[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_106":107,"_108":109},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","mcpconformance","name","mcp-client-conformance","path","src/validation/wire-schema.ts","project",{"_22":49,"_11":12,"_35":50,"_51":-5,"_52":44,"_53":54,"_55":54,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":34,"_63":-5,"_64":-5,"_65":66,"_67":68,"_69":-5,"_70":-5,"_71":-5,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":44},"file",{"_22":23,"_11":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":-5,"_13":46},"permalink","https://www.val.town/x/mcpconformance/mcp-client-conformance/code/src/validation/wire-schema.ts","extension","id","c9ec12b4-31a7-4c61-89e8-203a582861e5","wire-schema.ts","fileId","5780340a-ad1c-11f1-9ee5-1607ee4eb77e","parentId","6dc85620-eb35-4dba-918f-1b64fb950561","branchId","fdc11199-683b-41f1-a3c5-d5ac53972f86","branchVersion",337,"latest",true,"createdAt",["D",1789346129999],"version",2,"fileType","script","content","// Validates wire JSON-RPC messages against the vendored per-version spec schema\n// (src/spec-types/*.schema.json): envelope, then typed defs via method/error.code consts and\n// request→result pairs. Known gap: the client-auth scenarios' express mock is not instrumented.\n\nimport { AsyncLocalStorage } from 'node:async_hooks';\nimport { Ajv, type ValidateFunction, type ErrorObject } from 'npm:ajv@^8.20.0';\nimport { Ajv2020 } from 'npm:ajv@^8.20.0/dist/2020.js';\nimport { default as addFormats } from 'npm:ajv-formats@^3.0.1';\nimport {\n DRAFT_PROTOCOL_VERSION,\n type ConformanceCheck,\n type SpecVersion\n} from '../types.ts';\nimport schema2025_03_26 from '../spec-types/2025-03-26.schema.json.ts';\nimport schema2025_06_18 from '../spec-types/2025-06-18.schema.json.ts';\nimport schema2025_11_25 from '../spec-types/2025-11-25.schema.json.ts';\nimport schemaDraft from '../spec-types/draft.schema.json.ts';\n\nexport type WireOrigin = 'harness' | 'implementation';\n\nexport interface WireMessageInfo {\n /** Who authored the message: the harness or the implementation-under-test. */\n origin: WireOrigin;\n /** Human-readable location, e.g. `stateless request 'tools/call'`. */\n context: string;\n /** For responses: the answered request's method, so the result is validated\n * against its typed result definition. */\n requestMethod?: string;\n}\n\nexport interface WireSchemaViolation {\n origin: WireOrigin;\n specVersion: SpecVersion;\n context: string;\n errors: string[];\n message: unknown;\n}\n\nconst SCHEMAS: Record> = {\n '2025-03-26': schema2025_03_26,\n '2025-06-18': schema2025_06_18,\n '2025-11-25': schema2025_11_25,\n [DRAFT_PROTOCOL_VERSION]: schemaDraft\n};\n\n/** Spec-repo directory name for a version (the draft is pinned unversioned). */\nexport function schemaDirFor(specVersion: SpecVersion): string {\n return specVersion === DRAFT_PROTOCOL_VERSION ? 'draft' : specVersion;\n}\n\n/**\n * Spec-repo schema directory a check cites for a version: a dated version's\n * own directory. 2026-07-28 is released, and schema/draft on main moves on\n * past it; only an undated draft marker still cites schema/draft.\n */\nexport function schemaCitationDirFor(specVersion: SpecVersion): string {\n return /^\\d{4}-\\d{2}-\\d{2}$/.test(specVersion) ? specVersion : 'draft';\n}\n\n/** Union definitions that alias a single concrete type (and so carry a\n * `method` const) but are not the canonical definition for that method. */\nconst NON_CANONICAL_DEFS = new Set([\n 'ClientRequest',\n 'ClientNotification',\n 'ClientResult',\n 'ClientMessage',\n 'ServerRequest',\n 'ServerNotification',\n 'ServerResult',\n 'ServerMessage'\n]);\n\n/** resultType values defined by the core schema (SEP-2322). */\nconst CORE_RESULT_TYPES: ReadonlySet = new Set([\n 'complete',\n 'input_required'\n]);\n/**\n * resultType values defined by known protocol extensions whose result schema\n * is not vendored here yet; validated against the generic result envelope.\n * - 'task': io.modelcontextprotocol/tasks CreateTaskResult (SEP-2663).\n */\nconst EXTENSION_RESULT_TYPES: ReadonlySet = new Set(['task']);\n\ninterface CompiledSpec {\n defsKey: '$defs' | 'definitions';\n defs: Record>;\n /** JSON-RPC method → canonical request/notification definition name. */\n methodDefs: Map;\n /** `error.code` const → typed error-response definition name. */\n errorDefs: Map;\n /** JSON-RPC method → typed result definition name. */\n resultDefs: Map;\n validatorFor(defName: string): ValidateFunction;\n}\n\nconst compiledSpecs = new Map();\n\n/** Versions whose schema has been compiled so far (each on first use). */\nexport function compiledSpecVersions(): SpecVersion[] {\n return Array.from(compiledSpecs.keys());\n}\n\n/** Patch known generator bugs in released spec schema.json files at load time\n * so validation matches the schema.ts source of truth; delete each branch (a\n * test trips) once the dated schema is fixed upstream and re-vendored. */\nfunction applySchemaErrata(\n specVersion: SpecVersion,\n schema: Record\n): Record {\n if (specVersion !== '2025-11-25' && specVersion !== '2025-06-18') {\n return schema;\n }\n // NumberSchema minimum/maximum (plus default at 2025-11-25) are generated\n // as `integer`, contradicting schema.ts (`number`). Fixed for draft in\n // modelcontextprotocol#2710; dated fixes proposed in modelcontextprotocol#3139.\n const patched = structuredClone(schema);\n const defs = (patched.$defs ?? patched.definitions) as Record<\n string,\n { properties?: Record }\n >;\n for (const prop of ['minimum', 'maximum', 'default']) {\n const p = defs.NumberSchema?.properties?.[prop];\n if (p?.type === 'integer') p.type = 'number';\n }\n return patched;\n}\n\nfunction compileSpec(specVersion: SpecVersion): CompiledSpec {\n let compiled = compiledSpecs.get(specVersion);\n if (compiled) return compiled;\n\n const schema = applySchemaErrata(specVersion, SCHEMAS[specVersion]);\n const is2020 =\n typeof schema.$schema === 'string' && schema.$schema.includes('2020-12');\n // The spec schemas are not authored for ajv strict mode; validate them\n // as-is rather than editing vendored files.\n const options = { strict: false, allErrors: true } as const;\n const ajv = is2020 ? new Ajv2020(options) : new Ajv(options);\n addFormats(ajv);\n // \"byte\" (base64) is an OpenAPI format ajv-formats doesn't ship; the spec\n // uses it on blob contents. Accept any string rather than reimplementing it.\n ajv.addFormat('byte', true);\n\n const schemaId = `mcp://${schemaDirFor(specVersion)}/schema.json`;\n ajv.addSchema({ ...schema, $id: schemaId });\n\n const defsKey: '$defs' | 'definitions' =\n '$defs' in schema ? '$defs' : 'definitions';\n const defs = schema[defsKey] as Record>;\n\n const methodDefs = new Map();\n const errorDefs = new Map();\n const resultDefs = new Map();\n for (const [name, def] of Object.entries(defs)) {\n if (NON_CANONICAL_DEFS.has(name)) continue;\n const props = (def.properties ?? {}) as Record<\n string,\n Record\n >;\n const method = props.method?.const;\n if (typeof method === 'string') {\n methodDefs.set(method, name);\n if (name.endsWith('Request')) {\n const resultName = `${name.slice(0, -'Request'.length)}Result`;\n if (resultName in defs) resultDefs.set(method, resultName);\n }\n }\n const errorProp = props.error as\n | { allOf?: { properties?: { code?: { const?: unknown } } }[] }\n | undefined;\n for (const part of errorProp?.allOf ?? []) {\n const code = part.properties?.code?.const;\n if (typeof code === 'number') errorDefs.set(code, name);\n }\n }\n\n const validators = new Map();\n compiled = {\n defsKey,\n defs,\n methodDefs,\n errorDefs,\n resultDefs,\n validatorFor(defName: string): ValidateFunction {\n let v = validators.get(defName);\n if (!v) {\n v = ajv.compile({ $ref: `${schemaId}#/${defsKey}/${defName}` });\n validators.set(defName, v);\n }\n return v;\n }\n };\n compiledSpecs.set(specVersion, compiled);\n return compiled;\n}\n\n/** Dispatch maps extracted from a version's schema (method → request/notification def,\n * `error.code` const → error def). Exposed so a unit test can pin them: if a schema sync\n * restructures what the extraction walks, validation silently degrades to envelope-only. */\nexport function specDispatchMaps(specVersion: SpecVersion): {\n methodDefs: ReadonlyMap;\n errorDefs: ReadonlyMap;\n resultDefs: ReadonlyMap;\n} {\n const spec = compileSpec(specVersion);\n return {\n methodDefs: spec.methodDefs,\n errorDefs: spec.errorDefs,\n resultDefs: spec.resultDefs\n };\n}\n\nfunction formatErrors(\n defName: string,\n errors: ErrorObject[] | null | undefined\n): string[] {\n const MAX = 6;\n const formatted = (errors ?? []).map(\n (e) =>\n `${defName}${e.instancePath || ''}: ${e.message ?? 'invalid'}` +\n (e.keyword === 'const' || e.keyword === 'enum'\n ? ` (${JSON.stringify(e.params)})`\n : '')\n );\n if (formatted.length > MAX) {\n return [\n ...formatted.slice(0, MAX),\n `... ${formatted.length - MAX} more error(s)`\n ];\n }\n return formatted.length > 0 ? formatted : [`${defName}: invalid`];\n}\n\n/** Validate a single JSON-RPC message against the given spec version's schema.\n * Returns `[]` when the message is valid. Pure — does not touch the recorder. */\nexport function wireSchemaErrors(\n specVersion: SpecVersion,\n message: unknown,\n requestMethod?: string\n): string[] {\n const spec = compileSpec(specVersion);\n const validateAgainst = (defName: string, value: unknown): string[] => {\n const validate = spec.validatorFor(defName);\n return validate(value) ? [] : formatErrors(defName, validate.errors);\n };\n const firstDef = (...names: string[]): string =>\n names.find((n) => n in spec.defs) ?? names[names.length - 1];\n\n if (Array.isArray(message)) {\n // A batch: only legal where the envelope union admits arrays (2025-03-26).\n // Limitation: `requestMethod` is forwarded to every element, so batched responses all\n // validate against one result type — no caller sends batched requests today.\n const elementErrors = message.flatMap((m, i) =>\n wireSchemaErrors(specVersion, m, requestMethod).map((e) => `[${i}] ${e}`)\n );\n if (elementErrors.length > 0) return elementErrors;\n if (validateAgainst('JSONRPCMessage', message).length > 0) {\n return [\n 'JSONRPCMessage: batch arrays are not valid in this spec version'\n ];\n }\n return [];\n }\n\n const msg = (\n typeof message === 'object' && message !== null ? message : {}\n ) as Record;\n\n // Classify the message and validate against the most specific definition\n // the schema has for it. The typed definitions include the envelope\n // requirements (jsonrpc, id, method, ...), so they subsume the union check.\n if (typeof msg.method === 'string') {\n const defName =\n spec.methodDefs.get(msg.method) ??\n ('id' in msg ? 'JSONRPCRequest' : 'JSONRPCNotification');\n return validateAgainst(defName, message);\n }\n\n if (msg.error !== undefined && msg.error !== null) {\n const code = (msg.error as Record).code;\n const defName =\n (typeof code === 'number' ? spec.errorDefs.get(code) : undefined) ??\n firstDef('JSONRPCErrorResponse', 'JSONRPCError');\n return validateAgainst(defName, message);\n }\n\n if (msg.result !== undefined) {\n // SEP-2322 (MRTR): any request may be answered with an InputRequiredResult\n // instead of its method's result type; discriminate on resultType. Results\n // introduced by a known extension (e.g. the tasks extension's\n // CreateTaskResult, resultType \"task\") use the same open discriminator and\n // are checked against the generic result envelope until their schema is\n // vendored here. Any other resultType is validated as the method's own\n // result (the discriminator is open, so it may be a private extension),\n // and a failure names the unrecognised value so the cause is obvious.\n const resultType = (msg.result as Record | null)\n ?.resultType;\n const inputRequired =\n resultType === 'input_required' && 'InputRequiredResult' in spec.defs;\n const extensionResult =\n typeof resultType === 'string' && EXTENSION_RESULT_TYPES.has(resultType);\n const unrecognisedResultType =\n typeof resultType === 'string' &&\n !CORE_RESULT_TYPES.has(resultType) &&\n !extensionResult\n ? resultType\n : undefined;\n let resultDefName: string | undefined;\n if (inputRequired) {\n resultDefName = 'InputRequiredResult';\n } else if (!extensionResult && requestMethod !== undefined) {\n resultDefName = spec.resultDefs.get(requestMethod);\n }\n if (resultDefName) {\n const hint = unrecognisedResultType\n ? `; resultType '${unrecognisedResultType}' is not a core value or a known extension result (${[...EXTENSION_RESULT_TYPES].map((t) => `'${t}'`).join(', ')}), so it was validated as ${resultDefName}`\n : '';\n const typed = validateAgainst(resultDefName, msg.result).map(\n (e) => `${e} (result of '${requestMethod}')${hint}`\n );\n if (typed.length > 0) return typed;\n }\n return validateAgainst(\n firstDef('JSONRPCResultResponse', 'JSONRPCResponse'),\n message\n );\n }\n\n return [\n 'JSONRPCMessage: not a valid JSON-RPC request, notification, or response'\n ];\n}\n\n// Recorder: choke points record every message; runners (and the vitest hook)\n// drain the accumulated violations per scenario / test. Suite runs execute\n// scenarios concurrently, so each scenario gets its own recorder via\n// AsyncLocalStorage; code outside any scope falls back to the global recorder.\n\ninterface RecorderState {\n violations: WireSchemaViolation[];\n observed: number;\n}\n\nconst recorderStorage = new AsyncLocalStorage();\nconst globalRecorder: RecorderState = { violations: [], observed: 0 };\n\nfunction recorder(): RecorderState {\n return recorderStorage.getStore() ?? globalRecorder;\n}\n\n/** Run `fn` with its own isolated wire recorder. Async work started inside\n * `fn` (mock servers, transport hooks) records into that recorder, so\n * concurrent scenarios in a suite run cannot steal or wipe each other's\n * violations. */\nexport function withWireRecorder(fn: () => Promise): Promise {\n return recorderStorage.run({ violations: [], observed: 0 }, fn);\n}\n\n/** Validate a wire message and record any violation. Called by choke points. */\nexport function validateWireMessage(\n specVersion: SpecVersion,\n message: unknown,\n info: WireMessageInfo\n): void {\n const state = recorder();\n state.observed++;\n const errors = wireSchemaErrors(specVersion, message, info.requestMethod);\n if (errors.length > 0) {\n state.violations.push({\n origin: info.origin,\n specVersion,\n context: info.context,\n errors,\n message\n });\n }\n}\n\nexport function resetWireValidation(): void {\n const state = recorder();\n state.violations = [];\n state.observed = 0;\n}\n\n/** Return everything recorded since the last reset, and reset. */\nexport function takeWireViolations(): {\n violations: WireSchemaViolation[];\n observed: number;\n} {\n const state = recorder();\n const result = { violations: state.violations, observed: state.observed };\n resetWireValidation();\n return result;\n}\n\nfunction violationDetails(v: WireSchemaViolation): Record {\n return {\n origin: v.origin,\n specVersion: v.specVersion,\n context: v.context,\n errors: v.errors,\n message: v.message\n };\n}\n\nexport function formatWireViolation(v: WireSchemaViolation): string {\n return (\n `[${v.origin}] ${v.context} (spec ${v.specVersion}): ` +\n `${v.errors.join('; ')} — message: ${JSON.stringify(v.message)}`\n );\n}\n\n/** Drain the recorder and synthesize the per-scenario conformance checks. Returns `[]`\n * when no wire traffic was observed (e.g. a scenario asserting only on raw HTTP). */\nexport function wireSchemaChecks(specVersion: SpecVersion): ConformanceCheck[] {\n const { violations: all, observed: count } = takeWireViolations();\n if (count === 0 && all.length === 0) return [];\n\n const timestamp = new Date().toISOString();\n const specReferences = [\n {\n id: 'MCP-Schema',\n url: `https://github.com/modelcontextprotocol/modelcontextprotocol/blob/main/schema/${schemaCitationDirFor(specVersion)}/schema.json`\n }\n ];\n const checks: ConformanceCheck[] = [];\n\n const implViolations = all.filter((v) => v.origin === 'implementation');\n checks.push({\n id: 'wire-schema-valid',\n name: 'WireSchemaValid',\n description:\n 'Every JSON-RPC message the implementation sent is valid per the spec JSON schema for the negotiated spec version',\n status: implViolations.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp,\n specReferences,\n details: {\n messagesValidated: count,\n violations: implViolations.map(violationDetails)\n },\n errorMessage:\n implViolations.length > 0\n ? implViolations.map(formatWireViolation).join('\\n')\n : undefined\n });\n\n const harnessViolations = all.filter((v) => v.origin === 'harness');\n if (harnessViolations.length > 0) {\n checks.push({\n id: 'wire-schema-harness-error',\n name: 'WireSchemaHarnessError',\n description:\n 'HARNESS ERROR: the conformance harness itself sent a JSON-RPC message the spec JSON schema forbids. This is a bug in the harness or a scenario fixture, not in the implementation under test.',\n status: 'FAILURE',\n timestamp,\n specReferences,\n details: { violations: harnessViolations.map(violationDetails) },\n errorMessage:\n 'HARNESS ERROR: ' +\n harnessViolations.map(formatWireViolation).join('\\n')\n });\n }\n\n return checks;\n}\n","deleted",false,"label",[47,48,24],"src","validation","7dcb6042-d92f-40c5-9cc8-0f661f96e58b",["D",1789043604380],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","f4518a30-f52b-4b12-891c-a8fffb7240f8","pinnedFileId","e6dd13e2-ad13-11f1-a612-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a07c12-b73a-76de-b96a-421ce8582af6","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_105":-5},"org",{"_9":10,"_99":100,"_101":-5,"_58":-5,"_102":103,"_104":44},"branch",{"_37":89,"_11":90,"_22":30,"_91":49,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":12,"_98":10},"isOwned",396,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","MCP Conformance","avatar","tier","free","canRestrictVals","profileImageUrl","ctx",{"_82":-5,"_139":140,"_141":142,"_143":144,"_145":44,"_146":44,"_147":44,"_148":34,"_149":-5,"_150":-7,"_151":-7,"_152":66,"_153":44,"_154":44,"_155":-5,"_156":44,"_157":44,"_158":44,"_159":-5},"ENV",{"_110":111,"_112":113,"_114":90,"_115":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]