only queries via harness_execute).

Handler fixes

• harness_describe — Outer try/catch with isUserError → graceful JSON; unexpected failures → toMcpError.
• harness_schema — Catch block now distinguishes user-fixable errors (errorResult) from infrastructure failures (toMcpError).

Verification

pnpm standards:check  # 28 tests pass
pnpm build
pnpm test             # 2145 tests pass

Standards coverage

The suite now enforces the registry-driven architecture rules from docs/coding-standards.md:

Rule	Enforced by
11 fixed MCP tools, no new handlers	architecture.test.ts
Toolset purity (no client/SDK imports)	architecture.test.ts
No console.log / stdout writes	architecture.test.ts, handler-contract.test.ts
Singleton HarnessClient, no raw fetch	architecture.test.ts
Zod v4, .describe() on inputs	architecture.test.ts, registry-metadata.test.ts
Registry registration sync	architecture.test.ts, registry-contract.test.ts
listFilterFields only with list	registry-metadata.test.ts
Write confirmation via elicitation	registry-metadata.test.ts
operationPolicy on every endpoint	registry-contract.test.ts
No risk: read on CRUD ops	registry-contract.test.ts
Shared extractors (no new inline)	toolset-extractors.test.ts
Handler error handling pattern	handler-contract.test.ts

  

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
1 out of 2 committers have signed the CLA.

✅ thisrohangupta
❌ cursoragent
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[thisrohangupta]

Closing as stale: merge conflicts with main and work superseded by merged PRs (#447, #446, #449, #469, #440, #398, etc.) or duplicate agent-generated attempts. Reopen from a fresh branch if still needed.