@modelcontextprotocol/server 2.0.0-alpha.4 → 2.0.0-beta.2

package/dist/{mcp-JttQJlI9.mjs → mcp-C2tFGfLG.mjs}

@@ -5918,7 +5918,9 @@ const INBOUND_VALIDATION_LADDER = [
 * the ladder (or a pre-handler protocol gate) produced. Errors produced by
 * request handlers — whatever their code — stay in-band on HTTP 200, and are
 * never mapped to an HTTP status by this table; in particular `-32603` and
-* domain-specific codes never become a blanket 500.
+* domain-specific codes never become a blanket 500. The single exception is
+* `MissingRequiredClientCapability` (-32021) — see
+* {@linkcode httpStatusForErrorCode}.
 *
 * `-32602` (invalid params) deliberately has NO entry: the only invalid-params
 * rejection that maps to HTTP 400 is the classifier's own envelope rung
@@ -5936,11 +5938,22 @@ const LADDER_ERROR_HTTP_STATUS = {
 /**
 * The HTTP status to answer a JSON-RPC error with, keyed on the error's
 * origin. `in-band` errors (anything produced by a request handler) are
-* always HTTP 200 — the JSON-RPC error response is the payload, not an HTTP
-* failure. `ladder` errors map through {@linkcode LADDER_ERROR_HTTP_STATUS}.
+* HTTP 200 — the JSON-RPC error response is the payload, not an HTTP
+* failure — with ONE exception: `MissingRequiredClientCapability` (-32021),
+* whose 400 the spec mandates on the error itself with no origin condition,
+* and which the SDK genuinely produces after dispatch (the `input_required`
+* capability gate). A handler relaying some downstream peer's `-32020`/`-32022`
+* is NOT that peer's spec error and stays in-band like every other handler
+* code. `ladder` errors map through {@linkcode LADDER_ERROR_HTTP_STATUS}.
+*
+* The per-request transport intentionally does NOT delegate to this function:
+* its `?? 400` ladder fallback is only correct for entry-gate codes known to
+* the table, and would wrongly map dispatch-window errors outside it (a
+* window `-32602` must stay in-band on 200). The transport indexes the table
+* directly; keep the two in agreement when editing either.
 */
 function httpStatusForErrorCode(code, origin) {
-	if (origin === "in-band") return 200;
+	if (origin === "in-band") return code === ProtocolErrorCode.MissingRequiredClientCapability ? 400 : 200;
 	return LADDER_ERROR_HTTP_STATUS[code] ?? 400;
 }
 function rejection(rung, cell, httpStatus, error, settled) {
@@ -9995,4 +10008,4 @@ function unwrapOptionalSchema(schema) {
 
 //#endregion
 export { validateEnvelopeMeta as $, classifyInboundRequest as A, SdkErrorCode as At, isInitializedNotification as B, isSpecType as C, TRACEPARENT_META_KEY as Ct, inputResponse as D, checkResourceAllowed as Dt, inputRequired as E, requiredClientCapabilitiesForRequest as Et, validateMcpParamHeaders as F, isCompletable as Ft, isJSONRPCResponse as G, isJSONRPCErrorResponse as H, assertCompleteRequestPrompt as I, parseJSONRPCMessage as J, isJSONRPCResultResponse as K, assertCompleteRequestResourceTemplate as L, modernOnlyStrictRejection as M, OAuthError as Mt, validateStandardRequestHeaders as N, OAuthErrorCode as Nt, LADDER_ERROR_HTTP_STATUS as O, resourceUrlFromServerUrl as Ot, scanXMcpHeaderDeclarations as P, completable as Pt, requestMetaOf as Q, isCallToolResult as R, setNegotiatedProtocolVersion as S, SUPPORTED_PROTOCOL_VERSIONS as St, acceptedContent as T, missingClientCapabilities as Tt, isJSONRPCNotification as U, isInputRequiredResult as V, isJSONRPCRequest as W, envelopeClaimVersion as X, JSONRPCMessageSchema as Y, hasEnvelopeClaim as Z, STDIO_DEFAULT_MAX_BUFFER_SIZE as _, METHOD_NOT_FOUND as _t, seedClientIdentityFromEnvelope as a, ProtocolErrorCode as at, getDisplayName as b, RELATED_TASK_META_KEY as bt, StdioListenRouter as c, CLIENT_CAPABILITIES_META_KEY as ct, createServerNotifier as d, INTERNAL_ERROR as dt, MissingRequiredClientCapabilityError as et, fromJsonSchema as f, INVALID_PARAMS as ft, ReadBuffer as g, LOG_LEVEL_META_KEY as gt, createFetchWithInit as h, LATEST_PROTOCOL_VERSION as ht, installModernOnlyHandlers as i, UrlElicitationRequiredError as it, httpStatusForErrorCode as j, SdkHttpError as jt, carriesValidModernEnvelopeClaim as k, SdkError as kt, createListenRouter as l, CLIENT_INFO_META_KEY as lt, UriTemplate as m, JSONRPC_VERSION as mt, ResourceTemplate as n, ResourceNotFoundError as nt, DEFAULT_LISTEN_KEEPALIVE_MS as o, SUPPORTED_MODERN_PROTOCOL_VERSIONS as ot, InMemoryTransport as p, INVALID_REQUEST as pt, isTaskAugmentedRequestParams as q, Server as r, UnsupportedProtocolVersionError as rt, DEFAULT_MAX_SUBSCRIPTIONS as s, BAGGAGE_META_KEY as st, McpServer as t, ProtocolError as tt, InMemoryServerEventBus as u, DEFAULT_NEGOTIATED_PROTOCOL_VERSION as ut, deserializeMessage as v, PARSE_ERROR as vt, specTypeSchemas as w, TRACESTATE_META_KEY as wt, DEFAULT_REQUEST_TIMEOUT_MSEC as x, SUBSCRIPTION_ID_META_KEY as xt, serializeMessage as y, PROTOCOL_VERSION_META_KEY as yt, isInitializeRequest as z };
-//# sourceMappingURL=mcp-JttQJlI9.mjs.map
+//# sourceMappingURL=mcp-C2tFGfLG.mjs.map