[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_349":350,"_351":352},"routes/_app.x.$handle.$name",{"_93":92,"_31":44,"_101":83,"_26":102,"_13":14,"_103":-5,"_11":104,"_105":106,"_107":108,"_109":110,"_111":112,"_20":-5,"_113":-5,"_114":-5,"_115":24,"_116":117,"_118":24,"_119":-5,"_120":-5,"_121":122},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_31":44,"_37":45,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":-5,"_52":-5,"_18":53,"_54":-5,"_55":24,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":-5,"_63":-5,"_64":-5,"_65":-5,"_66":67,"_68":67,"_69":70,"_71":70,"_72":70,"_73":67,"_74":67,"_75":76,"_77":78,"_79":80,"_81":24},"version",16,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":14,"_40":41,"_23":24},"previous","deleted",false,"deletedHere","path","src/scenarios/server/dns-rebinding.ts","latestPath","fileId","ba4313e6-5b64-11f1-a2b2-ee650bb23af1","name","dns-rebinding.ts","fileType","script","content","/**\n * DNS Rebinding Protection test scenarios for MCP servers\n *\n * Tests that localhost MCP servers properly validate Host or Origin headers\n * to prevent DNS rebinding attacks. See GHSA-w48q-cv73-mx4w for details.\n */\n\nimport { ClientScenario, ConformanceCheck } from '../../types.ts';\nimport { request } from 'npm:undici@^7.25.0';\n\nconst SPEC_REFERENCES = [\n {\n id: 'MCP-DNS-Rebinding-Protection',\n url: 'https://modelcontextprotocol.io/specification/2025-11-25/basic/security_best_practices#local-mcp-server-compromise'\n },\n {\n id: 'MCP-Transport-Security',\n url: 'https://modelcontextprotocol.io/specification/2025-11-25/basic/transports#security-warning'\n }\n];\n\n/**\n * Check if URL is a localhost URL\n */\nfunction isLocalhostUrl(serverUrl: string): boolean {\n const url = new URL(serverUrl);\n const hostname = url.hostname.toLowerCase();\n return (\n hostname === 'localhost' ||\n hostname === '127.0.0.1' ||\n hostname === '[::1]' ||\n hostname === '::1'\n );\n}\n\n/**\n * Get the host header value from a URL (hostname:port)\n */\nfunction getHostFromUrl(serverUrl: string): string {\n const url = new URL(serverUrl);\n return url.host; // includes port if present\n}\n\n/**\n * Send an MCP initialize request with custom Host and Origin headers.\n * Both headers are set to the same value so that servers checking either\n * Host or Origin will properly detect the rebinding attempt.\n */\nasync function sendRequestWithHostAndOrigin(\n serverUrl: string,\n hostOrOrigin: string\n): Promise<{ statusCode: number; body: unknown }> {\n const response = await request(serverUrl, {\n method: 'POST',\n headers: {\n 'Content-Type': 'application/json',\n Host: hostOrOrigin,\n Origin: `http://${hostOrOrigin}`,\n Accept: 'application/json, text/event-stream'\n },\n body: JSON.stringify({\n jsonrpc: '2.0',\n id: 1,\n method: 'initialize',\n params: {\n protocolVersion: '2025-11-25',\n capabilities: {},\n clientInfo: { name: 'conformance-dns-rebinding-test', version: '1.0.0' }\n }\n })\n });\n\n let body: unknown;\n try {\n body = await response.body.json();\n } catch {\n body = null;\n }\n\n return {\n statusCode: response.statusCode,\n body\n };\n}\n\nexport class DNSRebindingProtectionScenario implements ClientScenario {\n name = 'dns-rebinding-protection';\n readonly source = { introducedIn: '2025-11-25' } as const;\n description = `Test DNS rebinding protection for localhost servers.\n\n**Scope:** This test applies to localhost MCP servers running without HTTPS and without\nauthentication. These servers are vulnerable to DNS rebinding attacks where a malicious\nwebsite tricks a user's browser into making requests to the local server.\n\n**Attack scenario:**\n1. User visits malicious website (e.g., evil.com)\n2. evil.com's DNS is configured to resolve to 127.0.0.1\n3. Browser makes request to evil.com which actually goes to localhost\n4. Without Host/Origin header validation, the local MCP server processes the request\n\n**Requirements:**\n- Server **MUST** validate the Host or Origin header on incoming requests\n- Server **MUST** reject requests with non-localhost Host/Origin headers (HTTP 4xx)\n- Server **MUST** accept requests with valid localhost Host/Origin headers\n\n**Valid localhost values:** \\`localhost\\`, \\`127.0.0.1\\`, \\`[::1]\\` (with optional port)\n\n**Note:** This test requires a localhost server URL. Non-localhost URLs will fail.\n\nSee: https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-w48q-cv73-mx4w`;\n\n async run(serverUrl: string): Promise {\n const checks: ConformanceCheck[] = [];\n const timestamp = new Date().toISOString();\n\n // Common check properties\n const rejectedCheckBase = {\n id: 'localhost-host-rebinding-rejected',\n name: 'DNSRebindingRejected',\n description:\n 'Server rejects requests with non-localhost Host/Origin headers',\n timestamp,\n specReferences: SPEC_REFERENCES\n };\n\n const acceptedCheckBase = {\n id: 'localhost-host-valid-accepted',\n name: 'LocalhostHostAccepted',\n description:\n 'Server accepts requests with valid localhost Host/Origin headers',\n timestamp,\n specReferences: SPEC_REFERENCES\n };\n\n // First check: Is this a localhost URL?\n if (!isLocalhostUrl(serverUrl)) {\n const errorMessage =\n 'DNS rebinding tests require a localhost server URL (localhost, 127.0.0.1, or [::1])';\n const details = { serverUrl, reason: 'non-localhost-url' };\n\n checks.push({\n ...rejectedCheckBase,\n status: 'FAILURE',\n errorMessage,\n details\n });\n checks.push({\n ...acceptedCheckBase,\n status: 'FAILURE',\n errorMessage,\n details\n });\n return checks;\n }\n\n const validHost = getHostFromUrl(serverUrl);\n const attackerHost = 'evil.example.com';\n\n // Check 1: Invalid Host/Origin headers should be rejected with a 4xx error\n try {\n const response = await sendRequestWithHostAndOrigin(\n serverUrl,\n attackerHost\n );\n const isRejected =\n response.statusCode >= 400 && response.statusCode < 500;\n\n const details = {\n hostHeader: attackerHost,\n originHeader: `http://${attackerHost}`,\n statusCode: response.statusCode,\n body: response.body\n };\n\n if (isRejected) {\n checks.push({\n ...rejectedCheckBase,\n status: 'SUCCESS',\n details\n });\n } else {\n checks.push({\n ...rejectedCheckBase,\n status: 'FAILURE',\n errorMessage: `Expected HTTP 4xx for invalid Host/Origin headers, got ${response.statusCode}`,\n details\n });\n }\n } catch (error) {\n checks.push({\n ...rejectedCheckBase,\n status: 'FAILURE',\n errorMessage: `Request failed: ${error instanceof Error ? error.message : String(error)}`,\n details: {\n hostHeader: attackerHost,\n originHeader: `http://${attackerHost}`\n }\n });\n }\n\n // Check 2: Valid localhost Host/Origin headers should be accepted (2xx response)\n try {\n const response = await sendRequestWithHostAndOrigin(serverUrl, validHost);\n const isAccepted =\n response.statusCode >= 200 && response.statusCode < 300;\n\n const details = {\n hostHeader: validHost,\n originHeader: `http://${validHost}`,\n statusCode: response.statusCode,\n body: response.body\n };\n\n if (isAccepted) {\n checks.push({\n ...acceptedCheckBase,\n status: 'SUCCESS',\n details\n });\n } else {\n checks.push({\n ...acceptedCheckBase,\n status: 'FAILURE',\n errorMessage: `Expected HTTP 2xx for valid localhost Host/Origin headers, got ${response.statusCode}`,\n details\n });\n }\n } catch (error) {\n checks.push({\n ...acceptedCheckBase,\n status: 'FAILURE',\n errorMessage: `Request failed: ${error instanceof Error ? error.message : String(error)}`,\n details: { hostHeader: validHost, originHeader: `http://${validHost}` }\n });\n }\n\n return checks;\n }\n}\n","createdAt",["D",1780062360491],"branchVersion","branchId","b62d0bb8-5b64-11f1-a2b2-ee650bb23af1","id","b6283b42-5b64-11f1-a2b2-ee650bb23af1","mcp-conformance",["D",1780062353614],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","f4518a30-f52b-4b12-891c-a8fffb7240f8","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","1d3af61b-92b3-4fbf-b22a-ca08b2122f4d","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_93":92,"_100":96},"org",{"_93":92,"_94":-5,"_95":96,"_18":53,"_97":98,"_99":24},"branch",{"_13":82,"_31":83,"_42":41,"_84":43,"_85":-5,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":44,"_91":92},"isOwned",108,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","pcarleton","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yZjg2YXM0MEVRM0hKQzVqcFJ5aHZteXUxUjUifQ","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_42":43,"_31":44,"_37":345,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":-5,"_52":-5,"_18":53,"_54":-5,"_55":24,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":-5,"_63":-5,"_64":-5,"_65":-5,"_66":67,"_68":67,"_69":70,"_71":70,"_72":70,"_73":67,"_74":67,"_75":346,"_77":347,"_79":348,"_81":24},"tree",[152,155],"files",[152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176],"counts",{"_142":59,"_143":139,"_144":59,"_145":146,"_147":148},"contents",[123,124],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_42":136,"_31":137,"_29":138,"_128":-5,"_40":41,"_39":139,"_130":131,"_37":140,"_13":59,"_33":133,"_35":-5,"_23":24,"_134":-5,"_26":141},{"_42":125,"_31":126,"_29":127,"_128":-5,"_40":41,"_39":129,"_130":131,"_37":132,"_13":59,"_33":133,"_35":-5,"_23":24,"_134":-5,"_26":135},"b70c7d16-5b64-11f1-8713-ee650bb23af1","src","724673a5-9883-491f-af30-67377464f321","parentId",2,"latest",true,["D",1780062355087],"directory","label",[126],"b6abbca6-5b64-11f1-bb92-ee650bb23af1","examples","52dfe22a-3fc8-4d4b-b364-a3c11b4e7425",1,["D",1780062354427],[137],"pulls","branches","forks","envVars",{"_149":129,"_151":59},"connections",{"_149":59,"_150":59},"count","unfilledCount","emptyCount",{"_42":136,"_31":137,"_29":138,"_128":-5,"_40":41,"_39":139,"_130":131,"_37":342,"_13":59,"_33":133,"_35":-5,"_23":24,"_134":-5,"_183":343,"_26":344},{"_42":338,"_31":307,"_29":333,"_128":138,"_40":41,"_39":139,"_130":131,"_37":339,"_13":59,"_33":133,"_35":-5,"_23":24,"_134":-5,"_183":340,"_26":341},{"_42":330,"_31":331,"_29":332,"_128":333,"_40":41,"_39":139,"_130":24,"_37":334,"_13":59,"_33":34,"_35":335,"_23":24,"_134":-5,"_183":336,"_26":337},{"_42":125,"_31":126,"_29":127,"_128":-5,"_40":41,"_39":129,"_130":131,"_37":327,"_13":59,"_33":133,"_35":-5,"_23":24,"_134":-5,"_183":328,"_26":329},{"_42":323,"_31":307,"_29":301,"_128":127,"_40":41,"_39":129,"_130":131,"_37":324,"_13":59,"_33":133,"_35":-5,"_23":24,"_134":-5,"_183":325,"_26":326},{"_42":315,"_31":316,"_29":317,"_128":301,"_40":41,"_39":318,"_130":131,"_37":319,"_13":59,"_33":34,"_35":320,"_23":24,"_134":-5,"_183":321,"_26":322},{"_42":308,"_31":309,"_29":310,"_128":301,"_40":41,"_39":129,"_130":24,"_37":311,"_13":59,"_33":34,"_35":312,"_23":24,"_134":-5,"_183":313,"_26":314},{"_42":298,"_31":299,"_29":300,"_128":301,"_40":41,"_39":302,"_130":24,"_37":303,"_13":59,"_33":34,"_35":304,"_23":24,"_134":-5,"_183":305,"_26":306},{"_42":294,"_31":195,"_29":189,"_128":127,"_40":41,"_39":190,"_130":131,"_37":295,"_13":59,"_33":133,"_35":-5,"_23":24,"_134":-5,"_183":296,"_26":297},{"_42":290,"_31":289,"_29":283,"_128":189,"_40":41,"_39":284,"_130":131,"_37":291,"_13":59,"_33":133,"_35":-5,"_23":24,"_134":-5,"_183":292,"_26":293},{"_42":280,"_31":281,"_29":282,"_128":283,"_40":41,"_39":284,"_130":131,"_37":285,"_13":59,"_33":34,"_35":286,"_23":24,"_134":-5,"_183":287,"_26":288},{"_42":276,"_31":239,"_29":233,"_128":189,"_40":41,"_39":234,"_130":131,"_37":277,"_13":59,"_33":133,"_35":-5,"_23":24,"_134":-5,"_183":278,"_26":279},{"_42":272,"_31":263,"_29":257,"_128":233,"_40":41,"_39":267,"_130":131,"_37":273,"_13":59,"_33":133,"_35":-5,"_23":24,"_134":-5,"_183":274,"_26":275},{"_42":264,"_31":265,"_29":266,"_128":257,"_40":41,"_39":267,"_130":24,"_37":268,"_13":59,"_33":34,"_35":269,"_23":24,"_134":-5,"_183":270,"_26":271},{"_42":255,"_31":187,"_29":256,"_128":257,"_40":41,"_39":258,"_130":131,"_37":259,"_13":59,"_33":34,"_35":260,"_23":24,"_134":-5,"_183":261,"_26":262},{"_42":247,"_31":248,"_29":249,"_128":233,"_40":41,"_39":250,"_130":24,"_37":251,"_13":59,"_33":34,"_35":252,"_23":24,"_134":-5,"_183":253,"_26":254},{"_42":240,"_31":207,"_29":241,"_128":233,"_40":41,"_39":242,"_130":24,"_37":243,"_13":59,"_33":34,"_35":244,"_23":24,"_134":-5,"_183":245,"_26":246},{"_42":230,"_31":231,"_29":232,"_128":233,"_40":41,"_39":234,"_130":24,"_37":235,"_13":59,"_33":34,"_35":236,"_23":24,"_134":-5,"_183":237,"_26":238},{"_42":226,"_31":205,"_29":199,"_128":189,"_40":41,"_39":209,"_130":131,"_37":227,"_13":59,"_33":133,"_35":-5,"_23":24,"_134":-5,"_183":228,"_26":229},{"_42":218,"_31":219,"_29":220,"_128":199,"_40":41,"_39":221,"_130":131,"_37":222,"_13":59,"_33":34,"_35":223,"_23":24,"_134":-5,"_183":224,"_26":225},{"_42":214,"_31":32,"_29":30,"_128":199,"_40":41,"_39":14,"_130":131,"_37":215,"_13":59,"_33":34,"_35":36,"_23":24,"_134":-5,"_183":216,"_26":217},{"_42":206,"_31":207,"_29":208,"_128":199,"_40":41,"_39":209,"_130":131,"_37":210,"_13":59,"_33":34,"_35":211,"_23":24,"_134":-5,"_183":212,"_26":213},{"_42":196,"_31":197,"_29":198,"_128":199,"_40":41,"_39":200,"_130":131,"_37":201,"_13":59,"_33":34,"_35":202,"_23":24,"_134":-5,"_183":203,"_26":204},{"_42":186,"_31":187,"_29":188,"_128":189,"_40":41,"_39":190,"_130":24,"_37":191,"_13":59,"_33":34,"_35":192,"_23":24,"_134":-5,"_183":193,"_26":194},{"_42":177,"_31":178,"_29":179,"_128":127,"_40":41,"_39":180,"_130":24,"_37":181,"_13":59,"_33":34,"_35":182,"_23":24,"_134":-5,"_183":184,"_26":185},"b7487aaa-5b64-11f1-955e-ee650bb23af1","types.ts","b7487b72-5b64-11f1-955e-ee650bb23af1",3,["D",1780062355485],"export type CheckStatus =\n | 'SUCCESS'\n | 'FAILURE'\n | 'WARNING'\n | 'SKIPPED'\n | 'INFO';\n\nexport interface SpecReference {\n id: string;\n url?: string;\n}\n\nexport interface ConformanceCheck {\n id: string;\n name: string;\n description: string;\n status: CheckStatus;\n timestamp: string;\n specReferences?: SpecReference[];\n details?: Record;\n metadata?: Record;\n errorMessage?: string;\n logs?: string[];\n}\n\nexport const DATED_SPEC_VERSIONS = [\n '2025-03-26',\n '2025-06-18',\n '2025-11-25'\n] as const;\n\nexport type DatedSpecVersion = (typeof DATED_SPEC_VERSIONS)[number];\n\nexport const LATEST_SPEC_VERSION: DatedSpecVersion = '2025-11-25';\n\n/**\n * Wire `protocolVersion` for the in-progress spec. Mirrors\n * `LATEST_PROTOCOL_VERSION` in the spec repo's `schema/draft/schema.ts`;\n * bump when that constant changes.\n */\nexport const DRAFT_PROTOCOL_VERSION = 'DRAFT-2026-v1';\n\n// Wire protocolVersion strings the mock server will negotiate on initialize.\nexport const NEGOTIABLE_PROTOCOL_VERSIONS: readonly string[] = [\n '2025-06-18',\n LATEST_SPEC_VERSION,\n DRAFT_PROTOCOL_VERSION\n];\n\n/**\n * A spec revision the conformance suite can target via `--spec-version`.\n * Always a wire `protocolVersion` string. The CLI also accepts `'draft'` as\n * an alias for {@link DRAFT_PROTOCOL_VERSION}.\n */\nexport type SpecVersion = DatedSpecVersion | typeof DRAFT_PROTOCOL_VERSION;\n\n// Scenarios may also be tagged 'extension' to mark them as off-timeline\n// (selectable via --suite extensions, never via --spec-version). See #256.\nexport type ScenarioSpecTag = SpecVersion | 'extension';\n\n/**\n * Known protocol extensions that this suite has scenarios for.\n * Values are SEP-2133 extension identifiers (the keys used in\n * `capabilities.extensions`).\n */\nexport const EXTENSION_IDS = [\n 'io.modelcontextprotocol/oauth-client-credentials',\n 'io.modelcontextprotocol/enterprise-managed-authorization'\n] as const;\nexport type ExtensionId = (typeof EXTENSION_IDS)[number];\n\n/**\n * Where a scenario's requirement comes from. Either the dated spec timeline\n * (`introducedIn`/`removedIn`) or a named protocol extension that lives\n * outside the spec release cycle. Extensions never match `--spec-version`.\n */\nexport type ScenarioSource =\n | {\n introducedIn: DatedSpecVersion | typeof DRAFT_PROTOCOL_VERSION;\n removedIn?: DatedSpecVersion | typeof DRAFT_PROTOCOL_VERSION;\n }\n | { extensionId: ExtensionId };\n\nexport interface ScenarioUrls {\n serverUrl: string;\n authUrl?: string;\n /**\n * Optional context to pass to the client via MCP_CONFORMANCE_CONTEXT env var.\n * This is a JSON-serializable object containing scenario-specific data like credentials.\n */\n context?: Record;\n}\n\n/** A Node-style request handler — what `http.createServer` accepts. */\nexport type RequestListener = (\n req: import('http').IncomingMessage,\n res: import('http').ServerResponse\n) => void;\n\nexport interface Scenario {\n name: string;\n description: string;\n source: ScenarioSource;\n /**\n * If true, a non-zero client exit code is expected and will not cause the test to fail.\n * Use this for scenarios where the client is expected to error (e.g., rejecting invalid auth).\n */\n allowClientError?: boolean;\n /**\n * Sub-path of the MCP endpoint relative to the handler root. The CLI runner\n * appends this to the listen URL; the hosted runner appends it to the\n * mounted prefix. Default: '' (handler root is the MCP endpoint).\n */\n mcpPath?: string;\n /**\n * Return the request handler without binding a port. The hosted runner\n * mounts this directly under a path prefix so scenarios can run on\n * serverless hosts that don't allow loopback listeners.\n *\n * `getBaseUrl` returns the public URL this handler is reachable at (no\n * trailing slash) — use it for scenarios that embed self-referential\n * absolute URLs in responses. Called lazily so `start()` can resolve it\n * after the OS assigns a port.\n *\n * Implementations should reset per-run state here, not in `start()`.\n * If omitted, the scenario only runs via `start()`/`stop()` (e.g. auth\n * scenarios that need a second origin).\n */\n handler?(getBaseUrl: () => string): RequestListener;\n start(): Promise;\n stop(): Promise;\n getChecks(): ConformanceCheck[];\n}\n\n/**\n * Convenience: implement `handler()` + `mcpPath` and get `start()`/`stop()`\n * for free. Covers every scenario that just needs one HTTP origin.\n */\nexport abstract class HandlerScenario implements Scenario {\n abstract name: string;\n abstract description: string;\n abstract readonly source: ScenarioSource;\n allowClientError?: boolean;\n mcpPath = '';\n\n private _server: import('http').Server | null = null;\n private _baseUrl = '';\n\n abstract handler(getBaseUrl: () => string): RequestListener;\n abstract getChecks(): ConformanceCheck[];\n\n async start(): Promise {\n const http = await import('node:http');\n const listener = this.handler(() => this._baseUrl);\n return new Promise((resolve, reject) => {\n this._server = http.createServer(listener);\n this._server.on('error', reject);\n this._server.listen(0, () => {\n const addr = this._server!.address();\n if (!addr || typeof addr !== 'object') {\n return reject(new Error('Failed to get server address'));\n }\n this._baseUrl = `http://localhost:${addr.port}`;\n resolve({ serverUrl: `${this._baseUrl}${this.mcpPath}` });\n });\n });\n }\n\n async stop(): Promise {\n if (!this._server) return;\n await new Promise((resolve) => {\n // closeAllConnections so hung SSE streams don't keep the process alive\n this._server!.closeAllConnections?.();\n this._server!.close(() => resolve());\n });\n this._server = null;\n }\n}\n\n/**\n * Named extra origins a multi-origin scenario needs beyond the resource\n * server. `as` is the OAuth authorization server; `as2`/`idp` cover the\n * three-origin scenarios (authorization-server-migration, EMA).\n */\nexport type AuxOriginRole = 'as' | 'as2' | 'idp';\n\nexport interface AuthHandlerContext {\n /** Public URL of the resource-server mount (no trailing slash). */\n getRsBaseUrl: () => string;\n /**\n * Public URL of an aux origin for this run (no trailing slash). When\n * hosted, this is `/r/` so the run-id is recoverable\n * from any path the client constructs from it (RFC 8414 well-known\n * insertion, endpoint paths, etc.).\n */\n getAuxBaseUrl: (role: AuxOriginRole) => string;\n}\n\nexport interface AuthHandlers {\n /** Resource-server handler — serves /mcp and PRM. */\n rs: RequestListener;\n /** Aux-origin handlers keyed by role. */\n aux: Partial>;\n}\n\n/**\n * Convenience: implement `authHandlers()` and get `start()`/`stop()` for\n * free. `start()` binds one ephemeral localhost port per origin, exactly as\n * the auth scenarios did with `ServerLifecycle` before; the hosted runner\n * mounts the same handlers behind path prefixes + an AS relay instead.\n */\nexport abstract class AuthHandlerScenario implements Scenario {\n abstract name: string;\n abstract description: string;\n abstract readonly source: ScenarioSource;\n allowClientError?: boolean;\n mcpPath = '/mcp';\n\n /** Aux origins this scenario needs. Override for 3-origin scenarios. */\n readonly auxRoles: readonly AuxOriginRole[] = ['as'];\n\n private _servers: import('http').Server[] = [];\n private _urls: { rs: string; aux: Partial> } = {\n rs: '',\n aux: {}\n };\n\n abstract authHandlers(ctx: AuthHandlerContext): AuthHandlers;\n abstract getChecks(): ConformanceCheck[];\n\n /** Optional context to pass to the client (credentials etc). */\n protected scenarioContext?(): Record;\n\n async start(): Promise {\n const http = await import('node:http');\n const handlers = this.authHandlers({\n getRsBaseUrl: () => this._urls.rs,\n getAuxBaseUrl: (role) => {\n const u = this._urls.aux[role];\n if (!u) throw new Error(`aux role '${role}' not started`);\n return u;\n }\n });\n\n const listen = (h: RequestListener): Promise =>\n new Promise((resolve, reject) => {\n const srv = http.createServer(h);\n srv.on('error', reject);\n srv.listen(0, () => {\n const addr = srv.address();\n if (!addr || typeof addr !== 'object') {\n return reject(new Error('Failed to get server address'));\n }\n this._servers.push(srv);\n resolve(`http://localhost:${addr.port}`);\n });\n });\n\n // Aux origins must come up first — RS handlers reference their URLs.\n for (const role of this.auxRoles) {\n const h = handlers.aux[role];\n if (!h) throw new Error(`authHandlers() missing aux role '${role}'`);\n this._urls.aux[role] = await listen(h);\n }\n this._urls.rs = await listen(handlers.rs);\n\n return {\n serverUrl: `${this._urls.rs}${this.mcpPath}`,\n ...(this.scenarioContext && { context: this.scenarioContext() })\n };\n }\n\n async stop(): Promise {\n await Promise.all(\n this._servers.map(\n (s) =>\n new Promise((resolve) => {\n s.closeAllConnections?.();\n s.close(() => resolve());\n })\n )\n );\n this._servers = [];\n this._urls = { rs: '', aux: {} };\n }\n}\n\nexport interface ClientScenario {\n name: string;\n description: string;\n source: ScenarioSource;\n run(serverUrl: string): Promise;\n}\n\nexport interface ClientScenarioForAuthorizationServer {\n name: string;\n description: string;\n source: ScenarioSource;\n run(serverUrl: string): Promise;\n}\n","children",[],[126,178],"b7940178-5b64-11f1-9ce4-ee650bb23af1","index.ts","b794027c-5b64-11f1-9ce4-ee650bb23af1","ec547970-9fd6-4c74-ae5e-72dd42f06d81",4,["D",1780062355899],"import {\n Scenario,\n ClientScenario,\n ClientScenarioForAuthorizationServer,\n ScenarioSource,\n SpecVersion,\n DatedSpecVersion,\n ScenarioSpecTag,\n DATED_SPEC_VERSIONS,\n DRAFT_PROTOCOL_VERSION\n} from '../types.ts';\nimport { InitializeScenario } from './client/initialize.ts';\nimport { ToolsCallScenario } from './client/tools_call.ts';\nimport { ElicitationClientDefaultsScenario } from './client/elicitation-defaults.ts';\nimport { SSERetryScenario } from './client/sse-retry.ts';\nimport { RequestMetadataScenario } from './client/request-metadata.ts';\nimport { MRTRClientScenario } from './client/mrtr-client.ts';\n\n// Import all new server test scenarios\nimport { ServerInitializeScenario } from './server/lifecycle.ts';\nimport { ServerStatelessScenario } from './server/stateless.ts';\n\nimport {\n PingScenario,\n LoggingSetLevelScenario,\n CompletionCompleteScenario\n} from './server/utils.ts';\n\nimport {\n ToolsListScenario,\n ToolsCallSimpleTextScenario,\n ToolsCallImageScenario,\n ToolsCallMultipleContentTypesScenario,\n ToolsCallWithLoggingScenario,\n ToolsCallErrorScenario,\n ToolsCallWithProgressScenario,\n ToolsCallSamplingScenario,\n ToolsCallElicitationScenario,\n ToolsCallAudioScenario,\n ToolsCallEmbeddedResourceScenario\n} from './server/tools.ts';\n\nimport { JsonSchema2020_12Scenario } from './server/json-schema-2020-12.ts';\n\nimport { ElicitationDefaultsScenario } from './server/elicitation-defaults.ts';\nimport { ElicitationEnumsScenario } from './server/elicitation-enums.ts';\nimport { ServerSSEPollingScenario } from './server/sse-polling.ts';\nimport { ServerSSEMultipleStreamsScenario } from './server/sse-multiple-streams.ts';\n\nimport {\n ResourcesListScenario,\n ResourcesReadTextScenario,\n ResourcesReadBinaryScenario,\n ResourcesTemplateReadScenario,\n ResourcesSubscribeScenario,\n ResourcesUnsubscribeScenario,\n ResourcesNotFoundErrorScenario\n} from './server/resources.ts';\n\nimport {\n PromptsListScenario,\n PromptsGetSimpleScenario,\n PromptsGetWithArgsScenario,\n PromptsGetEmbeddedResourceScenario,\n PromptsGetWithImageScenario\n} from './server/prompts.ts';\n\nimport { DNSRebindingProtectionScenario } from './server/dns-rebinding.ts';\nimport { CachingScenario } from './server/caching.ts';\n\n// InputRequiredResult scenarios from (SEP-2322)\nimport {\n InputRequiredResultBasicElicitationScenario,\n InputRequiredResultBasicSamplingScenario,\n InputRequiredResultBasicListRootsScenario,\n InputRequiredResultRequestStateScenario,\n InputRequiredResultMultipleInputRequestsScenario,\n InputRequiredResultMultiRoundScenario,\n InputRequiredResultMissingInputResponseScenario,\n InputRequiredResultNonToolRequestScenario,\n InputRequiredResultResultTypeScenario,\n InputRequiredResultUnsupportedMethodsScenario,\n InputRequiredResultTamperedStateScenario,\n InputRequiredResultCapabilityCheckScenario,\n InputRequiredResultIgnoreExtraParamsScenario,\n InputRequiredResultValidateInputScenario\n} from './server/input-required-result.ts';\n\nimport {\n HttpHeaderValidationScenario,\n HttpCustomHeaderServerValidationScenario\n} from './server/http-standard-headers.ts';\n\nimport {\n authScenariosList,\n backcompatScenariosList,\n draftScenariosList,\n extensionScenariosList\n} from './client/auth/index.ts';\nimport { listMetadataScenarios } from './client/auth/discovery-metadata.ts';\nimport { AuthorizationServerMetadataEndpointScenario } from './authorization-server/authorization-server-metadata.ts';\n\nimport { HttpStandardHeadersScenario } from './client/http-standard-headers.ts';\nimport {\n HttpCustomHeadersScenario,\n HttpInvalidToolHeadersScenario\n} from './client/http-custom-headers.ts';\nimport { JsonSchemaRefDerefScenario } from './client/json-schema-ref-deref.ts';\n\n// Pending client scenarios (not yet fully tested/implemented)\nconst pendingClientScenariosList: ClientScenario[] = [\n // JSON Schema 2020-12 (SEP-1613)\n // This test is pending until the SDK includes PR #1135 which preserves\n // $schema, $defs, and additionalProperties fields in tool schemas.\n new JsonSchema2020_12Scenario(),\n\n // On hold until server-side SSE improvements are made\n // https://github.com/modelcontextprotocol/typescript-sdk/pull/1129\n new ServerSSEPollingScenario(),\n\n // HTTP Standardization (SEP-2243)\n // Pending until the everything-server fully implements SEP-2243\n // header validation (case-insensitive names, whitespace trimming, -32001 error code)\n new HttpHeaderValidationScenario(),\n new HttpCustomHeaderServerValidationScenario()\n];\n\n// All client scenarios\nconst allClientScenariosList: ClientScenario[] = [\n // Lifecycle scenarios\n new ServerInitializeScenario(),\n new ServerStatelessScenario(),\n\n // Utilities scenarios\n new LoggingSetLevelScenario(),\n new PingScenario(),\n new CompletionCompleteScenario(),\n\n // Tools scenarios\n new ToolsListScenario(),\n new ToolsCallSimpleTextScenario(),\n new ToolsCallImageScenario(),\n new ToolsCallAudioScenario(),\n new ToolsCallEmbeddedResourceScenario(),\n new ToolsCallMultipleContentTypesScenario(),\n new ToolsCallWithLoggingScenario(),\n new ToolsCallErrorScenario(),\n new ToolsCallWithProgressScenario(),\n new ToolsCallSamplingScenario(),\n new ToolsCallElicitationScenario(),\n\n // JSON Schema 2020-12 support (SEP-1613)\n new JsonSchema2020_12Scenario(),\n\n // Elicitation scenarios (SEP-1034)\n new ElicitationDefaultsScenario(),\n\n // SSE Polling scenarios (SEP-1699)\n new ServerSSEPollingScenario(),\n new ServerSSEMultipleStreamsScenario(),\n\n // Elicitation scenarios (SEP-1330) - pending\n new ElicitationEnumsScenario(),\n\n // Resources scenarios\n new ResourcesListScenario(),\n new ResourcesReadTextScenario(),\n new ResourcesReadBinaryScenario(),\n new ResourcesTemplateReadScenario(),\n new ResourcesSubscribeScenario(),\n new ResourcesUnsubscribeScenario(),\n\n // Resources error handling (SEP-2164)\n new ResourcesNotFoundErrorScenario(),\n\n // Prompts scenarios\n new PromptsListScenario(),\n new PromptsGetSimpleScenario(),\n new PromptsGetWithArgsScenario(),\n new PromptsGetEmbeddedResourceScenario(),\n new PromptsGetWithImageScenario(),\n\n // Security scenarios\n new DNSRebindingProtectionScenario(),\n\n // Caching scenarios (SEP-2549)\n new CachingScenario(),\n // HTTP Standardization scenarios (SEP-2243)\n new HttpHeaderValidationScenario(),\n new HttpCustomHeaderServerValidationScenario(),\n\n // InputRequiredResult scenarios (SEP-2322)\n new InputRequiredResultBasicElicitationScenario(),\n new InputRequiredResultBasicSamplingScenario(),\n new InputRequiredResultBasicListRootsScenario(),\n new InputRequiredResultRequestStateScenario(),\n new InputRequiredResultMultipleInputRequestsScenario(),\n new InputRequiredResultMultiRoundScenario(),\n new InputRequiredResultMissingInputResponseScenario(),\n new InputRequiredResultNonToolRequestScenario(),\n new InputRequiredResultResultTypeScenario(),\n new InputRequiredResultUnsupportedMethodsScenario(),\n new InputRequiredResultTamperedStateScenario(),\n new InputRequiredResultCapabilityCheckScenario(),\n new InputRequiredResultIgnoreExtraParamsScenario(),\n new InputRequiredResultValidateInputScenario()\n];\n\n// Scenarios that test requirements introduced in the in-progress draft spec.\n// They run via `--suite draft` (or `--suite all`) and are excluded from the\n// default `active` suite until the draft is published as a dated release.\nconst draftClientScenariosList: ClientScenario[] =\n allClientScenariosList.filter(\n (scenario) =>\n 'introducedIn' in scenario.source &&\n scenario.source.introducedIn === DRAFT_PROTOCOL_VERSION\n );\n\n// Active client scenarios (excludes pending and draft)\nconst activeClientScenariosList: ClientScenario[] =\n allClientScenariosList.filter(\n (scenario) =>\n !pendingClientScenariosList.some(\n (pending) => pending.name === scenario.name\n ) &&\n !draftClientScenariosList.some((draft) => draft.name === scenario.name)\n );\n\n// Client scenarios map - built from list\nexport const clientScenarios = new Map(\n allClientScenariosList.map((scenario) => [scenario.name, scenario])\n);\n\n// All client scenarios for authorization server\nconst allClientScenariosListForAuthorizationServer: ClientScenario[] = [\n // Authorization server scenarios\n new AuthorizationServerMetadataEndpointScenario()\n];\n\n// Client scenarios map for authorization server - built from list\nexport const clientScenariosForAuthorizationServer = new Map<\n string,\n ClientScenario\n>(\n allClientScenariosListForAuthorizationServer.map((scenario) => [\n scenario.name,\n scenario\n ])\n);\n\n// All client test scenarios (core + backcompat + extensions)\nconst scenariosList: Scenario[] = [\n new InitializeScenario(),\n new ToolsCallScenario(),\n new ElicitationClientDefaultsScenario(),\n new SSERetryScenario(),\n new RequestMetadataScenario(),\n ...authScenariosList,\n ...backcompatScenariosList,\n ...draftScenariosList,\n ...extensionScenariosList,\n\n // MRTR client conformance (SEP-2322)\n new MRTRClientScenario(),\n\n // HTTP Standardization scenarios (SEP-2243)\n new HttpStandardHeadersScenario(),\n new HttpCustomHeadersScenario(),\n new HttpInvalidToolHeadersScenario(),\n\n // JSON Schema network $ref dereferencing (SEP-2106)\n new JsonSchemaRefDerefScenario()\n];\n\n// Core scenarios (tier 1 requirements)\nconst coreScenariosList: Scenario[] = [\n new InitializeScenario(),\n new ToolsCallScenario(),\n new ElicitationClientDefaultsScenario(),\n new SSERetryScenario(),\n ...authScenariosList\n];\n\n// Scenarios map - built from list\nexport const scenarios = new Map(\n scenariosList.map((scenario) => [scenario.name, scenario])\n);\n\nexport function registerScenario(name: string, scenario: Scenario): void {\n scenarios.set(name, scenario);\n}\n\nexport function getScenario(name: string): Scenario | undefined {\n return scenarios.get(name);\n}\n\nexport function getClientScenario(name: string): ClientScenario | undefined {\n return clientScenarios.get(name);\n}\n\nexport function getClientScenarioForAuthorizationServer(\n name: string\n): ClientScenarioForAuthorizationServer | undefined {\n return clientScenariosForAuthorizationServer.get(name);\n}\n\nexport function listScenarios(): string[] {\n return Array.from(scenarios.keys());\n}\n\nexport function listClientScenarios(): string[] {\n return Array.from(clientScenarios.keys());\n}\n\nexport function listActiveClientScenarios(): string[] {\n return activeClientScenariosList.map((scenario) => scenario.name);\n}\n\nexport function listPendingClientScenarios(): string[] {\n return pendingClientScenariosList.map((scenario) => scenario.name);\n}\n\nexport function listAuthScenarios(): string[] {\n return authScenariosList.map((scenario) => scenario.name);\n}\n\nexport function listCoreScenarios(): string[] {\n return coreScenariosList.map((scenario) => scenario.name);\n}\n\nexport function listExtensionScenarios(): string[] {\n return extensionScenariosList.map((scenario) => scenario.name);\n}\n\nexport function listBackcompatScenarios(): string[] {\n return backcompatScenariosList.map((scenario) => scenario.name);\n}\n\nexport function listClientScenariosForAuthorizationServer(): string[] {\n return Array.from(clientScenariosForAuthorizationServer.keys());\n}\n\n// All client-testing scenarios that target the draft spec, derived from the\n// declared `source.introducedIn` rather than a hand-maintained list (covers\n// both the auth draft scenarios and the non-auth ones, e.g. SEP-2243/2575).\nconst draftSpecScenariosList: Scenario[] = scenariosList.filter(\n (scenario) =>\n 'introducedIn' in scenario.source &&\n scenario.source.introducedIn === DRAFT_PROTOCOL_VERSION\n);\n\nexport function listDraftScenarios(): string[] {\n return draftSpecScenariosList.map((scenario) => scenario.name);\n}\n\nexport function listDraftClientScenarios(): string[] {\n return draftClientScenariosList.map((scenario) => scenario.name);\n}\n\nexport { listMetadataScenarios };\n\n// All valid spec versions, used by the CLI to validate --spec-version input.\n// 'extension' is intentionally excluded — extension scenarios are off-timeline\n// and selected via `--suite extensions`, not `--spec-version`.\nexport const ALL_SPEC_VERSIONS: SpecVersion[] = [\n ...DATED_SPEC_VERSIONS,\n DRAFT_PROTOCOL_VERSION\n];\n\nexport function resolveSpecVersion(value: string): SpecVersion {\n if (value === 'draft') return DRAFT_PROTOCOL_VERSION;\n if (ALL_SPEC_VERSIONS.includes(value as SpecVersion)) {\n return value as SpecVersion;\n }\n console.error(`Unknown spec version: ${value}`);\n console.error(\n `Valid versions: ${ALL_SPEC_VERSIONS.join(', ')} (or 'draft' as an alias for ${DRAFT_PROTOCOL_VERSION})`\n );\n process.exit(1);\n}\n\nfunction versionIndex(\n v: DatedSpecVersion | typeof DRAFT_PROTOCOL_VERSION\n): number {\n return ALL_SPEC_VERSIONS.indexOf(v);\n}\n\n// Off-timeline sources (extensions etc.) are never selected by --spec-version.\nfunction matchesSpecVersion(\n source: ScenarioSource,\n version: SpecVersion\n): boolean {\n if ('extensionId' in source) return false;\n return (\n versionIndex(source.introducedIn) <= versionIndex(version) &&\n (source.removedIn === undefined ||\n versionIndex(version) < versionIndex(source.removedIn))\n );\n}\n\nexport function listScenariosForSpec(version: SpecVersion): string[] {\n return scenariosList\n .filter((s) => matchesSpecVersion(s.source, version))\n .map((s) => s.name);\n}\n\nexport function listClientScenariosForSpec(version: SpecVersion): string[] {\n return allClientScenariosList\n .filter((s) => matchesSpecVersion(s.source, version))\n .map((s) => s.name);\n}\n\nexport function listClientScenariosForAuthorizationServerForSpec(\n version: SpecVersion\n): string[] {\n return allClientScenariosListForAuthorizationServer\n .filter((s) => matchesSpecVersion(s.source, version))\n .map((s) => s.name);\n}\n\nexport function getScenarioSpecVersions(\n name: string\n): ScenarioSpecTag[] | undefined {\n const s =\n scenarios.get(name) ??\n clientScenarios.get(name) ??\n clientScenariosForAuthorizationServer.get(name);\n if (!s) return undefined;\n if ('extensionId' in s.source) return ['extension'];\n const result: ScenarioSpecTag[] = [];\n for (const v of ALL_SPEC_VERSIONS) {\n if (matchesSpecVersion(s.source, v)) result.push(v);\n }\n return result;\n}\n\nexport type { SpecVersion, ScenarioSpecTag };\n",[],[126,195,187],"scenarios","b9d2f5e8-5b64-11f1-9c4b-ee650bb23af1","input-required-result.ts","b9d2f6c4-5b64-11f1-9c4b-ee650bb23af1","39bcecba-59ca-438c-8d5d-c30bd3bd5cb2",14,["D",1780062359756],"/**\n * SEP-2322: InputRequiredResult - Ephemeral Workflow Tests\n *\n * Tests the ephemeral (stateless) workflow where servers respond with\n * InputRequiredResult containing inputRequests and/or requestState, and\n * clients retry with inputResponses and echoed requestState.\n */\n\nimport {\n ClientScenario,\n ConformanceCheck,\n DRAFT_PROTOCOL_VERSION,\n SpecVersion\n} from '../../types.ts';\nimport {\n sendRpc,\n isInputRequiredResult,\n isCompleteResult,\n mockElicitResponse,\n mockSamplingResponse,\n mockListRootsResponse,\n MRTR_SPEC_REFERENCES\n} from './input-required-result-helpers.ts';\n\n// ─── A1: Basic Elicitation ────────────────────────────────────────────────────\n\nexport class InputRequiredResultBasicElicitationScenario implements ClientScenario {\n name = 'input-required-result-basic-elicitation';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n specVersions: SpecVersion[] = [DRAFT_PROTOCOL_VERSION];\n description = `Test basic ephemeral InputRequiredResult flow with a single elicitation input request (SEP-2322).\n\n**Server Implementation Requirements:**\n\nImplement a tool named \\`test_input_required_result_elicitation\\` (no arguments required).\n\n**Behavior (Round 1):** When called without \\`inputResponses\\`, return an \\`InputRequiredResult\\`:\n\n\\`\\`\\`json\n{\n \"resultType\": \"input_required\",\n \"inputRequests\": {\n \"user_name\": {\n \"method\": \"elicitation/create\",\n \"params\": {\n \"message\": \"What is your name?\",\n \"requestedSchema\": {\n \"type\": \"object\",\n \"properties\": {\n \"name\": { \"type\": \"string\" }\n },\n \"required\": [\"name\"]\n }\n }\n }\n }\n}\n\\`\\`\\`\n\n**Behavior (Round 2):** When called with \\`inputResponses\\` containing the key \\`\"user_name\"\\`, return a complete result:\n\n\\`\\`\\`json\n{\n \"content\": [{ \"type\": \"text\", \"text\": \"Hello, !\" }]\n}\n\\`\\`\\``;\n\n async run(serverUrl: string): Promise {\n const checks: ConformanceCheck[] = [];\n\n try {\n // Round 1: Initial call — expect InputRequiredResult\n const r1 = await sendRpc(serverUrl, 'tools/call', {\n name: 'test_input_required_result_elicitation',\n arguments: {}\n });\n\n const r1Result = r1.result;\n const r1Errors: string[] = [];\n\n if (r1.error) {\n r1Errors.push(`JSON-RPC error: ${r1.error.message}`);\n } else if (!r1Result) {\n r1Errors.push('No result in response');\n } else if (!isInputRequiredResult(r1Result)) {\n r1Errors.push(\n 'Expected InputRequiredResult but got a complete result. ' +\n 'Server should return resultType: \"input_required\" with inputRequests.'\n );\n } else {\n if (!r1Result.inputRequests) {\n r1Errors.push('InputRequiredResult missing inputRequests');\n } else if (!r1Result.inputRequests['user_name']) {\n r1Errors.push('inputRequests missing expected key \"user_name\"');\n } else {\n const req = r1Result.inputRequests['user_name'];\n if (req.method !== 'elicitation/create') {\n r1Errors.push(\n `Expected method \"elicitation/create\", got \"${req.method}\"`\n );\n }\n }\n }\n\n checks.push({\n id: 'sep-2322-elicitation-incomplete',\n name: 'InputRequiredResultElicitationIncomplete',\n description:\n 'Server returns InputRequiredResult with elicitation inputRequest',\n status: r1Errors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: r1Errors.length > 0 ? r1Errors.join('; ') : undefined,\n specReferences: MRTR_SPEC_REFERENCES,\n details: { result: r1Result }\n });\n\n // Round 2: Retry with inputResponses — expect complete result\n if (r1Errors.length === 0 && isInputRequiredResult(r1Result)) {\n const r2 = await sendRpc(serverUrl, 'tools/call', {\n name: 'test_input_required_result_elicitation',\n arguments: {},\n inputResponses: {\n user_name: mockElicitResponse({ name: 'Alice' })\n },\n ...(r1Result.requestState !== undefined\n ? { requestState: r1Result.requestState }\n : {})\n });\n\n const r2Result = r2.result;\n const r2Errors: string[] = [];\n\n if (r2.error) {\n r2Errors.push(`JSON-RPC error: ${r2.error.message}`);\n } else if (!r2Result) {\n r2Errors.push('No result in response');\n } else if (!isCompleteResult(r2Result)) {\n r2Errors.push(\n 'Expected complete result after retry with inputResponses'\n );\n } else {\n const content = r2Result.content as\n | Array<{ type: string; text?: string }>\n | undefined;\n if (!content || !Array.isArray(content) || content.length === 0) {\n r2Errors.push('Complete result missing content array');\n }\n }\n\n checks.push({\n id: 'sep-2322-elicitation-complete',\n name: 'InputRequiredResultElicitationComplete',\n description:\n 'Server returns complete result after retry with inputResponses',\n status: r2Errors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: r2Errors.length > 0 ? r2Errors.join('; ') : undefined,\n specReferences: MRTR_SPEC_REFERENCES,\n details: { result: r2Result }\n });\n }\n } catch (error) {\n checks.push({\n id: 'sep-2322-elicitation-incomplete',\n name: 'InputRequiredResultElicitationIncomplete',\n description:\n 'Server returns InputRequiredResult with elicitation inputRequest',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: `Failed: ${error instanceof Error ? error.message : String(error)}`,\n specReferences: MRTR_SPEC_REFERENCES\n });\n }\n\n return checks;\n }\n}\n\n// ─── A2: Basic Sampling ──────────────────────────────────────────────────────\n\nexport class InputRequiredResultBasicSamplingScenario implements ClientScenario {\n name = 'input-required-result-basic-sampling';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n specVersions: SpecVersion[] = [DRAFT_PROTOCOL_VERSION];\n description = `Test basic ephemeral InputRequiredResult flow with a single sampling input request (SEP-2322).\n\n**Server Implementation Requirements:**\n\nImplement a tool named \\`test_input_required_result_sampling\\` (no arguments required).\n\n**Behavior (Round 1):** When called without \\`inputResponses\\`, return an \\`InputRequiredResult\\`:\n\n\\`\\`\\`json\n{\n \"resultType\": \"input_required\",\n \"inputRequests\": {\n \"capital_question\": {\n \"method\": \"sampling/createMessage\",\n \"params\": {\n \"messages\": [{\n \"role\": \"user\",\n \"content\": { \"type\": \"text\", \"text\": \"What is the capital of France?\" }\n }],\n \"maxTokens\": 100\n }\n }\n }\n}\n\\`\\`\\`\n\n**Behavior (Round 2):** When called with \\`inputResponses\\` containing the key \\`\"capital_question\"\\`, return a complete result with the sampling response text.`;\n\n async run(serverUrl: string): Promise {\n const checks: ConformanceCheck[] = [];\n\n try {\n // Round 1: Initial call\n const r1 = await sendRpc(serverUrl, 'tools/call', {\n name: 'test_input_required_result_sampling',\n arguments: {}\n });\n\n const r1Result = r1.result;\n const r1Errors: string[] = [];\n\n if (r1.error) {\n r1Errors.push(`JSON-RPC error: ${r1.error.message}`);\n } else if (!r1Result) {\n r1Errors.push('No result in response');\n } else if (!isInputRequiredResult(r1Result)) {\n r1Errors.push(\n 'Expected InputRequiredResult with sampling inputRequest'\n );\n } else {\n if (!r1Result.inputRequests) {\n r1Errors.push('InputRequiredResult missing inputRequests');\n } else {\n const key = Object.keys(r1Result.inputRequests)[0];\n if (!key) {\n r1Errors.push('inputRequests map is empty');\n } else {\n const req = r1Result.inputRequests[key];\n if (req.method !== 'sampling/createMessage') {\n r1Errors.push(\n `Expected method \"sampling/createMessage\", got \"${req.method}\"`\n );\n }\n }\n }\n }\n\n checks.push({\n id: 'sep-2322-sampling-incomplete',\n name: 'InputRequiredResultSamplingIncomplete',\n description:\n 'Server returns InputRequiredResult with sampling inputRequest',\n status: r1Errors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: r1Errors.length > 0 ? r1Errors.join('; ') : undefined,\n specReferences: MRTR_SPEC_REFERENCES,\n details: { result: r1Result }\n });\n\n // Round 2: Retry with inputResponses\n if (r1Errors.length === 0 && isInputRequiredResult(r1Result)) {\n const inputKey = Object.keys(r1Result.inputRequests!)[0];\n const r2 = await sendRpc(serverUrl, 'tools/call', {\n name: 'test_input_required_result_sampling',\n arguments: {},\n inputResponses: {\n [inputKey]: mockSamplingResponse('The capital of France is Paris.')\n },\n ...(r1Result.requestState !== undefined\n ? { requestState: r1Result.requestState }\n : {})\n });\n\n const r2Result = r2.result;\n const r2Errors: string[] = [];\n\n if (r2.error) {\n r2Errors.push(`JSON-RPC error: ${r2.error.message}`);\n } else if (!r2Result) {\n r2Errors.push('No result in response');\n } else if (!isCompleteResult(r2Result)) {\n r2Errors.push(\n 'Expected complete result after retry with sampling response'\n );\n }\n\n checks.push({\n id: 'sep-2322-sampling-complete',\n name: 'InputRequiredResultSamplingComplete',\n description:\n 'Server returns complete result after retry with sampling response',\n status: r2Errors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: r2Errors.length > 0 ? r2Errors.join('; ') : undefined,\n specReferences: MRTR_SPEC_REFERENCES,\n details: { result: r2Result }\n });\n }\n } catch (error) {\n checks.push({\n id: 'sep-2322-sampling-incomplete',\n name: 'InputRequiredResultSamplingIncomplete',\n description:\n 'Server returns InputRequiredResult with sampling inputRequest',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: `Failed: ${error instanceof Error ? error.message : String(error)}`,\n specReferences: MRTR_SPEC_REFERENCES\n });\n }\n\n return checks;\n }\n}\n\n// ─── A3: Basic ListRoots ─────────────────────────────────────────────────────\n\nexport class InputRequiredResultBasicListRootsScenario implements ClientScenario {\n name = 'input-required-result-basic-list-roots';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n specVersions: SpecVersion[] = [DRAFT_PROTOCOL_VERSION];\n description = `Test basic ephemeral InputRequiredResult flow with a single roots/list input request (SEP-2322).\n\n**Server Implementation Requirements:**\n\nImplement a tool named \\`test_input_required_result_list_roots\\` (no arguments required).\n\n**Behavior (Round 1):** When called without \\`inputResponses\\`, return an \\`InputRequiredResult\\`:\n\n\\`\\`\\`json\n{\n \"resultType\": \"input_required\",\n \"inputRequests\": {\n \"client_roots\": {\n \"method\": \"roots/list\",\n \"params\": {}\n }\n }\n}\n\\`\\`\\`\n\n**Behavior (Round 2):** When called with \\`inputResponses\\` containing the key \\`\"client_roots\"\\` (a ListRootsResult with a \\`roots\\` array), return a complete result that references the provided roots.`;\n\n async run(serverUrl: string): Promise {\n const checks: ConformanceCheck[] = [];\n\n try {\n // Round 1: Initial call\n const r1 = await sendRpc(serverUrl, 'tools/call', {\n name: 'test_input_required_result_list_roots',\n arguments: {}\n });\n\n const r1Result = r1.result;\n const r1Errors: string[] = [];\n\n if (r1.error) {\n r1Errors.push(`JSON-RPC error: ${r1.error.message}`);\n } else if (!r1Result) {\n r1Errors.push('No result in response');\n } else if (!isInputRequiredResult(r1Result)) {\n r1Errors.push(\n 'Expected InputRequiredResult with roots/list inputRequest'\n );\n } else {\n if (!r1Result.inputRequests) {\n r1Errors.push('InputRequiredResult missing inputRequests');\n } else {\n const key = Object.keys(r1Result.inputRequests)[0];\n if (!key) {\n r1Errors.push('inputRequests map is empty');\n } else {\n const req = r1Result.inputRequests[key];\n if (req.method !== 'roots/list') {\n r1Errors.push(\n `Expected method \"roots/list\", got \"${req.method}\"`\n );\n }\n }\n }\n }\n\n checks.push({\n id: 'sep-2322-list-roots-incomplete',\n name: 'InputRequiredResultListRootsIncomplete',\n description:\n 'Server returns InputRequiredResult with roots/list inputRequest',\n status: r1Errors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: r1Errors.length > 0 ? r1Errors.join('; ') : undefined,\n specReferences: MRTR_SPEC_REFERENCES,\n details: { result: r1Result }\n });\n\n // Round 2: Retry with inputResponses\n if (r1Errors.length === 0 && isInputRequiredResult(r1Result)) {\n const inputKey = Object.keys(r1Result.inputRequests!)[0];\n const r2 = await sendRpc(serverUrl, 'tools/call', {\n name: 'test_input_required_result_list_roots',\n arguments: {},\n inputResponses: {\n [inputKey]: mockListRootsResponse()\n },\n ...(r1Result.requestState !== undefined\n ? { requestState: r1Result.requestState }\n : {})\n });\n\n const r2Result = r2.result;\n const r2Errors: string[] = [];\n\n if (r2.error) {\n r2Errors.push(`JSON-RPC error: ${r2.error.message}`);\n } else if (!r2Result) {\n r2Errors.push('No result in response');\n } else if (!isCompleteResult(r2Result)) {\n r2Errors.push(\n 'Expected complete result after retry with roots response'\n );\n }\n\n checks.push({\n id: 'sep-2322-list-roots-complete',\n name: 'InputRequiredResultListRootsComplete',\n description:\n 'Server returns complete result after retry with roots response',\n status: r2Errors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: r2Errors.length > 0 ? r2Errors.join('; ') : undefined,\n specReferences: MRTR_SPEC_REFERENCES,\n details: { result: r2Result }\n });\n }\n } catch (error) {\n checks.push({\n id: 'sep-2322-list-roots-incomplete',\n name: 'InputRequiredResultListRootsIncomplete',\n description:\n 'Server returns InputRequiredResult with roots/list inputRequest',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: `Failed: ${error instanceof Error ? error.message : String(error)}`,\n specReferences: MRTR_SPEC_REFERENCES\n });\n }\n\n return checks;\n }\n}\n\n// ─── A4: Request State ──────────────────────────────────────────────────────\n\nexport class InputRequiredResultRequestStateScenario implements ClientScenario {\n name = 'input-required-result-request-state';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n specVersions: SpecVersion[] = [DRAFT_PROTOCOL_VERSION];\n description = `Test that requestState is correctly round-tripped in ephemeral InputRequiredResult flow (SEP-2322).\n\n**Server Implementation Requirements:**\n\nImplement a tool named \\`test_input_required_result_request_state\\` (no arguments required).\n\n**Behavior (Round 1):** Return an \\`InputRequiredResult\\` with both \\`inputRequests\\` and \\`requestState\\`:\n\n\\`\\`\\`json\n{\n \"resultType\": \"input_required\",\n \"inputRequests\": {\n \"confirm\": {\n \"method\": \"elicitation/create\",\n \"params\": {\n \"message\": \"Please confirm\",\n \"requestedSchema\": {\n \"type\": \"object\",\n \"properties\": { \"ok\": { \"type\": \"boolean\" } },\n \"required\": [\"ok\"]\n }\n }\n }\n },\n \"requestState\": \"\"\n}\n\\`\\`\\`\n\n**Behavior (Round 2):** When called with \\`inputResponses\\` AND the echoed \\`requestState\\`, validate the state and return a complete result. The text content MUST include the word \"state-ok\" to confirm the server received and validated the requestState.`;\n\n async run(serverUrl: string): Promise {\n const checks: ConformanceCheck[] = [];\n\n try {\n // Round 1\n const r1 = await sendRpc(serverUrl, 'tools/call', {\n name: 'test_input_required_result_request_state',\n arguments: {}\n });\n\n const r1Result = r1.result;\n const r1Errors: string[] = [];\n\n if (r1.error) {\n r1Errors.push(`JSON-RPC error: ${r1.error.message}`);\n } else if (!r1Result || !isInputRequiredResult(r1Result)) {\n r1Errors.push('Expected InputRequiredResult');\n } else {\n if (!r1Result.requestState) {\n r1Errors.push('InputRequiredResult missing requestState');\n }\n if (typeof r1Result.requestState !== 'string') {\n r1Errors.push('requestState must be a string');\n }\n if (!r1Result.inputRequests) {\n r1Errors.push('InputRequiredResult missing inputRequests');\n }\n }\n\n checks.push({\n id: 'sep-2322-request-state-incomplete',\n name: 'InputRequiredResultRequestStateIncomplete',\n description:\n 'Server returns InputRequiredResult with both inputRequests and requestState',\n status: r1Errors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: r1Errors.length > 0 ? r1Errors.join('; ') : undefined,\n specReferences: MRTR_SPEC_REFERENCES,\n details: { result: r1Result }\n });\n\n // Round 2: Retry with inputResponses + requestState\n if (r1Errors.length === 0 && isInputRequiredResult(r1Result)) {\n const inputKey = Object.keys(r1Result.inputRequests!)[0];\n const r2 = await sendRpc(serverUrl, 'tools/call', {\n name: 'test_input_required_result_request_state',\n arguments: {},\n inputResponses: {\n [inputKey]: mockElicitResponse({ ok: true })\n },\n requestState: r1Result.requestState\n });\n\n const r2Result = r2.result;\n const r2Errors: string[] = [];\n\n if (r2.error) {\n r2Errors.push(`JSON-RPC error: ${r2.error.message}`);\n } else if (!r2Result) {\n r2Errors.push('No result in response');\n } else if (!isCompleteResult(r2Result)) {\n r2Errors.push(\n 'Expected complete result after retry with requestState'\n );\n }\n\n checks.push({\n id: 'sep-2322-request-state-complete',\n name: 'InputRequiredResultRequestStateComplete',\n description:\n 'Server validates echoed requestState and returns complete result',\n status: r2Errors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: r2Errors.length > 0 ? r2Errors.join('; ') : undefined,\n specReferences: MRTR_SPEC_REFERENCES,\n details: { result: r2Result }\n });\n }\n } catch (error) {\n checks.push({\n id: 'sep-2322-request-state-incomplete',\n name: 'InputRequiredResultRequestStateIncomplete',\n description:\n 'Server returns InputRequiredResult with both inputRequests and requestState',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: `Failed: ${error instanceof Error ? error.message : String(error)}`,\n specReferences: MRTR_SPEC_REFERENCES\n });\n }\n\n return checks;\n }\n}\n\n// ─── A5: Multiple Input Requests ─────────────────────────────────────────────\n\nexport class InputRequiredResultMultipleInputRequestsScenario implements ClientScenario {\n name = 'input-required-result-multiple-input-requests';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n specVersions: SpecVersion[] = [DRAFT_PROTOCOL_VERSION];\n description = `Test multiple input requests in a single InputRequiredResult (SEP-2322).\n\n**Server Implementation Requirements:**\n\nImplement a tool named \\`test_input_required_result_multiple_inputs\\` (no arguments required).\n\n**Behavior (Round 1):** Return an \\`InputRequiredResult\\` with multiple \\`inputRequests\\` — elicitation, sampling, and roots/list — plus \\`requestState\\`:\n\n\\`\\`\\`json\n{\n \"resultType\": \"input_required\",\n \"inputRequests\": {\n \"user_name\": {\n \"method\": \"elicitation/create\",\n \"params\": {\n \"message\": \"What is your name?\",\n \"requestedSchema\": {\n \"type\": \"object\",\n \"properties\": { \"name\": { \"type\": \"string\" } },\n \"required\": [\"name\"]\n }\n }\n },\n \"greeting\": {\n \"method\": \"sampling/createMessage\",\n \"params\": {\n \"messages\": [{ \"role\": \"user\", \"content\": { \"type\": \"text\", \"text\": \"Generate a greeting\" } }],\n \"maxTokens\": 50\n }\n },\n \"client_roots\": {\n \"method\": \"roots/list\",\n \"params\": {}\n }\n },\n \"requestState\": \"\"\n}\n\\`\\`\\`\n\n**Behavior (Round 2):** When called with \\`inputResponses\\` containing ALL keys and the echoed \\`requestState\\`, return a complete result.`;\n\n async run(serverUrl: string): Promise {\n const checks: ConformanceCheck[] = [];\n\n try {\n // Round 1\n const r1 = await sendRpc(serverUrl, 'tools/call', {\n name: 'test_input_required_result_multiple_inputs',\n arguments: {}\n });\n\n const r1Result = r1.result;\n const r1Errors: string[] = [];\n\n if (r1.error) {\n r1Errors.push(`JSON-RPC error: ${r1.error.message}`);\n } else if (!r1Result || !isInputRequiredResult(r1Result)) {\n r1Errors.push('Expected InputRequiredResult');\n } else if (!r1Result.inputRequests) {\n r1Errors.push('InputRequiredResult missing inputRequests');\n } else {\n if (!r1Result.requestState) {\n r1Errors.push('InputRequiredResult missing requestState');\n }\n\n const keys = Object.keys(r1Result.inputRequests);\n if (keys.length < 3) {\n r1Errors.push(\n `Expected at least 3 inputRequests, got ${keys.length}`\n );\n }\n\n // Check that required method types are present\n const methods = new Set(\n keys.map((k) => r1Result.inputRequests![k].method)\n );\n if (!methods.has('elicitation/create')) {\n r1Errors.push('Expected an elicitation/create inputRequest');\n }\n if (!methods.has('sampling/createMessage')) {\n r1Errors.push('Expected a sampling/createMessage inputRequest');\n }\n if (!methods.has('roots/list')) {\n r1Errors.push('Expected a roots/list inputRequest');\n }\n if (methods.size < 3) {\n r1Errors.push(\n 'Expected inputRequests with different method types (elicitation + sampling + roots/list)'\n );\n }\n }\n\n checks.push({\n id: 'sep-2322-multiple-inputs-incomplete',\n name: 'InputRequiredResultMultipleInputsIncomplete',\n description:\n 'Server returns InputRequiredResult with multiple inputRequests of different types',\n status: r1Errors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: r1Errors.length > 0 ? r1Errors.join('; ') : undefined,\n specReferences: MRTR_SPEC_REFERENCES,\n details: { result: r1Result }\n });\n\n // Round 2: Respond to all input requests\n if (r1Errors.length === 0 && isInputRequiredResult(r1Result)) {\n const inputResponses: Record = {};\n for (const [key, req] of Object.entries(r1Result.inputRequests!)) {\n if (req.method === 'elicitation/create') {\n inputResponses[key] = mockElicitResponse({ name: 'Alice' });\n } else if (req.method === 'sampling/createMessage') {\n inputResponses[key] = mockSamplingResponse('Hello there!');\n } else if (req.method === 'roots/list') {\n inputResponses[key] = mockListRootsResponse();\n }\n }\n\n const r2 = await sendRpc(serverUrl, 'tools/call', {\n name: 'test_input_required_result_multiple_inputs',\n arguments: {},\n inputResponses,\n ...(r1Result.requestState !== undefined\n ? { requestState: r1Result.requestState }\n : {})\n });\n\n const r2Result = r2.result;\n const r2Errors: string[] = [];\n\n if (r2.error) {\n r2Errors.push(`JSON-RPC error: ${r2.error.message}`);\n } else if (!r2Result) {\n r2Errors.push('No result in response');\n } else if (!isCompleteResult(r2Result)) {\n r2Errors.push(\n 'Expected complete result after providing all inputResponses'\n );\n }\n\n checks.push({\n id: 'sep-2322-multiple-inputs-complete',\n name: 'InputRequiredResultMultipleInputsComplete',\n description:\n 'Server returns complete result after all inputResponses are provided',\n status: r2Errors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: r2Errors.length > 0 ? r2Errors.join('; ') : undefined,\n specReferences: MRTR_SPEC_REFERENCES,\n details: { result: r2Result }\n });\n }\n } catch (error) {\n checks.push({\n id: 'sep-2322-multiple-inputs-incomplete',\n name: 'InputRequiredResultMultipleInputsIncomplete',\n description:\n 'Server returns InputRequiredResult with multiple inputRequests of different types',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: `Failed: ${error instanceof Error ? error.message : String(error)}`,\n specReferences: MRTR_SPEC_REFERENCES\n });\n }\n\n return checks;\n }\n}\n\n// ─── A6: Multi-Round ─────────────────────────────────────────────────────────\n\nexport class InputRequiredResultMultiRoundScenario implements ClientScenario {\n name = 'input-required-result-multi-round';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n specVersions: SpecVersion[] = [DRAFT_PROTOCOL_VERSION];\n description = `Test multi-round ephemeral InputRequiredResult flow with evolving requestState (SEP-2322).\n\n**Server Implementation Requirements:**\n\nImplement a tool named \\`test_input_required_result_multi_round\\` (no arguments required).\n\n**Behavior (Round 1):** Return an \\`InputRequiredResult\\` with an elicitation request and \\`requestState\\`:\n\n\\`\\`\\`json\n{\n \"resultType\": \"input_required\",\n \"inputRequests\": {\n \"step1\": {\n \"method\": \"elicitation/create\",\n \"params\": {\n \"message\": \"Step 1: What is your name?\",\n \"requestedSchema\": {\n \"type\": \"object\",\n \"properties\": { \"name\": { \"type\": \"string\" } },\n \"required\": [\"name\"]\n }\n }\n }\n },\n \"requestState\": \"\"\n}\n\\`\\`\\`\n\n**Behavior (Round 2):** When called with \\`inputResponses\\` for step1 + requestState, return ANOTHER \\`InputRequiredResult\\` with a new elicitation and updated requestState:\n\n\\`\\`\\`json\n{\n \"resultType\": \"input_required\",\n \"inputRequests\": {\n \"step2\": {\n \"method\": \"elicitation/create\",\n \"params\": {\n \"message\": \"Step 2: What is your favorite color?\",\n \"requestedSchema\": {\n \"type\": \"object\",\n \"properties\": { \"color\": { \"type\": \"string\" } },\n \"required\": [\"color\"]\n }\n }\n }\n },\n \"requestState\": \"\"\n}\n\\`\\`\\`\n\n**Behavior (Round 3):** When called with \\`inputResponses\\` for step2 + updated requestState, return a complete result.`;\n\n async run(serverUrl: string): Promise {\n const checks: ConformanceCheck[] = [];\n\n try {\n // Round 1\n const r1 = await sendRpc(serverUrl, 'tools/call', {\n name: 'test_input_required_result_multi_round',\n arguments: {}\n });\n\n const r1Result = r1.result;\n let round1Complete = false;\n\n if (\n !r1.error &&\n r1Result &&\n isInputRequiredResult(r1Result) &&\n r1Result.inputRequests &&\n r1Result.requestState\n ) {\n round1Complete = true;\n }\n\n checks.push({\n id: 'sep-2322-multi-round-r1',\n name: 'InputRequiredResultMultiRoundR1',\n description:\n 'Round 1: Server returns InputRequiredResult with requestState',\n status: round1Complete ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: round1Complete\n ? undefined\n : 'Expected InputRequiredResult with inputRequests and requestState',\n specReferences: MRTR_SPEC_REFERENCES,\n details: { result: r1Result }\n });\n\n if (!round1Complete || !isInputRequiredResult(r1Result)) return checks;\n\n // Round 2: Retry — expect another InputRequiredResult\n const r1InputKey = Object.keys(r1Result.inputRequests!)[0];\n const r2 = await sendRpc(serverUrl, 'tools/call', {\n name: 'test_input_required_result_multi_round',\n arguments: {},\n inputResponses: {\n [r1InputKey]: mockElicitResponse({ name: 'Alice' })\n },\n requestState: r1Result.requestState\n });\n\n const r2Result = r2.result;\n let round2Complete = false;\n\n if (\n !r2.error &&\n r2Result &&\n isInputRequiredResult(r2Result) &&\n r2Result.inputRequests &&\n r2Result.requestState\n ) {\n // requestState should have changed\n if (r2Result.requestState !== r1Result.requestState) {\n round2Complete = true;\n }\n }\n\n checks.push({\n id: 'sep-2322-multi-round-r2',\n name: 'InputRequiredResultMultiRoundR2',\n description:\n 'Round 2: Server returns another InputRequiredResult with updated requestState',\n status: round2Complete ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: round2Complete\n ? undefined\n : 'Expected new InputRequiredResult with different requestState',\n specReferences: MRTR_SPEC_REFERENCES,\n details: { result: r2Result }\n });\n\n if (!round2Complete || !isInputRequiredResult(r2Result)) return checks;\n\n // Round 3: Final retry — expect complete result\n const r2InputKey = Object.keys(r2Result.inputRequests!)[0];\n const r3 = await sendRpc(serverUrl, 'tools/call', {\n name: 'test_input_required_result_multi_round',\n arguments: {},\n inputResponses: {\n [r2InputKey]: mockElicitResponse({ color: 'blue' })\n },\n requestState: r2Result.requestState\n });\n\n const r3Result = r3.result;\n const round3Complete =\n !r3.error && r3Result != null && isCompleteResult(r3Result);\n\n checks.push({\n id: 'sep-2322-multi-round-r3',\n name: 'InputRequiredResultMultiRoundR3',\n description: 'Round 3: Server returns complete result',\n status: round3Complete ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: round3Complete\n ? undefined\n : 'Expected complete result after final retry',\n specReferences: MRTR_SPEC_REFERENCES,\n details: { result: r3Result }\n });\n } catch (error) {\n checks.push({\n id: 'sep-2322-multi-round-r1',\n name: 'InputRequiredResultMultiRoundR1',\n description:\n 'Round 1: Server returns InputRequiredResult with requestState',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: `Failed: ${error instanceof Error ? error.message : String(error)}`,\n specReferences: MRTR_SPEC_REFERENCES\n });\n }\n\n return checks;\n }\n}\n\n// ─── A7: Missing Input Response ──────────────────────────────────────────────\n\nexport class InputRequiredResultMissingInputResponseScenario implements ClientScenario {\n name = 'input-required-result-missing-input-response';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n specVersions: SpecVersion[] = [DRAFT_PROTOCOL_VERSION];\n description = `Test error handling when client sends wrong/missing inputResponses (SEP-2322).\n\n**Server Implementation Requirements:**\n\nUse the same tool as A1: \\`test_input_required_result_elicitation\\`.\n\n**Behavior:** When the client retries with \\`inputResponses\\` that are missing required keys or contain wrong keys, the server SHOULD respond with a new \\`InputRequiredResult\\` re-requesting the missing information (NOT a JSON-RPC error).`;\n\n async run(serverUrl: string): Promise {\n const checks: ConformanceCheck[] = [];\n\n try {\n // Round 1: Send wrong inputResponses (wrong key)\n const r1 = await sendRpc(serverUrl, 'tools/call', {\n name: 'test_input_required_result_elicitation',\n arguments: {},\n inputResponses: {\n wrong_key: mockElicitResponse({ data: 'wrong' })\n }\n });\n\n const r1Result = r1.result;\n const r1Errors: string[] = [];\n\n if (r1.error) {\n // A JSON-RPC error is acceptable but the SEP prefers re-requesting\n r1Errors.push(\n 'Server returned JSON-RPC error instead of re-requesting via InputRequiredResult. ' +\n 'SEP-2322 recommends servers re-request missing information.'\n );\n } else if (!r1Result) {\n r1Errors.push('No result in response');\n } else if (!isInputRequiredResult(r1Result)) {\n r1Errors.push(\n 'Expected InputRequiredResult re-requesting missing information, ' +\n 'but got a complete result'\n );\n }\n\n checks.push({\n id: 'sep-2322-missing-response-rerequests',\n name: 'InputRequiredResultMissingResponseRerequests',\n description:\n 'Server re-requests missing inputResponses via new InputRequiredResult',\n status: r1Errors.length === 0 ? 'SUCCESS' : 'WARNING',\n timestamp: new Date().toISOString(),\n errorMessage: r1Errors.length > 0 ? r1Errors.join('; ') : undefined,\n specReferences: MRTR_SPEC_REFERENCES,\n details: { result: r1Result }\n });\n } catch (error) {\n checks.push({\n id: 'sep-2322-missing-response-rerequests',\n name: 'InputRequiredResultMissingResponseRerequests',\n description:\n 'Server re-requests missing inputResponses via new InputRequiredResult',\n status: 'WARNING',\n timestamp: new Date().toISOString(),\n errorMessage: `Failed: ${error instanceof Error ? error.message : String(error)}`,\n specReferences: MRTR_SPEC_REFERENCES\n });\n }\n\n return checks;\n }\n}\n\n// ─── A9: Non-Tool Request (prompts/get) ──────────────────────────────────────\n\nexport class InputRequiredResultNonToolRequestScenario implements ClientScenario {\n name = 'input-required-result-non-tool-request';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n specVersions: SpecVersion[] = [DRAFT_PROTOCOL_VERSION];\n description = `Test InputRequiredResult on a non-tool request (prompts/get) to verify InputRequiredResult is universal (SEP-2322).\n\n**Server Implementation Requirements:**\n\nImplement a prompt named \\`test_input_required_result_prompt\\` that requires elicitation input.\n\n**Behavior (Round 1):** When \\`prompts/get\\` is called for \\`test_input_required_result_prompt\\` without \\`inputResponses\\`, return an \\`InputRequiredResult\\`:\n\n\\`\\`\\`json\n{\n \"resultType\": \"input_required\",\n \"inputRequests\": {\n \"user_context\": {\n \"method\": \"elicitation/create\",\n \"params\": {\n \"message\": \"What context should the prompt use?\",\n \"requestedSchema\": {\n \"type\": \"object\",\n \"properties\": { \"context\": { \"type\": \"string\" } },\n \"required\": [\"context\"]\n }\n }\n }\n }\n}\n\\`\\`\\`\n\n**Behavior (Round 2):** When called with \\`inputResponses\\`, return a complete \\`GetPromptResult\\`.`;\n\n async run(serverUrl: string): Promise {\n const checks: ConformanceCheck[] = [];\n\n try {\n // Round 1\n const r1 = await sendRpc(serverUrl, 'prompts/get', {\n name: 'test_input_required_result_prompt'\n });\n\n const r1Result = r1.result;\n const r1Errors: string[] = [];\n\n if (r1.error) {\n r1Errors.push(`JSON-RPC error: ${r1.error.message}`);\n } else if (!r1Result || !isInputRequiredResult(r1Result)) {\n r1Errors.push('Expected InputRequiredResult from prompts/get');\n } else if (!r1Result.inputRequests) {\n r1Errors.push('InputRequiredResult missing inputRequests');\n }\n\n checks.push({\n id: 'sep-2322-non-tool-incomplete',\n name: 'InputRequiredResultNonToolIncomplete',\n description:\n 'prompts/get returns InputRequiredResult with inputRequests',\n status: r1Errors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: r1Errors.length > 0 ? r1Errors.join('; ') : undefined,\n specReferences: MRTR_SPEC_REFERENCES,\n details: { result: r1Result }\n });\n\n // Round 2: Retry with inputResponses\n if (r1Errors.length === 0 && isInputRequiredResult(r1Result)) {\n const inputKey = Object.keys(r1Result.inputRequests!)[0];\n const r2 = await sendRpc(serverUrl, 'prompts/get', {\n name: 'test_input_required_result_prompt',\n inputResponses: {\n [inputKey]: mockElicitResponse({ context: 'test context' })\n },\n ...(r1Result.requestState !== undefined\n ? { requestState: r1Result.requestState }\n : {})\n });\n\n const r2Result = r2.result;\n const r2Errors: string[] = [];\n\n if (r2.error) {\n r2Errors.push(`JSON-RPC error: ${r2.error.message}`);\n } else if (!r2Result) {\n r2Errors.push('No result in response');\n } else if (!isCompleteResult(r2Result)) {\n r2Errors.push('Expected complete GetPromptResult after retry');\n } else if (!r2Result.messages) {\n r2Errors.push(\n 'Complete result missing messages (expected GetPromptResult)'\n );\n }\n\n checks.push({\n id: 'sep-2322-non-tool-complete',\n name: 'InputRequiredResultNonToolComplete',\n description:\n 'prompts/get returns complete GetPromptResult after retry with inputResponses',\n status: r2Errors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: r2Errors.length > 0 ? r2Errors.join('; ') : undefined,\n specReferences: MRTR_SPEC_REFERENCES,\n details: { result: r2Result }\n });\n }\n } catch (error) {\n checks.push({\n id: 'sep-2322-non-tool-incomplete',\n name: 'InputRequiredResultNonToolIncomplete',\n description:\n 'prompts/get returns InputRequiredResult with inputRequests',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: `Failed: ${error instanceof Error ? error.message : String(error)}`,\n specReferences: MRTR_SPEC_REFERENCES\n });\n }\n\n return checks;\n }\n}\n\n// ─── A10: ResultType Included ────────────────────────────────────────────────\n\nexport class InputRequiredResultResultTypeScenario implements ClientScenario {\n name = 'input-required-result-result-type';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n specVersions: SpecVersion[] = [DRAFT_PROTOCOL_VERSION];\n description = `Test that server explicitly includes resultType field in InputRequiredResult responses (SEP-2322).\n\n**Server Implementation Requirements:**\n\nUses the same tool as A1: \\`test_input_required_result_elicitation\\`.\n\nThis scenario verifies that the resultType field is explicitly present in the response (not just inferred).`;\n\n async run(serverUrl: string): Promise {\n const checks: ConformanceCheck[] = [];\n\n try {\n const r1 = await sendRpc(serverUrl, 'tools/call', {\n name: 'test_input_required_result_elicitation',\n arguments: {}\n });\n\n const r1Result = r1.result;\n const errors: string[] = [];\n\n if (r1.error) {\n errors.push(`JSON-RPC error: ${r1.error.message}`);\n } else if (!r1Result) {\n errors.push('No result in response');\n } else if (!('resultType' in r1Result)) {\n errors.push(\n 'resultType field is missing from response. Servers MUST include resultType to indicate the type of the result.'\n );\n } else if (r1Result.resultType !== 'input_required') {\n errors.push(\n `Expected resultType \"input_required\", got \"${r1Result.resultType}\"`\n );\n }\n\n checks.push({\n id: 'sep-2322-result-type-included',\n name: 'ResultTypeIncluded',\n description:\n 'Server includes resultType field in InputRequiredResult response',\n status: errors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: errors.length > 0 ? errors.join('; ') : undefined,\n specReferences: MRTR_SPEC_REFERENCES,\n details: { result: r1Result }\n });\n } catch (error) {\n checks.push({\n id: 'sep-2322-result-type-included',\n name: 'ResultTypeIncluded',\n description:\n 'Server includes resultType field in InputRequiredResult response',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: `Failed: ${error instanceof Error ? error.message : String(error)}`,\n specReferences: MRTR_SPEC_REFERENCES\n });\n }\n\n return checks;\n }\n}\n\n// ─── A11: Unsupported Methods ────────────────────────────────────────────────\n\nexport class InputRequiredResultUnsupportedMethodsScenario implements ClientScenario {\n name = 'input-required-result-unsupported-methods';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n specVersions: SpecVersion[] = [DRAFT_PROTOCOL_VERSION];\n description = `Test that server does NOT return InputRequiredResult on unsupported methods (SEP-2322).\n\nServers MUST NOT send InputRequiredResult responses on any client requests other than the supported ones (prompts/get, resources/read, tools/call, tasks/result).`;\n\n async run(serverUrl: string): Promise {\n const checks: ConformanceCheck[] = [];\n const errors: string[] = [];\n\n const unsupportedMethods = ['tools/list', 'prompts/list'];\n\n try {\n for (const method of unsupportedMethods) {\n const resp = await sendRpc(serverUrl, method, {});\n if (\n resp.result &&\n (resp.result as Record).resultType ===\n 'input_required'\n ) {\n errors.push(\n `${method} returned InputRequiredResult, but it is not a supported method for MRTR`\n );\n }\n }\n\n checks.push({\n id: 'sep-2322-not-on-unsupported-requests',\n name: 'NotOnUnsupportedRequests',\n description:\n 'Server does not return InputRequiredResult on unsupported methods',\n status: errors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: errors.length > 0 ? errors.join('; ') : undefined,\n specReferences: MRTR_SPEC_REFERENCES\n });\n } catch (error) {\n checks.push({\n id: 'sep-2322-not-on-unsupported-requests',\n name: 'NotOnUnsupportedRequests',\n description:\n 'Server does not return InputRequiredResult on unsupported methods',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: `Failed: ${error instanceof Error ? error.message : String(error)}`,\n specReferences: MRTR_SPEC_REFERENCES\n });\n }\n\n return checks;\n }\n}\n\n// ─── A12: Tampered State Rejection ───────────────────────────────────────────\n\nexport class InputRequiredResultTamperedStateScenario implements ClientScenario {\n name = 'input-required-result-tampered-state';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n specVersions: SpecVersion[] = [DRAFT_PROTOCOL_VERSION];\n description = `Test that server rejects tampered requestState (SEP-2322).\n\n**Server Implementation Requirements:**\n\nImplement a tool named \\`test_input_required_result_tampered_state\\` (no arguments required).\n\n**Behavior (Round 1):** When called without inputResponses, return an InputRequiredResult with\nintegrity-protected requestState (e.g. HMAC-signed).\n\n**Behavior (Round 2 - tampered):** When called with a modified/tampered requestState, return a\nJSON-RPC error (code -32602 or similar) indicating integrity check failure.`;\n\n async run(serverUrl: string): Promise {\n const checks: ConformanceCheck[] = [];\n\n try {\n // Round 1: Get valid InputRequiredResult with signed requestState\n const r1 = await sendRpc(serverUrl, 'tools/call', {\n name: 'test_input_required_result_tampered_state',\n arguments: {}\n });\n\n const r1Result = r1.result;\n if (r1.error || !r1Result || !isInputRequiredResult(r1Result)) {\n checks.push({\n id: 'sep-2322-reject-tampered-state',\n name: 'RejectTamperedState',\n description: 'Server rejects tampered requestState with error',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage:\n 'Prerequisite failed: could not get initial InputRequiredResult with requestState',\n specReferences: MRTR_SPEC_REFERENCES\n });\n return checks;\n }\n\n if (!r1Result.requestState) {\n checks.push({\n id: 'sep-2322-reject-tampered-state',\n name: 'RejectTamperedState',\n description: 'Server rejects tampered requestState with error',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage:\n 'Server did not include requestState in InputRequiredResult',\n specReferences: MRTR_SPEC_REFERENCES\n });\n return checks;\n }\n\n // Round 2: Tamper with the requestState and retry\n const tamperedState = r1Result.requestState + '-TAMPERED';\n const inputKey = Object.keys(r1Result.inputRequests!)[0];\n const r2 = await sendRpc(serverUrl, 'tools/call', {\n name: 'test_input_required_result_tampered_state',\n arguments: {},\n inputResponses: {\n [inputKey]: mockElicitResponse({ ok: true })\n },\n requestState: tamperedState\n });\n\n const errors: string[] = [];\n\n if (!r2.error) {\n // The only acceptable response to tampered state is a JSON-RPC error.\n // Returning a complete result OR re-prompting (InputRequiredResult) both\n // indicate the server did not reject the tampered state.\n if (r2.result && isCompleteResult(r2.result)) {\n errors.push(\n 'Server accepted tampered requestState and returned complete result. ' +\n 'Servers MUST reject state that fails integrity verification.'\n );\n } else {\n errors.push(\n 'Server did not return a JSON-RPC error for tampered requestState. ' +\n 'Servers MUST reject state that fails integrity verification.'\n );\n }\n }\n\n checks.push({\n id: 'sep-2322-reject-tampered-state',\n name: 'RejectTamperedState',\n description: 'Server rejects tampered requestState with error',\n status: errors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: errors.length > 0 ? errors.join('; ') : undefined,\n specReferences: MRTR_SPEC_REFERENCES,\n details: { tamperedResponse: r2.result ?? r2.error }\n });\n } catch (error) {\n checks.push({\n id: 'sep-2322-reject-tampered-state',\n name: 'RejectTamperedState',\n description: 'Server rejects tampered requestState with error',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: `Failed: ${error instanceof Error ? error.message : String(error)}`,\n specReferences: MRTR_SPEC_REFERENCES\n });\n }\n\n return checks;\n }\n}\n\n// ─── A13: Respect Client Capabilities ────────────────────────────────────────\n\nexport class InputRequiredResultCapabilityCheckScenario implements ClientScenario {\n name = 'input-required-result-capability-check';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n specVersions: SpecVersion[] = [DRAFT_PROTOCOL_VERSION];\n description = `Test that server only sends inputRequests for capabilities the client declared (SEP-2322).\n\n**Server Implementation Requirements:**\n\nImplement a tool named \\`test_input_required_result_capabilities\\` (no arguments required).\n\n**Behavior:** Read client capabilities from \\`_meta['io.modelcontextprotocol/clientCapabilities']\\`.\nOnly include inputRequests for methods the client supports. For example, if the client declares\n\\`sampling: {}\\` but NOT \\`elicitation\\`, only include \\`sampling/createMessage\\` inputRequests.`;\n\n async run(serverUrl: string): Promise {\n const checks: ConformanceCheck[] = [];\n\n try {\n // Send request with only sampling capability (no elicitation)\n const resp = await sendRpc(serverUrl, 'tools/call', {\n name: 'test_input_required_result_capabilities',\n arguments: {},\n _meta: {\n 'io.modelcontextprotocol/clientCapabilities': {\n sampling: {}\n // deliberately omitting elicitation\n }\n }\n });\n\n const result = resp.result;\n const errors: string[] = [];\n\n if (resp.error) {\n errors.push(`JSON-RPC error: ${resp.error.message}`);\n } else if (!result) {\n errors.push('No result in response');\n } else if (isInputRequiredResult(result) && result.inputRequests) {\n // Check that no elicitation requests are included (client didn't declare it)\n for (const [key, req] of Object.entries(result.inputRequests)) {\n if (req.method === 'elicitation/create') {\n errors.push(\n `Server included elicitation/create inputRequest (key: \"${key}\") ` +\n 'but client did not declare elicitation capability'\n );\n }\n }\n } else if (isCompleteResult(result)) {\n errors.push(\n 'Server returned complete result; expected InputRequiredResult with sampling-only inputRequests'\n );\n }\n\n checks.push({\n id: 'sep-2322-respect-client-capabilities',\n name: 'RespectClientCapabilities',\n description:\n 'Server only includes inputRequests for declared client capabilities',\n status: errors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: errors.length > 0 ? errors.join('; ') : undefined,\n specReferences: MRTR_SPEC_REFERENCES,\n details: { result }\n });\n } catch (error) {\n checks.push({\n id: 'sep-2322-respect-client-capabilities',\n name: 'RespectClientCapabilities',\n description:\n 'Server only includes inputRequests for declared client capabilities',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: `Failed: ${error instanceof Error ? error.message : String(error)}`,\n specReferences: MRTR_SPEC_REFERENCES\n });\n }\n\n return checks;\n }\n}\n\n// ─── A14: Ignore Unexpected Params ───────────────────────────────────────────\n\nexport class InputRequiredResultIgnoreExtraParamsScenario implements ClientScenario {\n name = 'input-required-result-ignore-extra-params';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n specVersions: SpecVersion[] = [DRAFT_PROTOCOL_VERSION];\n description = `Test that server ignores unexpected extra parameters in InputResponses (SEP-2322).\n\n**Server Implementation Requirements:**\n\nUses the same tool as A1: \\`test_input_required_result_elicitation\\`.\n\nThis scenario sends correct inputResponses PLUS extra unrecognized keys. The server SHOULD ignore\nthe extra keys and complete normally.`;\n\n async run(serverUrl: string): Promise {\n const checks: ConformanceCheck[] = [];\n\n try {\n // Send retry with correct inputResponses + extra unknown keys\n const resp = await sendRpc(serverUrl, 'tools/call', {\n name: 'test_input_required_result_elicitation',\n arguments: {},\n inputResponses: {\n user_name: mockElicitResponse({ name: 'Alice' }),\n unknown_extra_key: { action: 'accept', content: { foo: 'bar' } },\n another_unexpected: { action: 'accept', content: { baz: 123 } }\n }\n });\n\n const result = resp.result;\n const errors: string[] = [];\n\n if (resp.error) {\n errors.push(\n `Server returned JSON-RPC error when extra params were included: ${resp.error.message}. ` +\n 'Servers SHOULD ignore unrecognized information.'\n );\n } else if (!result) {\n errors.push('No result in response');\n } else if (!isCompleteResult(result)) {\n errors.push(\n 'Server did not return complete result when valid inputResponses were provided alongside extra keys. ' +\n 'Servers SHOULD ignore information they do not recognize.'\n );\n }\n\n checks.push({\n id: 'sep-2322-ignore-unexpected-params',\n name: 'IgnoreUnexpectedParams',\n description: 'Server ignores extra unrecognized keys in inputResponses',\n status: errors.length === 0 ? 'SUCCESS' : 'WARNING',\n timestamp: new Date().toISOString(),\n errorMessage: errors.length > 0 ? errors.join('; ') : undefined,\n specReferences: MRTR_SPEC_REFERENCES,\n details: { result }\n });\n } catch (error) {\n checks.push({\n id: 'sep-2322-ignore-unexpected-params',\n name: 'IgnoreUnexpectedParams',\n description: 'Server ignores extra unrecognized keys in inputResponses',\n status: 'WARNING',\n timestamp: new Date().toISOString(),\n errorMessage: `Failed: ${error instanceof Error ? error.message : String(error)}`,\n specReferences: MRTR_SPEC_REFERENCES\n });\n }\n\n return checks;\n }\n}\n\n// ─── A15: Validate InputResponses ────────────────────────────────────────────\n\nexport class InputRequiredResultValidateInputScenario implements ClientScenario {\n name = 'input-required-result-validate-input';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n specVersions: SpecVersion[] = [DRAFT_PROTOCOL_VERSION];\n description = `Test that server validates InputResponses and returns appropriate errors (SEP-2322).\n\n**Server Implementation Requirements:**\n\nUses the same tool as A1: \\`test_input_required_result_elicitation\\`.\n\nThis scenario sends completely invalid inputResponses structures. The server SHOULD validate them\nand return a JSON-RPC error or a new InputRequiredResult.`;\n\n async run(serverUrl: string): Promise {\n const checks: ConformanceCheck[] = [];\n\n try {\n // Send inputResponses with invalid structure (number instead of object for the response)\n const resp = await sendRpc(serverUrl, 'tools/call', {\n name: 'test_input_required_result_elicitation',\n arguments: {},\n inputResponses: {\n user_name: 12345 as unknown as Record\n }\n });\n\n const validateErrors: string[] = [];\n\n // Server should either error or re-request — NOT return a complete result\n // with the invalid data silently accepted\n if (!resp.error && resp.result && isCompleteResult(resp.result)) {\n validateErrors.push(\n 'Server accepted invalid inputResponses (number instead of object) and returned complete result. ' +\n 'Servers SHOULD validate InputResponses data.'\n );\n }\n\n checks.push({\n id: 'sep-2322-validate-input-responses',\n name: 'ValidateInputResponses',\n description: 'Server validates InputResponses structure',\n status: validateErrors.length === 0 ? 'SUCCESS' : 'WARNING',\n timestamp: new Date().toISOString(),\n errorMessage:\n validateErrors.length > 0 ? validateErrors.join('; ') : undefined,\n specReferences: MRTR_SPEC_REFERENCES,\n details: { result: resp.result, error: resp.error }\n });\n\n // Also test: send completely malformed inputResponses (null)\n const resp2 = await sendRpc(serverUrl, 'tools/call', {\n name: 'test_input_required_result_elicitation',\n arguments: {},\n inputResponses: null as unknown as Record\n });\n\n const protocolErrors: string[] = [];\n\n if (!resp2.error && resp2.result && isCompleteResult(resp2.result)) {\n protocolErrors.push(\n 'Server accepted null inputResponses and returned complete result. ' +\n 'Protocol errors SHOULD return a JSON-RPC error response.'\n );\n }\n\n checks.push({\n id: 'sep-2322-error-on-protocol-error',\n name: 'ErrorOnProtocolError',\n description:\n 'Server returns JSON-RPC error for protocol-level input errors',\n status: protocolErrors.length === 0 ? 'SUCCESS' : 'WARNING',\n timestamp: new Date().toISOString(),\n errorMessage:\n protocolErrors.length > 0 ? protocolErrors.join('; ') : undefined,\n specReferences: MRTR_SPEC_REFERENCES,\n details: { result: resp2.result, error: resp2.error }\n });\n } catch (error) {\n checks.push({\n id: 'sep-2322-validate-input-responses',\n name: 'ValidateInputResponses',\n description: 'Server validates InputResponses structure',\n status: 'WARNING',\n timestamp: new Date().toISOString(),\n errorMessage: `Failed: ${error instanceof Error ? error.message : String(error)}`,\n specReferences: MRTR_SPEC_REFERENCES\n });\n }\n\n return checks;\n }\n}\n",[],[126,195,205,197],"server","b98c6646-5b64-11f1-97f0-ee650bb23af1","http-standard-headers.ts","b98c66fa-5b64-11f1-97f0-ee650bb23af1",13,["D",1780062359293],"/**\n * HTTP Standard Headers server validation test scenarios (SEP-2243)\n *\n * Tests that servers properly validate the standard MCP request headers:\n * - Reject requests where Mcp-Method header doesn't match the body\n * - Reject requests where Mcp-Name header doesn't match the body\n * - Accept case variations of header names (case-insensitive)\n * - Reject case variations of header values (case-sensitive)\n * - Handle whitespace trimming per HTTP spec\n * - Validate Base64-encoded custom header values\n * - Return 400 Bad Request with error code -32001 (HeaderMismatch)\n *\n * This is a ClientScenario (connects to a server under test and validates\n * its behavior).\n */\n\nimport http from 'node:http';\nimport {\n ClientScenario,\n ConformanceCheck,\n DRAFT_PROTOCOL_VERSION\n} from '../../types.ts';\nimport { withRequestMeta, sendStatelessRequest } from './stateless-client.ts';\n\nconst SPEC_REFERENCE = {\n id: 'SEP-2243-Server-Validation',\n url: 'https://modelcontextprotocol.io/specification/draft/basic/transports#server-validation'\n};\n\nconst SPEC_REFERENCE_CASE = {\n id: 'SEP-2243-Case-Sensitivity',\n url: 'https://modelcontextprotocol.io/specification/draft/basic/transports#case-sensitivity'\n};\n\n// OWS handling is an RFC 9110 §5.5 MUST (\"a field parsing implementation MUST\n// exclude such whitespace prior to evaluating the field value\"), not a\n// SEP-2243 requirement. Kept as a check because a server stack that fails it\n// has a real HTTP-layer bug that will manifest as header-mismatch rejections.\nconst SPEC_REFERENCE_RFC9110_OWS = {\n id: 'RFC-9110-5.5-Field-Values',\n url: 'https://www.rfc-editor.org/rfc/rfc9110#section-5.5'\n};\n\nconst SPEC_REFERENCE_BASE64 = {\n id: 'SEP-2243-Value-Encoding',\n url: 'https://modelcontextprotocol.io/specification/draft/basic/transports#value-encoding'\n};\n\nconst SPEC_REFERENCE_CUSTOM = {\n id: 'SEP-2243-Custom-Headers',\n url: 'https://modelcontextprotocol.io/specification/draft/basic/transports#server-behavior-for-custom-headers'\n};\n\nconst HEADER_MISMATCH_ERROR_CODE = -32001;\n\n// Coarse, requirement-level check IDs (SEP-2243) for STANDARD-header\n// rejections. Every standard-header rejection case emits this same pair of IDs;\n// the per-case name/description carry the detail of which case was exercised,\n// matching the repo's \"same id, vary status/message\" convention.\nconst REJECT_STATUS_CHECK_ID = 'sep-2243-server-reject-invalid-headers';\nconst REJECT_ERROR_CODE_CHECK_ID = 'sep-2243-server-reject-error-code';\n\n// CUSTOM-header (Mcp-Param-*) rejections map to the param-validation\n// requirements instead. The -32001 error-code half of every custom-header\n// rejection is the \"reject with 400 + JSON-RPC error code -32001 if any\n// validation fails\" requirement.\nconst PARAM_REJECT_ERROR_CODE_CHECK_ID =\n 'sep-2243-server-reject-param-mismatch';\n\n/**\n * Every requirement-level check ID HttpCustomHeaderServerValidationScenario\n * can emit (SEP-2243). When the server under test exposes no x-mcp-header\n * tool the scenario cannot exercise these, but it still emits one SKIPPED row\n * per ID so the traceability manifest sees that a scenario exists for each\n * requirement (the manifest joins on emitted IDs regardless of status).\n */\nexport const CUSTOM_HEADER_SERVER_DECLARED_CHECK_IDS = [\n 'sep-2243-server-decode-base64',\n 'sep-2243-server-validate-param-match',\n 'sep-2243-server-reject-invalid-param-chars',\n 'sep-2243-server-reject-param-mismatch'\n] as const;\n\n/**\n * Helper to send a raw HTTP POST request with custom headers.\n * Uses Node.js http.request to preserve exact header casing and values,\n * avoiding normalization that fetch()/Headers may apply.\n */\nasync function sendRawRequest(\n serverUrl: string,\n body: object,\n headers: Record = {}\n): Promise<{ status: number; body: any; headers: http.IncomingHttpHeaders }> {\n const url = new URL(serverUrl);\n const bodyStr = JSON.stringify(body);\n\n return new Promise((resolve, reject) => {\n const req = http.request(\n {\n hostname: url.hostname,\n port: url.port,\n path: url.pathname,\n method: 'POST',\n headers: {\n 'Content-Type': 'application/json',\n Accept: 'application/json, text/event-stream',\n 'Content-Length': Buffer.byteLength(bodyStr),\n ...headers\n }\n },\n (res) => {\n res.setEncoding('utf8');\n let data = '';\n res.on('data', (chunk) => {\n data += chunk;\n });\n res.on('end', () => {\n let responseBody: any;\n const contentType = res.headers['content-type'];\n if (contentType?.includes('application/json')) {\n try {\n responseBody = JSON.parse(data);\n } catch {\n responseBody = data;\n }\n } else {\n responseBody = data;\n }\n resolve({\n status: res.statusCode || 0,\n body: responseBody,\n headers: res.headers\n });\n });\n }\n );\n\n req.on('error', reject);\n req.write(bodyStr);\n req.end();\n });\n}\n\n/**\n * Builds two checks for a rejection case: one for the HTTP 400 status, one for\n * the -32001 JSON-RPC error code. Per SEP-2243 §Server Validation, 400 is MUST\n * but -32001 is SHOULD for *standard* headers (and MUST for *custom* headers,\n * §Server Behavior for Custom Headers) — so a server returning 400 with a\n * different error code is compliant for standard headers and must not FAIL.\n *\n * The two emitted check IDs are supplied explicitly by the caller: standard-\n * header callers pass the coarse REJECT_STATUS_CHECK_ID/REJECT_ERROR_CODE_CHECK_ID\n * pair, while custom-header/Base64 callers pass the param-validation\n * requirement that case exercises plus PARAM_REJECT_ERROR_CODE_CHECK_ID. The\n * per-case `name`/`description` distinguish which rejection case was\n * exercised.\n */\nfunction createRejectionChecks(\n statusId: string,\n errorCodeId: string,\n name: string,\n description: string,\n response: { status: number; body: any },\n specRef: { id: string; url: string },\n details: Record,\n opts: { errorCodeSeverity: 'FAILURE' | 'WARNING' }\n): ConformanceCheck[] {\n const fullDetails = {\n ...details,\n responseStatus: response.status,\n responseBody: response.body\n };\n const ts = new Date().toISOString();\n\n const statusOk = response.status === 400;\n const codeOk = response.body?.error?.code === HEADER_MISMATCH_ERROR_CODE;\n\n return [\n {\n id: statusId,\n name,\n description,\n status: statusOk ? 'SUCCESS' : 'FAILURE',\n timestamp: ts,\n errorMessage: statusOk\n ? undefined\n : `Expected HTTP 400, got ${response.status}. Server MUST reject with 400 Bad Request.`,\n specReferences: [specRef],\n details: fullDetails\n },\n {\n id: errorCodeId,\n name: `${name}ErrorCode`,\n description: `${description} — uses JSON-RPC error code -32001 (HeaderMismatch)`,\n status: codeOk ? 'SUCCESS' : opts.errorCodeSeverity,\n timestamp: ts,\n errorMessage: codeOk\n ? undefined\n : `Expected JSON-RPC error code ${HEADER_MISMATCH_ERROR_CODE} (HeaderMismatch), got ${response.body?.error?.code ?? '(missing)'}.`,\n specReferences: [specRef],\n details: fullDetails\n }\n ];\n}\n\nfunction createAcceptanceCheck(\n id: string,\n name: string,\n description: string,\n response: { status: number; body: any },\n specRef: { id: string; url: string },\n details: Record\n): ConformanceCheck {\n const errors: string[] = [];\n if (response.status >= 400) {\n errors.push(\n `Expected successful response, got HTTP ${response.status}. Server MUST accept this request.`\n );\n }\n // A server can return HTTP 200 with a JSON-RPC error in the body. Without\n // this assertion that case would pass as \"accepted\".\n if (\n response.body &&\n typeof response.body === 'object' &&\n 'error' in response.body\n ) {\n errors.push(\n `Expected successful response, but body contains JSON-RPC error ${JSON.stringify(response.body.error)}.`\n );\n }\n return {\n id,\n name,\n description,\n status: errors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: errors.length > 0 ? errors.join('; ') : undefined,\n specReferences: [specRef],\n details: {\n ...details,\n responseStatus: response.status,\n responseBody: response.body\n }\n };\n}\n\nexport class HttpHeaderValidationScenario implements ClientScenario {\n name = 'http-header-validation';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n description = `Test server validation of standard MCP request headers (SEP-2243).\n\n**Server Implementation Requirements:**\n\n**Endpoint**: Streamable HTTP\n\n**Requirements**:\n- Server MUST reject requests where Mcp-Method header doesn't match the body method\n- Server MUST reject requests where Mcp-Name header doesn't match the body params.name/uri\n- Server MUST accept header names case-insensitively\n- Server MUST reject case-mismatched header values (method values are case-sensitive)\n- Server MUST accept extra whitespace around header values (per HTTP spec)\n- Server MUST return HTTP 400 Bad Request for validation failures\n- Server MUST return JSON-RPC error with code -32001 (HeaderMismatch)`;\n\n async run(serverUrl: string): Promise {\n const checks: ConformanceCheck[] = [];\n\n try {\n // Discover the server's tools with a fully-conformant stateless request\n // (SEP-2575) — that wire protocol has no initialize handshake or sessions.\n const toolsResponse = await sendStatelessRequest(serverUrl, 'tools/list');\n if (!toolsResponse.body?.result) {\n // The server under test could not even answer a conformant tools/list:\n // report a single explicit setup failure instead of misleading\n // per-case results against a broken server.\n const rpcError = toolsResponse.body?.error;\n checks.push({\n id: 'sep-2243-server-standard-setup',\n name: 'HttpHeaderValidationSetup',\n description: 'Setup for header validation tests',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage:\n `tools/list discovery failed: HTTP ${toolsResponse.status}` +\n (rpcError\n ? `, JSON-RPC error ${rpcError.code}: ${rpcError.message}`\n : ', no result in response body'),\n specReferences: [SPEC_REFERENCE],\n details: { httpStatus: toolsResponse.status, error: rpcError }\n });\n return checks;\n }\n const toolsResult = toolsResponse.body.result as {\n tools?: Array<{ name: string; inputSchema?: unknown }>;\n };\n\n const baseHeaders: Record = {\n 'MCP-Protocol-Version': DRAFT_PROTOCOL_VERSION\n };\n\n let idCounter = 100;\n const nextId = () => idCounter++;\n\n // --- Header/Body Mismatch Tests ---\n\n await this.testCase(\n checks,\n serverUrl,\n baseHeaders,\n nextId,\n 'reject',\n REJECT_STATUS_CHECK_ID,\n 'ServerRejectsMismatchedMethodHeader',\n 'Server rejects requests where Mcp-Method header does not match body method',\n { jsonrpc: '2.0', id: 0, method: 'tools/list' },\n { 'Mcp-Method': 'prompts/list' },\n SPEC_REFERENCE,\n { requestBodyMethod: 'tools/list', mcpMethodHeader: 'prompts/list' }\n );\n\n await this.testCase(\n checks,\n serverUrl,\n baseHeaders,\n nextId,\n 'reject',\n REJECT_STATUS_CHECK_ID,\n 'ServerRejectsMissingMethodHeader',\n 'Server rejects requests with missing Mcp-Method header',\n { jsonrpc: '2.0', id: 0, method: 'tools/list' },\n {},\n SPEC_REFERENCE,\n { requestBodyMethod: 'tools/list', mcpMethodHeader: '(missing)' }\n );\n\n if (toolsResult.tools && toolsResult.tools.length > 0) {\n const toolName = toolsResult.tools[0].name;\n\n await this.testCase(\n checks,\n serverUrl,\n baseHeaders,\n nextId,\n 'reject',\n REJECT_STATUS_CHECK_ID,\n 'ServerRejectsMismatchedNameHeader',\n 'Server rejects tools/call where Mcp-Name does not match body params.name',\n {\n jsonrpc: '2.0',\n id: 0,\n method: 'tools/call',\n params: { name: toolName, arguments: {} }\n },\n { 'Mcp-Method': 'tools/call', 'Mcp-Name': 'wrong_tool_name' },\n SPEC_REFERENCE,\n { requestBodyName: toolName, mcpNameHeader: 'wrong_tool_name' }\n );\n\n // --- Whitespace Test ---\n\n await this.testCase(\n checks,\n serverUrl,\n baseHeaders,\n nextId,\n 'accept',\n 'sep-2243-server-accepts-whitespace-header-value',\n 'ServerAcceptsWhitespaceHeaderValue',\n 'Server MUST accept leading/trailing whitespace in Mcp-Name value (RFC 9110 §5.5: field parsing MUST exclude OWS before evaluating)',\n {\n jsonrpc: '2.0',\n id: 0,\n method: 'tools/call',\n params: { name: toolName, arguments: {} }\n },\n {\n 'Mcp-Method': 'tools/call',\n 'Mcp-Name': ` ${toolName} `\n },\n SPEC_REFERENCE_RFC9110_OWS,\n {\n headerValue: ` ${toolName} `,\n bodyValue: toolName,\n reason: 'HTTP spec requires trimming OWS around field values'\n }\n );\n\n // --- Missing Standard Header with Value in Body (Case 47) ---\n\n await this.testCase(\n checks,\n serverUrl,\n baseHeaders,\n nextId,\n 'reject',\n REJECT_STATUS_CHECK_ID,\n 'ServerRejectsMissingNameHeader',\n 'Server MUST reject tools/call with missing Mcp-Name header when body has params.name',\n {\n jsonrpc: '2.0',\n id: 0,\n method: 'tools/call',\n params: { name: toolName, arguments: {} }\n },\n { 'Mcp-Method': 'tools/call' },\n SPEC_REFERENCE,\n {\n requestBodyName: toolName,\n mcpNameHeader: '(missing)',\n reason:\n 'Standard header omitted but value present in body → MUST reject'\n }\n );\n }\n\n // --- Case Sensitivity Tests ---\n\n await this.testCase(\n checks,\n serverUrl,\n baseHeaders,\n nextId,\n 'accept',\n 'sep-2243-header-name-case-insensitive',\n 'ServerAcceptsLowercaseHeaderName',\n 'Server MUST accept lowercase header name (mcp-method)',\n { jsonrpc: '2.0', id: 0, method: 'tools/list' },\n { 'mcp-method': 'tools/list' },\n SPEC_REFERENCE_CASE,\n { headerNameUsed: 'mcp-method' }\n );\n\n await this.testCase(\n checks,\n serverUrl,\n baseHeaders,\n nextId,\n 'accept',\n 'sep-2243-header-name-case-insensitive',\n 'ServerAcceptsUppercaseHeaderName',\n 'Server MUST accept uppercase header name (MCP-METHOD)',\n { jsonrpc: '2.0', id: 0, method: 'tools/list' },\n { 'MCP-METHOD': 'tools/list' },\n SPEC_REFERENCE_CASE,\n { headerNameUsed: 'MCP-METHOD' }\n );\n\n await this.testCase(\n checks,\n serverUrl,\n baseHeaders,\n nextId,\n 'reject',\n REJECT_STATUS_CHECK_ID,\n 'ServerRejectsCaseMismatchValue',\n 'Server MUST reject uppercase method value (TOOLS/LIST) since values are case-sensitive',\n { jsonrpc: '2.0', id: 0, method: 'tools/list' },\n { 'Mcp-Method': 'TOOLS/LIST' },\n SPEC_REFERENCE_CASE,\n { headerValue: 'TOOLS/LIST', bodyValue: 'tools/list' }\n );\n } catch (error) {\n checks.push({\n id: 'sep-2243-server-standard-setup',\n name: 'HttpHeaderValidationSetup',\n description: 'Setup for header validation tests',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: `Failed to set up tests: ${error instanceof Error ? error.message : String(error)}`,\n specReferences: [SPEC_REFERENCE]\n });\n }\n\n return checks;\n }\n\n private async testCase(\n checks: ConformanceCheck[],\n serverUrl: string,\n baseHeaders: Record,\n nextId: () => number,\n expectation: 'accept' | 'reject',\n checkId: string,\n checkName: string,\n description: string,\n body: any,\n extraHeaders: Record,\n specRef: { id: string; url: string },\n details: Record\n ): Promise {\n try {\n // Issue #311: every raw request carries the SEP-2575 _meta fields — the\n // header-validation cases only mangle headers, never the body metadata.\n const requestBody = {\n ...body,\n id: body.id === 0 ? nextId() : body.id,\n params: withRequestMeta(body.params)\n };\n const response = await sendRawRequest(serverUrl, requestBody, {\n ...baseHeaders,\n ...extraHeaders\n });\n if (expectation === 'reject') {\n // Standard-header rejection: 400 is MUST, -32001 is SHOULD. All\n // standard-header rejection cases collapse onto the coarse requirement\n // ids; checkId/checkName still distinguish the case via name/details.\n checks.push(\n ...createRejectionChecks(\n REJECT_STATUS_CHECK_ID,\n REJECT_ERROR_CODE_CHECK_ID,\n checkName,\n description,\n response,\n specRef,\n details,\n { errorCodeSeverity: 'WARNING' }\n )\n );\n } else {\n checks.push(\n createAcceptanceCheck(\n checkId,\n checkName,\n description,\n response,\n specRef,\n details\n )\n );\n }\n } catch (error) {\n checks.push({\n id: checkId,\n name: checkName,\n description,\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: `Failed: ${error instanceof Error ? error.message : String(error)}`,\n specReferences: [specRef]\n });\n }\n }\n}\n\nexport class HttpCustomHeaderServerValidationScenario implements ClientScenario {\n name = 'http-custom-header-server-validation';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n description = `Test server validation of custom Mcp-Param headers and Base64 encoding (SEP-2243).\n\n**Server Implementation Requirements:**\n\n**Endpoint**: Streamable HTTP with at least one tool using \\`x-mcp-header\\`\n\n**Requirements**:\n- Server MUST validate Base64-encoded header values\n- Server MUST reject requests with invalid Base64 padding or characters\n- Server MUST treat values without =?base64?...?= wrapper as literal\n- Server MUST reject requests where custom header is omitted but value is in body`;\n\n async run(serverUrl: string): Promise {\n const checks: ConformanceCheck[] = [];\n\n try {\n // Discover the server's tools with a fully-conformant stateless request\n // (SEP-2575) — that wire protocol has no initialize handshake or sessions.\n const toolsResponse = await sendStatelessRequest(serverUrl, 'tools/list');\n if (!toolsResponse.body?.result) {\n // The server under test could not even answer a conformant tools/list:\n // report a single explicit setup failure (and backfill the declared\n // checks, mirroring the catch path) instead of pretending the\n // requirements are not applicable to a broken server.\n const rpcError = toolsResponse.body?.error;\n checks.push({\n id: 'sep-2243-server-custom-setup',\n name: 'HttpCustomHeaderServerValidationSetup',\n description: 'Setup for custom header server validation tests',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage:\n `tools/list discovery failed: HTTP ${toolsResponse.status}` +\n (rpcError\n ? `, JSON-RPC error ${rpcError.code}: ${rpcError.message}`\n : ', no result in response body'),\n specReferences: [SPEC_REFERENCE_CUSTOM],\n details: { httpStatus: toolsResponse.status, error: rpcError }\n });\n this.failDeclaredChecks(checks);\n return checks;\n }\n const toolsResult = toolsResponse.body.result as {\n tools?: Array<{ name: string; inputSchema?: unknown }>;\n };\n\n // Find a tool with x-mcp-header annotations\n const xMcpTool = toolsResult.tools?.find((tool) => {\n const schema = tool.inputSchema as any;\n if (!schema?.properties) return false;\n return Object.values(schema.properties).some(\n (prop: any) => prop['x-mcp-header'] !== undefined\n );\n });\n\n if (!xMcpTool) {\n checks.push({\n id: 'sep-2243-server-no-xmcp-tool',\n name: 'HttpCustomHeaderServerNoTool',\n description:\n 'Server has no tools with x-mcp-header annotations to test',\n status: 'SKIPPED',\n timestamp: new Date().toISOString(),\n specReferences: [SPEC_REFERENCE_CUSTOM],\n details: {\n reason:\n 'No tools with x-mcp-header found. These tests require at least one tool with x-mcp-header annotations.'\n }\n });\n this.skipDeclaredChecks(\n checks,\n 'Server exposes no tool with x-mcp-header annotations.'\n );\n return checks;\n }\n\n const baseHeaders: Record = {\n 'MCP-Protocol-Version': DRAFT_PROTOCOL_VERSION\n };\n\n // Find the first x-mcp-header annotated STRING property\n // that is callable with minimal arguments to avoid schema validation failures\n const schema = xMcpTool.inputSchema as any;\n const annotatedEntry = Object.entries(schema.properties).find(\n ([, def]: [string, any]) =>\n def['x-mcp-header'] !== undefined && (def as any).type === 'string'\n );\n if (!annotatedEntry) {\n checks.push({\n id: 'sep-2243-server-no-string-param',\n name: 'HttpCustomHeaderServerNoStringParam',\n description:\n 'Server has no string-typed x-mcp-header parameter to test',\n status: 'SKIPPED',\n timestamp: new Date().toISOString(),\n specReferences: [SPEC_REFERENCE_CUSTOM]\n });\n this.skipDeclaredChecks(\n checks,\n 'Server exposes no string-typed x-mcp-header parameter.'\n );\n return checks;\n }\n const [paramName, paramDef] = annotatedEntry as [string, any];\n const headerSuffix = paramDef['x-mcp-header'];\n\n // Build default arguments for all required params to avoid schema validation errors.\n // These go in the JSON body, so number/boolean must be the real types —\n // sending '0' or 'false' as strings makes the server reject on JSON-schema\n // grounds and the header-validation checks below would false-pass on that 400.\n const requiredParams: string[] = schema.required || [];\n const defaultArgs: Record = {};\n const defaultHeaders: Record = {};\n for (const rp of requiredParams) {\n if (rp !== paramName) {\n const rpDef = schema.properties[rp];\n const rpType = rpDef?.type || 'string';\n if (rpType === 'number' || rpType === 'integer') {\n defaultArgs[rp] = 0;\n } else if (rpType === 'boolean') {\n defaultArgs[rp] = false;\n } else {\n defaultArgs[rp] = 'test-default';\n }\n // If this required param also has x-mcp-header, include its header too\n if (rpDef?.['x-mcp-header']) {\n defaultHeaders[`Mcp-Param-${rpDef['x-mcp-header']}`] = String(\n defaultArgs[rp]\n );\n }\n }\n }\n\n let idCounter = 200;\n const nextId = () => idCounter++;\n\n // --- Base64 Decoding Tests ---\n\n const validBase64Value = Buffer.from('Hello').toString('base64');\n\n // Valid Base64 - server decodes and validates\n await this.testBase64Case(\n checks,\n serverUrl,\n baseHeaders,\n nextId,\n 'accept',\n 'sep-2243-server-decode-base64',\n 'ServerAcceptsValidBase64',\n 'Server decodes valid Base64 header value and validates against body',\n xMcpTool.name,\n paramName,\n 'Hello',\n headerSuffix,\n `=?base64?${validBase64Value}?=`,\n defaultArgs,\n defaultHeaders\n );\n\n // Invalid Base64 padding — FAILURE per the SEP-2243 conformance-test-case\n // table, which is the approved source of truth for these cases. The spec\n // body says only \"MUST decode them accordingly\", but the table specifies\n // strict rejection. SDKs whose stdlib decoders are lenient (Node\n // Buffer.from, browser atob) will need to validate before decoding; if\n // that proves burdensome we'll revisit.\n await this.testBase64Case(\n checks,\n serverUrl,\n baseHeaders,\n nextId,\n 'reject',\n 'sep-2243-server-reject-invalid-param-chars',\n 'ServerRejectsInvalidBase64Padding',\n 'Server MUST reject Mcp-Param header with invalid Base64 padding (per SEP-2243 test-case table)',\n xMcpTool.name,\n paramName,\n 'Hello',\n headerSuffix,\n '=?base64?SGVsbG8?=',\n defaultArgs,\n defaultHeaders\n );\n\n // Invalid Base64 characters — FAILURE for the same reason as padding.\n await this.testBase64Case(\n checks,\n serverUrl,\n baseHeaders,\n nextId,\n 'reject',\n 'sep-2243-server-reject-invalid-param-chars',\n 'ServerRejectsInvalidBase64Chars',\n 'Server MUST reject Mcp-Param header with non-alphabet Base64 characters (per SEP-2243 test-case table)',\n xMcpTool.name,\n paramName,\n 'Hello',\n headerSuffix,\n '=?base64?SGVs!!!bG8=?=',\n defaultArgs,\n defaultHeaders\n );\n\n // Missing prefix - server treats as literal value\n await this.testBase64Case(\n checks,\n serverUrl,\n baseHeaders,\n nextId,\n 'accept',\n 'sep-2243-server-validate-param-match',\n 'ServerLiteralMissingBase64Prefix',\n 'Server treats value without =?base64? prefix as literal (not Base64)',\n xMcpTool.name,\n paramName,\n validBase64Value,\n headerSuffix,\n validBase64Value,\n defaultArgs,\n defaultHeaders\n );\n\n // Missing suffix - server treats as literal value\n await this.testBase64Case(\n checks,\n serverUrl,\n baseHeaders,\n nextId,\n 'accept',\n 'sep-2243-server-validate-param-match',\n 'ServerLiteralMissingBase64Suffix',\n 'Server treats value without ?= suffix as literal (not Base64)',\n xMcpTool.name,\n paramName,\n `=?base64?${validBase64Value}`,\n headerSuffix,\n `=?base64?${validBase64Value}`,\n defaultArgs,\n defaultHeaders\n );\n\n // --- Missing Custom Header with Value in Body ---\n\n await this.testMissingCustomHeader(\n checks,\n serverUrl,\n baseHeaders,\n nextId,\n xMcpTool.name,\n paramName,\n headerSuffix,\n defaultArgs,\n defaultHeaders\n );\n } catch (error) {\n checks.push({\n id: 'sep-2243-server-custom-setup',\n name: 'HttpCustomHeaderServerValidationSetup',\n description: 'Setup for custom header server validation tests',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: `Failed: ${error instanceof Error ? error.message : String(error)}`,\n specReferences: [SPEC_REFERENCE_CUSTOM]\n });\n }\n\n // Declared-but-unemitted -> FAILURE. Reached only when setup threw partway\n // through (the gate-out paths emit SKIPPED rows and the happy path emits\n // every declared ID).\n this.failDeclaredChecks(checks);\n\n return checks;\n }\n\n /**\n * Backfill every declared-but-unemitted check ID as FAILURE when setup\n * failed before the cases could run, keeping the emitted ID set stable.\n */\n private failDeclaredChecks(checks: ConformanceCheck[]): void {\n for (const id of CUSTOM_HEADER_SERVER_DECLARED_CHECK_IDS) {\n if (checks.some((c) => c.id === id)) continue;\n checks.push({\n id,\n name: 'NotObserved',\n description: `Declared check ${id} was never emitted`,\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage:\n 'Check was not observed: custom-header validation setup failed before this case ran.',\n specReferences: [SPEC_REFERENCE_CUSTOM]\n });\n }\n }\n\n /**\n * Emit one SKIPPED row per declared requirement check when the scenario\n * cannot run against this server (no x-mcp-header tool). The IDs must still\n * reach checks.json so the traceability manifest records that a scenario\n * exists for each requirement.\n */\n private skipDeclaredChecks(checks: ConformanceCheck[], reason: string): void {\n for (const id of CUSTOM_HEADER_SERVER_DECLARED_CHECK_IDS) {\n if (checks.some((c) => c.id === id)) continue;\n checks.push({\n id,\n name: 'NotApplicable',\n description: `Declared check ${id} is not testable against this server`,\n status: 'SKIPPED',\n timestamp: new Date().toISOString(),\n specReferences: [SPEC_REFERENCE_CUSTOM],\n details: { reason }\n });\n }\n }\n\n private async testBase64Case(\n checks: ConformanceCheck[],\n serverUrl: string,\n baseHeaders: Record,\n nextId: () => number,\n expectation: 'accept' | 'reject',\n checkId: string,\n checkName: string,\n description: string,\n toolName: string,\n paramName: string,\n bodyValue: string,\n headerSuffix: string,\n headerValue: string,\n defaultArgs: Record,\n defaultHeaders: Record\n ): Promise {\n try {\n const response = await sendRawRequest(\n serverUrl,\n {\n jsonrpc: '2.0',\n id: nextId(),\n method: 'tools/call',\n // Issue #311: the body always carries the SEP-2575 _meta fields —\n // these cases only vary the Mcp-Param header value.\n params: withRequestMeta({\n name: toolName,\n arguments: { ...defaultArgs, [paramName]: bodyValue }\n })\n },\n {\n ...baseHeaders,\n ...defaultHeaders,\n 'Mcp-Method': 'tools/call',\n 'Mcp-Name': toolName,\n [`Mcp-Param-${headerSuffix}`]: headerValue\n }\n );\n\n const details = {\n toolName,\n paramName,\n bodyValue,\n headerSuffix,\n headerValue\n };\n\n if (expectation === 'accept') {\n checks.push(\n createAcceptanceCheck(\n checkId,\n checkName,\n description,\n response,\n SPEC_REFERENCE_BASE64,\n details\n )\n );\n } else {\n // Custom-header rejection: both 400 and -32001 are MUST per\n // §Server Behavior for Custom Headers. The status half maps to the\n // param-validation requirement this case exercises (checkId); the\n // error-code half is the \"400 + -32001 if any validation fails\"\n // requirement.\n checks.push(\n ...createRejectionChecks(\n checkId,\n PARAM_REJECT_ERROR_CODE_CHECK_ID,\n checkName,\n description,\n response,\n SPEC_REFERENCE_BASE64,\n details,\n { errorCodeSeverity: 'FAILURE' }\n )\n );\n }\n } catch (error) {\n checks.push({\n id: checkId,\n name: checkName,\n description,\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: `Failed: ${error instanceof Error ? error.message : String(error)}`,\n specReferences: [SPEC_REFERENCE_BASE64]\n });\n }\n }\n\n private async testMissingCustomHeader(\n checks: ConformanceCheck[],\n serverUrl: string,\n baseHeaders: Record,\n nextId: () => number,\n toolName: string,\n paramName: string,\n headerSuffix: string,\n defaultArgs: Record,\n defaultHeaders: Record\n ): Promise {\n try {\n // Send tools/call with value in body but NO Mcp-Param header\n const response = await sendRawRequest(\n serverUrl,\n {\n jsonrpc: '2.0',\n id: nextId(),\n method: 'tools/call',\n // Issue #311: the body always carries the SEP-2575 _meta fields —\n // this case only omits the Mcp-Param header.\n params: withRequestMeta({\n name: toolName,\n arguments: { ...defaultArgs, [paramName]: 'test-value' }\n })\n },\n {\n ...baseHeaders,\n ...defaultHeaders,\n 'Mcp-Method': 'tools/call',\n 'Mcp-Name': toolName\n // Deliberately omit Mcp-Param-{headerSuffix} header\n }\n );\n\n // Custom-header rejection: both 400 and -32001 are MUST. A header\n // omitted while the body carries a value is a header/body mismatch, so\n // the status half maps to the validate-param-match requirement.\n checks.push(\n ...createRejectionChecks(\n 'sep-2243-server-validate-param-match',\n PARAM_REJECT_ERROR_CODE_CHECK_ID,\n 'ServerRejectsMissingCustomHeader',\n 'Server MUST reject request where custom header is omitted but value is present in body',\n response,\n SPEC_REFERENCE_CUSTOM,\n {\n toolName,\n paramName,\n bodyValue: 'test-value',\n expectedHeader: `Mcp-Param-${headerSuffix}`,\n mcpParamHeader: '(missing)'\n },\n { errorCodeSeverity: 'FAILURE' }\n )\n );\n } catch (error) {\n checks.push({\n id: 'sep-2243-server-validate-param-match',\n name: 'ServerRejectsMissingCustomHeader',\n description:\n 'Server MUST reject request where custom header is omitted but value is present in body',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: `Failed: ${error instanceof Error ? error.message : String(error)}`,\n specReferences: [SPEC_REFERENCE_CUSTOM]\n });\n }\n }\n}\n",[],[126,195,205,207],"ba4312f6-5b64-11f1-a2b2-ee650bb23af1",["D",1780062360491],[],[126,195,205,32],"ba0b5960-5b64-11f1-9de2-ee650bb23af1","caching.ts","ba0b5a5a-5b64-11f1-9de2-ee650bb23af1",15,["D",1780062360121],"/**\n * Caching (SEP-2549) test scenario for MCP servers\n *\n * Tests that servers include ttlMs and cacheScope on cacheable results:\n * tools/list, prompts/list, resources/list, resources/templates/list, resources/read\n */\n\nimport {\n ClientScenario,\n ConformanceCheck,\n DRAFT_PROTOCOL_VERSION\n} from '../../types.ts';\nimport { sendStatelessRequest } from './stateless-client.ts';\n\nconst SPEC_REFS = [\n {\n id: 'MCP-Caching',\n url: 'https://modelcontextprotocol.io/specification/draft/server/utilities/caching'\n },\n {\n id: 'SEP-2549',\n url: 'https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2549'\n }\n];\n\ninterface CachingFields {\n ttlMs: unknown;\n cacheScope: unknown;\n hasTtlMs: boolean;\n hasCacheScope: boolean;\n}\n\nfunction extractCachingFields(result: Record): CachingFields {\n const hasTtlMs = 'ttlMs' in result;\n const hasCacheScope = 'cacheScope' in result;\n return {\n ttlMs: hasTtlMs ? result.ttlMs : undefined,\n cacheScope: hasCacheScope ? result.cacheScope : undefined,\n hasTtlMs,\n hasCacheScope\n };\n}\n\nfunction buildPresenceCheck(\n id: string,\n name: string,\n endpoint: string,\n fields: CachingFields\n): ConformanceCheck {\n const errors: string[] = [];\n\n if (!fields.hasTtlMs) {\n errors.push(`${endpoint} response missing ttlMs`);\n }\n if (!fields.hasCacheScope) {\n errors.push(`${endpoint} response missing cacheScope`);\n }\n\n return {\n id,\n name,\n description: `${endpoint} response includes ttlMs and cacheScope caching hints`,\n status: errors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: errors.length > 0 ? errors.join('; ') : undefined,\n specReferences: SPEC_REFS,\n details: {\n ttlMs: fields.ttlMs,\n cacheScope: fields.cacheScope,\n hasTtlMs: fields.hasTtlMs,\n hasCacheScope: fields.hasCacheScope\n }\n };\n}\n\nexport class CachingScenario implements ClientScenario {\n name = 'caching';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n description = `Test that servers include caching hints (ttlMs and cacheScope) on cacheable results (SEP-2549).\n\n**Server Implementation Requirements:**\n\nServers MUST include \\`ttlMs\\` (integer >= 0) and \\`cacheScope\\` (\"public\" or \"private\") on results from:\n- \\`tools/list\\`\n- \\`prompts/list\\`\n- \\`resources/list\\`\n- \\`resources/templates/list\\`\n- \\`resources/read\\``;\n\n async run(serverUrl: string): Promise {\n const checks: ConformanceCheck[] = [];\n const allFields: Array<{ endpoint: string; fields: CachingFields }> = [];\n\n // SEP-2549 only exists in the draft spec, so each cacheable endpoint is\n // queried over the stateless path (SEP-2575): protocolVersion DRAFT-2026-v1\n // plus the cross-cutting _meta and standard headers (issue #315).\n const queryEndpoint = async (\n checkId: string,\n checkName: string,\n endpoint: string,\n params?: Record\n ): Promise | undefined> => {\n const description = `${endpoint} response includes ttlMs and cacheScope caching hints`;\n try {\n const response = await sendStatelessRequest(\n serverUrl,\n endpoint,\n params\n );\n const result = response.body?.result;\n if (!result) {\n const error = response.body?.error;\n checks.push({\n id: checkId,\n name: checkName,\n description,\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: error\n ? `${endpoint} returned JSON-RPC error ${error.code}: ${error.message}`\n : `${endpoint} returned HTTP ${response.status} with no result`,\n specReferences: SPEC_REFS,\n details: { httpStatus: response.status, error }\n });\n return undefined;\n }\n const fields = extractCachingFields(result);\n allFields.push({ endpoint, fields });\n checks.push(buildPresenceCheck(checkId, checkName, endpoint, fields));\n return result;\n } catch (error) {\n checks.push({\n id: checkId,\n name: checkName,\n description,\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: `${endpoint} request failed: ${error instanceof Error ? error.message : String(error)}`,\n specReferences: SPEC_REFS\n });\n return undefined;\n }\n };\n\n // 1. tools/list\n await queryEndpoint(\n 'sep-2549-tools-list-caching-hints',\n 'ToolsListCachingHints',\n 'tools/list'\n );\n\n // 2. prompts/list\n await queryEndpoint(\n 'sep-2549-prompts-list-caching-hints',\n 'PromptsListCachingHints',\n 'prompts/list'\n );\n\n // 3. resources/list\n const resourcesResult = await queryEndpoint(\n 'sep-2549-resources-list-caching-hints',\n 'ResourcesListCachingHints',\n 'resources/list'\n );\n\n // 4. resources/templates/list\n await queryEndpoint(\n 'sep-2549-resources-templates-list-caching-hints',\n 'ResourcesTemplatesListCachingHints',\n 'resources/templates/list'\n );\n\n // 5. resources/read — use first resource from resources/list\n const resources = resourcesResult?.resources as\n | Array<{ uri?: string }>\n | undefined;\n const firstResourceUri = resources?.[0]?.uri;\n if (firstResourceUri) {\n await queryEndpoint(\n 'sep-2549-resources-read-caching-hints',\n 'ResourcesReadCachingHints',\n 'resources/read',\n { uri: firstResourceUri }\n );\n } else {\n // Keep the emitted check-ID set stable even when there is nothing to\n // read (resources/list failed or the server exposes no resources).\n checks.push({\n id: 'sep-2549-resources-read-caching-hints',\n name: 'ResourcesReadCachingHints',\n description:\n 'resources/read response includes ttlMs and cacheScope caching hints',\n status: 'SKIPPED',\n timestamp: new Date().toISOString(),\n errorMessage:\n 'resources/read was not exercised: resources/list failed or returned no resources.',\n specReferences: SPEC_REFS\n });\n }\n\n // 6. Aggregate: ttlMs must be a non-negative integer\n const ttlErrors: string[] = [];\n const endpointsWithTtl = allFields.filter((f) => f.fields.hasTtlMs);\n if (endpointsWithTtl.length === 0) {\n ttlErrors.push('no endpoints returned ttlMs');\n } else {\n for (const { endpoint, fields } of endpointsWithTtl) {\n const val = fields.ttlMs;\n if (typeof val !== 'number') {\n ttlErrors.push(\n `${endpoint}: ttlMs is ${typeof val}, expected number`\n );\n } else if (!Number.isInteger(val)) {\n ttlErrors.push(`${endpoint}: ttlMs is ${val}, expected integer`);\n } else if (val < 0) {\n ttlErrors.push(`${endpoint}: ttlMs is ${val}, must be >= 0`);\n }\n }\n }\n\n checks.push({\n id: 'sep-2549-ttl-non-negative',\n name: 'TtlNonNegative',\n description: 'All ttlMs values are non-negative integers',\n status: ttlErrors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: ttlErrors.length > 0 ? ttlErrors.join('; ') : undefined,\n specReferences: SPEC_REFS,\n details: {\n endpoints: allFields.map((f) => ({\n endpoint: f.endpoint,\n ttlMs: f.fields.ttlMs\n }))\n }\n });\n\n // 7. Aggregate: cacheScope must be \"public\" or \"private\"\n const scopeErrors: string[] = [];\n const endpointsWithScope = allFields.filter((f) => f.fields.hasCacheScope);\n if (endpointsWithScope.length === 0) {\n scopeErrors.push('no endpoints returned cacheScope');\n } else {\n for (const { endpoint, fields } of endpointsWithScope) {\n const val = fields.cacheScope;\n if (val !== 'public' && val !== 'private') {\n scopeErrors.push(\n `${endpoint}: cacheScope is ${JSON.stringify(val)}, expected \"public\" or \"private\"`\n );\n }\n }\n }\n\n checks.push({\n id: 'sep-2549-cache-scope-valid',\n name: 'CacheScopeValid',\n description: 'All cacheScope values are \"public\" or \"private\"',\n status: scopeErrors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: scopeErrors.length > 0 ? scopeErrors.join('; ') : undefined,\n specReferences: SPEC_REFS,\n details: {\n endpoints: allFields.map((f) => ({\n endpoint: f.endpoint,\n cacheScope: f.fields.cacheScope\n }))\n }\n });\n\n return checks;\n }\n}\n",[],[126,195,205,219],"b98d1758-5b64-11f1-97f0-ee650bb23af1",["D",1780062359293],[171,172,173,174],[126,195,205],"b83f4e8e-5b64-11f1-9ce4-ee650bb23af1","json-schema-ref-deref.ts","b83f4f42-5b64-11f1-9ce4-ee650bb23af1","ec297e4a-593f-4895-bcc9-83abd226436a",7,["D",1780062357110],"import { Server } from 'npm:@modelcontextprotocol/sdk@^1.29.0/server/index.js';\nimport { StreamableHTTPServerTransport } from 'npm:@modelcontextprotocol/sdk@^1.29.0/server/streamableHttp.js';\nimport { ListToolsRequestSchema } from 'npm:@modelcontextprotocol/sdk@^1.29.0/types.js';\nimport type { ConformanceCheck, RequestListener } from '../../types.ts';\nimport express, { Request, Response } from 'npm:express@^5.1.0';\nimport { HandlerScenario, DRAFT_PROTOCOL_VERSION } from '../../types.ts';\n\n/**\n * Scenario: JSON Schema network $ref dereferencing (SEP-2106)\n *\n * SEP-2106 permits the full JSON Schema 2020-12 vocabulary in tool schemas,\n * including `$ref`. A `$ref` that resolves to a network URI is an SSRF /\n * fetch-DoS vector: a malicious tool definition could point at internal\n * infrastructure and have the *client* fetch it during schema processing.\n *\n * Per SEP-2106, implementations MUST NOT automatically dereference `$ref`\n * values that resolve to a network URI (anything that is not a same-document\n * JSON Pointer such as `#/$defs/Foo` or an internal `$anchor`).\n *\n * This scenario advertises a tool whose inputSchema contains both a\n * same-document `$ref` and a `$ref` to a canary URL hosted by the scenario\n * itself. If the client fetches the canary URL at any point before the\n * scenario stops, the check fails.\n */\n\nconst TOOL_NAME = 'lookup_user';\nconst CANARY_PATH = '/canary/profile-schema.json';\nconst CHECK_ID = 'sep-2106-no-network-ref-deref';\n\nconst SPEC_REFERENCES = [\n {\n id: 'SEP-2106',\n url: 'https://modelcontextprotocol.io/seps/2106-json-schema-2020-12#security-implications'\n }\n];\n\nfunction createMcpServer(canaryUrl: string, onToolsListed: () => void): Server {\n const server = new Server(\n { name: 'json-schema-ref-deref-server', version: '1.0.0' },\n { capabilities: { tools: {} } }\n );\n\n server.setRequestHandler(ListToolsRequestSchema, async () => {\n onToolsListed();\n return {\n tools: [\n {\n name: TOOL_NAME,\n description: 'Look up a user profile by id',\n inputSchema: {\n $schema: 'https://json-schema.org/draft/2020-12/schema',\n type: 'object',\n $defs: {\n userId: { type: 'string', pattern: '^[a-z0-9-]+$' }\n },\n properties: {\n // Same-document $ref: safe, expected to be resolvable locally.\n id: { $ref: '#/$defs/userId' },\n // Network $ref: the canary. Implementations MUST NOT fetch this\n // automatically while processing the schema.\n profile: { $ref: canaryUrl }\n },\n required: ['id']\n }\n }\n ]\n };\n });\n\n return server;\n}\n\nexport class JsonSchemaRefDerefScenario extends HandlerScenario {\n name = 'json-schema-ref-no-deref';\n readonly source = { introducedIn: DRAFT_PROTOCOL_VERSION } as const;\n description = `Tests that a client does not automatically dereference a network-URI \\`$ref\\` in a tool's inputSchema (SEP-2106).\n\nThe scenario advertises a tool whose inputSchema contains a \\`$ref\\` pointing at a canary URL. The client should list tools (and may otherwise process the schema), but must not fetch the canary URL. Same-document refs (\\`#/$defs/...\\`) remain safe to resolve.`;\n mcpPath = '/mcp';\n\n private canaryRequests: Array<{ method: string; userAgent?: string }> = [];\n private toolsListed = false;\n\n handler(getBaseUrl: () => string): RequestListener {\n this.canaryRequests = [];\n this.toolsListed = false;\n\n const app = express();\n app.use(express.json());\n\n // Canary endpoint: any request here means the client dereferenced the\n // network $ref. Return a valid schema so a dereferencing client gets a\n // realistic response rather than an error it might silently swallow.\n app.all(CANARY_PATH, (req: Request, res: Response) => {\n this.canaryRequests.push({\n method: req.method,\n userAgent: req.headers['user-agent']\n });\n res.json({\n $schema: 'https://json-schema.org/draft/2020-12/schema',\n type: 'object',\n properties: { displayName: { type: 'string' } }\n });\n });\n\n app.post('/mcp', async (req: Request, res: Response) => {\n try {\n // Stateless: fresh server and transport per request\n const canaryUrl = `${getBaseUrl()}${CANARY_PATH}`;\n const server = createMcpServer(canaryUrl, () => {\n this.toolsListed = true;\n });\n const transport = new StreamableHTTPServerTransport({\n sessionIdGenerator: undefined\n });\n await server.connect(transport);\n await transport.handleRequest(req, res, req.body);\n } catch (error) {\n if (!res.headersSent) {\n res.status(500).json({\n jsonrpc: '2.0',\n error: {\n code: -32603,\n message: `Internal error: ${error instanceof Error ? error.message : String(error)}`\n },\n id: null\n });\n }\n }\n });\n\n return app;\n }\n\n getChecks(): ConformanceCheck[] {\n // Built fresh on every call so getChecks() is idempotent — the runner may\n // call it more than once and we must not accumulate duplicates.\n const timestamp = new Date().toISOString();\n const fetched = this.canaryRequests.length > 0;\n\n if (!this.toolsListed) {\n return [\n {\n id: CHECK_ID,\n name: 'NoNetworkRefDereference',\n description:\n 'Client never requested tools/list, so $ref handling could not be evaluated',\n status: 'FAILURE',\n timestamp,\n errorMessage:\n 'Client did not call tools/list against a server advertising a tool with a network $ref',\n specReferences: SPEC_REFERENCES,\n details: { toolsListed: false }\n }\n ];\n }\n\n return [\n {\n id: CHECK_ID,\n name: 'NoNetworkRefDereference',\n description: fetched\n ? 'Client automatically dereferenced a network-URI $ref in a tool inputSchema. Implementations MUST NOT automatically dereference $ref values that resolve to a network URI (SEP-2106).'\n : 'Client did not dereference the network-URI $ref in the tool inputSchema',\n status: fetched ? 'FAILURE' : 'SUCCESS',\n timestamp,\n errorMessage: fetched\n ? `Canary URL ${CANARY_PATH} was fetched ${this.canaryRequests.length} time(s)`\n : undefined,\n specReferences: SPEC_REFERENCES,\n details: {\n toolsListed: true,\n canaryRequestCount: this.canaryRequests.length,\n canaryRequests: this.canaryRequests\n }\n }\n ];\n }\n}\n",[],[126,195,239,231],"client","b8b6f718-5b64-11f1-bb30-ee650bb23af1","b8b6f7d6-5b64-11f1-bb30-ee650bb23af1",9,["D",1780062357895],"/**\n * HTTP Standard Headers conformance test scenario for MCP clients (SEP-2243)\n *\n * Tests that clients include the required standard MCP request headers on\n * Streamable HTTP POST requests:\n * - `Mcp-Method`: mirrors the `method` field from the JSON-RPC request body\n * - `Mcp-Name`: mirrors `params.name` or `params.uri` for tools/call,\n * resources/read, and prompts/get requests\n *\n * This is a Scenario (acts as a test server that inspects incoming requests\n * from the client under test).\n */\n\nimport http from 'node:http';\nimport { ConformanceCheck } from '../../types.ts';\nimport { BaseHttpScenario } from './http-base.ts';\n\nconst SPEC_REFERENCE = {\n id: 'SEP-2243-Standard-Headers',\n url: 'https://modelcontextprotocol.io/specification/draft/basic/transports#standard-mcp-request-headers'\n};\n\nexport class HttpStandardHeadersScenario extends BaseHttpScenario {\n name = 'http-standard-headers';\n description =\n 'Tests that client includes Mcp-Method and Mcp-Name headers on HTTP POST requests (SEP-2243)';\n\n // Track which header checks have been recorded\n private methodHeaderChecks = new Map();\n // Track which Mcp-Name checks have been recorded\n private nameHeaderChecks = new Map();\n\n getChecks(): ConformanceCheck[] {\n // Build a fresh array each call so getChecks() is idempotent — the runner\n // may call it more than once and we must not accumulate duplicates.\n const result = [...this.checks];\n\n // SEP-2243 requires Mcp-Method on \"all requests and notifications\". A\n // client that never sent prompts/list isn't violating SEP-2243 — it just\n // didn't exercise that path. Emit SKIPPED (not FAILURE) so a prompts-less\n // client doesn't show red, but the gap is still visible in the report.\n const expectedMethods = [\n 'initialize',\n 'notifications/initialized',\n 'tools/list',\n 'tools/call',\n 'resources/list',\n 'resources/read',\n 'prompts/list',\n 'prompts/get'\n ];\n\n for (const method of expectedMethods) {\n if (!this.methodHeaderChecks.has(method)) {\n result.push({\n id: 'sep-2243-client-includes-standard-headers',\n name: `ClientMcpMethodHeader_${method.replace(/\\//g, '_')}`,\n description: `Client sends correct Mcp-Method header on ${method} request`,\n status: 'SKIPPED',\n timestamp: new Date().toISOString(),\n errorMessage: `Client did not send a ${method} request; Mcp-Method header was not exercised for this method.`,\n specReferences: [SPEC_REFERENCE]\n });\n }\n }\n\n const expectedNameMethods = ['tools/call', 'resources/read', 'prompts/get'];\n for (const method of expectedNameMethods) {\n if (!this.nameHeaderChecks.has(method)) {\n result.push({\n id: 'sep-2243-client-includes-standard-headers',\n name: `ClientMcpNameHeader_${method.replace(/\\//g, '_')}`,\n description: `Client sends correct Mcp-Name header on ${method} request`,\n status: 'SKIPPED',\n timestamp: new Date().toISOString(),\n errorMessage: `Client did not send a ${method} request; Mcp-Name header was not exercised for this method.`,\n specReferences: [SPEC_REFERENCE]\n });\n }\n }\n\n return result;\n }\n\n protected handlePost(\n req: http.IncomingMessage,\n res: http.ServerResponse,\n request: any\n ): void {\n // Check Mcp-Method header for every request\n this.checkMcpMethodHeader(req, request);\n\n // Route to handlers\n if (request.method === 'initialize') {\n this.handleInitialize(res, request);\n } else if (request.method === 'tools/list') {\n this.handleToolsList(res, request);\n } else if (request.method === 'tools/call') {\n this.checkMcpNameHeader(req, request, 'params.name');\n this.handleToolsCall(res, request);\n } else if (request.method === 'resources/list') {\n this.handleResourcesList(res, request);\n } else if (request.method === 'resources/read') {\n this.checkMcpNameHeader(req, request, 'params.uri');\n this.handleResourcesRead(res, request);\n } else if (request.method === 'prompts/list') {\n this.handlePromptsList(res, request);\n } else if (request.method === 'prompts/get') {\n this.checkMcpNameHeader(req, request, 'params.name');\n this.handlePromptsGet(res, request);\n } else if (request.id === undefined) {\n // Notifications - return 202 (Mcp-Method already checked above)\n this.sendNotificationAck(res);\n } else {\n this.sendGenericResult(res, request);\n }\n }\n\n private checkMcpMethodHeader(req: http.IncomingMessage, request: any): void {\n const method = request.method;\n if (!method) return;\n\n // Already recorded a check for this method\n if (this.methodHeaderChecks.has(method)) return;\n\n // Header names are lowercased by Node.js http parser\n const mcpMethodHeader = req.headers['mcp-method'] as string | undefined;\n\n const errors: string[] = [];\n if (!mcpMethodHeader) {\n errors.push(\n `Missing Mcp-Method header on ${method} request. Clients MUST include the Mcp-Method header on all POST requests.`\n );\n } else if (mcpMethodHeader !== method) {\n // Header values are case-sensitive\n errors.push(\n `Mcp-Method header value '${mcpMethodHeader}' does not match body method '${method}'. Header values are case-sensitive.`\n );\n }\n\n this.methodHeaderChecks.set(method, errors.length === 0);\n\n this.checks.push({\n id: 'sep-2243-client-includes-standard-headers',\n name: `ClientMcpMethodHeader_${method.replace(/\\//g, '_')}`,\n description: `Client sends correct Mcp-Method header on ${method} request`,\n status: errors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: errors.length > 0 ? errors.join('; ') : undefined,\n specReferences: [SPEC_REFERENCE],\n details: {\n expectedMethod: method,\n actualHeader: mcpMethodHeader\n }\n });\n }\n\n private checkMcpNameHeader(\n req: http.IncomingMessage,\n request: any,\n sourceField: string\n ): void {\n const method = request.method;\n\n // Same de-dup guard as checkMcpMethodHeader: the harness advertises two\n // tools and two resources, so a client that calls both would otherwise\n // produce duplicate check rows for the same id.\n if (this.nameHeaderChecks.has(method)) return;\n\n const expectedValue =\n sourceField === 'params.uri' ? request.params?.uri : request.params?.name;\n\n const mcpNameHeader = req.headers['mcp-name'] as string | undefined;\n\n const errors: string[] = [];\n if (!mcpNameHeader) {\n errors.push(\n `Missing Mcp-Name header on ${method} request. Clients MUST include the Mcp-Name header for ${method} requests.`\n );\n } else if (mcpNameHeader !== expectedValue) {\n errors.push(\n `Mcp-Name header value '${mcpNameHeader}' does not match body ${sourceField} '${expectedValue}'.`\n );\n }\n\n this.nameHeaderChecks.set(method, errors.length === 0);\n\n this.checks.push({\n id: 'sep-2243-client-includes-standard-headers',\n name: `ClientMcpNameHeader_${method.replace(/\\//g, '_')}`,\n description: `Client sends correct Mcp-Name header on ${method} request`,\n status: errors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: errors.length > 0 ? errors.join('; ') : undefined,\n specReferences: [SPEC_REFERENCE],\n details: {\n method,\n sourceField,\n expectedValue,\n actualHeader: mcpNameHeader\n }\n });\n }\n\n private handleInitialize(res: http.ServerResponse, request: any): void {\n this.sendInitialize(res, request, {\n tools: {},\n resources: {},\n prompts: {}\n });\n }\n\n private handleToolsList(res: http.ServerResponse, request: any): void {\n res.writeHead(200, {\n 'Content-Type': 'application/json',\n 'mcp-session-id': this.sessionId\n });\n\n res.end(\n JSON.stringify({\n jsonrpc: '2.0',\n id: request.id,\n result: {\n tools: [\n {\n name: 'test_headers',\n description:\n 'A simple tool used to test that HTTP headers are sent correctly',\n inputSchema: {\n type: 'object',\n properties: {},\n required: []\n }\n },\n {\n name: 'my-hyphenated-tool',\n description:\n 'Tool with hyphen in name to test special chars in Mcp-Name header',\n inputSchema: {\n type: 'object',\n properties: {},\n required: []\n }\n }\n ]\n }\n })\n );\n }\n\n private handleToolsCall(res: http.ServerResponse, request: any): void {\n res.writeHead(200, {\n 'Content-Type': 'application/json',\n 'mcp-session-id': this.sessionId\n });\n\n res.end(\n JSON.stringify({\n jsonrpc: '2.0',\n id: request.id,\n result: {\n content: [\n {\n type: 'text',\n text: 'Headers test completed'\n }\n ]\n }\n })\n );\n }\n\n private handleResourcesList(res: http.ServerResponse, request: any): void {\n res.writeHead(200, {\n 'Content-Type': 'application/json',\n 'mcp-session-id': this.sessionId\n });\n\n res.end(\n JSON.stringify({\n jsonrpc: '2.0',\n id: request.id,\n result: {\n resources: [\n {\n uri: 'file:///path/to/file%20name.txt',\n name: 'File with spaces',\n description: 'Resource URI with percent-encoded spaces'\n },\n {\n uri: 'https://example.com/resource?id=123',\n name: 'Resource with query string',\n description: 'Resource URI with query string'\n }\n ]\n }\n })\n );\n }\n\n private handleResourcesRead(res: http.ServerResponse, request: any): void {\n res.writeHead(200, {\n 'Content-Type': 'application/json',\n 'mcp-session-id': this.sessionId\n });\n\n res.end(\n JSON.stringify({\n jsonrpc: '2.0',\n id: request.id,\n result: {\n contents: []\n }\n })\n );\n }\n\n private handlePromptsList(res: http.ServerResponse, request: any): void {\n res.writeHead(200, {\n 'Content-Type': 'application/json',\n 'mcp-session-id': this.sessionId\n });\n\n res.end(\n JSON.stringify({\n jsonrpc: '2.0',\n id: request.id,\n result: {\n prompts: [\n {\n name: 'test_prompt',\n description: 'A simple prompt for header testing'\n }\n ]\n }\n })\n );\n }\n\n private handlePromptsGet(res: http.ServerResponse, request: any): void {\n res.writeHead(200, {\n 'Content-Type': 'application/json',\n 'mcp-session-id': this.sessionId\n });\n\n res.end(\n JSON.stringify({\n jsonrpc: '2.0',\n id: request.id,\n result: {\n messages: []\n }\n })\n );\n }\n}\n",[],[126,195,239,207],"b879c460-5b64-11f1-aa1a-ee650bb23af1","http-custom-headers.ts","b879c514-5b64-11f1-aa1a-ee650bb23af1",8,["D",1780062357491],"/**\n * HTTP Custom Headers conformance test scenario for MCP clients (SEP-2243)\n *\n * Tests that clients correctly handle the `x-mcp-header` extension property:\n * 1. Mirror annotated tool parameter values into `Mcp-Param-{Name}` headers\n * 2. Apply correct value encoding (plain ASCII, Base64 for non-ASCII)\n * 3. Reject tool definitions with invalid `x-mcp-header` annotations\n *\n * This is a Scenario (acts as a test server that inspects incoming requests\n * from the client under test).\n */\n\nimport http from 'node:http';\nimport { ScenarioUrls, ConformanceCheck } from '../../types.ts';\nimport { BaseHttpScenario } from './http-base.ts';\n\nconst SPEC_REFERENCE_CUSTOM = {\n id: 'SEP-2243-Custom-Headers',\n url: 'https://modelcontextprotocol.io/specification/draft/basic/transports#custom-headers-from-tool-parameters'\n};\n\nconst SPEC_REFERENCE_ENCODING = {\n id: 'SEP-2243-Value-Encoding',\n url: 'https://modelcontextprotocol.io/specification/draft/basic/transports#value-encoding'\n};\n\nconst SPEC_REFERENCE_TOOL_DEF = {\n id: 'SEP-2243-x-mcp-header',\n url: 'https://modelcontextprotocol.io/specification/draft/server/tools#x-mcp-header'\n};\n\n/**\n * Every requirement-level check ID HttpCustomHeadersScenario can emit\n * (SEP-2243). Declared-but-unemitted checks are backfilled as FAILURE by\n * getChecks() — same pattern as request-metadata.ts — so the emitted ID set\n * is stable for traceability even when the client never exercises the\n * feature.\n */\nexport const CUSTOM_HEADERS_DECLARED_CHECK_IDS = [\n 'sep-2243-client-supports-custom-headers',\n 'sep-2243-client-mirrors-designated-params',\n 'sep-2243-client-encode-values',\n 'sep-2243-client-base64-unsafe',\n 'sep-2243-client-omit-null'\n] as const;\n\n/**\n * Every requirement-level check ID HttpInvalidToolHeadersScenario can emit\n * (SEP-2243).\n */\nexport const INVALID_TOOL_DECLARED_CHECK_IDS = [\n 'sep-2243-client-reject-invalid-tool',\n 'sep-2243-x-mcp-header-not-empty',\n 'sep-2243-x-mcp-header-charset',\n 'sep-2243-x-mcp-header-unique',\n 'sep-2243-x-mcp-header-primitive-only'\n] as const;\n\n/**\n * Invalid tool definitions served by HttpInvalidToolHeadersScenario, keyed by\n * tool name, mapped to the SEP-2243 x-mcp-header constraint each one\n * violates. The check for \"client did not call this tool\" is emitted under\n * the constraint's requirement ID so each constraint traces to a check.\n */\nconst INVALID_TOOL_CONSTRAINT_IDS: Record = {\n invalid_empty_header: 'sep-2243-x-mcp-header-not-empty',\n invalid_object_header: 'sep-2243-x-mcp-header-primitive-only',\n invalid_array_header: 'sep-2243-x-mcp-header-primitive-only',\n invalid_null_header: 'sep-2243-x-mcp-header-primitive-only',\n invalid_duplicate_same_case: 'sep-2243-x-mcp-header-unique',\n invalid_duplicate_diff_case: 'sep-2243-x-mcp-header-unique',\n invalid_space_in_name: 'sep-2243-x-mcp-header-charset',\n invalid_colon_in_name: 'sep-2243-x-mcp-header-charset',\n invalid_non_ascii_name: 'sep-2243-x-mcp-header-charset',\n invalid_control_char_name: 'sep-2243-x-mcp-header-charset'\n};\n\n/**\n * Decodes a header value that may be Base64-encoded.\n * Base64-encoded values use the format: =?base64?{Base64EncodedValue}?=\n */\nfunction decodeHeaderValue(value: string): string {\n const base64Match = value.match(/^=\\?base64\\?(.*)\\?=$/);\n if (base64Match) {\n return Buffer.from(base64Match[1], 'base64').toString('utf-8');\n }\n return value;\n}\n\n/**\n * Check if a value needs Base64 encoding per the spec:\n * - Non-ASCII characters\n * - Control characters\n * - Leading/trailing whitespace\n */\nfunction needsBase64Encoding(value: string): boolean {\n // Check for non-ASCII or control characters\n for (let i = 0; i < value.length; i++) {\n const code = value.charCodeAt(i);\n if (code < 0x20 || code > 0x7e) {\n // Allow space (0x20) and tab (0x09) only inside values, not at edges\n if (code === 0x09) return true; // tab always needs encoding\n if (code < 0x20) return true; // other control chars\n if (code > 0x7e) return true; // non-ASCII\n }\n }\n // Check for leading/trailing whitespace\n if (value !== value.trim()) return true;\n return false;\n}\n\n/**\n * Checks if a raw header value is properly encoded for a body value that\n * needs Base64 encoding. Returns null if valid, error string if invalid.\n */\nfunction validateEncodedHeader(\n rawHeader: string,\n bodyValue: string,\n valueType?: string\n): string | null {\n if (needsBase64Encoding(bodyValue)) {\n // Value requires Base64 encoding\n const base64Match = rawHeader.match(/^=\\?base64\\?(.*)\\?=$/);\n\n if (!base64Match) {\n return `Value '${bodyValue}' requires Base64 encoding but header was sent as plain: '${rawHeader}'`;\n }\n const decoded = Buffer.from(base64Match[1], 'base64').toString('utf-8');\n if (valueType === 'number') {\n return compareNumericValues(decoded, bodyValue);\n }\n if (decoded !== bodyValue) {\n return `Base64-decoded header value '${decoded}' does not match body value '${bodyValue}'`;\n }\n return null;\n }\n // Plain ASCII - compare directly (after decoding if Base64 was used)\n const decoded = decodeHeaderValue(rawHeader);\n if (valueType === 'number') {\n return compareNumericValues(decoded, bodyValue);\n }\n if (decoded !== bodyValue) {\n return `Header value '${decoded}' (raw: '${rawHeader}') does not match body value '${bodyValue}'`;\n }\n return null;\n}\n\n/**\n * Compare two string representations of numbers numerically.\n * For integers, requires exact match. For decimals, allows\n * a tolerance of 1e-9 to account for cross-SDK floating point\n * representation differences.\n */\nfunction compareNumericValues(\n headerValue: string,\n bodyValue: string\n): string | null {\n const headerNum = Number(headerValue);\n const bodyNum = Number(bodyValue);\n if (isNaN(headerNum) || isNaN(bodyNum)) {\n return `Non-numeric value in number comparison: header='${headerValue}', body='${bodyValue}'`;\n }\n if (Number.isInteger(bodyNum)) {\n // Integer: require exact numeric match (e.g. 42 === 42.0)\n if (headerNum !== bodyNum) {\n return `Numeric header value ${headerNum} does not match body value ${bodyNum}`;\n }\n } else {\n // Decimal: allow tolerance of 1e-9\n if (Math.abs(headerNum - bodyNum) > 1e-9) {\n return `Numeric header value ${headerNum} does not match body value ${bodyNum} (difference ${Math.abs(headerNum - bodyNum)} exceeds tolerance 1e-9)`;\n }\n }\n return null;\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// HttpCustomHeadersScenario - tests that clients mirror x-mcp-header params\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport class HttpCustomHeadersScenario extends BaseHttpScenario {\n name = 'http-custom-headers';\n description =\n 'Tests that client mirrors x-mcp-header tool parameters into Mcp-Param headers with correct encoding (SEP-2243)';\n\n private toolCallReceived: boolean = false;\n private nullToolCallReceived: boolean = false;\n\n async start(): Promise {\n const urls = await super.start();\n // Pass test values via context for encoding edge cases.\n // The conformance client should use these values when calling test_custom_headers.\n urls.context = {\n toolCalls: [\n {\n name: 'test_custom_headers',\n arguments: {\n region: 'us-west1',\n priority: 42,\n verbose: false,\n debug: true,\n empty_val: '',\n method_val: 'test-method',\n float_val: 3.14159,\n non_ascii_val: 'Hello, 世界',\n whitespace_val: ' padded ',\n leading_space_val: ' us-west1',\n trailing_space_val: 'us-west1 ',\n internal_space_val: 'us west 1',\n control_char_val: 'line1\\nline2',\n crlf_val: 'line1\\r\\nline2',\n tab_val: '\\tindented',\n query: 'SELECT * FROM users'\n }\n },\n {\n name: 'test_custom_headers_null',\n arguments: {\n region: 'us-east1',\n priority: 1,\n verbose: null,\n query: 'SELECT 1'\n }\n }\n ]\n };\n return urls;\n }\n\n getChecks(): ConformanceCheck[] {\n // Declared-but-unemitted -> FAILURE (request-metadata.ts pattern). Keeps\n // the emitted ID set stable for traceability even when the client never\n // calls the annotated tools. The `some()` guard makes this idempotent.\n for (const id of CUSTOM_HEADERS_DECLARED_CHECK_IDS) {\n if (this.checks.some((c) => c.id === id)) continue;\n const missingNullCall =\n id === 'sep-2243-client-omit-null' && !this.nullToolCallReceived;\n this.checks.push({\n id,\n name: 'NotObserved',\n description: `Declared check ${id} was never emitted`,\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: missingNullCall\n ? 'Client did not send a tools/call request for test_custom_headers_null to test null/omitted parameter handling.'\n : this.toolCallReceived\n ? 'Check was not observed: no tool call exercised it.'\n : 'Client did not send a tools/call request for test_custom_headers.',\n specReferences: [SPEC_REFERENCE_CUSTOM]\n });\n }\n return this.checks;\n }\n\n protected handlePost(\n req: http.IncomingMessage,\n res: http.ServerResponse,\n request: any\n ): void {\n if (request.method === 'initialize') {\n this.sendInitialize(res, request);\n } else if (request.method === 'tools/list') {\n this.handleToolsList(res, request);\n } else if (request.method === 'tools/call') {\n this.handleToolsCall(req, res, request);\n } else if (request.id === undefined) {\n this.sendNotificationAck(res);\n } else {\n this.sendGenericResult(res, request);\n }\n }\n\n private handleToolsList(res: http.ServerResponse, request: any): void {\n this.sendJson(res, {\n jsonrpc: '2.0',\n id: request.id,\n result: {\n tools: [\n {\n name: 'test_custom_headers',\n description:\n 'A tool with x-mcp-header annotations to test custom header mirroring and encoding',\n inputSchema: {\n type: 'object',\n properties: {\n region: {\n type: 'string',\n description: 'Plain ASCII string value',\n 'x-mcp-header': 'Region'\n },\n priority: {\n type: 'number',\n description: 'Integer numeric value',\n 'x-mcp-header': 'Priority'\n },\n verbose: {\n type: 'boolean',\n description: 'Boolean value',\n 'x-mcp-header': 'Verbose'\n },\n debug: {\n type: 'boolean',\n description: 'Boolean true value',\n 'x-mcp-header': 'Debug'\n },\n empty_val: {\n type: 'string',\n description: 'Empty string value',\n 'x-mcp-header': 'EmptyVal'\n },\n method_val: {\n type: 'string',\n description:\n 'Value for header named \"Method\" — tests that x-mcp-header \"Method\" produces Mcp-Param-Method (not Mcp-Method)',\n 'x-mcp-header': 'Method'\n },\n float_val: {\n type: 'number',\n description: 'Floating point numeric value',\n 'x-mcp-header': 'FloatVal'\n },\n non_ascii_val: {\n type: 'string',\n description:\n 'Non-ASCII string value — requires Base64 encoding',\n 'x-mcp-header': 'NonAscii'\n },\n whitespace_val: {\n type: 'string',\n description:\n 'String with leading/trailing whitespace — requires Base64 encoding',\n 'x-mcp-header': 'Whitespace'\n },\n leading_space_val: {\n type: 'string',\n description:\n 'String with leading space only — requires Base64 encoding',\n 'x-mcp-header': 'LeadingSpace'\n },\n trailing_space_val: {\n type: 'string',\n description:\n 'String with trailing space only — requires Base64 encoding',\n 'x-mcp-header': 'TrailingSpace'\n },\n internal_space_val: {\n type: 'string',\n description:\n 'String with internal spaces only — plain ASCII, no Base64',\n 'x-mcp-header': 'InternalSpace'\n },\n control_char_val: {\n type: 'string',\n description:\n 'String with control characters — requires Base64 encoding',\n 'x-mcp-header': 'ControlChar'\n },\n crlf_val: {\n type: 'string',\n description:\n 'String with carriage return and line feed — requires Base64 encoding',\n 'x-mcp-header': 'CrLf'\n },\n tab_val: {\n type: 'string',\n description:\n 'String with leading tab — requires Base64 encoding',\n 'x-mcp-header': 'Tab'\n },\n query: {\n type: 'string',\n description:\n 'No x-mcp-header annotation - should not be mirrored'\n }\n },\n required: ['region', 'priority', 'query']\n }\n },\n {\n name: 'test_custom_headers_null',\n description:\n 'A tool for testing null/omitted x-mcp-header parameter handling',\n inputSchema: {\n type: 'object',\n properties: {\n region: {\n type: 'string',\n description: 'Plain ASCII string value',\n 'x-mcp-header': 'Region'\n },\n priority: {\n type: 'number',\n description: 'Integer numeric value',\n 'x-mcp-header': 'Priority'\n },\n verbose: {\n type: 'boolean',\n description: 'Boolean value — will be null to test omission',\n 'x-mcp-header': 'Verbose'\n },\n query: {\n type: 'string',\n description: 'No x-mcp-header annotation'\n }\n },\n required: ['region', 'priority', 'query']\n }\n }\n ]\n }\n });\n }\n\n private handleToolsCall(\n req: http.IncomingMessage,\n res: http.ServerResponse,\n request: any\n ): void {\n const toolName = request.params?.name;\n const args = request.params?.arguments || {};\n\n if (toolName === 'test_custom_headers') {\n this.toolCallReceived = true;\n\n // SEP-2243 \"MCP clients MUST support this feature\": observable as the\n // client calling the annotated tool with at least one mirrored\n // Mcp-Param-* header. The per-parameter checks below then validate each\n // mirrored value individually.\n const hasAnyParamHeader = Object.keys(req.headers).some((h) =>\n h.startsWith('mcp-param-')\n );\n this.checks.push({\n id: 'sep-2243-client-supports-custom-headers',\n name: 'ClientSupportsCustomHeaders',\n description:\n 'Client supports custom headers: calls the x-mcp-header annotated tool and mirrors at least one parameter',\n status: hasAnyParamHeader ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: hasAnyParamHeader\n ? undefined\n : 'Client called test_custom_headers but sent no Mcp-Param-* headers.',\n specReferences: [SPEC_REFERENCE_CUSTOM]\n });\n\n // Check Mcp-Param-Region header (plain ASCII string)\n this.checkParamHeader(req, 'Region', args.region, 'string');\n\n // Check Mcp-Param-Priority header (integer number)\n this.checkParamHeader(req, 'Priority', args.priority, 'number');\n\n // Check Mcp-Param-Verbose header (boolean value)\n // checkParamHeader already FAILs on missing header, so this also covers\n // \"optional parameter present → client MUST include header\" without a\n // separate check id.\n if (args.verbose !== undefined && args.verbose !== null) {\n this.checkParamHeader(req, 'Verbose', args.verbose, 'boolean');\n }\n\n // Check Mcp-Param-Debug header (boolean true value)\n if (args.debug !== undefined && args.debug !== null) {\n this.checkParamHeader(req, 'Debug', args.debug, 'boolean');\n }\n\n // Check Mcp-Param-EmptyVal header (empty string → empty header value)\n if (args.empty_val !== undefined && args.empty_val !== null) {\n this.checkParamHeader(req, 'EmptyVal', args.empty_val, 'string');\n }\n\n // Check Mcp-Param-Method header (x-mcp-header \"Method\" → Mcp-Param-Method, NOT Mcp-Method)\n if (args.method_val !== undefined && args.method_val !== null) {\n this.checkParamHeader(req, 'Method', args.method_val, 'string');\n }\n\n // Check Mcp-Param-FloatVal header (floating point number)\n if (args.float_val !== undefined && args.float_val !== null) {\n this.checkParamHeader(req, 'FloatVal', args.float_val, 'number');\n }\n\n // Check Mcp-Param-NonAscii header (requires Base64 encoding)\n if (args.non_ascii_val !== undefined && args.non_ascii_val !== null) {\n this.checkParamHeader(req, 'NonAscii', args.non_ascii_val, 'string');\n }\n\n // Check Mcp-Param-Whitespace header (leading/trailing whitespace → Base64)\n if (args.whitespace_val !== undefined && args.whitespace_val !== null) {\n this.checkParamHeader(req, 'Whitespace', args.whitespace_val, 'string');\n }\n\n // Check Mcp-Param-LeadingSpace header (leading space only → Base64)\n if (\n args.leading_space_val !== undefined &&\n args.leading_space_val !== null\n ) {\n this.checkParamHeader(\n req,\n 'LeadingSpace',\n args.leading_space_val,\n 'string'\n );\n }\n\n // Check Mcp-Param-TrailingSpace header (trailing space only → Base64)\n if (\n args.trailing_space_val !== undefined &&\n args.trailing_space_val !== null\n ) {\n this.checkParamHeader(\n req,\n 'TrailingSpace',\n args.trailing_space_val,\n 'string'\n );\n }\n\n // Check Mcp-Param-InternalSpace header (internal spaces only → plain ASCII, no Base64)\n if (\n args.internal_space_val !== undefined &&\n args.internal_space_val !== null\n ) {\n this.checkParamHeader(\n req,\n 'InternalSpace',\n args.internal_space_val,\n 'string'\n );\n }\n\n // Check Mcp-Param-ControlChar header (control characters → Base64)\n if (\n args.control_char_val !== undefined &&\n args.control_char_val !== null\n ) {\n this.checkParamHeader(\n req,\n 'ControlChar',\n args.control_char_val,\n 'string'\n );\n }\n\n // Check Mcp-Param-CrLf header (carriage return + line feed → Base64)\n if (args.crlf_val !== undefined && args.crlf_val !== null) {\n this.checkParamHeader(req, 'CrLf', args.crlf_val, 'string');\n }\n\n // Check Mcp-Param-Tab header (leading tab → Base64)\n if (args.tab_val !== undefined && args.tab_val !== null) {\n this.checkParamHeader(req, 'Tab', args.tab_val, 'string');\n }\n\n // Check that 'query' (no x-mcp-header) is NOT mirrored — the negative\n // half of \"mirror the *designated* parameter values\".\n const queryHeader = req.headers['mcp-param-query'] as string | undefined;\n this.checks.push({\n id: 'sep-2243-client-mirrors-designated-params',\n name: 'ClientCustomHeaderNoMirrorUnannotated',\n description:\n 'Client MUST NOT add Mcp-Param headers for parameters without x-mcp-header',\n status: queryHeader === undefined ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage:\n queryHeader !== undefined\n ? `Found unexpected Mcp-Param-Query header '${queryHeader}' for unannotated parameter`\n : undefined,\n specReferences: [SPEC_REFERENCE_CUSTOM]\n });\n } else if (toolName === 'test_custom_headers_null') {\n this.nullToolCallReceived = true;\n\n // When value is null or not provided, client MUST omit the header\n const verboseHeader = req.headers['mcp-param-verbose'] as\n | string\n | undefined;\n this.checks.push({\n id: 'sep-2243-client-omit-null',\n name: 'ClientCustomHeaderOmitNull',\n description:\n 'Client MUST omit Mcp-Param header when parameter value is null or not provided',\n status: verboseHeader === undefined ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage:\n verboseHeader !== undefined\n ? `Mcp-Param-Verbose should be omitted when null/undefined, but got '${verboseHeader}'`\n : undefined,\n specReferences: [SPEC_REFERENCE_CUSTOM]\n });\n }\n\n this.sendJson(res, {\n jsonrpc: '2.0',\n id: request.id,\n result: {\n content: [{ type: 'text', text: 'Custom headers test completed' }]\n }\n });\n }\n\n private checkParamHeader(\n req: http.IncomingMessage,\n headerName: string,\n bodyValue: any,\n valueType: string\n ): void {\n const headerKey = `mcp-param-${headerName.toLowerCase()}`;\n const rawHeaderValue = req.headers[headerKey] as string | undefined;\n\n if (bodyValue === undefined || bodyValue === null) return;\n\n const errors: string[] = [];\n\n if (rawHeaderValue === undefined) {\n errors.push(\n `Missing Mcp-Param-${headerName} header. Client MUST include headers for x-mcp-header parameters.`\n );\n } else {\n // Convert body value to expected string representation\n let expectedString: string;\n switch (valueType) {\n case 'number':\n expectedString = String(bodyValue);\n break;\n case 'boolean':\n expectedString = bodyValue ? 'true' : 'false';\n break;\n default:\n expectedString = String(bodyValue);\n }\n\n // For numbers, compare numerically to allow for cross-SDK\n // floating point representation differences (e.g., \"42\" vs \"42.0\").\n // See SEP-2243 discussion on number precision.\n const validationError = validateEncodedHeader(\n rawHeaderValue,\n expectedString,\n valueType\n );\n if (validationError) {\n errors.push(validationError);\n }\n }\n\n // One check ID per SEP-2243 requirement, picked by what this parameter\n // actually exercises: Base64 wrapping for unsafe values, primitive\n // (number/boolean) string encoding, or plain mirroring. The per-parameter\n // detail lives in `name`/`details`.\n const needsBase64 =\n typeof bodyValue === 'string' && needsBase64Encoding(String(bodyValue));\n const checkId = needsBase64\n ? 'sep-2243-client-base64-unsafe'\n : valueType === 'number' || valueType === 'boolean'\n ? 'sep-2243-client-encode-values'\n : 'sep-2243-client-mirrors-designated-params';\n\n this.checks.push({\n id: checkId,\n name: `ClientCustomHeader_${headerName}`,\n description: `Client sends correct Mcp-Param-${headerName} header (${valueType} value)`,\n status: errors.length === 0 ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: errors.length > 0 ? errors.join('; ') : undefined,\n specReferences: [SPEC_REFERENCE_ENCODING],\n details: {\n headerName: `Mcp-Param-${headerName}`,\n rawHeaderValue,\n bodyValue,\n valueType,\n needsBase64\n }\n });\n }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// HttpInvalidToolHeadersScenario - tests that clients reject invalid tools\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport class HttpInvalidToolHeadersScenario extends BaseHttpScenario {\n name = 'http-invalid-tool-headers';\n description =\n 'Tests that client rejects tools with invalid x-mcp-header annotations (SEP-2243)';\n allowClientError = true;\n\n private calledTools: Set = new Set();\n private toolsListSent = false;\n\n getChecks(): ConformanceCheck[] {\n if (!this.toolsListSent) {\n this.checks.push({\n id: 'sep-2243-invalid-tool-tools-list-gate',\n name: 'ClientInvalidToolHeadersToolsList',\n description: 'Client requests tools/list',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: 'Client did not send a tools/list request.',\n specReferences: [SPEC_REFERENCE_TOOL_DEF]\n });\n }\n\n // Check that valid_tool WAS called — proves client kept valid tools\n const validToolCalled = this.calledTools.has('valid_tool');\n this.checks.push({\n id: 'sep-2243-client-reject-invalid-tool',\n name: 'ClientKeepsValidTool',\n description: 'Client MUST keep valid tools while excluding invalid ones',\n status: validToolCalled ? 'SUCCESS' : 'FAILURE',\n timestamp: new Date().toISOString(),\n errorMessage: validToolCalled\n ? undefined\n : \"Client did not call 'valid_tool'. A single malformed tool definition must not prevent other valid tools from being used.\",\n specReferences: [SPEC_REFERENCE_TOOL_DEF]\n });\n\n // Check that the client did NOT call any of the invalid tools. Each\n // invalid tool violates one specific x-mcp-header constraint, so the\n // check is emitted under that constraint's requirement ID — the client\n // rejecting the tool is how the constraint is enforced on the wire.\n for (const [toolName, constraintId] of Object.entries(\n INVALID_TOOL_CONSTRAINT_IDS\n )) {\n const called = this.calledTools.has(toolName);\n this.checks.push({\n id: constraintId,\n name: `ClientRejectsInvalidTool_${toolName}`,\n description: `Client MUST NOT call tool '${toolName}' with invalid x-mcp-header`,\n status: called ? 'FAILURE' : 'SUCCESS',\n timestamp: new Date().toISOString(),\n errorMessage: called\n ? `Client called '${toolName}' which has an invalid x-mcp-header. Clients MUST reject (exclude) such tools.`\n : undefined,\n specReferences: [SPEC_REFERENCE_TOOL_DEF]\n });\n }\n\n return this.checks;\n }\n\n protected handlePost(\n _req: http.IncomingMessage,\n res: http.ServerResponse,\n request: any\n ): void {\n if (request.method === 'initialize') {\n this.sendInitialize(res, request);\n } else if (request.method === 'tools/list') {\n this.handleToolsList(res, request);\n } else if (request.method === 'tools/call') {\n this.handleToolsCall(res, request);\n } else if (request.id === undefined) {\n this.sendNotificationAck(res);\n } else {\n this.sendGenericResult(res, request);\n }\n }\n\n private handleToolsList(res: http.ServerResponse, request: any): void {\n this.toolsListSent = true;\n\n this.sendJson(res, {\n jsonrpc: '2.0',\n id: request.id,\n result: {\n tools: [\n // ── Valid tool (should be kept by client) ──\n {\n name: 'valid_tool',\n description: 'A valid tool with correct x-mcp-header',\n inputSchema: {\n type: 'object',\n properties: {\n region: {\n type: 'string',\n 'x-mcp-header': 'Region'\n }\n },\n required: ['region']\n }\n },\n\n // ── Invalid: empty x-mcp-header value ──\n {\n name: 'invalid_empty_header',\n description:\n 'x-mcp-header MUST NOT be empty (MUST be rejected by client)',\n inputSchema: {\n type: 'object',\n properties: {\n value: { type: 'string', 'x-mcp-header': '' }\n },\n required: ['value']\n }\n },\n\n // ── Invalid: x-mcp-header on object type ──\n {\n name: 'invalid_object_header',\n description:\n 'x-mcp-header MUST only be on primitive types (MUST be rejected)',\n inputSchema: {\n type: 'object',\n properties: {\n data: { type: 'object', 'x-mcp-header': 'Data' }\n },\n required: ['data']\n }\n },\n\n // ── Invalid: x-mcp-header on array type ──\n {\n name: 'invalid_array_header',\n description:\n 'x-mcp-header MUST only be on primitive types (MUST be rejected)',\n inputSchema: {\n type: 'object',\n properties: {\n items: {\n type: 'array',\n items: { type: 'string' },\n 'x-mcp-header': 'Items'\n }\n },\n required: ['items']\n }\n },\n\n // ── Invalid: x-mcp-header on null type ──\n {\n name: 'invalid_null_header',\n description:\n 'x-mcp-header MUST only be on primitive types (MUST be rejected)',\n inputSchema: {\n type: 'object',\n properties: {\n nil: { type: 'null', 'x-mcp-header': 'Nil' }\n },\n required: ['nil']\n }\n },\n\n // ── Invalid: duplicate same-case x-mcp-header values ──\n {\n name: 'invalid_duplicate_same_case',\n description:\n 'Duplicate x-mcp-header \"Region\" on two properties (MUST be rejected)',\n inputSchema: {\n type: 'object',\n properties: {\n field1: { type: 'string', 'x-mcp-header': 'Region' },\n field2: { type: 'string', 'x-mcp-header': 'Region' }\n },\n required: ['field1', 'field2']\n }\n },\n\n // ── Invalid: duplicate case-insensitive x-mcp-header values ──\n {\n name: 'invalid_duplicate_diff_case',\n description:\n 'Duplicate case-insensitive x-mcp-header \"MyField\"/\"myfield\" (MUST be rejected)',\n inputSchema: {\n type: 'object',\n properties: {\n field1: { type: 'string', 'x-mcp-header': 'MyField' },\n field2: { type: 'string', 'x-mcp-header': 'myfield' }\n },\n required: ['field1', 'field2']\n }\n },\n\n // ── Invalid: space in x-mcp-header name ──\n {\n name: 'invalid_space_in_name',\n description:\n 'x-mcp-header MUST NOT contain space (MUST be rejected)',\n inputSchema: {\n type: 'object',\n properties: {\n value: { type: 'string', 'x-mcp-header': 'My Region' }\n },\n required: ['value']\n }\n },\n\n // ── Invalid: colon in x-mcp-header name ──\n {\n name: 'invalid_colon_in_name',\n description:\n 'x-mcp-header MUST NOT contain colon (MUST be rejected)',\n inputSchema: {\n type: 'object',\n properties: {\n value: {\n type: 'string',\n 'x-mcp-header': 'Region:Primary'\n }\n },\n required: ['value']\n }\n },\n\n // ── Invalid: non-ASCII in x-mcp-header name ──\n {\n name: 'invalid_non_ascii_name',\n description:\n 'x-mcp-header MUST contain only ASCII chars (MUST be rejected)',\n inputSchema: {\n type: 'object',\n properties: {\n value: { type: 'string', 'x-mcp-header': 'Région' }\n },\n required: ['value']\n }\n },\n\n // ── Invalid: control character in x-mcp-header name ──\n {\n name: 'invalid_control_char_name',\n description:\n 'x-mcp-header MUST NOT contain control chars (MUST be rejected)',\n inputSchema: {\n type: 'object',\n properties: {\n value: { type: 'string', 'x-mcp-header': 'Region\\t1' }\n },\n required: ['value']\n }\n }\n ]\n }\n });\n }\n\n private handleToolsCall(res: http.ServerResponse, request: any): void {\n const toolName = request.params?.name;\n if (toolName) this.calledTools.add(toolName);\n\n this.sendJson(res, {\n jsonrpc: '2.0',\n id: request.id,\n result: {\n content: [{ type: 'text', text: 'Tool call received' }]\n }\n });\n }\n}\n",[],[126,195,239,248],"b9532106-5b64-11f1-a299-ee650bb23af1","b9532340-5b64-11f1-a299-ee650bb23af1","8ee88a56-dbb1-42be-8649-f2f17a02c562",12,["D",1780062358922],"import { Scenario } from '../../../types.ts';\nimport { metadataScenarios } from './discovery-metadata.ts';\nimport { AuthBasicCIMDScenario } from './basic-cimd.ts';\nimport {\n Auth20250326OAuthMetadataBackcompatScenario,\n Auth20250326OEndpointFallbackScenario\n} from './march-spec-backcompat.ts';\nimport {\n ScopeFromWwwAuthenticateScenario,\n ScopeFromScopesSupportedScenario,\n ScopeOmittedWhenUndefinedScenario,\n ScopeStepUpAuthScenario,\n ScopeRetryLimitScenario\n} from './scope-handling.ts';\nimport {\n ClientSecretBasicAuthScenario,\n ClientSecretPostAuthScenario,\n PublicClientAuthScenario\n} from './token-endpoint-auth.ts';\nimport {\n ClientCredentialsJwtScenario,\n ClientCredentialsBasicScenario\n} from './client-credentials.ts';\nimport { ResourceMismatchScenario } from './resource-mismatch.ts';\nimport { PreRegistrationScenario } from './pre-registration.ts';\nimport { EnterpriseManagedAuthorizationScenario } from './enterprise-managed-authorization.ts';\nimport {\n OfflineAccessScopeScenario,\n OfflineAccessNotSupportedScenario\n} from './offline-access.ts';\nimport { AuthorizationServerMigrationScenario } from './authorization-server-migration.ts';\nimport {\n IssParameterSupportedScenario,\n IssParameterNotAdvertisedScenario,\n IssParameterSupportedMissingScenario,\n IssParameterWrongIssuerScenario,\n IssParameterUnexpectedScenario,\n IssParameterNormalizedVariantScenario,\n MetadataIssuerMismatchScenario\n} from './issuer-parameter.ts';\n\n// Auth scenarios (required for tier 1)\nexport const authScenariosList: Scenario[] = [\n ...metadataScenarios,\n new AuthBasicCIMDScenario(),\n new ScopeFromWwwAuthenticateScenario(),\n new ScopeFromScopesSupportedScenario(),\n new ScopeOmittedWhenUndefinedScenario(),\n new ScopeStepUpAuthScenario(),\n new ScopeRetryLimitScenario(),\n new ClientSecretBasicAuthScenario(),\n new ClientSecretPostAuthScenario(),\n new PublicClientAuthScenario(),\n new PreRegistrationScenario()\n];\n\n// Back-compat scenarios (optional - backward compatibility with older spec versions)\nexport const backcompatScenariosList: Scenario[] = [\n new Auth20250326OAuthMetadataBackcompatScenario(),\n new Auth20250326OEndpointFallbackScenario()\n];\n\n// Extension scenarios (optional for tier 1 - protocol extensions)\nexport const extensionScenariosList: Scenario[] = [\n new ClientCredentialsJwtScenario(),\n new ClientCredentialsBasicScenario(),\n new EnterpriseManagedAuthorizationScenario()\n];\n\n// Draft scenarios (informational - not scored for tier assessment)\nexport const draftScenariosList: Scenario[] = [\n new ResourceMismatchScenario(),\n new OfflineAccessScopeScenario(),\n new OfflineAccessNotSupportedScenario(),\n new AuthorizationServerMigrationScenario(),\n new IssParameterSupportedScenario(),\n new IssParameterNotAdvertisedScenario(),\n new IssParameterSupportedMissingScenario(),\n new IssParameterWrongIssuerScenario(),\n new IssParameterUnexpectedScenario(),\n new IssParameterNormalizedVariantScenario(),\n new MetadataIssuerMismatchScenario()\n];\n",[],[126,195,239,263,187],"auth","b921836c-5b64-11f1-a593-ee650bb23af1","discovery-metadata.ts","b921845c-5b64-11f1-a593-ee650bb23af1",11,["D",1780062358592],"/**\n * OAuth Metadata Discovery Scenarios\n *\n * These scenarios test different combinations of PRM and OAuth metadata locations.\n * The configurations are defined in SCENARIO_CONFIGS below and scenarios are\n * generated from them.\n */\n\nimport {\n AuthHandlerScenario,\n AuthHandlerContext,\n AuthHandlers,\n ConformanceCheck\n} from '../../../types.ts';\nimport { createAuthServer } from './helpers/createAuthServer.ts';\nimport { createServer } from './helpers/createServer.ts';\nimport { SpecReferences } from './spec-references.ts';\nimport { Request, Response } from 'npm:express@^5.1.0';\n\n/**\n * Configuration for a metadata discovery scenario.\n */\ninterface MetadataScenarioConfig {\n name: string;\n prmLocation: string;\n inWwwAuth: boolean;\n oauthMetadataLocation: string;\n /** Route prefix for the auth server (e.g., '/tenant1') */\n authRoutePrefix?: string;\n /** If true, add a trap for root PRM requests */\n trapRootPrm?: boolean;\n}\n\n/**\n * Scenario configurations table:\n *\n * | Scenario | PRM Location | In WWW-Auth | OAuth Metadata Location |\n * |------------------|-------------------------------------------|-------------|------------------------------------------------|\n * | metadata-default | /.well-known/oauth-protected-resource/mcp | Yes | /.well-known/oauth-authorization-server |\n * | metadata-var1 | /.well-known/oauth-protected-resource/mcp | No | /.well-known/openid-configuration |\n * | metadata-var2 | /.well-known/oauth-protected-resource | No | /.well-known/oauth-authorization-server/tenant1|\n * | metadata-var3 | /custom/metadata/location.json | Yes | /tenant1/.well-known/openid-configuration |\n */\nconst SCENARIO_CONFIGS: MetadataScenarioConfig[] = [\n {\n name: 'metadata-default',\n prmLocation: '/.well-known/oauth-protected-resource/mcp',\n inWwwAuth: true,\n oauthMetadataLocation: '/.well-known/oauth-authorization-server',\n trapRootPrm: true\n },\n {\n name: 'metadata-var1',\n prmLocation: '/.well-known/oauth-protected-resource/mcp',\n inWwwAuth: false,\n oauthMetadataLocation: '/.well-known/openid-configuration'\n },\n {\n name: 'metadata-var2',\n prmLocation: '/.well-known/oauth-protected-resource',\n inWwwAuth: false,\n oauthMetadataLocation: '/.well-known/oauth-authorization-server/tenant1',\n authRoutePrefix: '/tenant1'\n },\n {\n name: 'metadata-var3',\n prmLocation: '/custom/metadata/location.json',\n inWwwAuth: true,\n oauthMetadataLocation: '/tenant1/.well-known/openid-configuration',\n authRoutePrefix: '/tenant1'\n }\n];\n\n/**\n * Base for the table-driven discovery scenarios. Each subclass binds a row\n * of SCENARIO_CONFIGS; we use real classes (not factory-returned literals)\n * so the hosted runner can do `new Ctor()` for a fresh instance per run.\n */\nabstract class MetadataDiscoveryScenario extends AuthHandlerScenario {\n protected abstract readonly config: MetadataScenarioConfig;\n readonly source = { introducedIn: '2025-11-25' } as const;\n private checks: ConformanceCheck[] = [];\n\n get name() {\n return `auth/${this.config.name}`;\n }\n get description() {\n return `Tests Basic OAuth metadata discovery flow.\n\n**PRM:** ${this.config.prmLocation}${this.config.inWwwAuth ? '' : ' (not in WWW-Authenticate)'}\n**OAuth metadata:** ${this.config.oauthMetadataLocation}\n`;\n }\n\n authHandlers(ctx: AuthHandlerContext): AuthHandlers {\n this.checks = [];\n const config = this.config;\n const routePrefix = config.authRoutePrefix || '';\n const isOpenIdConfiguration = config.oauthMetadataLocation.includes(\n 'openid-configuration'\n );\n const getAsUrl = () => ctx.getAuxBaseUrl('as');\n\n const authApp = createAuthServer(this.checks, getAsUrl, {\n metadataPath: config.oauthMetadataLocation,\n isOpenIdConfiguration,\n ...(routePrefix && { routePrefix })\n });\n\n // If path-based OAuth metadata, trap root requests\n if (routePrefix) {\n authApp.get('/.well-known/oauth-authorization-server', (req, res) => {\n this.checks.push({\n id: 'authorization-server-metadata-wrong-path',\n name: 'AuthorizationServerMetadataWrongPath',\n description:\n 'Client requested authorization server at the root path when the AS URL has a path-based location',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n specReferences: [\n SpecReferences.RFC_AUTH_SERVER_METADATA_REQUEST,\n SpecReferences.MCP_AUTH_DISCOVERY\n ],\n details: {\n url: req.url\n }\n });\n res.status(404).send('Not Found');\n });\n }\n\n const getAuthServerUrl = routePrefix\n ? () => `${getAsUrl()}${routePrefix}`\n : getAsUrl;\n\n const rsApp = createServer(\n this.checks,\n ctx.getRsBaseUrl,\n getAuthServerUrl,\n {\n prmPath: config.prmLocation,\n includePrmInWwwAuth: config.inWwwAuth\n }\n );\n\n // Add trap for root PRM requests if configured\n if (config.trapRootPrm) {\n rsApp.get(\n '/.well-known/oauth-protected-resource',\n (req: Request, res: Response) => {\n this.checks.push({\n id: 'prm-priority-order',\n name: 'PRM Priority Order',\n description:\n 'Client requested PRM metadata at root location on a server with path-based PRM',\n status: 'FAILURE',\n timestamp: new Date().toISOString(),\n specReferences: [\n SpecReferences.RFC_PRM_DISCOVERY,\n SpecReferences.MCP_PRM_DISCOVERY\n ],\n details: {\n url: req.url,\n path: req.path\n }\n });\n\n res.status(404).json({\n error: 'not_found',\n error_description: 'PRM metadata not available at root location'\n });\n }\n );\n }\n\n return { rs: rsApp, aux: { as: authApp } };\n }\n\n getChecks(): ConformanceCheck[] {\n const isPathBasedPrm =\n this.config.prmLocation === '/.well-known/oauth-protected-resource/mcp';\n const expectedSlugs = [\n ...(isPathBasedPrm ? ['prm-pathbased-requested'] : []),\n 'authorization-server-metadata',\n 'client-registration',\n 'authorization-request',\n 'token-request'\n ];\n\n for (const slug of expectedSlugs) {\n if (!this.checks.find((c) => c.id === slug)) {\n this.checks.push({\n id: slug,\n name: `Expected Check Missing: ${slug}`,\n description: `Expected Check Missing: ${slug}`,\n status: 'FAILURE',\n timestamp: new Date().toISOString()\n });\n }\n }\n\n return this.checks;\n }\n}\n\nexport class AuthMetadataDefaultScenario extends MetadataDiscoveryScenario {\n protected readonly config = SCENARIO_CONFIGS[0];\n}\nexport class AuthMetadataVar1Scenario extends MetadataDiscoveryScenario {\n protected readonly config = SCENARIO_CONFIGS[1];\n}\nexport class AuthMetadataVar2Scenario extends MetadataDiscoveryScenario {\n protected readonly config = SCENARIO_CONFIGS[2];\n}\nexport class AuthMetadataVar3Scenario extends MetadataDiscoveryScenario {\n protected readonly config = SCENARIO_CONFIGS[3];\n}\n\n// Export all scenarios as an array for convenience\nexport const metadataScenarios = [\n new AuthMetadataDefaultScenario(),\n new AuthMetadataVar1Scenario(),\n new AuthMetadataVar2Scenario(),\n new AuthMetadataVar3Scenario()\n];\n\n// Export function to list metadata scenario names (for suite support)\nexport function listMetadataScenarios(): string[] {\n return metadataScenarios.map((s) => s.name);\n}\n",[],[126,195,239,263,265],"b921d592-5b64-11f1-a593-ee650bb23af1",["D",1780062358592],[165,166],[126,195,239,263],"b83f7652-5b64-11f1-9ce4-ee650bb23af1",["D",1780062357110],[164,167,168,169],[126,195,239],"b8e7039a-5b64-11f1-911e-ee650bb23af1","authorization-server-metadata.ts","b8e70444-5b64-11f1-911e-ee650bb23af1","b7366fed-a5c9-4ea7-bad4-7173486b4ce1",10,["D",1780062358210],"/**\n * Authorization server metadata endpoint test scenarios for MCP authorization servers\n */\nimport {\n ClientScenarioForAuthorizationServer,\n ConformanceCheck\n} from '../../types.ts';\nimport { request } from 'npm:undici@^7.25.0';\n\ntype Status = 'SUCCESS' | 'FAILURE';\n\nexport class AuthorizationServerMetadataEndpointScenario implements ClientScenarioForAuthorizationServer {\n name = 'authorization-server-metadata-endpoint';\n readonly source = { introducedIn: '2025-03-26' } as const;\n description = `Test authorization server metadata endpoint.\n\n**Authorization Server Implementation Requirements:**\n\n**Endpoint**: \\`authorization server metadata\\`\n\n**Requirements**:\n- HTTP response status code MUST be 200 OK\n- Content-Type header MUST be application/json\n- Return a JSON response including issuer, authorization_endpoint, token_endpoint and response_types_supported\n- The issuer value MUST match the URI obtained by removing the well-known URI string from the authorization server metadata URI.`;\n\n async run(serverUrl: string): Promise {\n let status: Status = 'SUCCESS';\n let errorMessage: string | undefined;\n let details: any;\n let response: any | null = null;\n try {\n const wellKnownUrls = this.createWellKnownUrl(serverUrl);\n\n for (const url of wellKnownUrls) {\n try {\n const checkResponse = await request(url, { method: 'GET' });\n if (checkResponse.statusCode === 200) {\n response = checkResponse;\n break;\n }\n } catch {\n // Ignore the error and proceed to the next loop.\n }\n }\n\n if (!response) {\n throw new Error(\n 'All authorization server metadata endpoints returned invalid status code.'\n );\n }\n\n this.validateContentType(response.headers['content-type']);\n\n const body = await this.parseJson(response);\n const errors: string[] = [];\n this.validateMetadataBody(body, serverUrl, errors);\n\n if (errors.length > 0) {\n status = 'FAILURE';\n errorMessage = errors.join(', ');\n }\n\n details = {\n contentType: response.headers['content-type'],\n body\n };\n } catch (error) {\n status = 'FAILURE';\n errorMessage = error instanceof Error ? error.message : String(error);\n }\n\n return [\n {\n id: 'authorization-server-metadata',\n name: 'AuthorizationServerMetadata',\n description: 'Valid authorization server metadata response',\n status,\n timestamp: new Date().toISOString(),\n errorMessage,\n specReferences: [\n {\n id: 'Authorization-Server-Metadata',\n url: 'https://datatracker.ietf.org/doc/html/rfc8414'\n }\n ],\n ...(details ? { details } : {})\n }\n ];\n }\n\n private createWellKnownUrl(serverUrl: string): string[] {\n const base = new URL(serverUrl);\n const origin = base.origin;\n const path = base.pathname.replace(/\\/$/, '');\n\n const urls = new Set();\n urls.add(`${origin}/.well-known/oauth-authorization-server${path}`);\n urls.add(`${origin}/.well-known/openid-configuration${path}`);\n urls.add(`${origin}${path}/.well-known/openid-configuration`);\n\n return Array.from(urls);\n }\n\n private validateContentType(contentType?: string | string[]): void {\n const valid =\n typeof contentType === 'string' &&\n contentType.toLowerCase().includes('application/json');\n\n if (!valid) {\n throw new Error(`Invalid Content-Type: ${contentType ?? '(missing)'}`);\n }\n }\n\n private async parseJson(response: any): Promise> {\n const body = await response.body.json();\n if (typeof body !== 'object' || body === null) {\n throw new Error('Response body is not an object');\n }\n return body;\n }\n\n private validateMetadataBody(\n body: Record,\n serverUrl: string,\n errors: string[]\n ): void {\n this.assertString(\n body.authorization_endpoint,\n 'authorization_endpoint',\n errors\n );\n this.assertString(body.token_endpoint, 'token_endpoint', errors);\n\n if (\n !Array.isArray(body.response_types_supported) ||\n !body.response_types_supported.includes('code')\n ) {\n errors.push(\n 'Response body does not include valid \"response_types_supported\" claim'\n );\n }\n\n if (\n !Array.isArray(body.code_challenge_methods_supported) ||\n !body.code_challenge_methods_supported.includes('S256')\n ) {\n errors.push(\n 'Response body does not include valid \"code_challenge_methods_supported\" claim'\n );\n }\n\n if (body.issuer !== serverUrl) {\n errors.push(`Invalid issuer: ${body.issuer ?? '(missing)'}`);\n }\n }\n\n private assertString(value: unknown, name: string, errors: string[]): void {\n if (typeof value !== 'string' || value.length === 0) {\n errors.push(`Response body does not include valid \"${name}\" claim`);\n }\n }\n}\n",[],[126,195,289,281],"authorization-server","b8e74008-5b64-11f1-911e-ee650bb23af1",["D",1780062358210],[162],[126,195,289],"b7946226-5b64-11f1-9ce4-ee650bb23af1",["D",1780062355899],[161,163,170,175],[126,195],"b80f911c-5b64-11f1-9de2-ee650bb23af1","session.ts","b80f91e4-5b64-11f1-9de2-ee650bb23af1","c962419b-89c2-42ca-bb90-1cccfe244f57",6,["D",1780062356798],"/**\n * Session management for the hosted conformance server.\n *\n * A \"run\" is one isolated exercise of a scenario. Each run owns a fresh\n * Scenario instance and the RequestListener it returns from handler() — no\n * loopback port, no proxy. Runs are keyed by a path-embedded id so\n * correlation works for stateless-transport clients that never echo\n * mcp-session-id.\n */\n\nimport { randomBytes } from 'node:crypto';\nimport {\n Scenario,\n ConformanceCheck,\n RequestListener,\n AuthHandlerScenario,\n AuxOriginRole\n} from '../types.ts';\nimport { getScenario, scenarios } from '../scenarios/index.ts';\n\nexport interface HostedRun {\n id: string;\n scenarioName: string;\n scenario: Scenario;\n /** The mounted RS handler — invoke directly with (req, res). */\n listener: RequestListener;\n /** Aux-origin handlers (AS, IdP, …) for auth scenarios. */\n auxListeners?: Partial>;\n /** Sub-path under the run prefix where the MCP endpoint lives. */\n mcpPath: string;\n createdAt: number;\n lastSeenAt: number;\n context?: Record;\n}\n\nexport interface SessionManagerOptions {\n /** Idle ms after which a run is reaped. Default 5 minutes. */\n ttlMs?: number;\n sweepIntervalMs?: number;\n /**\n * Public origins of the relay deployments, keyed by role. Required for any\n * scenario that exposes `authHandlers()`. Each value is the relay's public\n * URL (no trailing slash); per-run AS issuer becomes `/r/`.\n */\n auxOrigins?: Partial>;\n}\n\nexport class SessionManager {\n private runs = new Map();\n private readonly ttlMs: number;\n private readonly auxOrigins: Partial>;\n private sweeper: ReturnType;\n\n constructor(opts: SessionManagerOptions = {}) {\n this.ttlMs = opts.ttlMs ?? 5 * 60_000;\n this.auxOrigins = opts.auxOrigins ?? {};\n const sweepIntervalMs = opts.sweepIntervalMs ?? 30_000;\n this.sweeper = setInterval(() => this.sweep(), sweepIntervalMs);\n this.sweeper.unref?.();\n }\n\n /**\n * Get the run for (scenario, id), creating it on first reference. The id is\n * caller-chosen so URLs are predictable; pass undefined to mint one.\n */\n getOrCreate(\n scenarioName: string,\n id: string | undefined,\n baseUrlFor: (runId: string) => string\n ): HostedRun {\n if (id) {\n const existing = this.runs.get(id);\n if (existing && existing.scenarioName === scenarioName) {\n existing.lastSeenAt = Date.now();\n return existing;\n }\n // Same id reused for a different scenario → replace, don't merge checks.\n if (existing) void this.destroy(id);\n }\n\n const proto = getScenario(scenarioName);\n if (!proto) throw new UnknownScenarioError(scenarioName);\n\n const Ctor = proto.constructor as new () => Scenario;\n const scenario = new Ctor();\n const runId = id ?? randomBytes(6).toString('base64url');\n\n let listener: RequestListener;\n let auxListeners: HostedRun['auxListeners'];\n let context: Record | undefined;\n\n if (scenario instanceof AuthHandlerScenario) {\n // Multi-origin scenario: build RS + aux handlers from authHandlers().\n // Aux issuer is /r/ so the run-id is recoverable\n // from any RFC 8414 well-known path the client constructs from it.\n const missing = scenario.auxRoles.filter((r) => !this.auxOrigins[r]);\n if (missing.length) {\n throw new NotHostableError(\n scenarioName,\n `needs aux origin(s) [${missing.join(', ')}] — start with --as-origin`\n );\n }\n const handlers = scenario.authHandlers({\n getRsBaseUrl: () => baseUrlFor(runId),\n getAuxBaseUrl: (role) => `${this.auxOrigins[role]}/r/${runId}`\n });\n listener = handlers.rs;\n auxListeners = handlers.aux;\n context = (\n scenario as unknown as {\n scenarioContext?: () => Record;\n }\n ).scenarioContext?.();\n } else if (scenario.handler) {\n listener = scenario.handler(() => baseUrlFor(runId));\n } else {\n throw new NotHostableError(scenarioName);\n }\n\n const run: HostedRun = {\n id: runId,\n scenarioName,\n scenario,\n listener,\n auxListeners,\n mcpPath: scenario.mcpPath ?? '',\n createdAt: Date.now(),\n lastSeenAt: Date.now(),\n context\n };\n this.runs.set(runId, run);\n return run;\n }\n\n get(id: string): HostedRun | undefined {\n const r = this.runs.get(id);\n if (r) r.lastSeenAt = Date.now();\n return r;\n }\n\n results(id: string): ConformanceCheck[] | undefined {\n return this.runs.get(id)?.scenario.getChecks();\n }\n\n list(): HostedRun[] {\n return Array.from(this.runs.values());\n }\n\n async destroy(id: string): Promise {\n const r = this.runs.get(id);\n if (!r) return;\n this.runs.delete(id);\n // handler() never started a server, but some scenarios hold timers/streams\n // that stop() cleans up. Safe to call even though start() wasn't.\n try {\n await r.scenario.stop();\n } catch {\n // best-effort\n }\n }\n\n async close(): Promise {\n clearInterval(this.sweeper);\n await Promise.all(\n Array.from(this.runs.keys()).map((id) => this.destroy(id))\n );\n }\n\n private sweep(): void {\n const now = Date.now();\n for (const [id, r] of this.runs) {\n if (now - r.lastSeenAt > this.ttlMs) void this.destroy(id);\n }\n }\n}\n\nexport class UnknownScenarioError extends Error {\n constructor(name: string) {\n super(\n `Unknown scenario '${name}'. Available: ${Array.from(scenarios.keys()).join(', ')}`\n );\n }\n}\n\nexport class NotHostableError extends Error {\n constructor(name: string, why?: string) {\n super(\n `Scenario '${name}' cannot run hosted` +\n (why\n ? `: ${why}`\n : ` (no handler() or authHandlers() — typically backcompat scenarios that need root-of-origin endpoints).`)\n );\n }\n}\n\n/** Scenarios that can run hosted, partitioned by what they need. */\nexport function listHostableScenarios(\n withAuxOrigins: readonly AuxOriginRole[] = []\n): string[] {\n const have = new Set(withAuxOrigins);\n return Array.from(scenarios.entries())\n .filter(([, s]) => {\n if (typeof s.handler === 'function') return true;\n if (s instanceof AuthHandlerScenario) {\n return s.auxRoles.every((r) => have.has(r));\n }\n return false;\n })\n .map(([name]) => name);\n}\n",[],[126,307,299],"hosted","b70c0e4e-5b64-11f1-8713-ee650bb23af1","server.ts","b70c0f02-5b64-11f1-8713-ee650bb23af1",["D",1780062355087],"/**\n * Hosted conformance server — direct-mount, no loopback proxy.\n *\n * URL scheme (run-id is path-embedded so stateless-transport clients work):\n *\n * ALL /s//[/] Mounted scenario handler. The run\n * is created lazily on first hit;\n * pick any you like.\n * GET /s/ Convenience: mints a fresh run-id\n * and returns {mcpUrl, resultsUrl}.\n * GET /results/ JSON {summary, checks}\n * GET /results/.html Pretty HTML report\n * GET /scenarios JSON list of hostable scenarios\n * GET / Landing page\n * POST /mcp Meta-MCP: list_scenarios,\n * start_run, get_results\n *\n * Scenarios are mounted via Scenario.handler() — the same RequestListener the\n * CLI runner wraps in http.createServer — so there is no loopback port and\n * this works on serverless hosts. Each run gets a fresh Scenario instance.\n */\n\nimport express, { Request, Response } from 'npm:express@^5.1.0';\nimport { timingSafeEqual } from 'node:crypto';\nimport { Server } from 'npm:@modelcontextprotocol/sdk@^1.29.0/server/index.js';\nimport { StreamableHTTPServerTransport } from 'npm:@modelcontextprotocol/sdk@^1.29.0/server/streamableHttp.js';\nimport {\n CallToolRequestSchema,\n ListToolsRequestSchema,\n CallToolResult\n} from 'npm:@modelcontextprotocol/sdk@^1.29.0/types.js';\nimport {\n SessionManager,\n HostedRun,\n UnknownScenarioError,\n NotHostableError,\n listHostableScenarios\n} from './session.ts';\nimport { renderLanding, renderResults } from './html.ts';\nimport { getScenario } from '../scenarios/index.ts';\nimport { ConformanceCheck, AuxOriginRole } from '../types.ts';\n\nexport interface HostedServerOptions {\n publicOrigin?: string;\n ttlMs?: number;\n /**\n * Public origins of the AS/IdP relay deployments. When set, scenarios that\n * implement `authHandlers()` become hostable; their per-run AS issuer is\n * `/r/`. See examples/hosted/valtown-relay.ts.\n */\n auxOrigins?: Partial>;\n /**\n * Shared secret the relay sends in `x-relay-secret`. `/__aux/*` rejects\n * requests without it so the aux backchannel can't be hit directly. Set\n * the same value in the relay's env.\n */\n relaySecret?: string;\n}\n\n/** Only allow run-ids that are safe in a single path segment. */\nconst RUN_ID_RE = /^[A-Za-z0-9_-]{1,64}$/;\n\nconst AUX_ROLES: readonly AuxOriginRole[] = ['as', 'as2', 'idp'];\n\nexport function createHostedApp(opts: HostedServerOptions = {}): {\n app: express.Application;\n sessions: SessionManager;\n} {\n const auxOrigins = opts.auxOrigins ?? {};\n const haveAux = AUX_ROLES.filter((r) => auxOrigins[r]);\n const sessions = new SessionManager({ ttlMs: opts.ttlMs, auxOrigins });\n const app = express();\n const hostable = new Set(listHostableScenarios(haveAux));\n\n function origin(req: Request): string {\n if (opts.publicOrigin) return opts.publicOrigin;\n const proto = (req.header('x-forwarded-proto') ?? req.protocol) || 'http';\n const host = req.header('x-forwarded-host') ?? req.header('host');\n return `${proto}://${host}`;\n }\n\n function runBaseUrl(req: Request, scenario: string, runId: string): string {\n return `${origin(req)}/s/${scenario}/${runId}`;\n }\n\n /**\n * Resolve \"//\" against the hostable set.\n * Scenario names may contain '/', so try progressively longer prefixes.\n * Returns undefined if no hostable scenario matches the prefix.\n */\n function resolveRun(rest: string):\n | {\n scenarioName: string;\n runId: string | undefined;\n suffix: string;\n }\n | undefined {\n const segments = rest.split('/');\n for (let i = 1; i <= segments.length; i++) {\n const candidate = segments.slice(0, i).join('/');\n if (hostable.has(candidate)) {\n const runId = segments[i] || undefined;\n const suffix = '/' + segments.slice(i + 1).join('/');\n return { scenarioName: candidate, runId, suffix };\n }\n }\n return undefined;\n }\n\n /**\n * Dispatch (req, res) to `listener` after rewriting `req.url` so the\n * scenario sees the path it would have under start()/stop() — i.e. with\n * the run-prefix stripped and (for well-known dispatch) the well-known\n * prefix re-prepended.\n */\n function dispatch(\n run: HostedRun,\n listener: (req: Request, res: Response) => void,\n req: Request,\n res: Response,\n rewrittenUrl: string\n ) {\n res.setHeader(\n 'link',\n `<${origin(req)}/results/${run.id}>; rel=\"conformance-results\"`\n );\n req.url = rewrittenUrl;\n listener(req, res);\n }\n\n // ---------- discovery ----------\n\n app.get('/', (req, res) => {\n res.type('html').send(renderLanding(origin(req), Array.from(hostable)));\n });\n\n app.get('/scenarios', (_req, res) => {\n res.json(\n Array.from(hostable).map((name) => {\n const s = getScenario(name)!;\n return {\n name,\n description: s.description,\n source: s.source,\n mcpPath: s.mcpPath ?? ''\n };\n })\n );\n });\n\n // ---------- scenario mounting ----------\n //\n // We can't pre-register an express route per (scenario, run-id) because\n // run-ids are open-ended. Instead a single catch-all route resolves the\n // run, rewrites req.url to strip the /s// prefix, and hands\n // off to the run's listener — exactly what app.use(prefix, fn) would do,\n // but with a dynamic prefix.\n\n app.all(/^\\/s\\/(.+)$/, (req, res, next) => {\n const rest = req.params[0]; // \"//\"\n const resolved = resolveRun(rest);\n if (!resolved) {\n // Distinguish \"exists but not hostable\" from \"unknown\"\n const segments = rest.split('/');\n for (let i = 1; i <= segments.length; i++) {\n if (getScenario(segments.slice(0, i).join('/'))) {\n res.status(501).json({\n error: `scenario '${segments.slice(0, i).join('/')}' is not hostable here`\n });\n return;\n }\n }\n res.status(404).json({ error: `unknown scenario '${segments[0]}'` });\n return;\n }\n const { scenarioName, runId, suffix } = resolved;\n\n // GET /s/ with no run-id → mint one and tell the caller where\n // to point their client.\n if (!runId) {\n if (req.method !== 'GET') {\n res.status(400).json({\n error:\n 'Missing run-id. Use /s//, or GET /s/ to mint one.'\n });\n return;\n }\n try {\n const run = sessions.getOrCreate(scenarioName, undefined, (id) =>\n runBaseUrl(req, scenarioName, id)\n );\n res.json({\n runId: run.id,\n mcpUrl: `${runBaseUrl(req, scenarioName, run.id)}${run.mcpPath}`,\n resultsUrl: `${origin(req)}/results/${run.id}`,\n resultsHtmlUrl: `${origin(req)}/results/${run.id}.html`,\n context: run.context\n });\n } catch (e) {\n next(e);\n }\n return;\n }\n\n if (!RUN_ID_RE.test(runId)) {\n res.status(400).json({ error: 'invalid run-id' });\n return;\n }\n\n let run;\n try {\n run = sessions.getOrCreate(scenarioName, runId, (id) =>\n runBaseUrl(req, scenarioName, id)\n );\n } catch (e) {\n if (e instanceof UnknownScenarioError || e instanceof NotHostableError) {\n res.status(400).json({ error: e.message });\n return;\n }\n throw e;\n }\n\n // Rewrite to the path the scenario expects (it thinks it's at root).\n // The query string is preserved because we keep the express req object.\n dispatch(\n run,\n run.listener,\n req,\n res,\n suffix === '/' ? run.mcpPath || '/' : suffix\n );\n });\n\n // ---------- root well-known dispatch (RS side) ----------\n //\n // RFC 9728: a client given MCP URL /s///mcp derives the PRM\n // URL as /.well-known/oauth-protected-resource/s///mcp —\n // i.e. at the *origin root*, not under the run prefix. We catch that here,\n // recover (scenario, run-id) from the path suffix, and re-dispatch to the\n // run's RS handler with the path it would have seen on its own origin.\n //\n // Requests that arrive *under* the run prefix (because the WWW-Authenticate\n // header points there) already work via the /s/* mount above.\n\n app.get(/^\\/\\.well-known\\/oauth-protected-resource\\/s\\/(.+)$/, (req, res) => {\n const resolved = resolveRun(req.params[0]);\n if (!resolved?.runId || !RUN_ID_RE.test(resolved.runId)) {\n res.status(404).json({ error: 'no run for this resource path' });\n return;\n }\n const run = sessions.get(resolved.runId);\n if (!run) {\n res.status(404).json({ error: 'no run for this resource path' });\n return;\n }\n // Scenario expects e.g. '/.well-known/oauth-protected-resource/mcp'\n const rewritten =\n '/.well-known/oauth-protected-resource' +\n (resolved.suffix === '/' ? '' : resolved.suffix);\n dispatch(run, run.listener, req, res, rewritten);\n });\n\n // ---------- aux-origin backchannel (relay target) ----------\n //\n // The AS relay (examples/hosted/valtown-relay.ts) forwards every request it\n // receives to /__aux/. The per-run AS issuer is\n // /r/, so every path the client hits — endpoints\n // (/r//authorize) and RFC 8414 well-known\n // (/.well-known/oauth-authorization-server/r/[/tenant]) — carries\n // `/r/` somewhere in it. We extract the id, strip that segment, and\n // dispatch to the run's aux handler so it sees exactly the path\n // createAuthServer registered.\n //\n // Guarded by a shared secret so this internal mount can't be hit directly\n // to forge checks into someone else's run.\n\n if (haveAux.length) {\n const secret = opts.relaySecret ?? process.env.CONFORMANCE_RELAY_SECRET;\n const guard = (req: Request, res: Response): boolean => {\n const got = req.header('x-relay-secret') ?? '';\n // Constant-time compare; mismatch length → fast 403 is fine.\n const ok =\n !!secret &&\n got.length === secret.length &&\n timingSafeEqual(Buffer.from(got), Buffer.from(secret));\n if (!ok) {\n res\n .status(403)\n .json({ error: 'forbidden: /__aux is the relay backchannel' });\n }\n return ok;\n };\n\n app.all(/^\\/__aux\\/([a-z0-9]+)(\\/.*)$/, (req, res) => {\n if (!guard(req, res)) return;\n const role = req.params[0] as AuxOriginRole;\n const path = req.params[1];\n if (!AUX_ROLES.includes(role)) {\n res.status(404).json({ error: `unknown aux role '${role}'` });\n return;\n }\n\n // Find /r/ anywhere in the path and excise it.\n const m = path.match(/^(.*?)\\/r\\/([A-Za-z0-9_-]{1,64})(\\/.*)?$/);\n if (!m) {\n res\n .status(404)\n .json({ error: 'aux request path missing /r/ segment' });\n return;\n }\n const [, prefix, runId, suffix = ''] = m;\n const run = sessions.get(runId);\n const listener = run?.auxListeners?.[role];\n if (!run || !listener) {\n res.status(404).json({ error: `no aux '${role}' handler for run` });\n return;\n }\n const search = req.url.includes('?')\n ? req.url.slice(req.url.indexOf('?'))\n : '';\n dispatch(run, listener, req, res, (prefix + suffix || '/') + search);\n });\n }\n\n // ---------- results ----------\n\n app.get('/results/:id.html', (req, res) => {\n const run = sessions.get(req.params.id);\n const checks = sessions.results(req.params.id);\n if (!run || !checks) {\n res\n .status(404)\n .type('html')\n .send(`

No run ${req.params.id}

`);\n return;\n }\n res.type('html').send(renderResults(run.scenarioName, run.id, checks));\n });\n\n app.get('/results/:id', (req, res) => {\n const run = sessions.get(req.params.id);\n const checks = sessions.results(req.params.id);\n if (!run || !checks) {\n res.status(404).json({ error: 'unknown run' });\n return;\n }\n res.json(summarise(run.scenarioName, run.id, checks));\n });\n\n app.delete('/results/:id', async (req, res) => {\n await sessions.destroy(req.params.id);\n res.status(204).end();\n });\n\n // ---------- meta MCP server ----------\n\n app.post('/mcp', express.json(), async (req, res) => {\n const server = createMetaMcpServer(sessions, origin(req), (s, id) =>\n runBaseUrl(req, s, id)\n );\n const transport = new StreamableHTTPServerTransport({\n sessionIdGenerator: undefined\n });\n await server.connect(transport);\n await transport.handleRequest(req, res, req.body);\n res.on('close', () => {\n transport.close();\n server.close();\n });\n });\n\n return { app, sessions };\n}\n\nfunction summarise(scenario: string, id: string, checks: ConformanceCheck[]) {\n const counts = { SUCCESS: 0, FAILURE: 0, WARNING: 0, SKIPPED: 0, INFO: 0 };\n for (const c of checks) counts[c.status]++;\n return {\n runId: id,\n scenario,\n summary: {\n passed: counts.SUCCESS,\n failed: counts.FAILURE,\n warnings: counts.WARNING,\n info: counts.INFO,\n skipped: counts.SKIPPED,\n total: checks.length\n },\n checks\n };\n}\n\nfunction createMetaMcpServer(\n sessions: SessionManager,\n publicOrigin: string,\n runBaseUrl: (scenario: string, runId: string) => string\n): Server {\n const server = new Server(\n { name: 'mcp-conformance-hosted', version: '0.2.0' },\n { capabilities: { tools: {} } }\n );\n\n server.setRequestHandler(ListToolsRequestSchema, async () => ({\n tools: [\n {\n name: 'list_scenarios',\n description:\n 'List client-conformance scenarios this hosted instance can serve.',\n inputSchema: { type: 'object', properties: {} }\n },\n {\n name: 'start_run',\n description:\n 'Create a fresh run for a scenario and return the MCP URL to point ' +\n 'the client-under-test at, plus the results URL. The run-id is ' +\n 'embedded in the path so this works with stateless transports.',\n inputSchema: {\n type: 'object',\n properties: {\n scenario: {\n type: 'string',\n description: 'Scenario name, e.g. \"initialize\" or \"tools_call\".'\n },\n run_id: {\n type: 'string',\n description:\n 'Optional. Supply your own [A-Za-z0-9_-]{1,64} id; ' +\n 'otherwise one is generated.'\n }\n },\n required: ['scenario']\n }\n },\n {\n name: 'get_results',\n description:\n 'Fetch the conformance checks recorded for a run. Same shape as ' +\n 'GET /results/.',\n inputSchema: {\n type: 'object',\n properties: { run_id: { type: 'string' } },\n required: ['run_id']\n }\n }\n ]\n }));\n\n server.setRequestHandler(\n CallToolRequestSchema,\n async (request): Promise => {\n const args = (request.params.arguments ?? {}) as Record;\n switch (request.params.name) {\n case 'list_scenarios':\n return text(\n JSON.stringify(\n listHostableScenarios().map((name) => ({\n name,\n description: getScenario(name)!.description\n })),\n null,\n 2\n )\n );\n\n case 'start_run': {\n if (args.run_id && !RUN_ID_RE.test(args.run_id)) {\n return errorText(`invalid run_id (must match ${RUN_ID_RE})`);\n }\n try {\n const run = sessions.getOrCreate(args.scenario, args.run_id, (id) =>\n runBaseUrl(args.scenario, id)\n );\n return text(\n JSON.stringify(\n {\n runId: run.id,\n mcpUrl: `${runBaseUrl(run.scenarioName, run.id)}${run.mcpPath}`,\n resultsUrl: `${publicOrigin}/results/${run.id}`,\n resultsHtmlUrl: `${publicOrigin}/results/${run.id}.html`,\n context: run.context\n },\n null,\n 2\n )\n );\n } catch (e) {\n if (\n e instanceof UnknownScenarioError ||\n e instanceof NotHostableError\n ) {\n return errorText(e.message);\n }\n throw e;\n }\n }\n\n case 'get_results': {\n const run = sessions.get(args.run_id);\n const checks = sessions.results(args.run_id);\n if (!run || !checks) return errorText(`no run '${args.run_id}'`);\n return text(\n JSON.stringify(summarise(run.scenarioName, run.id, checks), null, 2)\n );\n }\n\n default:\n return errorText(`unknown tool ${request.params.name}`);\n }\n }\n );\n\n return server;\n}\n\nfunction text(t: string): CallToolResult {\n return { content: [{ type: 'text', text: t }] };\n}\n\nfunction errorText(t: string): CallToolResult {\n return { content: [{ type: 'text', text: t }], isError: true };\n}\n",[],[126,307,309],"b7cc5b0e-5b64-11f1-9ce4-ee650bb23af1","html.ts","b7cc5bcc-5b64-11f1-9ce4-ee650bb23af1",5,["D",1780062356323],"import { ConformanceCheck, CheckStatus } from '../types.ts';\n\nconst STATUS_STYLE: Record = {\n SUCCESS: 'background:#d1fae5;color:#065f46',\n FAILURE: 'background:#fee2e2;color:#991b1b',\n WARNING: 'background:#fef3c7;color:#92400e',\n SKIPPED: 'background:#e5e7eb;color:#374151',\n INFO: 'background:#dbeafe;color:#1e40af'\n};\n\nconst css = `\n body{font:14px/1.5 ui-sans-serif,system-ui,sans-serif;max-width:960px;\n margin:2rem auto;padding:0 1rem;color:#111}\n code,pre{font:12px/1.4 ui-monospace,SFMono-Regular,Menlo,monospace}\n pre{background:#f6f8fa;padding:.75rem;border-radius:6px;overflow:auto}\n .pill{display:inline-block;padding:2px 8px;border-radius:10px;\n font-size:11px;font-weight:600}\n .check{border:1px solid #e5e7eb;border-radius:6px;padding:.75rem;\n margin:.5rem 0}\n .check h3{margin:0 0 .25rem;font-size:14px}\n details>summary{cursor:pointer;color:#6b7280;font-size:12px}\n table{border-collapse:collapse;width:100%}\n td,th{text-align:left;padding:.4rem .6rem;border-bottom:1px solid #eee}\n a{color:#2563eb}\n`;\n\nfunction esc(s: string): string {\n return s.replace(\n /[&<>\"]/g,\n (c) => ({ '&': '&', '<': '<', '>': '>', '\"': '"' })[c]!\n );\n}\n\nexport function renderLanding(origin: string, scenarios: string[]): string {\n const rows = scenarios\n .map(\n (n) =>\n `${esc(n)}` +\n `${esc(origin)}/s/${esc(n)}/<run-id>` +\n `mint`\n )\n .join('');\n return `\nMCP Conformance — hosted\n

MCP Conformance — hosted

Point your MCP client at /s/<scenario>/<run-id>.\nPick any <run-id> (e.g. local-1) — the run is\ncreated on first request, and because the id is in the path it works with\nstateless transports too. Then GET\n/results/<run-id> (append .html for a\nreport).

Too lazy to pick an id? GET /s/<scenario> mints one and\nreturns {mcpUrl, resultsUrl}.

This server is also an MCP server at ${esc(origin)}/mcp with\nlist_scenarios / start_run /\nget_results tools.

Scenarios (${scenarios.length})

\n${rows}

name	MCP URL pattern

Example

$ npx @modelcontextprotocol/inspector ${esc(origin)}/s/initialize/demo\n$ curl ${esc(origin)}/results/demo | jq .summary

`;\n}\n\nexport function renderResults(\n scenario: string,\n sessionId: string,\n checks: ConformanceCheck[]\n): string {\n const items = checks\n .map((c) => {\n const pill = `${c.status}`;\n const refs = (c.specReferences ?? [])\n .map((r) =>\n r.url\n ? `${esc(r.id)}`\n : `${esc(r.id)}`\n )\n .join(' · ');\n const details =\n c.details || c.errorMessage\n ? `

details

${esc(\n              JSON.stringify(\n                { errorMessage: c.errorMessage, ...c.details },\n                null,\n                2\n              )\n            )}

`\n : '';\n return `

${pill} `${esc(c.id)}` — ${esc(\n c.name\n )}

${esc(c.description)}

${refs}

${details}

`;\n })\n .join('');\n const passed = checks.filter((c) => c.status === 'SUCCESS').length;\n const failed = checks.filter((c) => c.status === 'FAILURE').length;\n return `\n${esc(scenario)} — ${sessionId}\n

`${esc(scenario)}`

session ${esc(sessionId)} — ${passed} passed, ${failed} failed,\n${checks.length} total

${items}`;\n}\n",[],[126,307,316],"b70c7fc8-5b64-11f1-8713-ee650bb23af1",["D",1780062355087],[157,158,159],[126,307],["D",1780062355087],[156,160,176],[126],"b6ab618e-5b64-11f1-bb92-ee650bb23af1","valtown.ts","b6ab6260-5b64-11f1-bb92-ee650bb23af1","cc09b591-ab36-47d7-a7a0-618641fcafb7",["D",1780062354427],"/**\n * MCP conformance — val.town deployment.\n *\n * The hosted runner mounts each scenario's `handler()` (a Node\n * `RequestListener`) under `/s//`. On val.town the entry\n * point is a fetch handler, so we bridge web Request→Node req/res once and\n * reuse the *real* scenario implementations from the package — no\n * reimplementation, no loopback port.\n *\n * Deploy: create an HTTP val and paste:\n *\n * import handler from \"https://esm.sh/@modelcontextprotocol/conformance/examples/hosted/valtown.ts\";\n * export default handler;\n *\n * or copy this file in directly. Requires a runtime with Node-compat\n * (`node:http`, `node:stream`) — val.town, Deno Deploy, Bun all qualify.\n *\n * Limitation: scenarios that rely on long-lived SSE streams or connection-\n * close timing (`sse-retry`) won't behave correctly through a buffered\n * Request→Response bridge. They're filtered out below.\n */\n\nimport { IncomingMessage, ServerResponse } from 'node:http';\nimport { Socket } from 'node:net';\nimport { createHostedApp } from '../../src/hosted/server.ts';\n\nconst NOT_FETCH_SAFE = new Set(['sse-retry']);\n\n// Auth scenarios need a second public origin (RFC 8414 well-known is\n// origin-rooted). Deploy examples/hosted/valtown-relay.ts as a separate val\n// and point CONFORMANCE_AS_ORIGIN at it; both vals share\n// CONFORMANCE_RELAY_SECRET so /__aux can't be hit directly.\nconst { app } = createHostedApp({\n auxOrigins: {\n as: process.env.CONFORMANCE_AS_ORIGIN,\n as2: process.env.CONFORMANCE_AS2_ORIGIN,\n idp: process.env.CONFORMANCE_IDP_ORIGIN\n },\n relaySecret: process.env.CONFORMANCE_RELAY_SECRET\n});\n\nexport default async function (request: Request): Promise {\n const url = new URL(request.url);\n\n // Short-circuit scenarios that need true streaming.\n const m = url.pathname.match(/^\\/s\\/([^/]+)/);\n if (m && NOT_FETCH_SAFE.has(m[1])) {\n return Response.json(\n {\n error: `scenario '${m[1]}' relies on SSE stream lifecycle and is not available via the fetch bridge`\n },\n { status: 501 }\n );\n }\n\n // --- web Request → Node IncomingMessage ---\n const body = request.body\n ? Buffer.from(await request.arrayBuffer())\n : undefined;\n // Express's req.protocol/req.ip read socket.encrypted/.remoteAddress, and\n // IncomingMessage._destroy calls socket.destroy(), so a real (unconnected)\n // Socket with the encrypted flag patched on is the path of least surprise.\n const socket = Object.assign(new Socket(), { encrypted: false });\n const nodeReq = new IncomingMessage(socket);\n nodeReq.method = request.method;\n nodeReq.url = url.pathname + url.search;\n nodeReq.httpVersion = '1.1';\n nodeReq.httpVersionMajor = 1;\n nodeReq.httpVersionMinor = 1;\n nodeReq.headers = Object.fromEntries(request.headers);\n nodeReq.headers.host ??= url.host;\n if (body?.length) nodeReq.headers['content-length'] = String(body.length);\n // The SDK's StreamableHTTPServerTransport converts Node→Web via\n // @hono/node-server, which reads rawHeaders (the [k,v,k,v,...] array),\n // not the parsed headers object. Deno's node:http compat exposes\n // rawHeaders as a getter-only accessor, so shadow it with an own\n // property instead of assigning.\n Object.defineProperty(nodeReq, 'rawHeaders', {\n value: Object.entries(nodeReq.headers).flat() as string[],\n writable: true,\n configurable: true\n });\n if (body?.length) nodeReq.push(body);\n nodeReq.push(null);\n\n // --- Node ServerResponse → web Response ---\n // Intercept the user-facing write surface (writeHead/setHeader/write/end)\n // so we never touch ServerResponse's socket-coupled internals. This is the\n // approach serverless-http and light-my-request take.\n const nodeRes = new ServerResponse(nodeReq);\n const chunks: Buffer[] = [];\n let status = 200;\n const headers = new Headers();\n\n const captureHeaders = (h?: Record) => {\n for (const [k, v] of Object.entries(h ?? {})) {\n headers.set(k, Array.isArray(v) ? v.join(', ') : String(v));\n }\n };\n nodeRes.setHeader = ((k: string, v: string | string[] | number) => {\n headers.set(k, Array.isArray(v) ? v.join(', ') : String(v));\n return nodeRes;\n }) as ServerResponse['setHeader'];\n nodeRes.getHeader = (k: string) => headers.get(k.toLowerCase()) ?? undefined;\n nodeRes.removeHeader = (k: string) => headers.delete(k);\n nodeRes.writeHead = ((code: number, h?: Record) => {\n status = code;\n captureHeaders(h);\n return nodeRes;\n }) as ServerResponse['writeHead'];\n nodeRes.write = ((c: string | Buffer, enc?: BufferEncoding) => {\n if (c) chunks.push(typeof c === 'string' ? Buffer.from(c, enc) : c);\n return true;\n }) as ServerResponse['write'];\n nodeRes.flushHeaders = () => {};\n Object.defineProperty(nodeRes, 'statusCode', {\n get: () => status,\n set: (v: number) => {\n status = v;\n }\n });\n\n return new Promise((resolve) => {\n nodeRes.end = ((c?: string | Buffer, enc?: BufferEncoding) => {\n if (c) chunks.push(typeof c === 'string' ? Buffer.from(c, enc) : c);\n resolve(\n new Response(chunks.length ? Buffer.concat(chunks) : null, {\n status,\n headers\n })\n );\n return nodeRes;\n }) as ServerResponse['end'];\n\n app(nodeReq, nodeRes);\n });\n}\n",[],[137,307,331],"b6abc1a6-5b64-11f1-bb92-ee650bb23af1",["D",1780062354427],[154],[137,307],["D",1780062354427],[153],[137],["D",1780062353614],{"_93":92,"_100":96},{"_93":92,"_94":-5,"_95":96,"_18":53,"_97":98,"_99":24},{"_13":82,"_31":83,"_42":41,"_84":43,"_85":-5,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":44,"_91":92},"ctx",{"_75":-5,"_120":382,"_383":384,"_385":386,"_387":24,"_388":24,"_389":24,"_390":131,"_391":-5,"_392":-7,"_393":-7,"_394":59,"_395":24,"_396":24,"_397":-5,"_398":24,"_399":24,"_400":24,"_401":-5},"ENV",{"_353":354,"_355":356,"_357":83,"_358":359,"_360":361,"_362":363,"_364":365,"_366":367,"_368":369,"_370":371,"_372":373,"_374":375,"_376":377,"_378":379,"_380":381},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

MCP Conformance — hosted

Scenarios (${scenarios.length})

Example

${pill} ${esc(c.id)} — ${esc(\n c.name\n )}

${esc(scenario)}

${pill} `${esc(c.id)}` — ${esc(\n c.name\n )}

`${esc(scenario)}`

Diff · v16