ergoveritas1-alt/certscore.ai

Start the CertScore MCP stdio server (packages/certscore-mcp, built to dist/certscore-mcp.mjs) and call tools/list over stdio; it returned 14 tools (initialize + tools/list succeeded with no API key).

cd <host-path> && git log -1 --oneline 2>/dev/null; ls -la; cat README* 2>/dev/null | head -300
echo CDP=$CDP_URL $<env-var>; which python3 node npm pip3 uv 2>&1; python3 --version; ls <host-path> 2>&1
cd <host-path> && cat llms-install.md; echo ----; cat packages/certscore-mcp/README.md | head -150; echo ----; ls packages/certscore-mcp; cat packages/certscore-mcp/package.json 2>/dev/null | head -60
which node npm pnpm corepack; node -v 2>&1; npm -v 2>&1; cat <host-path>; grep -n '"packageManager"\|"engines"' -A3 <host-path> | head
export DEBIAN_FRONTEND=noninteractive; (apt-get update -qq && apt-get install -y -qq nodejs npm >/tmp/apt.log 2>&1); echo rc=$?; node -v; npm -v
export DEBIAN_FRONTEND=noninteractive; sudo -n apt-get update -qq && sudo -n apt-get install -y -qq nodejs npm >/tmp/apt.log 2>&1; echo rc=$?; node -v; npm -v; tail -3 /tmp/apt.log
export NODE_USE_ENV_PROXY=1; cd /tmp && sudo -n npm i -g n >/tmp/n.log 2>&1; echo rc=$?; sudo -n n 22 >>/tmp/n.log 2>&1; echo rc2=$?; hash -r; node -v; sudo -n npm i -g [email protected] >>/tmp/n.log 2>&1; echo rc3=$?; pnpm -v; tail -5 /tmp/n.log
cd <host-path> && cat pnpm-workspace.yaml; export NODE_USE_ENV_PROXY=1; timeout 900 pnpm --filter @certscore/mcp... install --frozen-lockfile=false --ignore-scripts > /tmp/install.log 2>&1; echo rc=$?; tail -25 /tmp/install.log
cd <host-path> && export NODE_USE_ENV_PROXY=1; pnpm --filter @certscore/mcp run build > /tmp/build.log 2>&1; echo rc=$?; tail -15 /tmp/build.log; ls -la packages/certscore-mcp/dist 2>&1
cd <host-path> && head -5 /tmp/build.log; grep -c error /tmp/build.log; sed -n '/"dependencies"/,/}/p' package.json; ls node_modules 2>&1; ls node_modules/@modelcontextprotocol 2>&1; ls ../../node_modules/@modelcontextprotocol 2>&1; ls ../../node_modules/zod 2>&1 | head -3
cd <host-path> && grep -n '"name"\|"build"\|"main"' packages/shared/package.json; export NODE_USE_ENV_PROXY=1; pnpm --filter @website-signal-risk-scanner/shared run build > /tmp/shared.log 2>&1; echo rc=$?; tail -5 /tmp/shared.log; ls packages/shared/dist | grep mcp-response
cd <host-path> && export NODE_USE_ENV_PROXY=1; pnpm --filter @certscore/mcp run build > /tmp/build2.log 2>&1; echo rc=$?; grep -c "error TS" /tmp/build2.log; grep "error TS" /tmp/build2.log | head -5; tail -4 /tmp/build2.log; ls -la packages/certscore-mcp/dist/certscore-mcp.mjs 2>&1
cd <host-path> && export NODE_USE_ENV_PROXY=1; pnpm --filter "@certscore/mcp^..." run build > /tmp/deps.log 2>&1; echo rc=$?; grep -E "ERR_|Failed|failed" /tmp/deps.log | head; pnpm --filter @certscore/mcp run build > /tmp/build3.log 2>&1; echo rc2=$?; grep -c "error TS" /tmp/build3.log; grep "error TS" /tmp/build3.log | head -5; ls -la packages/certscore-mcp/dist/certscore-mcp.mjs 2>&1
cd <host-path> && grep -n -i "stdio\|api_key\|APIKEY\|CERTSCORE_\|npx\|node dist\|certscore-mcp \|light" README.md | sed -n '1,60p'; echo ---; cat server-light.json | head -40; echo; grep -n "process.env" src/*.ts | head
cd /tmp && which node; env -u CERTSCORE_API_KEY timeout 20 node <host-path> <<'EOF' > /tmp/mcp_out.txt 2>/tmp/mcp_err.txt
{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-06-18","capabilities":{},"clientInfo":{"name":"smoke","version":"0"}}}
{"jsonrpc":"2.0","method":"notifications/initialized"}
{"jsonrpc":"2.0","id":2,"method":"tools/list","params":{}}
EOF
echo rc=$?; cat /tmp/mcp_out.txt | cut -c1-600; echo ---stderr; head -c 800 /tmp/mcp_err.txt
cd /tmp && python3 -c "
import json
for l in open('/tmp/mcp_out.txt'):
    d=json.loads(l)
    if 'result' in d and 'tools' in d['result']:
        t=[x['name'] for x in d['result']['tools']]; print(len(t)); print(t)
"; ls -la <host-path> 2>&1; sed -n 1,80p <host-path> | grep -n "validate\|coldpass" | head -30
cd <host-path> && mkdir -p .coldpass && cat > .coldpass/probe.json <<'EOF'
{
  "kind": "mcp",
  "argv": ["/usr/local/bin/node", "<host-path>"],
  "cwd": "<host-path>"
}
EOF
cat > .coldpass/report.json <<'EOF'
{
  "outcome": "working",
  "operation": "Start the CertScore MCP stdio server (packages/certscore-mcp, built to dist/certscore-mcp.mjs) and call tools/list over stdio; it returned 14 tools (initialize + tools/list succeeded with no API key).",
  "operation_scope": "Verified: install, build, server start, tools/list. Not exercised: scan operations (certscore_scan_site etc.), which need a scoped CERTSCORE_API_KEY or the hosted endpoint. The hosted no-auth MCP Light endpoint (https://mcp.certscore.ai/mcp/light) was not contacted; it is remote and was not part of the local build. Full repo typecheck/build/tests were not run beyond the packages needed for this package.",
  "steps": [
    "Read README.md; followed 'Local development setup' scope to the MCP package via packages/certscore-mcp/README.md and llms-install.md",
    "sudo apt-get install -y nodejs npm (apt node v18.19.1 is below workspace engine >=22)",
    "sudo npm i -g n && sudo n 22 (Node v22.23.3)",
    "sudo npm i -g [email protected]",
    "pnpm --filter @certscore/mcp... install --ignore-scripts",
    "pnpm --filter @website-signal-risk-scanner/shared run build",
    "pnpm --filter \"@certscore/mcp^...\" run build",
    "pnpm --filter @certscore/mcp run build (produced dist/certscore-mcp.mjs)",
    "printf initialize+notifications/initialized+tools/list | node dist/certscore-mcp.mjs (tools/list returned 14 tools)"
  ],
  "deviations": [
    "Root README 'Local development setup' step 1 'pnpm install' (full monorepo) was not run; installed only the @certscore/mcp dependency closure with pnpm --filter ...install because the full install is heavy and the task limits scope.",
    "pnpm install was run with --ignore-scripts to avoid postinstall fetches; esbuild and the MCP build still ran successfully.",
    "apt nodejs (v18) was too old for the workspace engine (>=22 <25); installed Node 22 via npm 'n'.",
    "packages/certscore-mcp build failed first with missing @website-signal-risk-scanner/shared/dist; built shared (its tsc exited 2 with implicit-any errors but still emitted dist, which is what the MCP build needs).",
    "packages/certscore-mcp build then failed on missing @certscore/sdk and @certscore/api-contracts; built the dependency closure with pnpm --filter \"@certscore/mcp^...\" run build, after which the MCP build passed with 0 TS errors."
  ],
  "stuck_step": null,
  "main_blocker": null,
  "suggested_fix": null
}
EOF
python3 -m json.tool .coldpass/probe.json >/dev/null && python3 -m json.tool .coldpass/report.json >/dev/null && echo json-ok; <env-var>=<host-path> python3 -I <host-path> --validate; echo rc=$?