test(hygiene): add manifest and package parity regression test, sync test script, update llms.txt & changelog [2026-08-14]

Author: lukisch

CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes to `ellmos-blender-use-mcp` are tracked here.
 
 ## 0.1.0-alpha.7 - 2026-07-31
 
+### Maintenance (2026-08-14)
+- Technical Hygiene & Maintenance Check (Pfad A): Added automated regression test `test/manifest-parity.test.js` guarding version, name, license, tools count, and package file integrity across `package.json`, `server.json`, `glama.json`, and filesystem.
+- Updated `package.json` test script to include manifest parity test.
+- Synchronized `llms.txt` Last-checked timestamp to `2026-08-14`.
+- Verified 100% test suite pass (privacy hygiene, runtime memory safety, manifest & file packaging parity) and clean syntax check (`npm run build`).
+
 ### Security (2026-08-10)
 - Refreshed transitive `fast-uri` (3.1.4 to 3.1.5) and `hono` (4.12.32 to 4.13.1) dependencies; `npm audit` now reports zero vulnerabilities.
 

llms.txt

@@ -72,5 +72,6 @@ ellmos-blender-use-mcp
 - `THIRD_PARTY_LICENSES.md`: dependency and prior-art license review.
 - `src/index.js`: MCP server entrypoint and tool definitions.
 - `test/privacy-hygiene.test.js`: regression test guarding against leaked local user-profile paths.
+- `test/manifest-parity.test.js`: automated regression test guarding manifest, file package, and metadata parity.
 
-## Last-checked: 2026-08-13
+## Last-checked: 2026-08-14

package.json

@@ -21,7 +21,7 @@
   ],
   "scripts": {
     "build": "node --check src/index.js",
-    "test": "node test/privacy-hygiene.test.js && node test/runtime-safety.test.js",
+    "test": "node test/privacy-hygiene.test.js && node test/runtime-safety.test.js && node test/manifest-parity.test.js",
     "start": "node src/index.js",
     "prepublishOnly": "npm run build"
   },

test/manifest-parity.test.js

@@ -0,0 +1,32 @@
+import assert from "node:assert/strict";
+import { existsSync, readFileSync } from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+
+const pkg = JSON.parse(readFileSync(path.join(root, "package.json"), "utf8"));
+const server = JSON.parse(readFileSync(path.join(root, "server.json"), "utf8"));
+const glama = JSON.parse(readFileSync(path.join(root, "glama.json"), "utf8"));
+
+// 1. Version parity across manifests
+assert.equal(server.version, pkg.version, "server.json version mismatch");
+assert.equal(glama.version, pkg.version, "glama.json version mismatch");
+assert.equal(server.packages[0].version, pkg.version, "server.json package[0] version mismatch");
+
+// 2. Package and identifier parity
+assert.equal(server.packages[0].identifier, pkg.name, "server.json package identifier mismatch");
+assert.equal(glama.name, pkg.name, "glama.json package name mismatch");
+assert.equal(server.name, pkg.mcpName, "server.json MCP name mismatch");
+
+// 3. License parity
+assert.equal(glama.license, pkg.license, "glama.json license mismatch");
+
+// 4. Packaging files existence
+for (const relPath of pkg.files) {
+  const target = path.join(root, relPath);
+  assert.ok(existsSync(target), `Packaged file or directory missing: ${relPath}`);
+}
+
+// 5. Tool count consistency in glama.json
+assert.equal(glama.tools.count, 3, "glama.json tool count mismatch (expected 3)");