[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_107":108,"_109":110},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","mcpconformance","name","mcp-client-conformance","path","src/scenarios/server/skills/helpers.ts","project",{"_22":51,"_11":12,"_35":52,"_53":-5,"_54":44,"_55":56,"_57":56,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":34,"_65":-5,"_66":-5,"_67":38,"_68":69,"_70":-5,"_71":-5,"_72":-5,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":84,"_85":86,"_87":88,"_89":44},"file",{"_22":23,"_11":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":-5,"_13":46},"permalink","https://www.val.town/x/mcpconformance/mcp-client-conformance/code/src/scenarios/server/skills/helpers.ts","extension","id","e6ed87b6-bd78-4afb-b34d-4bd30c70ae5b","helpers.ts","fileId","c0cd53fe-ae14-11f1-a425-1607ee4eb77e","parentId","1c742940-41f3-4821-b71e-e95273d6a26e","branchId","fdc11199-683b-41f1-a3c5-d5ac53972f86","branchVersion",185,"latest",true,"createdAt",["D",1789153958232],"version",0,"fileType","script","content","/**\n * Shared helpers for the SEP-2640 (Skills extension) server-conformance\n * scenarios under this directory.\n *\n * The scenarios treat the server-under-test as an arbitrary SEP-2640 server:\n * capability is read from `server/discover` (never inferred from an error), and\n * every skill is discovered dynamically through `skills/list` — no\n * fixture-specific URI is hardcoded, so the checks pass against any conformant\n * server, not just one implementation's fixture.\n *\n * Extracted against the 2026-08-21 revision of the SEP (branch\n * `sep/skills-extension`), which replaced the `skill://index.json` well-known\n * resource with the `skills/list` and `skills/get` methods, deferred archive\n * distribution, and reshaped the skill entry to `{uri, frontmatter, resources}`.\n */\n\nimport type {\n CheckStatus,\n ConformanceCheck,\n SpecReference\n} from '../../../types.ts';\nimport type { Connection } from '../../../connection/index.ts';\nimport { JsonRpcError } from '../../../connection/index.ts';\nimport { parse as parseYaml } from 'npm:yaml@^2.8.2';\n\nexport const SKILLS_EXTENSION_ID = 'io.modelcontextprotocol/skills';\nexport const SKILL_URI_SCHEME = 'skill://';\nexport const SKILL_MANIFEST_FILENAME = 'SKILL.md';\nexport const SKILLS_META_PREFIX = 'io.modelcontextprotocol.skills/';\n\n/** Reserved prefix for MCP-defined keys inside frontmatter `metadata`. */\nexport const FRONTMATTER_RESERVED_PREFIX = 'io.modelcontextprotocol/';\n\nexport const SKILLS_LIST_METHOD = 'skills/list';\nexport const SKILLS_GET_METHOD = 'skills/get';\nexport const DIRECTORY_READ_METHOD = 'resources/directory/read';\n\n/** `sha256:{hex}` with exactly 64 lowercase hex characters (SEP-2640). */\nexport const SKILL_DIGEST_PATTERN = /^sha256:[0-9a-f]{64}$/;\n\n/** The `\"dynamic\"` sentinel a server sets in place of a `resources` array. */\nexport const RESOURCES_DYNAMIC = 'dynamic';\n\n/** Per-skill limits fixed by the SEP (§Limits). */\nexport const MAX_RESOURCES_PER_SKILL = 512;\nexport const MAX_TOTAL_SIZE_PER_SKILL = 16 * 1024 * 1024; // 16 MiB\n\nexport const JSONRPC_METHOD_NOT_FOUND = -32601;\nexport const JSONRPC_INVALID_PARAMS = -32602;\n\nexport const SEP_2640_REF: SpecReference = {\n id: 'SEP-2640',\n url: 'https://modelcontextprotocol.io/seps/2640-skills-extension#specification'\n};\n\n/** A `resources/list` / directory-read entry (only the fields we inspect). */\nexport interface SkillResource {\n uri: string;\n name?: string;\n description?: string;\n mimeType?: string;\n _meta?: Record;\n}\n\n/** One `{uri, digest, size}` triple of a skill entry's `resources` array. */\nexport interface SkillResourceEntry {\n uri?: unknown;\n digest?: unknown;\n size?: unknown;\n [key: string]: unknown;\n}\n\n/**\n * One skill entry, as returned by `skills/list` (in `skills[]`) and by\n * `skills/get` (as `skill`). The two are identical in shape and meaning.\n */\nexport interface SkillEntry {\n uri?: unknown;\n frontmatter?: unknown;\n /** An array of `{uri, digest, size}`, or the string `\"dynamic\"`. */\n resources?: unknown;\n [key: string]: unknown;\n}\n\nexport interface SkillsListResult {\n skills?: unknown;\n nextCursor?: string;\n ttlMs?: unknown;\n cacheScope?: unknown;\n [key: string]: unknown;\n}\n\nexport interface SkillsGetResult {\n skill?: unknown;\n nextCursor?: unknown;\n [key: string]: unknown;\n}\n\n/** First text content of a `resources/read`, with its mimeType and `_meta`. */\nexport interface ResourceText {\n text: string;\n mimeType?: string;\n meta?: Record;\n}\n\n/**\n * Build a check carrying the SEP-2640 reference. Per AGENTS.md the same `id`\n * flips `status` + `errorMessage` between SUCCESS and FAILURE rather than\n * branching into distinct slugs.\n */\nexport function skillsCheck(\n id: string,\n description: string,\n status: CheckStatus,\n extras: Partial = {}\n): ConformanceCheck {\n return {\n id,\n name: id,\n description,\n status,\n timestamp: new Date().toISOString(),\n specReferences: [SEP_2640_REF],\n ...extras\n };\n}\n\n/** A JSON object, as opposed to an array, `null`, or a primitive. */\nexport function isSettingsObject(\n value: unknown\n): value is Record {\n return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\n/** How to name an observed non-object value in an error message. */\nexport function describeValue(value: unknown): string {\n if (value === null) return 'null';\n if (Array.isArray(value)) return 'an array';\n return `a ${typeof value}`;\n}\n\n/**\n * Whether the server declared the skills extension at all, and the raw value it\n * declared it with, before any shape coercion.\n *\n * `skillsCapability` folds a malformed declaration (`true`, a string, an array)\n * into `undefined`, which downstream reads as \"extension not declared\" and\n * SKIPs. That is a false SKIP: the server did declare the extension, it just\n * declared it with the wrong type, and the suite should say so. Callers that\n * need to tell \"absent\" from \"malformed\" apart use this instead.\n *\n * Reads the declared capability from `server/discover` (mirrors\n * `tasks/capability.ts`), never inferred from a `-32601`.\n */\nexport async function declaredSkillsCapability(\n conn: Connection\n): Promise<{ declared: boolean; value: unknown }> {\n const discovered = await conn.discover();\n const caps = (discovered.capabilities as Record) ?? {};\n const extensions = caps.extensions as Record | undefined;\n if (!extensions || !(SKILLS_EXTENSION_ID in extensions)) {\n return { declared: false, value: undefined };\n }\n return { declared: true, value: extensions[SKILLS_EXTENSION_ID] };\n}\n\n/**\n * The skills extension object declared under `capabilities.extensions`, or\n * `undefined` when the server did not declare it — or declared it with\n * something that is not a settings object, which the callers of this helper\n * treat the same way. An undeclared optional extension is a SKIP.\n */\nexport async function skillsCapability(\n conn: Connection\n): Promise | undefined> {\n const { value } = await declaredSkillsCapability(conn);\n return isSettingsObject(value) ? value : undefined;\n}\n\n/**\n * Whether the declared extension object nests its settings inline, as both\n * SEP-2133 and SEP-2640 require, rather than wrapping them in an envelope.\n *\n * SEP-2133 (status Final) defines `extensions` as \"a map of extension\n * identifiers to per-extension settings objects\", and SEP-2640's capability\n * block matches: `{\"io.modelcontextprotocol/skills\": {\"directoryRead\": true}}`.\n * Neither SEP defines an envelope, and neither has a slot for `id`,\n * `specVersion` or `stability`.\n *\n * An earlier revision of this helper accepted a `config` envelope alongside the\n * inline form, on the belief that the two SEPs disagreed. Re-reading SEP-2133\n * at Final status, they do not. The envelope is a non-conformant shape emitted\n * by at least one SDK, so it is reported rather than silently accepted.\n */\nexport function settingsAreInline(skills: Record): {\n inline: boolean;\n envelopeKeys: string[];\n} {\n const envelopeKeys = ['config', 'specVersion', 'stability', 'id'].filter(\n (k) => k in skills\n );\n return { inline: envelopeKeys.length === 0, envelopeKeys };\n}\n\n/**\n * Whether the server declares the base `resources` capability.\n *\n * The stable spec page (ext-skills#139) states this as a consequence of the\n * base Resources specification rather than a new obligation: a server that\n * serves skill files through `resources/read` already has to declare it.\n */\nexport async function resourcesCapabilityDeclared(\n conn: Connection\n): Promise {\n const discovered = await conn.discover();\n const caps = (discovered.capabilities as Record) ?? {};\n return isSettingsObject(caps.resources);\n}\n\n/**\n * Whether the skills extension declares `directoryRead: true`.\n *\n * Reads only the inline location the SEPs specify. A server that buries the\n * flag inside an envelope fails `sep-2640-capability-declaration-inline` and is\n * treated here as not having declared the optional method, which is the\n * conservative reading: a client that follows the spec would not see the flag\n * either, and \"clients MUST NOT call resources/directory/read against a server\n * that has not declared directoryRead: true\".\n */\nexport function directoryReadDeclared(\n skills: Record\n): boolean {\n return skills.directoryRead === true;\n}\n\n/** Everything from `resources/list`, paginating until `nextCursor` clears. */\nexport async function listAllResources(\n conn: Connection\n): Promise {\n const out: SkillResource[] = [];\n let cursor: string | undefined;\n do {\n const page = await conn.request<{\n resources?: SkillResource[];\n nextCursor?: string;\n }>('resources/list', cursor ? { cursor } : undefined);\n out.push(...(page.resources ?? []));\n cursor = page.nextCursor;\n } while (cursor);\n return out;\n}\n\n/** One page of `skills/list`, kept separate so pagination can be inspected. */\nexport interface SkillsListPage {\n result: SkillsListResult;\n entries: SkillEntry[];\n}\n\n/**\n * Call `skills/list` once, optionally with a cursor. Returns a `JsonRpcError`\n * rather than throwing so a scenario can distinguish \"method not implemented\"\n * (a FAILURE, since the method is mandatory for a declaring server) from a\n * transport fault.\n */\nexport async function skillsListPage(\n conn: Connection,\n cursor?: string\n): Promise {\n try {\n const result = await conn.request(\n SKILLS_LIST_METHOD,\n cursor ? { cursor } : {}\n );\n const entries = Array.isArray(result.skills)\n ? (result.skills as SkillEntry[])\n : [];\n return { result, entries };\n } catch (e) {\n if (e instanceof JsonRpcError) return { error: e };\n throw e;\n }\n}\n\n/**\n * Every entry from `skills/list`, following `nextCursor`. `pages` is retained\n * so the atomic-entry and pagination checks can reason about page boundaries.\n * Bounded to avoid looping forever against a server that returns a constant\n * cursor.\n */\nexport async function skillsListAll(\n conn: Connection,\n maxPages = 50\n): Promise<\n | { entries: SkillEntry[]; pages: SkillsListPage[]; truncated: boolean }\n | { error: JsonRpcError }\n> {\n const pages: SkillsListPage[] = [];\n const entries: SkillEntry[] = [];\n let cursor: string | undefined;\n const seenCursors = new Set();\n\n for (let i = 0; i < maxPages; i++) {\n const page = await skillsListPage(conn, cursor);\n if ('error' in page) return page;\n pages.push(page);\n entries.push(...page.entries);\n const next = page.result.nextCursor;\n if (typeof next !== 'string' || next.length === 0) {\n return { entries, pages, truncated: false };\n }\n if (seenCursors.has(next)) {\n // A repeating cursor is a server bug; stop rather than spin.\n return { entries, pages, truncated: true };\n }\n seenCursors.add(next);\n cursor = next;\n }\n return { entries, pages, truncated: true };\n}\n\n/** Call `skills/get` for one skill URI. */\nexport async function skillsGet(\n conn: Connection,\n uri: string\n): Promise<{ result: SkillsGetResult } | { error: JsonRpcError }> {\n try {\n const result = await conn.request(SKILLS_GET_METHOD, {\n uri\n });\n return { result };\n } catch (e) {\n if (e instanceof JsonRpcError) return { error: e };\n throw e;\n }\n}\n\n/** Read a resource's first text content plus its mimeType and `_meta`. */\nexport async function readResourceText(\n conn: Connection,\n uri: string\n): Promise {\n const res = await conn.request<{\n contents?: Array<{\n text?: string;\n mimeType?: string;\n _meta?: Record;\n }>;\n }>('resources/read', { uri });\n const entry = (res.contents ?? []).find((c) => typeof c.text === 'string');\n if (!entry || typeof entry.text !== 'string') return undefined;\n return { text: entry.text, mimeType: entry.mimeType, meta: entry._meta };\n}\n\n/**\n * The skill name recoverable from a `SKILL.md` resource URI: the final segment\n * of ``, i.e. the last path segment before the trailing\n * `SKILL.md`. Returns `undefined` when the URI does not end in `/SKILL.md`.\n *\n * Scheme-agnostic by design: the SEP is explicit that \"no scheme is\n * privileged\" and that the structural constraints \"apply regardless of\n * scheme\", so a server serving skills under `github://` is judged by the same\n * path rule as one using `skill://`.\n *\n * skill://org/team/deploy/SKILL.md -> \"deploy\"\n * github://acme/repo/lint/SKILL.md -> \"lint\"\n */\nexport function skillNameFromManifestUri(uri: string): string | undefined {\n const schemeEnd = uri.indexOf('://');\n if (schemeEnd < 0) return undefined;\n const parts = uri\n .slice(schemeEnd + 3)\n .split('/')\n .filter((p) => p.length > 0);\n if (parts.length < 2) return undefined;\n if (parts[parts.length - 1] !== SKILL_MANIFEST_FILENAME) return undefined;\n return parts[parts.length - 2];\n}\n\n/** The skill's root directory URI: its `SKILL.md` URI with the file removed. */\nexport function skillRootFromManifestUri(uri: string): string | undefined {\n if (!uri.endsWith(`/${SKILL_MANIFEST_FILENAME}`)) return undefined;\n return uri.slice(0, -`/${SKILL_MANIFEST_FILENAME}`.length);\n}\n\n/**\n * Extract and parse the YAML frontmatter block at the head of a `SKILL.md`.\n * Returns `undefined` when there is no leading `---` delimited block or it does\n * not parse to an object.\n */\nexport function parseFrontmatter(\n markdown: string\n): Record | undefined {\n // Tolerate a leading UTF-8 BOM before the opening `---` fence.\n const body = markdown.charCodeAt(0) === 0xfeff ? markdown.slice(1) : markdown;\n const match = body.match(/^---\\r?\\n([\\s\\S]*?)\\r?\\n---[ \\t]*(?:\\r?\\n|$)/);\n if (!match) return undefined;\n try {\n const parsed = parseYaml(match[1]) as unknown;\n return parsed && typeof parsed === 'object'\n ? (parsed as Record)\n : undefined;\n } catch {\n return undefined;\n }\n}\n\n/** True when the entry's `resources` is the `\"dynamic\"` sentinel. */\nexport function isDynamicResources(entry: SkillEntry): boolean {\n return entry.resources === RESOURCES_DYNAMIC;\n}\n\n/**\n * The entry's `resources` array, or `undefined` when it is `\"dynamic\"`, absent,\n * or any other value. Callers distinguish those cases via `isDynamicResources`.\n */\nexport function resourcesArray(\n entry: SkillEntry\n): SkillResourceEntry[] | undefined {\n return Array.isArray(entry.resources)\n ? (entry.resources as SkillResourceEntry[])\n : undefined;\n}\n\n/** A short, stable label for an entry, for error messages. */\nexport function entryLabel(entry: SkillEntry, i: number): string {\n return typeof entry.uri === 'string' ? entry.uri : `skills[${i}]`;\n}\n\n/**\n * Every child of a directory, following `nextCursor` until it clears.\n *\n * SEP-2640 says directory-read pagination mirrors `resources/list`, so a\n * conformant server MAY split a directory across pages. Reading only the\n * first page makes \"no subdirectory here\" indistinguishable from \"the\n * subdirectory is on page two\".\n */\nexport async function directoryReadAll(\n conn: Connection,\n uri: string,\n maxPages = 50\n): Promise<{ resources: SkillResource[]; pages: number; truncated: boolean }> {\n const resources: SkillResource[] = [];\n const seen = new Set();\n let cursor: string | undefined;\n\n for (let i = 0; i < maxPages; i++) {\n const page = await conn.request<{\n resources?: SkillResource[];\n nextCursor?: string;\n }>('resources/directory/read', cursor ? { uri, cursor } : { uri });\n resources.push(...(page.resources ?? []));\n const next = page.nextCursor;\n if (typeof next !== 'string' || next.length === 0) {\n return { resources, pages: i + 1, truncated: false };\n }\n if (seen.has(next)) return { resources, pages: i + 1, truncated: true };\n seen.add(next);\n cursor = next;\n }\n return { resources, pages: maxPages, truncated: true };\n}\n","deleted",false,"label",[47,48,49,50,24],"src","scenarios","server","skills","7dcb6042-d92f-40c5-9cc8-0f661f96e58b",["D",1789043604380],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","f4518a30-f52b-4b12-891c-a8fffb7240f8","pinnedFileId","e6dd13e2-ad13-11f1-a612-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","01a07c12-b73a-76de-b96a-421ce8582af6","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_106":-5},"org",{"_9":10,"_100":101,"_102":-5,"_60":-5,"_103":104,"_105":44},"branch",{"_37":90,"_11":91,"_22":30,"_92":51,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":12,"_99":10},"isOwned",396,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","MCP Conformance","avatar","tier","free","canRestrictVals","profileImageUrl","ctx",{"_83":-5,"_140":141,"_142":143,"_144":145,"_146":44,"_147":44,"_148":44,"_149":34,"_150":-5,"_151":-7,"_152":-7,"_153":38,"_154":44,"_155":44,"_156":-5,"_157":44,"_158":44,"_159":44,"_160":-5},"ENV",{"_111":112,"_113":114,"_115":91,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135,"_136":137,"_138":139},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]