[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_105":106,"_107":108},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","mcpconformance","name","mcp-client-conformance","path","src/types.ts","project",{"_22":48,"_11":12,"_35":49,"_50":-5,"_51":44,"_52":53,"_54":53,"_55":-5,"_56":-5,"_57":58,"_59":60,"_61":34,"_62":-5,"_63":-5,"_64":65,"_66":67,"_68":-5,"_69":-5,"_70":-5,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":44},"file",{"_22":23,"_11":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":-5,"_13":46},"permalink","https://www.val.town/x/mcpconformance/mcp-client-conformance/code/src/types.ts","extension","id","7ec5f1e2-aa9d-4a66-8512-8c19e8385b0c","types.ts","fileId","d3a406d2-ad13-11f1-b31d-1607ee4eb77e","parentId","8ad4b564-52ff-48ed-87b5-c87084c02333","branchId","fdc11199-683b-41f1-a3c5-d5ac53972f86","branchVersion",349,"latest",true,"createdAt",["D",1789367821505],"version",5,"fileType","script","content","import type { RunContext } from './connection/index.ts';\nimport type { ScenarioContext } from './mock-server/index.ts';\nimport type { AuthorizationServerOptions } from './schemas.ts';\nimport type { Step } from './steps/index.ts';\n\nexport type CheckStatus =\n | 'SUCCESS'\n | 'FAILURE'\n | 'WARNING'\n | 'SKIPPED'\n | 'INFO';\n\nexport interface SpecReference {\n id: string;\n url?: string;\n}\n\nexport interface ConformanceCheck {\n id: string;\n name: string;\n description: string;\n status: CheckStatus;\n timestamp: string;\n specReferences?: SpecReference[];\n /**\n * Optional spec-version range for this individual check. When set, runners\n * drop the check for `--spec-version` values outside the range.\n */\n source?: ScenarioSource;\n details?: Record;\n metadata?: Record;\n errorMessage?: string;\n logs?: string[];\n}\n\nexport const DATED_SPEC_VERSIONS = [\n '2025-03-26',\n '2025-06-18',\n '2025-11-25'\n] as const;\n\nexport type DatedSpecVersion = (typeof DATED_SPEC_VERSIONS)[number];\n\nexport const LATEST_SPEC_VERSION: DatedSpecVersion = '2025-11-25';\n\n/**\n * Wire `protocolVersion` for the in-progress spec. Mirrors\n * `LATEST_PROTOCOL_VERSION` in the spec repo's `schema/draft/schema.ts`;\n * bump when that constant changes.\n */\nexport const DRAFT_PROTOCOL_VERSION = '2026-07-28';\n\n// Wire protocolVersion strings the mock server will negotiate on initialize.\nexport const NEGOTIABLE_PROTOCOL_VERSIONS: readonly string[] = [\n '2025-06-18',\n LATEST_SPEC_VERSION,\n DRAFT_PROTOCOL_VERSION\n];\n\n/**\n * A spec revision the conformance suite can target via `--spec-version`.\n * Always a wire `protocolVersion` string. The CLI also accepts `'draft'` as\n * an alias for {@link DRAFT_PROTOCOL_VERSION}.\n */\nexport type SpecVersion = DatedSpecVersion | typeof DRAFT_PROTOCOL_VERSION;\n\n/** Spec versions in timeline order, dated revisions followed by the draft. */\nexport const SPEC_VERSION_TIMELINE: readonly SpecVersion[] = [\n ...DATED_SPEC_VERSIONS,\n DRAFT_PROTOCOL_VERSION\n];\n\n/** True when `v` names a known spec version (dated or draft). */\nexport function isSpecVersion(v: unknown): v is SpecVersion {\n return SPEC_VERSION_TIMELINE.includes(v as SpecVersion);\n}\n\n/**\n * True when `v` is at or after `threshold` on the spec timeline. Lets a check\n * gate itself to the version that introduced its requirement (e.g. a draft-only\n * requirement passes `DRAFT_PROTOCOL_VERSION` as the threshold).\n */\nexport function specVersionAtLeast(\n v: SpecVersion,\n threshold: SpecVersion\n): boolean {\n return (\n SPEC_VERSION_TIMELINE.indexOf(v) >= SPEC_VERSION_TIMELINE.indexOf(threshold)\n );\n}\n\n// Scenarios may also be tagged 'extension' to mark them as off-timeline\n// (selectable via --suite extensions, never via --spec-version). See #256.\nexport type ScenarioSpecTag = SpecVersion | 'extension';\n\n/**\n * Known protocol extensions that this suite has scenarios for.\n * Values are SEP-2133 extension identifiers (the keys used in\n * `capabilities.extensions`).\n */\nexport const EXTENSION_IDS = [\n 'io.modelcontextprotocol/oauth-client-credentials',\n 'io.modelcontextprotocol/enterprise-managed-authorization',\n 'io.modelcontextprotocol/auth/dpop',\n 'io.modelcontextprotocol/auth/wif',\n 'io.modelcontextprotocol/tasks',\n 'io.modelcontextprotocol/skills'\n] as const;\nexport type ExtensionId = (typeof EXTENSION_IDS)[number];\n\n/**\n * Where a scenario's requirement comes from. Either the dated spec timeline\n * (`introducedIn`/`removedIn`) or a named protocol extension that lives\n * outside the spec release cycle. Extensions never match `--spec-version`.\n */\nexport type ScenarioSource =\n | {\n introducedIn: DatedSpecVersion | typeof DRAFT_PROTOCOL_VERSION;\n removedIn?: DatedSpecVersion | typeof DRAFT_PROTOCOL_VERSION;\n }\n | { extensionId: ExtensionId };\n\nexport interface ScenarioUrls {\n serverUrl: string;\n authUrl?: string;\n /**\n * Optional context to pass to the client via MCP_CONFORMANCE_CONTEXT env var.\n * This is a JSON-serializable object containing scenario-specific data like credentials.\n */\n context?: Record;\n}\n\n/** A Node-style request handler — what `http.createServer` accepts. */\nexport type RequestListener = (\n req: import('http').IncomingMessage,\n res: import('http').ServerResponse\n) => void;\n\nexport interface Scenario {\n name: string;\n description: string;\n source: ScenarioSource;\n /**\n * If true, a non-zero client exit code is expected and will not cause the test to fail.\n * Use this for scenarios where the client is expected to error (e.g., rejecting invalid auth).\n */\n allowClientError?: boolean;\n /**\n * Sub-path of the MCP endpoint relative to the handler root. The CLI runner\n * appends this to the listen URL; the hosted runner appends it to the\n * mounted prefix. Default: '' (handler root is the MCP endpoint).\n */\n mcpPath?: string;\n /**\n * Return the request handler without binding a port. The hosted runner\n * mounts this directly under a path prefix so scenarios can run on\n * serverless hosts that don't allow loopback listeners.\n *\n * `getBaseUrl` returns the public URL this handler is reachable at (no\n * trailing slash) — use it for scenarios that embed self-referential\n * absolute URLs in responses. Called lazily so `start()` can resolve it\n * after the OS assigns a port.\n *\n * `ctx` is the same per-run context `start()` receives (resolved spec\n * version + version-aware mock factory); use `ctx.createHandler()` rather\n * than `ctx.createServer()` so the scenario stays port-free.\n *\n * Implementations should reset per-run state here, not in `start()`.\n * If omitted, the scenario only runs via `start()`/`stop()` (e.g. auth\n * scenarios that need a second origin).\n */\n handler?(getBaseUrl: () => string, ctx: ScenarioContext): RequestListener;\n /**\n * Return a new, unstarted instance configured like this one. The hosted\n * runner creates one scenario instance per run (and one to re-judge a\n * persisted log) from the registry entry; by default it calls the\n * constructor with no arguments, so a scenario whose constructor takes\n * parameters (e.g. one class registered under several names) must\n * implement this to carry them over.\n */\n fresh?(): Scenario;\n /**\n * Called on a fresh instance before it judges a merged log (the hosted\n * server's re-judgement, src/hosted/session.ts), with the revision the\n * cell ran at: the one piece of the run's context such an instance cannot\n * read from the log. Scenarios whose verdicts depend on the revision\n * record it here.\n */\n judgeAt?(specVersion: SpecVersion): void;\n start(ctx: ScenarioContext): Promise;\n stop(): Promise;\n getChecks(): ConformanceCheck[];\n /**\n * Checks recorded so far WITHOUT end-of-flow finalization. Some scenarios'\n * `getChecks()` appends aggregate failures for flow steps never observed\n * (\"expected check missing\"); those judgments are only meaningful when one\n * instance saw the whole flow. The hosted server persists this view per\n * process and re-judges the merged log once (see src/hosted/session.ts),\n * so it reads this view when present.\n */\n rawChecks?(): ConformanceCheck[];\n /**\n * Whether the scenario's answer to `server/discover` depends on what it\n * has already recorded in the run (request-metadata turns away the run's\n * first request, a discover included). The hosted server answers a\n * discover before it loads the run's history from its store (see\n * src/hosted/session.ts) unless this is set.\n */\n readonly discoverReadsHistory?: boolean;\n /**\n * Whether the scenario's resource server serves its protected resource\n * metadata only at the bare origin-root path\n * (`/.well-known/oauth-protected-resource`), which no client can tie to\n * one MCP URL. The hosted server, where every cell shares one origin,\n * answers that path for the cell of such a scenario that most recently\n * answered with a 401 (see src/hosted/root-prm.ts).\n */\n readonly servesRootPrm?: boolean;\n /**\n * Whether the scenario decides how to answer a request from what its log\n * already holds (the migration scenario switches authorization servers\n * once a token has been accepted). The hosted server then brings the\n * scenario's log up to date from its store before every request, not only\n * the first one a process sees, so a request that lands on another\n * process sees what the previous one recorded (src/hosted/session.ts).\n */\n readonly answersFromLog?: boolean;\n /**\n * Client-side choreography as data (see src/steps). When present the\n * runner includes it in MCP_CONFORMANCE_CONTEXT as `steps`, so a client\n * with no bespoke handler for this scenario can still drive it.\n */\n readonly steps?: readonly Step[];\n}\n\n/**\n * Convenience: implement `handler()` + `mcpPath` and get `start()`/`stop()`\n * for free. Covers every scenario that just needs one HTTP origin.\n */\nexport abstract class HandlerScenario implements Scenario {\n abstract name: string;\n abstract description: string;\n abstract readonly source: ScenarioSource;\n allowClientError?: boolean;\n mcpPath = '';\n\n private _server: import('http').Server | null = null;\n private _baseUrl = '';\n\n abstract handler(\n getBaseUrl: () => string,\n ctx: ScenarioContext\n ): RequestListener;\n abstract getChecks(): ConformanceCheck[];\n\n async start(ctx: ScenarioContext): Promise {\n const http = await import('node:http');\n const listener = this.handler(() => this._baseUrl, ctx);\n return new Promise((resolve, reject) => {\n this._server = http.createServer(listener);\n this._server.on('error', reject);\n this._server.listen(0, () => {\n const addr = this._server!.address();\n if (!addr || typeof addr !== 'object') {\n return reject(new Error('Failed to get server address'));\n }\n this._baseUrl = `http://localhost:${addr.port}`;\n resolve({ serverUrl: `${this._baseUrl}${this.mcpPath}` });\n });\n });\n }\n\n async stop(): Promise {\n if (!this._server) return;\n await new Promise((resolve) => {\n // closeAllConnections so hung SSE streams don't keep the process alive\n this._server!.closeAllConnections?.();\n this._server!.close(() => resolve());\n });\n this._server = null;\n }\n}\n\n/**\n * Named extra origins a multi-origin scenario needs beyond the resource\n * server. `as` is the OAuth authorization server; `as2`/`idp` cover the\n * three-origin scenarios (authorization-server-migration, EMA).\n */\nexport type AuxOriginRole = 'as' | 'as2' | 'idp';\n\n/**\n * What `authHandlers()` receives: the per-run `ScenarioContext` (spec\n * version, mock factories) plus the public URLs of each origin.\n */\nexport interface AuthHandlerContext extends ScenarioContext {\n /** Public URL of the resource-server mount (no trailing slash). */\n getRsBaseUrl: () => string;\n /**\n * Public URL of an aux origin for this run (no trailing slash). When\n * hosted, this is `/r/` so the run-id is recoverable\n * from any path the client constructs from it (RFC 8414 well-known\n * insertion, endpoint paths, etc.).\n */\n getAuxBaseUrl: (role: AuxOriginRole) => string;\n}\n\nexport interface AuthHandlers {\n /** Resource-server handler — serves /mcp and PRM. */\n rs: RequestListener;\n /** Aux-origin handlers keyed by role. */\n aux: Partial>;\n}\n\n/**\n * Convenience: implement `authHandlers()` and get `start()`/`stop()` for\n * free. `start()` binds one ephemeral localhost port per origin, exactly as\n * the auth scenarios did with `ServerLifecycle` before; the hosted runner\n * mounts the same handlers behind path prefixes + an AS relay instead.\n */\nexport abstract class AuthHandlerScenario implements Scenario {\n abstract name: string;\n abstract description: string;\n abstract readonly source: ScenarioSource;\n allowClientError?: boolean;\n mcpPath = '/mcp';\n\n /** Aux origins this scenario needs. Override for 3-origin scenarios. */\n readonly auxRoles: readonly AuxOriginRole[] = ['as'];\n\n private _servers: import('http').Server[] = [];\n private _urls: { rs: string; aux: Partial> } = {\n rs: '',\n aux: {}\n };\n\n abstract authHandlers(ctx: AuthHandlerContext): AuthHandlers;\n abstract getChecks(): ConformanceCheck[];\n\n /** Optional context to pass to the client (credentials etc). */\n protected scenarioContext?(): Record;\n\n async start(ctx: ScenarioContext): Promise {\n const http = await import('node:http');\n const handlers = this.authHandlers({\n ...ctx,\n getRsBaseUrl: () => this._urls.rs,\n getAuxBaseUrl: (role) => {\n const u = this._urls.aux[role];\n if (!u) throw new Error(`aux role '${role}' not started`);\n return u;\n }\n });\n\n const listen = (h: RequestListener): Promise =>\n new Promise((resolve, reject) => {\n const srv = http.createServer(h);\n srv.on('error', reject);\n srv.listen(0, () => {\n const addr = srv.address();\n if (!addr || typeof addr !== 'object') {\n return reject(new Error('Failed to get server address'));\n }\n this._servers.push(srv);\n resolve(`http://localhost:${addr.port}`);\n });\n });\n\n // Aux origins must come up first — RS handlers reference their URLs.\n for (const role of this.auxRoles) {\n const h = handlers.aux[role];\n if (!h) throw new Error(`authHandlers() missing aux role '${role}'`);\n this._urls.aux[role] = await listen(h);\n }\n this._urls.rs = await listen(handlers.rs);\n\n return {\n serverUrl: `${this._urls.rs}${this.mcpPath}`,\n ...(this.scenarioContext && { context: this.scenarioContext() })\n };\n }\n\n async stop(): Promise {\n await Promise.all(\n this._servers.map(\n (s) =>\n new Promise((resolve) => {\n s.closeAllConnections?.();\n s.close(() => resolve());\n })\n )\n );\n this._servers = [];\n this._urls = { rs: '', aux: {} };\n }\n}\n\nexport interface ClientScenario {\n name: string;\n description: string;\n source: ScenarioSource;\n run(ctx: RunContext): Promise;\n}\n\nexport interface ClientScenarioForAuthorizationServer {\n name: string;\n description: string;\n source: ScenarioSource;\n run(\n options: AuthorizationServerOptions,\n details: Record\n ): Promise;\n}\n","deleted",false,"label",[47,24],"src","7dcb6042-d92f-40c5-9cc8-0f661f96e58b",["D",1789043604380],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","f4518a30-f52b-4b12-891c-a8fffb7240f8","pinnedFileId","e6dd13e2-ad13-11f1-a612-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a07c12-b73a-76de-b96a-421ce8582af6","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_104":-5},"org",{"_9":10,"_98":99,"_100":-5,"_57":-5,"_101":102,"_103":44},"branch",{"_37":88,"_11":89,"_22":30,"_90":48,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":12,"_97":10},"isOwned",396,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","MCP Conformance","avatar","tier","free","canRestrictVals","profileImageUrl","ctx",{"_81":-5,"_138":139,"_140":141,"_142":143,"_144":44,"_145":44,"_146":44,"_147":34,"_148":-5,"_149":-7,"_150":-7,"_151":65,"_152":44,"_153":44,"_154":-5,"_155":44,"_156":44,"_157":44,"_158":-5},"ENV",{"_109":110,"_111":112,"_113":89,"_114":115,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135,"_136":137},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]