feat: validate contact and group search args

internal/tools/isphere_groups_test.go

@@ -79,3 +79,51 @@ func TestISphereSearchGroupsToolReturnsJIDGroups(t *testing.T) {
 		t.Fatalf("source queries = %+v, want one unbounded receive query", fake.queries)
 	}
 }
+
+func TestISphereSearchGroupsToolValidatesContractArgs(t *testing.T) {
+	fake := &fakeReceiveMessagesSource{
+		result: isphere.ReceiveMessagesResult{Messages: []isphere.Message{{
+			ID:               "msg-group-1",
+			ConversationType: "groupchat",
+			SenderID:         "project-room@conference.imopenfire1-lanzhou",
+			ReceiverID:       "user@imopenfire1-lanzhou",
+		}}},
+	}
+	session, cleanup := connectToolsTestSession(t, func(server *mcp.Server) {
+		RegisterISphereGroupTools(server, fake)
+	})
+	defer cleanup()
+
+	callResult, err := session.CallTool(context.Background(), &mcp.CallToolParams{
+		Name: ToolNameSearchGroups,
+		Arguments: map[string]any{
+			"query":             "project",
+			"source_preference": "local_readonly",
+			"include_archived":  true,
+			"cursor":            "",
+			"limit":             10,
+		},
+	})
+	if err != nil {
+		t.Fatalf("call with safe contract args: %v", err)
+	}
+	if callResult.IsError {
+		t.Fatalf("call result is error: %+v", callResult)
+	}
+
+	bridgeResult, err := session.CallTool(context.Background(), &mcp.CallToolParams{
+		Name:      ToolNameSearchGroups,
+		Arguments: map[string]any{"query": "project", "source_preference": "bridge"},
+	})
+	if err == nil && !bridgeResult.IsError {
+		t.Fatalf("bridge source_preference was accepted before connector exists")
+	}
+
+	cursorResult, err := session.CallTool(context.Background(), &mcp.CallToolParams{
+		Name:      ToolNameSearchGroups,
+		Arguments: map[string]any{"query": "project", "cursor": "next-page"},
+	})
+	if err == nil && !cursorResult.IsError {
+		t.Fatalf("non-empty cursor was accepted before pagination exists")
+	}
+}