fix(actor): read /v1/actor response from top level instead of res.actor (#32)

Huntress's GET /v1/actor returns the actor shape ({ reseller, account,
user }) at the TOP LEVEL of the response body — unlike most other
endpoints, it is not wrapped in { actor: ... }. ActorResource.get()
requested { actor: Actor } and returned res.actor, which was always
undefined in production.

Downstream, huntress-mcp JSON.stringify(undefined) produced a
{ type: 'text', text: undefined } content block, failing MCP Zod
validation (invalid_union on content[0]) on every huntress_accounts_actor
call — surfaced by the EpiOn tool audit.

The unit test never caught it because the MSW mock wrapped the payload
as { actor: {...} }, mirroring the SDK's wrong assumption. The mock now
serves the real unwrapped shape and the test asserts the full Actor.

Author: asachs01

src/resources/actor.ts

@@ -5,7 +5,8 @@ export class ActorResource {
   constructor(private readonly http: HttpClient) {}
 
   async get(): Promise<Actor> {
-    const res = await this.http.request<{ actor: Actor }>('/v1/actor');
-    return res.actor;
+    // Unlike most Huntress endpoints, /v1/actor returns the actor shape at
+    // the top level of the response — it is NOT wrapped in { actor: ... }.
+    return this.http.request<Actor>('/v1/actor');
   }
 }

tests/mocks/handlers.ts

@@ -9,9 +9,13 @@ export const handlers = [
     })
   ),
 
+  // The real /v1/actor endpoint returns the actor shape at the TOP LEVEL —
+  // it is NOT wrapped in { actor: ... } like most other Huntress endpoints.
   http.get(`${BASE_URL}/v1/actor`, () =>
     HttpResponse.json({
-      actor: { reseller: null, account: { id: 1, name: 'Test Account' }, user: { id: 1, email: 'test@example.com', name: 'Test User' } },
+      reseller: null,
+      account: { id: 1, name: 'Test Account' },
+      user: { id: 1, email: 'test@example.com', name: 'Test User' },
     })
   ),
 

tests/unit/client.test.ts

@@ -13,9 +13,12 @@ describe('HuntressClient', () => {
   });
 
   describe('actor', () => {
-    it('should get actor', async () => {
+    it('should get actor from the unwrapped top-level response', async () => {
       const actor = await client.actor.get();
-      expect(actor.user?.email).toBe('test@example.com');
+      expect(actor).toBeDefined();
+      expect(actor.reseller).toBeNull();
+      expect(actor.account).toEqual({ id: 1, name: 'Test Account' });
+      expect(actor.user).toEqual({ id: 1, email: 'test@example.com', name: 'Test User' });
     });
   });