Hold on — this client led with `initialize`

The client you are testing started its session with an\ninitialize request. That is invalid in the new\nstateless protocol (2026-07-28 / SEP-2575) — there is no handshake;\nevery request carries the protocol version, client info, and capabilities\nitself.

You can continue with the test if you want: the gauntlet will serve this\nclient's classic flow and report what it is missing (see the\ndraft_readiness tool and the initialize result's instructions).\nBut know that leading with initialize will not work against\nstateless draft servers.

I understand — continue with the test

\n`);\n });\n\n app.get('/oauth/authorize/continue', (req, res) => {\n const q = req.query as Record;\n if (!q.redirect_uri) {\n res.status(400).json({\n error: 'invalid_request',\n error_description: 'redirect_uri required'\n });\n return;\n }\n const redirect = new URL(q.redirect_uri);\n const code = Buffer.from(\n JSON.stringify({\n consent: 'gauntlet-initialize',\n challenge: q.code_challenge ?? null\n })\n ).toString('base64url');\n redirect.searchParams.set('code', code);\n if (q.state !== undefined) redirect.searchParams.set('state', q.state);\n res.redirect(redirect.toString());\n });\n\n app.post('/oauth/token', (req, res) => {\n const grant = req.body as Record;\n let decoded: { consent?: string; challenge?: string | null };\n try {\n decoded = JSON.parse(\n Buffer.from(String(grant.code ?? ''), 'base64url').toString()\n );\n } catch {\n decoded = {};\n }\n if (\n grant.grant_type !== 'authorization_code' ||\n decoded.consent !== 'gauntlet-initialize'\n ) {\n res.status(400).json({ error: 'invalid_grant' });\n return;\n }\n if (decoded.challenge) {\n const expected = createHash('sha256')\n .update(String(grant.code_verifier ?? ''))\n .digest('base64url');\n if (expected !== decoded.challenge) {\n res.status(400).json({\n error: 'invalid_grant',\n error_description: 'PKCE verification failed'\n });\n return;\n }\n }\n res.json({\n access_token: CONSENT_TOKEN,\n token_type: 'Bearer',\n expires_in: 3600\n });\n });\n\n app.post('/', async (req: Request, res: Response) => {\n const body =\n req.body && !Array.isArray(req.body)\n ? (req.body as {\n method?: string;\n id?: unknown;\n params?: Record;\n })\n : {};\n const headerVersion = req.headers['mcp-protocol-version'];\n\n // This gauntlet tests the stateless draft protocol ONLY. A client\n // that falls back to a classic version (an `initialize` request or a\n // 2025-* version header) fails — but with a full inventory of what a\n // draft request must carry that this one didn't, so the failure is\n // also the upgrade guide. A request carrying draft `_meta` fields is\n // judged as draft no matter what its header claims (the disagreement\n // is reported, not routed around).\n const meta = (body.params?._meta ?? {}) as Record;\n const hasDraftMeta = Object.keys(meta).some((k) => k.startsWith(META_NS));\n const isClassicFallback =\n !hasDraftMeta &&\n ((body.method === 'initialize' && !isDraftVersion(headerVersion)) ||\n (headerVersion !== undefined &&\n CLASSIC_PROTOCOL_VERSIONS.includes(String(headerVersion))));\n\n // A consent token (minted by the initialize interstitial) means a\n // human read \"this client shouldn't do initialize\" and chose to\n // continue — serve the classic flow leniently from here on.\n const consented = req.headers.authorization === `Bearer ${CONSENT_TOKEN}`;\n if (isClassicFallback && consented) {\n const gaps = [...headerProblems(req), ...draftProblems(req, body)];\n check(\n this.checks,\n 'gauntlet-draft-readiness',\n 'Gauntlet: draft readiness (consented classic)',\n gaps.length === 0,\n 'Consented classic flow served leniently; draft gaps are advisory',\n { method: body.method, ...(gaps.length ? { gaps } : {}) },\n 'WARNING'\n );\n const server = createLenientClassicServer(this.checks, req, body);\n const transport = new StreamableHTTPServerTransport({\n sessionIdGenerator: undefined\n });\n await server.connect(transport);\n await transport.handleRequest(req, res, req.body);\n res.on('close', () => {\n void transport.close();\n void server.close();\n });\n return;\n }\n\n // initialize — and ONLY initialize — is gated on auth: the OAuth flow\n // lands a human on an HTML page explaining that the draft has no\n // initialize, with a \"continue anyway\" button. Clients without OAuth\n // get the same explanation in the 401 body. Recorded as WARNING so\n // the /x wrapper lets the 401 challenge through.\n if (isClassicFallback && body.method === 'initialize') {\n const explanation =\n 'This gauntlet tests the stateless draft protocol (2026-07-28): there is NO initialize handshake. Leading with initialize is invalid in the new spec. If your client supports OAuth, completing the authorization flow shows the full explanation and lets you continue testing the classic flow anyway; or point the client at this URL + /lenient for ungated advisory mode.';\n check(\n this.checks,\n 'gauntlet-transport-headers',\n 'Gauntlet: transport headers',\n false,\n 'Client led with initialize; challenged with the consent gate',\n { method: body.method, mode: 'initialize-consent-gate' },\n 'WARNING'\n );\n res\n .status(401)\n .set('WWW-Authenticate', `Bearer resource_metadata=\"${prmUrl()}\"`)\n .json({\n error: 'consent_required',\n explanation,\n problems: draftProblems(req, body)\n });\n return;\n }\n\n const problems = headerProblems(req);\n if (isClassicFallback) {\n problems.unshift(\n `Request declared classic protocol version '${String(headerVersion)}'. This gauntlet tests the stateless draft protocol only — declare 2026-07-28 (or DRAFT-2026-v1) in both the MCP-Protocol-Version header and _meta.`\n );\n }\n // Draft obligations are evaluated for EVERY request — for a classic\n // fallback this doubles as the itemized list of what was missing.\n problems.push(...draftProblems(req, body));\n\n check(\n this.checks,\n 'gauntlet-transport-headers',\n 'Gauntlet: transport headers',\n problems.length === 0,\n problems.length === 0\n ? 'Request carried conformant draft transport headers'\n : isClassicFallback\n ? 'Client fell back to a classic protocol version'\n : 'Request transport headers were not conformant',\n {\n method: body.method,\n mode: isClassicFallback ? 'classic-fallback-rejected' : 'draft',\n ...(problems.length ? { problems } : {})\n }\n );\n if (problems.length > 0) {\n res.status(400).json({\n error: 'conformance failure',\n mode: isClassicFallback ? 'classic-fallback-rejected' : 'draft',\n problems,\n hint: isClassicFallback\n ? 'Each listed problem is one thing a stateless draft request carries that this request did not. For advisory-only feedback that still serves classic flows, point the client at this URL + /lenient.'\n : 'Fix the listed transport problems and retry.'\n });\n return;\n }\n\n this.handleDraft(req, res, body);\n });\n\n // Lenient mode: old clients complete their flows (initialize included);\n // draft gaps are reported, not enforced. Tool failures stay isError\n // results, and gap checks are WARNINGs so the /x wrapper passes them.\n app.post('/lenient', async (req: Request, res: Response) => {\n const body =\n req.body && !Array.isArray(req.body)\n ? (req.body as {\n method?: string;\n id?: unknown;\n params?: Record;\n })\n : {};\n const headerVersion = req.headers['mcp-protocol-version'];\n const meta = (body.params?._meta ?? {}) as Record;\n const hasDraftMeta = Object.keys(meta).some((k) => k.startsWith(META_NS));\n\n const gaps = [...headerProblems(req), ...draftProblems(req, body)];\n check(\n this.checks,\n 'gauntlet-draft-readiness',\n 'Gauntlet: draft readiness (lenient)',\n gaps.length === 0,\n gaps.length === 0\n ? 'Request carries everything the stateless draft requires'\n : 'Request is missing draft obligations (advisory)',\n { method: body.method, ...(gaps.length ? { gaps } : {}) },\n 'WARNING'\n );\n\n if (!hasDraftMeta && !isDraftVersion(headerVersion)) {\n // Classic client: serve the real handshake so the flow completes;\n // the gap report rides in instructions and draft_readiness.\n const server = createLenientClassicServer(this.checks, req, body);\n const transport = new StreamableHTTPServerTransport({\n sessionIdGenerator: undefined\n });\n await server.connect(transport);\n await transport.handleRequest(req, res, req.body);\n res.on('close', () => {\n void transport.close();\n void server.close();\n });\n return;\n }\n\n this.handleDraft(req, res, body, true);\n });\n\n // Browsers get an explainer; programmatic GETs get the JSON hint.\n app.get('/', (req, res) => {\n if (!String(req.headers.accept ?? '').includes('text/html')) {\n res.status(405).json({\n error: 'stateless server: POST JSON-RPC to this URL',\n docs: 'open this URL in a browser for a full explanation'\n });\n return;\n }\n const base = getBaseUrl();\n res.type('html').send(`\nMCP Checker — 2026-07-28\n\n\n

MCP Checker — 2026-07-28

Conformance checker for the stateless draft MCP protocol\n(2026-07-28 / DRAFT-2026-v1) — and only that version. Other spec versions have their own checkers.

\n\n

How it works

This URL is the MCP endpoint. There is no run to mint and no results to\npoll: every request is judged on its own content. If your\nclient gets something wrong, the request itself fails with an explanation of\nwhat and why. If you can list the tools and call each one successfully, your\nclient is conformant for everything this server can observe.

POST ${base}            strict — stateless draft only\nPOST ${base}/lenient    advisory — classic clients complete, gaps reported

\n\n

What is checked

Every POST: Accept / Content-Type, MCP-Protocol-Version header,\n_meta declarations (io.modelcontextprotocol/protocolVersion, clientInfo,\nclientCapabilities — SEP-2575), and Mcp-Method/Mcp-Name routing headers (SEP-2243).
validate_arguments: argument construction against the inputSchema —\nstring, JSON number (not stringified), and a same-document $ref (SEP-2106).
mrtr_confirm: the multi-round-trip flow (SEP-2322) — answer the\nelicitation request and retry with requestState echoed unchanged. Listed only when\nyour _meta clientCapabilities declare {\"elicitation\": {}}; otherwise an\nelicitation_missing placeholder explains the gap.
draft_readiness (lenient/consented): itemized report of what the request\nthat carried it is missing relative to the draft.

\n\n

Old clients

Leading with initialize is invalid in the stateless draft, so the strict\nendpoint gates it behind an OAuth consent screen: your client's auth flow lands a human on a\npage explaining the situation, with a continue button. Continuing mints the bearer token\n${CONSENT_TOKEN} — the token is the message — and the classic flow is then served\nwith advisory feedback. No other request requires auth. Prefer zero friction? Use\n${base}/lenient.

\n\n

Try it

curl -X POST ${base} \\\\\n  -H 'content-type: application/json' \\\\\n  -H 'accept: application/json, text/event-stream' \\\\\n  -H 'mcp-protocol-version: 2026-07-28' \\\\\n  -H 'mcp-method: tools/list' \\\\\n  -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"tools/list\",\"params\":{\"_meta\":{\n    \"io.modelcontextprotocol/protocolVersion\":\"2026-07-28\",\n    \"io.modelcontextprotocol/clientInfo\":{\"name\":\"my-client\",\"version\":\"1.0\"},\n    \"io.modelcontextprotocol/clientCapabilities\":{}}}}'

\n`);\n });\n\n return app;\n }\n\n /**\n * Draft-2026 dispatch: no lifecycle, plain JSON responses, every request\n * self-contained. Transport/draft obligations were already enforced.\n */\n private handleDraft(\n req: Request,\n res: Response,\n body: { method?: string; id?: unknown; params?: Record },\n lenient = false\n ): void {\n const reply = (result: object) => {\n // 2026-07-28 makes resultType REQUIRED on every Result; default it here so\n // every path is covered, and let callers override (e.g. 'input_required').\n res.json({\n jsonrpc: '2.0',\n id: body.id ?? null,\n result: { resultType: 'complete', ...result }\n });\n };\n\n switch (body.method) {\n case 'server/discover':\n reply({\n ttlMs: 0,\n cacheScope: 'public',\n supportedVersions: DRAFT_VERSION_ALIASES,\n capabilities: { tools: {} },\n serverInfo: SERVER_INFO,\n instructions:\n 'Call every tool once with valid arguments. Each tool validates ' +\n 'the request that carried it; any error explains what your ' +\n 'client got wrong.'\n });\n return;\n\n case 'tools/list': {\n const meta = (body.params?._meta ?? {}) as Record;\n const tools = GAUNTLET_TOOLS.map(\n ({ name, description, inputSchema }) => ({\n name,\n description,\n inputSchema\n })\n );\n // MRTR is only part of the contract for clients that can answer\n // elicitation requests — gate the listing on the declared capability\n // each request carries. Clients without it get a placeholder that\n // makes the gap (and how to close it) discoverable.\n tools.push(\n declaresElicitation(meta) ? MRTR_TOOL : ELICITATION_MISSING_TOOL\n );\n if (lenient) tools.push(DRAFT_READINESS_TOOL);\n reply({ ttlMs: 0, cacheScope: 'public', tools });\n return;\n }\n\n case 'tools/call': {\n const params = (body.params ?? {}) as {\n name?: string;\n arguments?: Record;\n inputResponses?: Record;\n requestState?: string;\n _meta?: Record;\n };\n\n if (params.name === DRAFT_READINESS_TOOL.name && lenient) {\n reply({\n content: [{ type: 'text', text: readinessReport(req, body) }]\n });\n return;\n }\n\n if (params.name === MRTR_TOOL.name) {\n reply(this.runMrtr(params, lenient));\n return;\n }\n\n if (params.name === ELICITATION_MISSING_TOOL.name) {\n const declared = declaresElicitation(\n (params._meta ?? {}) as Record\n );\n this.checks.push({\n id: 'gauntlet-elicitation-missing',\n name: 'Gauntlet: elicitation capability not declared',\n description:\n 'Client called the elicitation_missing placeholder tool',\n status: 'INFO',\n timestamp: new Date().toISOString(),\n specReferences: [SPEC_TOOLS],\n details: { declared }\n });\n reply({\n content: [\n {\n type: 'text',\n text: declared\n ? 'CONFORMANCE NOTE [elicitation_missing]: this request DOES declare the elicitation capability — list tools again and you will see mrtr_confirm instead of this placeholder.'\n : 'CONFORMANCE NOTE [elicitation_missing]: your client has not declared the elicitation capability, so the MRTR (SEP-2322) tool mrtr_confirm is hidden. This is conformant — elicitation is optional — but to exercise the full gauntlet, implement elicitation and declare it in _meta ' +\n `${META_NS}clientCapabilities as {\"elicitation\": {}}; the full tool list will then appear.`\n }\n ]\n });\n return;\n }\n\n // MRTR plumbing must not leak onto unrelated calls (SEP-2322).\n if (\n params.inputResponses !== undefined ||\n params.requestState !== undefined\n ) {\n const detail =\n 'inputResponses/requestState MUST only be sent when retrying the ' +\n 'tool that returned input_required; they leaked onto ' +\n `'${params.name ?? '(none)'}'`;\n check(\n this.checks,\n 'gauntlet-mrtr-leak',\n 'Gauntlet: MRTR state leak',\n false,\n 'MRTR retry fields leaked onto an unrelated tool call',\n { detail }\n );\n reply({\n content: [\n {\n type: 'text',\n text: `CONFORMANCE FAIL [${params.name}]: ${detail}`\n }\n ],\n isError: true\n });\n return;\n }\n\n reply(\n runTool(this.checks, params.name ?? '', params.arguments ?? {}, req)\n );\n return;\n }\n\n case 'initialize':\n case 'ping':\n case 'logging/setLevel':\n // Removed from the stateless draft protocol entirely.\n res.status(404).json({\n jsonrpc: '2.0',\n id: body.id ?? null,\n error: {\n code: -32601,\n message: `Method not found: '${body.method}' does not exist in the stateless draft protocol (use server/discover, not initialize)`\n }\n });\n return;\n\n default:\n res.status(404).json({\n jsonrpc: '2.0',\n id: body.id ?? null,\n error: {\n code: -32601,\n message: `Method not found: '${body.method ?? '(none)'}'. Supported: server/discover, tools/list, tools/call`\n }\n });\n }\n }\n\n /**\n * Two-phase MRTR tool. First call → input_required with a self-contained\n * requestState. Retry → validate the echoed state and the elicitation\n * response shape, then complete.\n */\n private runMrtr(\n params: {\n inputResponses?: Record;\n requestState?: string;\n },\n lenient = false\n ): object {\n if (params.inputResponses === undefined) {\n // Round 1: ask for confirmation via elicitation.\n return {\n resultType: 'input_required',\n inputRequests: {\n confirm: {\n method: 'elicitation/create',\n params: {\n message: 'Confirm the MRTR round-trip by answering this.',\n requestedSchema: {\n type: 'object',\n properties: { confirmed: { type: 'boolean' } },\n required: ['confirmed']\n }\n }\n }\n },\n requestState: encodeMrtrState()\n };\n }\n\n // Round 2: judge the retry on its own content.\n const problems: string[] = [];\n if (params.requestState === undefined) {\n problems.push(\n 'requestState MUST be echoed back unchanged on the retry (SEP-2322)'\n );\n } else if (!decodeMrtrState(params.requestState)) {\n problems.push(\n `requestState was altered — it MUST be echoed back byte-exact; got '${params.requestState.slice(0, 60)}'`\n );\n }\n const confirm = params.inputResponses.confirm as\n | { action?: unknown; content?: { confirmed?: unknown } }\n | undefined;\n if (!confirm || typeof confirm !== 'object') {\n problems.push(\n \"inputResponses MUST be keyed by the inputRequests key ('confirm')\"\n );\n } else {\n if (\n confirm.action !== 'accept' &&\n confirm.action !== 'decline' &&\n confirm.action !== 'cancel'\n ) {\n problems.push(\n `elicitation response action MUST be accept/decline/cancel; got ${JSON.stringify(confirm.action)}`\n );\n }\n if (\n confirm.action === 'accept' &&\n typeof confirm.content?.confirmed !== 'boolean'\n ) {\n problems.push(\n `accepted elicitation content MUST match requestedSchema ({confirmed: boolean}); got ${JSON.stringify(confirm.content)}`\n );\n }\n }\n\n const ok = problems.length === 0;\n const detail = ok\n ? `requestState echoed intact; elicitation response valid (action=${String((params.inputResponses.confirm as { action?: unknown })?.action)})`\n : problems.join('; ');\n check(\n this.checks,\n 'gauntlet-mrtr_confirm',\n 'Gauntlet: mrtr_confirm',\n ok,\n ok\n ? 'Client completed the MRTR round-trip conformantly'\n : 'Client MRTR retry was not conformant',\n { detail },\n lenient ? 'WARNING' : 'FAILURE'\n );\n if (!ok) {\n return {\n content: [\n { type: 'text', text: `CONFORMANCE FAIL [mrtr_confirm]: ${detail}` }\n ],\n isError: true\n };\n }\n return {\n content: [\n { type: 'text', text: `CONFORMANCE OK [mrtr_confirm]: ${detail}` }\n ]\n };\n }\n\n getChecks(): ConformanceCheck[] {\n return this.checks;\n }\n}\n",[],[135,262,429,431],"87450a3e-b00a-4d1f-adf3-b52173803f61","sse-retry.ts","dd596744-ad13-11f1-9d57-1607ee4eb77e",34,["D",1789043625465],"/**\n * SSE Retry conformance test scenarios for MCP clients (SEP-1699)\n *\n * Tests that clients properly respect the SSE retry field by:\n * - Waiting the specified milliseconds before reconnecting\n * - Sending Last-Event-ID header on reconnection\n * - Treating graceful stream closure as reconnectable\n */\n\nimport http from 'node:http';\nimport {\n Scenario,\n ScenarioUrls,\n ConformanceCheck,\n RequestListener\n} from '../../types.ts';\n\nexport class SSERetryScenario implements Scenario {\n name = 'sse-retry';\n readonly source = { introducedIn: '2025-11-25' } as const;\n description =\n 'Tests that client respects SSE retry field timing and reconnects properly (SEP-1699)';\n\n private server: http.Server | null = null;\n private checks: ConformanceCheck[] = [];\n private port: number = 0;\n\n // Timing tracking\n private toolStreamCloseTime: number | null = null;\n private getReconnectionTime: number | null = null;\n private getConnectionCount: number = 0;\n private lastEventIds: (string | undefined)[] = [];\n private retryValue: number = 500; // 500ms\n private eventIdCounter: number = 0;\n private sessionId: string = `session-${Date.now()}`;\n\n // Pending tool call to respond to after reconnection\n private pendingToolCallId: number | string | null = null;\n private getResponseStream: http.ServerResponse | null = null;\n\n // Tolerances for timing validation\n private readonly EARLY_TOLERANCE = 50; // Allow 50ms early for scheduler variance\n private readonly LATE_TOLERANCE = 200; // Allow 200ms late for network/event loop\n private readonly VERY_LATE_MULTIPLIER = 2; // If >2x retry value, client is likely ignoring it\n\n handler(_getBaseUrl: () => string): RequestListener {\n this.checks = [];\n this.toolStreamCloseTime = null;\n this.getReconnectionTime = null;\n this.getConnectionCount = 0;\n this.lastEventIds = [];\n this.eventIdCounter = 0;\n this.sessionId = `session-${Date.now()}`;\n this.pendingToolCallId = null;\n this.getResponseStream = null;\n return (req, res) => this.handleRequest(req, res);\n }\n\n async start(): Promise {\n const listener = this.handler(() => `http://localhost:${this.port}`);\n return new Promise((resolve, reject) => {\n this.server = http.createServer(listener);\n this.server.on('error', reject);\n this.server.listen(0, () => {\n const address = this.server!.address();\n if (address && typeof address === 'object') {\n this.port = address.port;\n resolve({\n serverUrl: `http://localhost:${this.port}`\n });\n } else {\n reject(new Error('Failed to get server address'));\n }\n });\n });\n }\n\n async stop(): Promise {\n return new Promise((resolve, reject) => {\n if (this.server) {\n this.server.close((err) => {\n if (err) {\n reject(err);\n } else {\n this.server = null;\n resolve();\n }\n });\n } else {\n resolve();\n }\n });\n }\n\n getChecks(): ConformanceCheck[] {\n // Generate checks based on observed behavior\n this.generateChecks();\n return this.checks;\n }\n\n private handleRequest(\n req: http.IncomingMessage,\n res: http.ServerResponse\n ): void {\n if (req.method === 'GET') {\n // Track GET reconnection timing and Last-Event-ID\n this.getConnectionCount++;\n this.getReconnectionTime = performance.now();\n\n const lastEventId = req.headers['last-event-id'] as string | undefined;\n const description = lastEventId\n ? `Received GET request for ${req.url} (Last-Event-ID: ${lastEventId})`\n : `Received GET request for ${req.url}`;\n this.checks.push({\n id: 'incoming-request',\n name: 'IncomingRequest',\n description,\n status: 'INFO',\n timestamp: new Date().toISOString(),\n details: {\n method: 'GET',\n url: req.url,\n headers: req.headers,\n connectionCount: this.getConnectionCount\n }\n });\n\n if (lastEventId) {\n this.lastEventIds.push(lastEventId);\n }\n\n // Handle GET SSE stream request (reconnection)\n this.handleGetSSEStream(req, res);\n } else if (req.method === 'POST') {\n // Handle POST JSON-RPC requests\n this.handlePostRequest(req, res);\n } else {\n res.writeHead(405);\n res.end('Method Not Allowed');\n }\n }\n\n private handleGetSSEStream(\n _req: http.IncomingMessage,\n res: http.ServerResponse\n ): void {\n // Set SSE headers\n res.writeHead(200, {\n 'Content-Type': 'text/event-stream',\n 'Cache-Control': 'no-cache',\n Connection: 'keep-alive',\n 'mcp-session-id': this.sessionId\n });\n\n // Generate event ID\n this.eventIdCounter++;\n const eventId = `event-${this.eventIdCounter}`;\n\n // Send priming event with ID and retry field\n const primingContent = `id: ${eventId}\\nretry: ${this.retryValue}\\ndata: \\n\\n`;\n res.write(primingContent);\n\n this.checks.push({\n id: 'outgoing-sse-event',\n name: 'OutgoingSseEvent',\n description: `Sent SSE priming event on GET stream (id: ${eventId}, retry: ${this.retryValue}ms)`,\n status: 'INFO',\n timestamp: new Date().toISOString(),\n details: {\n eventId,\n retryMs: this.retryValue,\n eventType: 'priming',\n raw: primingContent\n }\n });\n\n // Store the GET stream to send pending tool response\n this.getResponseStream = res;\n\n // If we have a pending tool call, send the response now\n if (this.pendingToolCallId !== null) {\n const toolResponse = {\n jsonrpc: '2.0',\n id: this.pendingToolCallId,\n result: {\n content: [\n {\n type: 'text',\n text: 'Reconnection test completed successfully'\n }\n ]\n }\n };\n\n const responseEventId = `event-${++this.eventIdCounter}`;\n const responseContent = `event: message\\nid: ${responseEventId}\\ndata: ${JSON.stringify(toolResponse)}\\n\\n`;\n res.write(responseContent);\n\n this.checks.push({\n id: 'outgoing-sse-event',\n name: 'OutgoingSseEvent',\n description: `Sent tool response on GET stream after reconnection (id: ${responseEventId})`,\n status: 'INFO',\n timestamp: new Date().toISOString(),\n details: {\n eventId: responseEventId,\n eventType: 'message',\n jsonrpcId: this.pendingToolCallId,\n body: toolResponse,\n raw: responseContent\n }\n });\n\n this.pendingToolCallId = null;\n }\n }\n\n private handlePostRequest(\n req: http.IncomingMessage,\n res: http.ServerResponse\n ): void {\n let body = '';\n\n req.on('data', (chunk) => {\n body += chunk.toString();\n });\n\n req.on('end', () => {\n try {\n const request = JSON.parse(body);\n\n this.checks.push({\n id: 'incoming-request',\n name: 'IncomingRequest',\n description: `Received POST request for ${req.url} (method: ${request.method})`,\n status: 'INFO',\n timestamp: new Date().toISOString(),\n details: {\n method: 'POST',\n url: req.url,\n jsonrpcMethod: request.method,\n jsonrpcId: request.id\n }\n });\n\n if (request.method === 'initialize') {\n this.handleInitialize(req, res, request);\n } else if (request.method === 'tools/list') {\n this.handleToolsList(res, request);\n } else if (request.method === 'tools/call') {\n this.handleToolsCall(res, request);\n } else if (request.id === undefined) {\n // Notifications (no id) - return 202 Accepted\n res.writeHead(202);\n res.end();\n } else {\n // For other requests, send a simple JSON response\n res.writeHead(200, {\n 'Content-Type': 'application/json',\n 'mcp-session-id': this.sessionId\n });\n res.end(\n JSON.stringify({\n jsonrpc: '2.0',\n id: request.id,\n result: {}\n })\n );\n }\n } catch (error) {\n res.writeHead(400, { 'Content-Type': 'application/json' });\n res.end(\n JSON.stringify({\n jsonrpc: '2.0',\n error: {\n code: -32700,\n message: `Parse error: ${error}`\n }\n })\n );\n }\n });\n }\n\n private handleInitialize(\n _req: http.IncomingMessage,\n res: http.ServerResponse,\n request: any\n ): void {\n res.writeHead(200, {\n 'Content-Type': 'application/json',\n 'mcp-session-id': this.sessionId\n });\n\n const response = {\n jsonrpc: '2.0',\n id: request.id,\n result: {\n protocolVersion: '2025-03-26',\n serverInfo: {\n name: 'sse-retry-test-server',\n version: '1.0.0'\n },\n capabilities: {\n tools: {}\n }\n }\n };\n\n res.end(JSON.stringify(response));\n\n this.checks.push({\n id: 'outgoing-response',\n name: 'OutgoingResponse',\n description: `Sent initialize response`,\n status: 'INFO',\n timestamp: new Date().toISOString(),\n details: {\n jsonrpcId: request.id,\n body: response\n }\n });\n }\n\n private handleToolsList(res: http.ServerResponse, request: any): void {\n res.writeHead(200, {\n 'Content-Type': 'application/json',\n 'mcp-session-id': this.sessionId\n });\n\n const response = {\n jsonrpc: '2.0',\n id: request.id,\n result: {\n tools: [\n {\n name: 'test_reconnection',\n description:\n 'A tool that triggers SSE stream closure to test client reconnection behavior',\n inputSchema: {\n type: 'object',\n properties: {},\n required: []\n }\n }\n ]\n }\n };\n\n res.end(JSON.stringify(response));\n\n this.checks.push({\n id: 'outgoing-response',\n name: 'OutgoingResponse',\n description: `Sent tools/list response`,\n status: 'INFO',\n timestamp: new Date().toISOString(),\n details: {\n jsonrpcId: request.id,\n body: response\n }\n });\n }\n\n private handleToolsCall(res: http.ServerResponse, request: any): void {\n // Store the request ID so we can respond after reconnection\n this.pendingToolCallId = request.id;\n\n // Start SSE stream\n res.writeHead(200, {\n 'Content-Type': 'text/event-stream',\n 'Cache-Control': 'no-cache',\n Connection: 'keep-alive',\n 'mcp-session-id': this.sessionId\n });\n\n // Send priming event with retry field\n this.eventIdCounter++;\n const primingEventId = `event-${this.eventIdCounter}`;\n const primingContent = `id: ${primingEventId}\\nretry: ${this.retryValue}\\ndata: \\n\\n`;\n res.write(primingContent);\n\n this.checks.push({\n id: 'outgoing-sse-event',\n name: 'OutgoingSseEvent',\n description: `Sent SSE priming event for tools/call (id: ${primingEventId}, retry: ${this.retryValue}ms)`,\n status: 'INFO',\n timestamp: new Date().toISOString(),\n details: {\n eventId: primingEventId,\n retryMs: this.retryValue,\n eventType: 'priming',\n raw: primingContent\n }\n });\n\n // Close the stream after a short delay to trigger reconnection\n setTimeout(() => {\n this.toolStreamCloseTime = performance.now();\n this.checks.push({\n id: 'outgoing-stream-close',\n name: 'OutgoingStreamClose',\n description:\n 'Closed tools/call SSE stream to trigger client reconnection',\n status: 'INFO',\n timestamp: new Date().toISOString(),\n details: {\n retryMs: this.retryValue,\n pendingToolCallId: this.pendingToolCallId\n }\n });\n res.end();\n }, 50);\n }\n\n private generateChecks(): void {\n // Check 1: Client should have reconnected via GET after tool call stream close\n if (this.getConnectionCount < 1) {\n this.checks.push({\n id: 'client-sse-graceful-reconnect',\n name: 'ClientGracefulReconnect',\n description:\n 'Client reconnects via GET after SSE stream is closed gracefully',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: `Client did not attempt GET reconnection after stream closure. Client should treat graceful stream close as reconnectable.`,\n specReferences: [\n {\n id: 'SEP-1699',\n url: 'https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1699'\n }\n ],\n details: {\n getConnectionCount: this.getConnectionCount,\n toolStreamCloseTime: this.toolStreamCloseTime,\n retryValue: this.retryValue\n }\n });\n return;\n }\n\n // Client did reconnect - SUCCESS for graceful reconnection\n this.checks.push({\n id: 'client-sse-graceful-reconnect',\n name: 'ClientGracefulReconnect',\n description:\n 'Client reconnects via GET after SSE stream is closed gracefully',\n status: 'SUCCESS',\n timestamp: new Date().toISOString(),\n specReferences: [\n {\n id: 'SEP-1699',\n url: 'https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1699'\n }\n ],\n details: {\n getConnectionCount: this.getConnectionCount\n }\n });\n\n // Check 2: Client MUST respect retry field timing\n if (\n this.toolStreamCloseTime !== null &&\n this.getReconnectionTime !== null\n ) {\n const actualDelay = this.getReconnectionTime - this.toolStreamCloseTime;\n const minExpected = this.retryValue - this.EARLY_TOLERANCE;\n const maxExpected = this.retryValue + this.LATE_TOLERANCE;\n\n const tooEarly = actualDelay < minExpected;\n const slightlyLate = actualDelay > maxExpected;\n const veryLate =\n actualDelay > this.retryValue * this.VERY_LATE_MULTIPLIER;\n const withinTolerance = !tooEarly && !slightlyLate;\n\n let status: 'SUCCESS' | 'FAILURE' | 'WARNING' = 'SUCCESS';\n let errorMessage: string | undefined;\n\n if (tooEarly) {\n // Client reconnected too soon - MUST violation\n status = 'FAILURE';\n errorMessage = `Client reconnected too early (${actualDelay.toFixed(0)}ms instead of ${this.retryValue}ms). Client MUST respect the retry field and wait the specified time.`;\n } else if (veryLate) {\n // Client reconnected way too late - likely ignoring retry field entirely\n status = 'FAILURE';\n errorMessage = `Client reconnected very late (${actualDelay.toFixed(0)}ms instead of ${this.retryValue}ms). Client appears to be ignoring the retry field and using its own backoff strategy.`;\n } else if (slightlyLate) {\n // Client reconnected slightly late - not a spec violation but suspicious\n status = 'WARNING';\n errorMessage = `Client reconnected slightly late (${actualDelay.toFixed(0)}ms instead of ${this.retryValue}ms). This is acceptable but may indicate network delays.`;\n }\n\n this.checks.push({\n id: 'client-sse-retry-timing',\n name: 'ClientRespectsRetryField',\n description:\n 'Client MUST respect the retry field, waiting the given number of milliseconds before attempting to reconnect',\n status,\n timestamp: new Date().toISOString(),\n errorMessage,\n specReferences: [\n {\n id: 'SEP-1699',\n url: 'https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1699'\n }\n ],\n details: {\n expectedRetryMs: this.retryValue,\n actualDelayMs: Math.round(actualDelay),\n minAcceptableMs: minExpected,\n maxAcceptableMs: maxExpected,\n veryLateThresholdMs: this.retryValue * this.VERY_LATE_MULTIPLIER,\n earlyToleranceMs: this.EARLY_TOLERANCE,\n lateToleranceMs: this.LATE_TOLERANCE,\n withinTolerance,\n tooEarly,\n slightlyLate,\n veryLate,\n getConnectionCount: this.getConnectionCount\n }\n });\n } else {\n this.checks.push({\n id: 'client-sse-retry-timing',\n name: 'ClientRespectsRetryField',\n description: 'Client MUST respect the retry field timing',\n status: 'WARNING',\n timestamp: new Date().toISOString(),\n errorMessage:\n 'Could not measure timing - tool stream close time or GET reconnection time not recorded',\n specReferences: [\n {\n id: 'SEP-1699',\n url: 'https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1699'\n }\n ],\n details: {\n toolStreamCloseTime: this.toolStreamCloseTime,\n getReconnectionTime: this.getReconnectionTime\n }\n });\n }\n\n // Check 3: Client SHOULD send Last-Event-ID header on reconnection\n const hasLastEventId =\n this.lastEventIds.length > 0 && this.lastEventIds[0] !== undefined;\n\n this.checks.push({\n id: 'client-sse-last-event-id',\n name: 'ClientSendsLastEventId',\n description:\n 'Client SHOULD send Last-Event-ID header on reconnection for resumability',\n status: hasLastEventId ? 'SUCCESS' : 'WARNING',\n timestamp: new Date().toISOString(),\n specReferences: [\n {\n id: 'SEP-1699',\n url: 'https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1699'\n }\n ],\n details: {\n hasLastEventId,\n lastEventIds: this.lastEventIds,\n getConnectionCount: this.getConnectionCount\n },\n errorMessage: !hasLastEventId\n ? 'Client did not send Last-Event-ID header on reconnection. This is a SHOULD requirement for resumability.'\n : undefined\n });\n }\n}\n",[],[135,262,429,439],"ffdec541-48b6-4d02-b521-c875d3b6e3f2","request-metadata.ts","dd02e8ec-ad13-11f1-bed6-1607ee4eb77e",33,["D",1789043624892],"import http from 'node:http';\nimport {\n HandlerScenario,\n RequestListener,\n ConformanceCheck,\n CheckStatus,\n DRAFT_PROTOCOL_VERSION\n} from '../../types.ts';\n\n/**\n * Severity ranking used to latch per-id check results: a single\n * non-conformant request is a violation even if later requests are\n * conformant, so a later better status must never overwrite a worse one.\n */\nconst STATUS_SEVERITY: Record = {\n FAILURE: 3,\n WARNING: 2,\n SUCCESS: 1,\n INFO: 1,\n SKIPPED: 0\n};\n\n/**\n * Every check ID this scenario can emit. Declared-but-unemitted checks are\n * backfilled as FAILURE by getChecks(), so the emitted ID set is the same for\n * every client. The positive-path test asserts this list is exact.\n */\nexport const DECLARED_CHECK_IDS = [\n 'sep-2575-http-client-sends-version-header',\n 'sep-2575-client-populates-meta',\n 'sep-2575-http-version-header-matches-meta',\n 'sep-2575-client-declares-roots-capability',\n 'sep-2575-client-declares-sampling-capability',\n 'sep-2575-client-declares-elicitation-capability',\n 'sep-2575-client-retry-supported-version'\n] as const;\n\nexport class RequestMetadataScenario extends HandlerScenario {\n name = 'request-metadata';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n description =\n 'Per-request _meta and MCP-Protocol-Version header obligations (SEP-2575)';\n\n private checks: ConformanceCheck[] = [];\n private hasSimulatedRejection = false;\n private requestsObserved = 0;\n\n handler(_getBaseUrl: () => string): RequestListener {\n this.hasSimulatedRejection = false;\n this.checks = [];\n this.requestsObserved = 0;\n return (req, res) => this.handleRequest(req, res);\n }\n\n getChecks(): ConformanceCheck[] {\n // Declared but never emitted -> FAILURE. A check that is legitimately not\n // applicable must be emitted as SKIPPED explicitly to avoid this.\n for (const id of DECLARED_CHECK_IDS) {\n if (!this.checks.some((c) => c.id === id)) {\n this.checks.push({\n id,\n name: 'NotObserved',\n description: `Declared check ${id} was never emitted`,\n status: 'FAILURE',\n errorMessage:\n this.requestsObserved === 0\n ? 'Check was not observed: the client never sent a request to the scenario server (no handler registered for this scenario?)'\n : 'Check was not observed: no request exercised it',\n timestamp: new Date().toISOString(),\n specReferences: [\n {\n id: 'SEP-2575',\n url: 'https://modelcontextprotocol.io/specification/draft/basic/index#meta'\n }\n ],\n details: { observed: false, requestsObserved: this.requestsObserved }\n });\n }\n }\n return this.checks;\n }\n\n private addOrUpdateCheck(check: ConformanceCheck): void {\n const index = this.checks.findIndex((c) => c.id === check.id);\n if (index === -1) {\n this.checks.push(check);\n return;\n }\n // Keep the worst status observed for this id (FAILURE > WARNING > SUCCESS\n // > SKIPPED): an equal-or-worse result replaces the stored check (so its\n // details stay fresh), but a better result must not erase a violation\n // recorded from an earlier request.\n const existing = this.checks[index];\n if (STATUS_SEVERITY[check.status] >= STATUS_SEVERITY[existing.status]) {\n this.checks[index] = check;\n }\n }\n\n private handleRequest(\n req: http.IncomingMessage,\n res: http.ServerResponse\n ): void {\n let body = '';\n req.on('data', (chunk) => {\n body += chunk.toString();\n });\n req.on('end', () => {\n const request = JSON.parse(body);\n this.requestsObserved++;\n\n // Extract version and headers\n const meta = request.params?._meta;\n const metaVersion = meta?.['io.modelcontextprotocol/protocolVersion'];\n const headerVersion = req.headers['mcp-protocol-version'];\n\n // 1. \"Every POST request to the MCP endpoint MUST include an\n // MCP-Protocol-Version header.\" — unconditional, so this fires for\n // server/discover too.\n this.addOrUpdateCheck({\n id: 'sep-2575-http-client-sends-version-header',\n name: 'ClientSendsVersionHeader',\n description: 'Client sends MCP-Protocol-Version header on every POST',\n status: headerVersion !== undefined ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n specReferences: [\n {\n id: 'SEP-2575',\n url: 'https://modelcontextprotocol.io/specification/draft/basic/transports#protocol-version-header'\n }\n ],\n details: { method: request.method, headerVersion }\n });\n\n // 2. \"Every client request MUST include the following\n // io.modelcontextprotocol/* fields in _meta: protocolVersion,\n // clientInfo, clientCapabilities.\"\n const hasClientInfo = meta?.['io.modelcontextprotocol/clientInfo'];\n const hasCapabilities =\n meta?.['io.modelcontextprotocol/clientCapabilities'];\n const metaIsValid = metaVersion && hasClientInfo && hasCapabilities;\n\n this.addOrUpdateCheck({\n id: 'sep-2575-client-populates-meta',\n name: 'ClientPopulatesMeta',\n description:\n 'Client populates _meta on every request with all three required fields',\n status: metaIsValid ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n specReferences: [\n {\n id: 'SEP-2575',\n url: 'https://modelcontextprotocol.io/specification/draft/basic/index#meta'\n }\n ],\n details: { method: request.method, meta }\n });\n\n // 3. \"The header value MUST match the io.modelcontextprotocol/protocolVersion\n // field carried in the request body's _meta.\" Only comparable when both\n // are present; absence is already covered by the two checks above, so\n // emit SKIPPED rather than falling through to the declared-check failure.\n const bothVersionsPresent =\n headerVersion !== undefined && metaVersion !== undefined;\n this.addOrUpdateCheck({\n id: 'sep-2575-http-version-header-matches-meta',\n name: 'ClientVersionHeaderMatchesMeta',\n description:\n 'MCP-Protocol-Version header matches _meta.protocolVersion',\n status: !bothVersionsPresent\n ? 'SKIPPED'\n : headerVersion === metaVersion\n ? 'SUCCESS'\n : 'FAILURE',\n timestamp: new Date().toISOString(),\n specReferences: [\n {\n id: 'SEP-2575',\n url: 'https://modelcontextprotocol.io/specification/draft/basic/transports#protocol-version-header'\n }\n ],\n details: { headerVersion, metaVersion }\n });\n\n // 4. Optional client capabilities conditional verification\n const capabilities = meta?.['io.modelcontextprotocol/clientCapabilities'];\n const checkOptionalCapability = (\n capabilityName: string,\n checkId: string,\n checkName: string\n ) => {\n let status: 'SUCCESS' | 'FAILURE' | 'SKIPPED' = 'SKIPPED';\n if (capabilities && capabilityName in capabilities) {\n const val = capabilities[capabilityName];\n const isValidObject =\n typeof val === 'object' && val !== null && !Array.isArray(val);\n status = isValidObject ? 'SUCCESS' : 'FAILURE';\n }\n this.addOrUpdateCheck({\n id: checkId,\n name: checkName,\n description: `Client declares valid ${capabilityName} capability if present`,\n status,\n timestamp: new Date().toISOString(),\n specReferences: [\n {\n id: 'SEP-2575',\n url: 'https://modelcontextprotocol.io/specification/draft/basic/index#capabilities'\n }\n ],\n details: { capabilityValue: capabilities?.[capabilityName] }\n });\n };\n\n checkOptionalCapability(\n 'roots',\n 'sep-2575-client-declares-roots-capability',\n 'ClientDeclaresRootsCapability'\n );\n checkOptionalCapability(\n 'sampling',\n 'sep-2575-client-declares-sampling-capability',\n 'ClientDeclaresSamplingCapability'\n );\n checkOptionalCapability(\n 'elicitation',\n 'sep-2575-client-declares-elicitation-capability',\n 'ClientDeclaresElicitationCapability'\n );\n\n // 5. Simulated Version Negotiation Retry Check\n if (!this.hasSimulatedRejection) {\n this.hasSimulatedRejection = true;\n\n this.addOrUpdateCheck({\n id: 'sep-2575-client-retry-supported-version',\n name: 'ClientRetrySupportedVersion',\n description:\n 'Client retries with a supported version when first choice is rejected',\n status: 'WARNING',\n timestamp: new Date().toISOString(),\n specReferences: [\n {\n id: 'SEP-2575',\n url: 'https://modelcontextprotocol.io/specification/draft/basic/transports#protocol-version-header'\n }\n ],\n details: { headerVersion }\n });\n\n res.writeHead(400, { 'Content-Type': 'application/json' });\n res.end(\n JSON.stringify({\n jsonrpc: '2.0',\n id: request.id ?? null,\n error: {\n // UnsupportedProtocolVersionError per the draft schema.\n code: -32004,\n message: 'Unsupported protocol version',\n data: {\n supported: [DRAFT_PROTOCOL_VERSION]\n }\n }\n })\n );\n return;\n }\n\n const retryCheck = this.checks.find(\n (c) => c.id === 'sep-2575-client-retry-supported-version'\n );\n if (retryCheck) {\n if (\n headerVersion === DRAFT_PROTOCOL_VERSION &&\n metaVersion === DRAFT_PROTOCOL_VERSION\n ) {\n retryCheck.status = 'SUCCESS';\n } else {\n retryCheck.status = 'WARNING';\n }\n retryCheck.details = {\n ...retryCheck.details,\n retryHeaderVersion: headerVersion,\n retryMetaVersion: metaVersion\n };\n }\n\n // server/discover is optional for clients (spec: \"Clients MAY call it\"),\n // so no check is emitted; we still respond so a client that does call it\n // proceeds normally and exercises the per-request _meta/header checks above.\n if (request.method === 'server/discover') {\n res.writeHead(200, { 'Content-Type': 'application/json' });\n res.end(\n JSON.stringify({\n jsonrpc: '2.0',\n id: request.id,\n result: {\n supportedVersions: [DRAFT_PROTOCOL_VERSION],\n capabilities: {},\n serverInfo: { name: 'test', version: '1.0' }\n }\n })\n );\n return;\n }\n\n // Return generic response to unblock client\n let result: object = {};\n if (request.method === 'tools/list') {\n result = { tools: [] };\n } else if (request.method === 'tools/call') {\n result = { content: [] };\n }\n res.writeHead(200, { 'Content-Type': 'application/json' });\n res.end(JSON.stringify({ jsonrpc: '2.0', id: request.id, result }));\n });\n }\n}\n",[],[135,262,429,447],"b3880fa7-977c-49ac-a2ad-577e5e40e51e","mrtr-client.ts","dca475e6-ad13-11f1-bafc-1607ee4eb77e",32,["D",1789043624286],"/**\n * SEP-2322: MRTR Client Conformance Tests\n *\n * Tests that clients correctly handle the MRTR (Multi-Round Tool Resolution) flow:\n * - Echo requestState back unchanged when retrying\n * - Don't include requestState when server didn't send one\n * - Use a different JSON-RPC id on retry\n *\n * The server exposes two tools. The client calls each tool, gets InputRequiredResult,\n * fulfills the elicitation, and retries. The server verifies correct client behavior.\n */\n\nimport type { ConformanceCheck, RequestListener } from '../../types.ts';\nimport { HandlerScenario, DRAFT_PROTOCOL_VERSION } from '../../types.ts';\nimport express, { Request, Response } from 'npm:express@^5.1.0';\nimport { randomUUID } from 'node:crypto';\n\nconst MRTR_SPEC_REFERENCES = [\n {\n id: 'SEP-2322-MRTR',\n url: 'https://modelcontextprotocol.io/specification/draft/basic/utilities/mrtr'\n }\n];\n\nconst TOOLS = [\n {\n name: 'test_mrtr_echo_state',\n description:\n 'Test tool: triggers MRTR flow with requestState. Client must echo state back unchanged.',\n inputSchema: {\n type: 'object' as const,\n properties: {},\n required: [] as string[]\n }\n },\n {\n name: 'test_mrtr_no_state',\n description:\n 'Test tool: triggers MRTR flow WITHOUT requestState. Client must NOT include requestState in retry.',\n inputSchema: {\n type: 'object' as const,\n properties: {},\n required: [] as string[]\n }\n },\n {\n name: 'test_mrtr_unrelated',\n description:\n 'Test tool: simple tool called between MRTR rounds. Must NOT carry inputResponses or requestState from another tool.',\n inputSchema: {\n type: 'object' as const,\n properties: {},\n required: [] as string[]\n }\n },\n {\n name: 'test_mrtr_no_result_type',\n description:\n 'Test tool: returns a result without resultType. Client must treat it as complete (default).',\n inputSchema: {\n type: 'object' as const,\n properties: {},\n required: [] as string[]\n }\n }\n];\n\ninterface JsonRpcRequest {\n jsonrpc: '2.0';\n id: string | number;\n method: string;\n params?: Record;\n}\n\nfunction createMRTRServer(checks: ConformanceCheck[]): express.Application {\n const app = express();\n app.use(express.json());\n\n // Track original JSON-RPC ids per tool to verify they change on retry\n const originalIds = new Map();\n // Track the exact requestState string sent, to verify byte-exact echo on retry\n const sentStates = new Map();\n\n app.post('/mcp', (req: Request, res: Response) => {\n const body = req.body as JsonRpcRequest;\n const { id, method, params } = body;\n\n switch (method) {\n case 'notifications/initialized': {\n res.status(204).end();\n return;\n }\n\n case 'tools/list': {\n res.json({\n jsonrpc: '2.0',\n id,\n result: { tools: TOOLS }\n });\n return;\n }\n\n case 'tools/call': {\n const toolName = (params as Record)?.name as string;\n const inputResponses = (params as Record)\n ?.inputResponses as Record | undefined;\n const requestState = (params as Record)\n ?.requestState as string | undefined;\n\n if (toolName === 'test_mrtr_echo_state') {\n handleEchoState(id, inputResponses, requestState, checks, res);\n return;\n }\n\n if (toolName === 'test_mrtr_no_state') {\n handleNoState(id, inputResponses, requestState, checks, res);\n return;\n }\n\n if (toolName === 'test_mrtr_unrelated') {\n handleUnrelated(inputResponses, requestState, checks, res, id);\n return;\n }\n\n if (toolName === 'test_mrtr_no_result_type') {\n handleNoResultType(id, inputResponses, checks, res);\n return;\n }\n\n res.json({\n jsonrpc: '2.0',\n id,\n error: { code: -32601, message: `Unknown tool: ${toolName}` }\n });\n return;\n }\n\n case 'elicitation/create': {\n // Client is fulfilling our ElicitRequest — accept it\n res.json({\n jsonrpc: '2.0',\n id,\n result: { action: 'accept', content: { confirmed: true } }\n });\n return;\n }\n\n default: {\n res.json({\n jsonrpc: '2.0',\n id,\n error: { code: -32601, message: `Method not found: ${method}` }\n });\n return;\n }\n }\n });\n\n function handleEchoState(\n id: string | number,\n inputResponses: Record | undefined,\n requestState: string | undefined,\n checks: ConformanceCheck[],\n res: Response\n ) {\n if (!inputResponses) {\n // Initial call — store original id, return InputRequiredResult with requestState\n originalIds.set('echo_state', id);\n const state = JSON.stringify({\n nonce: randomUUID(),\n originalId: id\n });\n sentStates.set('echo_state', state);\n res.json({\n jsonrpc: '2.0',\n id,\n result: {\n resultType: 'input_required',\n inputRequests: {\n confirm: {\n method: 'elicitation/create',\n params: {\n message: 'Please confirm to continue',\n requestedSchema: {\n type: 'object',\n properties: {\n confirmed: { type: 'boolean', description: 'Confirm?' }\n }\n }\n }\n }\n },\n requestState: state\n }\n });\n return;\n }\n\n // Retry — verify requestState was echoed back correctly\n const originalId = originalIds.get('echo_state');\n const sentState = sentStates.get('echo_state');\n\n // Check 1: requestState must be present and byte-for-byte identical to\n // what the server sent. The spec requires the client to echo back the\n // *exact value* without inspecting, parsing, or modifying it — so a\n // semantically-equal but re-serialized string is still a failure.\n const stateErrors: string[] = [];\n if (!requestState) {\n stateErrors.push('Client did not include requestState in retry');\n } else if (requestState !== sentState) {\n stateErrors.push(\n 'requestState was not echoed back exactly — clients MUST NOT inspect, parse, or modify it'\n );\n }\n\n checks.push({\n id: 'sep-2322-client-request-state-echoed',\n name: 'MRTRClientRequestStateEchoed',\n description:\n 'Client MUST echo back the exact value of requestState when retrying',\n status: stateErrors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: stateErrors.length > 0 ? stateErrors.join('; ') : undefined,\n specReferences: MRTR_SPEC_REFERENCES,\n details: {\n requestStateSent: sentState,\n requestStateReceived: requestState,\n originalId\n }\n });\n\n // Check 2: JSON-RPC id must differ from original\n const idErrors: string[] = [];\n if (id === originalId) {\n idErrors.push(\n `JSON-RPC id is the same on retry (${id}) — MUST be different`\n );\n }\n\n checks.push({\n id: 'sep-2322-client-jsonrpc-id-different',\n name: 'MRTRClientJsonRpcIdDifferent',\n description:\n 'The JSON-RPC id MUST be different between the initial request and the retry',\n status: idErrors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: idErrors.length > 0 ? idErrors.join('; ') : undefined,\n specReferences: MRTR_SPEC_REFERENCES,\n details: {\n originalId,\n retryId: id\n }\n });\n\n // Return complete result\n res.json({\n jsonrpc: '2.0',\n id,\n result: {\n content: [{ type: 'text', text: 'echo-state-ok' }]\n }\n });\n }\n\n function handleNoState(\n id: string | number,\n inputResponses: Record | undefined,\n requestState: string | undefined,\n checks: ConformanceCheck[],\n res: Response\n ) {\n if (!inputResponses) {\n // Initial call — return InputRequiredResult WITHOUT requestState\n res.json({\n jsonrpc: '2.0',\n id,\n result: {\n resultType: 'input_required',\n inputRequests: {\n confirm: {\n method: 'elicitation/create',\n params: {\n message: 'Please confirm to continue (no state test)',\n requestedSchema: {\n type: 'object',\n properties: {\n confirmed: { type: 'boolean', description: 'Confirm?' }\n }\n }\n }\n }\n }\n // No requestState field!\n }\n });\n return;\n }\n\n // Retry — verify client did NOT include requestState\n const errors: string[] = [];\n if (requestState !== undefined) {\n errors.push(\n `Client included requestState (\"${requestState}\") but server did not send one — MUST NOT include it`\n );\n }\n\n checks.push({\n id: 'sep-2322-client-no-state-omitted',\n name: 'MRTRClientNoStateOmitted',\n description:\n 'If InputRequiredResult does not contain requestState, client MUST NOT include one in the retry',\n status: errors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: errors.length > 0 ? errors.join('; ') : undefined,\n specReferences: MRTR_SPEC_REFERENCES,\n details: {\n requestStateReceived: requestState\n }\n });\n\n // Return complete result\n res.json({\n jsonrpc: '2.0',\n id,\n result: {\n content: [{ type: 'text', text: 'no-state-ok' }]\n }\n });\n }\n\n function handleUnrelated(\n inputResponses: Record | undefined,\n requestState: string | undefined,\n checks: ConformanceCheck[],\n res: Response,\n id: string | number\n ) {\n // This tool should NEVER receive inputResponses or requestState —\n // those belong to a different tool's MRTR flow\n const errors: string[] = [];\n if (inputResponses !== undefined) {\n errors.push(\n `Unrelated tool call included inputResponses from another tool's MRTR flow`\n );\n }\n if (requestState !== undefined) {\n errors.push(\n `Unrelated tool call included requestState from another tool's MRTR flow`\n );\n }\n\n checks.push({\n id: 'sep-2322-client-parallel-isolation',\n name: 'MRTRClientParallelIsolation',\n description:\n 'inputRequests and requestState MUST NOT be used for any other request the client may be sending',\n status: errors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: errors.length > 0 ? errors.join('; ') : undefined,\n specReferences: MRTR_SPEC_REFERENCES,\n details: {\n inputResponsesReceived: inputResponses,\n requestStateReceived: requestState\n }\n });\n\n // Return a normal complete result\n res.json({\n jsonrpc: '2.0',\n id,\n result: {\n content: [{ type: 'text', text: 'unrelated-ok' }]\n }\n });\n }\n\n function handleNoResultType(\n id: string | number,\n inputResponses: Record | undefined,\n checks: ConformanceCheck[],\n res: Response\n ) {\n const checkId = 'sep-2322-default-result-type-complete';\n\n // If the client retries this tool, it means it did NOT treat the result as complete\n if (inputResponses) {\n // Remove any prior SUCCESS for this check (emitted when we first sent the response)\n const existingIdx = checks.findIndex((c) => c.id === checkId);\n if (existingIdx !== -1) checks.splice(existingIdx, 1);\n\n checks.push({\n id: checkId,\n name: 'DefaultResultTypeComplete',\n description:\n 'Client MUST assume resultType \"complete\" when not specified',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage:\n 'Client retried with inputResponses even though the result had no resultType (should default to complete)',\n specReferences: MRTR_SPEC_REFERENCES\n });\n res.json({\n jsonrpc: '2.0',\n id,\n result: { content: [{ type: 'text', text: 'unexpected-retry' }] }\n });\n return;\n }\n\n // Return a result WITHOUT resultType — client should treat as complete\n checks.push({\n id: checkId,\n name: 'DefaultResultTypeComplete',\n description:\n 'Client MUST assume resultType \"complete\" when not specified',\n status: 'SUCCESS',\n timestamp: new Date().toISOString(),\n specReferences: MRTR_SPEC_REFERENCES\n });\n\n res.json({\n jsonrpc: '2.0',\n id,\n result: {\n // Deliberately NO resultType field\n content: [{ type: 'text', text: 'no-result-type-test-ok' }]\n }\n });\n }\n\n return app;\n}\n\nexport class MRTRClientScenario extends HandlerScenario {\n name = 'sep-2322-client-request-state';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n description =\n 'Tests client MRTR behavior: requestState echo, no-state omission, and JSON-RPC id uniqueness (SEP-2322)';\n mcpPath = '/mcp';\n private checks: ConformanceCheck[] = [];\n\n handler(_getBaseUrl: () => string): RequestListener {\n this.checks = [];\n return createMRTRServer(this.checks);\n }\n\n getChecks(): ConformanceCheck[] {\n const expectedSlugs = [\n 'sep-2322-client-request-state-echoed',\n 'sep-2322-client-jsonrpc-id-different',\n 'sep-2322-client-no-state-omitted',\n 'sep-2322-client-parallel-isolation',\n 'sep-2322-default-result-type-complete'\n ];\n\n for (const slug of expectedSlugs) {\n if (!this.checks.find((c) => c.id === slug)) {\n this.checks.push({\n id: slug,\n name: slug,\n description: `MRTR client check: ${slug}`,\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n details: {\n message: 'Tool was not called by client or MRTR flow not completed'\n },\n specReferences: MRTR_SPEC_REFERENCES\n });\n }\n }\n return this.checks;\n }\n}\n",[],[135,262,429,455],"df8c3739-0f9f-4404-86ca-9a5ccc8fb794","json-schema-ref-deref.ts","d5280f76-ad13-11f1-a016-1607ee4eb77e",11,["D",1789043611708],"import { Server } from 'npm:@modelcontextprotocol/sdk@^1.29.0/server/index.js';\nimport { StreamableHTTPServerTransport } from 'npm:@modelcontextprotocol/sdk@^1.29.0/server/streamableHttp.js';\nimport { ListToolsRequestSchema } from 'npm:@modelcontextprotocol/sdk@^1.29.0/types.js';\nimport type { ConformanceCheck, RequestListener } from '../../types.ts';\nimport express, { Request, Response } from 'npm:express@^5.1.0';\nimport { HandlerScenario, DRAFT_PROTOCOL_VERSION } from '../../types.ts';\n\n/**\n * Scenario: JSON Schema network $ref dereferencing (SEP-2106)\n *\n * SEP-2106 permits the full JSON Schema 2020-12 vocabulary in tool schemas,\n * including `$ref`. A `$ref` that resolves to a network URI is an SSRF /\n * fetch-DoS vector: a malicious tool definition could point at internal\n * infrastructure and have the *client* fetch it during schema processing.\n *\n * Per SEP-2106, implementations MUST NOT automatically dereference `$ref`\n * values that resolve to a network URI (anything that is not a same-document\n * JSON Pointer such as `#/$defs/Foo` or an internal `$anchor`).\n *\n * This scenario advertises a tool whose inputSchema contains both a\n * same-document `$ref` and a `$ref` to a canary URL hosted by the scenario\n * itself. If the client fetches the canary URL at any point before the\n * scenario stops, the check fails.\n */\n\nconst TOOL_NAME = 'lookup_user';\nconst CANARY_PATH = '/canary/profile-schema.json';\nconst TOOLS_LISTED_EVENT = '_state/tools-listed';\nconst CANARY_EVENT = '_state/canary-fetched';\nconst CHECK_ID = 'sep-2106-no-network-ref-deref';\n\nconst SPEC_REFERENCES = [\n {\n id: 'SEP-2106',\n url: 'https://modelcontextprotocol.io/seps/2106-json-schema-2020-12#security-implications'\n }\n];\n\nfunction createMcpServer(canaryUrl: string, onToolsListed: () => void): Server {\n const server = new Server(\n { name: 'json-schema-ref-deref-server', version: '1.0.0' },\n { capabilities: { tools: {} } }\n );\n\n server.setRequestHandler(ListToolsRequestSchema, async () => {\n onToolsListed();\n return {\n tools: [\n {\n name: TOOL_NAME,\n description: 'Look up a user profile by id',\n inputSchema: {\n $schema: 'https://json-schema.org/draft/2020-12/schema',\n type: 'object',\n $defs: {\n userId: { type: 'string', pattern: '^[a-z0-9-]+$' }\n },\n properties: {\n // Same-document $ref: safe, expected to be resolvable locally.\n id: { $ref: '#/$defs/userId' },\n // Network $ref: the canary. Implementations MUST NOT fetch this\n // automatically while processing the schema.\n profile: { $ref: canaryUrl }\n },\n required: ['id']\n }\n }\n ]\n };\n });\n\n return server;\n}\n\nexport class JsonSchemaRefDerefScenario extends HandlerScenario {\n name = 'json-schema-ref-no-deref';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n description = `Tests that a client does not automatically dereference a network-URI \\`$ref\\` in a tool's inputSchema (SEP-2106).\n\nThe scenario advertises a tool whose inputSchema contains a \\`$ref\\` pointing at a canary URL. The client should list tools (and may otherwise process the schema), but must not fetch the canary URL. Same-document refs (\\`#/$defs/...\\`) remain safe to resolve.`;\n mcpPath = '/mcp';\n /** List only — the point is what the client does NOT fetch afterwards. */\n readonly steps = [{ op: 'tools/list' }] as const;\n\n /**\n * Raw event log. What the scenario observed is kept as INFO events here\n * (rather than in private fields) so a host that spreads one run over\n * several processes can merge the logs and judge once — see rawChecks().\n */\n checks: ConformanceCheck[] = [];\n\n private record(id: string, details?: Record): void {\n this.checks.push({\n id,\n name: id,\n description: id,\n status: 'INFO',\n timestamp: new Date().toISOString(),\n details\n });\n }\n\n rawChecks(): ConformanceCheck[] {\n return this.checks;\n }\n\n handler(getBaseUrl: () => string): RequestListener {\n this.checks = [];\n\n const app = express();\n app.use(express.json());\n\n // Canary endpoint: any request here means the client dereferenced the\n // network $ref. Return a valid schema so a dereferencing client gets a\n // realistic response rather than an error it might silently swallow.\n app.all(CANARY_PATH, (req: Request, res: Response) => {\n this.record(CANARY_EVENT, {\n method: req.method,\n userAgent: req.headers['user-agent']\n });\n res.json({\n $schema: 'https://json-schema.org/draft/2020-12/schema',\n type: 'object',\n properties: { displayName: { type: 'string' } }\n });\n });\n\n app.post('/mcp', async (req: Request, res: Response) => {\n try {\n // Stateless: fresh server and transport per request\n const canaryUrl = `${getBaseUrl()}${CANARY_PATH}`;\n const server = createMcpServer(canaryUrl, () => {\n this.record(TOOLS_LISTED_EVENT);\n });\n const transport = new StreamableHTTPServerTransport({\n sessionIdGenerator: undefined\n });\n await server.connect(transport);\n await transport.handleRequest(req, res, req.body);\n } catch (error) {\n if (!res.headersSent) {\n res.status(500).json({\n jsonrpc: '2.0',\n error: {\n code: -32603,\n message: `Internal error: ${error instanceof Error ? error.message : String(error)}`\n },\n id: null\n });\n }\n }\n });\n\n return app;\n }\n\n getChecks(): ConformanceCheck[] {\n // Built fresh on every call so getChecks() is idempotent — the runner may\n // call it more than once and we must not accumulate duplicates.\n const timestamp = new Date().toISOString();\n const canaryRequests = this.checks\n .filter((c) => c.id === CANARY_EVENT)\n .map((c) => c.details ?? {});\n const toolsListed = this.checks.some((c) => c.id === TOOLS_LISTED_EVENT);\n const fetched = canaryRequests.length > 0;\n\n if (!toolsListed) {\n return [\n {\n id: CHECK_ID,\n name: 'NoNetworkRefDereference',\n description:\n 'Client never requested tools/list, so $ref handling could not be evaluated',\n status: 'FAILURE',\n timestamp,\n errorMessage:\n 'Client did not call tools/list against a server advertising a tool with a network $ref',\n specReferences: SPEC_REFERENCES,\n details: { toolsListed: false }\n }\n ];\n }\n\n return [\n {\n id: CHECK_ID,\n name: 'NoNetworkRefDereference',\n description: fetched\n ? 'Client automatically dereferenced a network-URI $ref in a tool inputSchema. Implementations MUST NOT automatically dereference $ref values that resolve to a network URI (SEP-2106).'\n : 'Client did not dereference the network-URI $ref in the tool inputSchema',\n status: fetched ? 'FAILURE' : 'SUCCESS',\n timestamp,\n errorMessage: fetched\n ? `Canary URL ${CANARY_PATH} was fetched ${canaryRequests.length} time(s)`\n : undefined,\n specReferences: SPEC_REFERENCES,\n details: {\n toolsListed: true,\n canaryRequestCount: canaryRequests.length,\n canaryRequests\n }\n }\n ];\n }\n}\n",[],[135,262,429,463],"4b815755-c913-4ed8-aa90-b745cb1c7011","initialize.ts","ded3ce70-ad13-11f1-bf23-1607ee4eb77e",39,["D",1789043627929],"import http from 'node:http';\nimport {\n HandlerScenario,\n RequestListener,\n ConformanceCheck,\n LATEST_SPEC_VERSION,\n NEGOTIABLE_PROTOCOL_VERSIONS\n} from '../../types.ts';\nimport { clientChecks } from '../../checks/index.ts';\n\nexport class InitializeScenario extends HandlerScenario {\n name = 'initialize';\n readonly source = { introducedIn: '2025-06-18' } as const;\n description = 'Tests MCP client initialization handshake';\n\n private checks: ConformanceCheck[] = [];\n\n handler(_getBaseUrl: () => string): RequestListener {\n this.checks = [];\n return (req, res) => this.handleRequest(req, res);\n }\n\n /** Plumbing only: connect (implicit) and make one ordinary request. */\n readonly steps = [{ op: 'tools/list' }] as const;\n\n getChecks(): ConformanceCheck[] {\n return this.checks;\n }\n\n private handleRequest(\n req: http.IncomingMessage,\n res: http.ServerResponse\n ): void {\n let body = '';\n\n req.on('data', (chunk) => {\n body += chunk.toString();\n });\n\n req.on('end', () => {\n try {\n const request = JSON.parse(body);\n\n if (request.method === 'initialize') {\n this.handleInitialize(request, res);\n } else if (request.method === 'tools/list') {\n this.handleToolsList(request, res);\n } else {\n res.writeHead(200, { 'Content-Type': 'application/json' });\n res.end(\n JSON.stringify({\n jsonrpc: '2.0',\n id: request.id,\n result: {}\n })\n );\n }\n } catch (error) {\n res.writeHead(400, { 'Content-Type': 'application/json' });\n res.end(\n JSON.stringify({\n jsonrpc: '2.0',\n error: {\n code: -32700,\n message: `Parse error ${error}`\n }\n })\n );\n }\n });\n }\n\n private handleInitialize(request: any, res: http.ServerResponse): void {\n const initializeRequest = request.params;\n\n const check =\n clientChecks.createClientInitializationCheck(initializeRequest);\n this.checks.push(check);\n\n const serverInfo = {\n name: 'test-server',\n version: '1.0.0'\n };\n\n this.checks.push(clientChecks.createServerInfoCheck(serverInfo));\n\n // Echo back client's version if valid, otherwise use latest\n const clientVersion = initializeRequest?.protocolVersion;\n const responseVersion = NEGOTIABLE_PROTOCOL_VERSIONS.includes(clientVersion)\n ? clientVersion\n : LATEST_SPEC_VERSION;\n\n const response = {\n jsonrpc: '2.0',\n id: request.id,\n result: {\n protocolVersion: responseVersion,\n serverInfo,\n capabilities: {}\n }\n };\n\n res.writeHead(200, { 'Content-Type': 'application/json' });\n res.end(JSON.stringify(response));\n }\n\n private handleToolsList(request: any, res: http.ServerResponse): void {\n const response = {\n jsonrpc: '2.0',\n id: request.id,\n result: {\n tools: []\n }\n };\n\n res.writeHead(200, { 'Content-Type': 'application/json' });\n res.end(JSON.stringify(response));\n }\n}\n",[],[135,262,429,471],"fb1c671f-e10c-4c96-ab60-b5f79da23565","d60e02ce-ad13-11f1-8e58-1607ee4eb77e",13,["D",1789043613201],"/**\n * HTTP Standard Headers conformance test scenario for MCP clients (SEP-2243)\n *\n * Tests that clients include the required standard MCP request headers on\n * Streamable HTTP POST requests:\n * - `Mcp-Method`: mirrors the `method` field from the JSON-RPC request body\n * - `Mcp-Name`: mirrors `params.name` or `params.uri` for tools/call,\n * resources/read, and prompts/get requests\n *\n * This is a Scenario (acts as a test server that inspects incoming requests\n * from the client under test).\n */\n\nimport http from 'node:http';\nimport { ConformanceCheck } from '../../types.ts';\nimport { BaseHttpScenario } from './http-base.ts';\n\nconst SPEC_REFERENCE = {\n id: 'SEP-2243-Standard-Headers',\n url: 'https://modelcontextprotocol.io/specification/draft/basic/transports#standard-mcp-request-headers'\n};\n\nexport class HttpStandardHeadersScenario extends BaseHttpScenario {\n name = 'http-standard-headers';\n description =\n 'Tests that client includes Mcp-Method and Mcp-Name headers on HTTP POST requests (SEP-2243)';\n\n // Track which header checks have been recorded\n private methodHeaderChecks = new Map();\n // Track which Mcp-Name checks have been recorded\n private nameHeaderChecks = new Map();\n\n getChecks(): ConformanceCheck[] {\n // Build a fresh array each call so getChecks() is idempotent — the runner\n // may call it more than once and we must not accumulate duplicates.\n const result = [...this.checks];\n\n // SEP-2243 requires Mcp-Method on \"all requests and notifications\". A\n // client that never sent prompts/list isn't violating SEP-2243 — it just\n // didn't exercise that path. Emit SKIPPED (not FAILURE) so a prompts-less\n // client doesn't show red, but the gap is still visible in the report.\n const expectedMethods = [\n 'initialize',\n 'notifications/initialized',\n 'tools/list',\n 'tools/call',\n 'resources/list',\n 'resources/read',\n 'prompts/list',\n 'prompts/get'\n ];\n\n for (const method of expectedMethods) {\n if (!this.methodHeaderChecks.has(method)) {\n result.push({\n id: 'sep-2243-client-includes-standard-headers',\n name: `ClientMcpMethodHeader_${method.replace(/\\//g, '_')}`,\n description: `Client sends correct Mcp-Method header on ${method} request`,\n status: 'SKIPPED',\n timestamp: new Date().toISOString(),\n errorMessage: `Client did not send a ${method} request; Mcp-Method header was not exercised for this method.`,\n specReferences: [SPEC_REFERENCE]\n });\n }\n }\n\n const expectedNameMethods = ['tools/call', 'resources/read', 'prompts/get'];\n for (const method of expectedNameMethods) {\n if (!this.nameHeaderChecks.has(method)) {\n result.push({\n id: 'sep-2243-client-includes-standard-headers',\n name: `ClientMcpNameHeader_${method.replace(/\\//g, '_')}`,\n description: `Client sends correct Mcp-Name header on ${method} request`,\n status: 'SKIPPED',\n timestamp: new Date().toISOString(),\n errorMessage: `Client did not send a ${method} request; Mcp-Name header was not exercised for this method.`,\n specReferences: [SPEC_REFERENCE]\n });\n }\n }\n\n return result;\n }\n\n protected handlePost(\n req: http.IncomingMessage,\n res: http.ServerResponse,\n request: any\n ): void {\n // Check Mcp-Method header for every request\n this.checkMcpMethodHeader(req, request);\n\n // Route to handlers\n if (request.method === 'initialize') {\n this.handleInitialize(res, request);\n } else if (request.method === 'tools/list') {\n this.handleToolsList(res, request);\n } else if (request.method === 'tools/call') {\n this.checkMcpNameHeader(req, request, 'params.name');\n this.handleToolsCall(res, request);\n } else if (request.method === 'resources/list') {\n this.handleResourcesList(res, request);\n } else if (request.method === 'resources/read') {\n this.checkMcpNameHeader(req, request, 'params.uri');\n this.handleResourcesRead(res, request);\n } else if (request.method === 'prompts/list') {\n this.handlePromptsList(res, request);\n } else if (request.method === 'prompts/get') {\n this.checkMcpNameHeader(req, request, 'params.name');\n this.handlePromptsGet(res, request);\n } else if (request.id === undefined) {\n // Notifications - return 202 (Mcp-Method already checked above)\n this.sendNotificationAck(res);\n } else {\n this.sendGenericResult(res, request);\n }\n }\n\n private checkMcpMethodHeader(req: http.IncomingMessage, request: any): void {\n const method = request.method;\n if (!method) return;\n\n // Already recorded a check for this method\n if (this.methodHeaderChecks.has(method)) return;\n\n // Header names are lowercased by Node.js http parser\n const mcpMethodHeader = req.headers['mcp-method'] as string | undefined;\n\n const errors: string[] = [];\n if (!mcpMethodHeader) {\n errors.push(\n `Missing Mcp-Method header on ${method} request. Clients MUST include the Mcp-Method header on all POST requests.`\n );\n } else if (mcpMethodHeader !== method) {\n // Header values are case-sensitive\n errors.push(\n `Mcp-Method header value '${mcpMethodHeader}' does not match body method '${method}'. Header values are case-sensitive.`\n );\n }\n\n this.methodHeaderChecks.set(method, errors.length === 0);\n\n this.checks.push({\n id: 'sep-2243-client-includes-standard-headers',\n name: `ClientMcpMethodHeader_${method.replace(/\\//g, '_')}`,\n description: `Client sends correct Mcp-Method header on ${method} request`,\n status: errors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: errors.length > 0 ? errors.join('; ') : undefined,\n specReferences: [SPEC_REFERENCE],\n details: {\n expectedMethod: method,\n actualHeader: mcpMethodHeader\n }\n });\n }\n\n private checkMcpNameHeader(\n req: http.IncomingMessage,\n request: any,\n sourceField: string\n ): void {\n const method = request.method;\n\n // Same de-dup guard as checkMcpMethodHeader: the harness advertises two\n // tools and two resources, so a client that calls both would otherwise\n // produce duplicate check rows for the same id.\n if (this.nameHeaderChecks.has(method)) return;\n\n const expectedValue =\n sourceField === 'params.uri' ? request.params?.uri : request.params?.name;\n\n const mcpNameHeader = req.headers['mcp-name'] as string | undefined;\n\n const errors: string[] = [];\n if (!mcpNameHeader) {\n errors.push(\n `Missing Mcp-Name header on ${method} request. Clients MUST include the Mcp-Name header for ${method} requests.`\n );\n } else if (mcpNameHeader !== expectedValue) {\n errors.push(\n `Mcp-Name header value '${mcpNameHeader}' does not match body ${sourceField} '${expectedValue}'.`\n );\n }\n\n this.nameHeaderChecks.set(method, errors.length === 0);\n\n this.checks.push({\n id: 'sep-2243-client-includes-standard-headers',\n name: `ClientMcpNameHeader_${method.replace(/\\//g, '_')}`,\n description: `Client sends correct Mcp-Name header on ${method} request`,\n status: errors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: errors.length > 0 ? errors.join('; ') : undefined,\n specReferences: [SPEC_REFERENCE],\n details: {\n method,\n sourceField,\n expectedValue,\n actualHeader: mcpNameHeader\n }\n });\n }\n\n private handleInitialize(res: http.ServerResponse, request: any): void {\n this.sendInitialize(res, request, {\n tools: {},\n resources: {},\n prompts: {}\n });\n }\n\n private handleToolsList(res: http.ServerResponse, request: any): void {\n res.writeHead(200, {\n 'Content-Type': 'application/json',\n 'mcp-session-id': this.sessionId\n });\n\n res.end(\n JSON.stringify({\n jsonrpc: '2.0',\n id: request.id,\n result: {\n tools: [\n {\n name: 'test_headers',\n description:\n 'A simple tool used to test that HTTP headers are sent correctly',\n inputSchema: {\n type: 'object',\n properties: {},\n required: []\n }\n },\n {\n name: 'my-hyphenated-tool',\n description:\n 'Tool with hyphen in name to test special chars in Mcp-Name header',\n inputSchema: {\n type: 'object',\n properties: {},\n required: []\n }\n }\n ]\n }\n })\n );\n }\n\n private handleToolsCall(res: http.ServerResponse, request: any): void {\n res.writeHead(200, {\n 'Content-Type': 'application/json',\n 'mcp-session-id': this.sessionId\n });\n\n res.end(\n JSON.stringify({\n jsonrpc: '2.0',\n id: request.id,\n result: {\n content: [\n {\n type: 'text',\n text: 'Headers test completed'\n }\n ]\n }\n })\n );\n }\n\n private handleResourcesList(res: http.ServerResponse, request: any): void {\n res.writeHead(200, {\n 'Content-Type': 'application/json',\n 'mcp-session-id': this.sessionId\n });\n\n res.end(\n JSON.stringify({\n jsonrpc: '2.0',\n id: request.id,\n result: {\n resources: [\n {\n uri: 'file:///path/to/file%20name.txt',\n name: 'File with spaces',\n description: 'Resource URI with percent-encoded spaces'\n },\n {\n uri: 'https://example.com/resource?id=123',\n name: 'Resource with query string',\n description: 'Resource URI with query string'\n }\n ]\n }\n })\n );\n }\n\n private handleResourcesRead(res: http.ServerResponse, request: any): void {\n res.writeHead(200, {\n 'Content-Type': 'application/json',\n 'mcp-session-id': this.sessionId\n });\n\n res.end(\n JSON.stringify({\n jsonrpc: '2.0',\n id: request.id,\n result: {\n contents: []\n }\n })\n );\n }\n\n private handlePromptsList(res: http.ServerResponse, request: any): void {\n res.writeHead(200, {\n 'Content-Type': 'application/json',\n 'mcp-session-id': this.sessionId\n });\n\n res.end(\n JSON.stringify({\n jsonrpc: '2.0',\n id: request.id,\n result: {\n prompts: [\n {\n name: 'test_prompt',\n description: 'A simple prompt for header testing'\n }\n ]\n }\n })\n );\n }\n\n private handlePromptsGet(res: http.ServerResponse, request: any): void {\n res.writeHead(200, {\n 'Content-Type': 'application/json',\n 'mcp-session-id': this.sessionId\n });\n\n res.end(\n JSON.stringify({\n jsonrpc: '2.0',\n id: request.id,\n result: {\n messages: []\n }\n })\n );\n }\n}\n",[],[135,262,429,369],"6bbc96f7-5f8a-43d1-9cc6-2dcd316cea98","http-custom-headers.ts","d5a72d4c-ad13-11f1-a612-1607ee4eb77e",12,["D",1789043612496],"/**\n * HTTP Custom Headers conformance test scenario for MCP clients (SEP-2243)\n *\n * Tests that clients correctly handle the `x-mcp-header` extension property:\n * 1. Mirror annotated tool parameter values into `Mcp-Param-{Name}` headers\n * 2. Apply correct value encoding (plain ASCII, Base64 for non-ASCII)\n * 3. Reject tool definitions with invalid `x-mcp-header` annotations\n *\n * This is a Scenario (acts as a test server that inspects incoming requests\n * from the client under test).\n */\n\nimport http from 'node:http';\nimport { ScenarioUrls, ConformanceCheck } from '../../types.ts';\nimport { BaseHttpScenario } from './http-base.ts';\n\nconst SPEC_REFERENCE_CUSTOM = {\n id: 'SEP-2243-Custom-Headers',\n url: 'https://modelcontextprotocol.io/specification/draft/basic/transports#custom-headers-from-tool-parameters'\n};\n\nconst SPEC_REFERENCE_ENCODING = {\n id: 'SEP-2243-Value-Encoding',\n url: 'https://modelcontextprotocol.io/specification/draft/basic/transports#value-encoding'\n};\n\nconst SPEC_REFERENCE_TOOL_DEF = {\n id: 'SEP-2243-x-mcp-header',\n url: 'https://modelcontextprotocol.io/specification/draft/server/tools#x-mcp-header'\n};\n\n/**\n * Every requirement-level check ID HttpCustomHeadersScenario can emit\n * (SEP-2243). Declared-but-unemitted checks are backfilled as FAILURE by\n * getChecks() — same pattern as request-metadata.ts — so the emitted ID set\n * is stable for traceability even when the client never exercises the\n * feature.\n */\nexport const CUSTOM_HEADERS_DECLARED_CHECK_IDS = [\n 'sep-2243-client-supports-custom-headers',\n 'sep-2243-client-mirrors-designated-params',\n 'sep-2243-client-encode-values',\n 'sep-2243-client-base64-unsafe',\n 'sep-2243-client-omit-null'\n] as const;\n\n/**\n * Every requirement-level check ID HttpInvalidToolHeadersScenario can emit\n * (SEP-2243).\n */\nexport const INVALID_TOOL_DECLARED_CHECK_IDS = [\n 'sep-2243-client-reject-invalid-tool',\n 'sep-2243-x-mcp-header-not-empty',\n 'sep-2243-x-mcp-header-charset',\n 'sep-2243-x-mcp-header-unique',\n 'sep-2243-x-mcp-header-primitive-only'\n] as const;\n\n/**\n * Invalid tool definitions served by HttpInvalidToolHeadersScenario, keyed by\n * tool name, mapped to the SEP-2243 x-mcp-header constraint each one\n * violates. The check for \"client did not call this tool\" is emitted under\n * the constraint's requirement ID so each constraint traces to a check.\n */\nconst INVALID_TOOL_CONSTRAINT_IDS: Record = {\n invalid_empty_header: 'sep-2243-x-mcp-header-not-empty',\n invalid_object_header: 'sep-2243-x-mcp-header-primitive-only',\n invalid_array_header: 'sep-2243-x-mcp-header-primitive-only',\n invalid_null_header: 'sep-2243-x-mcp-header-primitive-only',\n invalid_duplicate_same_case: 'sep-2243-x-mcp-header-unique',\n invalid_duplicate_diff_case: 'sep-2243-x-mcp-header-unique',\n invalid_space_in_name: 'sep-2243-x-mcp-header-charset',\n invalid_colon_in_name: 'sep-2243-x-mcp-header-charset',\n invalid_non_ascii_name: 'sep-2243-x-mcp-header-charset',\n invalid_control_char_name: 'sep-2243-x-mcp-header-charset'\n};\n\n/**\n * Decodes a header value that may be Base64-encoded.\n * Base64-encoded values use the format: =?base64?{Base64EncodedValue}?=\n */\nfunction decodeHeaderValue(value: string): string {\n const base64Match = value.match(/^=\\?base64\\?(.*)\\?=$/);\n if (base64Match) {\n return Buffer.from(base64Match[1], 'base64').toString('utf-8');\n }\n return value;\n}\n\n/**\n * Check if a value needs Base64 encoding per the spec:\n * - Non-ASCII characters\n * - Control characters\n * - Leading/trailing whitespace\n */\nfunction needsBase64Encoding(value: string): boolean {\n // Check for non-ASCII or control characters\n for (let i = 0; i < value.length; i++) {\n const code = value.charCodeAt(i);\n if (code < 0x20 || code > 0x7e) {\n // Allow space (0x20) and tab (0x09) only inside values, not at edges\n if (code === 0x09) return true; // tab always needs encoding\n if (code < 0x20) return true; // other control chars\n if (code > 0x7e) return true; // non-ASCII\n }\n }\n // Check for leading/trailing whitespace\n if (value !== value.trim()) return true;\n return false;\n}\n\n/**\n * Checks if a raw header value is properly encoded for a body value that\n * needs Base64 encoding. Returns null if valid, error string if invalid.\n */\nfunction validateEncodedHeader(\n rawHeader: string,\n bodyValue: string,\n valueType?: string\n): string | null {\n if (needsBase64Encoding(bodyValue)) {\n // Value requires Base64 encoding\n const base64Match = rawHeader.match(/^=\\?base64\\?(.*)\\?=$/);\n\n if (!base64Match) {\n return `Value '${bodyValue}' requires Base64 encoding but header was sent as plain: '${rawHeader}'`;\n }\n const decoded = Buffer.from(base64Match[1], 'base64').toString('utf-8');\n if (valueType === 'number') {\n return compareNumericValues(decoded, bodyValue);\n }\n if (decoded !== bodyValue) {\n return `Base64-decoded header value '${decoded}' does not match body value '${bodyValue}'`;\n }\n return null;\n }\n // Plain ASCII - compare directly (after decoding if Base64 was used)\n const decoded = decodeHeaderValue(rawHeader);\n if (valueType === 'number') {\n return compareNumericValues(decoded, bodyValue);\n }\n if (decoded !== bodyValue) {\n return `Header value '${decoded}' (raw: '${rawHeader}') does not match body value '${bodyValue}'`;\n }\n return null;\n}\n\n/**\n * Compare two string representations of numbers numerically.\n * For integers, requires exact match. For decimals, allows\n * a tolerance of 1e-9 to account for cross-SDK floating point\n * representation differences.\n */\nfunction compareNumericValues(\n headerValue: string,\n bodyValue: string\n): string | null {\n const headerNum = Number(headerValue);\n const bodyNum = Number(bodyValue);\n if (isNaN(headerNum) || isNaN(bodyNum)) {\n return `Non-numeric value in number comparison: header='${headerValue}', body='${bodyValue}'`;\n }\n if (Number.isInteger(bodyNum)) {\n // Integer: require exact numeric match (e.g. 42 === 42.0)\n if (headerNum !== bodyNum) {\n return `Numeric header value ${headerNum} does not match body value ${bodyNum}`;\n }\n } else {\n // Decimal: allow tolerance of 1e-9\n if (Math.abs(headerNum - bodyNum) > 1e-9) {\n return `Numeric header value ${headerNum} does not match body value ${bodyNum} (difference ${Math.abs(headerNum - bodyNum)} exceeds tolerance 1e-9)`;\n }\n }\n return null;\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// HttpCustomHeadersScenario - tests that clients mirror x-mcp-header params\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport class HttpCustomHeadersScenario extends BaseHttpScenario {\n name = 'http-custom-headers';\n description =\n 'Tests that client mirrors x-mcp-header tool parameters into Mcp-Param headers with correct encoding (SEP-2243)';\n\n private toolCallReceived: boolean = false;\n private nullToolCallReceived: boolean = false;\n\n async start(): Promise {\n const urls = await super.start();\n // Pass test values via context for encoding edge cases.\n // The conformance client should use these values when calling test_custom_headers.\n urls.context = {\n toolCalls: [\n {\n name: 'test_custom_headers',\n arguments: {\n region: 'us-west1',\n priority: 42,\n verbose: false,\n debug: true,\n empty_val: '',\n method_val: 'test-method',\n float_val: 3.14159,\n non_ascii_val: 'Hello, 世界',\n whitespace_val: ' padded ',\n leading_space_val: ' us-west1',\n trailing_space_val: 'us-west1 ',\n internal_space_val: 'us west 1',\n control_char_val: 'line1\\nline2',\n crlf_val: 'line1\\r\\nline2',\n tab_val: '\\tindented',\n query: 'SELECT * FROM users'\n }\n },\n {\n name: 'test_custom_headers_null',\n arguments: {\n region: 'us-east1',\n priority: 1,\n verbose: null,\n query: 'SELECT 1'\n }\n }\n ]\n };\n return urls;\n }\n\n getChecks(): ConformanceCheck[] {\n // Declared-but-unemitted -> FAILURE (request-metadata.ts pattern). Keeps\n // the emitted ID set stable for traceability even when the client never\n // calls the annotated tools. The `some()` guard makes this idempotent.\n for (const id of CUSTOM_HEADERS_DECLARED_CHECK_IDS) {\n if (this.checks.some((c) => c.id === id)) continue;\n const missingNullCall =\n id === 'sep-2243-client-omit-null' && !this.nullToolCallReceived;\n this.checks.push({\n id,\n name: 'NotObserved',\n description: `Declared check ${id} was never emitted`,\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: missingNullCall\n ? 'Client did not send a tools/call request for test_custom_headers_null to test null/omitted parameter handling.'\n : this.toolCallReceived\n ? 'Check was not observed: no tool call exercised it.'\n : 'Client did not send a tools/call request for test_custom_headers.',\n specReferences: [SPEC_REFERENCE_CUSTOM]\n });\n }\n return this.checks;\n }\n\n protected handlePost(\n req: http.IncomingMessage,\n res: http.ServerResponse,\n request: any\n ): void {\n if (request.method === 'initialize') {\n this.sendInitialize(res, request);\n } else if (request.method === 'tools/list') {\n this.handleToolsList(res, request);\n } else if (request.method === 'tools/call') {\n this.handleToolsCall(req, res, request);\n } else if (request.id === undefined) {\n this.sendNotificationAck(res);\n } else {\n this.sendGenericResult(res, request);\n }\n }\n\n private handleToolsList(res: http.ServerResponse, request: any): void {\n this.sendJson(res, {\n jsonrpc: '2.0',\n id: request.id,\n result: {\n tools: [\n {\n name: 'test_custom_headers',\n description:\n 'A tool with x-mcp-header annotations to test custom header mirroring and encoding',\n inputSchema: {\n type: 'object',\n properties: {\n region: {\n type: 'string',\n description: 'Plain ASCII string value',\n 'x-mcp-header': 'Region'\n },\n priority: {\n type: 'number',\n description: 'Integer numeric value',\n 'x-mcp-header': 'Priority'\n },\n verbose: {\n type: 'boolean',\n description: 'Boolean value',\n 'x-mcp-header': 'Verbose'\n },\n debug: {\n type: 'boolean',\n description: 'Boolean true value',\n 'x-mcp-header': 'Debug'\n },\n empty_val: {\n type: 'string',\n description: 'Empty string value',\n 'x-mcp-header': 'EmptyVal'\n },\n method_val: {\n type: 'string',\n description:\n 'Value for header named \"Method\" — tests that x-mcp-header \"Method\" produces Mcp-Param-Method (not Mcp-Method)',\n 'x-mcp-header': 'Method'\n },\n float_val: {\n type: 'number',\n description: 'Floating point numeric value',\n 'x-mcp-header': 'FloatVal'\n },\n non_ascii_val: {\n type: 'string',\n description:\n 'Non-ASCII string value — requires Base64 encoding',\n 'x-mcp-header': 'NonAscii'\n },\n whitespace_val: {\n type: 'string',\n description:\n 'String with leading/trailing whitespace — requires Base64 encoding',\n 'x-mcp-header': 'Whitespace'\n },\n leading_space_val: {\n type: 'string',\n description:\n 'String with leading space only — requires Base64 encoding',\n 'x-mcp-header': 'LeadingSpace'\n },\n trailing_space_val: {\n type: 'string',\n description:\n 'String with trailing space only — requires Base64 encoding',\n 'x-mcp-header': 'TrailingSpace'\n },\n internal_space_val: {\n type: 'string',\n description:\n 'String with internal spaces only — plain ASCII, no Base64',\n 'x-mcp-header': 'InternalSpace'\n },\n control_char_val: {\n type: 'string',\n description:\n 'String with control characters — requires Base64 encoding',\n 'x-mcp-header': 'ControlChar'\n },\n crlf_val: {\n type: 'string',\n description:\n 'String with carriage return and line feed — requires Base64 encoding',\n 'x-mcp-header': 'CrLf'\n },\n tab_val: {\n type: 'string',\n description:\n 'String with leading tab — requires Base64 encoding',\n 'x-mcp-header': 'Tab'\n },\n query: {\n type: 'string',\n description:\n 'No x-mcp-header annotation - should not be mirrored'\n }\n },\n required: ['region', 'priority', 'query']\n }\n },\n {\n name: 'test_custom_headers_null',\n description:\n 'A tool for testing null/omitted x-mcp-header parameter handling',\n inputSchema: {\n type: 'object',\n properties: {\n region: {\n type: 'string',\n description: 'Plain ASCII string value',\n 'x-mcp-header': 'Region'\n },\n priority: {\n type: 'number',\n description: 'Integer numeric value',\n 'x-mcp-header': 'Priority'\n },\n verbose: {\n type: 'boolean',\n description: 'Boolean value — will be null to test omission',\n 'x-mcp-header': 'Verbose'\n },\n query: {\n type: 'string',\n description: 'No x-mcp-header annotation'\n }\n },\n required: ['region', 'priority', 'query']\n }\n }\n ]\n }\n });\n }\n\n private handleToolsCall(\n req: http.IncomingMessage,\n res: http.ServerResponse,\n request: any\n ): void {\n const toolName = request.params?.name;\n const args = request.params?.arguments || {};\n\n if (toolName === 'test_custom_headers') {\n this.toolCallReceived = true;\n\n // SEP-2243 \"MCP clients MUST support this feature\": observable as the\n // client calling the annotated tool with at least one mirrored\n // Mcp-Param-* header. The per-parameter checks below then validate each\n // mirrored value individually.\n const hasAnyParamHeader = Object.keys(req.headers).some((h) =>\n h.startsWith('mcp-param-')\n );\n this.checks.push({\n id: 'sep-2243-client-supports-custom-headers',\n name: 'ClientSupportsCustomHeaders',\n description:\n 'Client supports custom headers: calls the x-mcp-header annotated tool and mirrors at least one parameter',\n status: hasAnyParamHeader ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: hasAnyParamHeader\n ? undefined\n : 'Client called test_custom_headers but sent no Mcp-Param-* headers.',\n specReferences: [SPEC_REFERENCE_CUSTOM]\n });\n\n // Check Mcp-Param-Region header (plain ASCII string)\n this.checkParamHeader(req, 'Region', args.region, 'string');\n\n // Check Mcp-Param-Priority header (integer number)\n this.checkParamHeader(req, 'Priority', args.priority, 'number');\n\n // Check Mcp-Param-Verbose header (boolean value)\n // checkParamHeader already FAILs on missing header, so this also covers\n // \"optional parameter present → client MUST include header\" without a\n // separate check id.\n if (args.verbose !== undefined && args.verbose !== null) {\n this.checkParamHeader(req, 'Verbose', args.verbose, 'boolean');\n }\n\n // Check Mcp-Param-Debug header (boolean true value)\n if (args.debug !== undefined && args.debug !== null) {\n this.checkParamHeader(req, 'Debug', args.debug, 'boolean');\n }\n\n // Check Mcp-Param-EmptyVal header (empty string → empty header value)\n if (args.empty_val !== undefined && args.empty_val !== null) {\n this.checkParamHeader(req, 'EmptyVal', args.empty_val, 'string');\n }\n\n // Check Mcp-Param-Method header (x-mcp-header \"Method\" → Mcp-Param-Method, NOT Mcp-Method)\n if (args.method_val !== undefined && args.method_val !== null) {\n this.checkParamHeader(req, 'Method', args.method_val, 'string');\n }\n\n // Check Mcp-Param-FloatVal header (floating point number)\n if (args.float_val !== undefined && args.float_val !== null) {\n this.checkParamHeader(req, 'FloatVal', args.float_val, 'number');\n }\n\n // Check Mcp-Param-NonAscii header (requires Base64 encoding)\n if (args.non_ascii_val !== undefined && args.non_ascii_val !== null) {\n this.checkParamHeader(req, 'NonAscii', args.non_ascii_val, 'string');\n }\n\n // Check Mcp-Param-Whitespace header (leading/trailing whitespace → Base64)\n if (args.whitespace_val !== undefined && args.whitespace_val !== null) {\n this.checkParamHeader(req, 'Whitespace', args.whitespace_val, 'string');\n }\n\n // Check Mcp-Param-LeadingSpace header (leading space only → Base64)\n if (\n args.leading_space_val !== undefined &&\n args.leading_space_val !== null\n ) {\n this.checkParamHeader(\n req,\n 'LeadingSpace',\n args.leading_space_val,\n 'string'\n );\n }\n\n // Check Mcp-Param-TrailingSpace header (trailing space only → Base64)\n if (\n args.trailing_space_val !== undefined &&\n args.trailing_space_val !== null\n ) {\n this.checkParamHeader(\n req,\n 'TrailingSpace',\n args.trailing_space_val,\n 'string'\n );\n }\n\n // Check Mcp-Param-InternalSpace header (internal spaces only → plain ASCII, no Base64)\n if (\n args.internal_space_val !== undefined &&\n args.internal_space_val !== null\n ) {\n this.checkParamHeader(\n req,\n 'InternalSpace',\n args.internal_space_val,\n 'string'\n );\n }\n\n // Check Mcp-Param-ControlChar header (control characters → Base64)\n if (\n args.control_char_val !== undefined &&\n args.control_char_val !== null\n ) {\n this.checkParamHeader(\n req,\n 'ControlChar',\n args.control_char_val,\n 'string'\n );\n }\n\n // Check Mcp-Param-CrLf header (carriage return + line feed → Base64)\n if (args.crlf_val !== undefined && args.crlf_val !== null) {\n this.checkParamHeader(req, 'CrLf', args.crlf_val, 'string');\n }\n\n // Check Mcp-Param-Tab header (leading tab → Base64)\n if (args.tab_val !== undefined && args.tab_val !== null) {\n this.checkParamHeader(req, 'Tab', args.tab_val, 'string');\n }\n\n // Check that 'query' (no x-mcp-header) is NOT mirrored — the negative\n // half of \"mirror the *designated* parameter values\".\n const queryHeader = req.headers['mcp-param-query'] as string | undefined;\n this.checks.push({\n id: 'sep-2243-client-mirrors-designated-params',\n name: 'ClientCustomHeaderNoMirrorUnannotated',\n description:\n 'Client MUST NOT add Mcp-Param headers for parameters without x-mcp-header',\n status: queryHeader === undefined ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage:\n queryHeader !== undefined\n ? `Found unexpected Mcp-Param-Query header '${queryHeader}' for unannotated parameter`\n : undefined,\n specReferences: [SPEC_REFERENCE_CUSTOM]\n });\n } else if (toolName === 'test_custom_headers_null') {\n this.nullToolCallReceived = true;\n\n // When value is null or not provided, client MUST omit the header\n const verboseHeader = req.headers['mcp-param-verbose'] as\n | string\n | undefined;\n this.checks.push({\n id: 'sep-2243-client-omit-null',\n name: 'ClientCustomHeaderOmitNull',\n description:\n 'Client MUST omit Mcp-Param header when parameter value is null or not provided',\n status: verboseHeader === undefined ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage:\n verboseHeader !== undefined\n ? `Mcp-Param-Verbose should be omitted when null/undefined, but got '${verboseHeader}'`\n : undefined,\n specReferences: [SPEC_REFERENCE_CUSTOM]\n });\n }\n\n this.sendJson(res, {\n jsonrpc: '2.0',\n id: request.id,\n result: {\n content: [{ type: 'text', text: 'Custom headers test completed' }]\n }\n });\n }\n\n private checkParamHeader(\n req: http.IncomingMessage,\n headerName: string,\n bodyValue: any,\n valueType: string\n ): void {\n const headerKey = `mcp-param-${headerName.toLowerCase()}`;\n const rawHeaderValue = req.headers[headerKey] as string | undefined;\n\n if (bodyValue === undefined || bodyValue === null) return;\n\n const errors: string[] = [];\n\n if (rawHeaderValue === undefined) {\n errors.push(\n `Missing Mcp-Param-${headerName} header. Client MUST include headers for x-mcp-header parameters.`\n );\n } else {\n // Convert body value to expected string representation\n let expectedString: string;\n switch (valueType) {\n case 'number':\n expectedString = String(bodyValue);\n break;\n case 'boolean':\n expectedString = bodyValue ? 'true' : 'false';\n break;\n default:\n expectedString = String(bodyValue);\n }\n\n // For numbers, compare numerically to allow for cross-SDK\n // floating point representation differences (e.g., \"42\" vs \"42.0\").\n // See SEP-2243 discussion on number precision.\n const validationError = validateEncodedHeader(\n rawHeaderValue,\n expectedString,\n valueType\n );\n if (validationError) {\n errors.push(validationError);\n }\n }\n\n // One check ID per SEP-2243 requirement, picked by what this parameter\n // actually exercises: Base64 wrapping for unsafe values, primitive\n // (number/boolean) string encoding, or plain mirroring. The per-parameter\n // detail lives in `name`/`details`.\n const needsBase64 =\n typeof bodyValue === 'string' && needsBase64Encoding(String(bodyValue));\n const checkId = needsBase64\n ? 'sep-2243-client-base64-unsafe'\n : valueType === 'number' || valueType === 'boolean'\n ? 'sep-2243-client-encode-values'\n : 'sep-2243-client-mirrors-designated-params';\n\n this.checks.push({\n id: checkId,\n name: `ClientCustomHeader_${headerName}`,\n description: `Client sends correct Mcp-Param-${headerName} header (${valueType} value)`,\n status: errors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: errors.length > 0 ? errors.join('; ') : undefined,\n specReferences: [SPEC_REFERENCE_ENCODING],\n details: {\n headerName: `Mcp-Param-${headerName}`,\n rawHeaderValue,\n bodyValue,\n valueType,\n needsBase64\n }\n });\n }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// HttpInvalidToolHeadersScenario - tests that clients reject invalid tools\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport class HttpInvalidToolHeadersScenario extends BaseHttpScenario {\n name = 'http-invalid-tool-headers';\n description =\n 'Tests that client rejects tools with invalid x-mcp-header annotations (SEP-2243)';\n allowClientError = true;\n\n private calledTools: Set = new Set();\n private toolsListSent = false;\n\n getChecks(): ConformanceCheck[] {\n if (!this.toolsListSent) {\n this.checks.push({\n id: 'sep-2243-invalid-tool-tools-list-gate',\n name: 'ClientInvalidToolHeadersToolsList',\n description: 'Client requests tools/list',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: 'Client did not send a tools/list request.',\n specReferences: [SPEC_REFERENCE_TOOL_DEF]\n });\n }\n\n // Check that valid_tool WAS called — proves client kept valid tools\n const validToolCalled = this.calledTools.has('valid_tool');\n this.checks.push({\n id: 'sep-2243-client-reject-invalid-tool',\n name: 'ClientKeepsValidTool',\n description: 'Client MUST keep valid tools while excluding invalid ones',\n status: validToolCalled ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: validToolCalled\n ? undefined\n : \"Client did not call 'valid_tool'. A single malformed tool definition must not prevent other valid tools from being used.\",\n specReferences: [SPEC_REFERENCE_TOOL_DEF]\n });\n\n // Check that the client did NOT call any of the invalid tools. Each\n // invalid tool violates one specific x-mcp-header constraint, so the\n // check is emitted under that constraint's requirement ID — the client\n // rejecting the tool is how the constraint is enforced on the wire.\n for (const [toolName, constraintId] of Object.entries(\n INVALID_TOOL_CONSTRAINT_IDS\n )) {\n const called = this.calledTools.has(toolName);\n this.checks.push({\n id: constraintId,\n name: `ClientRejectsInvalidTool_${toolName}`,\n description: `Client MUST NOT call tool '${toolName}' with invalid x-mcp-header`,\n status: called ? 'FAILURE' : 'SUCCESS',\n timestamp: new Date().toISOString(),\n errorMessage: called\n ? `Client called '${toolName}' which has an invalid x-mcp-header. Clients MUST reject (exclude) such tools.`\n : undefined,\n specReferences: [SPEC_REFERENCE_TOOL_DEF]\n });\n }\n\n return this.checks;\n }\n\n protected handlePost(\n _req: http.IncomingMessage,\n res: http.ServerResponse,\n request: any\n ): void {\n if (request.method === 'initialize') {\n this.sendInitialize(res, request);\n } else if (request.method === 'tools/list') {\n this.handleToolsList(res, request);\n } else if (request.method === 'tools/call') {\n this.handleToolsCall(res, request);\n } else if (request.id === undefined) {\n this.sendNotificationAck(res);\n } else {\n this.sendGenericResult(res, request);\n }\n }\n\n private handleToolsList(res: http.ServerResponse, request: any): void {\n this.toolsListSent = true;\n\n this.sendJson(res, {\n jsonrpc: '2.0',\n id: request.id,\n result: {\n tools: [\n // ── Valid tool (should be kept by client) ──\n {\n name: 'valid_tool',\n description: 'A valid tool with correct x-mcp-header',\n inputSchema: {\n type: 'object',\n properties: {\n region: {\n type: 'string',\n 'x-mcp-header': 'Region'\n }\n },\n required: ['region']\n }\n },\n\n // ── Invalid: empty x-mcp-header value ──\n {\n name: 'invalid_empty_header',\n description:\n 'x-mcp-header MUST NOT be empty (MUST be rejected by client)',\n inputSchema: {\n type: 'object',\n properties: {\n value: { type: 'string', 'x-mcp-header': '' }\n },\n required: ['value']\n }\n },\n\n // ── Invalid: x-mcp-header on object type ──\n {\n name: 'invalid_object_header',\n description:\n 'x-mcp-header MUST only be on primitive types (MUST be rejected)',\n inputSchema: {\n type: 'object',\n properties: {\n data: { type: 'object', 'x-mcp-header': 'Data' }\n },\n required: ['data']\n }\n },\n\n // ── Invalid: x-mcp-header on array type ──\n {\n name: 'invalid_array_header',\n description:\n 'x-mcp-header MUST only be on primitive types (MUST be rejected)',\n inputSchema: {\n type: 'object',\n properties: {\n items: {\n type: 'array',\n items: { type: 'string' },\n 'x-mcp-header': 'Items'\n }\n },\n required: ['items']\n }\n },\n\n // ── Invalid: x-mcp-header on null type ──\n {\n name: 'invalid_null_header',\n description:\n 'x-mcp-header MUST only be on primitive types (MUST be rejected)',\n inputSchema: {\n type: 'object',\n properties: {\n nil: { type: 'null', 'x-mcp-header': 'Nil' }\n },\n required: ['nil']\n }\n },\n\n // ── Invalid: duplicate same-case x-mcp-header values ──\n {\n name: 'invalid_duplicate_same_case',\n description:\n 'Duplicate x-mcp-header \"Region\" on two properties (MUST be rejected)',\n inputSchema: {\n type: 'object',\n properties: {\n field1: { type: 'string', 'x-mcp-header': 'Region' },\n field2: { type: 'string', 'x-mcp-header': 'Region' }\n },\n required: ['field1', 'field2']\n }\n },\n\n // ── Invalid: duplicate case-insensitive x-mcp-header values ──\n {\n name: 'invalid_duplicate_diff_case',\n description:\n 'Duplicate case-insensitive x-mcp-header \"MyField\"/\"myfield\" (MUST be rejected)',\n inputSchema: {\n type: 'object',\n properties: {\n field1: { type: 'string', 'x-mcp-header': 'MyField' },\n field2: { type: 'string', 'x-mcp-header': 'myfield' }\n },\n required: ['field1', 'field2']\n }\n },\n\n // ── Invalid: space in x-mcp-header name ──\n {\n name: 'invalid_space_in_name',\n description:\n 'x-mcp-header MUST NOT contain space (MUST be rejected)',\n inputSchema: {\n type: 'object',\n properties: {\n value: { type: 'string', 'x-mcp-header': 'My Region' }\n },\n required: ['value']\n }\n },\n\n // ── Invalid: colon in x-mcp-header name ──\n {\n name: 'invalid_colon_in_name',\n description:\n 'x-mcp-header MUST NOT contain colon (MUST be rejected)',\n inputSchema: {\n type: 'object',\n properties: {\n value: {\n type: 'string',\n 'x-mcp-header': 'Region:Primary'\n }\n },\n required: ['value']\n }\n },\n\n // ── Invalid: non-ASCII in x-mcp-header name ──\n {\n name: 'invalid_non_ascii_name',\n description:\n 'x-mcp-header MUST contain only ASCII chars (MUST be rejected)',\n inputSchema: {\n type: 'object',\n properties: {\n value: { type: 'string', 'x-mcp-header': 'Région' }\n },\n required: ['value']\n }\n },\n\n // ── Invalid: control character in x-mcp-header name ──\n {\n name: 'invalid_control_char_name',\n description:\n 'x-mcp-header MUST NOT contain control chars (MUST be rejected)',\n inputSchema: {\n type: 'object',\n properties: {\n value: { type: 'string', 'x-mcp-header': 'Region\\t1' }\n },\n required: ['value']\n }\n }\n ]\n }\n });\n }\n\n private handleToolsCall(res: http.ServerResponse, request: any): void {\n const toolName = request.params?.name;\n if (toolName) this.calledTools.add(toolName);\n\n this.sendJson(res, {\n jsonrpc: '2.0',\n id: request.id,\n result: {\n content: [{ type: 'text', text: 'Tool call received' }]\n }\n });\n }\n}\n",[],[135,262,429,486],"1eee8582-29cb-438b-bd09-086619840d7a","http-base.ts","df69518e-ad13-11f1-a016-1607ee4eb77e",40,["D",1789043628836],"/**\n * Shared HTTP test-server scaffold for client-under-test SEP-2243 scenarios.\n *\n * A scenario that needs to act as a Streamable-HTTP MCP server, inspect\n * incoming client requests, and emit ConformanceChecks should extend this\n * class and implement handlePost() + getChecks(). start()/stop() and the\n * GET/DELETE/body-parse boilerplate are handled here.\n */\n\nimport http from 'node:http';\nimport {\n HandlerScenario,\n RequestListener,\n ConformanceCheck,\n ScenarioSource,\n DRAFT_PROTOCOL_VERSION\n} from '../../types.ts';\n\nexport abstract class BaseHttpScenario extends HandlerScenario {\n abstract name: string;\n abstract description: string;\n readonly source: ScenarioSource = { introducedIn: DRAFT_PROTOCOL_VERSION };\n\n protected checks: ConformanceCheck[] = [];\n protected sessionId: string = `session-${Date.now()}`;\n\n handler(_getBaseUrl: () => string): RequestListener {\n this.checks = [];\n this.sessionId = `session-${Date.now()}`;\n return (req, res) => this.handleRequest(req, res);\n }\n\n abstract getChecks(): ConformanceCheck[];\n\n protected handleRequest(\n req: http.IncomingMessage,\n res: http.ServerResponse\n ): void {\n if (req.method === 'GET') {\n res.writeHead(200, {\n 'Content-Type': 'text/event-stream',\n 'Cache-Control': 'no-cache',\n Connection: 'keep-alive',\n 'mcp-session-id': this.sessionId\n });\n res.write('data: \\n\\n');\n return;\n }\n if (req.method === 'DELETE') {\n res.writeHead(200);\n res.end();\n return;\n }\n if (req.method !== 'POST') {\n res.writeHead(405);\n res.end('Method Not Allowed');\n return;\n }\n\n // Decode the stream as UTF-8 so multi-byte characters that straddle a\n // chunk boundary aren't corrupted by per-chunk Buffer.toString().\n req.setEncoding('utf8');\n let body = '';\n req.on('data', (chunk) => {\n body += chunk;\n });\n req.on('end', () => {\n try {\n const request = JSON.parse(body);\n this.handlePost(req, res, request);\n } catch (error) {\n res.writeHead(400, { 'Content-Type': 'application/json' });\n res.end(\n JSON.stringify({\n jsonrpc: '2.0',\n error: { code: -32700, message: `Parse error: ${error}` }\n })\n );\n }\n });\n }\n\n protected abstract handlePost(\n req: http.IncomingMessage,\n res: http.ServerResponse,\n request: any\n ): void;\n\n protected sendJson(res: http.ServerResponse, body: object): void {\n res.writeHead(200, {\n 'Content-Type': 'application/json',\n 'mcp-session-id': this.sessionId\n });\n res.end(JSON.stringify(body));\n }\n\n protected sendInitialize(\n res: http.ServerResponse,\n request: any,\n capabilities: object = { tools: {} }\n ): void {\n this.sendJson(res, {\n jsonrpc: '2.0',\n id: request.id,\n result: {\n protocolVersion: DRAFT_PROTOCOL_VERSION,\n serverInfo: { name: this.name + '-server', version: '1.0.0' },\n capabilities\n }\n });\n }\n\n protected sendNotificationAck(res: http.ServerResponse): void {\n res.writeHead(202);\n res.end();\n }\n\n protected sendGenericResult(res: http.ServerResponse, request: any): void {\n this.sendJson(res, {\n jsonrpc: '2.0',\n id: request.id,\n result: {}\n });\n }\n}\n",[],[135,262,429,494],"106d2aa0-a885-4da2-b062-ae10682086fc","dd9c695e-ad13-11f1-986c-1607ee4eb77e",35,["D",1789043625906],"/**\n * SEP-1034: Elicitation defaults test\n * Validates that clients properly apply default values for omitted fields\n * in elicitation responses before sending them to the server\n */\n\nimport { Server } from 'npm:@modelcontextprotocol/sdk@^1.29.0/server/index.js';\nimport { StreamableHTTPServerTransport } from 'npm:@modelcontextprotocol/sdk@^1.29.0/server/streamableHttp.js';\nimport {\n CallToolRequestSchema,\n ListToolsRequestSchema,\n ElicitResultSchema\n} from 'npm:@modelcontextprotocol/sdk@^1.29.0/types.js';\nimport type { ConformanceCheck, RequestListener } from '../../types.ts';\nimport { HandlerScenario } from '../../types.ts';\nimport express, { Request, Response } from 'npm:express@^5.1.0';\nimport { createRequestLogger } from '../request-logger.ts';\nimport { randomUUID } from 'node:crypto';\n\nfunction isInitializeRequest(body: unknown): boolean {\n if (\n typeof body === 'object' &&\n body !== null &&\n 'method' in body &&\n (body as { method: string }).method === 'initialize'\n ) {\n return true;\n }\n return false;\n}\n\nfunction createServer(checks: ConformanceCheck[]): {\n app: express.Application;\n cleanup: () => void;\n} {\n // Session management\n const transports: { [sessionId: string]: StreamableHTTPServerTransport } = {};\n const servers: { [sessionId: string]: Server } = {};\n\n const createMcpServer = () => {\n const server = new Server(\n {\n name: 'elicitation-defaults-test-server',\n version: '1.0.0'\n },\n {\n capabilities: {\n tools: {}\n }\n }\n );\n\n server.setRequestHandler(ListToolsRequestSchema, async () => {\n return {\n tools: [\n {\n name: 'test_client_elicitation_defaults',\n description:\n 'Tests that client applies defaults for omitted elicitation fields',\n inputSchema: {\n type: 'object',\n properties: {},\n required: []\n }\n }\n ]\n };\n });\n\n server.setRequestHandler(CallToolRequestSchema, async (request) => {\n if (request.params.name === 'test_client_elicitation_defaults') {\n try {\n // Request elicitation with all optional fields having defaults\n // Using raw server.request() to verify client applies defaults before sending response\n const elicitResult = await server.request(\n {\n method: 'elicitation/create',\n params: {\n message:\n 'Test client default value handling - please accept with defaults',\n requestedSchema: {\n type: 'object',\n properties: {\n name: {\n type: 'string',\n description: 'User name',\n default: 'John Doe'\n },\n age: {\n type: 'integer',\n description: 'User age',\n default: 30\n },\n score: {\n type: 'number',\n description: 'User score',\n default: 95.5\n },\n status: {\n type: 'string',\n description: 'User status',\n enum: ['active', 'inactive', 'pending'],\n default: 'active'\n },\n verified: {\n type: 'boolean',\n description: 'Verification status',\n default: true\n }\n },\n required: [] // All fields optional, so defaults should apply\n }\n }\n },\n ElicitResultSchema\n );\n\n // Check if elicitation was accepted\n if (elicitResult.action !== 'accept') {\n checks.push({\n id: 'client-elicitation-sep1034-general',\n name: 'ClientElicitationSEP1034General',\n description: 'Client accepts elicitation request',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: `Expected action 'accept', got '${elicitResult.action}'`,\n specReferences: [\n {\n id: 'SEP-1034',\n url: 'https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1034'\n }\n ]\n });\n return {\n content: [{ type: 'text', text: 'Elicitation was not accepted' }]\n };\n }\n\n const content = elicitResult.content || {};\n\n // Validate string default was applied\n const stringErrors: string[] = [];\n if (!('name' in content)) {\n stringErrors.push(\n 'Field \"name\" missing - should have default \"John Doe\"'\n );\n } else if (typeof content.name !== 'string') {\n stringErrors.push(\n `Expected string for \"name\", got ${typeof content.name}`\n );\n }\n\n checks.push({\n id: 'client-elicitation-sep1034-string-default',\n name: 'ClientElicitationSEP1034StringDefault',\n description: 'Client applies string default value for elicitation',\n status: stringErrors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage:\n stringErrors.length > 0 ? stringErrors.join('; ') : undefined,\n specReferences: [\n {\n id: 'SEP-1034',\n url: 'https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1034'\n }\n ],\n details: {\n field: 'name',\n expectedDefault: 'John Doe',\n receivedValue: content.name\n }\n });\n\n // Validate integer default was applied\n const integerErrors: string[] = [];\n if (!('age' in content)) {\n integerErrors.push('Field \"age\" missing - should have default 30');\n } else if (typeof content.age !== 'number') {\n integerErrors.push(\n `Expected number for \"age\", got ${typeof content.age}`\n );\n }\n\n checks.push({\n id: 'client-elicitation-sep1034-integer-default',\n name: 'ClientElicitationSEP1034IntegerDefault',\n description: 'Client applies integer default value for elicitation',\n status: integerErrors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage:\n integerErrors.length > 0 ? integerErrors.join('; ') : undefined,\n specReferences: [\n {\n id: 'SEP-1034',\n url: 'https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1034'\n }\n ],\n details: {\n field: 'age',\n expectedDefault: 30,\n receivedValue: content.age\n }\n });\n\n // Validate number default was applied\n const numberErrors: string[] = [];\n if (!('score' in content)) {\n numberErrors.push(\n 'Field \"score\" missing - should have default 95.5'\n );\n } else if (typeof content.score !== 'number') {\n numberErrors.push(\n `Expected number for \"score\", got ${typeof content.score}`\n );\n }\n\n checks.push({\n id: 'client-elicitation-sep1034-number-default',\n name: 'ClientElicitationSEP1034NumberDefault',\n description: 'Client applies number default value for elicitation',\n status: numberErrors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage:\n numberErrors.length > 0 ? numberErrors.join('; ') : undefined,\n specReferences: [\n {\n id: 'SEP-1034',\n url: 'https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1034'\n }\n ],\n details: {\n field: 'score',\n expectedDefault: 95.5,\n receivedValue: content.score\n }\n });\n\n // Validate enum default was applied\n const enumErrors: string[] = [];\n if (!('status' in content)) {\n enumErrors.push(\n 'Field \"status\" missing - should have default \"active\"'\n );\n } else if (typeof content.status !== 'string') {\n enumErrors.push(\n `Expected string for \"status\", got ${typeof content.status}`\n );\n } else if (\n !['active', 'inactive', 'pending'].includes(content.status)\n ) {\n enumErrors.push(\n `Value \"${content.status}\" is not a valid enum member`\n );\n }\n\n checks.push({\n id: 'client-elicitation-sep1034-enum-default',\n name: 'ClientElicitationSEP1034EnumDefault',\n description: 'Client applies enum default value for elicitation',\n status: enumErrors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage:\n enumErrors.length > 0 ? enumErrors.join('; ') : undefined,\n specReferences: [\n {\n id: 'SEP-1034',\n url: 'https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1034'\n }\n ],\n details: {\n field: 'status',\n expectedDefault: 'active',\n receivedValue: content.status\n }\n });\n\n // Validate boolean default was applied\n const booleanErrors: string[] = [];\n if (!('verified' in content)) {\n booleanErrors.push(\n 'Field \"verified\" missing - should have default true'\n );\n } else if (typeof content.verified !== 'boolean') {\n booleanErrors.push(\n `Expected boolean for \"verified\", got ${typeof content.verified}`\n );\n }\n\n checks.push({\n id: 'client-elicitation-sep1034-boolean-default',\n name: 'ClientElicitationSEP1034BooleanDefault',\n description: 'Client applies boolean default value for elicitation',\n status: booleanErrors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage:\n booleanErrors.length > 0 ? booleanErrors.join('; ') : undefined,\n specReferences: [\n {\n id: 'SEP-1034',\n url: 'https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1034'\n }\n ],\n details: {\n field: 'verified',\n expectedDefault: true,\n receivedValue: content.verified\n }\n });\n\n return {\n content: [\n {\n type: 'text',\n text: `Elicitation completed: ${JSON.stringify(content)}`\n }\n ]\n };\n } catch (error: any) {\n checks.push({\n id: 'client-elicitation-sep1034-general',\n name: 'ClientElicitationSEP1034General',\n description: 'Client handles elicitation with defaults',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: `Elicitation failed: ${error.message}`,\n specReferences: [\n {\n id: 'SEP-1034',\n url: 'https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1034'\n }\n ]\n });\n\n return {\n content: [\n {\n type: 'text',\n text: `Elicitation error: ${error.message}`\n }\n ]\n };\n }\n }\n\n throw new Error(`Unknown tool: ${request.params.name}`);\n });\n\n return server;\n };\n\n const app = express();\n app.use(express.json());\n\n app.use(\n createRequestLogger(checks, {\n incomingId: 'incoming-request',\n outgoingId: 'outgoing-response',\n mcpRoute: '/mcp'\n })\n );\n\n // Handle POST requests - stateful mode\n app.post('/mcp', async (req: Request, res: Response) => {\n const sessionId = req.headers['mcp-session-id'] as string | undefined;\n\n try {\n let transport: StreamableHTTPServerTransport;\n\n if (sessionId && transports[sessionId]) {\n // Reuse existing transport for established sessions\n transport = transports[sessionId];\n } else if (!sessionId && isInitializeRequest(req.body)) {\n // Create new transport for initialization requests\n const mcpServer = createMcpServer();\n\n transport = new StreamableHTTPServerTransport({\n sessionIdGenerator: () => randomUUID(),\n onsessioninitialized: (newSessionId) => {\n transports[newSessionId] = transport;\n servers[newSessionId] = mcpServer;\n }\n });\n\n transport.onclose = () => {\n const sid = transport.sessionId;\n if (sid && transports[sid]) {\n delete transports[sid];\n if (servers[sid]) {\n servers[sid].close();\n delete servers[sid];\n }\n }\n };\n\n await mcpServer.connect(transport);\n await transport.handleRequest(req, res, req.body);\n return;\n } else {\n res.status(400).json({\n jsonrpc: '2.0',\n error: {\n code: -32000,\n message: 'Invalid or missing session ID'\n },\n id: null\n });\n return;\n }\n\n await transport.handleRequest(req, res, req.body);\n } catch {\n if (!res.headersSent) {\n res.status(500).json({\n jsonrpc: '2.0',\n error: {\n code: -32603,\n message: 'Internal server error'\n },\n id: null\n });\n }\n }\n });\n\n // Handle GET requests - SSE streams for sessions\n app.get('/mcp', async (req: Request, res: Response) => {\n const sessionId = req.headers['mcp-session-id'] as string | undefined;\n\n if (!sessionId || !transports[sessionId]) {\n res.status(400).send('Invalid or missing session ID');\n return;\n }\n\n try {\n const transport = transports[sessionId];\n await transport.handleRequest(req, res);\n } catch {\n if (!res.headersSent) {\n res.status(500).send('Error establishing SSE stream');\n }\n }\n });\n\n // Handle DELETE requests - session termination\n app.delete('/mcp', async (req: Request, res: Response) => {\n const sessionId = req.headers['mcp-session-id'] as string | undefined;\n\n if (!sessionId || !transports[sessionId]) {\n res.status(400).send('Invalid or missing session ID');\n return;\n }\n\n try {\n const transport = transports[sessionId];\n await transport.handleRequest(req, res);\n } catch {\n if (!res.headersSent) {\n res.status(500).send('Error handling termination');\n }\n }\n });\n\n const cleanup = () => {\n // Clean up all sessions\n for (const sessionId of Object.keys(transports)) {\n if (servers[sessionId]) {\n servers[sessionId].close();\n }\n }\n };\n\n return { app, cleanup };\n}\n\nexport class ElicitationClientDefaultsScenario extends HandlerScenario {\n name = 'elicitation-sep1034-client-defaults';\n readonly source = { introducedIn: '2025-11-25' } as const;\n description =\n 'Tests client applies default values for omitted elicitation fields (SEP-1034)';\n mcpPath = '/mcp';\n private checks: ConformanceCheck[] = [];\n private cleanup: (() => void) | null = null;\n\n handler(_getBaseUrl: () => string): RequestListener {\n this.checks = [];\n const { app, cleanup } = createServer(this.checks);\n this.cleanup = cleanup;\n return app;\n }\n\n async stop() {\n this.cleanup?.();\n this.cleanup = null;\n await super.stop();\n }\n\n /**\n * The tool call triggers elicitation/create; the interpreter's standing\n * default (accept with schema defaults) is exactly the behaviour under test.\n */\n readonly steps = [\n { op: 'tools/list' },\n {\n op: 'tools/call',\n name: 'test_client_elicitation_defaults',\n arguments: {}\n }\n ] as const;\n\n getChecks(): ConformanceCheck[] {\n const expectedSlugs = [\n 'client-elicitation-sep1034-string-default',\n 'client-elicitation-sep1034-integer-default',\n 'client-elicitation-sep1034-number-default',\n 'client-elicitation-sep1034-enum-default',\n 'client-elicitation-sep1034-boolean-default'\n ];\n\n // Add failures for any checks that weren't triggered (tool not called)\n for (const slug of expectedSlugs) {\n if (!this.checks.find((c) => c.id === slug)) {\n this.checks.push({\n id: slug,\n name: slug.replace(/-/g, ''),\n description: `Server applies ${slug.split('-')[4]} default for elicitation`,\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n details: { message: 'Tool was not called by client' },\n specReferences: [\n {\n id: 'SEP-1034',\n url: 'https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1034'\n }\n ]\n });\n }\n }\n return this.checks;\n }\n}\n",[],[135,262,429,385],"ae5adfaf-4175-4bcb-b0fa-e6b9db5bf7fc","auth-checker.ts","ddeaad80-ad13-11f1-8de9-1607ee4eb77e",36,["D",1789043626411],"/**\n * Auth checker — a stateless re-auth chain.\n *\n * One MCP server, three auth rungs. Each rung is reached by forcing the\n * client back through authorization under a DIFFERENT configuration, using\n * only the spec's own signals:\n *\n * rung 1 \"basic\" 401 challenge → PRM #1 → AS #1: PKCE S256 + DCR +\n * RFC 8707 resource indicator.\n * rung 2 \"scoped\" calling advance_to_scoped with a basic token → 401\n * whose WWW-Authenticate points at PRM #2 (different AS,\n * SEP-835: scope must be taken from scopes_supported).\n * rung 3 \"step-up\" calling advance_to_stepup with only conformance:read →\n * 403 insufficient_scope, scope=\"… conformance:write\"\n * (RFC 6750 step-up at the same AS).\n *\n * The access token IS the progress report: `ac.`, so\n * possession of a token with cfg=scoped and conformance:write proves the\n * client handled discovery, a challenge-driven AS switch, SEP-835 scope\n * selection, and 403 step-up — with zero server-side state. The final\n * auth_complete tool spells that out.\n *\n * Like the consent gate in checker-2026-07-28, the embedded ASs are\n * deliverers of specific challenge shapes, not auth conformance tests in\n * themselves — but unlike the consent gate they auto-redirect, so the whole\n * chain is automatable.\n */\n\nimport { Server } from 'npm:@modelcontextprotocol/sdk@^1.29.0/server/index.js';\nimport { StreamableHTTPServerTransport } from 'npm:@modelcontextprotocol/sdk@^1.29.0/server/streamableHttp.js';\nimport {\n CallToolRequestSchema,\n CallToolResult,\n ListToolsRequestSchema\n} from 'npm:@modelcontextprotocol/sdk@^1.29.0/types.js';\nimport express, { Request, Response } from 'npm:express@^5.1.0';\nimport { createHash } from 'node:crypto';\nimport type { ConformanceCheck } from '../../types.ts';\nimport { HandlerScenario } from '../../types.ts';\n\nconst SERVER_INFO = { name: 'mcp-checker-auth', version: '1.0.0' };\n\nconst SCOPE_READ = 'conformance:read';\nconst SCOPE_WRITE = 'conformance:write';\n\ntype Cfg = 'basic' | 'scoped' | 'isstrap';\n\ninterface TokenClaims {\n cfg: Cfg;\n scope: string;\n /** Set on tokens minted through the iss-mismatch trap — see rung 4. */\n trap?: string;\n}\n\nfunction mintToken(claims: TokenClaims): string {\n return `ac.${Buffer.from(JSON.stringify(claims)).toString('base64url')}`;\n}\n\nfunction parseToken(\n authorization: string | undefined\n): TokenClaims | undefined {\n const m = /^Bearer ac\\.([A-Za-z0-9_-]+)$/.exec(authorization ?? '');\n if (!m) return undefined;\n try {\n const claims = JSON.parse(Buffer.from(m[1], 'base64url').toString());\n if (!['basic', 'scoped', 'isstrap'].includes(claims.cfg)) return undefined;\n return {\n cfg: claims.cfg,\n scope: String(claims.scope ?? ''),\n ...(claims.trap ? { trap: String(claims.trap) } : {})\n };\n } catch {\n return undefined;\n }\n}\n\nconst hasScope = (t: TokenClaims, scope: string) =>\n t.scope.split(' ').includes(scope);\n\n/** What each successfully-reached rung proves about the client. */\nconst RUNG_PROOF: Record = {\n auth_status: 'you completed at least one full authorization flow',\n advance_to_scoped:\n 'your client handled a mid-session 401 whose WWW-Authenticate pointed ' +\n 'at a DIFFERENT resource_metadata, re-discovered, re-registered at the ' +\n 'second AS, and requested the scope advertised in scopes_supported ' +\n '(SEP-835)',\n advance_to_stepup:\n 'your client handled a 403 insufficient_scope challenge by ' +\n 're-authorizing with the broader scope from the challenge (RFC 6750 ' +\n 'step-up) while staying at the same AS',\n auth_complete:\n 'ALL AUTH RUNGS PASSED: initial discovery + PKCE S256 + DCR + RFC 8707 ' +\n 'resource indicator (rung 1), challenge-driven AS switch + SEP-835 ' +\n 'scope selection (rung 2), 403 insufficient_scope step-up (rung 3)'\n};\n\nconst TOOLS = [\n {\n name: 'auth_status',\n description:\n 'Reports which auth rung your current access token proves. Call this ' +\n 'first and after each advance.'\n },\n {\n name: 'advance_to_scoped',\n description:\n 'Rung 2 gate. With a rung-1 (basic) token this returns HTTP 401 whose ' +\n 'WWW-Authenticate names a different resource_metadata — re-authorize ' +\n 'through it (note its scopes_supported) and retry.'\n },\n {\n name: 'advance_to_stepup',\n description:\n `Rung 3 gate. Requires ${SCOPE_WRITE}; with only ${SCOPE_READ} this ` +\n 'returns HTTP 403 insufficient_scope naming the scope to add — ' +\n 're-authorize with it and retry.'\n },\n {\n name: 'auth_complete',\n description:\n 'The finish line. Succeeds only with a token proving every rung; the ' +\n 'result is the full report.'\n },\n {\n name: 'check_iss_validation',\n description:\n 'OPTIONAL TRAP (RFC 9207 / SEP-2468). Calling this returns a 401 ' +\n 'pointing at an AS that advertises ' +\n 'authorization_response_iss_parameter_supported: true but sends a ' +\n 'WRONG iss in the authorization response. This tool can NEVER return ' +\n 'success: a conformant client refuses to exchange the code (your own ' +\n 'client errors about the iss mismatch — that error IS the pass). A ' +\n 'client that exchanges the code anyway receives a poisoned token, and ' +\n 'every request made with it fails with an explanation. Run this last; ' +\n 'it ends the session either way.'\n }\n].map((t) => ({ ...t, inputSchema: { type: 'object', properties: {} } }));\n\nexport class AuthCheckerScenario extends HandlerScenario {\n name = 'checker-auth';\n description =\n 'Stateless auth re-auth chain: each tool rung forces re-authorization ' +\n 'under a different configuration (401 with a different ' +\n 'resource_metadata, then 403 insufficient_scope step-up). The access ' +\n 'token encodes progress; auth_complete succeeds only after every rung.';\n readonly source = { introducedIn: '2025-06-18' } as const;\n mcpPath = '';\n\n private checks: ConformanceCheck[] = [];\n\n handler(getBaseUrl: () => string): express.Application {\n const app = express();\n app.use(express.json());\n app.use(express.urlencoded({ extended: false }));\n\n const base = () => new URL(getBaseUrl());\n const basePath = () => (base().pathname === '/' ? '' : base().pathname);\n const prmUrl = (cfg: Cfg) =>\n `${base().origin}/.well-known/oauth-protected-resource${basePath()}${cfg === 'basic' ? '' : `/cfg/${cfg}`}`;\n const issuer = (cfg: Cfg) => `${getBaseUrl()}/as/${cfg}`;\n /** The deliberately-wrong iss value the trap AS puts in its redirects. */\n const wrongIss = () => `${getBaseUrl()}/as/mixup-attacker`;\n\n const record = (\n id: string,\n ok: boolean,\n description: string,\n details?: Record\n ) => {\n this.checks.push({\n id,\n name: id,\n description,\n status: ok ? 'SUCCESS' : 'WARNING',\n timestamp: new Date().toISOString(),\n specReferences: [\n {\n id: 'MCP-Auth',\n url: 'https://modelcontextprotocol.io/specification/2025-06-18/basic/authorization'\n }\n ],\n details\n });\n };\n\n // ---------------- protected resource metadata (three variants) --------\n const prmDoc = (cfg: Cfg) => ({\n resource: getBaseUrl(),\n authorization_servers: [issuer(cfg)],\n bearer_methods_supported: ['header'],\n // SEP-835: rung 2's PRM advertises the scope the client must request.\n // Deliberately ONLY the read scope — the write scope must be learned\n // from the rung-3 403 challenge, otherwise an SDK that requests all of\n // scopes_supported up front would never exercise the step-up path.\n ...(cfg === 'scoped' ? { scopes_supported: [SCOPE_READ] } : {})\n });\n app.get('/.well-known/oauth-protected-resource', (_req, res) => {\n res.json(prmDoc('basic'));\n });\n app.get('/.well-known/oauth-protected-resource/cfg/scoped', (_req, res) => {\n res.json(prmDoc('scoped'));\n });\n app.get(\n '/.well-known/oauth-protected-resource/cfg/isstrap',\n (_req, res) => {\n res.json(prmDoc('isstrap'));\n }\n );\n\n // ---------------- the two ASs (path-based issuers, stateless) ---------\n const asMetadata = (cfg: Cfg) => (_req: Request, res: Response) => {\n res.json({\n issuer: issuer(cfg),\n authorization_endpoint: `${issuer(cfg)}/authorize`,\n token_endpoint: `${issuer(cfg)}/token`,\n registration_endpoint: `${issuer(cfg)}/register`,\n response_types_supported: ['code'],\n grant_types_supported: ['authorization_code'],\n code_challenge_methods_supported: ['S256'],\n token_endpoint_auth_methods_supported: ['none'],\n ...(cfg === 'scoped'\n ? { scopes_supported: [SCOPE_READ, SCOPE_WRITE] }\n : {}),\n // RFC 9207: the trap AS PROMISES iss in authorization responses —\n // which obliges the client to validate it. The redirect then carries\n // a wrong one.\n ...(cfg === 'isstrap'\n ? { authorization_response_iss_parameter_supported: true }\n : {})\n });\n };\n for (const cfg of ['basic', 'scoped', 'isstrap'] as const) {\n app.get(\n `/.well-known/oauth-authorization-server/as/${cfg}`,\n asMetadata(cfg)\n );\n app.get(`/.well-known/openid-configuration/as/${cfg}`, asMetadata(cfg));\n\n app.post(`/as/${cfg}/register`, (req, res) => {\n res.status(201).json({\n ...req.body,\n client_id: `checker-auth-${cfg}-client`,\n token_endpoint_auth_method: 'none'\n });\n });\n\n app.get(`/as/${cfg}/authorize`, (req, res) => {\n const q = req.query as Record;\n const fail = (error: string, description: string) => {\n if (!q.redirect_uri) {\n res.status(400).json({ error, error_description: description });\n return;\n }\n const r = new URL(q.redirect_uri);\n r.searchParams.set('error', error);\n r.searchParams.set('error_description', description);\n if (q.state !== undefined) r.searchParams.set('state', q.state);\n res.redirect(r.toString());\n };\n if (\n q.code_challenge === undefined ||\n q.code_challenge_method !== 'S256'\n ) {\n fail('invalid_request', 'PKCE with S256 is required');\n return;\n }\n if (cfg === 'basic' && q.resource === undefined) {\n fail(\n 'invalid_target',\n 'RFC 8707: include the resource parameter naming the MCP server'\n );\n return;\n }\n const requested = (q.scope ?? '').split(' ').filter(Boolean);\n if (cfg === 'scoped' && !requested.includes(SCOPE_READ)) {\n fail(\n 'invalid_scope',\n `SEP-835: request the scopes advertised in the PRM scopes_supported (at least ${SCOPE_READ}); got '${q.scope ?? ''}'`\n );\n return;\n }\n record(\n `auth-checker-authorize-${cfg}`,\n true,\n `Conformant authorization request at the '${cfg}' AS`,\n { scope: q.scope }\n );\n if (!q.redirect_uri) {\n res.status(400).json({\n error: 'invalid_request',\n error_description: 'redirect_uri required'\n });\n return;\n }\n const r = new URL(q.redirect_uri);\n r.searchParams.set(\n 'code',\n Buffer.from(\n JSON.stringify({\n cfg,\n challenge: q.code_challenge,\n scope: requested.join(' ')\n })\n ).toString('base64url')\n );\n if (q.state !== undefined) r.searchParams.set('state', q.state);\n // The trap: metadata promised iss, the response lies about it. A\n // conformant client compares this against the issuer it authorized\n // at and refuses to exchange the code (RFC 9207 §2.4).\n if (cfg === 'isstrap') r.searchParams.set('iss', wrongIss());\n res.redirect(r.toString());\n });\n\n app.post(`/as/${cfg}/token`, (req, res) => {\n const grant = req.body as Record;\n let code: { cfg?: string; challenge?: string; scope?: string };\n try {\n code = JSON.parse(\n Buffer.from(String(grant.code ?? ''), 'base64url').toString()\n );\n } catch {\n code = {};\n }\n if (grant.grant_type !== 'authorization_code' || code.cfg !== cfg) {\n res.status(400).json({ error: 'invalid_grant' });\n return;\n }\n const expected = createHash('sha256')\n .update(String(grant.code_verifier ?? ''))\n .digest('base64url');\n if (expected !== code.challenge) {\n res.status(400).json({\n error: 'invalid_grant',\n error_description: 'PKCE verification failed'\n });\n return;\n }\n const scope = code.scope ?? '';\n // Exchanging a trap code means the client ignored the iss mismatch —\n // the token records the offense and incriminates every later request.\n res.json({\n access_token: mintToken({\n cfg,\n scope,\n ...(cfg === 'isstrap'\n ? { trap: 'exchanged-code-despite-iss-mismatch' }\n : {})\n }),\n token_type: 'Bearer',\n expires_in: 3600,\n ...(scope ? { scope } : {})\n });\n });\n }\n\n // ---------------- landing -------------------------------------------\n app.get('/', (req, res) => {\n if (!String(req.headers.accept ?? '').includes('text/html')) {\n res.status(405).json({\n error: 'POST JSON-RPC to this URL (auth required)',\n docs: 'open this URL in a browser for a full explanation'\n });\n return;\n }\n res.type('html').send(`\nMCP Checker — Auth Chain\n\n\n

MCP Checker — Auth Chain

Checks a client's OAuth behavior by forcing it back through\nauthorization under different configurations, using only the spec's own signals.\nStateless: the access token itself encodes your progress.

Rung 1 — basic: any unauthenticated request → 401. Complete\ndiscovery, DCR, PKCE (S256), and send the RFC 8707 resource parameter.
Rung 2 — AS switch + scopes: call advance_to_scoped →\n401 whose WWW-Authenticate names a different resource_metadata.\nRe-authorize there, requesting the scope from scopes_supported (SEP-835).
Rung 3 — step-up: call advance_to_stepup →\n403 insufficient_scope naming ${SCOPE_WRITE}. Re-authorize with it.
Finish: auth_complete succeeds only with the final token\nand prints the full report.
Optional trap — iss validation (RFC 9207): check_iss_validation\nchallenges you toward an AS whose metadata promises iss in authorization\nresponses, then sends a wrong one. A conformant client refuses to exchange the\ncode — your client's own iss-mismatch error is the pass. A client that exchanges anyway\ngets a poisoned token and every request with it fails with the explanation. Run it last;\nit ends the session either way.

Your token is readable: ac.<base64url JSON> — decode it any time to\nsee what your client has proven.

\n`);\n });\n\n // ---------------- the MCP endpoint, gated per rung -------------------\n // HTTP header values must be Latin-1; keep the rich text in the body.\n const headerSafe = (s: string) => s.replace(/[^\\x20-\\x7e]/g, '-');\n const challenge401 = (res: Response, cfg: Cfg, description: string) => {\n res\n .status(401)\n .set(\n 'WWW-Authenticate',\n `Bearer error=\"invalid_token\", error_description=\"${headerSafe(description)}\", resource_metadata=\"${prmUrl(cfg)}\"`\n )\n .json({ error: 'invalid_token', error_description: description });\n };\n\n app.post('/', async (req: Request, res: Response) => {\n const token = parseToken(req.headers.authorization);\n const body =\n req.body && !Array.isArray(req.body)\n ? (req.body as { method?: string; params?: { name?: string } })\n : {};\n\n if (!token) {\n challenge401(\n res,\n 'basic',\n 'Rung 1: authorize via the resource_metadata in this challenge'\n );\n return;\n }\n\n // NOTE: a poisoned token (minted by exchanging a wrong-iss code) is\n // NOT rejected at the HTTP layer. Doing so delivered the verdict on the\n // SDK's reconnect/initialize POST — a layer the agent never sees, so\n // the failure surfaced as an opaque \"reconnect failed: HTTP 400\". We\n // accept the token (the session stays alive) and instead fail the\n // check_iss_validation TOOL CALL in-band below, matching every other\n // rung's verdict style. Safe: the harness controls both ASs.\n\n // Gate the advance tools at the HTTP layer so the failures are real\n // OAuth challenges, not tool errors — that is the whole trick.\n const toolName =\n body.method === 'tools/call' ? body.params?.name : undefined;\n\n // The iss trap. A non-poisoned token gets challenged toward the trap AS\n // (a conformant client refuses mid-OAuth and never comes back — that\n // out-of-band refusal is the PASS). A poisoned token means the client\n // exchanged the wrong-iss code: fall through to the SDK dispatch, which\n // returns the FAIL verdict as an in-band tool result.\n if (toolName === 'check_iss_validation' && !token.trap) {\n record(\n 'auth-checker-iss-trap-armed',\n true,\n 'iss trap challenge issued'\n );\n challenge401(\n res,\n 'isstrap',\n 'iss validation check: re-authorize via the resource_metadata in this challenge. If your client validates iss (RFC 9207) it will refuse to complete - that refusal is the PASS'\n );\n return;\n }\n if (toolName === 'advance_to_scoped' && token.cfg !== 'scoped') {\n record(\n 'auth-checker-rung2-challenged',\n true,\n 'Rung 2 challenge issued'\n );\n challenge401(\n res,\n 'scoped',\n 'Rung 2: this rung requires the second AS configuration — re-authorize via the resource_metadata in this challenge and note its scopes_supported'\n );\n return;\n }\n if (\n (toolName === 'advance_to_stepup' || toolName === 'auth_complete') &&\n !(token.cfg === 'scoped' && hasScope(token, SCOPE_WRITE))\n ) {\n if (token.cfg !== 'scoped') {\n challenge401(res, 'scoped', 'Complete rung 2 before rung 3');\n return;\n }\n record('auth-checker-rung3-challenged', true, 'Rung 3 step-up issued');\n res\n .status(403)\n .set(\n 'WWW-Authenticate',\n `Bearer error=\"insufficient_scope\", scope=\"${SCOPE_READ} ${SCOPE_WRITE}\", resource_metadata=\"${prmUrl('scoped')}\"`\n )\n .json({\n error: 'insufficient_scope',\n error_description: `Rung 3: re-authorize with '${SCOPE_WRITE}' (RFC 6750 step-up)`\n });\n return;\n }\n\n // Gate passed — serve via the SDK (per-request, stateless).\n const server = new Server(SERVER_INFO, {\n capabilities: { tools: {} },\n instructions:\n 'Auth-chain checker. Call auth_status, then advance_to_scoped, ' +\n 'then advance_to_stepup, then auth_complete. Each advance forces ' +\n 'a re-authorization under a different configuration; an HTTP ' +\n '401/403 along the way is the next challenge, not a failure.'\n });\n server.setRequestHandler(ListToolsRequestSchema, async () => ({\n tools: TOOLS\n }));\n server.setRequestHandler(\n CallToolRequestSchema,\n async (request): Promise => {\n // iss trap, fail path: reached only with a poisoned token, i.e.\n // the client exchanged a code whose response carried a wrong iss.\n // Deliver the verdict in-band so it surfaces as a tool result, not\n // a swallowed transport error — and keep the session alive.\n if (request.params.name === 'check_iss_validation') {\n record(\n 'auth-checker-iss-trap-caught',\n false,\n 'Client exchanged an authorization code despite an iss mismatch',\n { iss: wrongIss(), expected: issuer('isstrap') }\n );\n return {\n content: [\n {\n type: 'text',\n text:\n 'FAIL [check_iss_validation]: client exchanged an ' +\n `authorization code whose response carried iss='${wrongIss()}', ` +\n `expected '${issuer('isstrap')}' (RFC 9207 / SEP-2468). The ` +\n 'trap AS advertised ' +\n 'authorization_response_iss_parameter_supported: true, so a ' +\n 'conformant client MUST compare iss against the issuer it ' +\n 'authorized at and abort BEFORE the token exchange. ' +\n 'Reaching this tool result means your client did not — ' +\n 'leaving it open to authorization-server mix-up attacks.'\n }\n ],\n isError: true\n };\n }\n const proof = RUNG_PROOF[request.params.name];\n if (!proof) {\n return {\n content: [\n {\n type: 'text',\n text: `unknown tool '${request.params.name}'`\n }\n ],\n isError: true\n };\n }\n record(`auth-checker-${request.params.name}`, true, proof, {\n cfg: token.cfg,\n scope: token.scope\n });\n const status =\n request.params.name === 'auth_status'\n ? `Token: cfg=${token.cfg}, scope='${token.scope}' — ${\n token.cfg === 'basic'\n ? 'rung 1 done; call advance_to_scoped next.'\n : hasScope(token, SCOPE_WRITE)\n ? 'all rungs done; call auth_complete.'\n : 'rung 2 done; call advance_to_stepup next.'\n }`\n : proof;\n return {\n content: [\n {\n type: 'text',\n text: `CONFORMANCE OK [${request.params.name}]: ${status}`\n }\n ]\n };\n }\n );\n const transport = new StreamableHTTPServerTransport({\n sessionIdGenerator: undefined\n });\n await server.connect(transport);\n await transport.handleRequest(req, res, req.body);\n res.on('close', () => {\n void transport.close();\n void server.close();\n });\n });\n\n return app;\n }\n\n getChecks(): ConformanceCheck[] {\n return this.checks;\n }\n}\n",[],[135,262,429,509],"e1fa8063-1eeb-4dd6-8206-8e9f94f3a656","token-endpoint-auth.ts","e310e75c-ad13-11f1-9294-1607ee4eb77e","9f323523-6c17-4682-a46c-6c3ac09d1fec",51,["D",1789043635059],"import type { Scenario, ConformanceCheck } from '../../../types.ts';\nimport { ScenarioUrls } from '../../../types.ts';\nimport { createAuthServer } from './helpers/createAuthServer.ts';\nimport { createServer } from './helpers/createServer.ts';\nimport { ServerLifecycle } from './helpers/serverLifecycle.ts';\nimport { SpecReferences } from './spec-references.ts';\nimport { MockTokenVerifier } from './helpers/mockTokenVerifier.ts';\n\ntype AuthMethod = 'client_secret_basic' | 'client_secret_post' | 'none';\n\nfunction detectAuthMethod(\n authorizationHeader?: string,\n bodyClientSecret?: string\n): AuthMethod {\n if (authorizationHeader?.startsWith('Basic ')) {\n return 'client_secret_basic';\n }\n if (bodyClientSecret) {\n return 'client_secret_post';\n }\n return 'none';\n}\n\nfunction validateBasicAuthFormat(authorizationHeader: string): {\n valid: boolean;\n error?: string;\n} {\n const encoded = authorizationHeader.substring('Basic '.length);\n try {\n const decoded = Buffer.from(encoded, 'base64').toString('utf-8');\n if (!decoded.includes(':')) {\n return { valid: false, error: 'missing colon separator' };\n }\n return { valid: true };\n } catch {\n return { valid: false, error: 'base64 decoding failed' };\n }\n}\n\nconst AUTH_METHOD_NAMES: Record = {\n client_secret_basic: 'HTTP Basic authentication (client_secret_basic)',\n client_secret_post: 'client_secret_post',\n none: 'no authentication (public client)'\n};\n\nclass TokenEndpointAuthScenario implements Scenario {\n name: string;\n readonly source = { introducedIn: '2025-06-18' } as const;\n description: string;\n private expectedAuthMethod: AuthMethod;\n private authServer = new ServerLifecycle();\n private server = new ServerLifecycle();\n private checks: ConformanceCheck[] = [];\n\n // Track resource parameters for RFC 8707 validation\n private authorizationResource?: string;\n private tokenResource?: string;\n\n constructor(expectedAuthMethod: AuthMethod) {\n this.expectedAuthMethod = expectedAuthMethod;\n this.name = `auth/token-endpoint-auth-${expectedAuthMethod === 'client_secret_basic' ? 'basic' : expectedAuthMethod === 'client_secret_post' ? 'post' : 'none'}`;\n this.description = `Tests that client uses ${AUTH_METHOD_NAMES[expectedAuthMethod]} when server only supports ${expectedAuthMethod}`;\n }\n\n async start(): Promise {\n this.checks = [];\n this.authorizationResource = undefined;\n this.tokenResource = undefined;\n const tokenVerifier = new MockTokenVerifier(this.checks, []);\n\n const authApp = createAuthServer(this.checks, this.authServer.getUrl, {\n tokenVerifier,\n tokenEndpointAuthMethodsSupported: [this.expectedAuthMethod],\n onAuthorizationRequest: ({ resource }) => {\n this.authorizationResource = resource;\n },\n onTokenRequest: ({ authorizationHeader, body, timestamp }) => {\n // Track resource from token request for RFC 8707 validation\n this.tokenResource = body.resource;\n const bodyClientSecret = body.client_secret;\n const actualMethod = detectAuthMethod(\n authorizationHeader,\n bodyClientSecret\n );\n const isCorrect = actualMethod === this.expectedAuthMethod;\n\n // For basic auth, also validate the format\n let formatError: string | undefined;\n if (actualMethod === 'client_secret_basic' && authorizationHeader) {\n const validation = validateBasicAuthFormat(authorizationHeader);\n if (!validation.valid) {\n formatError = validation.error;\n }\n }\n\n const status = isCorrect && !formatError ? 'SUCCESS' : 'FAILURE';\n let description: string;\n\n if (formatError) {\n description = `Client sent Basic auth header but ${formatError}`;\n } else if (isCorrect) {\n description = `Client correctly used ${AUTH_METHOD_NAMES[this.expectedAuthMethod]} for token endpoint`;\n } else {\n description = `Client used ${actualMethod} but server only supports ${this.expectedAuthMethod}`;\n }\n\n this.checks.push({\n id: 'token-endpoint-auth-method',\n name: 'Token endpoint authentication method',\n description,\n status,\n timestamp,\n specReferences: [SpecReferences.OAUTH_2_1_TOKEN],\n details: {\n expectedAuthMethod: this.expectedAuthMethod,\n actualAuthMethod: actualMethod,\n hasAuthorizationHeader: !!authorizationHeader,\n hasBodyClientSecret: !!bodyClientSecret,\n ...(formatError && { formatError })\n }\n });\n\n return {\n token: `test-token-${Date.now()}`,\n scopes: []\n };\n },\n onRegistrationRequest: () => ({\n clientId: `test-client-${Date.now()}`,\n clientSecret:\n this.expectedAuthMethod === 'none'\n ? undefined\n : `test-secret-${Date.now()}`,\n tokenEndpointAuthMethod: this.expectedAuthMethod\n })\n });\n await this.authServer.start(authApp);\n\n const app = createServer(\n this.checks,\n this.server.getUrl,\n this.authServer.getUrl,\n {\n prmPath: '/.well-known/oauth-protected-resource/mcp',\n requiredScopes: [],\n tokenVerifier\n }\n );\n await this.server.start(app);\n\n return { serverUrl: `${this.server.getUrl()}/mcp` };\n }\n\n async stop() {\n await this.authServer.stop();\n await this.server.stop();\n }\n\n getChecks(): ConformanceCheck[] {\n const timestamp = new Date().toISOString();\n\n if (!this.checks.some((c) => c.id === 'token-endpoint-auth-method')) {\n this.checks.push({\n id: 'token-endpoint-auth-method',\n name: 'Token endpoint authentication method',\n description: 'Client did not make a token request',\n status: 'FAILURE',\n timestamp,\n specReferences: [SpecReferences.OAUTH_2_1_TOKEN]\n });\n }\n\n // RFC 8707 Resource Parameter Validation Checks\n this.addResourceParameterChecks(timestamp);\n\n return this.checks;\n }\n\n private addResourceParameterChecks(timestamp: string): void {\n const specRefs = [\n SpecReferences.RFC_8707_RESOURCE_INDICATORS,\n SpecReferences.MCP_RESOURCE_PARAMETER\n ];\n\n // Check 1: Resource parameter in authorization request\n if (\n !this.checks.some((c) => c.id === 'resource-parameter-in-authorization')\n ) {\n const hasResource = !!this.authorizationResource;\n this.checks.push({\n id: 'resource-parameter-in-authorization',\n name: 'Resource parameter in authorization request',\n description: hasResource\n ? 'Client included resource parameter in authorization request'\n : 'Client MUST include resource parameter in authorization request per RFC 8707',\n status: hasResource ? 'SUCCESS' : 'FAILURE',\n timestamp,\n specReferences: specRefs,\n details: {\n resource: this.authorizationResource || 'not provided'\n }\n });\n }\n\n // Check 2: Resource parameter in token request\n if (!this.checks.some((c) => c.id === 'resource-parameter-in-token')) {\n const hasResource = !!this.tokenResource;\n this.checks.push({\n id: 'resource-parameter-in-token',\n name: 'Resource parameter in token request',\n description: hasResource\n ? 'Client included resource parameter in token request'\n : 'Client MUST include resource parameter in token request per RFC 8707',\n status: hasResource ? 'SUCCESS' : 'FAILURE',\n timestamp,\n specReferences: specRefs,\n details: {\n resource: this.tokenResource || 'not provided'\n }\n });\n }\n\n // Check 3: Resource parameter is valid canonical URI\n if (!this.checks.some((c) => c.id === 'resource-parameter-valid-uri')) {\n const resourceToValidate =\n this.authorizationResource || this.tokenResource;\n if (resourceToValidate) {\n const validation = this.validateCanonicalUri(resourceToValidate);\n this.checks.push({\n id: 'resource-parameter-valid-uri',\n name: 'Resource parameter is valid canonical URI',\n description: validation.valid\n ? 'Resource parameter is a valid canonical URI (has scheme, no fragment)'\n : `Resource parameter is invalid: ${validation.error}`,\n status: validation.valid ? 'SUCCESS' : 'FAILURE',\n timestamp,\n specReferences: specRefs,\n details: {\n resource: resourceToValidate,\n ...(validation.error && { error: validation.error })\n }\n });\n }\n }\n\n // Check 4: Resource parameter consistency between requests\n if (!this.checks.some((c) => c.id === 'resource-parameter-consistency')) {\n if (this.authorizationResource && this.tokenResource) {\n const consistent = this.authorizationResource === this.tokenResource;\n this.checks.push({\n id: 'resource-parameter-consistency',\n name: 'Resource parameter consistency',\n description: consistent\n ? 'Resource parameter is consistent between authorization and token requests'\n : 'Resource parameter MUST be consistent between authorization and token requests',\n status: consistent ? 'SUCCESS' : 'FAILURE',\n timestamp,\n specReferences: specRefs,\n details: {\n authorizationResource: this.authorizationResource,\n tokenResource: this.tokenResource\n }\n });\n }\n }\n }\n\n private validateCanonicalUri(uri: string): {\n valid: boolean;\n error?: string;\n } {\n try {\n const parsed = new URL(uri);\n // Check for fragment (RFC 8707: MUST NOT include fragment)\n if (parsed.hash) {\n return {\n valid: false,\n error: 'contains fragment (not allowed per RFC 8707)'\n };\n }\n return { valid: true };\n } catch {\n return { valid: false, error: 'invalid URI format' };\n }\n }\n}\n\nexport class ClientSecretBasicAuthScenario extends TokenEndpointAuthScenario {\n constructor() {\n super('client_secret_basic');\n }\n}\n\nexport class ClientSecretPostAuthScenario extends TokenEndpointAuthScenario {\n constructor() {\n super('client_secret_post');\n }\n}\n\nexport class PublicClientAuthScenario extends TokenEndpointAuthScenario {\n constructor() {\n super('none');\n }\n}\n",[],[135,262,429,525,517],"auth","d4c3b941-7714-4bbe-ad01-d52ffcf41697","spec-references.ts","dfb71f90-ad13-11f1-9679-1607ee4eb77e",41,["D",1789043629422],"import { SpecReference } from '../../../types.ts';\n\nexport const SpecReferences: { [key: string]: SpecReference } = {\n RFC_PRM_DISCOVERY: {\n id: 'RFC-9728',\n url: 'https://www.rfc-editor.org/rfc/rfc9728.html#section-3.1'\n },\n RFC_AUTH_SERVER_METADATA_REQUEST: {\n id: 'RFC-8414-metadata-request',\n url: 'https://www.rfc-editor.org/rfc/rfc8414.html#section-3.1'\n },\n LEGACY_2025_03_26_AUTH_DISCOVERY: {\n id: 'MCP-2025-03-26-Authorization-metadata-discovery',\n url: 'https://modelcontextprotocol.io/specification/2025-03-26/basic/authorization#server-metadata-discovery'\n },\n LEGACY_2025_03_26_AUTH_URL_FALLBACK: {\n id: 'MCP-2025-03-26-Authorization-metadata-url-fallback',\n url: 'https://modelcontextprotocol.io/specification/2025-03-26/basic/authorization#fallbacks-for-servers-without-metadata-discovery'\n },\n MCP_PRM_DISCOVERY: {\n id: 'MCP-2025-06-18-PRM-discovery',\n url: 'https://modelcontextprotocol.io/specification/2025-11-25/basic/authorization#protected-resource-metadata-discovery-requirements'\n },\n MCP_AUTH_DISCOVERY: {\n id: 'MCP-Authorization-metadata-discovery',\n url: 'https://modelcontextprotocol.io/specification/2025-11-25/basic/authorization#authorization-server-metadata-discovery'\n },\n MCP_DCR: {\n id: 'MCP-Dynamic-client-registration',\n url: 'https://modelcontextprotocol.io/specification/2025-11-25/basic/client#dynamic-client-registration'\n },\n OAUTH_2_1_AUTHORIZATION_ENDPOINT: {\n id: 'OAUTH-2.1-authorization-endpoint',\n url: 'https://www.ietf.org/archive/id/draft-ietf-oauth-v2-1-13.html#name-authorization-endpoint'\n },\n OAUTH_2_1_TOKEN: {\n id: 'OAUTH-2.1-token-request',\n url: 'https://www.ietf.org/archive/id/draft-ietf-oauth-v2-1-13.html#name-token-request'\n },\n MCP_ACCESS_TOKEN_USAGE: {\n id: 'MCP-Access-token-usage',\n url: 'https://modelcontextprotocol.io/specification/2025-11-25/basic/authorization#access-token-usage'\n },\n MCP_SCOPE_SELECTION_STRATEGY: {\n id: 'MCP-Scope-selection-strategy',\n url: 'https://modelcontextprotocol.io/specification/2025-11-25/basic/authorization#scope-selection-strategy'\n },\n MCP_SCOPE_CHALLENGE_HANDLING: {\n id: 'MCP-Scope-challenge-handling',\n url: 'https://modelcontextprotocol.io/specification/2025-11-25/basic/authorization#scope-challenge-handling'\n },\n MCP_AUTH_ERROR_HANDLING: {\n id: 'MCP-Auth-error-handling',\n url: 'https://modelcontextprotocol.io/specification/2025-11-25/basic/authorization#error-handling'\n },\n MCP_CLIENT_ID_METADATA_DOCUMENTS: {\n id: 'MCP-Client-ID-Metadata-Documents',\n url: 'https://modelcontextprotocol.io/specification/2025-11-25/basic/authorization#client-id-metadata-documents'\n },\n IETF_CIMD: {\n id: 'IETF-OAuth-Client-ID-Metadata-Document',\n url: 'https://datatracker.ietf.org/doc/html/draft-ietf-oauth-client-id-metadata-document-00'\n },\n RFC_JWT_CLIENT_AUTH: {\n id: 'RFC-7523-JWT-Client-Auth',\n url: 'https://datatracker.ietf.org/doc/html/rfc7523#section-2.2'\n },\n OAUTH_2_1_CLIENT_CREDENTIALS: {\n id: 'OAUTH-2.1-client-credentials-grant',\n url: 'https://www.ietf.org/archive/id/draft-ietf-oauth-v2-1-13.html#section-4.2'\n },\n SEP_1046_CLIENT_CREDENTIALS: {\n id: 'SEP-1046-Client-Credentials',\n url: 'https://github.com/modelcontextprotocol/ext-auth/blob/main/specification/draft/oauth-client-credentials.mdx'\n },\n RFC_8707_RESOURCE_INDICATORS: {\n id: 'RFC-8707-Resource-Indicators',\n url: 'https://www.rfc-editor.org/rfc/rfc8707.html'\n },\n MCP_RESOURCE_PARAMETER: {\n id: 'MCP-Resource-Parameter-Implementation',\n url: 'https://modelcontextprotocol.io/specification/draft/basic/authorization#resource-parameter-implementation'\n },\n MCP_PREREGISTRATION: {\n id: 'MCP-Preregistration',\n url: 'https://modelcontextprotocol.io/specification/2025-11-25/basic/authorization#preregistration'\n },\n MCP_PKCE: {\n id: 'MCP-PKCE-requirement',\n url: 'https://modelcontextprotocol.io/specification/2025-11-25/basic/authorization#authorization-code-protection'\n },\n // TODO: Update to MCP spec URL once SEP-2468 (modelcontextprotocol/modelcontextprotocol#2468) is merged\n RFC_9207_ISS_PARAMETER: {\n id: 'RFC-9207-iss-parameter',\n url: 'https://www.rfc-editor.org/rfc/rfc9207.html#section-2'\n },\n RFC_8693_TOKEN_EXCHANGE: {\n id: 'RFC-8693-Token-Exchange',\n url: 'https://datatracker.ietf.org/doc/html/rfc8693'\n },\n RFC_7523_JWT_BEARER: {\n id: 'RFC-7523-JWT-Bearer-Grant',\n url: 'https://datatracker.ietf.org/doc/html/rfc7523'\n },\n SEP_990_ENTERPRISE_OAUTH: {\n id: 'SEP-990-Enterprise-Managed-OAuth',\n url: 'https://github.com/modelcontextprotocol/ext-auth/blob/main/specification/draft/enterprise-managed-authorization.mdx'\n },\n SEP_2207_REFRESH_TOKEN_GUIDANCE: {\n id: 'SEP-2207-Refresh-Token-Guidance',\n url: 'https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207'\n }\n};\n",[],[135,262,429,525,527],"9304b03b-5ac1-4da0-a649-0ed596c91bfd","scope-handling.ts","e359bcf2-ad13-11f1-986c-1607ee4eb77e",52,["D",1789043635528],"import type { Scenario, ConformanceCheck } from '../../../types.ts';\nimport { ScenarioUrls } from '../../../types.ts';\nimport { createAuthServer } from './helpers/createAuthServer.ts';\nimport { createServer } from './helpers/createServer.ts';\nimport { ServerLifecycle } from './helpers/serverLifecycle.ts';\nimport { SpecReferences } from './spec-references.ts';\nimport { MockTokenVerifier } from './helpers/mockTokenVerifier.ts';\nimport type { Request, Response, NextFunction } from 'npm:express@^5.1.0';\n\n/**\n * Scenario 1: Client uses scope from WWW-Authenticate header\n *\n * Tests that clients SHOULD follow the scope parameter from the initial\n * WWW-Authenticate header in the 401 response, per the scope selection strategy.\n */\nexport class ScopeFromWwwAuthenticateScenario implements Scenario {\n name = 'auth/scope-from-www-authenticate';\n readonly source = { introducedIn: '2025-11-25' } as const;\n description =\n 'Tests that client uses scope parameter from WWW-Authenticate header when provided';\n private authServer = new ServerLifecycle();\n private server = new ServerLifecycle();\n private checks: ConformanceCheck[] = [];\n\n async start(): Promise {\n this.checks = [];\n\n const expectedScope = 'mcp:basic';\n const tokenVerifier = new MockTokenVerifier(this.checks, [expectedScope]);\n\n const authApp = createAuthServer(this.checks, this.authServer.getUrl, {\n tokenVerifier,\n onAuthorizationRequest: (data) => {\n // Check if client used the scope from WWW-Authenticate header\n const requestedScopes = data.scope ? data.scope.split(' ') : [];\n const usedCorrectScope = requestedScopes.includes(expectedScope);\n this.checks.push({\n id: 'scope-from-www-authenticate',\n name: 'Client scope selection from WWW-Authenticate header',\n description: usedCorrectScope\n ? 'Client correctly used the scope parameter from the WWW-Authenticate header'\n : 'Client SHOULD use the scope parameter from the WWW-Authenticate header when provided',\n status: usedCorrectScope ? 'SUCCESS' : 'WARNING',\n timestamp: data.timestamp,\n specReferences: [SpecReferences.MCP_SCOPE_SELECTION_STRATEGY],\n details: {\n expectedScope,\n requestedScope: data.scope || 'none'\n }\n });\n }\n });\n await this.authServer.start(authApp);\n\n const app = createServer(\n this.checks,\n this.server.getUrl,\n this.authServer.getUrl,\n {\n prmPath: '/.well-known/oauth-protected-resource/mcp',\n requiredScopes: [expectedScope],\n includeScopeInWwwAuth: true,\n tokenVerifier\n }\n );\n await this.server.start(app);\n\n return { serverUrl: `${this.server.getUrl()}/mcp` };\n }\n\n async stop() {\n await this.authServer.stop();\n await this.server.stop();\n }\n\n getChecks(): ConformanceCheck[] {\n // Emit failure check if expected scope check didn't run\n const hasScopeCheck = this.checks.some(\n (c) => c.id === 'scope-from-www-authenticate'\n );\n if (!hasScopeCheck) {\n this.checks.push({\n id: 'scope-from-www-authenticate',\n name: 'Client scope selection from WWW-Authenticate header',\n description:\n 'Client did not complete authorization flow - scope check could not be performed',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n specReferences: [SpecReferences.MCP_SCOPE_SELECTION_STRATEGY]\n });\n }\n return this.checks;\n }\n}\n\n/**\n * Scenario 2: Client falls back to scopes_supported when scope not in WWW-Authenticate\n *\n * Tests that clients SHOULD use all scopes from scopes_supported in the PRM\n * when the scope parameter is not available in the WWW-Authenticate header.\n */\nexport class ScopeFromScopesSupportedScenario implements Scenario {\n name = 'auth/scope-from-scopes-supported';\n readonly source = { introducedIn: '2025-11-25' } as const;\n description =\n 'Tests that client uses all scopes from scopes_supported when scope not in WWW-Authenticate header';\n private authServer = new ServerLifecycle();\n private server = new ServerLifecycle();\n private checks: ConformanceCheck[] = [];\n\n async start(): Promise {\n this.checks = [];\n\n const scopesSupported = ['mcp:basic', 'mcp:read', 'mcp:write'];\n const tokenVerifier = new MockTokenVerifier(this.checks, scopesSupported);\n\n const authApp = createAuthServer(this.checks, this.authServer.getUrl, {\n tokenVerifier,\n onAuthorizationRequest: (data) => {\n // Check if client requested all scopes from scopes_supported\n const requestedScopes = data.scope ? data.scope.split(' ') : [];\n const hasAllScopes = scopesSupported.every((scope) =>\n requestedScopes.includes(scope)\n );\n this.checks.push({\n id: 'scope-from-scopes-supported',\n name: 'Client scope selection from scopes_supported',\n description: hasAllScopes\n ? 'Client correctly used all scopes from scopes_supported in PRM when scope not in WWW-Authenticate'\n : 'Client SHOULD use all scopes from scopes_supported when scope not available in WWW-Authenticate header',\n status: hasAllScopes ? 'SUCCESS' : 'WARNING',\n timestamp: data.timestamp,\n specReferences: [SpecReferences.MCP_SCOPE_SELECTION_STRATEGY],\n details: {\n scopesSupported: scopesSupported.join(' '),\n requestedScope: data.scope || 'none',\n ...(hasAllScopes\n ? {}\n : {\n missingScopes: scopesSupported\n .filter((s) => !requestedScopes.includes(s))\n .join(' ')\n })\n }\n });\n }\n });\n await this.authServer.start(authApp);\n\n const app = createServer(\n this.checks,\n this.server.getUrl,\n this.authServer.getUrl,\n {\n prmPath: '/.well-known/oauth-protected-resource/mcp',\n requiredScopes: scopesSupported,\n scopesSupported: scopesSupported,\n includeScopeInWwwAuth: false,\n tokenVerifier\n }\n );\n await this.server.start(app);\n\n return { serverUrl: `${this.server.getUrl()}/mcp` };\n }\n\n async stop() {\n await this.authServer.stop();\n await this.server.stop();\n }\n\n getChecks(): ConformanceCheck[] {\n // Emit failure check if expected scope check didn't run\n const hasScopeCheck = this.checks.some(\n (c) => c.id === 'scope-from-scopes-supported'\n );\n if (!hasScopeCheck) {\n this.checks.push({\n id: 'scope-from-scopes-supported',\n name: 'Client scope selection from scopes_supported',\n description:\n 'Client did not complete authorization flow - scope check could not be performed',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n specReferences: [SpecReferences.MCP_SCOPE_SELECTION_STRATEGY]\n });\n }\n return this.checks;\n }\n}\n\n/**\n * Scenario 3: Client omits scope when scopes_supported is undefined\n *\n * Tests that clients SHOULD omit the scope parameter when scopes_supported\n * is not available in the PRM and scope is not in WWW-Authenticate header.\n */\nexport class ScopeOmittedWhenUndefinedScenario implements Scenario {\n name = 'auth/scope-omitted-when-undefined';\n readonly source = { introducedIn: '2025-11-25' } as const;\n description =\n 'Tests that client omits scope parameter when scopes_supported is undefined';\n private authServer = new ServerLifecycle();\n private server = new ServerLifecycle();\n private checks: ConformanceCheck[] = [];\n\n async start(): Promise {\n this.checks = [];\n\n const tokenVerifier = new MockTokenVerifier(this.checks, []);\n\n const authApp = createAuthServer(this.checks, this.authServer.getUrl, {\n tokenVerifier,\n onAuthorizationRequest: (data) => {\n // Check if client omitted scope parameter\n const scopeOmitted = !data.scope || data.scope.trim() === '';\n this.checks.push({\n id: 'scope-omitted-when-undefined',\n name: 'Client scope omission when scopes_supported undefined',\n description: scopeOmitted\n ? 'Client correctly omitted scope parameter when scopes_supported is undefined'\n : 'Client SHOULD omit scope parameter when scopes_supported is undefined and scope not in WWW-Authenticate',\n status: scopeOmitted ? 'SUCCESS' : 'WARNING',\n timestamp: data.timestamp,\n specReferences: [SpecReferences.MCP_SCOPE_SELECTION_STRATEGY],\n details: {\n scopeParameter: scopeOmitted ? 'omitted' : data.scope\n }\n });\n }\n });\n await this.authServer.start(authApp);\n\n const app = createServer(\n this.checks,\n this.server.getUrl,\n this.authServer.getUrl,\n {\n prmPath: '/.well-known/oauth-protected-resource/mcp',\n requiredScopes: [],\n scopesSupported: undefined,\n includeScopeInWwwAuth: false,\n tokenVerifier\n }\n );\n await this.server.start(app);\n\n return { serverUrl: `${this.server.getUrl()}/mcp` };\n }\n\n async stop() {\n await this.authServer.stop();\n await this.server.stop();\n }\n\n getChecks(): ConformanceCheck[] {\n // Emit failure check if expected scope check didn't run\n const hasScopeCheck = this.checks.some(\n (c) => c.id === 'scope-omitted-when-undefined'\n );\n if (!hasScopeCheck) {\n this.checks.push({\n id: 'scope-omitted-when-undefined',\n name: 'Client scope omission when scopes_supported undefined',\n description:\n 'Client did not complete authorization flow - scope check could not be performed',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n specReferences: [SpecReferences.MCP_SCOPE_SELECTION_STRATEGY]\n });\n }\n return this.checks;\n }\n}\n\n/**\n * Scenario 4: Client performs step-up authentication\n *\n * Tests that clients handle step-up authentication where:\n * - initialize/notifications do not require auth\n * - listTools requires mcp:basic scope (401 if missing)\n * - tools/call requires mcp:basic + mcp:write scopes (403 if insufficient)\n * Client must handle both 401 and 403 responses with different scope requirements\n */\nexport class ScopeStepUpAuthScenario implements Scenario {\n name = 'auth/scope-step-up';\n readonly source = { introducedIn: '2025-11-25' } as const;\n description =\n 'Tests that client handles step-up authentication with different scope requirements per operation';\n private authServer = new ServerLifecycle();\n private server = new ServerLifecycle();\n private checks: ConformanceCheck[] = [];\n\n async start(): Promise {\n this.checks = [];\n\n const initialScope = 'mcp:basic';\n // tools/call gates on mcp:write only (not the union) so the scenario can\n // complete even for clients that don't accumulate; the SEP-2350 check then\n // observes whether the previously-granted mcp:basic was retained.\n const stepUpScope = 'mcp:write';\n const escalatedScopes = [initialScope, stepUpScope];\n const tokenVerifier = new MockTokenVerifier(this.checks, escalatedScopes);\n let authRequestCount = 0;\n\n const authApp = createAuthServer(this.checks, this.authServer.getUrl, {\n tokenVerifier,\n onAuthorizationRequest: (data) => {\n authRequestCount++;\n const requestedScopes = data.scope ? data.scope.split(' ') : [];\n\n if (authRequestCount === 1) {\n // First auth request - should request mcp:basic from WWW-Authenticate\n const usedCorrectScope = requestedScopes.includes(initialScope);\n this.checks.push({\n id: 'scope-step-up-initial',\n name: 'Client initial scope selection for step-up auth',\n description: usedCorrectScope\n ? 'Client correctly used scope from WWW-Authenticate header for initial auth'\n : 'Client SHOULD use the scope parameter from the WWW-Authenticate header',\n status: usedCorrectScope ? 'SUCCESS' : 'WARNING',\n timestamp: data.timestamp,\n specReferences: [SpecReferences.MCP_SCOPE_SELECTION_STRATEGY],\n details: {\n expectedScope: initialScope,\n requestedScope: data.scope || 'none'\n }\n });\n } else if (authRequestCount === 2) {\n // Second auth request after a 403 challenge that listed only the\n // *missing* scope (mcp:write). Two distinct assertions:\n // - escalation: client included the challenged scope at all\n // - SEP-2350 union: client *also* kept the previously-granted scope\n // that was NOT in the challenge (i.e., computed prior ∪ challenge)\n const includesChallenged = requestedScopes.includes(stepUpScope);\n this.checks.push({\n id: 'scope-step-up-escalation',\n name: 'Client scope escalation for step-up auth',\n description: includesChallenged\n ? 'Client correctly requested the challenged scope for step-up authentication'\n : 'Client SHOULD request additional scopes when receiving 403 with new scope requirements',\n status: includesChallenged ? 'SUCCESS' : 'WARNING',\n timestamp: data.timestamp,\n specReferences: [SpecReferences.MCP_SCOPE_SELECTION_STRATEGY],\n details: {\n challengedScope: stepUpScope,\n requestedScope: data.scope || 'none'\n }\n });\n\n const retainedPrior = requestedScopes.includes(initialScope);\n this.checks.push({\n id: 'sep-2350-scope-union-on-reauth',\n name: 'Client accumulates previously-granted scopes on re-authorization',\n description: retainedPrior\n ? 'Client included previously-granted scopes alongside the newly challenged scope when re-authorizing'\n : 'Client SHOULD compute the union of previously requested scopes and newly challenged scopes when initiating re-authorization (SEP-2350); previously-granted scope was dropped',\n status: retainedPrior ? 'SUCCESS' : 'WARNING',\n timestamp: data.timestamp,\n specReferences: [SpecReferences.MCP_SCOPE_CHALLENGE_HANDLING],\n details: {\n previouslyGranted: initialScope,\n challengedScope: stepUpScope,\n requestedScope: data.scope || 'none'\n }\n });\n }\n }\n });\n await this.authServer.start(authApp);\n\n // Inline step-up auth middleware\n const resourceMetadataUrl = () =>\n `${this.server.getUrl()}/.well-known/oauth-protected-resource/mcp`;\n\n const stepUpMiddleware = async (\n req: Request,\n res: Response,\n next: NextFunction\n ) => {\n // Parse body to check method\n let body = req.body;\n if (typeof body === 'string') {\n body = JSON.parse(body);\n }\n const method = body?.method;\n\n // Allow initialize and notifications without auth\n if (method === 'initialize' || method?.startsWith('notifications/')) {\n return next();\n }\n\n const authHeader = req.headers.authorization;\n if (!authHeader || !authHeader.startsWith('Bearer ')) {\n // No auth - return 401 with initial scope\n return res\n .status(401)\n .set(\n 'WWW-Authenticate',\n `Bearer scope=\"${initialScope}\", resource_metadata=\"${resourceMetadataUrl()}\"`\n )\n .json({\n error: 'invalid_token',\n error_description: 'Missing Authorization header'\n });\n }\n\n const token = authHeader.substring('Bearer '.length);\n const authInfo = await tokenVerifier.verifyAccessToken(token);\n const tokenScopes = authInfo.scopes || [];\n\n // Determine required scopes based on method\n const isToolCall = method === 'tools/call';\n const requiredScopes = isToolCall ? [stepUpScope] : [initialScope];\n\n const hasRequiredScopes = requiredScopes.every((s) =>\n tokenScopes.includes(s)\n );\n\n if (!hasRequiredScopes) {\n // Has token but insufficient scopes - return 403. Challenge with only\n // the step-up scope so SEP-2350 union accumulation is observable: a\n // client that just echoes the challenge would drop mcp:basic.\n return res\n .status(403)\n .set(\n 'WWW-Authenticate',\n `Bearer scope=\"${stepUpScope}\", resource_metadata=\"${resourceMetadataUrl()}\", error=\"insufficient_scope\"`\n )\n .json({\n error: 'insufficient_scope',\n error_description: 'Token has insufficient scope'\n });\n }\n\n next();\n };\n\n const baseApp = createServer(\n this.checks,\n this.server.getUrl,\n this.authServer.getUrl,\n {\n prmPath: '/.well-known/oauth-protected-resource/mcp',\n requiredScopes: escalatedScopes,\n // Deliberately disjoint from initialScope/stepUpScope so the SEP-2350\n // union check can't be satisfied by a client that unions\n // scopes_supported ∪ challenge instead of prior-grant ∪ challenge.\n // The spec allows this: clients MUST NOT assume any set relationship\n // between challenged scopes and scopes_supported.\n scopesSupported: ['mcp:profile'],\n includeScopeInWwwAuth: true,\n authMiddleware: stepUpMiddleware,\n tokenVerifier\n }\n );\n\n await this.server.start(baseApp);\n\n return { serverUrl: `${this.server.getUrl()}/mcp` };\n }\n\n async stop() {\n await this.authServer.stop();\n await this.server.stop();\n }\n\n getChecks(): ConformanceCheck[] {\n // Emit failure checks if expected auth requests didn't happen\n const hasInitialCheck = this.checks.some(\n (c) => c.id === 'scope-step-up-initial'\n );\n const hasEscalationCheck = this.checks.some(\n (c) => c.id === 'scope-step-up-escalation'\n );\n\n if (!hasInitialCheck) {\n this.checks.push({\n id: 'scope-step-up-initial',\n name: 'Client initial scope selection for step-up auth',\n description: 'Client did not make an initial authorization request',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n specReferences: [SpecReferences.MCP_SCOPE_SELECTION_STRATEGY]\n });\n }\n\n if (!hasEscalationCheck) {\n this.checks.push({\n id: 'scope-step-up-escalation',\n name: 'Client scope escalation for step-up auth',\n description:\n 'Client did not make a second authorization request for scope escalation',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n specReferences: [SpecReferences.MCP_SCOPE_SELECTION_STRATEGY]\n });\n this.checks.push({\n id: 'sep-2350-scope-union-on-reauth',\n name: 'Client accumulates previously-granted scopes on re-authorization',\n description:\n 'Client did not make a second authorization request - scope union check could not be performed',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n specReferences: [SpecReferences.MCP_SCOPE_CHALLENGE_HANDLING]\n });\n }\n\n return this.checks;\n }\n}\n\n/**\n * Scenario 5: Client implements retry limits for scope escalation\n *\n * Tests that clients SHOULD implement retry limits to avoid infinite\n * authorization loops when receiving repeated 403 insufficient_scope errors.\n * The server always returns 403 with the same scope requirement, and clients\n * should stop retrying after a reasonable number of attempts (3 or fewer).\n */\nexport class ScopeRetryLimitScenario implements Scenario {\n name = 'auth/scope-retry-limit';\n readonly source = { introducedIn: '2025-11-25' } as const;\n description =\n 'Tests that client implements retry limits to prevent infinite authorization loops on repeated 403 responses';\n allowClientError = true;\n private authServer = new ServerLifecycle();\n private server = new ServerLifecycle();\n private checks: ConformanceCheck[] = [];\n\n async start(): Promise {\n this.checks = [];\n\n const requiredScope = 'mcp:admin';\n const tokenVerifier = new MockTokenVerifier(this.checks, []);\n let authRequestCount = 0;\n\n const authApp = createAuthServer(this.checks, this.authServer.getUrl, {\n tokenVerifier,\n onAuthorizationRequest: (data) => {\n authRequestCount++;\n this.checks.push({\n id: 'scope-retry-auth-attempt',\n name: `Authorization attempt ${authRequestCount}`,\n description: `Client made authorization request attempt ${authRequestCount}`,\n status: 'INFO',\n timestamp: data.timestamp,\n specReferences: [SpecReferences.MCP_SCOPE_CHALLENGE_HANDLING],\n details: {\n attemptNumber: authRequestCount,\n requestedScope: data.scope || 'none'\n }\n });\n }\n });\n await this.authServer.start(authApp);\n\n const resourceMetadataUrl = () =>\n `${this.server.getUrl()}/.well-known/oauth-protected-resource/mcp`;\n\n const maxAttempts = 3;\n let mcpRequestWithTokenCount = 0;\n\n const alwaysDeny403Middleware = async (\n req: Request,\n res: Response,\n next: NextFunction\n ) => {\n let body = req.body;\n if (typeof body === 'string') {\n body = JSON.parse(body);\n }\n const method = body?.method;\n\n if (method === 'initialize' || method?.startsWith('notifications/')) {\n return next();\n }\n\n const authHeader = req.headers.authorization;\n if (!authHeader || !authHeader.startsWith('Bearer ')) {\n return res\n .status(401)\n .set(\n 'WWW-Authenticate',\n `Bearer scope=\"${requiredScope}\", resource_metadata=\"${resourceMetadataUrl()}\"`\n )\n .json({\n error: 'invalid_token',\n error_description: 'Missing Authorization header'\n });\n }\n\n mcpRequestWithTokenCount++;\n\n if (mcpRequestWithTokenCount > maxAttempts) {\n return res.status(410).json({\n error: 'test_complete',\n error_description:\n 'Test is over - client exceeded maximum retry attempts'\n });\n }\n\n return res\n .status(403)\n .set(\n 'WWW-Authenticate',\n `Bearer error=\"insufficient_scope\", scope=\"${requiredScope}\", resource_metadata=\"${resourceMetadataUrl()}\", error_description=\"Scope upgrade will never succeed\"`\n )\n .json({\n error: 'insufficient_scope',\n error_description: 'Scope upgrade will never succeed'\n });\n };\n\n const baseApp = createServer(\n this.checks,\n this.server.getUrl,\n this.authServer.getUrl,\n {\n prmPath: '/.well-known/oauth-protected-resource/mcp',\n requiredScopes: [requiredScope],\n scopesSupported: [requiredScope],\n includeScopeInWwwAuth: true,\n authMiddleware: alwaysDeny403Middleware,\n tokenVerifier\n }\n );\n\n await this.server.start(baseApp);\n\n return { serverUrl: `${this.server.getUrl()}/mcp` };\n }\n\n async stop() {\n await this.authServer.stop();\n await this.server.stop();\n }\n\n getChecks(): ConformanceCheck[] {\n const authAttempts = this.checks.filter(\n (c) => c.id === 'scope-retry-auth-attempt'\n ).length;\n\n if (authAttempts === 0) {\n this.checks.push({\n id: 'scope-retry-limit',\n name: 'Client retry limit for scope escalation',\n description: 'Client did not make any authorization requests',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n specReferences: [SpecReferences.MCP_SCOPE_CHALLENGE_HANDLING]\n });\n } else if (authAttempts <= 3) {\n this.checks.push({\n id: 'scope-retry-limit',\n name: 'Client retry limit for scope escalation',\n description: `Client correctly limited retry attempts to ${authAttempts} (3 or fewer)`,\n status: 'SUCCESS',\n timestamp: new Date().toISOString(),\n specReferences: [SpecReferences.MCP_SCOPE_CHALLENGE_HANDLING],\n details: {\n authorizationAttempts: authAttempts,\n maxAllowed: 3\n }\n });\n } else {\n this.checks.push({\n id: 'scope-retry-limit',\n name: 'Client retry limit for scope escalation',\n description: `Client made ${authAttempts} authorization attempts (more than 3). Clients SHOULD implement retry limits to avoid infinite loops.`,\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n specReferences: [SpecReferences.MCP_SCOPE_CHALLENGE_HANDLING],\n details: {\n authorizationAttempts: authAttempts,\n maxAllowed: 3\n }\n });\n }\n\n return this.checks;\n }\n}\n",[],[135,262,429,525,535],"675b1b59-6df9-466d-998c-b6f4d7a130e0","resource-mismatch.ts","e2557274-ad13-11f1-8f50-1607ee4eb77e",49,["D",1789043633825],"import type { Scenario, ConformanceCheck } from '../../../types.ts';\nimport { ScenarioUrls, DRAFT_PROTOCOL_VERSION } from '../../../types.ts';\nimport { createAuthServer } from './helpers/createAuthServer.ts';\nimport { createServer } from './helpers/createServer.ts';\nimport { ServerLifecycle } from './helpers/serverLifecycle.ts';\nimport { SpecReferences } from './spec-references.ts';\nimport { MockTokenVerifier } from './helpers/mockTokenVerifier.ts';\n\n/**\n * Scenario: Resource Mismatch Detection\n *\n * Tests that clients correctly detect and reject when the Protected Resource\n * Metadata returns a `resource` field that doesn't match the server URL\n * the client is trying to access.\n *\n * Per RFC 8707 and MCP spec, clients MUST validate that the resource from\n * PRM matches the expected server before proceeding with authorization.\n *\n * Setup:\n * - Server returns PRM with resource: \"https://evil.example.com/mcp\" (different origin)\n * - Client is trying to access the actual server at localhost:/mcp\n *\n * Expected behavior:\n * - Client should NOT proceed with authorization\n * - Client should abort due to resource mismatch\n * - Test passes if client does NOT complete the auth flow (no authorization request)\n */\nexport class ResourceMismatchScenario implements Scenario {\n name = 'auth/resource-mismatch';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n description =\n 'Tests that client rejects when PRM resource does not match server URL';\n allowClientError = true;\n\n private authServer = new ServerLifecycle();\n private server = new ServerLifecycle();\n private checks: ConformanceCheck[] = [];\n private authorizationRequestMade = false;\n\n async start(): Promise {\n this.checks = [];\n this.authorizationRequestMade = false;\n\n const tokenVerifier = new MockTokenVerifier(this.checks, []);\n\n const authApp = createAuthServer(this.checks, this.authServer.getUrl, {\n tokenVerifier,\n tokenEndpointAuthMethodsSupported: ['none'],\n onAuthorizationRequest: () => {\n // If we get here, the client incorrectly proceeded with auth\n this.authorizationRequestMade = true;\n },\n onRegistrationRequest: () => ({\n clientId: `test-client-${Date.now()}`,\n clientSecret: undefined,\n tokenEndpointAuthMethod: 'none'\n })\n });\n await this.authServer.start(authApp);\n\n // Create server that returns a mismatched resource in PRM\n const app = createServer(\n this.checks,\n this.server.getUrl,\n this.authServer.getUrl,\n {\n prmPath: '/.well-known/oauth-protected-resource/mcp',\n requiredScopes: [],\n tokenVerifier,\n // Return a different origin in PRM - this should be rejected by the client\n prmResourceOverride: 'https://evil.example.com/mcp'\n }\n );\n await this.server.start(app);\n\n return { serverUrl: `${this.server.getUrl()}/mcp` };\n }\n\n async stop() {\n await this.authServer.stop();\n await this.server.stop();\n }\n\n getChecks(): ConformanceCheck[] {\n const timestamp = new Date().toISOString();\n const specRefs = [\n SpecReferences.RFC_8707_RESOURCE_INDICATORS,\n SpecReferences.MCP_RESOURCE_PARAMETER\n ];\n\n // The test passes if the client did NOT make an authorization request\n // (meaning it correctly rejected the mismatched resource)\n if (!this.checks.some((c) => c.id === 'resource-mismatch-rejected')) {\n const correctlyRejected = !this.authorizationRequestMade;\n this.checks.push({\n id: 'resource-mismatch-rejected',\n name: 'Client rejects mismatched resource',\n description: correctlyRejected\n ? 'Client correctly rejected authorization when PRM resource does not match server URL'\n : 'Client MUST validate that PRM resource matches the server URL before proceeding with authorization',\n status: correctlyRejected ? 'SUCCESS' : 'FAILURE',\n timestamp,\n specReferences: specRefs,\n details: {\n prmResource: 'https://evil.example.com/mcp',\n expectedBehavior: 'Client should NOT proceed with authorization',\n authorizationRequestMade: this.authorizationRequestMade\n }\n });\n }\n\n return this.checks;\n }\n}\n",[],[135,262,429,525,543],"5cd7a30d-b6ee-4cd7-a203-7bc6d8d41d90","pre-registration.ts","e2148534-ad13-11f1-b438-1607ee4eb77e",48,["D",1789043633402],"import {\n AuthHandlerScenario,\n AuthHandlerContext,\n AuthHandlers,\n ConformanceCheck\n} from '../../../types.ts';\nimport { createAuthServer } from './helpers/createAuthServer.ts';\nimport { createServer } from './helpers/createServer.ts';\nimport { SpecReferences } from './spec-references.ts';\nimport { MockTokenVerifier } from './helpers/mockTokenVerifier.ts';\n\nconst PRE_REGISTERED_CLIENT_ID = 'pre-registered-client';\nconst PRE_REGISTERED_CLIENT_SECRET = 'pre-registered-secret';\n\n/**\n * Scenario: Pre-registration (static client credentials)\n *\n * Tests OAuth flow where the server does NOT support Dynamic Client Registration.\n * Clients must use pre-registered credentials passed via context.\n *\n * This tests the pre-registration approach described in the MCP spec:\n * https://modelcontextprotocol.io/specification/draft/basic/authorization#preregistration\n */\nexport class PreRegistrationScenario extends AuthHandlerScenario {\n name = 'auth/pre-registration';\n readonly source = { introducedIn: '2025-11-25' } as const;\n description =\n 'Tests OAuth flow with pre-registered client credentials. Server does not support DCR.';\n\n private checks: ConformanceCheck[] = [];\n\n authHandlers(ctx: AuthHandlerContext): AuthHandlers {\n this.checks = [];\n const getAsUrl = () => ctx.getAuxBaseUrl('as');\n const tokenVerifier = new MockTokenVerifier(this.checks, []);\n\n const authApp = createAuthServer(this.checks, getAsUrl, {\n tokenVerifier,\n disableDynamicRegistration: true,\n tokenEndpointAuthMethodsSupported: ['client_secret_basic'],\n onTokenRequest: ({ authorizationHeader, timestamp }) => {\n // Verify client used pre-registered credentials via Basic auth\n if (!authorizationHeader?.startsWith('Basic ')) {\n this.checks.push({\n id: 'pre-registration-auth',\n name: 'Pre-registration authentication',\n description:\n 'Client did not use Basic authentication with pre-registered credentials',\n status: 'FAILURE',\n timestamp,\n specReferences: [SpecReferences.MCP_PREREGISTRATION]\n });\n return {\n error: 'invalid_client',\n errorDescription: 'Missing or invalid Authorization header',\n statusCode: 401\n };\n }\n\n const base64Credentials = authorizationHeader.slice(6);\n const credentials = Buffer.from(base64Credentials, 'base64').toString(\n 'utf-8'\n );\n const [clientId, clientSecret] = credentials.split(':');\n\n if (\n clientId !== PRE_REGISTERED_CLIENT_ID ||\n clientSecret !== PRE_REGISTERED_CLIENT_SECRET\n ) {\n this.checks.push({\n id: 'pre-registration-auth',\n name: 'Pre-registration authentication',\n description: `Client used incorrect pre-registered credentials. Expected client_id '${PRE_REGISTERED_CLIENT_ID}', got '${clientId}'`,\n status: 'FAILURE',\n timestamp,\n specReferences: [SpecReferences.MCP_PREREGISTRATION],\n details: {\n expectedClientId: PRE_REGISTERED_CLIENT_ID,\n actualClientId: clientId\n }\n });\n return {\n error: 'invalid_client',\n errorDescription: 'Invalid pre-registered credentials',\n statusCode: 401\n };\n }\n\n // Success - client used correct pre-registered credentials\n this.checks.push({\n id: 'pre-registration-auth',\n name: 'Pre-registration authentication',\n description:\n 'Client correctly used pre-registered credentials when server does not support DCR',\n status: 'SUCCESS',\n timestamp,\n specReferences: [SpecReferences.MCP_PREREGISTRATION],\n details: { clientId }\n });\n\n return {\n token: `test-token-prereg-${Date.now()}`,\n scopes: []\n };\n }\n });\n\n const rsApp = createServer(this.checks, ctx.getRsBaseUrl, getAsUrl, {\n prmPath: '/.well-known/oauth-protected-resource/mcp',\n requiredScopes: [],\n tokenVerifier\n });\n\n return { rs: rsApp, aux: { as: authApp } };\n }\n\n protected scenarioContext() {\n return {\n client_id: PRE_REGISTERED_CLIENT_ID,\n client_secret: PRE_REGISTERED_CLIENT_SECRET\n };\n }\n\n getChecks(): ConformanceCheck[] {\n // Ensure we have the pre-registration check\n const hasPreRegCheck = this.checks.some(\n (c) => c.id === 'pre-registration-auth'\n );\n if (!hasPreRegCheck) {\n this.checks.push({\n id: 'pre-registration-auth',\n name: 'Pre-registration authentication',\n description: 'Client did not make a token request',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n specReferences: [SpecReferences.MCP_PREREGISTRATION]\n });\n }\n\n return this.checks;\n }\n}\n",[],[135,262,429,525,551],"023ec0d9-27df-42e5-9e01-173288c49c7f","offline-access.ts","e174e3e4-ad13-11f1-ad25-1607ee4eb77e",46,["D",1789043632314],"import type { Scenario, ConformanceCheck } from '../../../types.ts';\nimport { ScenarioUrls, DRAFT_PROTOCOL_VERSION } from '../../../types.ts';\nimport { createAuthServer } from './helpers/createAuthServer.ts';\nimport { createServer } from './helpers/createServer.ts';\nimport { ServerLifecycle } from './helpers/serverLifecycle.ts';\nimport { SpecReferences } from './spec-references.ts';\nimport { MockTokenVerifier } from './helpers/mockTokenVerifier.ts';\n\n/**\n * Scenario: Offline Access Scope (SEP-2207)\n *\n * Tests client behavior when the Authorization Server metadata lists\n * `offline_access` in `scopes_supported`:\n *\n * 1. Client SHOULD include `refresh_token` in `grant_types` client metadata\n * (checked via DCR body or CIMD document, whichever the client uses)\n * 2. Client MAY include `offline_access` in authorization request scope\n *\n * Setup:\n * - AS metadata: scopes_supported includes 'offline_access'\n * - PRM: scopes_supported does NOT include 'offline_access' (per SEP-2207 server guidance)\n * - Both CIMD and DCR paths available\n */\nexport class OfflineAccessScopeScenario implements Scenario {\n name = 'auth/offline-access-scope';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n description =\n 'Tests that a client that wants a refresh token handles offline_access scope and refresh_token grant type when AS supports them (SEP-2207)';\n\n private authServer = new ServerLifecycle();\n private server = new ServerLifecycle();\n private checks: ConformanceCheck[] = [];\n private grantTypesChecked = false;\n private capturedCimdUrl: string | undefined;\n\n async start(): Promise {\n this.checks = [];\n this.grantTypesChecked = false;\n this.capturedCimdUrl = undefined;\n\n const tokenVerifier = new MockTokenVerifier(this.checks, ['mcp:basic']);\n\n const authApp = createAuthServer(this.checks, this.authServer.getUrl, {\n tokenVerifier,\n scopesSupported: ['mcp:basic', 'offline_access'],\n clientIdMetadataDocumentSupported: true,\n onRegistrationRequest: (req) => {\n // DCR path: inspect grant_types in registration body\n const grantTypes: string[] = req.body.grant_types || [];\n const hasRefreshToken = grantTypes.includes('refresh_token');\n this.grantTypesChecked = true;\n this.checks.push({\n id: 'sep-2207-client-metadata-grant-types',\n name: 'Client metadata includes refresh_token grant type (DCR)',\n description: hasRefreshToken\n ? 'Client correctly included refresh_token in grant_types during dynamic client registration'\n : 'Client SHOULD include refresh_token in grant_types client metadata (SEP-2207)',\n status: hasRefreshToken ? 'SUCCESS' : 'WARNING',\n timestamp: new Date().toISOString(),\n specReferences: [SpecReferences.SEP_2207_REFRESH_TOKEN_GUIDANCE],\n details: {\n registrationMethod: 'DCR',\n grantTypes: grantTypes.length > 0 ? grantTypes.join(' ') : 'none'\n }\n });\n\n const clientId = `test-client-${Date.now()}`;\n return {\n clientId,\n clientSecret: undefined,\n tokenEndpointAuthMethod: 'none'\n };\n },\n onAuthorizationRequest: (data) => {\n // Capture CIMD URL if client used URL-based client_id\n if (data.clientId && data.clientId.startsWith('http')) {\n this.capturedCimdUrl = data.clientId;\n }\n\n // Check if client included offline_access in scope\n const requestedScopes = data.scope ? data.scope.split(' ') : [];\n const hasOfflineAccess = requestedScopes.includes('offline_access');\n this.checks.push({\n id: 'sep-2207-offline-access-requested',\n name: 'Client requests offline_access scope',\n description: hasOfflineAccess\n ? 'Client included offline_access in authorization request scope when AS lists it in scopes_supported'\n : 'Client MAY include offline_access in scope when AS metadata lists it in scopes_supported (SEP-2207). Client chose not to request it.',\n status: hasOfflineAccess ? 'SUCCESS' : 'INFO',\n timestamp: data.timestamp,\n specReferences: [SpecReferences.SEP_2207_REFRESH_TOKEN_GUIDANCE],\n details: {\n asScopesSupported: 'mcp:basic offline_access',\n requestedScope: data.scope || 'none'\n }\n });\n }\n });\n await this.authServer.start(authApp);\n\n // PRM does NOT include offline_access (per SEP-2207 server guidance:\n // servers SHOULD NOT include offline_access in PRM scopes_supported)\n const app = createServer(\n this.checks,\n this.server.getUrl,\n this.authServer.getUrl,\n {\n prmPath: '/.well-known/oauth-protected-resource/mcp',\n requiredScopes: ['mcp:basic'],\n scopesSupported: ['mcp:basic'],\n tokenVerifier\n }\n );\n await this.server.start(app);\n\n return { serverUrl: `${this.server.getUrl()}/mcp` };\n }\n\n async stop() {\n // If client used CIMD and we haven't checked grant_types yet,\n // attempt to fetch the CIMD URL to inspect the metadata document\n if (this.capturedCimdUrl && !this.grantTypesChecked) {\n try {\n const controller = new AbortController();\n const timeout = setTimeout(() => controller.abort(), 3000);\n const response = await fetch(this.capturedCimdUrl, {\n signal: controller.signal\n });\n clearTimeout(timeout);\n\n if (response.ok) {\n const metadata = await response.json();\n const grantTypes: string[] = metadata.grant_types || [];\n const hasRefreshToken = grantTypes.includes('refresh_token');\n this.grantTypesChecked = true;\n this.checks.push({\n id: 'sep-2207-client-metadata-grant-types',\n name: 'Client metadata includes refresh_token grant type (CIMD)',\n description: hasRefreshToken\n ? 'Client metadata document includes refresh_token in grant_types'\n : 'Client SHOULD include refresh_token in grant_types client metadata (SEP-2207)',\n status: hasRefreshToken ? 'SUCCESS' : 'WARNING',\n timestamp: new Date().toISOString(),\n specReferences: [SpecReferences.SEP_2207_REFRESH_TOKEN_GUIDANCE],\n details: {\n registrationMethod: 'CIMD',\n cimdUrl: this.capturedCimdUrl,\n grantTypes: grantTypes.length > 0 ? grantTypes.join(' ') : 'none'\n }\n });\n }\n } catch {\n // CIMD URL didn't resolve - emit info check\n this.grantTypesChecked = true;\n this.checks.push({\n id: 'sep-2207-client-metadata-grant-types',\n name: 'Client metadata includes refresh_token grant type (CIMD)',\n description:\n 'Client used CIMD but metadata URL could not be fetched to verify grant_types',\n status: 'INFO',\n timestamp: new Date().toISOString(),\n specReferences: [SpecReferences.SEP_2207_REFRESH_TOKEN_GUIDANCE],\n details: {\n registrationMethod: 'CIMD',\n cimdUrl: this.capturedCimdUrl,\n fetchFailed: true\n }\n });\n }\n }\n\n await this.authServer.stop();\n await this.server.stop();\n }\n\n getChecks(): ConformanceCheck[] {\n const timestamp = new Date().toISOString();\n\n // If grant_types was never checked (no DCR, no CIMD, possibly pre-registered)\n if (!this.grantTypesChecked) {\n this.checks.push({\n id: 'sep-2207-client-metadata-grant-types',\n name: 'Client metadata includes refresh_token grant type',\n description:\n 'Client did not use DCR or fetchable CIMD — grant_types could not be inspected',\n status: 'INFO',\n timestamp,\n specReferences: [SpecReferences.SEP_2207_REFRESH_TOKEN_GUIDANCE],\n details: {\n registrationMethod: 'unknown'\n }\n });\n }\n\n // If offline_access check never ran, the authorization flow didn't complete\n if (\n !this.checks.some((c) => c.id === 'sep-2207-offline-access-requested')\n ) {\n this.checks.push({\n id: 'sep-2207-offline-access-requested',\n name: 'Client requests offline_access scope',\n description:\n 'Client did not complete authorization flow — offline_access scope check could not be performed',\n status: 'FAILURE',\n timestamp,\n specReferences: [SpecReferences.SEP_2207_REFRESH_TOKEN_GUIDANCE]\n });\n }\n\n return this.checks;\n }\n}\n\n/**\n * Scenario: Offline Access Not Supported (SEP-2207)\n *\n * Tests that clients do NOT include `offline_access` in the authorization\n * request scope when the AS metadata does NOT list it in `scopes_supported`.\n *\n * Per SEP-2207, clients MAY add offline_access only \"when the Authorization\n * Server's metadata lists it in scopes_supported\". If the AS doesn't support\n * it, requesting it is an error (requesting an unsupported scope).\n *\n * Setup:\n * - AS metadata: scopes_supported does NOT include 'offline_access'\n * - PRM: standard scopes\n */\nexport class OfflineAccessNotSupportedScenario implements Scenario {\n name = 'auth/offline-access-not-supported';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n description =\n 'Tests that client does not request offline_access when AS does not list it in scopes_supported (SEP-2207)';\n\n private authServer = new ServerLifecycle();\n private server = new ServerLifecycle();\n private checks: ConformanceCheck[] = [];\n\n async start(): Promise {\n this.checks = [];\n\n const tokenVerifier = new MockTokenVerifier(this.checks, [\n 'mcp:basic',\n 'mcp:read'\n ]);\n\n const authApp = createAuthServer(this.checks, this.authServer.getUrl, {\n tokenVerifier,\n scopesSupported: ['mcp:basic', 'mcp:read'],\n onAuthorizationRequest: (data) => {\n const requestedScopes = data.scope ? data.scope.split(' ') : [];\n const hasOfflineAccess = requestedScopes.includes('offline_access');\n this.checks.push({\n id: 'sep-2207-offline-access-not-requested',\n name: 'Client does not request unsupported offline_access',\n description: hasOfflineAccess\n ? 'Client MUST NOT request offline_access when it is not listed in AS scopes_supported (SEP-2207)'\n : 'Client correctly did not request offline_access when AS does not list it in scopes_supported',\n status: hasOfflineAccess ? 'FAILURE' : 'SUCCESS',\n timestamp: data.timestamp,\n specReferences: [SpecReferences.SEP_2207_REFRESH_TOKEN_GUIDANCE],\n details: {\n asScopesSupported: 'mcp:basic mcp:read',\n requestedScope: data.scope || 'none'\n }\n });\n }\n });\n await this.authServer.start(authApp);\n\n const app = createServer(\n this.checks,\n this.server.getUrl,\n this.authServer.getUrl,\n {\n prmPath: '/.well-known/oauth-protected-resource/mcp',\n requiredScopes: ['mcp:basic', 'mcp:read'],\n scopesSupported: ['mcp:basic', 'mcp:read'],\n tokenVerifier\n }\n );\n await this.server.start(app);\n\n return { serverUrl: `${this.server.getUrl()}/mcp` };\n }\n\n async stop() {\n await this.authServer.stop();\n await this.server.stop();\n }\n\n getChecks(): ConformanceCheck[] {\n if (\n !this.checks.some((c) => c.id === 'sep-2207-offline-access-not-requested')\n ) {\n this.checks.push({\n id: 'sep-2207-offline-access-not-requested',\n name: 'Client does not request unsupported offline_access',\n description:\n 'Client did not complete authorization flow — offline_access scope check could not be performed',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n specReferences: [SpecReferences.SEP_2207_REFRESH_TOKEN_GUIDANCE]\n });\n }\n\n return this.checks;\n }\n}\n",[],[135,262,429,525,559],"95e7559c-ae6a-4884-bfeb-c7c97cf85430","march-spec-backcompat.ts","e3b162b8-ad13-11f1-87ac-1607ee4eb77e",53,["D",1789043636095],"import type { Scenario, ConformanceCheck } from '../../../types.ts';\nimport { ScenarioUrls } from '../../../types.ts';\nimport { createAuthServer } from './helpers/createAuthServer.ts';\nimport { createServer } from './helpers/createServer.ts';\nimport { ServerLifecycle } from './helpers/serverLifecycle.ts';\nimport express, { Request, Response } from 'npm:express@^5.1.0';\nimport { SpecReferences } from './spec-references.ts';\n\nexport class Auth20250326OAuthMetadataBackcompatScenario implements Scenario {\n name = 'auth/2025-03-26-oauth-metadata-backcompat';\n readonly source = {\n introducedIn: '2025-03-26',\n removedIn: '2025-06-18'\n } as const;\n description =\n 'Tests 2025-03-26 spec OAuth flow: no PRM (Protected Resource Metadata), OAuth metadata at root location';\n private server = new ServerLifecycle();\n private checks: ConformanceCheck[] = [];\n\n async start(): Promise {\n this.checks = [];\n // Legacy server, so we create the auth server endpoints on the\n // same URL as the main server (rather than separating AS / RS).\n const authApp = createAuthServer(this.checks, this.server.getUrl, {\n // Disable logging since the main server will already have logging enabled\n loggingEnabled: false,\n // Add a prefix to auth endpoints to avoid being caught by auth fallbacks\n routePrefix: '/oauth'\n });\n const app = createServer(\n this.checks,\n this.server.getUrl,\n this.server.getUrl,\n // Explicitly set to null to indicate no PRM available\n { prmPath: null }\n );\n app.use(authApp);\n\n await this.server.start(app);\n\n return { serverUrl: `${this.server.getUrl()}/mcp` };\n }\n\n async stop() {\n await this.server.stop();\n }\n\n getChecks(): ConformanceCheck[] {\n const expectedSlugs = [\n 'authorization-server-metadata',\n 'client-registration',\n 'authorization-request',\n 'token-request'\n ];\n\n for (const slug of expectedSlugs) {\n if (!this.checks.find((c) => c.id === slug)) {\n this.checks.push({\n id: slug,\n name: `Expected Check Missing: ${slug}`,\n description: `Expected Check Missing: ${slug}`,\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n specReferences: [SpecReferences.LEGACY_2025_03_26_AUTH_DISCOVERY]\n });\n }\n }\n\n return this.checks;\n }\n}\n\nexport class Auth20250326OEndpointFallbackScenario implements Scenario {\n name = 'auth/2025-03-26-oauth-endpoint-fallback';\n readonly source = {\n introducedIn: '2025-03-26',\n removedIn: '2025-06-18'\n } as const;\n description =\n 'Tests OAuth flow with no metadata endpoints, relying on fallback to standard OAuth endpoints at server root (2025-03-26 spec behavior)';\n private server = new ServerLifecycle();\n private checks: ConformanceCheck[] = [];\n\n async start(): Promise {\n this.checks = [];\n\n const app = createServer(\n this.checks,\n this.server.getUrl,\n this.server.getUrl,\n { prmPath: null }\n );\n\n // needed for /token endpoint\n app.use(express.urlencoded({ extended: true }));\n\n app.get('/authorize', (req: Request, res: Response) => {\n this.checks.push({\n id: 'authorization-request',\n name: 'AuthorizationRequest',\n description: 'Client made authorization request to fallback endpoint',\n status: 'SUCCESS',\n timestamp: new Date().toISOString(),\n specReferences: [SpecReferences.LEGACY_2025_03_26_AUTH_URL_FALLBACK],\n details: {\n response_type: req.query.response_type,\n client_id: req.query.client_id,\n redirect_uri: req.query.redirect_uri,\n state: req.query.state,\n code_challenge: req.query.code_challenge ? 'present' : 'missing',\n code_challenge_method: req.query.code_challenge_method\n }\n });\n\n const redirectUri = req.query.redirect_uri as string;\n const state = req.query.state as string;\n const redirectUrl = new URL(redirectUri);\n redirectUrl.searchParams.set('code', 'test-auth-code');\n if (state) {\n redirectUrl.searchParams.set('state', state);\n }\n\n res.redirect(redirectUrl.toString());\n });\n\n app.post('/token', (req: Request, res: Response) => {\n this.checks.push({\n id: 'token-request',\n name: 'TokenRequest',\n description: 'Client requested access token from fallback endpoint',\n status: 'SUCCESS',\n timestamp: new Date().toISOString(),\n specReferences: [SpecReferences.LEGACY_2025_03_26_AUTH_URL_FALLBACK],\n details: {\n endpoint: '/token',\n grantType: req.body.grant_type\n }\n });\n\n res.json({\n access_token: 'test-token',\n token_type: 'Bearer',\n expires_in: 3600\n });\n });\n\n app.post('/register', (req: Request, res: Response) => {\n this.checks.push({\n id: 'client-registration',\n name: 'ClientRegistration',\n description:\n 'Client registered with authorization server at fallback endpoint',\n status: 'SUCCESS',\n timestamp: new Date().toISOString(),\n specReferences: [SpecReferences.LEGACY_2025_03_26_AUTH_URL_FALLBACK],\n details: {\n endpoint: '/register',\n clientName: req.body.client_name\n }\n });\n\n res.status(201).json({\n client_id: 'test-client-id',\n client_secret: 'test-client-secret',\n client_name: req.body.client_name || 'test-client',\n redirect_uris: req.body.redirect_uris || []\n });\n });\n\n await this.server.start(app);\n\n return { serverUrl: `${this.server.getUrl()}/mcp` };\n }\n\n async stop() {\n await this.server.stop();\n }\n\n getChecks(): ConformanceCheck[] {\n const expectedSlugs = [\n 'client-registration',\n 'authorization-request',\n 'token-request'\n ];\n\n for (const slug of expectedSlugs) {\n if (!this.checks.find((c) => c.id === slug)) {\n this.checks.push({\n id: slug,\n name: `Expected Check Missing: ${slug}`,\n description: `Expected Check Missing: ${slug}`,\n status: 'FAILURE',\n timestamp: new Date().toISOString()\n });\n }\n }\n\n return this.checks;\n }\n}\n",[],[135,262,429,525,567],"517806f5-f961-4011-981d-d5129bb94094","issuer-parameter.ts","e0bc758e-ad13-11f1-b4fb-1607ee4eb77e",44,["D",1789043631138],"import type { Scenario, ConformanceCheck } from '../../../types.ts';\nimport { ScenarioUrls, DRAFT_PROTOCOL_VERSION } from '../../../types.ts';\nimport { createAuthServer } from './helpers/createAuthServer.ts';\nimport { createServer } from './helpers/createServer.ts';\nimport { ServerLifecycle } from './helpers/serverLifecycle.ts';\nimport { SpecReferences } from './spec-references.ts';\nimport { MockTokenVerifier } from './helpers/mockTokenVerifier.ts';\n\nconst specRefs = [SpecReferences.RFC_9207_ISS_PARAMETER];\nconst metadataSpecRefs = [\n SpecReferences.RFC_AUTH_SERVER_METADATA_REQUEST,\n SpecReferences.MCP_AUTH_DISCOVERY\n];\n\n/**\n * Scenario: ISS Parameter Supported (positive)\n *\n * Server advertises authorization_response_iss_parameter_supported: true and\n * includes the correct iss value in the authorization redirect. A conformant\n * client should validate iss and proceed normally.\n */\nexport class IssParameterSupportedScenario implements Scenario {\n name = 'auth/iss-supported';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n description =\n 'Tests that client accepts authorization response when server advertises and sends correct iss parameter';\n\n private authServer = new ServerLifecycle();\n private server = new ServerLifecycle();\n private checks: ConformanceCheck[] = [];\n private tokenRequestMade = false;\n\n async start(): Promise {\n this.checks = [];\n this.tokenRequestMade = false;\n\n const tokenVerifier = new MockTokenVerifier(this.checks, []);\n\n const authApp = createAuthServer(this.checks, this.authServer.getUrl, {\n tokenVerifier,\n issParameterSupported: true,\n issInRedirect: 'correct',\n onTokenRequest: () => {\n this.tokenRequestMade = true;\n return { token: `test-token-${Date.now()}`, scopes: [] };\n }\n });\n await this.authServer.start(authApp);\n\n const app = createServer(\n this.checks,\n this.server.getUrl,\n this.authServer.getUrl,\n { requiredScopes: [], tokenVerifier }\n );\n await this.server.start(app);\n\n return { serverUrl: `${this.server.getUrl()}/mcp` };\n }\n\n async stop() {\n await this.authServer.stop();\n await this.server.stop();\n }\n\n getChecks(): ConformanceCheck[] {\n const timestamp = new Date().toISOString();\n\n this.checks.push({\n id: 'sep-2468-client-compare-iss-supported',\n name: 'Client accepts matching iss when advertised',\n description: this.tokenRequestMade\n ? 'Client compared advertised iss against recorded issuer and proceeded to token exchange'\n : 'Client did not proceed to token exchange after receiving a correct iss from a server that advertised support',\n status: this.tokenRequestMade ? 'SUCCESS' : 'FAILURE',\n timestamp,\n specReferences: specRefs,\n details: { tokenRequestMade: this.tokenRequestMade }\n });\n\n return this.checks;\n }\n}\n\n/**\n * Scenario: ISS Parameter Not Advertised (positive)\n *\n * Server does not advertise authorization_response_iss_parameter_supported and\n * does not include iss in the redirect. A conformant client should proceed normally.\n */\nexport class IssParameterNotAdvertisedScenario implements Scenario {\n name = 'auth/iss-not-advertised';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n description =\n 'Tests that client accepts authorization response when server does not advertise or send iss parameter';\n\n private authServer = new ServerLifecycle();\n private server = new ServerLifecycle();\n private checks: ConformanceCheck[] = [];\n private tokenRequestMade = false;\n\n async start(): Promise {\n this.checks = [];\n this.tokenRequestMade = false;\n\n const tokenVerifier = new MockTokenVerifier(this.checks, []);\n\n const authApp = createAuthServer(this.checks, this.authServer.getUrl, {\n tokenVerifier,\n issParameterSupported: null,\n issInRedirect: 'omit',\n onTokenRequest: () => {\n this.tokenRequestMade = true;\n return { token: `test-token-${Date.now()}`, scopes: [] };\n }\n });\n await this.authServer.start(authApp);\n\n const app = createServer(\n this.checks,\n this.server.getUrl,\n this.authServer.getUrl,\n { requiredScopes: [], tokenVerifier }\n );\n await this.server.start(app);\n\n return { serverUrl: `${this.server.getUrl()}/mcp` };\n }\n\n async stop() {\n await this.authServer.stop();\n await this.server.stop();\n }\n\n getChecks(): ConformanceCheck[] {\n const timestamp = new Date().toISOString();\n\n this.checks.push({\n id: 'sep-2468-client-proceed-no-iss',\n name: 'Client proceeds when iss absent and not advertised',\n description: this.tokenRequestMade\n ? 'Client proceeded to token exchange when neither metadata advertised iss support nor redirect contained iss'\n : 'Client did not proceed to token exchange — should proceed when iss is absent and not advertised',\n status: this.tokenRequestMade ? 'SUCCESS' : 'FAILURE',\n timestamp,\n specReferences: specRefs,\n details: { tokenRequestMade: this.tokenRequestMade }\n });\n\n return this.checks;\n }\n}\n\n/**\n * Scenario: ISS Parameter Advertised but Missing from Redirect (client must reject)\n *\n * Server advertises authorization_response_iss_parameter_supported: true but\n * omits iss from the redirect. A conformant client MUST reject this response.\n */\nexport class IssParameterSupportedMissingScenario implements Scenario {\n name = 'auth/iss-supported-missing';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n description =\n 'Tests that client rejects authorization response when server advertised iss support but omitted iss from redirect';\n allowClientError = true;\n\n private authServer = new ServerLifecycle();\n private server = new ServerLifecycle();\n private checks: ConformanceCheck[] = [];\n private authReached = false;\n private tokenRequestMade = false;\n\n async start(): Promise {\n this.checks = [];\n this.authReached = false;\n this.tokenRequestMade = false;\n\n const tokenVerifier = new MockTokenVerifier(this.checks, []);\n\n const authApp = createAuthServer(this.checks, this.authServer.getUrl, {\n tokenVerifier,\n issParameterSupported: true,\n issInRedirect: 'omit', // advertise support but don't send iss\n onAuthorizationRequest: () => {\n this.authReached = true;\n },\n onTokenRequest: () => {\n this.tokenRequestMade = true;\n return { token: `test-token-${Date.now()}`, scopes: [] };\n }\n });\n await this.authServer.start(authApp);\n\n const app = createServer(\n this.checks,\n this.server.getUrl,\n this.authServer.getUrl,\n { requiredScopes: [], tokenVerifier }\n );\n await this.server.start(app);\n\n return { serverUrl: `${this.server.getUrl()}/mcp` };\n }\n\n async stop() {\n await this.authServer.stop();\n await this.server.stop();\n }\n\n getChecks(): ConformanceCheck[] {\n const timestamp = new Date().toISOString();\n\n if (\n !this.checks.some((c) => c.id === 'sep-2468-client-reject-missing-iss')\n ) {\n const correctlyRejected = this.authReached && !this.tokenRequestMade;\n this.checks.push({\n id: 'sep-2468-client-reject-missing-iss',\n name: 'Client rejects missing iss when required',\n description: correctlyRejected\n ? 'Client correctly rejected authorization response missing required iss parameter'\n : 'Client MUST reject authorization response when server advertised iss support but iss is absent from redirect',\n status: correctlyRejected ? 'SUCCESS' : 'FAILURE',\n timestamp,\n specReferences: specRefs,\n details: {\n serverAdvertisedSupport: true,\n issSentInRedirect: false,\n authReached: this.authReached,\n tokenRequestMade: this.tokenRequestMade\n }\n });\n }\n\n return this.checks;\n }\n}\n\n/**\n * Scenario: ISS Parameter Has Wrong Value (client must reject)\n *\n * Server advertises authorization_response_iss_parameter_supported: true and\n * includes an iss value that does not match the server's actual issuer. A\n * conformant client MUST reject this response.\n */\nexport class IssParameterWrongIssuerScenario implements Scenario {\n name = 'auth/iss-wrong-issuer';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n description =\n 'Tests that client rejects authorization response when iss does not match the authorization server issuer';\n allowClientError = true;\n\n private authServer = new ServerLifecycle();\n private server = new ServerLifecycle();\n private checks: ConformanceCheck[] = [];\n private authReached = false;\n private tokenRequestMade = false;\n\n async start(): Promise {\n this.checks = [];\n this.authReached = false;\n this.tokenRequestMade = false;\n\n const tokenVerifier = new MockTokenVerifier(this.checks, []);\n\n const authApp = createAuthServer(this.checks, this.authServer.getUrl, {\n tokenVerifier,\n issParameterSupported: true,\n issInRedirect: 'wrong', // send iss that doesn't match metadata issuer\n onAuthorizationRequest: () => {\n this.authReached = true;\n },\n onTokenRequest: () => {\n this.tokenRequestMade = true;\n return { token: `test-token-${Date.now()}`, scopes: [] };\n }\n });\n await this.authServer.start(authApp);\n\n const app = createServer(\n this.checks,\n this.server.getUrl,\n this.authServer.getUrl,\n { requiredScopes: [], tokenVerifier }\n );\n await this.server.start(app);\n\n return { serverUrl: `${this.server.getUrl()}/mcp` };\n }\n\n async stop() {\n await this.authServer.stop();\n await this.server.stop();\n }\n\n getChecks(): ConformanceCheck[] {\n const timestamp = new Date().toISOString();\n\n if (\n !this.checks.some((c) => c.id === 'sep-2468-client-compare-iss-supported')\n ) {\n const correctlyRejected = this.authReached && !this.tokenRequestMade;\n this.checks.push({\n id: 'sep-2468-client-compare-iss-supported',\n name: 'Client rejects mismatched iss',\n description: correctlyRejected\n ? 'Client correctly rejected authorization response with mismatched iss parameter'\n : 'Client MUST reject authorization response when iss does not match the authorization server issuer',\n status: correctlyRejected ? 'SUCCESS' : 'FAILURE',\n timestamp,\n specReferences: specRefs,\n details: {\n serverAdvertisedSupport: true,\n issSentInRedirect: 'https://evil.example.com',\n authReached: this.authReached,\n tokenRequestMade: this.tokenRequestMade\n }\n });\n }\n\n return this.checks;\n }\n}\n\n/**\n * Scenario: ISS Parameter Sent but Not Advertised, Mismatched (client must reject)\n *\n * Server does not advertise authorization_response_iss_parameter_supported but\n * includes a mismatched iss value in the redirect. Per the SEP-2468 spec table\n * row 3, a conformant client MUST compare a present iss against the recorded\n * issuer regardless of metadata advertisement, and reject on mismatch.\n */\nexport class IssParameterUnexpectedScenario implements Scenario {\n name = 'auth/iss-unexpected';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n description =\n 'Tests that client compares iss against recorded issuer even when not advertised, and rejects on mismatch';\n allowClientError = true;\n\n private authServer = new ServerLifecycle();\n private server = new ServerLifecycle();\n private checks: ConformanceCheck[] = [];\n private authReached = false;\n private tokenRequestMade = false;\n\n async start(): Promise {\n this.checks = [];\n this.authReached = false;\n this.tokenRequestMade = false;\n\n const tokenVerifier = new MockTokenVerifier(this.checks, []);\n\n const authApp = createAuthServer(this.checks, this.authServer.getUrl, {\n tokenVerifier,\n issParameterSupported: null,\n issInRedirect: 'wrong', // send mismatched iss without advertising support\n onAuthorizationRequest: () => {\n this.authReached = true;\n },\n onTokenRequest: () => {\n this.tokenRequestMade = true;\n return { token: `test-token-${Date.now()}`, scopes: [] };\n }\n });\n await this.authServer.start(authApp);\n\n const app = createServer(\n this.checks,\n this.server.getUrl,\n this.authServer.getUrl,\n { requiredScopes: [], tokenVerifier }\n );\n await this.server.start(app);\n\n return { serverUrl: `${this.server.getUrl()}/mcp` };\n }\n\n async stop() {\n await this.authServer.stop();\n await this.server.stop();\n }\n\n getChecks(): ConformanceCheck[] {\n const timestamp = new Date().toISOString();\n\n if (\n !this.checks.some(\n (c) => c.id === 'sep-2468-client-compare-iss-unadvertised'\n )\n ) {\n const correctlyRejected = this.authReached && !this.tokenRequestMade;\n this.checks.push({\n id: 'sep-2468-client-compare-iss-unadvertised',\n name: 'Client compares unadvertised iss and rejects mismatch',\n description: correctlyRejected\n ? 'Client correctly compared unadvertised iss against recorded issuer and rejected the mismatch'\n : 'Client MUST compare a present iss against the recorded issuer regardless of metadata advertisement, and reject on mismatch',\n status: correctlyRejected ? 'SUCCESS' : 'FAILURE',\n timestamp,\n specReferences: specRefs,\n details: {\n serverAdvertisedSupport: false,\n issSentInRedirect: 'https://evil.example.com',\n authReached: this.authReached,\n tokenRequestMade: this.tokenRequestMade\n }\n });\n }\n\n return this.checks;\n }\n}\n\n/**\n * Scenario: ISS Parameter Is a Normalization-Equivalent Variant (client must reject)\n *\n * Server advertises authorization_response_iss_parameter_supported: true and\n * includes an iss value that differs from the recorded issuer only by RFC 3986\n * normalization (a trailing slash on an empty path — exactly what\n * `new URL(x).href` round-tripping produces). SEP-2468 requires simple string\n * comparison with no scheme/host case folding, default-port elision,\n * trailing-slash, or percent-encoding normalization, so a conformant client\n * MUST treat the variant as a mismatch and reject the response.\n */\nexport class IssParameterNormalizedVariantScenario implements Scenario {\n name = 'auth/iss-normalized';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n description =\n 'Tests that client compares iss using simple string comparison without applying URL normalization';\n allowClientError = true;\n\n private authServer = new ServerLifecycle();\n private server = new ServerLifecycle();\n private checks: ConformanceCheck[] = [];\n private authReached = false;\n private tokenRequestMade = false;\n\n async start(): Promise {\n this.checks = [];\n this.authReached = false;\n this.tokenRequestMade = false;\n\n const tokenVerifier = new MockTokenVerifier(this.checks, []);\n\n const authApp = createAuthServer(this.checks, this.authServer.getUrl, {\n tokenVerifier,\n issParameterSupported: true,\n issInRedirect: 'normalized', // correct issuer + trailing slash\n onAuthorizationRequest: () => {\n this.authReached = true;\n },\n onTokenRequest: () => {\n this.tokenRequestMade = true;\n return { token: `test-token-${Date.now()}`, scopes: [] };\n }\n });\n await this.authServer.start(authApp);\n\n const app = createServer(\n this.checks,\n this.server.getUrl,\n this.authServer.getUrl,\n { requiredScopes: [], tokenVerifier }\n );\n await this.server.start(app);\n\n return { serverUrl: `${this.server.getUrl()}/mcp` };\n }\n\n async stop() {\n await this.authServer.stop();\n await this.server.stop();\n }\n\n getChecks(): ConformanceCheck[] {\n const timestamp = new Date().toISOString();\n\n if (!this.checks.some((c) => c.id === 'sep-2468-client-no-normalization')) {\n const correctlyRejected = this.authReached && !this.tokenRequestMade;\n this.checks.push({\n id: 'sep-2468-client-no-normalization',\n name: 'Client compares iss without URL normalization',\n description: correctlyRejected\n ? 'Client rejected an iss value that only matches the recorded issuer after URL normalization'\n : 'Client MUST NOT apply scheme/host case folding, default-port elision, trailing-slash, or percent-encoding normalization to iss before comparison; a trailing-slash variant of the issuer must be treated as a mismatch',\n status: correctlyRejected ? 'SUCCESS' : 'FAILURE',\n timestamp,\n specReferences: specRefs,\n details: {\n recordedIssuer: this.authServer.getUrl(),\n issSentInRedirect: `${this.authServer.getUrl()}/`,\n authReached: this.authReached,\n tokenRequestMade: this.tokenRequestMade\n }\n });\n }\n\n return this.checks;\n }\n}\n\n/**\n * Scenario: AS Metadata Issuer Mismatch (client must not use the metadata)\n *\n * The authorization server metadata document declares an `issuer` that is not\n * identical to the issuer identifier used to construct the well-known URL.\n * Per RFC 8414 §3.3 / OpenID Connect Discovery §4.3 (incorporated by\n * SEP-2468), the client MUST validate the issuer and MUST NOT use the\n * metadata on mismatch. The endpoints in the poisoned document live under a\n * non-default route prefix, so any request that reaches them proves the\n * client used the metadata.\n */\nexport class MetadataIssuerMismatchScenario implements Scenario {\n name = 'auth/metadata-issuer-mismatch';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n description =\n 'Tests that client rejects authorization server metadata whose issuer does not match the issuer used to construct the well-known URL';\n allowClientError = true;\n\n private authServer = new ServerLifecycle();\n private server = new ServerLifecycle();\n private checks: ConformanceCheck[] = [];\n private metadataEndpointsUsed = false;\n\n async start(): Promise {\n this.checks = [];\n this.metadataEndpointsUsed = false;\n\n const tokenVerifier = new MockTokenVerifier(this.checks, []);\n\n const authApp = createAuthServer(this.checks, this.authServer.getUrl, {\n tokenVerifier,\n // The well-known URL is constructed from the AS URL advertised in PRM\n // (the bare origin), so the document's issuer must equal that origin.\n // Serve something else entirely.\n metadataIssuer: 'https://attacker.example.com',\n // Park the endpoints under a prefix only discoverable via the poisoned\n // metadata, so \"client used the metadata\" is observable as a request.\n routePrefix: '/mismatched-as',\n onRegistrationRequest: () => {\n this.metadataEndpointsUsed = true;\n return {\n clientId: 'test-client-id',\n clientSecret: 'test-client-secret'\n };\n },\n onAuthorizationRequest: () => {\n this.metadataEndpointsUsed = true;\n },\n onTokenRequest: () => {\n this.metadataEndpointsUsed = true;\n return { token: `test-token-${Date.now()}`, scopes: [] };\n }\n });\n await this.authServer.start(authApp);\n\n const app = createServer(\n this.checks,\n this.server.getUrl,\n this.authServer.getUrl,\n { requiredScopes: [], tokenVerifier }\n );\n await this.server.start(app);\n\n return { serverUrl: `${this.server.getUrl()}/mcp` };\n }\n\n async stop() {\n await this.authServer.stop();\n await this.server.stop();\n }\n\n getChecks(): ConformanceCheck[] {\n const timestamp = new Date().toISOString();\n\n if (\n !this.checks.some(\n (c) => c.id === 'sep-2468-client-validate-metadata-issuer'\n )\n ) {\n const metadataRequested = this.checks.some(\n (c) => c.id === 'authorization-server-metadata'\n );\n const correctlyRejected =\n metadataRequested && !this.metadataEndpointsUsed;\n this.checks.push({\n id: 'sep-2468-client-validate-metadata-issuer',\n name: 'Client validates metadata issuer against well-known URL',\n description: correctlyRejected\n ? 'Client rejected authorization server metadata whose issuer does not match the issuer identifier used to construct the well-known URL'\n : metadataRequested\n ? 'Client MUST NOT use authorization server metadata whose issuer differs from the issuer identifier used to construct the well-known URL; client used endpoints from the mismatched metadata'\n : 'Client never retrieved the authorization server metadata document, so issuer validation could not be observed',\n status: correctlyRejected ? 'SUCCESS' : 'FAILURE',\n timestamp,\n specReferences: metadataSpecRefs,\n details: {\n expectedIssuer: this.authServer.getUrl(),\n metadataIssuer: 'https://attacker.example.com',\n metadataRequested,\n metadataEndpointsUsed: this.metadataEndpointsUsed\n }\n });\n }\n\n return this.checks;\n }\n}\n",[],[135,262,429,525,575],"b4d48251-4782-4f02-8fcb-782334551aca","d7111a94-ad13-11f1-8600-1607ee4eb77e",16,["D",1789043614923],"import { Scenario } from '../../../types.ts';\nimport { metadataScenarios } from './discovery-metadata.ts';\nimport { AuthBasicCIMDScenario } from './basic-cimd.ts';\nimport {\n Auth20250326OAuthMetadataBackcompatScenario,\n Auth20250326OEndpointFallbackScenario\n} from './march-spec-backcompat.ts';\nimport {\n ScopeFromWwwAuthenticateScenario,\n ScopeFromScopesSupportedScenario,\n ScopeOmittedWhenUndefinedScenario,\n ScopeStepUpAuthScenario,\n ScopeRetryLimitScenario\n} from './scope-handling.ts';\nimport {\n ClientSecretBasicAuthScenario,\n ClientSecretPostAuthScenario,\n PublicClientAuthScenario\n} from './token-endpoint-auth.ts';\nimport {\n ClientCredentialsJwtScenario,\n ClientCredentialsBasicScenario\n} from './client-credentials.ts';\nimport { ResourceMismatchScenario } from './resource-mismatch.ts';\nimport { PreRegistrationScenario } from './pre-registration.ts';\nimport { EnterpriseManagedAuthorizationScenario } from './enterprise-managed-authorization.ts';\nimport {\n OfflineAccessScopeScenario,\n OfflineAccessNotSupportedScenario\n} from './offline-access.ts';\nimport { AuthorizationServerMigrationScenario } from './authorization-server-migration.ts';\nimport {\n IssParameterSupportedScenario,\n IssParameterNotAdvertisedScenario,\n IssParameterSupportedMissingScenario,\n IssParameterWrongIssuerScenario,\n IssParameterUnexpectedScenario,\n IssParameterNormalizedVariantScenario,\n MetadataIssuerMismatchScenario\n} from './issuer-parameter.ts';\n\n// Auth scenarios (required for tier 1)\nexport const authScenariosList: Scenario[] = [\n ...metadataScenarios,\n new AuthBasicCIMDScenario(),\n new ScopeFromWwwAuthenticateScenario(),\n new ScopeFromScopesSupportedScenario(),\n new ScopeOmittedWhenUndefinedScenario(),\n new ScopeStepUpAuthScenario(),\n new ScopeRetryLimitScenario(),\n new ClientSecretBasicAuthScenario(),\n new ClientSecretPostAuthScenario(),\n new PublicClientAuthScenario(),\n new PreRegistrationScenario()\n];\n\n// Back-compat scenarios (optional - backward compatibility with older spec versions)\nexport const backcompatScenariosList: Scenario[] = [\n new Auth20250326OAuthMetadataBackcompatScenario(),\n new Auth20250326OEndpointFallbackScenario()\n];\n\n// Extension scenarios (optional for tier 1 - protocol extensions)\nexport const extensionScenariosList: Scenario[] = [\n new ClientCredentialsJwtScenario(),\n new ClientCredentialsBasicScenario(),\n new EnterpriseManagedAuthorizationScenario()\n];\n\n// Draft scenarios (informational - not scored for tier assessment)\nexport const draftScenariosList: Scenario[] = [\n new ResourceMismatchScenario(),\n new OfflineAccessScopeScenario(),\n new OfflineAccessNotSupportedScenario(),\n new AuthorizationServerMigrationScenario(),\n new IssParameterSupportedScenario(),\n new IssParameterNotAdvertisedScenario(),\n new IssParameterSupportedMissingScenario(),\n new IssParameterWrongIssuerScenario(),\n new IssParameterUnexpectedScenario(),\n new IssParameterNormalizedVariantScenario(),\n new MetadataIssuerMismatchScenario()\n];\n",[],[135,262,429,525,33],"f2757fbe-448c-4c96-a00d-434d66abb6b7","enterprise-managed-authorization.ts","e1c8a150-ad13-11f1-a41e-1607ee4eb77e",47,["D",1789043632903],"import * as jose from 'npm:jose@^6.1.2';\nimport type { CryptoKey } from 'npm:jose@^6.1.2';\nimport express, { type Request, type Response } from 'npm:express@^5.1.0';\nimport type { Scenario, ConformanceCheck, ScenarioUrls } from '../../../types.ts';\nimport { createAuthServer } from './helpers/createAuthServer.ts';\nimport { createServer } from './helpers/createServer.ts';\nimport { MockTokenVerifier } from './helpers/mockTokenVerifier.ts';\nimport { ServerLifecycle } from './helpers/serverLifecycle.ts';\nimport { SpecReferences } from './spec-references.ts';\n\nconst CONFORMANCE_TEST_CLIENT_ID = 'conformance-test-xaa-client';\nconst CONFORMANCE_TEST_CLIENT_SECRET = 'conformance-test-xaa-secret';\nconst IDP_CLIENT_ID = 'conformance-test-idp-client';\nconst DEMO_USER_ID = 'demo-user@example.com';\n\n/**\n * Generate an EC P-256 keypair for IDP ID token signing.\n */\nasync function generateIdpKeypair(): Promise<{\n publicKey: CryptoKey;\n privateKey: CryptoKey;\n}> {\n const { publicKey, privateKey } = await jose.generateKeyPair('ES256', {\n extractable: true\n });\n return { publicKey, privateKey };\n}\n\n/**\n * Create a signed ID token from the IDP\n */\nasync function createIdpIdToken(\n privateKey: CryptoKey,\n idpIssuer: string,\n audience: string,\n userId: string = DEMO_USER_ID\n): Promise {\n return await new jose.SignJWT({\n sub: userId,\n email: userId,\n aud: audience\n })\n .setProtectedHeader({ alg: 'ES256' })\n .setIssuer(idpIssuer)\n .setIssuedAt()\n .setExpirationTime('1h')\n .sign(privateKey);\n}\n\n/**\n * Scenario: Enterprise-Managed Authorization (SEP-990)\n *\n * Tests the complete SEP-990 flow: IDP ID token -> authorization grant -> access token\n * This scenario combines both RFC 8693 token exchange and RFC 7523 JWT bearer grant.\n */\nexport class EnterpriseManagedAuthorizationScenario implements Scenario {\n name = 'auth/enterprise-managed-authorization';\n readonly source = {\n extensionId: 'io.modelcontextprotocol/enterprise-managed-authorization'\n } as const;\n description =\n 'Tests complete SEP-990 flow: token exchange + JWT bearer grant (Enterprise-Managed Authorization)';\n\n private idpServer = new ServerLifecycle();\n private authServer = new ServerLifecycle();\n private mcpServer = new ServerLifecycle();\n private checks: ConformanceCheck[] = [];\n private idpPublicKey?: CryptoKey;\n private idpPrivateKey?: CryptoKey;\n private grantKeypairs: Map = new Map();\n\n async start(): Promise {\n this.checks = [];\n\n // Generate IDP keypair\n const { publicKey, privateKey } = await generateIdpKeypair();\n this.idpPublicKey = publicKey;\n this.idpPrivateKey = privateKey;\n\n // Shared token verifier ensures MCP server only accepts tokens\n // actually issued by the auth server\n const tokenVerifier = new MockTokenVerifier(this.checks, []);\n\n // Start IDP server\n await this.startIdpServer();\n\n // Start auth server with JWT bearer grant support only\n // Token exchange is handled by IdP\n const authApp = createAuthServer(this.checks, this.authServer.getUrl, {\n grantTypesSupported: ['urn:ietf:params:oauth:grant-type:jwt-bearer'],\n tokenEndpointAuthMethodsSupported: ['client_secret_basic'],\n tokenVerifier,\n onTokenRequest: async ({\n grantType,\n body,\n timestamp,\n authBaseUrl,\n authorizationHeader\n }) => {\n // Auth server only handles JWT bearer grant (ID-JAG -> access token)\n if (grantType === 'urn:ietf:params:oauth:grant-type:jwt-bearer') {\n const mcpResourceUrl = `${this.mcpServer.getUrl()}/mcp`;\n return await this.handleJwtBearerGrant(\n body,\n timestamp,\n authBaseUrl,\n authorizationHeader,\n mcpResourceUrl\n );\n }\n\n return {\n error: 'unsupported_grant_type',\n errorDescription: `Auth server only supports jwt-bearer grant, got ${grantType}`\n };\n }\n });\n\n await this.authServer.start(authApp);\n\n // Start MCP server with shared token verifier\n const mcpApp = createServer(\n this.checks,\n this.mcpServer.getUrl,\n this.authServer.getUrl,\n { tokenVerifier }\n );\n\n await this.mcpServer.start(mcpApp);\n\n // Generate IDP ID token for client\n const idpIdToken = await createIdpIdToken(\n this.idpPrivateKey!,\n this.idpServer.getUrl(),\n IDP_CLIENT_ID\n );\n\n return {\n serverUrl: `${this.mcpServer.getUrl()}/mcp`,\n context: {\n client_id: CONFORMANCE_TEST_CLIENT_ID,\n client_secret: CONFORMANCE_TEST_CLIENT_SECRET,\n idp_client_id: IDP_CLIENT_ID,\n idp_id_token: idpIdToken,\n idp_issuer: this.idpServer.getUrl(),\n idp_token_endpoint: `${this.idpServer.getUrl()}/token`\n }\n };\n }\n\n private async startIdpServer(): Promise {\n const app = express();\n app.use(express.json());\n app.use(express.urlencoded({ extended: true }));\n\n // IDP metadata endpoint\n app.get(\n '/.well-known/openid-configuration',\n (req: Request, res: Response) => {\n res.json({\n issuer: this.idpServer.getUrl(),\n authorization_endpoint: `${this.idpServer.getUrl()}/authorize`,\n token_endpoint: `${this.idpServer.getUrl()}/token`,\n jwks_uri: `${this.idpServer.getUrl()}/.well-known/jwks.json`,\n grant_types_supported: [\n 'urn:ietf:params:oauth:grant-type:token-exchange'\n ]\n });\n }\n );\n\n // IDP token endpoint - handles token exchange (IDP ID token -> ID-JAG)\n app.post('/token', async (req: Request, res: Response) => {\n const timestamp = new Date().toISOString();\n const grantType = req.body.grant_type;\n const subjectToken = req.body.subject_token;\n const subjectTokenType = req.body.subject_token_type;\n const requestedTokenType = req.body.requested_token_type;\n const audience = req.body.audience;\n const resource = req.body.resource;\n\n // Only handle token exchange at IdP\n if (grantType !== 'urn:ietf:params:oauth:grant-type:token-exchange') {\n this.checks.push({\n id: 'complete-flow-token-exchange',\n name: 'CompleteFlowTokenExchange',\n description: `IdP expected token-exchange grant, got ${grantType}`,\n status: 'FAILURE',\n timestamp,\n specReferences: [SpecReferences.RFC_8693_TOKEN_EXCHANGE]\n });\n res.status(400).json({\n error: 'unsupported_grant_type',\n error_description: 'IdP only supports token-exchange'\n });\n return;\n }\n\n // Verify all required token exchange parameters per SEP-990\n const missingParams: string[] = [];\n if (!subjectToken) missingParams.push('subject_token');\n if (subjectTokenType !== 'urn:ietf:params:oauth:token-type:id_token') {\n missingParams.push(\n `subject_token_type (expected urn:ietf:params:oauth:token-type:id_token, got ${subjectTokenType || 'missing'})`\n );\n }\n if (requestedTokenType !== 'urn:ietf:params:oauth:token-type:id-jag') {\n missingParams.push(\n `requested_token_type (expected urn:ietf:params:oauth:token-type:id-jag, got ${requestedTokenType || 'missing'})`\n );\n }\n if (!audience) missingParams.push('audience');\n if (!resource) missingParams.push('resource');\n\n if (missingParams.length > 0) {\n this.checks.push({\n id: 'complete-flow-token-exchange',\n name: 'CompleteFlowTokenExchange',\n description: `Token exchange missing or invalid required parameters: ${missingParams.join(', ')}`,\n status: 'FAILURE',\n timestamp,\n specReferences: [\n SpecReferences.RFC_8693_TOKEN_EXCHANGE,\n SpecReferences.SEP_990_ENTERPRISE_OAUTH\n ]\n });\n res.status(400).json({\n error: 'invalid_request',\n error_description: `Missing or invalid required parameters: ${missingParams.join(', ')}`\n });\n return;\n }\n\n try {\n // Verify the IDP ID token\n const { payload } = await jose.jwtVerify(\n subjectToken,\n this.idpPublicKey!,\n {\n audience: IDP_CLIENT_ID,\n issuer: this.idpServer.getUrl()\n }\n );\n\n this.checks.push({\n id: 'complete-flow-token-exchange',\n name: 'CompleteFlowTokenExchange',\n description:\n 'Successfully exchanged IDP ID token for ID-JAG at IdP with all required parameters',\n status: 'SUCCESS',\n timestamp,\n specReferences: [\n SpecReferences.RFC_8693_TOKEN_EXCHANGE,\n SpecReferences.SEP_990_ENTERPRISE_OAUTH\n ]\n });\n\n // Create ID-JAG (ID-bound JSON Assertion Grant)\n // Include resource and client_id claims per SEP-990\n const userId = payload.sub as string;\n const { publicKey, privateKey } = await jose.generateKeyPair('ES256');\n this.grantKeypairs.set(userId, publicKey);\n\n // The IdP uses CONFORMANCE_TEST_CLIENT_ID (the MCP Client's client_id\n // at the AS), not the IdP client_id from the request body.\n // Per Section 6.1: \"the IdP will need to be aware of the MCP Client's\n // client_id that it normally uses with the MCP Server.\"\n const idJag = await new jose.SignJWT({\n sub: userId,\n resource: resource,\n client_id: CONFORMANCE_TEST_CLIENT_ID\n })\n .setProtectedHeader({ alg: 'ES256', typ: 'oauth-id-jag+jwt' })\n .setIssuer(this.idpServer.getUrl())\n .setAudience(audience)\n .setIssuedAt()\n .setExpirationTime('5m')\n .setJti(crypto.randomUUID())\n .sign(privateKey);\n\n res.json({\n access_token: idJag,\n issued_token_type: 'urn:ietf:params:oauth:token-type:id-jag',\n token_type: 'N_A'\n });\n } catch (e) {\n const errorMessage = e instanceof Error ? e.message : String(e);\n this.checks.push({\n id: 'complete-flow-token-exchange',\n name: 'CompleteFlowTokenExchange',\n description: `Token exchange failed: ${errorMessage}`,\n status: 'FAILURE',\n timestamp,\n specReferences: [SpecReferences.RFC_8693_TOKEN_EXCHANGE]\n });\n res.status(400).json({\n error: 'invalid_grant',\n error_description: 'Invalid ID token'\n });\n }\n });\n\n await this.idpServer.start(app);\n }\n\n private async handleJwtBearerGrant(\n body: Record,\n timestamp: string,\n authBaseUrl: string,\n authorizationHeader?: string,\n mcpResourceUrl?: string\n ): Promise {\n // 1. Verify client authentication (client_secret_basic)\n if (!authorizationHeader || !authorizationHeader.startsWith('Basic ')) {\n this.checks.push({\n id: 'complete-flow-jwt-bearer',\n name: 'CompleteFlowJwtBearer',\n description:\n 'Missing or invalid Authorization header for client_secret_basic authentication',\n status: 'FAILURE',\n timestamp,\n specReferences: [SpecReferences.SEP_990_ENTERPRISE_OAUTH],\n details: {\n expected: 'Authorization: Basic ',\n received: authorizationHeader || 'missing'\n }\n });\n return {\n error: 'invalid_client',\n errorDescription:\n 'Client authentication required (client_secret_basic)',\n statusCode: 401\n };\n }\n\n const base64Credentials = authorizationHeader.slice('Basic '.length);\n const decoded = Buffer.from(base64Credentials, 'base64').toString('utf-8');\n const separatorIndex = decoded.indexOf(':');\n if (separatorIndex === -1) {\n this.checks.push({\n id: 'complete-flow-jwt-bearer',\n name: 'CompleteFlowJwtBearer',\n description: 'Malformed Basic auth header (no colon separator)',\n status: 'FAILURE',\n timestamp,\n specReferences: [SpecReferences.SEP_990_ENTERPRISE_OAUTH]\n });\n return {\n error: 'invalid_client',\n errorDescription: 'Malformed Basic auth',\n statusCode: 401\n };\n }\n\n const authClientId = decodeURIComponent(decoded.slice(0, separatorIndex));\n const authClientSecret = decodeURIComponent(\n decoded.slice(separatorIndex + 1)\n );\n\n if (\n authClientId !== CONFORMANCE_TEST_CLIENT_ID ||\n authClientSecret !== CONFORMANCE_TEST_CLIENT_SECRET\n ) {\n this.checks.push({\n id: 'complete-flow-jwt-bearer',\n name: 'CompleteFlowJwtBearer',\n description: `Client authentication failed: invalid credentials (client_id: ${authClientId})`,\n status: 'FAILURE',\n timestamp,\n specReferences: [SpecReferences.SEP_990_ENTERPRISE_OAUTH]\n });\n return {\n error: 'invalid_client',\n errorDescription: 'Invalid client credentials',\n statusCode: 401\n };\n }\n\n // 2. Verify assertion is present\n const assertion = body.assertion;\n if (!assertion) {\n this.checks.push({\n id: 'complete-flow-jwt-bearer',\n name: 'CompleteFlowJwtBearer',\n description: 'Missing assertion in JWT bearer grant',\n status: 'FAILURE',\n timestamp,\n specReferences: [SpecReferences.RFC_7523_JWT_BEARER]\n });\n return {\n error: 'invalid_request',\n errorDescription: 'Missing assertion'\n };\n }\n\n try {\n // 3. Verify the ID-JAG header has the correct typ\n const header = jose.decodeProtectedHeader(assertion);\n if (header.typ !== 'oauth-id-jag+jwt') {\n this.checks.push({\n id: 'complete-flow-jwt-bearer',\n name: 'CompleteFlowJwtBearer',\n description: `ID-JAG has wrong typ header: expected oauth-id-jag+jwt, got ${header.typ}`,\n status: 'FAILURE',\n timestamp,\n specReferences: [SpecReferences.SEP_990_ENTERPRISE_OAUTH]\n });\n return {\n error: 'invalid_grant',\n errorDescription: 'Invalid ID-JAG typ header'\n };\n }\n\n // 4. Decode and verify the ID-JAG\n const decoded = jose.decodeJwt(assertion);\n const userId = decoded.sub as string;\n const publicKey = this.grantKeypairs.get(userId);\n\n if (!publicKey) {\n throw new Error('Unknown authorization grant');\n }\n\n // Verify signature and audience\n const withoutSlash = authBaseUrl.replace(/\\/+$/, '');\n const withSlash = `${withoutSlash}/`;\n\n await jose.jwtVerify(assertion, publicKey, {\n audience: [withoutSlash, withSlash],\n clockTolerance: 30\n });\n\n // 5. Verify client_id in ID-JAG matches the authenticating client (Section 5.1)\n const jagClientId = decoded.client_id as string | undefined;\n if (jagClientId !== authClientId) {\n this.checks.push({\n id: 'complete-flow-jwt-bearer',\n name: 'CompleteFlowJwtBearer',\n description: `ID-JAG client_id (${jagClientId}) does not match authenticating client (${authClientId})`,\n status: 'FAILURE',\n timestamp,\n specReferences: [SpecReferences.SEP_990_ENTERPRISE_OAUTH],\n details: {\n jagClientId,\n authClientId\n }\n });\n return {\n error: 'invalid_grant',\n errorDescription:\n 'ID-JAG client_id does not match authenticating client'\n };\n }\n\n // 6. Verify resource claim in ID-JAG matches the MCP server resource\n const jagResource = decoded.resource as string | undefined;\n if (mcpResourceUrl && jagResource !== mcpResourceUrl) {\n this.checks.push({\n id: 'complete-flow-jwt-bearer',\n name: 'CompleteFlowJwtBearer',\n description: `ID-JAG resource (${jagResource}) does not match MCP server resource (${mcpResourceUrl})`,\n status: 'FAILURE',\n timestamp,\n specReferences: [SpecReferences.SEP_990_ENTERPRISE_OAUTH],\n details: {\n jagResource,\n expectedResource: mcpResourceUrl\n }\n });\n return {\n error: 'invalid_grant',\n errorDescription: 'ID-JAG resource does not match MCP server resource'\n };\n }\n\n this.checks.push({\n id: 'complete-flow-jwt-bearer',\n name: 'CompleteFlowJwtBearer',\n description:\n 'Successfully verified client auth, ID-JAG claims, and exchanged for access token',\n status: 'SUCCESS',\n timestamp,\n specReferences: [\n SpecReferences.RFC_7523_JWT_BEARER,\n SpecReferences.SEP_990_ENTERPRISE_OAUTH\n ]\n });\n\n const scopes = body.scope ? body.scope.split(' ') : [];\n return {\n token: `test-token-${Date.now()}`,\n scopes\n };\n } catch (e) {\n this.checks.push({\n id: 'complete-flow-jwt-bearer',\n name: 'CompleteFlowJwtBearer',\n description: `JWT bearer grant failed: ${e}`,\n status: 'FAILURE',\n timestamp,\n specReferences: [SpecReferences.RFC_7523_JWT_BEARER]\n });\n return {\n error: 'invalid_grant',\n errorDescription: 'Invalid authorization grant'\n };\n }\n }\n\n async stop() {\n await this.idpServer.stop();\n await this.authServer.stop();\n await this.mcpServer.stop();\n }\n\n getChecks(): ConformanceCheck[] {\n const hasTokenExchangeCheck = this.checks.some(\n (c) => c.id === 'complete-flow-token-exchange'\n );\n const hasJwtBearerCheck = this.checks.some(\n (c) => c.id === 'complete-flow-jwt-bearer'\n );\n\n if (!hasTokenExchangeCheck) {\n this.checks.push({\n id: 'complete-flow-token-exchange',\n name: 'CompleteFlowTokenExchange',\n description: 'Client did not perform token exchange',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n specReferences: [\n SpecReferences.RFC_8693_TOKEN_EXCHANGE,\n SpecReferences.SEP_990_ENTERPRISE_OAUTH\n ]\n });\n }\n\n if (!hasJwtBearerCheck) {\n this.checks.push({\n id: 'complete-flow-jwt-bearer',\n name: 'CompleteFlowJwtBearer',\n description: 'Client did not perform JWT bearer grant exchange',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n specReferences: [\n SpecReferences.RFC_7523_JWT_BEARER,\n SpecReferences.SEP_990_ENTERPRISE_OAUTH\n ]\n });\n }\n\n return this.checks;\n }\n}\n",[],[135,262,429,525,590],"f89ceca4-af19-49f5-8fdc-4828c1df76d7","discovery-metadata.ts","d6b7450a-ad13-11f1-9b49-1607ee4eb77e",15,["D",1789043614323],"/**\n * OAuth Metadata Discovery Scenarios\n *\n * These scenarios test different combinations of PRM and OAuth metadata locations.\n * The configurations are defined in SCENARIO_CONFIGS below and scenarios are\n * generated from them.\n */\n\nimport {\n AuthHandlerScenario,\n AuthHandlerContext,\n AuthHandlers,\n ConformanceCheck\n} from '../../../types.ts';\nimport { createAuthServer } from './helpers/createAuthServer.ts';\nimport { createServer } from './helpers/createServer.ts';\nimport { SpecReferences } from './spec-references.ts';\nimport { Request, Response } from 'npm:express@^5.1.0';\n\n/**\n * Configuration for a metadata discovery scenario.\n */\ninterface MetadataScenarioConfig {\n name: string;\n prmLocation: string;\n inWwwAuth: boolean;\n oauthMetadataLocation: string;\n /** Route prefix for the auth server (e.g., '/tenant1') */\n authRoutePrefix?: string;\n /** If true, add a trap for root PRM requests */\n trapRootPrm?: boolean;\n}\n\n/**\n * Scenario configurations table:\n *\n * | Scenario | PRM Location | In WWW-Auth | OAuth Metadata Location |\n * |------------------|-------------------------------------------|-------------|------------------------------------------------|\n * | metadata-default | /.well-known/oauth-protected-resource/mcp | Yes | /.well-known/oauth-authorization-server |\n * | metadata-var1 | /.well-known/oauth-protected-resource/mcp | No | /.well-known/openid-configuration |\n * | metadata-var2 | /.well-known/oauth-protected-resource | No | /.well-known/oauth-authorization-server/tenant1|\n * | metadata-var3 | /custom/metadata/location.json | Yes | /tenant1/.well-known/openid-configuration |\n */\nconst SCENARIO_CONFIGS: MetadataScenarioConfig[] = [\n {\n name: 'metadata-default',\n prmLocation: '/.well-known/oauth-protected-resource/mcp',\n inWwwAuth: true,\n oauthMetadataLocation: '/.well-known/oauth-authorization-server',\n trapRootPrm: true\n },\n {\n name: 'metadata-var1',\n prmLocation: '/.well-known/oauth-protected-resource/mcp',\n inWwwAuth: false,\n oauthMetadataLocation: '/.well-known/openid-configuration'\n },\n {\n name: 'metadata-var2',\n prmLocation: '/.well-known/oauth-protected-resource',\n inWwwAuth: false,\n oauthMetadataLocation: '/.well-known/oauth-authorization-server/tenant1',\n authRoutePrefix: '/tenant1'\n },\n {\n name: 'metadata-var3',\n prmLocation: '/custom/metadata/location.json',\n inWwwAuth: true,\n oauthMetadataLocation: '/tenant1/.well-known/openid-configuration',\n authRoutePrefix: '/tenant1'\n }\n];\n\n/**\n * Base for the table-driven discovery scenarios. Each subclass binds a row\n * of SCENARIO_CONFIGS; we use real classes (not factory-returned literals)\n * so the hosted runner can do `new Ctor()` for a fresh instance per run.\n */\nabstract class MetadataDiscoveryScenario extends AuthHandlerScenario {\n protected abstract readonly config: MetadataScenarioConfig;\n readonly source = { introducedIn: '2025-11-25' } as const;\n private checks: ConformanceCheck[] = [];\n\n get name() {\n return `auth/${this.config.name}`;\n }\n get description() {\n return `Tests Basic OAuth metadata discovery flow.\n\n**PRM:** ${this.config.prmLocation}${this.config.inWwwAuth ? '' : ' (not in WWW-Authenticate)'}\n**OAuth metadata:** ${this.config.oauthMetadataLocation}\n`;\n }\n\n authHandlers(ctx: AuthHandlerContext): AuthHandlers {\n this.checks = [];\n const config = this.config;\n const routePrefix = config.authRoutePrefix || '';\n const isOpenIdConfiguration = config.oauthMetadataLocation.includes(\n 'openid-configuration'\n );\n const getAsUrl = () => ctx.getAuxBaseUrl('as');\n\n const authApp = createAuthServer(this.checks, getAsUrl, {\n metadataPath: config.oauthMetadataLocation,\n isOpenIdConfiguration,\n ...(routePrefix && { routePrefix })\n });\n\n // If path-based OAuth metadata, trap root requests\n if (routePrefix) {\n authApp.get('/.well-known/oauth-authorization-server', (req, res) => {\n this.checks.push({\n id: 'authorization-server-metadata-wrong-path',\n name: 'AuthorizationServerMetadataWrongPath',\n description:\n 'Client requested authorization server at the root path when the AS URL has a path-based location',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n specReferences: [\n SpecReferences.RFC_AUTH_SERVER_METADATA_REQUEST,\n SpecReferences.MCP_AUTH_DISCOVERY\n ],\n details: {\n url: req.url\n }\n });\n res.status(404).send('Not Found');\n });\n }\n\n const getAuthServerUrl = routePrefix\n ? () => `${getAsUrl()}${routePrefix}`\n : getAsUrl;\n\n const rsApp = createServer(\n this.checks,\n ctx.getRsBaseUrl,\n getAuthServerUrl,\n {\n prmPath: config.prmLocation,\n includePrmInWwwAuth: config.inWwwAuth\n }\n );\n\n // Add trap for root PRM requests if configured\n if (config.trapRootPrm) {\n rsApp.get(\n '/.well-known/oauth-protected-resource',\n (req: Request, res: Response) => {\n this.checks.push({\n id: 'prm-priority-order',\n name: 'PRM Priority Order',\n description:\n 'Client requested PRM metadata at root location on a server with path-based PRM',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n specReferences: [\n SpecReferences.RFC_PRM_DISCOVERY,\n SpecReferences.MCP_PRM_DISCOVERY\n ],\n details: {\n url: req.url,\n path: req.path\n }\n });\n\n res.status(404).json({\n error: 'not_found',\n error_description: 'PRM metadata not available at root location'\n });\n }\n );\n }\n\n return { rs: rsApp, aux: { as: authApp } };\n }\n\n rawChecks(): ConformanceCheck[] {\n return this.checks;\n }\n\n getChecks(): ConformanceCheck[] {\n const isPathBasedPrm =\n this.config.prmLocation === '/.well-known/oauth-protected-resource/mcp';\n const expectedSlugs = [\n ...(isPathBasedPrm ? ['prm-pathbased-requested'] : []),\n 'authorization-server-metadata',\n 'client-registration',\n 'authorization-request',\n 'token-request'\n ];\n\n for (const slug of expectedSlugs) {\n if (!this.checks.find((c) => c.id === slug)) {\n this.checks.push({\n id: slug,\n name: `Expected Check Missing: ${slug}`,\n description: `Expected Check Missing: ${slug}`,\n status: 'FAILURE',\n timestamp: new Date().toISOString()\n });\n }\n }\n\n return this.checks;\n }\n}\n\nexport class AuthMetadataDefaultScenario extends MetadataDiscoveryScenario {\n protected readonly config = SCENARIO_CONFIGS[0];\n}\nexport class AuthMetadataVar1Scenario extends MetadataDiscoveryScenario {\n protected readonly config = SCENARIO_CONFIGS[1];\n}\nexport class AuthMetadataVar2Scenario extends MetadataDiscoveryScenario {\n protected readonly config = SCENARIO_CONFIGS[2];\n}\nexport class AuthMetadataVar3Scenario extends MetadataDiscoveryScenario {\n protected readonly config = SCENARIO_CONFIGS[3];\n}\n\n// Export all scenarios as an array for convenience\nexport const metadataScenarios = [\n new AuthMetadataDefaultScenario(),\n new AuthMetadataVar1Scenario(),\n new AuthMetadataVar2Scenario(),\n new AuthMetadataVar3Scenario()\n];\n\n// Export function to list metadata scenario names (for suite support)\nexport function listMetadataScenarios(): string[] {\n return metadataScenarios.map((s) => s.name);\n}\n",[],[135,262,429,525,598],"93407c64-7096-44ca-8ec4-8b1f870a023b","client-credentials.ts","e2aae3b2-ad13-11f1-a218-1607ee4eb77e",50,["D",1789043634388],"import * as jose from 'npm:jose@^6.1.2';\nimport type { CryptoKey } from 'npm:jose@^6.1.2';\nimport type { Scenario, ConformanceCheck, ScenarioUrls } from '../../../types.ts';\nimport { createAuthServer } from './helpers/createAuthServer.ts';\nimport { createServer } from './helpers/createServer.ts';\nimport { ServerLifecycle } from './helpers/serverLifecycle.ts';\nimport { SpecReferences } from './spec-references.ts';\n\nconst CONFORMANCE_TEST_CLIENT_ID = 'conformance-test-client';\nconst CONFORMANCE_TEST_CLIENT_SECRET = 'conformance-test-secret';\n\n/**\n * Generate an EC P-256 keypair for JWT signing.\n * Returns both public key (for server verification) and private key PEM (for client signing).\n */\nasync function generateTestKeypair(): Promise<{\n publicKey: CryptoKey;\n privateKeyPem: string;\n}> {\n const { publicKey, privateKey } = await jose.generateKeyPair('ES256', {\n extractable: true\n });\n const privateKeyPem = await jose.exportPKCS8(privateKey);\n return { publicKey, privateKeyPem };\n}\n\n/**\n * Scenario: Client Credentials with JWT Authentication (SEP-1046)\n *\n * Tests OAuth client_credentials flow with private_key_jwt authentication.\n * Client authenticates using a JWT assertion signed with a dynamically generated keypair.\n */\nexport class ClientCredentialsJwtScenario implements Scenario {\n name = 'auth/client-credentials-jwt';\n readonly source = {\n extensionId: 'io.modelcontextprotocol/oauth-client-credentials'\n } as const;\n description =\n 'Tests OAuth client_credentials flow with private_key_jwt authentication (SEP-1046)';\n\n private authServer = new ServerLifecycle();\n private server = new ServerLifecycle();\n private checks: ConformanceCheck[] = [];\n\n async start(): Promise {\n this.checks = [];\n\n // Generate a fresh keypair for this test run\n const { publicKey, privateKeyPem } = await generateTestKeypair();\n\n const authApp = createAuthServer(this.checks, this.authServer.getUrl, {\n grantTypesSupported: ['client_credentials'],\n tokenEndpointAuthMethodsSupported: ['private_key_jwt'],\n tokenEndpointAuthSigningAlgValuesSupported: ['ES256'],\n onTokenRequest: async ({ grantType, body, timestamp, authBaseUrl }) => {\n if (grantType !== 'client_credentials') {\n this.checks.push({\n id: 'client-credentials-grant-type',\n name: 'ClientCredentialsGrantType',\n description: `Expected grant_type=client_credentials, got ${grantType}`,\n status: 'FAILURE',\n timestamp,\n specReferences: [\n SpecReferences.OAUTH_2_1_CLIENT_CREDENTIALS,\n SpecReferences.SEP_1046_CLIENT_CREDENTIALS\n ]\n });\n return {\n error: 'unsupported_grant_type',\n errorDescription: 'Only client_credentials grant is supported'\n };\n }\n\n const clientAssertion = body.client_assertion;\n const clientAssertionType = body.client_assertion_type;\n\n // Verify assertion type\n if (\n clientAssertionType !==\n 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer'\n ) {\n this.checks.push({\n id: 'client-credentials-assertion-type',\n name: 'ClientCredentialsAssertionType',\n description: `Invalid client_assertion_type: ${clientAssertionType}`,\n status: 'FAILURE',\n timestamp,\n specReferences: [SpecReferences.RFC_JWT_CLIENT_AUTH]\n });\n return {\n error: 'invalid_client',\n errorDescription: 'Invalid client_assertion_type',\n statusCode: 401\n };\n }\n\n // Verify JWT signature and claims using the generated public key\n try {\n // Per RFC 7523bis, audience MUST be the issuer identifier.\n // Per RFC 3986, URLs with and without trailing slash are equivalent,\n // so we accept both forms for interoperability (e.g. Pydantic normalizes\n // URLs by adding trailing slashes).\n // Strip any trailing slashes first, then accept both the bare form\n // and the form with exactly one trailing slash.\n const withoutSlash = authBaseUrl.replace(/\\/+$/, '');\n const withSlash = `${withoutSlash}/`;\n const { payload } = await jose.jwtVerify(clientAssertion, publicKey, {\n audience: [withoutSlash, withSlash],\n clockTolerance: 30\n });\n\n // Verify iss claim matches expected client_id\n if (payload.iss !== CONFORMANCE_TEST_CLIENT_ID) {\n this.checks.push({\n id: 'client-credentials-jwt-iss',\n name: 'ClientCredentialsJwtIss',\n description: `JWT iss claim '${payload.iss}' does not match expected client_id '${CONFORMANCE_TEST_CLIENT_ID}'`,\n status: 'FAILURE',\n timestamp,\n specReferences: [SpecReferences.RFC_JWT_CLIENT_AUTH],\n details: {\n expected: CONFORMANCE_TEST_CLIENT_ID,\n actual: payload.iss\n }\n });\n return {\n error: 'invalid_client',\n errorDescription:\n 'JWT iss claim does not match expected client_id',\n statusCode: 401\n };\n }\n\n // Verify sub claim matches expected client_id\n if (payload.sub !== CONFORMANCE_TEST_CLIENT_ID) {\n this.checks.push({\n id: 'client-credentials-jwt-sub',\n name: 'ClientCredentialsJwtSub',\n description: `JWT sub claim '${payload.sub}' does not match expected client_id '${CONFORMANCE_TEST_CLIENT_ID}'`,\n status: 'FAILURE',\n timestamp,\n specReferences: [SpecReferences.RFC_JWT_CLIENT_AUTH],\n details: {\n expected: CONFORMANCE_TEST_CLIENT_ID,\n actual: payload.sub\n }\n });\n return {\n error: 'invalid_client',\n errorDescription:\n 'JWT sub claim does not match expected client_id',\n statusCode: 401\n };\n }\n\n // Success!\n this.checks.push({\n id: 'client-credentials-jwt-verified',\n name: 'ClientCredentialsJwtVerified',\n description:\n 'Client successfully authenticated with signed JWT assertion',\n status: 'SUCCESS',\n timestamp,\n specReferences: [\n SpecReferences.OAUTH_2_1_CLIENT_CREDENTIALS,\n SpecReferences.SEP_1046_CLIENT_CREDENTIALS,\n SpecReferences.RFC_JWT_CLIENT_AUTH\n ],\n details: {\n iss: payload.iss,\n sub: payload.sub,\n aud: payload.aud\n }\n });\n\n const scopes = body.scope ? body.scope.split(' ') : [];\n return {\n token: `cc-token-${Date.now()}`,\n scopes\n };\n } catch (e) {\n const errorMessage = e instanceof Error ? e.message : String(e);\n this.checks.push({\n id: 'client-credentials-jwt-verified',\n name: 'ClientCredentialsJwtVerified',\n description: `JWT verification failed: ${errorMessage}`,\n status: 'FAILURE',\n timestamp,\n specReferences: [SpecReferences.RFC_JWT_CLIENT_AUTH],\n details: { error: errorMessage }\n });\n return {\n error: 'invalid_client',\n errorDescription: `JWT verification failed: ${errorMessage}`,\n statusCode: 401\n };\n }\n }\n });\n\n await this.authServer.start(authApp);\n\n const app = createServer(\n this.checks,\n this.server.getUrl,\n this.authServer.getUrl\n );\n\n await this.server.start(app);\n\n return {\n serverUrl: `${this.server.getUrl()}/mcp`,\n context: {\n client_id: CONFORMANCE_TEST_CLIENT_ID,\n private_key_pem: privateKeyPem,\n signing_algorithm: 'ES256'\n }\n };\n }\n\n async stop() {\n await this.authServer.stop();\n await this.server.stop();\n }\n\n getChecks(): ConformanceCheck[] {\n // Ensure we have the JWT verification check\n const hasJwtCheck = this.checks.some(\n (c) => c.id === 'client-credentials-jwt-verified'\n );\n if (!hasJwtCheck) {\n this.checks.push({\n id: 'client-credentials-jwt-verified',\n name: 'ClientCredentialsJwtVerified',\n description: 'Client did not make a client_credentials token request',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n specReferences: [\n SpecReferences.OAUTH_2_1_CLIENT_CREDENTIALS,\n SpecReferences.SEP_1046_CLIENT_CREDENTIALS\n ]\n });\n }\n\n return this.checks;\n }\n}\n\n/**\n * Scenario: Client Credentials with client_secret_basic Authentication\n *\n * Tests OAuth client_credentials flow with HTTP Basic authentication.\n */\nexport class ClientCredentialsBasicScenario implements Scenario {\n name = 'auth/client-credentials-basic';\n readonly source = {\n extensionId: 'io.modelcontextprotocol/oauth-client-credentials'\n } as const;\n description =\n 'Tests OAuth client_credentials flow with client_secret_basic authentication';\n\n private authServer = new ServerLifecycle();\n private server = new ServerLifecycle();\n private checks: ConformanceCheck[] = [];\n\n async start(): Promise {\n this.checks = [];\n\n const authApp = createAuthServer(this.checks, this.authServer.getUrl, {\n grantTypesSupported: ['client_credentials'],\n tokenEndpointAuthMethodsSupported: ['client_secret_basic'],\n onTokenRequest: async ({\n grantType,\n body,\n timestamp,\n authorizationHeader\n }) => {\n if (grantType !== 'client_credentials') {\n this.checks.push({\n id: 'client-credentials-grant-type',\n name: 'ClientCredentialsGrantType',\n description: `Expected grant_type=client_credentials, got ${grantType}`,\n status: 'FAILURE',\n timestamp,\n specReferences: [\n SpecReferences.OAUTH_2_1_CLIENT_CREDENTIALS,\n SpecReferences.SEP_1046_CLIENT_CREDENTIALS\n ]\n });\n return {\n error: 'unsupported_grant_type',\n errorDescription: 'Only client_credentials grant is supported'\n };\n }\n\n // Verify Basic auth header\n const authHeader = authorizationHeader;\n if (!authHeader || !authHeader.startsWith('Basic ')) {\n this.checks.push({\n id: 'client-credentials-basic-auth',\n name: 'ClientCredentialsBasicAuth',\n description:\n 'Missing or invalid Authorization header for Basic auth',\n status: 'FAILURE',\n timestamp,\n specReferences: [SpecReferences.SEP_1046_CLIENT_CREDENTIALS]\n });\n return {\n error: 'invalid_client',\n errorDescription: 'Missing or invalid Authorization header',\n statusCode: 401\n };\n }\n\n const base64Credentials = authHeader.slice(6);\n const credentials = Buffer.from(base64Credentials, 'base64').toString(\n 'utf-8'\n );\n const [clientId, clientSecret] = credentials.split(':');\n\n if (\n clientId !== CONFORMANCE_TEST_CLIENT_ID ||\n clientSecret !== CONFORMANCE_TEST_CLIENT_SECRET\n ) {\n this.checks.push({\n id: 'client-credentials-basic-auth',\n name: 'ClientCredentialsBasicAuth',\n description: 'Invalid client credentials',\n status: 'FAILURE',\n timestamp,\n specReferences: [SpecReferences.SEP_1046_CLIENT_CREDENTIALS],\n details: { clientId }\n });\n return {\n error: 'invalid_client',\n errorDescription: 'Invalid client credentials',\n statusCode: 401\n };\n }\n\n // Success!\n this.checks.push({\n id: 'client-credentials-basic-auth',\n name: 'ClientCredentialsBasicAuth',\n description:\n 'Client successfully authenticated with client_secret_basic',\n status: 'SUCCESS',\n timestamp,\n specReferences: [\n SpecReferences.OAUTH_2_1_CLIENT_CREDENTIALS,\n SpecReferences.SEP_1046_CLIENT_CREDENTIALS\n ],\n details: { clientId }\n });\n\n const scopes = body.scope ? body.scope.split(' ') : [];\n return {\n token: `cc-token-${Date.now()}`,\n scopes\n };\n }\n });\n\n await this.authServer.start(authApp);\n\n const app = createServer(\n this.checks,\n this.server.getUrl,\n this.authServer.getUrl\n );\n\n await this.server.start(app);\n\n return {\n serverUrl: `${this.server.getUrl()}/mcp`,\n context: {\n client_id: CONFORMANCE_TEST_CLIENT_ID,\n client_secret: CONFORMANCE_TEST_CLIENT_SECRET\n }\n };\n }\n\n async stop() {\n await this.authServer.stop();\n await this.server.stop();\n }\n\n getChecks(): ConformanceCheck[] {\n // Ensure we have the basic auth check\n const hasBasicAuthCheck = this.checks.some(\n (c) => c.id === 'client-credentials-basic-auth'\n );\n if (!hasBasicAuthCheck) {\n this.checks.push({\n id: 'client-credentials-basic-auth',\n name: 'ClientCredentialsBasicAuth',\n description: 'Client did not make a client_credentials token request',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n specReferences: [\n SpecReferences.OAUTH_2_1_CLIENT_CREDENTIALS,\n SpecReferences.SEP_1046_CLIENT_CREDENTIALS\n ]\n });\n }\n\n return this.checks;\n }\n}\n",[],[135,262,429,525,606],"ed3f0402-9a9a-4a78-8851-144884e6fb80","basic-cimd.ts","e3fd3012-ad13-11f1-a1e4-1607ee4eb77e",54,["D",1789043636604],"import {\n AuthHandlerScenario,\n AuthHandlerContext,\n AuthHandlers,\n ConformanceCheck\n} from '../../../types.ts';\nimport { createAuthServer } from './helpers/createAuthServer.ts';\nimport { createServer } from './helpers/createServer.ts';\nimport { SpecReferences } from './spec-references.ts';\n\n/**\n * Fixed client metadata URL that clients should use for CIMD tests.\n * This URL doesn't need to resolve - the server will accept it as-is\n * and use hardcoded metadata.\n */\nexport const CIMD_CLIENT_METADATA_URL =\n 'https://conformance-test.local/client-metadata.json';\n\n/**\n * Scenario: Client ID Metadata Documents (SEP-991/URL-based client IDs)\n *\n * Tests that when a server advertises client_id_metadata_document_supported=true,\n * clients SHOULD use a URL as their client_id instead of using dynamic client\n * registration.\n */\nexport class AuthBasicCIMDScenario extends AuthHandlerScenario {\n name = 'auth/basic-cimd';\n readonly source = { introducedIn: '2025-11-25' } as const;\n description =\n 'Tests OAuth flow with Client ID Metadata Documents (SEP-991/URL-based client IDs). Server advertises client_id_metadata_document_supported=true and client should use URL as client_id instead of DCR.';\n private checks: ConformanceCheck[] = [];\n\n authHandlers(ctx: AuthHandlerContext): AuthHandlers {\n this.checks = [];\n const getAsUrl = () => ctx.getAuxBaseUrl('as');\n\n const authApp = createAuthServer(this.checks, getAsUrl, {\n clientIdMetadataDocumentSupported: true,\n onAuthorizationRequest: (data) => {\n // Check if client used URL-based client ID\n const usedUrlClientId = data.clientId === CIMD_CLIENT_METADATA_URL;\n this.checks.push({\n id: 'cimd-client-id-used',\n name: 'Client ID Metadata Document Usage',\n description: usedUrlClientId\n ? 'Client correctly used URL-based client ID when server supports client_id_metadata_document_supported'\n : 'Client SHOULD use URL-based client ID when server advertises client_id_metadata_document_supported=true',\n status: usedUrlClientId ? 'SUCCESS' : 'WARNING',\n timestamp: data.timestamp,\n specReferences: [\n SpecReferences.MCP_CLIENT_ID_METADATA_DOCUMENTS,\n SpecReferences.IETF_CIMD\n ],\n details: {\n expectedClientId: CIMD_CLIENT_METADATA_URL,\n actualClientId: data.clientId || 'none'\n }\n });\n }\n });\n\n const rsApp = createServer(this.checks, ctx.getRsBaseUrl, getAsUrl);\n\n return { rs: rsApp, aux: { as: authApp } };\n }\n\n getChecks(): ConformanceCheck[] {\n // Ensure we have the CIMD check - if not, the client didn't make an auth request\n const hasCimdCheck = this.checks.some(\n (c) => c.id === 'cimd-client-id-used'\n );\n if (!hasCimdCheck) {\n this.checks.push({\n id: 'cimd-client-id-used',\n name: 'Client ID Metadata Document Usage',\n description:\n 'Client did not make an authorization request to test CIMD support',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n specReferences: [\n SpecReferences.MCP_CLIENT_ID_METADATA_DOCUMENTS,\n SpecReferences.IETF_CIMD\n ]\n });\n }\n\n return this.checks;\n }\n}\n",[],[135,262,429,525,614],"33dcf192-4425-450c-bb29-8043837689ac","authorization-server-migration.ts","e116223c-ad13-11f1-b438-1607ee4eb77e",45,["D",1789043631695],"/**\n * SEP-2352 — Authorization-server binding and migration.\n *\n * The MCP server's PRM initially lists AS₁. The client registers, authorizes,\n * and calls tools/list. The harness then invalidates the token and flips PRM\n * to AS₂. On the next 401 the client re-discovers PRM, sees a new issuer, and\n * MUST re-register with AS₂ rather than reuse AS₁'s client credentials.\n */\nimport type { Request, Response, NextFunction } from 'npm:express@^5.1.0';\nimport type { Scenario, ConformanceCheck } from '../../../types.ts';\nimport { ScenarioUrls, DRAFT_PROTOCOL_VERSION } from '../../../types.ts';\nimport { createAuthServer } from './helpers/createAuthServer.ts';\nimport { createServer } from './helpers/createServer.ts';\nimport { ServerLifecycle } from './helpers/serverLifecycle.ts';\nimport { MockTokenVerifier } from './helpers/mockTokenVerifier.ts';\nimport { SpecReferences } from './spec-references.ts';\n\nexport class AuthorizationServerMigrationScenario implements Scenario {\n name = 'auth/authorization-server-migration';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n description =\n 'Tests that a client, when the PRM authorization_servers changes to a new issuer, re-registers with the new authorization server and does not reuse credentials from the previous one (SEP-2352).';\n private as1 = new ServerLifecycle();\n private as2 = new ServerLifecycle();\n private server = new ServerLifecycle();\n private checks: ConformanceCheck[] = [];\n\n async start(): Promise {\n this.checks = [];\n const tokenVerifier = new MockTokenVerifier(this.checks, ['mcp:basic']);\n\n /** AS₁ issues a recognizable client_id so AS₂ can detect cross-AS reuse. */\n const AS1_CLIENT_ID = 'as1-client-id-LEAKED-IF-SEEN-AT-AS2';\n let as2SawRegister = false;\n let as2SawAs1ClientId = false;\n let as2SawAs1ClientIdAtToken = false;\n\n // ── AS₁ ────────────────────────────────────────────────────────────────\n const as1App = createAuthServer(this.checks, this.as1.getUrl, {\n tokenVerifier,\n onRegistrationRequest: () => ({\n clientId: AS1_CLIENT_ID,\n clientSecret: 'as1-client-secret'\n })\n });\n await this.as1.start(as1App);\n\n // ── AS₂ ────────────────────────────────────────────────────────────────\n const as2App = createAuthServer(this.checks, this.as2.getUrl, {\n tokenVerifier,\n onRegistrationRequest: () => {\n as2SawRegister = true;\n return { clientId: 'as2-client-id', clientSecret: 'as2-client-secret' };\n },\n onAuthorizationRequest: (data) => {\n if (data.clientId === AS1_CLIENT_ID) as2SawAs1ClientId = true;\n },\n onTokenRequest: (data) => {\n const cid =\n data.body.client_id ??\n this.basicAuthClientId(data.authorizationHeader);\n if (cid === AS1_CLIENT_ID) as2SawAs1ClientIdAtToken = true;\n const scopes = data.scope ? data.scope.split(' ') : ['mcp:basic'];\n const token = `test-token-as2-${Date.now()}`;\n tokenVerifier.registerToken(token, scopes);\n return { token, scopes };\n }\n });\n await this.as2.start(as2App);\n\n // ── MCP server with mutable PRM authorization_servers ──────────────────\n let migrated = false;\n const currentAuthServerUrl = () =>\n migrated ? this.as2.getUrl() : this.as1.getUrl();\n\n const resourceMetadataUrl = () =>\n `${this.server.getUrl()}/.well-known/oauth-protected-resource/mcp`;\n\n const middleware = async (\n req: Request,\n res: Response,\n next: NextFunction\n ) => {\n let body = req.body;\n if (typeof body === 'string') body = JSON.parse(body);\n const method = body?.method;\n // initialize / notifications never require auth\n if (method === 'initialize' || method?.startsWith('notifications/'))\n return next();\n\n const auth = req.headers.authorization;\n if (!auth || !auth.startsWith('Bearer ')) {\n return res\n .status(401)\n .set(\n 'WWW-Authenticate',\n `Bearer scope=\"mcp:basic\", resource_metadata=\"${resourceMetadataUrl()}\"`\n )\n .json({ error: 'invalid_token' });\n }\n const token = auth.substring('Bearer '.length);\n const info = await tokenVerifier.verifyAccessToken(token);\n\n // Phase 1: accept any verified token, then flip PRM to AS₂ for the next\n // call. Phase 2: reject the (now-stale) AS₁ token so the client\n // re-discovers PRM and sees AS₂.\n if (!migrated) {\n migrated = true;\n return next();\n }\n // After migration, only AS₂ tokens are valid.\n if (!info.token.startsWith('test-token-as2-')) {\n return res\n .status(401)\n .set(\n 'WWW-Authenticate',\n `Bearer scope=\"mcp:basic\", resource_metadata=\"${resourceMetadataUrl()}\"`\n )\n .json({\n error: 'invalid_token',\n error_description: 'authorization server has changed'\n });\n }\n return next();\n };\n\n const app = createServer(\n this.checks,\n this.server.getUrl,\n currentAuthServerUrl,\n {\n prmPath: '/.well-known/oauth-protected-resource/mcp',\n requiredScopes: ['mcp:basic'],\n includeScopeInWwwAuth: true,\n authMiddleware: middleware,\n tokenVerifier\n }\n );\n await this.server.start(app);\n\n // Record evaluation closures so getChecks can see them after stop().\n this._evaluate = () => {\n const ts = new Date().toISOString();\n const reusedAtAS2 = as2SawAs1ClientId || as2SawAs1ClientIdAtToken;\n this.checks.push({\n id: 'sep-2352-reregister-on-as-change',\n name: 'Client re-registers with the new authorization server',\n description: as2SawRegister\n ? 'Client performed Dynamic Client Registration with the new authorization server after PRM authorization_servers changed'\n : 'Client MUST re-register with the new authorization server when PRM authorization_servers changes (SEP-2352); no registration request was observed at the new AS',\n status: as2SawRegister ? 'SUCCESS' : 'FAILURE',\n timestamp: ts,\n specReferences: [SpecReferences.MCP_DCR]\n });\n this.checks.push({\n id: 'sep-2352-no-reuse-on-as-change',\n name: 'Client does not reuse the previous AS client credentials',\n description: reusedAtAS2\n ? 'Client MUST NOT reuse client credentials from a different authorization server (SEP-2352); the previous AS client_id was observed at the new AS'\n : 'Client did not present the previous AS client_id at the new authorization server',\n status: reusedAtAS2 ? 'FAILURE' : 'SUCCESS',\n timestamp: ts,\n specReferences: [SpecReferences.MCP_DCR],\n details: {\n previousClientId: AS1_CLIENT_ID,\n seenAtAuthorize: as2SawAs1ClientId,\n seenAtToken: as2SawAs1ClientIdAtToken\n }\n });\n // The \"no cross-AS credential reuse\" general MUST NOT is the same wire\n // observation as no-reuse-on-as-change in this scenario; emit it as a\n // distinct id so the yaml traceability is 1:1.\n this.checks.push({\n id: 'sep-2352-no-cross-as-credential-reuse',\n name: 'Client does not assume credentials are portable across authorization servers',\n description: reusedAtAS2\n ? 'Client MUST NOT assume that credentials valid for one authorization server will be accepted by another (SEP-2352)'\n : 'Client treated credentials as bound to the issuing authorization server',\n status: reusedAtAS2 ? 'FAILURE' : 'SUCCESS',\n timestamp: ts,\n specReferences: [SpecReferences.MCP_DCR]\n });\n };\n\n return { serverUrl: `${this.server.getUrl()}/mcp` };\n }\n\n private _evaluate: () => void = () => {};\n\n private basicAuthClientId(h?: string): string | undefined {\n if (!h?.startsWith('Basic ')) return undefined;\n try {\n const [id] = Buffer.from(h.slice(6), 'base64')\n .toString('utf8')\n .split(':');\n return id;\n } catch {\n return undefined;\n }\n }\n\n async stop() {\n await this.server.stop();\n await this.as1.stop();\n await this.as2.stop();\n }\n\n getChecks(): ConformanceCheck[] {\n this._evaluate();\n return this.checks;\n }\n}\n",[],[135,262,429,525,622],"870736fb-329e-4e00-8b4e-807885c2d256","createServer.ts","e00a1542-ad13-11f1-9a10-1607ee4eb77e","b85beddf-8327-41a0-94d9-2f182822625e",42,["D",1789043629938],"import { Server } from 'npm:@modelcontextprotocol/sdk@^1.29.0/server/index.js';\nimport { StreamableHTTPServerTransport } from 'npm:@modelcontextprotocol/sdk@^1.29.0/server/streamableHttp.js';\nimport {\n CallToolRequestSchema,\n CallToolResult,\n ErrorCode,\n ListToolsRequestSchema,\n McpError\n} from 'npm:@modelcontextprotocol/sdk@^1.29.0/types.js';\nimport { requireBearerAuth } from 'npm:@modelcontextprotocol/sdk@^1.29.0/server/auth/middleware/bearerAuth.js';\nimport express, { Request, Response, NextFunction } from 'npm:express@^5.1.0';\nimport type { ConformanceCheck } from '../../../../types.ts';\nimport { createRequestLogger } from '../../../request-logger.ts';\nimport { MockTokenVerifier } from './mockTokenVerifier.ts';\nimport { SpecReferences } from '../spec-references.ts';\n\nexport interface ServerOptions {\n prmPath?: string | null;\n requiredScopes?: string[];\n scopesSupported?: string[];\n includePrmInWwwAuth?: boolean;\n includeScopeInWwwAuth?: boolean;\n authMiddleware?: express.RequestHandler;\n tokenVerifier?: MockTokenVerifier;\n /** Override the resource field in PRM response (for testing resource mismatch) */\n prmResourceOverride?: string;\n}\n\nexport function createServer(\n checks: ConformanceCheck[],\n getBaseUrl: () => string,\n getAuthServerUrl: () => string,\n options: ServerOptions = {}\n): express.Application {\n const {\n prmPath = '/.well-known/oauth-protected-resource/mcp',\n requiredScopes = [],\n scopesSupported,\n includePrmInWwwAuth = true,\n includeScopeInWwwAuth = false,\n tokenVerifier,\n prmResourceOverride\n } = options;\n // Factory: create a fresh Server per request to avoid \"Already connected\" errors\n // after the v1.26.0 security fix (GHSA-345p-7cg4-v4c7)\n function createMcpServer() {\n const server = new Server(\n {\n name: 'auth-prm-pathbased-server',\n version: '1.0.0'\n },\n {\n capabilities: {\n tools: {}\n }\n }\n );\n\n server.setRequestHandler(ListToolsRequestSchema, async () => {\n return {\n tools: [\n {\n name: 'test-tool',\n inputSchema: { type: 'object' }\n }\n ]\n };\n });\n\n server.setRequestHandler(\n CallToolRequestSchema,\n async (request): Promise => {\n if (request.params.name === 'test-tool') {\n return {\n content: [{ type: 'text', text: 'test' }]\n };\n }\n throw new McpError(\n ErrorCode.InvalidParams,\n `Tool ${request.params.name} not found`\n );\n }\n );\n\n return server;\n }\n\n const app = express();\n app.use(express.json());\n\n app.use(\n createRequestLogger(checks, {\n incomingId: 'incoming-request',\n outgoingId: 'outgoing-response',\n mcpRoute: '/mcp'\n })\n );\n\n if (prmPath !== null) {\n app.get(prmPath, (req: Request, res: Response) => {\n checks.push({\n id: 'prm-pathbased-requested',\n name: 'PRMPathBasedRequested',\n description: 'Client requested PRM metadata at path-based location',\n status: 'SUCCESS',\n timestamp: new Date().toISOString(),\n specReferences: [\n SpecReferences.RFC_PRM_DISCOVERY,\n SpecReferences.MCP_PRM_DISCOVERY\n ],\n details: {\n url: req.url,\n path: req.path\n }\n });\n\n // Resource is usually $baseUrl/mcp, but if PRM is at the root,\n // the resource identifier is the root.\n // Can be overridden via prmResourceOverride for testing resource mismatch.\n const resource =\n prmResourceOverride ??\n (prmPath === '/.well-known/oauth-protected-resource'\n ? getBaseUrl()\n : `${getBaseUrl()}/mcp`);\n\n const prmResponse: any = {\n resource,\n authorization_servers: [getAuthServerUrl()]\n };\n\n if (scopesSupported !== undefined) {\n prmResponse.scopes_supported = scopesSupported;\n }\n\n res.json(prmResponse);\n });\n }\n\n app.post('/mcp', async (req: Request, res: Response, next: NextFunction) => {\n // Apply bearer token auth per-request in order to delay setting PRM URL\n // until after the server has started\n // TODO: Find a way to do this w/ pre-applying middleware.\n const verifier =\n tokenVerifier || new MockTokenVerifier(checks, requiredScopes);\n\n const authMiddleware =\n options.authMiddleware ??\n requireBearerAuth({\n verifier,\n // Only pass requiredScopes if we want them in the WWW-Authenticate header\n requiredScopes: includeScopeInWwwAuth ? requiredScopes : [],\n ...(includePrmInWwwAuth &&\n prmPath !== null && {\n resourceMetadataUrl: `${getBaseUrl()}${prmPath}`\n })\n });\n\n authMiddleware(req, res, async (err?: any) => {\n if (err) return next(err);\n const server = createMcpServer();\n const transport = new StreamableHTTPServerTransport({\n sessionIdGenerator: undefined\n });\n\n try {\n await server.connect(transport);\n\n await transport.handleRequest(req, res, req.body);\n res.on('close', () => {\n transport.close();\n server.close();\n });\n } catch (error) {\n console.error('Error handling MCP request:', error);\n if (!res.headersSent) {\n res.status(500).json({\n jsonrpc: '2.0',\n error: {\n code: -32603,\n message: 'Internal server error'\n },\n id: null\n });\n }\n }\n });\n });\n\n return app;\n}\n",[],[135,262,429,525,638,630],"helpers","c5f857c6-09a9-46cd-90c6-45c73d7dced2","createAuthServer.ts","e06d5044-ad13-11f1-84e1-1607ee4eb77e",43,["D",1789043630629],"import express, { Request, Response } from 'npm:express@^5.1.0';\nimport { createHash } from 'node:crypto';\nimport type { ConformanceCheck } from '../../../../types.ts';\nimport { createRequestLogger } from '../../../request-logger.ts';\nimport { SpecReferences } from '../spec-references.ts';\nimport { MockTokenVerifier } from './mockTokenVerifier.ts';\n\n/**\n * The authorization code is opaque to the client, so we use it to carry the\n * per-flow state (PKCE challenge, requested scopes) from /authorize to\n * /token. This keeps the AS stateless across processes — on serverless hosts\n * (val.town) the two requests can land on different isolates, where closure\n * state from /authorize doesn't exist. The closure variables remain as a\n * fallback for flows that don't round-trip our code (e.g. hand-rolled tests).\n */\ninterface AuthCodeState {\n challenge?: string;\n scopes?: string[];\n}\n\nconst AUTH_CODE_PREFIX = 'test-auth-code';\n\nfunction encodeAuthCode(state: AuthCodeState): string {\n return `${AUTH_CODE_PREFIX}.${Buffer.from(JSON.stringify(state)).toString('base64url')}`;\n}\n\nfunction decodeAuthCode(code: string | undefined): AuthCodeState | undefined {\n if (!code?.startsWith(`${AUTH_CODE_PREFIX}.`)) return undefined;\n try {\n return JSON.parse(\n Buffer.from(\n code.slice(AUTH_CODE_PREFIX.length + 1),\n 'base64url'\n ).toString()\n ) as AuthCodeState;\n } catch {\n return undefined;\n }\n}\n\n/**\n * Compute S256 code challenge from a code verifier.\n * BASE64URL(SHA256(code_verifier))\n */\nfunction computeS256Challenge(codeVerifier: string): string {\n const hash = createHash('sha256').update(codeVerifier).digest();\n return hash\n .toString('base64')\n .replace(/\\+/g, '-')\n .replace(/\\//g, '_')\n .replace(/=+$/, '');\n}\n\nexport interface TokenRequestResult {\n token: string;\n scopes: string[];\n}\n\nexport interface TokenRequestError {\n error: string;\n errorDescription?: string;\n statusCode?: number;\n}\n\nexport interface AuthServerOptions {\n metadataPath?: string;\n isOpenIdConfiguration?: boolean;\n loggingEnabled?: boolean;\n routePrefix?: string;\n scopesSupported?: string[];\n grantTypesSupported?: string[];\n tokenEndpointAuthMethodsSupported?: string[];\n tokenEndpointAuthSigningAlgValuesSupported?: string[];\n clientIdMetadataDocumentSupported?: boolean;\n /** Set to true to NOT advertise registration_endpoint (for pre-registration tests) */\n disableDynamicRegistration?: boolean;\n /** PKCE code_challenge_methods_supported. Set to null to omit from metadata. Default: ['S256'] */\n codeChallengeMethodsSupported?: string[] | null;\n /** Advertise authorization_response_iss_parameter_supported in AS metadata. Default: true. Pass null to omit. */\n issParameterSupported?: boolean | null;\n /**\n * What iss value to include in authorization redirect. Default: 'correct'.\n * 'normalized' sends a normalization-equivalent variant of the correct\n * issuer (trailing slash appended, exactly what `new URL(x).href`\n * round-tripping produces) — equal under RFC 3986 §6.2.2–6.2.3\n * normalization but not under simple string comparison.\n */\n issInRedirect?: 'correct' | 'wrong' | 'omit' | 'normalized';\n /**\n * Override the `issuer` value served in the AS metadata document. Used to\n * test that clients validate the metadata issuer against the issuer\n * identifier used to construct the well-known URL (RFC 8414 §3.3).\n */\n metadataIssuer?: string;\n tokenVerifier?: MockTokenVerifier;\n onTokenRequest?: (requestData: {\n scope?: string;\n grantType: string;\n timestamp: string;\n body: Record;\n authBaseUrl: string;\n tokenEndpoint: string;\n authorizationHeader?: string;\n }) =>\n | TokenRequestResult\n | TokenRequestError\n | Promise;\n onAuthorizationRequest?: (requestData: {\n clientId?: string;\n scope?: string;\n resource?: string;\n timestamp: string;\n }) => void;\n onRegistrationRequest?: (req: Request) => {\n clientId: string;\n clientSecret?: string;\n tokenEndpointAuthMethod?: string;\n };\n}\n\nexport function createAuthServer(\n checks: ConformanceCheck[],\n getAuthBaseUrl: () => string,\n options: AuthServerOptions = {}\n): express.Application {\n const {\n metadataPath = '/.well-known/oauth-authorization-server',\n isOpenIdConfiguration = false,\n loggingEnabled = true,\n routePrefix = '',\n scopesSupported,\n grantTypesSupported = ['authorization_code', 'refresh_token'],\n tokenEndpointAuthMethodsSupported = ['none'],\n tokenEndpointAuthSigningAlgValuesSupported,\n clientIdMetadataDocumentSupported,\n disableDynamicRegistration = false,\n codeChallengeMethodsSupported = ['S256'],\n issParameterSupported = true,\n issInRedirect = 'correct',\n metadataIssuer,\n tokenVerifier,\n onTokenRequest,\n onAuthorizationRequest,\n onRegistrationRequest\n } = options;\n\n // Track scopes from the most recent authorization request\n let lastAuthorizationScopes: string[] = [];\n // Track PKCE code_challenge for verification in token request\n let storedCodeChallenge: string | undefined;\n\n const authRoutes = {\n authorization_endpoint: `${routePrefix}/authorize`,\n token_endpoint: `${routePrefix}/token`,\n registration_endpoint: `${routePrefix}/register`\n };\n\n const app = express();\n app.use(express.json());\n app.use(express.urlencoded({ extended: true }));\n\n if (loggingEnabled) {\n app.use(\n createRequestLogger(checks, {\n incomingId: 'incoming-auth-request',\n outgoingId: 'outgoing-auth-response'\n })\n );\n }\n\n app.get(metadataPath, (req: Request, res: Response) => {\n checks.push({\n id: 'authorization-server-metadata',\n name: 'AuthorizationServerMetadata',\n description: 'Client requested authorization server metadata',\n status: 'SUCCESS',\n timestamp: new Date().toISOString(),\n specReferences: [\n SpecReferences.RFC_AUTH_SERVER_METADATA_REQUEST,\n SpecReferences.MCP_AUTH_DISCOVERY\n ],\n details: {\n url: req.url,\n path: req.path\n }\n });\n\n const metadata: any = {\n issuer: metadataIssuer ?? `${getAuthBaseUrl()}${routePrefix}`,\n authorization_endpoint: `${getAuthBaseUrl()}${authRoutes.authorization_endpoint}`,\n token_endpoint: `${getAuthBaseUrl()}${authRoutes.token_endpoint}`,\n ...(!disableDynamicRegistration && {\n registration_endpoint: `${getAuthBaseUrl()}${authRoutes.registration_endpoint}`\n }),\n response_types_supported: ['code'],\n grant_types_supported: grantTypesSupported,\n // PKCE support - null means omit from metadata (for negative testing)\n ...(codeChallengeMethodsSupported !== null && {\n code_challenge_methods_supported: codeChallengeMethodsSupported\n }),\n ...(issParameterSupported !== null && {\n authorization_response_iss_parameter_supported: issParameterSupported\n }),\n token_endpoint_auth_methods_supported: tokenEndpointAuthMethodsSupported,\n ...(tokenEndpointAuthSigningAlgValuesSupported && {\n token_endpoint_auth_signing_alg_values_supported:\n tokenEndpointAuthSigningAlgValuesSupported\n })\n };\n\n // Add scopes_supported if provided\n if (scopesSupported !== undefined) {\n metadata.scopes_supported = scopesSupported;\n }\n\n // Add client_id_metadata_document_supported if provided\n if (clientIdMetadataDocumentSupported !== undefined) {\n metadata.client_id_metadata_document_supported =\n clientIdMetadataDocumentSupported;\n }\n\n // Add OpenID Configuration specific fields\n if (isOpenIdConfiguration) {\n metadata.jwks_uri = `${getAuthBaseUrl()}/.well-known/jwks.json`;\n metadata.subject_types_supported = ['public'];\n metadata.id_token_signing_alg_values_supported = ['RS256'];\n }\n\n res.json(metadata);\n });\n\n app.get(authRoutes.authorization_endpoint, (req: Request, res: Response) => {\n const timestamp = new Date().toISOString();\n checks.push({\n id: 'authorization-request',\n name: 'AuthorizationRequest',\n description: 'Client made authorization request',\n status: 'SUCCESS',\n timestamp,\n specReferences: [SpecReferences.OAUTH_2_1_AUTHORIZATION_ENDPOINT],\n details: {\n query: req.query\n }\n });\n\n // PKCE: Store code_challenge for later verification\n const codeChallenge = req.query.code_challenge as string | undefined;\n const codeChallengeMethod = req.query.code_challenge_method as\n | string\n | undefined;\n storedCodeChallenge = codeChallenge;\n\n // PKCE: Check code_challenge is present\n checks.push({\n id: 'pkce-code-challenge-sent',\n name: 'PKCE Code Challenge',\n description: codeChallenge\n ? 'Client sent code_challenge in authorization request'\n : 'Client MUST send code_challenge in authorization request',\n status: codeChallenge ? 'SUCCESS' : 'FAILURE',\n timestamp,\n specReferences: [SpecReferences.MCP_PKCE]\n });\n\n // PKCE: Check S256 method is used\n checks.push({\n id: 'pkce-s256-method-used',\n name: 'PKCE S256 Method',\n description:\n codeChallengeMethod === 'S256'\n ? 'Client used S256 code challenge method'\n : 'Client MUST use S256 code challenge method when technically capable',\n status: codeChallengeMethod === 'S256' ? 'SUCCESS' : 'FAILURE',\n timestamp,\n specReferences: [SpecReferences.MCP_PKCE],\n details: {\n method: codeChallengeMethod || 'not specified'\n }\n });\n\n // Track scopes from authorization request for token issuance\n const scopeParam = req.query.scope as string | undefined;\n lastAuthorizationScopes = scopeParam ? scopeParam.split(' ') : [];\n\n if (onAuthorizationRequest) {\n onAuthorizationRequest({\n clientId: req.query.client_id as string | undefined,\n scope: scopeParam,\n resource: req.query.resource as string | undefined,\n timestamp\n });\n }\n\n const redirectUri = req.query.redirect_uri as string;\n const state = req.query.state as string;\n const redirectUrl = new URL(redirectUri);\n redirectUrl.searchParams.set(\n 'code',\n encodeAuthCode({\n challenge: codeChallenge,\n scopes: lastAuthorizationScopes\n })\n );\n if (state) {\n redirectUrl.searchParams.set('state', state);\n }\n\n // ISS: Include iss parameter in redirect if configured\n if (issInRedirect === 'correct') {\n redirectUrl.searchParams.set('iss', `${getAuthBaseUrl()}${routePrefix}`);\n } else if (issInRedirect === 'wrong') {\n redirectUrl.searchParams.set('iss', 'https://evil.example.com');\n } else if (issInRedirect === 'normalized') {\n // Normalization-equivalent variant of the correct issuer: identical\n // after RFC 3986 scheme-based normalization (trailing slash on an\n // empty path) but different under simple string comparison.\n redirectUrl.searchParams.set('iss', `${getAuthBaseUrl()}${routePrefix}/`);\n }\n\n res.redirect(redirectUrl.toString());\n });\n\n app.post(authRoutes.token_endpoint, async (req: Request, res: Response) => {\n const timestamp = new Date().toISOString();\n const requestedScope = req.body.scope;\n const grantType = req.body.grant_type;\n\n // Recover per-flow state from the code itself (survives process changes\n // on serverless hosts); fall back to closure state for codes we didn't\n // mint via encodeAuthCode.\n const codeState = decodeAuthCode(req.body.code as string | undefined);\n const flowChallenge = codeState?.challenge ?? storedCodeChallenge;\n const flowScopes = codeState?.scopes ?? lastAuthorizationScopes;\n\n checks.push({\n id: 'token-request',\n name: 'TokenRequest',\n description: 'Client requested access token',\n status: 'SUCCESS',\n timestamp,\n specReferences: [SpecReferences.OAUTH_2_1_TOKEN],\n details: {\n endpoint: '/token',\n grantType\n }\n });\n\n // PKCE: Check code_verifier is present (only for authorization_code grant)\n const codeVerifier = req.body.code_verifier as string | undefined;\n if (grantType === 'authorization_code') {\n checks.push({\n id: 'pkce-code-verifier-sent',\n name: 'PKCE Code Verifier',\n description: codeVerifier\n ? 'Client sent code_verifier in token request'\n : 'Client MUST send code_verifier in token request',\n status: codeVerifier ? 'SUCCESS' : 'FAILURE',\n timestamp,\n specReferences: [SpecReferences.MCP_PKCE]\n });\n\n // PKCE: Validate code_verifier matches code_challenge (S256)\n // Fail if either is missing\n const computedChallenge =\n codeVerifier && flowChallenge\n ? computeS256Challenge(codeVerifier)\n : undefined;\n const matches =\n computedChallenge !== undefined && computedChallenge === flowChallenge;\n\n let description: string;\n if (!flowChallenge && !codeVerifier) {\n description =\n 'Neither code_challenge nor code_verifier were sent - PKCE is required';\n } else if (!flowChallenge) {\n description =\n 'code_challenge was not sent in authorization request - PKCE is required';\n } else if (!codeVerifier) {\n description =\n 'code_verifier was not sent in token request - PKCE is required';\n } else if (matches) {\n description = 'code_verifier correctly matches code_challenge (S256)';\n } else {\n description = 'code_verifier does not match code_challenge';\n }\n\n checks.push({\n id: 'pkce-verifier-matches-challenge',\n name: 'PKCE Verifier Validation',\n description,\n status: matches ? 'SUCCESS' : 'FAILURE',\n timestamp,\n specReferences: [SpecReferences.MCP_PKCE],\n details: {\n matches,\n storedChallenge: flowChallenge || 'not sent',\n computedChallenge: computedChallenge || 'not computed'\n }\n });\n }\n\n let token = `test-token-${Date.now()}`;\n let scopes: string[] = flowScopes;\n\n if (onTokenRequest) {\n const result = await onTokenRequest({\n scope: requestedScope,\n grantType,\n timestamp,\n body: req.body,\n authBaseUrl: getAuthBaseUrl(),\n tokenEndpoint: `${getAuthBaseUrl()}${authRoutes.token_endpoint}`,\n authorizationHeader: req.headers.authorization\n });\n\n // Check if result is an error\n if ('error' in result) {\n res.status(result.statusCode || 400).json({\n error: result.error,\n error_description: result.errorDescription\n });\n return;\n }\n\n token = result.token;\n scopes = result.scopes;\n }\n\n // Register token with verifier if provided\n if (tokenVerifier) {\n tokenVerifier.registerToken(token, scopes);\n }\n\n res.json({\n access_token: token,\n token_type: 'Bearer',\n expires_in: 3600,\n ...(scopes.length > 0 && { scope: scopes.join(' ') })\n });\n });\n\n app.post(authRoutes.registration_endpoint, (req: Request, res: Response) => {\n let clientId = 'test-client-id';\n let clientSecret: string | undefined = 'test-client-secret';\n let tokenEndpointAuthMethod: string | undefined;\n\n if (onRegistrationRequest) {\n const result = onRegistrationRequest(req);\n clientId = result.clientId;\n clientSecret = result.clientSecret;\n tokenEndpointAuthMethod = result.tokenEndpointAuthMethod;\n }\n\n checks.push({\n id: 'client-registration',\n name: 'ClientRegistration',\n description: 'Client registered with authorization server',\n status: 'SUCCESS',\n timestamp: new Date().toISOString(),\n specReferences: [SpecReferences.MCP_DCR],\n details: {\n endpoint: '/register',\n clientName: req.body.client_name,\n ...(tokenEndpointAuthMethod && { tokenEndpointAuthMethod })\n }\n });\n\n // SEP-837: clients MUST specify an appropriate application_type during DCR.\n // The harness can't know the client's real class (native vs web), so this\n // checks presence + that the value is one of the two OIDC-defined values.\n const appType = req.body.application_type;\n const validAppType = appType === 'native' || appType === 'web';\n checks.push({\n id: 'sep-837-application-type-present',\n name: 'DCR application_type specified',\n description: validAppType\n ? `Client specified application_type \"${appType}\" during Dynamic Client Registration`\n : appType === undefined\n ? 'Client MUST specify an appropriate application_type during Dynamic Client Registration (SEP-837); field was omitted'\n : `Client MUST specify an appropriate application_type during Dynamic Client Registration (SEP-837); got \"${appType}\", expected \"native\" or \"web\"`,\n status: validAppType ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n specReferences: [SpecReferences.MCP_DCR],\n details: { application_type: appType ?? '(omitted)' }\n });\n\n res.status(201).json({\n client_id: clientId,\n ...(clientSecret && { client_secret: clientSecret }),\n client_name: req.body.client_name || 'test-client',\n redirect_uris: req.body.redirect_uris || [],\n ...(tokenEndpointAuthMethod && {\n token_endpoint_auth_method: tokenEndpointAuthMethod\n })\n });\n });\n\n return app;\n}\n",[],[135,262,429,525,638,640],"baa38abc-a03c-47a8-a9e4-609b3afc545a",["D",1789043629938],[179,180],[135,262,429,525,638],"31fab290-500f-4847-9ad7-4cd67426359a",["D",1789043614323],[178,181,182,183,184,185,186,187,188,189,190,191,192,193,194],[135,262,429,525],"a7cfba3d-3417-4acf-85ba-a2082af37347",["D",1789043611708],[177,195,196,197,198,199,200,201,202,203,204,205,206],[135,262,429],"3124931c-1f0b-4235-b5d2-bf0f2a6ca2b1","authorization-server-metadata.ts","d6671c56-ad13-11f1-a650-1607ee4eb77e","915f928e-42c4-4864-a297-c3b2a55525d0",14,["D",1789043613775],"/**\n * Authorization server metadata endpoint test scenarios for MCP authorization servers\n */\nimport {\n ClientScenarioForAuthorizationServer,\n ConformanceCheck\n} from '../../types.ts';\nimport { request } from 'npm:undici@^7.25.0';\n\ntype Status = 'SUCCESS' | 'FAILURE';\n\nexport class AuthorizationServerMetadataEndpointScenario implements ClientScenarioForAuthorizationServer {\n name = 'authorization-server-metadata-endpoint';\n readonly source = { introducedIn: '2025-03-26' } as const;\n description = `Test authorization server metadata endpoint.\n\n**Authorization Server Implementation Requirements:**\n\n**Endpoint**: \\`authorization server metadata\\`\n\n**Requirements**:\n- HTTP response status code MUST be 200 OK\n- Content-Type header MUST be application/json\n- Return a JSON response including issuer, authorization_endpoint, token_endpoint and response_types_supported\n- The issuer value MUST match the URI obtained by removing the well-known URI string from the authorization server metadata URI.`;\n\n async run(serverUrl: string): Promise {\n let status: Status = 'SUCCESS';\n let errorMessage: string | undefined;\n let details: any;\n let response: any | null = null;\n try {\n const wellKnownUrls = this.createWellKnownUrl(serverUrl);\n\n for (const url of wellKnownUrls) {\n try {\n const checkResponse = await request(url, { method: 'GET' });\n if (checkResponse.statusCode === 200) {\n response = checkResponse;\n break;\n }\n } catch {\n // Ignore the error and proceed to the next loop.\n }\n }\n\n if (!response) {\n throw new Error(\n 'All authorization server metadata endpoints returned invalid status code.'\n );\n }\n\n this.validateContentType(response.headers['content-type']);\n\n const body = await this.parseJson(response);\n const errors: string[] = [];\n this.validateMetadataBody(body, serverUrl, errors);\n\n if (errors.length > 0) {\n status = 'FAILURE';\n errorMessage = errors.join(', ');\n }\n\n details = {\n contentType: response.headers['content-type'],\n body\n };\n } catch (error) {\n status = 'FAILURE';\n errorMessage = error instanceof Error ? error.message : String(error);\n }\n\n return [\n {\n id: 'authorization-server-metadata',\n name: 'AuthorizationServerMetadata',\n description: 'Valid authorization server metadata response',\n status,\n timestamp: new Date().toISOString(),\n errorMessage,\n specReferences: [\n {\n id: 'Authorization-Server-Metadata',\n url: 'https://datatracker.ietf.org/doc/html/rfc8414'\n }\n ],\n ...(details ? { details } : {})\n }\n ];\n }\n\n private createWellKnownUrl(serverUrl: string): string[] {\n const base = new URL(serverUrl);\n const origin = base.origin;\n const path = base.pathname.replace(/\\/$/, '');\n\n const urls = new Set();\n urls.add(`${origin}/.well-known/oauth-authorization-server${path}`);\n urls.add(`${origin}/.well-known/openid-configuration${path}`);\n urls.add(`${origin}${path}/.well-known/openid-configuration`);\n\n return Array.from(urls);\n }\n\n private validateContentType(contentType?: string | string[]): void {\n const valid =\n typeof contentType === 'string' &&\n contentType.toLowerCase().includes('application/json');\n\n if (!valid) {\n throw new Error(`Invalid Content-Type: ${contentType ?? '(missing)'}`);\n }\n }\n\n private async parseJson(response: any): Promise> {\n const body = await response.body.json();\n if (typeof body !== 'object' || body === null) {\n throw new Error('Response body is not an object');\n }\n return body;\n }\n\n private validateMetadataBody(\n body: Record,\n serverUrl: string,\n errors: string[]\n ): void {\n this.assertString(\n body.authorization_endpoint,\n 'authorization_endpoint',\n errors\n );\n this.assertString(body.token_endpoint, 'token_endpoint', errors);\n\n if (\n !Array.isArray(body.response_types_supported) ||\n !body.response_types_supported.includes('code')\n ) {\n errors.push(\n 'Response body does not include valid \"response_types_supported\" claim'\n );\n }\n\n if (\n !Array.isArray(body.code_challenge_methods_supported) ||\n !body.code_challenge_methods_supported.includes('S256')\n ) {\n errors.push(\n 'Response body does not include valid \"code_challenge_methods_supported\" claim'\n );\n }\n\n if (body.issuer !== serverUrl) {\n errors.push(`Invalid issuer: ${body.issuer ?? '(missing)'}`);\n }\n }\n\n private assertString(value: unknown, name: string, errors: string[]): void {\n if (typeof value !== 'string' || value.length === 0) {\n errors.push(`Response body does not include valid \"${name}\" claim`);\n }\n }\n}\n",[],[135,262,668,660],"authorization-server","163255dc-656a-4a7a-80e4-cb2410065855",["D",1789043613775],[175],[135,262,668],"b6f6630c-f135-467b-8460-f1158f0e04dd",["D",1789043609699],[174,176,207,226,227],[135,262],"81fddb85-7958-40f1-8486-9040150bea52","store.ts","d343f09e-ad13-11f1-892b-1607ee4eb77e","11abc952-e3be-41e6-ac33-6929c3af1284",5,["D",1789043608531],"/**\n * Run persistence for the hosted conformance server.\n *\n * A long-lived Node process keeps every run in memory and needs none of this.\n * Serverless hosts (val.town, Deno Deploy, …) load-balance one run's requests\n * across short-lived isolates, so the isolate that answers GET /results is\n * often not the one that saw the MCP traffic. A RunStore lets each isolate\n * write through what it observed and lets any isolate serve a merged view:\n *\n * - run metadata (id → scenario) so an isolate that never saw the run can\n * still rebuild its handlers (aux-origin requests, results pages);\n * - checks, keyed by (run, writer): each isolate owns its own row and\n * replaces it wholesale after every request, so concurrent writers never\n * clobber each other and no append ordering is needed.\n *\n * The merged log is re-judged at results time by a fresh scenario instance\n * (see SessionManager.results), which is what turns \"isolate B never saw a\n * tools/call\" from a false FAILURE into the union of what A and B saw.\n */\n\nimport type { ConformanceCheck } from '../types.ts';\n\nexport interface RunStore {\n saveRun(id: string, scenarioName: string): Promise;\n /** Scenario name for a run id, or undefined if no isolate ever saw it. */\n loadRun(id: string): Promise;\n saveChecks(\n id: string,\n writer: string,\n checks: ConformanceCheck[]\n ): Promise;\n /** All writers' check lists for a run, keyed by writer id. */\n loadChecks(id: string): Promise>;\n deleteRun(id: string): Promise;\n}\n\n/** In-process store — used by tests to exercise the merge path. */\nexport class MemoryRunStore implements RunStore {\n private runs = new Map();\n private checks = new Map>();\n\n async saveRun(id: string, scenarioName: string): Promise {\n if (!this.runs.has(id)) this.runs.set(id, scenarioName);\n }\n async loadRun(id: string): Promise {\n return this.runs.get(id);\n }\n async saveChecks(\n id: string,\n writer: string,\n checks: ConformanceCheck[]\n ): Promise {\n let byWriter = this.checks.get(id);\n if (!byWriter) this.checks.set(id, (byWriter = new Map()));\n byWriter.set(\n writer,\n checks.map((c) => ({ ...c }))\n );\n }\n async loadChecks(id: string): Promise> {\n return new Map(this.checks.get(id) ?? []);\n }\n async deleteRun(id: string): Promise {\n this.runs.delete(id);\n this.checks.delete(id);\n }\n}\n",[],[135,686,678],"hosted","3032af6f-d845-4901-918a-2db95b6f2b50","session.ts","d48fd9ae-ad13-11f1-9b49-1607ee4eb77e",9,["D",1789043610719],"/**\n * Session management for the hosted conformance server.\n *\n * A \"run\" is one isolated exercise of a scenario. Each run owns a fresh\n * Scenario instance and the RequestListener it returns from handler() — no\n * loopback port, no proxy. Runs are keyed by a path-embedded id so\n * correlation works for stateless-transport clients that never echo\n * mcp-session-id.\n */\n\nimport { randomBytes } from 'node:crypto';\nimport {\n Scenario,\n ConformanceCheck,\n RequestListener,\n AuthHandlerScenario,\n AuxOriginRole\n} from '../types.ts';\nimport { getScenario, scenarios } from '../scenarios/index.ts';\nimport type { RunStore } from './store.ts';\n\nexport interface HostedRun {\n id: string;\n scenarioName: string;\n scenario: Scenario;\n /** The mounted RS handler — invoke directly with (req, res). */\n listener: RequestListener;\n /** Aux-origin handlers (AS, IdP, …) for auth scenarios. */\n auxListeners?: Partial>;\n /** Sub-path under the run prefix where the MCP endpoint lives. */\n mcpPath: string;\n createdAt: number;\n lastSeenAt: number;\n context?: Record;\n}\n\nexport interface SessionManagerOptions {\n /** Idle ms after which a run is reaped. Default 5 minutes. */\n ttlMs?: number;\n sweepIntervalMs?: number;\n /**\n * Public origins of the relay deployments, keyed by role. Required for any\n * scenario that exposes `authHandlers()`. Each value is the relay's public\n * URL (no trailing slash); per-run AS issuer becomes `/r/`.\n */\n auxOrigins?: Partial>;\n /**\n * Optional persistence so runs survive being load-balanced across\n * processes (serverless isolates). Omit for a single long-lived process.\n */\n store?: RunStore;\n}\n\n/** Results view: the scenario a run belongs to plus its judged checks. */\nexport interface RunResults {\n scenarioName: string;\n checks: ConformanceCheck[];\n}\n\n/**\n * The scenario's raw event log — what it actually observed — as opposed to\n * getChecks(), which for most client scenarios also appends \"expected X,\n * never saw it\" FAILUREs (and mutates). Persisting the raw log per process\n * and judging the merged log once is what makes multi-process hosting work.\n */\nexport function rawChecksOf(scenario: Scenario): ConformanceCheck[] {\n if (scenario.rawChecks) return scenario.rawChecks();\n const bag = (scenario as unknown as { checks?: unknown }).checks;\n if (Array.isArray(bag)) return bag as ConformanceCheck[];\n return scenario.getChecks();\n}\n\n/**\n * Judge a merged raw log with the scenario's own end-of-run logic by loading\n * it into a fresh instance. Falls back to the raw log for scenarios that\n * don't keep a plain `checks` array.\n */\nexport function finalizeChecks(\n scenarioName: string,\n merged: ConformanceCheck[]\n): ConformanceCheck[] {\n const proto = getScenario(scenarioName);\n if (!proto) return merged;\n try {\n const Ctor = proto.constructor as new () => Scenario;\n const fresh = new Ctor() as unknown as {\n checks?: unknown;\n getChecks(): ConformanceCheck[];\n };\n if (!Array.isArray(fresh.checks)) return merged;\n fresh.checks = merged.map((c) => ({ ...c }));\n return fresh.getChecks();\n } catch {\n return merged;\n }\n}\n\nexport class SessionManager {\n private runs = new Map();\n private readonly ttlMs: number;\n private readonly auxOrigins: Partial>;\n private sweeper: ReturnType;\n readonly store: RunStore | undefined;\n private pending = new Set>();\n /** Identifies this process's rows in the store. */\n readonly writerId = randomBytes(4).toString('hex');\n\n constructor(opts: SessionManagerOptions = {}) {\n this.ttlMs = opts.ttlMs ?? 5 * 60_000;\n this.auxOrigins = opts.auxOrigins ?? {};\n this.store = opts.store;\n const sweepIntervalMs = opts.sweepIntervalMs ?? 30_000;\n this.sweeper = setInterval(() => this.sweep(), sweepIntervalMs);\n this.sweeper.unref?.();\n }\n\n /**\n * Get the run for (scenario, id), creating it on first reference. The id is\n * caller-chosen so URLs are predictable; pass undefined to mint one.\n */\n getOrCreate(\n scenarioName: string,\n id: string | undefined,\n baseUrlFor: (runId: string) => string\n ): HostedRun {\n if (id) {\n const existing = this.runs.get(id);\n if (existing && existing.scenarioName === scenarioName) {\n existing.lastSeenAt = Date.now();\n return existing;\n }\n // Same id reused for a different scenario → replace, don't merge checks.\n if (existing) void this.destroy(id);\n }\n\n const proto = getScenario(scenarioName);\n if (!proto) throw new UnknownScenarioError(scenarioName);\n\n const Ctor = proto.constructor as new () => Scenario;\n const scenario = new Ctor();\n const runId = id ?? randomBytes(6).toString('base64url');\n\n let listener: RequestListener;\n let auxListeners: HostedRun['auxListeners'];\n let context: Record | undefined;\n\n if (scenario instanceof AuthHandlerScenario) {\n // Multi-origin scenario: build RS + aux handlers from authHandlers().\n // Aux issuer is /r/ so the run-id is recoverable\n // from any RFC 8414 well-known path the client constructs from it.\n const missing = scenario.auxRoles.filter((r) => !this.auxOrigins[r]);\n if (missing.length) {\n throw new NotHostableError(\n scenarioName,\n `needs aux origin(s) [${missing.join(', ')}] — start with --as-origin`\n );\n }\n const handlers = scenario.authHandlers({\n getRsBaseUrl: () => baseUrlFor(runId),\n getAuxBaseUrl: (role) => `${this.auxOrigins[role]}/r/${runId}`\n });\n listener = handlers.rs;\n auxListeners = handlers.aux;\n context = (\n scenario as unknown as {\n scenarioContext?: () => Record;\n }\n ).scenarioContext?.();\n } else if (scenario.handler) {\n listener = scenario.handler(() => baseUrlFor(runId));\n } else {\n throw new NotHostableError(scenarioName);\n }\n\n const steps = (scenario as Scenario).steps;\n if (steps) context = { ...context, steps };\n\n const run: HostedRun = {\n id: runId,\n scenarioName,\n scenario,\n listener,\n auxListeners,\n mcpPath: scenario.mcpPath ?? '',\n createdAt: Date.now(),\n lastSeenAt: Date.now(),\n context\n };\n this.runs.set(runId, run);\n void this.store?.saveRun(runId, scenarioName).catch(logStoreError);\n return run;\n }\n\n get(id: string): HostedRun | undefined {\n const r = this.runs.get(id);\n if (r) r.lastSeenAt = Date.now();\n return r;\n }\n\n /**\n * Like get(), but if this process has never seen the run and a store is\n * configured, rebuild it from persisted metadata. This is how an aux-origin\n * request or a results page lands correctly on a cold process.\n */\n async ensure(\n id: string,\n baseUrlFor: (scenarioName: string, runId: string) => string\n ): Promise {\n const local = this.get(id);\n if (local || !this.store) return local;\n let scenarioName: string | undefined;\n try {\n scenarioName = await this.store.loadRun(id);\n } catch (e) {\n logStoreError(e);\n }\n if (!scenarioName) return undefined;\n return this.getOrCreate(scenarioName, id, (rid) =>\n baseUrlFor(scenarioName, rid)\n );\n }\n\n /** Write this process's view of a run's checks through to the store. */\n persist(run: HostedRun): Promise {\n if (!this.store) return Promise.resolve();\n const p = this.store\n .saveChecks(\n run.id,\n this.writerId,\n rawChecksOf(run.scenario).map((c) => ({ ...c }))\n )\n .catch(logStoreError)\n .finally(() => this.pending.delete(p));\n this.pending.add(p);\n return p;\n }\n\n /**\n * Resolve once every in-flight persist() has settled. Serverless entry\n * points await this before handing back the response so the write isn't\n * abandoned when the isolate is frozen after responding.\n */\n async flush(): Promise {\n while (this.pending.size) await Promise.all(Array.from(this.pending));\n }\n\n /**\n * Judged checks for a run. Without a store this is the scenario's own\n * getChecks(). With a store it is every process's raw log merged (this\n * process's live log wins over its own persisted row) and re-judged once.\n */\n async results(id: string): Promise {\n const run = this.runs.get(id);\n if (!this.store) {\n return run\n ? { scenarioName: run.scenarioName, checks: run.scenario.getChecks() }\n : undefined;\n }\n let byWriter = new Map();\n try {\n byWriter = await this.store.loadChecks(id);\n } catch (e) {\n logStoreError(e);\n }\n if (run) byWriter.set(this.writerId, rawChecksOf(run.scenario));\n let scenarioName = run?.scenarioName;\n if (!scenarioName) {\n try {\n scenarioName = await this.store.loadRun(id);\n } catch (e) {\n logStoreError(e);\n }\n }\n if (!scenarioName) return undefined;\n const merged = Array.from(byWriter.values())\n .flat()\n .sort((a, b) => (a.timestamp ?? '').localeCompare(b.timestamp ?? ''));\n return { scenarioName, checks: finalizeChecks(scenarioName, merged) };\n }\n\n list(): HostedRun[] {\n return Array.from(this.runs.values());\n }\n\n async destroy(id: string, fromStore = true): Promise {\n const r = this.runs.get(id);\n if (fromStore) void this.store?.deleteRun(id).catch(logStoreError);\n if (!r) return;\n this.runs.delete(id);\n // handler() never started a server, but some scenarios hold timers/streams\n // that stop() cleans up. Safe to call even though start() wasn't.\n try {\n await r.scenario.stop();\n } catch {\n // best-effort\n }\n }\n\n async close(): Promise {\n clearInterval(this.sweeper);\n await Promise.all(\n Array.from(this.runs.keys()).map((id) => this.destroy(id, false))\n );\n }\n\n private sweep(): void {\n const now = Date.now();\n for (const [id, r] of this.runs) {\n // Local eviction only — the store has its own retention.\n if (now - r.lastSeenAt > this.ttlMs) void this.destroy(id, false);\n }\n }\n}\n\nfunction logStoreError(e: unknown): void {\n console.error('[hosted] run store:', e instanceof Error ? e.message : e);\n}\n\nexport class UnknownScenarioError extends Error {\n constructor(name: string) {\n super(\n `Unknown scenario '${name}'. Available: ${Array.from(scenarios.keys()).join(', ')}`\n );\n }\n}\n\nexport class NotHostableError extends Error {\n constructor(name: string, why?: string) {\n super(\n `Scenario '${name}' cannot run hosted` +\n (why\n ? `: ${why}`\n : ` (no handler() or authHandlers() — typically backcompat scenarios that need root-of-origin endpoints).`)\n );\n }\n}\n\n/** Scenarios that can run hosted, partitioned by what they need. */\nexport function listHostableScenarios(\n withAuxOrigins: readonly AuxOriginRole[] = []\n): string[] {\n const have = new Set(withAuxOrigins);\n return Array.from(scenarios.entries())\n .filter(([, s]) => {\n if (typeof s.handler === 'function') return true;\n if (s instanceof AuthHandlerScenario) {\n return s.auxRoles.every((r) => have.has(r));\n }\n return false;\n })\n .map(([name]) => name);\n}\n",[],[135,686,688],"9dfe4842-b567-4fbf-95e3-81576c7acf0a","server.ts","d2f92186-ad13-11f1-b27a-1607ee4eb77e",["D",1789043608031],"/**\n * Hosted conformance server — direct-mount, no loopback proxy.\n *\n * URL scheme (run-id is path-embedded so stateless-transport clients work):\n *\n * ALL /s//[/] Mounted scenario handler. The run\n * is created lazily on first hit;\n * pick any you like.\n * GET /s/ Convenience: mints a fresh run-id\n * and returns {mcpUrl, resultsUrl}.\n * GET /results/ JSON {summary, checks}\n * GET /results/.html Pretty HTML report\n * GET /scenarios JSON list of hostable scenarios\n * GET / Landing page\n * POST /mcp Meta-MCP: list_scenarios,\n * start_run, get_results\n *\n * Scenarios are mounted via Scenario.handler() — the same RequestListener the\n * CLI runner wraps in http.createServer — so there is no loopback port and\n * this works on serverless hosts. Each run gets a fresh Scenario instance.\n */\n\nimport express, { Request, Response } from 'npm:express@^5.1.0';\nimport { ServerResponse } from 'node:http';\nimport { timingSafeEqual } from 'node:crypto';\nimport { Server } from 'npm:@modelcontextprotocol/sdk@^1.29.0/server/index.js';\nimport { StreamableHTTPServerTransport } from 'npm:@modelcontextprotocol/sdk@^1.29.0/server/streamableHttp.js';\nimport {\n CallToolRequestSchema,\n ListToolsRequestSchema,\n CallToolResult\n} from 'npm:@modelcontextprotocol/sdk@^1.29.0/types.js';\nimport {\n SessionManager,\n HostedRun,\n UnknownScenarioError,\n NotHostableError,\n listHostableScenarios\n} from './session.ts';\nimport { renderLanding, renderResults } from './html.ts';\nimport type { RunStore } from './store.ts';\nimport { getScenario } from '../scenarios/index.ts';\nimport {\n ConformanceCheck,\n AuxOriginRole,\n AuthHandlerScenario,\n RequestListener,\n Scenario\n} from '../types.ts';\n\nexport interface HostedServerOptions {\n publicOrigin?: string;\n ttlMs?: number;\n /**\n * Public origins of the AS/IdP relay deployments. When set, scenarios that\n * implement `authHandlers()` become hostable; their per-run AS issuer is\n * `/r/`. See examples/hosted/valtown-relay.ts.\n */\n auxOrigins?: Partial>;\n /**\n * Shared secret the relay sends in `x-relay-secret`. `/__aux/*` rejects\n * requests without it so the aux backchannel can't be hit directly. Set\n * the same value in the relay's env.\n */\n relaySecret?: string;\n /**\n * Persist runs so a deployment that load-balances one run's requests\n * across processes (serverless isolates) still serves complete results.\n * See ./store.ts. Omit for a single long-lived process.\n */\n store?: RunStore;\n}\n\n/** Only allow run-ids that are safe in a single path segment. */\nconst RUN_ID_RE = /^[A-Za-z0-9_-]{1,64}$/;\n\nconst AUX_ROLES: readonly AuxOriginRole[] = ['as', 'as2', 'idp'];\n\n// ---------------------------------------------------------------------------\n// Stateless (\"/x\") mounting support.\n//\n// /x/ mounts a scenario with NO run-id and NO results polling: a\n// fresh scenario instance judges each request on its own content, and if the\n// request itself violates a conformance requirement the response is replaced\n// with a 400 explaining which checks failed. This only behaves sensibly for\n// scenarios whose checks are per-request (no cross-request memory) — which\n// is also exactly what serverless hosts with multiple isolates can support.\n// ---------------------------------------------------------------------------\n\n/** Scenarios whose checks need cross-request or timing state — excluded. */\nconst NOT_STATELESS = new Set(['sse-retry']);\n\n/**\n * The aux relay correlates flows by a /r/ in the path. In stateless\n * mode that segment encodes the scenario name instead of a run-id\n * ('auth/metadata-default' → 'x--auth--metadata-default'); run-ids can't\n * collide with it because '--' never appears in minted ids and the prefix is\n * reserved.\n */\nconst STATELESS_SLUG_PREFIX = 'x--';\nfunction statelessSlug(scenarioName: string): string {\n return STATELESS_SLUG_PREFIX + scenarioName.split('/').join('--');\n}\nfunction decodeStatelessSlug(segment: string): string | undefined {\n if (!segment.startsWith(STATELESS_SLUG_PREFIX)) return undefined;\n return segment.slice(STATELESS_SLUG_PREFIX.length).split('--').join('/');\n}\n\ninterface CapturedResponse {\n status: number;\n headers: Record;\n body: Buffer;\n}\n\n/**\n * Run a scenario listener against a buffered response so the outcome can be\n * judged (and replaced) after the handler finishes. Same interception\n * surface the valtown bridge uses: writeHead/setHeader/write/end and the\n * statusCode property — everything express and the SDK transport touch.\n */\nfunction runCaptured(\n listener: RequestListener,\n req: Request,\n rewrittenUrl: string\n): Promise {\n return new Promise((resolve, reject) => {\n const headers: Record = {};\n const chunks: Buffer[] = [];\n let status = 200;\n\n const fake = new ServerResponse(req) as ServerResponse;\n const captureHeaders = (\n h?: Record\n ): void => {\n for (const [k, v] of Object.entries(h ?? {})) {\n headers[k.toLowerCase()] = Array.isArray(v) ? v : String(v);\n }\n };\n fake.setHeader = ((k: string, v: string | string[] | number) => {\n headers[k.toLowerCase()] = Array.isArray(v) ? v : String(v);\n return fake;\n }) as ServerResponse['setHeader'];\n fake.getHeader = (k: string) => headers[k.toLowerCase()];\n fake.removeHeader = (k: string) => {\n delete headers[k.toLowerCase()];\n };\n fake.writeHead = ((code: number, h?: Record) => {\n status = code;\n captureHeaders(h);\n return fake;\n }) as ServerResponse['writeHead'];\n fake.write = ((c: string | Buffer, enc?: BufferEncoding) => {\n if (c) chunks.push(typeof c === 'string' ? Buffer.from(c, enc) : c);\n return true;\n }) as ServerResponse['write'];\n fake.flushHeaders = () => {};\n Object.defineProperty(fake, 'statusCode', {\n get: () => status,\n set: (v: number) => {\n status = v;\n }\n });\n fake.end = ((c?: string | Buffer, enc?: BufferEncoding) => {\n if (c) chunks.push(typeof c === 'string' ? Buffer.from(c, enc) : c);\n resolve({ status, headers, body: Buffer.concat(chunks) });\n return fake;\n }) as ServerResponse['end'];\n\n req.url = rewrittenUrl;\n try {\n listener(req, fake);\n } catch (e) {\n reject(e instanceof Error ? e : new Error(String(e)));\n }\n });\n}\n\nexport function createHostedApp(opts: HostedServerOptions = {}): {\n app: express.Application;\n sessions: SessionManager;\n} {\n const auxOrigins = opts.auxOrigins ?? {};\n const haveAux = AUX_ROLES.filter((r) => auxOrigins[r]);\n const sessions = new SessionManager({\n ttlMs: opts.ttlMs,\n auxOrigins,\n store: opts.store\n });\n const app = express();\n const hostable = new Set(listHostableScenarios(haveAux));\n\n function origin(req: Request): string {\n if (opts.publicOrigin) return opts.publicOrigin;\n const proto = (req.header('x-forwarded-proto') ?? req.protocol) || 'http';\n const host = req.header('x-forwarded-host') ?? req.header('host');\n return `${proto}://${host}`;\n }\n\n function runBaseUrl(req: Request, scenario: string, runId: string): string {\n return `${origin(req)}/s/${scenario}/${runId}`;\n }\n\n /**\n * Resolve \"//\" against the hostable set.\n * Scenario names may contain '/', so try progressively longer prefixes.\n * Returns undefined if no hostable scenario matches the prefix.\n */\n function resolveRun(rest: string):\n | {\n scenarioName: string;\n runId: string | undefined;\n suffix: string;\n }\n | undefined {\n const segments = rest.split('/');\n for (let i = 1; i <= segments.length; i++) {\n const candidate = segments.slice(0, i).join('/');\n if (hostable.has(candidate)) {\n const runId = segments[i] || undefined;\n const suffix = '/' + segments.slice(i + 1).join('/');\n return { scenarioName: candidate, runId, suffix };\n }\n }\n return undefined;\n }\n\n /**\n * Dispatch (req, res) to `listener` after rewriting `req.url` so the\n * scenario sees the path it would have under start()/stop() — i.e. with\n * the run-prefix stripped and (for well-known dispatch) the well-known\n * prefix re-prepended.\n */\n function dispatch(\n run: HostedRun,\n listener: (req: Request, res: Response) => void,\n req: Request,\n res: Response,\n rewrittenUrl: string\n ) {\n res.setHeader(\n 'link',\n `<${origin(req)}/results/${run.id}>; rel=\"conformance-results\"`\n );\n req.url = rewrittenUrl;\n if (sessions.store) {\n // Write this process's view through once the scenario has answered\n // (hosted scenarios record their checks before calling end()).\n // Serverless entry points should await sessions.flush() before\n // returning the response so this write isn't abandoned.\n const end = res.end;\n res.end = function (this: Response, ...args: unknown[]) {\n const out = (end as (...a: unknown[]) => Response).apply(this, args);\n void sessions.persist(run);\n return out;\n } as Response['end'];\n }\n listener(req, res);\n }\n\n // ---------- discovery ----------\n\n app.get('/', (req, res) => {\n res\n .type('html')\n .send(\n renderLanding(\n origin(req),\n Array.from(hostable),\n (name) => getScenario(name)?.steps\n )\n );\n });\n\n app.get('/scenarios', (_req, res) => {\n res.json(\n Array.from(hostable).map((name) => {\n const s = getScenario(name)!;\n return {\n name,\n description: s.description,\n source: s.source,\n mcpPath: s.mcpPath ?? '',\n ...(s.steps && { steps: s.steps })\n };\n })\n );\n });\n\n // ---------- scenario mounting ----------\n //\n // We can't pre-register an express route per (scenario, run-id) because\n // run-ids are open-ended. Instead a single catch-all route resolves the\n // run, rewrites req.url to strip the /s// prefix, and hands\n // off to the run's listener — exactly what app.use(prefix, fn) would do,\n // but with a dynamic prefix.\n\n app.all(/^\\/s\\/(.+)$/, (req, res, next) => {\n const rest = req.params[0]; // \"//\"\n const resolved = resolveRun(rest);\n if (!resolved) {\n // Distinguish \"exists but not hostable\" from \"unknown\"\n const segments = rest.split('/');\n for (let i = 1; i <= segments.length; i++) {\n if (getScenario(segments.slice(0, i).join('/'))) {\n res.status(501).json({\n error: `scenario '${segments.slice(0, i).join('/')}' is not hostable here`\n });\n return;\n }\n }\n res.status(404).json({ error: `unknown scenario '${segments[0]}'` });\n return;\n }\n const { scenarioName, runId, suffix } = resolved;\n\n // GET /s/ with no run-id → mint one and tell the caller where\n // to point their client.\n if (!runId) {\n if (req.method !== 'GET') {\n res.status(400).json({\n error:\n 'Missing run-id. Use /s//, or GET /s/ to mint one.'\n });\n return;\n }\n try {\n const run = sessions.getOrCreate(scenarioName, undefined, (id) =>\n runBaseUrl(req, scenarioName, id)\n );\n res.json({\n runId: run.id,\n mcpUrl: `${runBaseUrl(req, scenarioName, run.id)}${run.mcpPath}`,\n resultsUrl: `${origin(req)}/results/${run.id}`,\n resultsHtmlUrl: `${origin(req)}/results/${run.id}.html`,\n context: contextFor(run)\n });\n } catch (e) {\n next(e);\n }\n return;\n }\n\n if (!RUN_ID_RE.test(runId)) {\n res.status(400).json({ error: 'invalid run-id' });\n return;\n }\n\n let run;\n try {\n run = sessions.getOrCreate(scenarioName, runId, (id) =>\n runBaseUrl(req, scenarioName, id)\n );\n } catch (e) {\n if (e instanceof UnknownScenarioError || e instanceof NotHostableError) {\n res.status(400).json({ error: e.message });\n return;\n }\n throw e;\n }\n\n // Rewrite to the path the scenario expects (it thinks it's at root).\n // The query string is preserved because we keep the express req object.\n dispatch(\n run,\n run.listener,\n req,\n res,\n suffix === '/' ? run.mcpPath || '/' : suffix\n );\n });\n\n // ---------- stateless mounting (no run-id, fail-fast) ----------\n //\n // /x/[/] judges every request on its own content with a\n // fresh scenario instance. A request that records a FAILURE check gets a\n // 400 explaining what went wrong instead of the scenario's response — the\n // client-under-test finds out immediately, no results polling, no mint.\n\n interface StatelessInstance {\n scenario: Scenario;\n listener: RequestListener;\n auxListeners?: Partial>;\n mcpPath: string;\n }\n\n function instantiateStateless(\n scenarioName: string,\n baseUrl: string\n ): StatelessInstance {\n const proto = getScenario(scenarioName);\n if (!proto) throw new UnknownScenarioError(scenarioName);\n const Ctor = proto.constructor as new () => Scenario;\n const scenario = new Ctor();\n\n if (scenario instanceof AuthHandlerScenario) {\n const missing = scenario.auxRoles.filter((r) => !auxOrigins[r]);\n if (missing.length) {\n throw new NotHostableError(\n scenarioName,\n `needs aux origin(s) [${missing.join(', ')}] — start with --as-origin`\n );\n }\n const handlers = scenario.authHandlers({\n getRsBaseUrl: () => baseUrl,\n getAuxBaseUrl: (role) =>\n `${auxOrigins[role]}/r/${statelessSlug(scenarioName)}`\n });\n return {\n scenario,\n listener: handlers.rs,\n auxListeners: handlers.aux,\n mcpPath: scenario.mcpPath ?? ''\n };\n }\n if (scenario.handler) {\n return {\n scenario,\n listener: scenario.handler(() => baseUrl),\n mcpPath: scenario.mcpPath ?? ''\n };\n }\n throw new NotHostableError(scenarioName);\n }\n\n /**\n * Resolve \"/\" (no run-id segment) against the\n * hostable set, longest scenario-name prefix first.\n */\n function resolveStateless(\n rest: string\n ): { scenarioName: string; suffix: string } | undefined {\n const segments = rest.split('/');\n for (let i = segments.length; i >= 1; i--) {\n const candidate = segments.slice(0, i).join('/');\n if (hostable.has(candidate) && !NOT_STATELESS.has(candidate)) {\n return {\n scenarioName: candidate,\n suffix: '/' + segments.slice(i).join('/')\n };\n }\n }\n return undefined;\n }\n\n /** Emit the captured response, or replace it with a 400 on FAILUREs. */\n function finishStateless(\n res: Response,\n scenario: Scenario,\n captured: CapturedResponse,\n scenarioName: string\n ): void {\n const checks = scenario.rawChecks?.() ?? scenario.getChecks();\n const failures = checks.filter((c) => c.status === 'FAILURE');\n if (failures.length > 0) {\n res.status(400).json({\n error: 'conformance failure',\n scenario: scenarioName,\n failures: failures.map(({ id, description, details }) => ({\n id,\n description,\n details\n }))\n });\n return;\n }\n for (const [k, v] of Object.entries(captured.headers)) {\n res.setHeader(k, v);\n }\n res.setHeader(\n 'mcp-conformance',\n `pass; checks=${checks.filter((c) => c.status === 'SUCCESS').length}`\n );\n res.status(captured.status);\n res.end(captured.body.length ? captured.body : undefined);\n }\n\n app.all(/^\\/x\\/(.+)$/, async (req, res) => {\n const rest = req.params[0];\n const resolved = resolveStateless(rest);\n if (!resolved) {\n const segments = rest.split('/');\n for (let i = 1; i <= segments.length; i++) {\n const candidate = segments.slice(0, i).join('/');\n if (NOT_STATELESS.has(candidate)) {\n res.status(501).json({\n error: `scenario '${candidate}' needs cross-request state and cannot run stateless — use /s/${candidate}/`\n });\n return;\n }\n if (getScenario(candidate)) {\n res.status(501).json({\n error: `scenario '${candidate}' is not hostable here`\n });\n return;\n }\n }\n res.status(404).json({ error: `unknown scenario '${segments[0]}'` });\n return;\n }\n const { scenarioName, suffix } = resolved;\n\n let inst: StatelessInstance;\n try {\n inst = instantiateStateless(\n scenarioName,\n `${origin(req)}/x/${scenarioName}`\n );\n } catch (e) {\n if (e instanceof UnknownScenarioError || e instanceof NotHostableError) {\n res.status(400).json({ error: e.message });\n return;\n }\n throw e;\n }\n\n const search = req.url.includes('?')\n ? req.url.slice(req.url.indexOf('?'))\n : '';\n const captured = await runCaptured(\n inst.listener,\n req,\n (suffix === '/' ? inst.mcpPath || '/' : suffix) + search\n );\n finishStateless(res, inst.scenario, captured, scenarioName);\n });\n\n // RFC 8414 root well-known for stateless mounts that embed their own AS\n // (path-based issuer /x//): metadata lives at\n // /.well-known//x//.\n app.get(\n /^\\/\\.well-known\\/(oauth-authorization-server|openid-configuration)\\/x\\/(.+)$/,\n async (req, res) => {\n const doc = req.params[0];\n const resolved = resolveStateless(req.params[1]);\n if (!resolved) {\n res.status(404).json({ error: 'no scenario for this issuer path' });\n return;\n }\n let inst: StatelessInstance;\n try {\n inst = instantiateStateless(\n resolved.scenarioName,\n `${origin(req)}/x/${resolved.scenarioName}`\n );\n } catch {\n res.status(404).json({ error: 'no scenario for this issuer path' });\n return;\n }\n const rewritten =\n `/.well-known/${doc}` +\n (resolved.suffix === '/' ? '' : resolved.suffix);\n const captured = await runCaptured(inst.listener, req, rewritten);\n finishStateless(res, inst.scenario, captured, resolved.scenarioName);\n }\n );\n\n // RFC 9728 root well-known for stateless mounts: PRM URL for MCP URL\n // /x//mcp is /.well-known/oauth-protected-resource/x//mcp.\n app.get(\n /^\\/\\.well-known\\/oauth-protected-resource\\/x\\/(.+)$/,\n async (req, res) => {\n const resolved = resolveStateless(req.params[0]);\n if (!resolved) {\n res.status(404).json({ error: 'no scenario for this resource path' });\n return;\n }\n let inst: StatelessInstance;\n try {\n inst = instantiateStateless(\n resolved.scenarioName,\n `${origin(req)}/x/${resolved.scenarioName}`\n );\n } catch {\n res.status(404).json({ error: 'no scenario for this resource path' });\n return;\n }\n const rewritten =\n '/.well-known/oauth-protected-resource' +\n (resolved.suffix === '/' ? '' : resolved.suffix);\n const captured = await runCaptured(inst.listener, req, rewritten);\n finishStateless(res, inst.scenario, captured, resolved.scenarioName);\n }\n );\n\n // ---------- root well-known dispatch (RS side) ----------\n //\n // RFC 9728: a client given MCP URL /s///mcp derives the PRM\n // URL as /.well-known/oauth-protected-resource/s///mcp —\n // i.e. at the *origin root*, not under the run prefix. We catch that here,\n // recover (scenario, run-id) from the path suffix, and re-dispatch to the\n // run's RS handler with the path it would have seen on its own origin.\n //\n // Requests that arrive *under* the run prefix (because the WWW-Authenticate\n // header points there) already work via the /s/* mount above.\n\n app.get(/^\\/\\.well-known\\/oauth-protected-resource\\/s\\/(.+)$/, (req, res) => {\n const resolved = resolveRun(req.params[0]);\n if (!resolved?.runId || !RUN_ID_RE.test(resolved.runId)) {\n res.status(404).json({ error: 'no run for this resource path' });\n return;\n }\n // getOrCreate, not get: on a multi-process host this may be the first\n // request this process sees for the run.\n let run;\n try {\n run = sessions.getOrCreate(resolved.scenarioName, resolved.runId, (id) =>\n runBaseUrl(req, resolved.scenarioName, id)\n );\n } catch {\n res.status(404).json({ error: 'no run for this resource path' });\n return;\n }\n // Scenario expects e.g. '/.well-known/oauth-protected-resource/mcp'\n const rewritten =\n '/.well-known/oauth-protected-resource' +\n (resolved.suffix === '/' ? '' : resolved.suffix);\n dispatch(run, run.listener, req, res, rewritten);\n });\n\n // ---------- aux-origin backchannel (relay target) ----------\n //\n // The AS relay (examples/hosted/valtown-relay.ts) forwards every request it\n // receives to /__aux/. The per-run AS issuer is\n // /r/, so every path the client hits — endpoints\n // (/r//authorize) and RFC 8414 well-known\n // (/.well-known/oauth-authorization-server/r/[/tenant]) — carries\n // `/r/` somewhere in it. We extract the id, strip that segment, and\n // dispatch to the run's aux handler so it sees exactly the path\n // createAuthServer registered.\n //\n // Guarded by a shared secret so this internal mount can't be hit directly\n // to forge checks into someone else's run.\n\n if (haveAux.length) {\n const secret = opts.relaySecret ?? process.env.CONFORMANCE_RELAY_SECRET;\n const guard = (req: Request, res: Response): boolean => {\n const got = req.header('x-relay-secret') ?? '';\n // Constant-time compare; mismatch length → fast 403 is fine.\n const ok =\n !!secret &&\n got.length === secret.length &&\n timingSafeEqual(Buffer.from(got), Buffer.from(secret));\n if (!ok) {\n res\n .status(403)\n .json({ error: 'forbidden: /__aux is the relay backchannel' });\n }\n return ok;\n };\n\n app.all(/^\\/__aux\\/([a-z0-9]+)(\\/.*)$/, async (req, res) => {\n if (!guard(req, res)) return;\n const role = req.params[0] as AuxOriginRole;\n const path = req.params[1];\n if (!AUX_ROLES.includes(role)) {\n res.status(404).json({ error: `unknown aux role '${role}'` });\n return;\n }\n\n // Find /r/ anywhere in the path and excise it.\n const m = path.match(/^(.*?)\\/r\\/([A-Za-z0-9_-]{1,64})(\\/.*)?$/);\n if (!m) {\n res\n .status(404)\n .json({ error: 'aux request path missing /r/ segment' });\n return;\n }\n const [, prefix, runId, suffix = ''] = m;\n const search = req.url.includes('?')\n ? req.url.slice(req.url.indexOf('?'))\n : '';\n\n // Stateless flows encode the scenario name (not a run-id) in the /r/\n // segment; per-flow OAuth state rides inside the artifacts themselves\n // (auth code, token), so a fresh instance per request is enough.\n const slugScenario = decodeStatelessSlug(runId);\n if (slugScenario !== undefined) {\n let inst: StatelessInstance;\n try {\n inst = instantiateStateless(\n slugScenario,\n `${origin(req)}/x/${slugScenario}`\n );\n } catch {\n res\n .status(404)\n .json({ error: `no stateless scenario '${slugScenario}'` });\n return;\n }\n const listener = inst.auxListeners?.[role];\n if (!listener) {\n res.status(404).json({ error: `no aux '${role}' handler` });\n return;\n }\n const captured = await runCaptured(\n listener,\n req,\n (prefix + suffix || '/') + search\n );\n finishStateless(res, inst.scenario, captured, slugScenario);\n return;\n }\n\n const run = await sessions.ensure(runId, (s, id) =>\n runBaseUrl(req, s, id)\n );\n const listener = run?.auxListeners?.[role];\n if (!run || !listener) {\n res.status(404).json({ error: `no aux '${role}' handler for run` });\n return;\n }\n dispatch(run, listener, req, res, (prefix + suffix || '/') + search);\n });\n }\n\n // ---------- results ----------\n\n app.get('/results/:id.html', async (req, res) => {\n const r = await sessions.results(req.params.id);\n if (!r) {\n res\n .status(404)\n .type('html')\n .send(`

No run ${escapeId(req.params.id)}

`);\n return;\n }\n res\n .type('html')\n .send(renderResults(r.scenarioName, req.params.id, r.checks));\n });\n\n app.get('/results/:id', async (req, res) => {\n const r = await sessions.results(req.params.id);\n if (!r) {\n res.status(404).json({ error: 'unknown run' });\n return;\n }\n res.json(summarise(r.scenarioName, req.params.id, r.checks));\n });\n\n app.delete('/results/:id', async (req, res) => {\n await sessions.destroy(req.params.id);\n res.status(204).end();\n });\n\n // ---------- meta MCP server ----------\n\n app.post('/mcp', express.json(), async (req, res) => {\n const server = createMetaMcpServer(sessions, origin(req), (s, id) =>\n runBaseUrl(req, s, id)\n );\n const transport = new StreamableHTTPServerTransport({\n sessionIdGenerator: undefined\n });\n await server.connect(transport);\n await transport.handleRequest(req, res, req.body);\n res.on('close', () => {\n transport.close();\n server.close();\n });\n });\n\n return { app, sessions };\n}\n\nfunction summarise(scenario: string, id: string, checks: ConformanceCheck[]) {\n const counts = { SUCCESS: 0, FAILURE: 0, WARNING: 0, SKIPPED: 0, INFO: 0 };\n for (const c of checks) counts[c.status]++;\n return {\n runId: id,\n scenario,\n summary: {\n passed: counts.SUCCESS,\n failed: counts.FAILURE,\n warnings: counts.WARNING,\n info: counts.INFO,\n skipped: counts.SKIPPED,\n total: checks.length\n },\n checks\n };\n}\n\nfunction createMetaMcpServer(\n sessions: SessionManager,\n publicOrigin: string,\n runBaseUrl: (scenario: string, runId: string) => string\n): Server {\n const server = new Server(\n { name: 'mcp-conformance-hosted', version: '0.2.0' },\n { capabilities: { tools: {} } }\n );\n\n server.setRequestHandler(ListToolsRequestSchema, async () => ({\n tools: [\n {\n name: 'list_scenarios',\n description:\n 'List client-conformance scenarios this hosted instance can serve.',\n inputSchema: { type: 'object', properties: {} }\n },\n {\n name: 'start_run',\n description:\n 'Create a fresh run for a scenario and return the MCP URL to point ' +\n 'the client-under-test at, plus the results URL. The run-id is ' +\n 'embedded in the path so this works with stateless transports.',\n inputSchema: {\n type: 'object',\n properties: {\n scenario: {\n type: 'string',\n description: 'Scenario name, e.g. \"initialize\" or \"tools_call\".'\n },\n run_id: {\n type: 'string',\n description:\n 'Optional. Supply your own [A-Za-z0-9_-]{1,64} id; ' +\n 'otherwise one is generated.'\n }\n },\n required: ['scenario']\n }\n },\n {\n name: 'get_results',\n description:\n 'Fetch the conformance checks recorded for a run. Same shape as ' +\n 'GET /results/.',\n inputSchema: {\n type: 'object',\n properties: { run_id: { type: 'string' } },\n required: ['run_id']\n }\n }\n ]\n }));\n\n server.setRequestHandler(\n CallToolRequestSchema,\n async (request): Promise => {\n const args = (request.params.arguments ?? {}) as Record;\n switch (request.params.name) {\n case 'list_scenarios':\n return text(\n JSON.stringify(\n listHostableScenarios().map((name) => ({\n name,\n description: getScenario(name)!.description\n })),\n null,\n 2\n )\n );\n\n case 'start_run': {\n if (args.run_id && !RUN_ID_RE.test(args.run_id)) {\n return errorText(`invalid run_id (must match ${RUN_ID_RE})`);\n }\n try {\n const run = sessions.getOrCreate(args.scenario, args.run_id, (id) =>\n runBaseUrl(args.scenario, id)\n );\n return text(\n JSON.stringify(\n {\n runId: run.id,\n mcpUrl: `${runBaseUrl(run.scenarioName, run.id)}${run.mcpPath}`,\n resultsUrl: `${publicOrigin}/results/${run.id}`,\n resultsHtmlUrl: `${publicOrigin}/results/${run.id}.html`,\n context: contextFor(run)\n },\n null,\n 2\n )\n );\n } catch (e) {\n if (\n e instanceof UnknownScenarioError ||\n e instanceof NotHostableError\n ) {\n return errorText(e.message);\n }\n throw e;\n }\n }\n\n case 'get_results': {\n const r = await sessions.results(args.run_id);\n if (!r) return errorText(`no run '${args.run_id}'`);\n return text(\n JSON.stringify(\n summarise(r.scenarioName, args.run_id, r.checks),\n null,\n 2\n )\n );\n }\n\n default:\n return errorText(`unknown tool ${request.params.name}`);\n }\n }\n );\n\n return server;\n}\n\n/**\n * The context blob a client-under-test needs (pre-registered credentials\n * etc.), tagged with the scenario name the way the CLI runner's\n * MCP_CONFORMANCE_CONTEXT is, so it can be passed through verbatim.\n */\nfunction contextFor(run: HostedRun): Record | undefined {\n return run.context ? { name: run.scenarioName, ...run.context } : undefined;\n}\n\nfunction escapeId(id: string): string {\n return id.replace(/[^A-Za-z0-9_-]/g, '');\n}\n\nfunction text(t: string): CallToolResult {\n return { content: [{ type: 'text', text: t }] };\n}\n\nfunction errorText(t: string): CallToolResult {\n return { content: [{ type: 'text', text: t }], isError: true };\n}\n",[],[135,686,696],"a0d22a5e-a386-49ca-a95a-bb7150aff68d","html.ts","d43ddbd6-ad13-11f1-9006-1607ee4eb77e",8,["D",1789043610188],"import { ConformanceCheck, CheckStatus } from '../types.ts';\n\nconst STATUS_STYLE: Record = {\n SUCCESS: 'background:#d1fae5;color:#065f46',\n FAILURE: 'background:#fee2e2;color:#991b1b',\n WARNING: 'background:#fef3c7;color:#92400e',\n SKIPPED: 'background:#e5e7eb;color:#374151',\n INFO: 'background:#dbeafe;color:#1e40af'\n};\n\nconst css = `\n body{font:14px/1.5 ui-sans-serif,system-ui,sans-serif;max-width:960px;\n margin:2rem auto;padding:0 1rem;color:#111}\n code,pre{font:12px/1.4 ui-monospace,SFMono-Regular,Menlo,monospace}\n pre{background:#f6f8fa;padding:.75rem;border-radius:6px;overflow:auto}\n .pill{display:inline-block;padding:2px 8px;border-radius:10px;\n font-size:11px;font-weight:600}\n .check{border:1px solid #e5e7eb;border-radius:6px;padding:.75rem;\n margin:.5rem 0}\n .check h3{margin:0 0 .25rem;font-size:14px}\n details>summary{cursor:pointer;color:#6b7280;font-size:12px}\n table{border-collapse:collapse;width:100%}\n td,th{text-align:left;padding:.4rem .6rem;border-bottom:1px solid #eee}\n a{color:#2563eb}\n`;\n\nfunction esc(s: string): string {\n return s.replace(\n /[&<>\"]/g,\n (c) => ({ '&': '&', '<': '<', '>': '>', '\"': '"' })[c]!\n );\n}\n\nexport function renderLanding(\n origin: string,\n scenarios: string[],\n stepsFor: (name: string) => readonly unknown[] | undefined = () => undefined\n): string {\n const rows = scenarios\n .map((n) => {\n const steps = stepsFor(n);\n const steer = steps\n ? `

steps (${steps.length})

` +\n `

${esc(JSON.stringify(steps, null, 1))}

`\n : 'bespoke';\n return (\n `${esc(n)}` +\n `${esc(origin)}/s/${esc(n)}/<run-id>` +\n `${steer}` +\n `mint`\n );\n })\n .join('');\n return `\nMCP Conformance — hosted\n

MCP Conformance — hosted

Point your MCP client at /s/<scenario>/<run-id>.\nPick any <run-id> (e.g. local-1) — the run is\ncreated on first request, and because the id is in the path it works with\nstateless transports too. Then GET\n/results/<run-id> (append .html for a\nreport).

Too lazy to pick an id? GET /s/<scenario> mints one and\nreturns {mcpUrl, resultsUrl}.

This server is also an MCP server at ${esc(origin)}/mcp with\nlist_scenarios / start_run /\nget_results tools.

Generic steering: scenarios with a steps column need no\nscenario-specific client code — the mint response (and /scenarios)\ncarries context.steps, a closed op list\n(tools/list, tools/call, wait,\ndisconnect) that a dumb client can interpret. Pass the\ncontext object verbatim as MCP_CONFORMANCE_CONTEXT.

Scenarios (${scenarios.length})

\n${rows}

name	MCP URL pattern	client

Example

$ npx @modelcontextprotocol/inspector ${esc(origin)}/s/initialize/demo\n$ curl ${esc(origin)}/results/demo | jq .summary

`;\n}\n\nexport function renderResults(\n scenario: string,\n sessionId: string,\n checks: ConformanceCheck[]\n): string {\n const items = checks\n .map((c) => {\n const pill = `${c.status}`;\n const refs = (c.specReferences ?? [])\n .map((r) =>\n r.url\n ? `${esc(r.id)}`\n : `${esc(r.id)}`\n )\n .join(' · ');\n const details =\n c.details || c.errorMessage\n ? `

details

${esc(\n              JSON.stringify(\n                { errorMessage: c.errorMessage, ...c.details },\n                null,\n                2\n              )\n            )}

`\n : '';\n return `

${pill} `${esc(c.id)}` — ${esc(\n c.name\n )}

${esc(c.description)}

${refs}

${details}

`;\n })\n .join('');\n const passed = checks.filter((c) => c.status === 'SUCCESS').length;\n const failed = checks.filter((c) => c.status === 'FAILURE').length;\n return `\n${esc(scenario)} — ${sessionId}\n

`${esc(scenario)}`

session ${esc(sessionId)} — ${passed} passed, ${failed} failed,\n${checks.length} total

${items}`;\n}\n",[],[135,686,703],"eed5a261-eb58-445c-86c0-d3d5aef33e35",["D",1789043608031],[169,170,171,172],[135,686],"7020a325-1efe-4997-bc89-521b57d8d0c0",["D",1789043639352],[],[135,46,33],"fdfdcf5a-7a88-4f23-952c-793b93d6d2a8",["D",1789043639352],[167],[135,46],["D",1789043608031],[166,168,173,228,230],[135],"3fea48ed-b846-446a-88ff-ade7b701cf22","valtown.ts","d143119e-ad13-11f1-80b9-1607ee4eb77e","33e15d6c-9b64-4c7e-ad30-c57b58f95711",["D",1789043605188],"/**\n * MCP conformance — val.town deployment.\n *\n * The hosted runner mounts each scenario's `handler()` (a Node\n * `RequestListener`) under `/s//`. On val.town the entry\n * point is a fetch handler, so we bridge web Request→Node req/res once and\n * reuse the *real* scenario implementations from the package — no\n * reimplementation, no loopback port.\n *\n * Deploy: create an HTTP val and paste:\n *\n * import handler from \"https://esm.sh/@modelcontextprotocol/conformance/examples/hosted/valtown.ts\";\n * export default handler;\n *\n * or copy this file in directly. Requires a runtime with Node-compat\n * (`node:http`, `node:stream`) — val.town, Deno Deploy, Bun all qualify.\n *\n * Limitation: scenarios that rely on long-lived SSE streams or connection-\n * close timing (`sse-retry`) won't behave correctly through a buffered\n * Request→Response bridge. They're filtered out below.\n */\n\nimport { createHostedApp } from '../../src/hosted/server.ts';\nimport { toFetchHandler } from './fetch-bridge.ts';\nimport { SqliteRunStore } from './valtown-store.ts';\n\nconst NOT_FETCH_SAFE = new Set(['sse-retry']);\n\n// Auth scenarios need a second public origin (RFC 8414 well-known is\n// origin-rooted). Deploy examples/hosted/valtown-relay.ts as a separate val\n// and point CONFORMANCE_AS_ORIGIN at it; both vals share\n// CONFORMANCE_RELAY_SECRET so /__aux can't be hit directly.\nconst { app, sessions } = createHostedApp({\n auxOrigins: {\n as: process.env.CONFORMANCE_AS_ORIGIN,\n as2: process.env.CONFORMANCE_AS2_ORIGIN,\n idp: process.env.CONFORMANCE_IDP_ORIGIN\n },\n relaySecret: process.env.CONFORMANCE_RELAY_SECRET,\n // val.town spreads one run's requests over several isolates; persist to\n // the account's SQLite so /results is the union of what they all saw.\n store: process.env.valtown ? new SqliteRunStore() : undefined\n});\n\nconst bridge = toFetchHandler(app);\n\nexport default async function (request: Request): Promise {\n const url = new URL(request.url);\n\n // Short-circuit scenarios that need true streaming.\n const m = url.pathname.match(/^\\/s\\/([^/]+)/);\n if (m && NOT_FETCH_SAFE.has(m[1])) {\n return Response.json(\n {\n error: `scenario '${m[1]}' relies on SSE stream lifecycle and is not available via the fetch bridge`\n },\n { status: 501 }\n );\n }\n\n const response = await bridge(request);\n // The bridge buffers until end(), by which point the scenario has recorded\n // its checks and the write-through has started; finish it before the\n // isolate is allowed to go idle.\n await sessions.flush();\n return response;\n}\n",[],[144,686,726],"b14b49be-62d3-4e6f-832e-253eafc52650","valtown-store.ts","d1ffa5b6-ad13-11f1-8f33-1607ee4eb77e",["D",1789043606355],"/**\n * RunStore backed by val.town's per-account SQLite (REST API).\n *\n * val.town injects an API token into every val as the `valtown` env var; the\n * SQLite API is `POST /v1/sqlite/execute {statement:{sql,args}}`. Two tables,\n * created lazily once per isolate. Old runs are swept on new-run creation,\n * throttled per isolate, so the database stays bounded without a cron.\n */\n\nimport type { ConformanceCheck } from '../../src/types.ts';\nimport type { RunStore } from '../../src/hosted/store.ts';\n\nconst API = 'https://api.val.town/v1/sqlite/execute';\n\nexport interface SqliteRunStoreOptions {\n token?: string;\n /** Runs older than this are swept. Default 6h. */\n retentionMs?: number;\n /** Cap on checks persisted per (run, writer). Default 1000. */\n maxChecks?: number;\n}\n\ntype Row = unknown[];\n\nexport class SqliteRunStore implements RunStore {\n private readonly token: string;\n private readonly retentionMs: number;\n private readonly maxChecks: number;\n private ready: Promise | undefined;\n private lastSweep = 0;\n\n constructor(opts: SqliteRunStoreOptions = {}) {\n const token = opts.token ?? process.env.valtown;\n if (!token)\n throw new Error('SqliteRunStore: no val.town token (env valtown)');\n this.token = token;\n this.retentionMs =\n opts.retentionMs ??\n Number(process.env.CONFORMANCE_RUN_RETENTION_MS ?? 6 * 3600_000);\n this.maxChecks = opts.maxChecks ?? 1000;\n }\n\n private async exec(sql: string, args: unknown[] = []): Promise {\n const res = await fetch(API, {\n method: 'POST',\n headers: {\n Authorization: `Bearer ${this.token}`,\n 'Content-Type': 'application/json'\n },\n body: JSON.stringify({ statement: { sql, args } })\n });\n if (!res.ok) {\n throw new Error(\n `sqlite ${res.status}: ${(await res.text()).slice(0, 200)}`\n );\n }\n const body = (await res.json()) as { rows?: Row[] };\n return body.rows ?? [];\n }\n\n private init(): Promise {\n this.ready ??= (async () => {\n await this.exec(\n `CREATE TABLE IF NOT EXISTS hosted_runs_v2 (\n id TEXT PRIMARY KEY, scenario TEXT NOT NULL, created_at INTEGER NOT NULL)`\n );\n await this.exec(\n `CREATE TABLE IF NOT EXISTS hosted_checks_v2 (\n run_id TEXT NOT NULL, writer TEXT NOT NULL, checks TEXT NOT NULL,\n updated_at INTEGER NOT NULL, PRIMARY KEY (run_id, writer))`\n );\n })().catch((e) => {\n this.ready = undefined;\n throw e;\n });\n return this.ready;\n }\n\n async saveRun(id: string, scenarioName: string): Promise {\n await this.init();\n await this.exec(\n `INSERT INTO hosted_runs_v2 (id, scenario, created_at) VALUES (?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET scenario = excluded.scenario`,\n [id, scenarioName, Date.now()]\n );\n void this.sweep().catch(() => {});\n }\n\n async loadRun(id: string): Promise {\n await this.init();\n const rows = await this.exec(\n `SELECT scenario FROM hosted_runs_v2 WHERE id = ?`,\n [id]\n );\n return rows[0]?.[0] as string | undefined;\n }\n\n async saveChecks(\n id: string,\n writer: string,\n checks: ConformanceCheck[]\n ): Promise {\n await this.init();\n await this.exec(\n `INSERT INTO hosted_checks_v2 (run_id, writer, checks, updated_at)\n VALUES (?, ?, ?, ?)\n ON CONFLICT(run_id, writer) DO UPDATE\n SET checks = excluded.checks, updated_at = excluded.updated_at`,\n [id, writer, JSON.stringify(checks.slice(-this.maxChecks)), Date.now()]\n );\n }\n\n async loadChecks(id: string): Promise> {\n await this.init();\n const rows = await this.exec(\n `SELECT writer, checks FROM hosted_checks_v2 WHERE run_id = ?`,\n [id]\n );\n const out = new Map();\n for (const [writer, checks] of rows) {\n try {\n out.set(writer as string, JSON.parse(checks as string));\n } catch {\n // corrupt row — ignore\n }\n }\n return out;\n }\n\n async deleteRun(id: string): Promise {\n await this.init();\n await this.exec(`DELETE FROM hosted_checks_v2 WHERE run_id = ?`, [id]);\n await this.exec(`DELETE FROM hosted_runs_v2 WHERE id = ?`, [id]);\n }\n\n private async sweep(): Promise {\n const now = Date.now();\n if (now - this.lastSweep < 5 * 60_000) return;\n this.lastSweep = now;\n const cutoff = now - this.retentionMs;\n await this.exec(\n `DELETE FROM hosted_checks_v2 WHERE run_id IN\n (SELECT id FROM hosted_runs_v2 WHERE created_at < ?)`,\n [cutoff]\n );\n await this.exec(`DELETE FROM hosted_runs_v2 WHERE created_at < ?`, [\n cutoff\n ]);\n }\n}\n",[],[144,686,734],"3c480d6a-84b6-44ba-8074-7a713ef574d2","fetch-bridge.ts","d2578a38-ad13-11f1-ad25-1607ee4eb77e",3,["D",1789043606991],"/**\n * Web fetch ↔ Node bridge: adapt a Node RequestListener (express app) to a\n * fetch-style handler for serverless runtimes (val.town, Deno Deploy, Bun).\n *\n * Intercepts the user-facing write surface (writeHead/setHeader/write/end)\n * so we never touch ServerResponse's socket-coupled internals — the approach\n * serverless-http and light-my-request take.\n */\n\nimport { IncomingMessage, ServerResponse } from 'node:http';\nimport { Socket } from 'node:net';\n\ntype NodeListener = (req: IncomingMessage, res: ServerResponse) => void;\n\nexport function toFetchHandler(\n listener: NodeListener\n): (request: Request) => Promise {\n return async (request: Request): Promise => {\n const url = new URL(request.url);\n\n // --- web Request → Node IncomingMessage ---\n const body = request.body\n ? Buffer.from(await request.arrayBuffer())\n : undefined;\n // Express's req.protocol/req.ip read socket.encrypted/.remoteAddress,\n // and IncomingMessage._destroy calls socket.destroy(), so a real\n // (unconnected) Socket with the encrypted flag patched on is the path\n // of least surprise.\n const socket = Object.assign(new Socket(), { encrypted: false });\n const nodeReq = new IncomingMessage(socket);\n nodeReq.method = request.method;\n nodeReq.url = url.pathname + url.search;\n nodeReq.httpVersion = '1.1';\n nodeReq.httpVersionMajor = 1;\n nodeReq.httpVersionMinor = 1;\n nodeReq.headers = Object.fromEntries(request.headers);\n nodeReq.headers.host ??= url.host;\n if (body?.length) nodeReq.headers['content-length'] = String(body.length);\n // The SDK's StreamableHTTPServerTransport converts Node→Web via\n // @hono/node-server, which reads rawHeaders (the [k,v,k,v,...] array),\n // not the parsed headers object. Deno's node:http compat exposes\n // rawHeaders as a getter-only accessor, so shadow it with an own\n // property instead of assigning.\n Object.defineProperty(nodeReq, 'rawHeaders', {\n value: Object.entries(nodeReq.headers).flat() as string[],\n writable: true,\n configurable: true\n });\n if (body?.length) nodeReq.push(body);\n nodeReq.push(null);\n\n // --- Node ServerResponse → web Response ---\n const nodeRes = new ServerResponse(nodeReq);\n const chunks: Buffer[] = [];\n let status = 200;\n const headers = new Headers();\n\n const captureHeaders = (h?: Record) => {\n for (const [k, v] of Object.entries(h ?? {})) {\n headers.set(k, Array.isArray(v) ? v.join(', ') : String(v));\n }\n };\n nodeRes.setHeader = ((k: string, v: string | string[] | number) => {\n headers.set(k, Array.isArray(v) ? v.join(', ') : String(v));\n return nodeRes;\n }) as ServerResponse['setHeader'];\n nodeRes.getHeader = (k: string) =>\n headers.get(k.toLowerCase()) ?? undefined;\n nodeRes.removeHeader = (k: string) => headers.delete(k);\n nodeRes.writeHead = ((code: number, h?: Record) => {\n status = code;\n captureHeaders(h);\n return nodeRes;\n }) as ServerResponse['writeHead'];\n nodeRes.write = ((c: string | Buffer, enc?: BufferEncoding) => {\n if (c) chunks.push(typeof c === 'string' ? Buffer.from(c, enc) : c);\n return true;\n }) as ServerResponse['write'];\n nodeRes.flushHeaders = () => {};\n Object.defineProperty(nodeRes, 'statusCode', {\n get: () => status,\n set: (v: number) => {\n status = v;\n }\n });\n\n return new Promise((resolve) => {\n nodeRes.end = ((c?: string | Buffer, enc?: BufferEncoding) => {\n if (c) chunks.push(typeof c === 'string' ? Buffer.from(c, enc) : c);\n resolve(\n new Response(chunks.length ? Buffer.concat(chunks) : null, {\n status,\n headers\n })\n );\n return nodeRes;\n }) as ServerResponse['end'];\n\n listener(nodeReq, nodeRes);\n });\n };\n}\n",[],[144,686,741],"e0d4ff66-2d0b-4b92-9d52-7466f5cd524c",["D",1789043605188],[162,163,164],[144,686],["D",1789043605188],[161],[144],["D",1789043604380],{"_102":101,"_109":-5},{"_102":101,"_103":104,"_105":-5,"_18":-5,"_106":107,"_108":25},{"_13":91,"_32":92,"_49":42,"_93":50,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":51,"_100":101},"ctx",{"_84":-5,"_129":792,"_793":794,"_795":796,"_797":25,"_798":25,"_799":25,"_800":64,"_801":-5,"_802":-7,"_803":-7,"_804":68,"_805":25,"_806":25,"_807":-5,"_808":25,"_809":25,"_810":25,"_811":-5},"ENV",{"_763":764,"_765":766,"_767":92,"_768":769,"_770":771,"_772":773,"_774":775,"_776":777,"_778":779,"_780":781,"_782":783,"_784":785,"_786":787,"_788":789,"_790":791},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Hold on — this client led with initialize

MCP Checker — 2026-07-28

How it works

What is checked

Old clients

Try it

MCP Checker — Auth Chain

MCP Conformance — hosted

Scenarios (${scenarios.length})

Example

${pill} ${esc(c.id)} — ${esc(\n c.name\n )}

${esc(scenario)}

Hold on — this client led with `initialize`

${pill} `${esc(c.id)}` — ${esc(\n c.name\n )}

`${esc(scenario)}`

Diff · v59