feat: dashboard Second Brain, essai 7 jours et vérification e-mail

Rendre le dashboard actionnable (inbox, peek, carte mentale), aligner la facturation sur l’essai 7 jours, et bloquer le login e-mail tant que l’adresse n’est pas confirmée.

Co-authored-by: Cursor <cursoragent@cursor.com>

mcp-server/test/test.js

@@ -5,7 +5,7 @@
  * Run with: npm test
  */
 
-import { describe, it, expect, beforeAll, afterAll } from 'vitest';
+import { describe, it, expect, beforeAll, afterAll, beforeEach } from 'vitest';
 import { fileURLToPath } from 'url';
 import { dirname, join } from 'path';
 
@@ -124,9 +124,8 @@ describe('MCP Server - Input Validation', () => {
 
   it('should allow safe HTML', () => {
     const xss = checkXSS({ content: 'Hello <em>world</em>' });
-    // This will be true because we check for any HTML tags
-    // In production, you might want more sophisticated checking
-    expect(xss).toBe(true);
+    // Safe formatting tags are not flagged as XSS
+    expect(xss).toBe(false);
   });
 
   it('should sanitize input', () => {
@@ -206,11 +205,18 @@ describe('MCP Server - Tool Definitions', () => {
     'update_label',
     'delete_label',
     'get_due_reminders',
+    'get_upcoming_reminders',
+    'update_reminder',
+    'find_similar_notes',
+    'get_memory_echo_insights',
+    'dismiss_memory_echo_insight',
+    'get_notes_by_label',
+    'get_note_statistics',
     'export_notes',
     'import_notes',
   ];
 
-  it('should have all expected tools with schemas', () => {
+  it('should have all expected tools with schemas', async () => {
     const { toolSchemas } = await import('../validation.js');
 
     for (const toolName of toolNames) {