[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_107":108,"_109":110},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","mcpconformance","name","mcp-client-conformance","path","src/scenarios/server/skills/enumeration.ts","project",{"_22":51,"_11":12,"_35":52,"_53":-5,"_54":44,"_55":56,"_57":56,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":34,"_65":-5,"_66":-5,"_67":38,"_68":69,"_70":-5,"_71":-5,"_72":-5,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":84,"_85":86,"_87":88,"_89":44},"file",{"_22":23,"_11":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":-5,"_13":46},"permalink","https://www.val.town/x/mcpconformance/mcp-client-conformance/code/src/scenarios/server/skills/enumeration.ts","extension","id","403f2d2e-4a59-418a-814f-fbfb67094577","enumeration.ts","fileId","b80808ae-ae14-11f1-9f35-1607ee4eb77e","parentId","1c742940-41f3-4821-b71e-e95273d6a26e","branchId","fdc11199-683b-41f1-a3c5-d5ac53972f86","branchVersion",180,"latest",true,"createdAt",["D",1789153943484],"version",0,"fileType","script","content","/**\n * SEP-2640 Skills extension — the `skills/list` and `skills/get` surface.\n *\n * Replaces the former `skill://index.json` scenario. The 2026-08-21 revision of\n * the SEP removed that well-known resource entirely (it appears nowhere in the\n * current text) and replaced it with two methods that every server declaring the\n * extension MUST implement.\n *\n * One scenario, many checks (per AGENTS.md \"fewer scenarios, more checks\").\n * Each check's verbatim spec quote lives next to its check ID in\n * src/seps/sep-2640.yaml, keeping the YAML and this scenario in lock-step.\n *\n * All discovery is dynamic and brand-neutral: the scenario enumerates whatever\n * the server serves and validates the entries it finds, hardcoding no\n * fixture-specific skill name or URI. When the server does not declare the\n * skills extension the checks are SKIPPED (an optional, undeclared capability).\n * An empty listing is explicitly permitted, so entry-level checks SKIP rather\n * than fail against a server with an unenumerable catalog.\n */\n\nimport { isDeepStrictEqual } from 'node:util';\nimport { ClientScenario, ConformanceCheck } from '../../../types.ts';\nimport type { RunContext } from '../../../connection/index.ts';\nimport {\n SKILLS_EXTENSION_ID,\n SKILLS_LIST_METHOD,\n SKILLS_GET_METHOD,\n SKILL_URI_SCHEME,\n SKILL_MANIFEST_FILENAME,\n SKILL_DIGEST_PATTERN,\n RESOURCES_DYNAMIC,\n MAX_RESOURCES_PER_SKILL,\n MAX_TOTAL_SIZE_PER_SKILL,\n FRONTMATTER_RESERVED_PREFIX,\n JSONRPC_INVALID_PARAMS,\n type SkillEntry,\n type SkillResourceEntry,\n declaredSkillsCapability,\n describeValue,\n resourcesCapabilityDeclared,\n isSettingsObject,\n skillsCheck,\n skillsListAll,\n skillsGet,\n settingsAreInline,\n skillNameFromManifestUri,\n skillRootFromManifestUri,\n isDynamicResources,\n resourcesArray,\n entryLabel,\n readResourceText,\n parseFrontmatter\n} from './helpers.ts';\n\nconst CAPABILITY_IDS = [\n 'sep-2640-capability-declaration-inline',\n 'sep-2640-capability-requires-resources',\n 'sep-2640-capability-commits-to-methods',\n 'sep-2640-capability-empty-object'\n] as const;\n\nconst LIST_IDS = [\n 'sep-2640-skills-list-implemented',\n 'sep-2640-skills-list-pagination',\n 'sep-2640-skills-list-entry-atomic',\n 'sep-2640-skills-list-cache-attributes'\n] as const;\n\nconst ENTRY_IDS = [\n 'sep-2640-entry-uri-required',\n 'sep-2640-entry-frontmatter-required',\n 'sep-2640-entry-uri-matches-frontmatter-name',\n 'sep-2640-skill-uri-scheme',\n 'sep-2640-entry-resources-required',\n 'sep-2640-resources-complete',\n 'sep-2640-resources-uri-within-skill',\n 'sep-2640-resources-digest-format',\n 'sep-2640-resources-size-required',\n 'sep-2640-limit-resources-per-skill',\n 'sep-2640-limit-total-size',\n 'sep-2640-metadata-reserved-prefix',\n 'sep-2640-name-naming-rules',\n 'sep-2640-authority-reg-name',\n 'sep-2640-names-should-be-unique'\n] as const;\n\nconst GET_IDS = [\n 'sep-2640-skills-get-implemented',\n 'sep-2640-skills-get-entry-shape',\n 'sep-2640-skills-get-cache-attributes',\n 'sep-2640-skills-get-no-cursor',\n 'sep-2640-skills-get-unknown-uri-invalid-params'\n] as const;\n\n/** Emitted by the read-back pass, which fetches one listed SKILL.md. */\nconst READBACK_IDS = [\n 'sep-2640-skillmd-required',\n 'sep-2640-skillmd-frontmatter',\n 'sep-2640-entry-frontmatter-identical'\n] as const;\n\nconst ALL_CHECK_IDS = [\n ...CAPABILITY_IDS,\n ...LIST_IDS,\n ...ENTRY_IDS,\n ...GET_IDS,\n ...READBACK_IDS\n];\n\n/**\n * Agent Skills naming rules as the SEP defers to them: 1-64 characters,\n * lowercase alphanumeric and hyphens, with no leading, trailing or\n * consecutive hyphens. The leading/trailing rule falls out of the anchored\n * alphanumeric bookends; the consecutive one needs the `(?!.*--)` lookahead.\n */\nconst SKILL_NAME_PATTERN = /^(?!.*--)[a-z0-9]([a-z0-9-]{0,62}[a-z0-9])?$/;\n\n/** RFC 3986 reg-name: unreserved / pct-encoded / sub-delims, case-insensitive. */\nconst REG_NAME_PATTERN = /^(?:[A-Za-z0-9\\-._~!$&'()*+,;=]|%[0-9A-Fa-f]{2})*$/;\n\n/** A URI that no conformant server should serve, for the -32602 probe. */\nconst UNKNOWN_SKILL_URI =\n 'skill://mcp-conformance-nonexistent-skill-9f3a2b/SKILL.md';\n\nfunction joinErrs(errs: string[], limit = 5): string {\n const shown = errs.slice(0, limit).join('; ');\n return errs.length > limit\n ? `${shown} (+${errs.length - limit} more)`\n : shown;\n}\n\nexport class SkillsEnumerationScenario implements ClientScenario {\n name = 'sep-2640-skills-enumeration';\n readonly source = { extensionId: SKILLS_EXTENSION_ID } as const;\n description = `SEP-2640 Skills extension: \\`skills/list\\` enumeration and \\`skills/get\\` retrieval.\n\n**Methods**: \\`skills/list\\`, \\`skills/get\\` (both mandatory for a server declaring \\`io.modelcontextprotocol/skills\\`)\n\n**Requirements covered** (each check carries a verbatim spec excerpt in src/seps/sep-2640.yaml):\n\n- \\`sep-2640-capability-declaration-inline\\` — extension settings sit inline under the identifier, per SEP-2133 (no \\`config\\` envelope)\n- \\`sep-2640-capability-commits-to-methods\\` — declaring the extension commits the server to both methods\n- \\`sep-2640-skills-list-implemented\\` — \\`skills/list\\` is implemented and returns a \\`skills\\` array\n- \\`sep-2640-skills-list-pagination\\` — \\`nextCursor\\` is honoured as a cursor on the next request\n- \\`sep-2640-skills-list-entry-atomic\\` — no skill entry is split across pages\n- \\`sep-2640-entry-uri-required\\` / \\`sep-2640-entry-frontmatter-required\\` / \\`sep-2640-entry-resources-required\\` — the three required entry fields\n- \\`sep-2640-entry-uri-matches-frontmatter-name\\` — the final skill-path segment equals \\`frontmatter.name\\`\n- \\`sep-2640-resources-complete\\` — \\`resources\\` includes an entry matching the skill's own \\`uri\\`, each file once\n- \\`sep-2640-resources-uri-within-skill\\` / \\`sep-2640-resources-digest-format\\` / \\`sep-2640-resources-size-required\\` — the \\`{uri, digest, size}\\` triple\n- \\`sep-2640-limit-resources-per-skill\\` / \\`sep-2640-limit-total-size\\` — 512 entries, 16 MiB\n- \\`sep-2640-metadata-reserved-prefix\\` — frontmatter \\`metadata\\` keys under \\`io.modelcontextprotocol/\\` are reserved\n- \\`sep-2640-skills-get-*\\` — \\`skills/get\\` returns a list-shaped entry, carries no cursor, and answers \\`-32602\\` for an unknown URI\n\n**Discovery is dynamic**: an undeclared extension SKIPs everything; an empty or partial listing is permitted and SKIPs the entry-level checks.`;\n\n async run(ctx: RunContext): Promise {\n const conn = await ctx.connect();\n try {\n const declaration = await declaredSkillsCapability(conn);\n if (!declaration.declared) {\n const reason =\n 'Server did not declare the io.modelcontextprotocol/skills extension; enumeration checks not applicable.';\n return ALL_CHECK_IDS.map((id) =>\n skillsCheck(id, reason, 'SKIPPED', { errorMessage: reason })\n );\n }\n\n // Declared, but possibly with something that is not a settings object.\n // The remaining checks read no settings from a malformed declaration, so\n // they proceed against an empty one rather than aborting: `skills/list`\n // and `skills/get` are still owed by anything that declared at all.\n const declaredValue = declaration.value;\n const wellFormed = isSettingsObject(declaredValue);\n const skills: Record = wellFormed ? declaredValue : {};\n\n const checks: ConformanceCheck[] = [];\n\n // === capability-empty-object ===\n // \"An empty object indicates support for the extension with no optional\n // features.\" The observable half is the type: the declared value MUST be\n // an object, and an empty one is a valid declaration rather than a\n // malformed capability. A server declaring `true` fails here instead of\n // silently skipping the suite.\n checks.push(\n skillsCheck(\n 'sep-2640-capability-empty-object',\n 'An empty object indicates support for the extension with no optional features.',\n wellFormed ? 'SUCCESS' : 'FAILURE',\n wellFormed\n ? {\n details: {\n declaredKeys: Object.keys(skills),\n empty: Object.keys(skills).length === 0\n }\n }\n : {\n errorMessage: `capabilities.extensions[\"${SKILLS_EXTENSION_ID}\"] is ${describeValue(declaredValue)}, not a settings object. An empty object is the way to declare support with no optional features.`,\n details: { observed: declaredValue }\n }\n )\n );\n\n // === capability-declaration-inline ===\n // SEP-2133 (Final) maps an extension identifier straight to its settings\n // object. An envelope hides settings from any spec-following client.\n if (wellFormed) {\n const { inline, envelopeKeys } = settingsAreInline(skills);\n checks.push(\n skillsCheck(\n 'sep-2640-capability-declaration-inline',\n 'Extension settings are a map of extension identifiers to per-extension settings objects; the settings sit directly under the identifier.',\n inline ? 'SUCCESS' : 'FAILURE',\n inline\n ? { details: { settingKeys: Object.keys(skills) } }\n : {\n errorMessage: `capabilities.extensions[\"${SKILLS_EXTENSION_ID}\"] carries envelope key(s) ${envelopeKeys.join(', ')} instead of the settings object itself. SEP-2133 (Final) defines no envelope, and SEP-2640's capability block places directoryRead inline.`,\n details: { envelopeKeys, observed: skills }\n }\n )\n );\n } else {\n const reason =\n 'the declared value is not a settings object, so there are no settings to place inline or in an envelope; see sep-2640-capability-empty-object';\n checks.push(\n skillsCheck(\n 'sep-2640-capability-declaration-inline',\n 'Extension settings are a map of extension identifiers to per-extension settings objects; the settings sit directly under the identifier.',\n 'SKIPPED',\n { errorMessage: reason }\n )\n );\n }\n\n // === capability-requires-resources ===\n // Stated on the stable page as a consequence of the base Resources\n // spec rather than a new obligation: a server serving skill files\n // through resources/read already has to declare `resources`. Checkable\n // here because the declaration is on the wire either way.\n const hasResources = await resourcesCapabilityDeclared(conn);\n checks.push(\n skillsCheck(\n 'sep-2640-capability-requires-resources',\n 'A server declaring this extension MUST also declare the resources capability, because skill files are served through resources/read.',\n hasResources ? 'SUCCESS' : 'FAILURE',\n hasResources\n ? { details: { resources: true } }\n : {\n errorMessage:\n 'the server declares the skills extension but not the base `resources` capability, so a spec-following client has no basis to call resources/read for skill files.'\n }\n )\n );\n\n // === skills/list ===\n const listed = await skillsListAll(conn);\n if ('error' in listed) {\n const reason = `${SKILLS_LIST_METHOD} failed with code ${listed.error.code}: ${listed.error.message}. A server declaring the extension MUST implement it.`;\n checks.push(\n skillsCheck(\n 'sep-2640-capability-commits-to-methods',\n 'Declaring the extension commits the server to skills/list and skills/get.',\n 'FAILURE',\n { errorMessage: reason }\n ),\n skillsCheck(\n 'sep-2640-skills-list-implemented',\n 'A server declaring the extension MUST implement the skills/list method.',\n 'FAILURE',\n { errorMessage: reason }\n )\n );\n for (const id of [\n 'sep-2640-skills-list-pagination',\n 'sep-2640-skills-list-entry-atomic',\n ...ENTRY_IDS,\n ...GET_IDS,\n ...READBACK_IDS\n ]) {\n checks.push(\n skillsCheck(id, 'skills/list is unavailable.', 'SKIPPED', {\n errorMessage: reason\n })\n );\n }\n return checks;\n }\n\n const { entries, pages, truncated } = listed;\n\n checks.push(\n skillsCheck(\n 'sep-2640-skills-list-implemented',\n 'A server declaring the extension MUST implement the skills/list method, which returns the skills it serves. The result MAY be empty.',\n 'SUCCESS',\n {\n details: {\n pages: pages.length,\n entries: entries.length,\n emptyListingPermitted: entries.length === 0\n }\n }\n )\n );\n\n // === skills-list-pagination ===\n // Multi-page runs prove the cursor round-trips. A single page is a clean\n // pass: the contract is \"when nextCursor is present, pass it back\", and\n // skillsListAll did exactly that to reach the end.\n checks.push(\n skillsCheck(\n 'sep-2640-skills-list-pagination',\n 'Pagination mirrors the base protocol: the request accepts an optional cursor, and when the result includes nextCursor the client passes it back.',\n truncated ? 'FAILURE' : 'SUCCESS',\n truncated\n ? {\n errorMessage: `skills/list did not terminate: the server kept returning a nextCursor (or repeated one) across ${pages.length} pages.`\n }\n : { details: { pages: pages.length } }\n )\n );\n\n // === skills-list-entry-atomic ===\n // \"An entry is atomic — a skill's resources set is never split across\n // pages.\" Observable as a URI appearing in more than one page.\n const uriPages = new Map();\n pages.forEach((page, pageIdx) => {\n for (const e of page.entries) {\n if (typeof e.uri !== 'string') continue;\n const seen = uriPages.get(e.uri) ?? [];\n if (!seen.includes(pageIdx)) seen.push(pageIdx);\n uriPages.set(e.uri, seen);\n }\n });\n const split = [...uriPages.entries()]\n .filter(([, p]) => p.length > 1)\n .map(([uri, p]) => `${uri} appears on pages ${p.join(', ')}`);\n checks.push(\n skillsCheck(\n 'sep-2640-skills-list-entry-atomic',\n \"An entry is atomic — a skill's resources set is never split across pages.\",\n split.length === 0 ? 'SUCCESS' : 'FAILURE',\n split.length === 0\n ? { details: { pages: pages.length, distinctUris: uriPages.size } }\n : { errorMessage: joinErrs(split) }\n )\n );\n\n // === skills-list-cache-attributes ===\n // SEP-2549 attributes exist only from 2026-07-28. Below that they are\n // not merely optional, they are undefined by the negotiated schema, so\n // a server that omits them is correct and a WARNING is a false\n // positive. From 2026-07-28 they are required, so a missing one is a\n // FAILURE rather than something to shrug at. Reported by Sam Bloomberg\n // against the Go SDK, which was correct in both directions while this\n // check graded it wrong in both.\n const first = pages[0]?.result ?? {};\n const hasTtl = first.ttlMs !== undefined;\n const hasScope = first.cacheScope !== undefined;\n const cacheAttrsApply = ctx.specVersion >= '2026-07-28';\n\n if (!cacheAttrsApply) {\n checks.push(\n skillsCheck(\n 'sep-2640-skills-list-cache-attributes',\n \"In protocol versions 2026-07-28 and later, the skills/list result carries the base protocol's list-caching attributes ttlMs and cacheScope (SEP-2549).\",\n 'SKIPPED',\n {\n errorMessage: `not applicable on negotiated protocol ${ctx.specVersion}: ttlMs and cacheScope are defined from 2026-07-28`,\n details: {\n specVersion: ctx.specVersion,\n ttlMs: first.ttlMs,\n cacheScope: first.cacheScope\n }\n }\n )\n );\n } else {\n const missing = [!hasTtl && 'ttlMs', !hasScope && 'cacheScope']\n .filter(Boolean)\n .join(' and ');\n checks.push(\n skillsCheck(\n 'sep-2640-skills-list-cache-attributes',\n \"In protocol versions 2026-07-28 and later, the skills/list result carries the base protocol's list-caching attributes ttlMs and cacheScope (SEP-2549).\",\n hasTtl && hasScope ? 'SUCCESS' : 'FAILURE',\n hasTtl && hasScope\n ? {\n details: { ttlMs: first.ttlMs, cacheScope: first.cacheScope }\n }\n : {\n errorMessage: `skills/list result omits ${missing} on protocol ${ctx.specVersion}, where SEP-2549 requires both.`\n }\n )\n );\n }\n\n if (entries.length === 0) {\n const reason =\n 'skills/list returned no entries; entry-level checks not applicable. A server whose catalog is large, generated on demand, or otherwise unenumerable MAY return an empty listing.';\n for (const id of [...ENTRY_IDS, ...GET_IDS, ...READBACK_IDS]) {\n checks.push(\n skillsCheck(id, reason, 'SKIPPED', { errorMessage: reason })\n );\n }\n checks.push(\n skillsCheck(\n 'sep-2640-capability-commits-to-methods',\n 'Declaring the extension commits the server to skills/list and skills/get.',\n 'SUCCESS',\n { details: { note: 'skills/list answered; listing is empty.' } }\n )\n );\n return checks;\n }\n\n checks.push(...entryChecks(entries));\n checks.push(...(await getChecks(conn, entries, ctx.specVersion)));\n checks.push(...(await readbackChecks(conn, entries)));\n\n return checks;\n } finally {\n await conn.close();\n }\n }\n}\n\n/** Validate every `skills[]` entry against the §Discovery entry schema. */\nfunction entryChecks(entries: SkillEntry[]): ConformanceCheck[] {\n const checks: ConformanceCheck[] = [];\n\n // === entry-uri-required ===\n const uriErrs = entries\n .map((e, i) =>\n typeof e.uri === 'string' && e.uri.length > 0\n ? null\n : `skills[${i}].uri is missing or not a string`\n )\n .filter((x): x is string => x !== null);\n checks.push(\n skillsCheck(\n 'sep-2640-entry-uri-required',\n \"Every entry carries uri, the full resource URI of the skill's SKILL.md.\",\n uriErrs.length === 0 ? 'SUCCESS' : 'FAILURE',\n uriErrs.length === 0\n ? { details: { entryCount: entries.length } }\n : { errorMessage: joinErrs(uriErrs) }\n )\n );\n\n // === entry-frontmatter-required ===\n // Verbatim frontmatter, so name and description are always present.\n const fmErrs: string[] = [];\n entries.forEach((e, i) => {\n const fm = e.frontmatter;\n if (!fm || typeof fm !== 'object' || Array.isArray(fm)) {\n fmErrs.push(\n `${entryLabel(e, i)}: frontmatter is missing or not an object`\n );\n return;\n }\n const obj = fm as Record;\n if (typeof obj.name !== 'string' || obj.name.length === 0) {\n fmErrs.push(`${entryLabel(e, i)}: frontmatter.name is missing or empty`);\n }\n if (typeof obj.description !== 'string' || obj.description.length === 0) {\n fmErrs.push(\n `${entryLabel(e, i)}: frontmatter.description is missing or empty`\n );\n }\n });\n checks.push(\n skillsCheck(\n 'sep-2640-entry-frontmatter-required',\n \"frontmatter is the skill's SKILL.md YAML frontmatter rendered verbatim as a JSON object; because the Agent Skills specification requires name and description, those fields are always present.\",\n fmErrs.length === 0 ? 'SUCCESS' : 'FAILURE',\n fmErrs.length === 0\n ? { details: { entryCount: entries.length } }\n : { errorMessage: joinErrs(fmErrs) }\n )\n );\n\n // === entry-uri-matches-frontmatter-name ===\n const nameErrs: string[] = [];\n entries.forEach((e) => {\n if (typeof e.uri !== 'string') return;\n const fm = e.frontmatter as Record | undefined;\n const declared = fm && typeof fm.name === 'string' ? fm.name : undefined;\n if (declared === undefined) return;\n const fromUri = skillNameFromManifestUri(e.uri);\n if (fromUri === undefined) {\n nameErrs.push(\n `${e.uri}: does not end in /${SKILL_MANIFEST_FILENAME}, so the skill name is not recoverable from the URI`\n );\n } else if (fromUri !== declared) {\n nameErrs.push(\n `${e.uri}: final skill-path segment \"${fromUri}\" !== frontmatter.name \"${declared}\"`\n );\n }\n });\n checks.push(\n skillsCheck(\n 'sep-2640-entry-uri-matches-frontmatter-name',\n \"The final segment of the entry's uri MUST equal frontmatter.name.\",\n nameErrs.length === 0 ? 'SUCCESS' : 'FAILURE',\n nameErrs.length === 0\n ? { details: { entryCount: entries.length } }\n : { errorMessage: joinErrs(nameErrs) }\n )\n );\n\n // === skill-uri-scheme (SHOULD) ===\n // \"Servers SHOULD use the skill:// URI scheme\", but a server MAY serve\n // skills under another scheme native to its domain and no scheme is\n // privileged, so a deviation is a WARNING rather than a failure.\n const otherScheme = entries\n .filter(\n (e) => typeof e.uri === 'string' && !e.uri.startsWith(SKILL_URI_SCHEME)\n )\n .map((e) => String(e.uri));\n checks.push(\n skillsCheck(\n 'sep-2640-skill-uri-scheme',\n 'Servers SHOULD use the skill:// URI scheme for the resources of a skill.',\n otherScheme.length === 0 ? 'SUCCESS' : 'WARNING',\n otherScheme.length === 0\n ? { details: { entryCount: entries.length } }\n : {\n errorMessage: `Entries served under another scheme (explicitly permitted; no scheme is privileged): ${joinErrs(otherScheme)}`\n }\n )\n );\n\n // === entry-resources-required ===\n const resErrs: string[] = [];\n entries.forEach((e, i) => {\n if (isDynamicResources(e)) return;\n if (resourcesArray(e) !== undefined) return;\n resErrs.push(\n `${entryLabel(e, i)}: resources is ${JSON.stringify(e.resources)}, neither an array nor \"${RESOURCES_DYNAMIC}\"`\n );\n });\n checks.push(\n skillsCheck(\n 'sep-2640-entry-resources-required',\n 'resources is REQUIRED on every skill entry and takes one of two forms: an array of {uri, digest, size} triples, or the string \"dynamic\". An entry with no resources at all, or with any other value, is invalid.',\n resErrs.length === 0 ? 'SUCCESS' : 'FAILURE',\n resErrs.length === 0\n ? {\n details: {\n entryCount: entries.length,\n dynamicEntries: entries.filter(isDynamicResources).length\n }\n }\n : { errorMessage: joinErrs(resErrs) }\n )\n );\n\n // Entries carrying an array are the only ones the remaining checks apply to.\n const arrayEntries = entries\n .map((e, i) => ({ e, i, arr: resourcesArray(e) }))\n .filter(\n (x): x is { e: SkillEntry; i: number; arr: SkillResourceEntry[] } =>\n x.arr !== undefined\n );\n\n const dynamicOnlyReason =\n 'Every entry declares \"resources\": \"dynamic\", which publishes no file manifest; the resources-array checks are not applicable.';\n\n if (arrayEntries.length === 0) {\n for (const id of [\n 'sep-2640-resources-complete',\n 'sep-2640-resources-uri-within-skill',\n 'sep-2640-resources-digest-format',\n 'sep-2640-resources-size-required',\n 'sep-2640-limit-resources-per-skill',\n 'sep-2640-limit-total-size'\n ]) {\n checks.push(\n skillsCheck(id, dynamicOnlyReason, 'SKIPPED', {\n errorMessage: dynamicOnlyReason\n })\n );\n }\n } else {\n // === resources-complete ===\n // Observable half: an entry matching the skill's own uri, and no file\n // listed twice. Full completeness (every file of the skill) cannot be\n // confirmed from the wire without a second source of truth.\n const completeErrs: string[] = [];\n for (const { e, i, arr } of arrayEntries) {\n const own = typeof e.uri === 'string' ? e.uri : undefined;\n if (own && !arr.some((r) => r.uri === own)) {\n completeErrs.push(\n `${entryLabel(e, i)}: resources has no entry matching the skill's own uri (the SKILL.md digest and size)`\n );\n }\n const seen = new Set();\n const dupes = new Set();\n for (const r of arr) {\n if (typeof r.uri !== 'string') continue;\n if (seen.has(r.uri)) dupes.add(r.uri);\n seen.add(r.uri);\n }\n if (dupes.size > 0) {\n completeErrs.push(\n `${entryLabel(e, i)}: resources lists ${[...dupes].join(', ')} more than once`\n );\n }\n }\n checks.push(\n skillsCheck(\n 'sep-2640-resources-complete',\n 'When present, resources MUST be complete: it lists every file of the skill, each exactly once, including an entry matching the skill top-level uri — that entry carries the digest and size of SKILL.md itself.',\n completeErrs.length === 0 ? 'SUCCESS' : 'FAILURE',\n completeErrs.length === 0\n ? { details: { entriesChecked: arrayEntries.length } }\n : { errorMessage: joinErrs(completeErrs) }\n )\n );\n\n // === resources-uri-within-skill ===\n const containErrs: string[] = [];\n for (const { e, i, arr } of arrayEntries) {\n const own = typeof e.uri === 'string' ? e.uri : undefined;\n const root = own ? skillRootFromManifestUri(own) : undefined;\n if (!root) continue;\n for (const r of arr) {\n if (typeof r.uri !== 'string') {\n containErrs.push(`${entryLabel(e, i)}: a resources entry has no uri`);\n continue;\n }\n if (r.uri !== own && !r.uri.startsWith(`${root}/`)) {\n containErrs.push(\n `${entryLabel(e, i)}: ${r.uri} is outside the skill directory ${root}`\n );\n }\n }\n }\n checks.push(\n skillsCheck(\n 'sep-2640-resources-uri-within-skill',\n \"Each uri MUST be the skill's SKILL.md or a file within the skill's directory.\",\n containErrs.length === 0 ? 'SUCCESS' : 'FAILURE',\n containErrs.length === 0\n ? { details: { entriesChecked: arrayEntries.length } }\n : { errorMessage: joinErrs(containErrs) }\n )\n );\n\n // === resources-digest-format ===\n const digestErrs: string[] = [];\n for (const { e, i, arr } of arrayEntries) {\n for (const r of arr) {\n if (\n typeof r.digest !== 'string' ||\n !SKILL_DIGEST_PATTERN.test(r.digest)\n ) {\n digestErrs.push(\n `${entryLabel(e, i)}: ${String(r.uri)} digest=${JSON.stringify(r.digest)} is not sha256:{64 lowercase hex}`\n );\n }\n }\n }\n checks.push(\n skillsCheck(\n 'sep-2640-resources-digest-format',\n \"Digests are SHA-256 hashes of an artifact's raw bytes, formatted as sha256:{hex} where {hex} is 64 lowercase hexadecimal characters.\",\n digestErrs.length === 0 ? 'SUCCESS' : 'FAILURE',\n digestErrs.length === 0\n ? { details: { entriesChecked: arrayEntries.length } }\n : { errorMessage: joinErrs(digestErrs) }\n )\n );\n\n // === resources-size-required ===\n const sizeErrs: string[] = [];\n for (const { e, i, arr } of arrayEntries) {\n for (const r of arr) {\n if (\n typeof r.size !== 'number' ||\n !Number.isInteger(r.size) ||\n r.size < 0\n ) {\n sizeErrs.push(\n `${entryLabel(e, i)}: ${String(r.uri)} size=${JSON.stringify(r.size)} is not a non-negative integer`\n );\n }\n }\n }\n checks.push(\n skillsCheck(\n 'sep-2640-resources-size-required',\n \"Each entry MUST carry size: the length in bytes of the file's raw content — the same bytes the digest covers.\",\n sizeErrs.length === 0 ? 'SUCCESS' : 'FAILURE',\n sizeErrs.length === 0\n ? { details: { entriesChecked: arrayEntries.length } }\n : { errorMessage: joinErrs(sizeErrs) }\n )\n );\n\n // === limit-resources-per-skill (SHOULD NOT exceed) ===\n const overCount = arrayEntries\n .filter(({ arr }) => arr.length > MAX_RESOURCES_PER_SKILL)\n .map(({ e, i, arr }) => `${entryLabel(e, i)}: ${arr.length} entries`);\n checks.push(\n skillsCheck(\n 'sep-2640-limit-resources-per-skill',\n 'Servers SHOULD NOT serve a skill exceeding 512 resource entries, counted over the entries of the skill resources, SKILL.md included.',\n overCount.length === 0 ? 'SUCCESS' : 'WARNING',\n overCount.length === 0\n ? {\n details: {\n maxObserved: Math.max(\n ...arrayEntries.map(({ arr }) => arr.length)\n ),\n limit: MAX_RESOURCES_PER_SKILL\n }\n }\n : { errorMessage: joinErrs(overCount) }\n )\n );\n\n // === limit-total-size (SHOULD NOT exceed) ===\n const sums = arrayEntries.map(({ e, i, arr }) => ({\n label: entryLabel(e, i),\n total: arr.reduce(\n (acc, r) => acc + (typeof r.size === 'number' ? r.size : 0),\n 0\n )\n }));\n const overSize = sums\n .filter((s) => s.total > MAX_TOTAL_SIZE_PER_SKILL)\n .map((s) => `${s.label}: ${s.total} bytes`);\n checks.push(\n skillsCheck(\n 'sep-2640-limit-total-size',\n 'Servers SHOULD NOT serve a skill whose total file size exceeds 16 MiB (16,777,216 bytes), summed over the skill resources.',\n overSize.length === 0 ? 'SUCCESS' : 'WARNING',\n overSize.length === 0\n ? {\n details: {\n maxObservedBytes: Math.max(...sums.map((s) => s.total)),\n limit: MAX_TOTAL_SIZE_PER_SKILL\n }\n }\n : { errorMessage: joinErrs(overSize) }\n )\n );\n }\n\n // === metadata-reserved-prefix ===\n // This extension currently defines no keys under the reserved prefix, so a\n // server publishing one is squatting on a namespace reserved for MCP.\n const reservedErrs: string[] = [];\n entries.forEach((e, i) => {\n const fm = e.frontmatter as Record | undefined;\n const meta = fm?.metadata;\n if (!meta || typeof meta !== 'object' || Array.isArray(meta)) return;\n for (const key of Object.keys(meta as Record)) {\n if (key.startsWith(FRONTMATTER_RESERVED_PREFIX)) {\n reservedErrs.push(\n `${entryLabel(e, i)}: frontmatter.metadata[\"${key}\"]`\n );\n }\n }\n });\n checks.push(\n skillsCheck(\n 'sep-2640-metadata-reserved-prefix',\n 'Within the frontmatter metadata object, keys prefixed with io.modelcontextprotocol/ are reserved for metadata defined by MCP extensions. This extension currently defines no such keys.',\n reservedErrs.length === 0 ? 'SUCCESS' : 'WARNING',\n reservedErrs.length === 0\n ? { details: { entryCount: entries.length } }\n : {\n errorMessage: `Keys under the reserved prefix, which this extension does not currently define: ${joinErrs(reservedErrs)}`\n }\n )\n );\n\n // === name-naming-rules ===\n // The name is recoverable from the URI alone, so this is checkable without\n // fetching anything.\n const badNames: string[] = [];\n entries.forEach((e, i) => {\n if (typeof e.uri !== 'string') return;\n const name = skillNameFromManifestUri(e.uri);\n if (name !== undefined && !SKILL_NAME_PATTERN.test(name)) {\n badNames.push(`${entryLabel(e, i)}: name \"${name}\"`);\n }\n });\n checks.push(\n skillsCheck(\n 'sep-2640-name-naming-rules',\n \"The final segment, being the skill name, MUST satisfy the Agent Skills specification's naming rules (1-64 characters, lowercase alphanumeric and hyphens, no leading, trailing or consecutive hyphens).\",\n badNames.length === 0 ? 'SUCCESS' : 'FAILURE',\n badNames.length === 0\n ? { details: { entryCount: entries.length } }\n : { errorMessage: joinErrs(badNames) }\n )\n );\n\n // === authority-reg-name (SHOULD) ===\n const badAuthority: string[] = [];\n entries.forEach((e, i) => {\n if (typeof e.uri !== 'string') return;\n const schemeEnd = e.uri.indexOf('://');\n if (schemeEnd < 0) return;\n const segments = e.uri\n .slice(schemeEnd + 3)\n .split('/')\n .filter((x) => x.length > 0);\n const authority = segments[0];\n if (authority !== undefined && !REG_NAME_PATTERN.test(authority)) {\n badAuthority.push(`${entryLabel(e, i)}: authority \"${authority}\"`);\n }\n });\n checks.push(\n skillsCheck(\n 'sep-2640-authority-reg-name',\n 'The first segment occupies the authority component and SHOULD be a valid reg-name per RFC 3986.',\n badAuthority.length === 0 ? 'SUCCESS' : 'WARNING',\n badAuthority.length === 0\n ? { details: { entryCount: entries.length } }\n : { errorMessage: joinErrs(badAuthority) }\n )\n );\n\n // === names-should-be-unique (SHOULD) ===\n // A collision is explicitly permitted — two skills at different paths may\n // share a final segment — so this is a WARNING that tells a host operator the\n // listing will need disambiguating, not a failure.\n const byName = new Map();\n entries.forEach((e) => {\n if (typeof e.uri !== 'string') return;\n const n = skillNameFromManifestUri(e.uri);\n if (n === undefined) return;\n byName.set(n, [...(byName.get(n) ?? []), e.uri]);\n });\n const collisions = [...byName.entries()]\n .filter(([, uris]) => uris.length > 1)\n .map(([n, uris]) => `\"${n}\" served at ${uris.join(' and ')}`);\n checks.push(\n skillsCheck(\n 'sep-2640-names-should-be-unique',\n \"Within a server's listing, names SHOULD be unique, but they are not guaranteed to be.\",\n collisions.length === 0 ? 'SUCCESS' : 'WARNING',\n collisions.length === 0\n ? { details: { distinctNames: byName.size } }\n : {\n errorMessage: `Names collide within one listing, so hosts MUST disambiguate them: ${joinErrs(collisions)}`\n }\n )\n );\n\n return checks;\n}\n\n/**\n * Fetch one listed `SKILL.md` and check it against the entry that advertised\n * it. This is the server-side half of the host's frontmatter-comparison MUST:\n * if the entry's `frontmatter` does not match the file, no conforming host can\n * load the skill.\n */\nasync function readbackChecks(\n conn: Parameters[0],\n entries: SkillEntry[]\n): Promise {\n const checks: ConformanceCheck[] = [];\n const sample = entries.find(\n (e) =>\n typeof e.uri === 'string' && e.uri.endsWith(`/${SKILL_MANIFEST_FILENAME}`)\n );\n const uri = sample?.uri as string | undefined;\n\n if (!uri) {\n const reason = `No listed entry has a uri ending in /${SKILL_MANIFEST_FILENAME}, so no SKILL.md can be read back.`;\n for (const id of READBACK_IDS) {\n checks.push(skillsCheck(id, reason, 'SKIPPED', { errorMessage: reason }));\n }\n return checks;\n }\n\n let body: Awaited>;\n try {\n body = await readResourceText(conn, uri);\n } catch (e) {\n const reason = `resources/read on ${uri} failed: ${e instanceof Error ? e.message : String(e)}`;\n checks.push(\n skillsCheck(\n 'sep-2640-skillmd-required',\n 'Every skill MUST contain a SKILL.md file at its root.',\n 'FAILURE',\n { errorMessage: reason }\n )\n );\n for (const id of [\n 'sep-2640-skillmd-frontmatter',\n 'sep-2640-entry-frontmatter-identical'\n ]) {\n checks.push(\n skillsCheck(id, 'SKILL.md is unreadable.', 'SKIPPED', {\n errorMessage: reason\n })\n );\n }\n return checks;\n }\n\n if (!body) {\n const reason = `resources/read on ${uri} returned no text content, so the listed SKILL.md is not retrievable.`;\n checks.push(\n skillsCheck(\n 'sep-2640-skillmd-required',\n 'Every skill MUST contain a SKILL.md file at its root.',\n 'FAILURE',\n { errorMessage: reason }\n )\n );\n for (const id of [\n 'sep-2640-skillmd-frontmatter',\n 'sep-2640-entry-frontmatter-identical'\n ]) {\n checks.push(\n skillsCheck(id, 'No SKILL.md content to inspect.', 'SKIPPED', {\n errorMessage: reason\n })\n );\n }\n return checks;\n }\n\n checks.push(\n skillsCheck(\n 'sep-2640-skillmd-required',\n 'Every skill MUST contain a SKILL.md file at its root.',\n 'SUCCESS',\n { details: { uri, bytes: body.text.length } }\n )\n );\n\n // === skillmd-frontmatter ===\n const fm = parseFrontmatter(body.text);\n const fmErrs: string[] = [];\n if (!fm) {\n fmErrs.push('SKILL.md has no leading --- delimited YAML frontmatter block');\n } else {\n if (typeof fm.name !== 'string' || fm.name.length === 0) {\n fmErrs.push('frontmatter has no non-empty name');\n }\n if (typeof fm.description !== 'string' || fm.description.length === 0) {\n fmErrs.push('frontmatter has no non-empty description');\n }\n }\n checks.push(\n skillsCheck(\n 'sep-2640-skillmd-frontmatter',\n 'SKILL.md MUST begin with YAML frontmatter containing at minimum the name and description fields.',\n fmErrs.length === 0 ? 'SUCCESS' : 'FAILURE',\n fmErrs.length === 0\n ? { details: { uri } }\n : { errorMessage: `${uri}: ${fmErrs.join('; ')}` }\n )\n );\n\n // === entry-frontmatter-identical ===\n const declared = sample?.frontmatter as Record | undefined;\n if (\n !fm ||\n !declared ||\n typeof declared !== 'object' ||\n Array.isArray(declared)\n ) {\n const reason =\n 'Either the file has no parseable frontmatter or the entry carries no frontmatter object, so the two cannot be compared.';\n checks.push(\n skillsCheck(\n 'sep-2640-entry-frontmatter-identical',\n 'The frontmatter object MUST be identical in content to the frontmatter of the SKILL.md it describes.',\n 'SKIPPED',\n { errorMessage: reason }\n )\n );\n return checks;\n }\n\n const diffs: string[] = [];\n const keys = new Set([...Object.keys(fm), ...Object.keys(declared)]);\n // Content, not serialisation: an encoder that orders map keys differently\n // from the YAML source (Go's encoding/json sorts them) still describes the\n // same frontmatter.\n for (const k of keys) {\n if (isDeepStrictEqual(fm[k] ?? null, declared[k] ?? null)) continue;\n diffs.push(\n `${k}: file=${JSON.stringify(fm[k] ?? null)} entry=${JSON.stringify(declared[k] ?? null)}`\n );\n }\n checks.push(\n skillsCheck(\n 'sep-2640-entry-frontmatter-identical',\n 'The frontmatter object MUST be identical in content to the frontmatter of the SKILL.md it describes.',\n diffs.length === 0 ? 'SUCCESS' : 'FAILURE',\n diffs.length === 0\n ? { details: { uri, fields: [...keys] } }\n : {\n errorMessage: `${uri}: entry frontmatter differs from the file's: ${joinErrs(diffs)}`\n }\n )\n );\n\n return checks;\n}\n\n/** Exercise `skills/get` against a real entry and against an unknown URI. */\nasync function getChecks(\n conn: Parameters[0],\n entries: SkillEntry[],\n specVersion: string\n): Promise {\n const checks: ConformanceCheck[] = [];\n const sample = entries.find((e) => typeof e.uri === 'string');\n const sampleUri = sample?.uri as string | undefined;\n\n if (!sampleUri) {\n const reason =\n 'No listed entry carries a uri, so skills/get cannot be exercised against a known skill.';\n for (const id of GET_IDS) {\n checks.push(skillsCheck(id, reason, 'SKIPPED', { errorMessage: reason }));\n }\n return checks;\n }\n\n const got = await skillsGet(conn, sampleUri);\n if ('error' in got) {\n const reason = `${SKILLS_GET_METHOD} failed for a skill the server itself listed (${sampleUri}) with code ${got.error.code}: ${got.error.message}.`;\n checks.push(\n skillsCheck(\n 'sep-2640-capability-commits-to-methods',\n 'Declaring the extension commits the server to skills/list and skills/get.',\n 'FAILURE',\n { errorMessage: reason }\n ),\n skillsCheck(\n 'sep-2640-skills-get-implemented',\n 'A server declaring the extension MUST also implement the skills/get method, which returns the entry for a single skill named by its URI.',\n 'FAILURE',\n { errorMessage: reason }\n )\n );\n for (const id of [\n 'sep-2640-skills-get-entry-shape',\n 'sep-2640-skills-get-no-cursor',\n 'sep-2640-skills-get-unknown-uri-invalid-params'\n ]) {\n checks.push(\n skillsCheck(id, 'skills/get is unavailable.', 'SKIPPED', {\n errorMessage: reason\n })\n );\n }\n return checks;\n }\n\n checks.push(\n skillsCheck(\n 'sep-2640-capability-commits-to-methods',\n 'Declaring the extension itself commits the server to skills/list and skills/get.',\n 'SUCCESS',\n { details: { methods: [SKILLS_LIST_METHOD, SKILLS_GET_METHOD] } }\n ),\n skillsCheck(\n 'sep-2640-skills-get-implemented',\n 'A server declaring the extension MUST also implement the skills/get method, which returns the entry for a single skill named by its URI.',\n 'SUCCESS',\n { details: { probedUri: sampleUri } }\n )\n );\n\n // === skills-get-entry-shape ===\n const skill = got.result.skill as SkillEntry | undefined;\n const shapeErrs: string[] = [];\n if (!skill || typeof skill !== 'object' || Array.isArray(skill)) {\n shapeErrs.push('result.skill is missing or not an object');\n } else {\n if (skill.uri !== sampleUri) {\n shapeErrs.push(\n `result.skill.uri=${JSON.stringify(skill.uri)} does not echo the requested uri ${sampleUri}`\n );\n }\n if (\n !skill.frontmatter ||\n typeof skill.frontmatter !== 'object' ||\n Array.isArray(skill.frontmatter)\n ) {\n shapeErrs.push('result.skill.frontmatter is missing or not an object');\n }\n if (!isDynamicResources(skill) && resourcesArray(skill) === undefined) {\n shapeErrs.push(\n `result.skill.resources=${JSON.stringify(skill.resources)} is neither an array nor \"${RESOURCES_DYNAMIC}\"`\n );\n }\n }\n checks.push(\n skillsCheck(\n 'sep-2640-skills-get-entry-shape',\n 'The skill object is a skill entry, identical in shape and meaning to an entry of skills/list — the same uri, frontmatter, and resources fields, under the same rules.',\n shapeErrs.length === 0 ? 'SUCCESS' : 'FAILURE',\n shapeErrs.length === 0\n ? { details: { probedUri: sampleUri } }\n : { errorMessage: joinErrs(shapeErrs) }\n )\n );\n\n // === skills-get-no-cursor ===\n const hasCursor = got.result.nextCursor !== undefined;\n checks.push(\n skillsCheck(\n 'sep-2640-skills-get-no-cursor',\n 'The result carries no pagination cursor: a single entry is not a list.',\n hasCursor ? 'FAILURE' : 'SUCCESS',\n hasCursor\n ? {\n errorMessage: `skills/get returned nextCursor=${JSON.stringify(got.result.nextCursor)}; a single entry is not a list.`\n }\n : { details: { probedUri: sampleUri } }\n )\n );\n\n // === skills-get-cache-attributes ===\n // SEP-2640 left this open (\"whether the result should also carry the base\n // protocol's caching attributes ... is left open\"); the stable page closed\n // it in the affirmative on 2026-09-10 (ext-skills#139). Gated the same way\n // as the skills/list check: below 2026-07-28 CacheableResult is undefined\n // by the negotiated schema, so omission is correct rather than a defect.\n const getResult = got.result as Record;\n const getTtl = getResult.ttlMs !== undefined;\n const getScope = getResult.cacheScope !== undefined;\n const getCacheApplies = specVersion >= '2026-07-28';\n const getCacheText =\n 'GetSkillResult extends CacheableResult, so ttlMs and cacheScope are REQUIRED, as they are on resources/read.';\n\n if (!getCacheApplies) {\n checks.push(\n skillsCheck(\n 'sep-2640-skills-get-cache-attributes',\n getCacheText,\n 'SKIPPED',\n {\n errorMessage: `not applicable on negotiated protocol ${specVersion}: ttlMs and cacheScope are defined from 2026-07-28`,\n details: {\n specVersion,\n ttlMs: getResult.ttlMs,\n cacheScope: getResult.cacheScope\n }\n }\n )\n );\n } else {\n const missing = [!getTtl && 'ttlMs', !getScope && 'cacheScope']\n .filter(Boolean)\n .join(' and ');\n checks.push(\n skillsCheck(\n 'sep-2640-skills-get-cache-attributes',\n getCacheText,\n getTtl && getScope ? 'SUCCESS' : 'FAILURE',\n getTtl && getScope\n ? {\n details: {\n ttlMs: getResult.ttlMs,\n cacheScope: getResult.cacheScope\n }\n }\n : {\n errorMessage: `skills/get result omits ${missing} on protocol ${specVersion}, where the stable spec page requires both.`\n }\n )\n );\n }\n\n // === skills-get-unknown-uri-invalid-params ===\n const unknown = await skillsGet(conn, UNKNOWN_SKILL_URI);\n if ('error' in unknown) {\n const ok = unknown.error.code === JSONRPC_INVALID_PARAMS;\n checks.push(\n skillsCheck(\n 'sep-2640-skills-get-unknown-uri-invalid-params',\n 'If the URI does not identify a skill the server serves, the server MUST return error -32602 (Invalid params).',\n ok ? 'SUCCESS' : 'FAILURE',\n ok\n ? {\n details: {\n probedUri: UNKNOWN_SKILL_URI,\n code: unknown.error.code\n }\n }\n : {\n errorMessage: `skills/get on an unserved URI returned code ${unknown.error.code} (${unknown.error.message}); expected ${JSONRPC_INVALID_PARAMS}.`\n }\n )\n );\n } else {\n checks.push(\n skillsCheck(\n 'sep-2640-skills-get-unknown-uri-invalid-params',\n 'If the URI does not identify a skill the server serves, the server MUST return error -32602 (Invalid params).',\n 'FAILURE',\n {\n errorMessage: `skills/get returned a successful result for ${UNKNOWN_SKILL_URI}, which no conformant server should serve; expected error ${JSONRPC_INVALID_PARAMS}.`\n }\n )\n );\n }\n\n return checks;\n}\n","deleted",false,"label",[47,48,49,50,24],"src","scenarios","server","skills","7dcb6042-d92f-40c5-9cc8-0f661f96e58b",["D",1789043604380],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","f4518a30-f52b-4b12-891c-a8fffb7240f8","pinnedFileId","e6dd13e2-ad13-11f1-a612-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","01a07c12-b73a-76de-b96a-421ce8582af6","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_106":-5},"org",{"_9":10,"_100":101,"_102":-5,"_60":-5,"_103":104,"_105":44},"branch",{"_37":90,"_11":91,"_22":30,"_92":51,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":12,"_99":10},"isOwned",396,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","MCP Conformance","avatar","tier","free","canRestrictVals","profileImageUrl","ctx",{"_83":-5,"_140":141,"_142":143,"_144":145,"_146":44,"_147":44,"_148":44,"_149":34,"_150":-5,"_151":-7,"_152":-7,"_153":38,"_154":44,"_155":44,"_156":-5,"_157":44,"_158":44,"_159":44,"_160":-5},"ENV",{"_111":112,"_113":114,"_115":91,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135,"_136":137,"_138":139},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]