[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_106":107,"_108":109},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","mcpconformance","name","mcp-client-conformance","path","src/mock-server/stateless.ts","project",{"_22":49,"_11":12,"_35":50,"_51":-5,"_52":44,"_53":54,"_55":54,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":34,"_63":-5,"_64":-5,"_65":66,"_67":68,"_69":-5,"_70":-5,"_71":-5,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":44},"file",{"_22":23,"_11":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":-5,"_13":46},"permalink","https://www.val.town/x/mcpconformance/mcp-client-conformance/code/src/mock-server/stateless.ts","extension","id","6542eff4-2458-4a2c-8c11-597b18725d8d","stateless.ts","fileId","70b91c9e-ad1b-11f1-bc57-1607ee4eb77e","parentId","bdf43a0a-301f-4980-aa94-1f7a9be8bec7","branchId","fdc11199-683b-41f1-a3c5-d5ac53972f86","branchVersion",329,"latest",true,"createdAt",["D",1789346119940],"version",2,"fileType","script","content","/**\n * Stateless mock server: 2026-x lifecycle (SEP-2575).\n *\n * No initialize handshake. Validates `_meta` (protocolVersion /\n * clientCapabilities — `clientInfo` is a SHOULD since spec PR #3002 and is\n * never required) and the `MCP-Protocol-Version` header on every request,\n * serves `server/discover`, and routes other methods to the supplied handlers.\n * Implemented with raw express so it can front-run SDK support.\n */\n\nimport express from 'npm:express@^5.1.0';\nimport { DRAFT_PROTOCOL_VERSION, type SpecVersion } from '../types.ts';\nimport type { JSONRPCRequest } from '../spec-types/2025-11-25.ts';\nimport type { MockHandler, MockServer, RequestHandlers } from './index.ts';\nimport { STATELESS_SPEC_VERSIONS } from '../connection/versions.ts';\nimport { validateWireMessage } from '../validation/wire-schema.ts';\nimport { capabilitiesFromHandlers, listenMockHandler } from './shared.ts';\n\n/**\n * The required per-request `_meta` keys. `io.modelcontextprotocol/clientInfo`\n * is deliberately absent: spec PR #3002 demoted it to SHOULD, so a request\n * without it is valid.\n */\nconst META_KEYS = [\n 'io.modelcontextprotocol/protocolVersion',\n 'io.modelcontextprotocol/clientCapabilities'\n] as const;\n\n/**\n * Operations whose results the 2026-07-28 revision marks cacheable: servers\n * MUST include the caching hints `ttlMs` and `cacheScope` on these results\n * (draft `CacheableResult`, server/utilities/caching).\n */\nexport const CACHEABLE_RESULT_METHODS: ReadonlySet = new Set([\n 'server/discover',\n 'tools/list',\n 'prompts/list',\n 'resources/list',\n 'resources/templates/list',\n 'resources/read'\n]);\n\n/**\n * Fill in the result members the 2026-07-28 revision requires of servers when\n * the handler did not set them itself: every result MUST carry `resultType`,\n * and results of the cacheable operations MUST also carry `ttlMs` and\n * `cacheScope`. Members the handler set are preserved (e.g. a handler may\n * return `resultType: 'input_required'`); only absent (or undefined) ones are\n * filled. A scenario that needs to send a deliberately non-conformant result\n * must build its own server instead of routing through this mock.\n */\nexport function withRequiredDraftResultFields(\n method: string,\n result: unknown\n): unknown {\n if (result === null || typeof result !== 'object' || Array.isArray(result)) {\n return result;\n }\n const stamped: Record = { ...result };\n stamped.resultType ??= 'complete';\n if (CACHEABLE_RESULT_METHODS.has(method)) {\n stamped.ttlMs ??= 0;\n stamped.cacheScope ??= 'private';\n }\n return stamped;\n}\n\ntype IncomingHeaders = Record;\n\nexport type StatelessValidation =\n | { kind: 'reject'; status: number; body: object }\n | { kind: 'handled'; status: number; body: object }\n | {\n kind: 'route';\n id: string | number | null;\n method: string;\n params: Record;\n };\n\n/**\n * Shared SEP-2575 request validation: header presence, `_meta` 3-key check,\n * header/`_meta` version match, version-supported check, and `server/discover`\n * handling. Returns `reject` when validation failed, `handled` when the\n * request was valid and already answered (`server/discover`), and `route`\n * when the caller should dispatch to its own handlers. Consumers write\n * `res.status(v.status).json(v.body)` for `reject` and `handled` alike and\n * route only on `route`.\n *\n * Exported so any mock server that needs a stateless `/mcp` route (e.g.\n * `auth/helpers/createServer.ts`) uses the same validation as this module.\n *\n * `supportedVersions` is the list of wire protocolVersion strings this\n * endpoint accepts; anything else is rejected with -32022 carrying\n * `{ supported, requested }` in the error data, and the list is echoed in\n * the `server/discover` result.\n */\nexport function validateStatelessRequest(\n req: { headers: IncomingHeaders; body: unknown },\n capabilities: Record,\n supportedVersions: readonly string[]\n): StatelessValidation {\n const body = (req.body ?? {}) as Record;\n const id = (body.id ?? null) as string | number | null;\n const method = body.method as string;\n const params = (body.params ?? {}) as Record;\n const meta = params._meta as Record | undefined;\n\n const reject = (status: number, code: number, message: string) =>\n ({\n kind: 'reject',\n status,\n body: { jsonrpc: '2.0', id, error: { code, message } }\n }) as const;\n\n const headerVersion = req.headers['mcp-protocol-version'];\n // initialize is the dated revisions' handshake. A server that supports only\n // modern versions SHOULD name them in any error it returns to an initialize\n // (2026-07-28 basic/versioning), so a dual-era client that opens this way\n // learns what to retry with. It is answered before the header and _meta\n // checks, which would otherwise turn it away without naming a version.\n if (method === 'initialize') {\n return {\n kind: 'reject',\n status: 400,\n body: {\n jsonrpc: '2.0',\n id,\n error: {\n code: -32022,\n message: 'Unsupported protocol version',\n data: {\n supported: supportedVersions,\n requested: String(params.protocolVersion ?? headerVersion ?? '')\n }\n }\n }\n };\n }\n if (!headerVersion) {\n return reject(400, -32020, 'Missing MCP-Protocol-Version header');\n }\n const missing = META_KEYS.filter((k) => meta?.[k] === undefined);\n if (missing.length > 0) {\n return reject(\n 400,\n -32602,\n `Invalid params: missing _meta keys: ${missing.join(', ')}`\n );\n }\n if (meta?.[META_KEYS[0]] !== headerVersion) {\n return reject(\n 400,\n -32020,\n 'MCP-Protocol-Version header does not match _meta.protocolVersion'\n );\n }\n if (\n typeof headerVersion !== 'string' ||\n !supportedVersions.includes(headerVersion)\n ) {\n return {\n kind: 'reject',\n status: 400,\n body: {\n jsonrpc: '2.0',\n id,\n error: {\n code: -32022,\n message: 'Unsupported protocol version',\n data: {\n supported: supportedVersions,\n requested: String(headerVersion)\n }\n }\n }\n };\n }\n if (method === 'server/discover') {\n return {\n kind: 'handled',\n status: 200,\n body: {\n jsonrpc: '2.0',\n id,\n result: withRequiredDraftResultFields(method, {\n supportedVersions,\n capabilities,\n // Spec PR #3002: server identity lives in the result `_meta`, not\n // the DiscoverResult body.\n _meta: {\n 'io.modelcontextprotocol/serverInfo': {\n name: 'conformance-mock-server',\n version: '1.0.0'\n }\n }\n })\n }\n };\n }\n return { kind: 'route', id, method, params };\n}\n\n/**\n * When `specVersion` is given (the runner's resolved `--spec-version`), the\n * server accepts exactly that version. Without it, every known stateless\n * version is accepted.\n */\nexport function createHandlerStateless(\n handlers: RequestHandlers,\n specVersion?: SpecVersion\n): MockHandler {\n const recorded: JSONRPCRequest[] = [];\n const capabilities = capabilitiesFromHandlers(handlers);\n const supportedVersions: readonly string[] = specVersion\n ? [specVersion]\n : STATELESS_SPEC_VERSIONS;\n const wireVersion = specVersion ?? DRAFT_PROTOCOL_VERSION;\n\n const app = express();\n app.use(express.json());\n\n app.post('/mcp', async (req, res) => {\n // Record every JSON-RPC request the client sends (excluding the\n // `server/discover` lifecycle preamble) before validation so rejected\n // requests are captured too, matching the stateful impl and the\n // MockServer.recorded contract.\n const body = req.body as Record | undefined;\n // An unparsed body (wrong or missing Content-Type) is a transport fault\n // surfaced by the HTTP-level checks, not a JSON-RPC message to validate.\n if (body !== undefined) {\n validateWireMessage(wireVersion, req.body, {\n origin: 'implementation',\n context: `client request '${body?.method ?? '(unknown)'}' to stateless mock`\n });\n }\n if (body?.method && body.method !== 'server/discover') {\n recorded.push(req.body as JSONRPCRequest);\n }\n const sendJson = (status: number, payload: object, method?: string) => {\n // JSON-RPC 2.0 mandates `id: null` on error replies when the request id\n // could not be determined, but the spec's RequestId is string|integer;\n // validate with a placeholder id so the mandated null is not recorded\n // as a harness violation (mirrors connection/stateless.ts's\n // withNullIdCarveOut).\n const raw = payload as Record;\n const validated =\n raw.error !== undefined && raw.id === null\n ? { ...raw, id: 0 }\n : payload;\n validateWireMessage(wireVersion, validated, {\n origin: 'harness',\n context: `stateless mock response${method ? ` to '${method}'` : ''}`,\n requestMethod: method\n });\n return res.status(status).json(payload);\n };\n const v = validateStatelessRequest(req, capabilities, supportedVersions);\n if (v.kind !== 'route') {\n return sendJson(\n v.status,\n v.body,\n v.kind === 'handled' ? (body?.method as string) : undefined\n );\n }\n const { id, method, params } = v;\n const error = (status: number, code: number, message: string) =>\n sendJson(status, { jsonrpc: '2.0', id, error: { code, message } });\n\n const handler = handlers[method];\n if (!handler) {\n return error(404, -32601, `Method not found: ${method}`);\n }\n try {\n const result = await handler(params, req.body as JSONRPCRequest);\n return sendJson(\n 200,\n {\n jsonrpc: '2.0',\n id,\n result: withRequiredDraftResultFields(method, result)\n },\n method\n );\n } catch (e) {\n return error(500, -32603, e instanceof Error ? e.message : String(e));\n }\n });\n\n return { listener: app, recorded };\n}\n\nexport async function createServerStateless(\n handlers: RequestHandlers,\n specVersion?: SpecVersion\n): Promise {\n return listenMockHandler(createHandlerStateless(handlers, specVersion));\n}\n","deleted",false,"label",[47,48,24],"src","mock-server","7dcb6042-d92f-40c5-9cc8-0f661f96e58b",["D",1789043604380],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","f4518a30-f52b-4b12-891c-a8fffb7240f8","pinnedFileId","e6dd13e2-ad13-11f1-a612-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a07c12-b73a-76de-b96a-421ce8582af6","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_105":-5},"org",{"_9":10,"_99":100,"_101":-5,"_58":-5,"_102":103,"_104":44},"branch",{"_37":89,"_11":90,"_22":30,"_91":49,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":12,"_98":10},"isOwned",396,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","MCP Conformance","avatar","tier","free","canRestrictVals","profileImageUrl","ctx",{"_82":-5,"_139":140,"_141":142,"_143":144,"_145":44,"_146":44,"_147":44,"_148":34,"_149":-5,"_150":-7,"_151":-7,"_152":66,"_153":44,"_154":44,"_155":-5,"_156":44,"_157":44,"_158":44,"_159":-5},"ENV",{"_110":111,"_112":113,"_114":90,"_115":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]