@orkestrel/mcp 0.0.19 → 0.0.21

package/dist/src/core/index.cjs

@@ -57,11 +57,11 @@ var MCP_HEADER_MISMATCH = -32020;
 *
 * @remarks
 * The GENERIC code for the whole condition, not one capability's code. This server answers
-* it in two places — a `tools/call` that needs `elicitation`, and a `tasks/*` request whose
-* client never declared `io.modelcontextprotocol/tasks` — and the two are told apart by
+* it in more than one place — a `tools/call` that needs `elicitation`, and a `tasks/*` request
+* whose client never declared `io.modelcontextprotocol/tasks` — and they are told apart by
 * `error.data.requiredCapabilities` alone (`{ elicitation: {} }` against
-* `{ extensions: { 'io.modelcontextprotocol/tasks': {} } }`). They are two instances of one
-* condition, so a second numeral would describe the same fact twice. The Tasks extension's
+* `{ extensions: { 'io.modelcontextprotocol/tasks': {} } }`). They are instances of the same
+* condition, so a separate numeral would describe the same fact twice. The Tasks extension's
 * own draft prose still shows `-32003` in examples; the dated core schema fixes this code,
 * and the dated schema is what a peer implements against.
 */
@@ -148,20 +148,18 @@ var DEFAULT_MCP_CLIENT_VERSION = "1.0.0";
 * is unset — a request the remote server does not answer within it rejects.
 */
 var DEFAULT_MCP_REQUEST_TIMEOUT = 3e4;
-/** The maximum discovery-probe deadline used when a client deadline is configured. */
-var DEFAULT_MCP_PROBE_TIMEOUT = 50;
 //#endregion
 //#region src/core/errors.ts
 /**
-* A remote Model Context Protocol JSON-RPC error, preserving its machine-readable
-* numeric code and optional structured context.
+* A Model Context Protocol error preserving its machine-readable numeric code and
+* optional structured context.
 *
 * @remarks
-* {@link MCPClient} throws this error only for a remote JSON-RPC `error` response.
-* Local lifecycle and transport conditions such as disconnects and request timeouts
-* remain plain `Error`s. `context` carries the response's optional `error.data`
-* unchanged and is `undefined` when the peer omitted it. This includes the modern
-* reserved paths: `-32020` carries no context, `-32021` may carry
+* {@link MCPClient} throws this error for a remote JSON-RPC `error` response and for a
+* locally detected protocol incompatibility. Local lifecycle and transport conditions such
+* as disconnects and request timeouts remain plain `Error`s. For a remote response, `context`
+* carries the optional `error.data` unchanged and is `undefined` when the peer omitted it.
+* This includes the modern reserved paths: `-32020` carries no context, `-32021` may carry
 * `requiredCapabilities`, and `-32022` carries the peer's `supported` revisions and
 * `requested` revision for negotiation recovery.
 *
@@ -180,7 +178,7 @@ var MCPError = class extends Error {
 	code;
 	context;
 	/**
-	* Create a remote MCP protocol error.
+	* Creates an MCP protocol error.
 	*
 	* @param message - The human-readable JSON-RPC error message
 	* @param code - The machine-readable numeric JSON-RPC error code
@@ -193,7 +191,7 @@ var MCPError = class extends Error {
 	}
 };
 /**
-* Determine whether an unknown value is an {@link MCPError}.
+* Determines whether an unknown value is an {@link MCPError}.
 *
 * @param value - The unknown value to inspect
 * @returns `true` only when the value is an `MCPError`
@@ -214,7 +212,7 @@ function isMCPError(value) {
 //#endregion
 //#region src/core/inferers.ts
 /**
-* Infer the wire era for an MCP protocol revision.
+* Infers the wire era for an MCP protocol revision.
 *
 * @param version - The protocol revision to classify
 * @returns `'modern'` for `2026-07-28`, `'legacy'` for either supported legacy
@@ -229,7 +227,7 @@ function inferEra(version) {
 	}
 }
 /**
-* Infer the newest supported protocol revision present in a peer's offer.
+* Infers the newest supported protocol revision present in a peer's offer.
 *
 * @param offered - The protocol revisions offered by the peer
 * @returns The newest locally supported offered revision, or `undefined`
@@ -238,12 +236,12 @@ function inferVersion(offered) {
 	for (const version of SUPPORTED_PROTOCOL_VERSIONS) if (offered.includes(version)) return version;
 }
 /**
-* Infer the protocol version an outbound message announces itself with — the ONE
+* Infers the protocol version an outbound message announces itself with — the ONE
 * projection every HTTP client transport stamps `mcp-protocol-version` from.
 *
 * @remarks
 * This is deliberately the SAME read the server's own expectation performs
-* ({@link import('@src/server').inferHeaderIssue}): a modern request's reserved
+* ({@link import('@orkestrel/mcp/server').inferHeaderIssue}): a modern request's reserved
 * `_meta` version, accepted whenever it is a string. It is NOT
 * {@link import('./parsers.js').parseRequestContext}, and the difference is the whole
 * point. That parser answers a different question — is the modern metadata WELL FORMED —
@@ -256,7 +254,7 @@ function inferVersion(offered) {
 * `initialize` handshake the transport captured, not from the message.
 *
 * Header NAMES stay with the transports that own the wire (see `constants.ts`); core owns
-* the value this projection derives, which is the part the two faces disagreed about.
+* the value this projection derives, which is the part the browser and Node faces disagreed about.
 *
 * @param message - The outbound message about to be written
 * @returns The version to announce, or `undefined` when the message announces none
@@ -274,7 +272,7 @@ function inferRequestVersion(message) {
 //#endregion
 //#region src/core/cloners.ts
 /**
-* Snapshot one bounded exact JSON value together with its canonical wire serialization.
+* Snapshots one bounded exact JSON value together with its canonical wire serialization.
 *
 * The returned value is an owned, deeply frozen graph reconstructed from the canonical text;
 * the frozen tuple shares no mutable structure with the input. Invalid exact-JSON shapes,
@@ -304,10 +302,10 @@ function snapshotJSON(value, limits) {
 	return Object.freeze(snapshot);
 }
 /**
-* Snapshot one exact Tool result and the canonical wire text of a defined success value.
+* Snapshots one exact Tool result and the canonical wire text of a defined success value.
 *
-* A success must have exactly four own enumerable data properties: `id`, `name`, `success: true`,
-* and `value`. A failure must instead have exactly `id`, `name`, `success: false`, and a string
+* A success must have exactly the own enumerable data properties `id`, `name`,
+* `success: true`, and `value`. A failure must instead have exactly `id`, `name`, `success: false`, and a string
 * `error`. The returned result and tuple are frozen. Only a defined success value crosses the
 * bounded JSON ownership seam; it becomes an owned deeply frozen value and receives canonical
 * text. Value-less successes and failures pair with `undefined` text. Non-records, symbol keys,
@@ -382,11 +380,11 @@ function snapshotToolResult(value, limits) {
 //#endregion
 //#region src/core/parsers.ts
 /**
-* Narrow an already-parsed value to a {@link JSONRPCMessage}, or `undefined` when
+* Narrows an already-parsed value to a {@link JSONRPCMessage}, or `undefined` when
 * it is not one.
 *
 * @remarks
-* Total (§14) — a non-message returns `undefined`, never throws. The input must
+* Total — a non-message returns `undefined`, never throws. The input must
 * ALREADY be `JSON.parse`d: the raw-string parse (which can throw on malformed
 * JSON) happens in `MCPServer.handle` inside a try/catch that maps a parse failure
 * to a `-32700` response.
@@ -400,7 +398,7 @@ function snapshotToolResult(value, limits) {
 * result. Identity is not preserved and is not promised.
 *
 * The parser's sound partner is the COMPOSITE `isJSONRPCMessage(value) &&
-* isBoundedJSON(value, limits)`, and against it both halves of the §15 soundness law
+* isBoundedJSON(value, limits)`, and against it both halves of the soundness law
 * hold by construction:
 *
 * - Every non-`undefined` result satisfies {@link isJSONRPCMessage}, because the guard
@@ -436,7 +434,7 @@ function parseJSONRPCMessage(value, limits = {
 	return snapshot !== void 0 && isJSONRPCMessage(snapshot[0]) ? snapshot[0] : void 0;
 }
 /**
-* Parse the reserved modern request metadata into an {@link MCPRequestContext}.
+* Parses the reserved modern request metadata into an {@link MCPRequestContext}.
 *
 * @remarks
 * This is the validity step after {@link isModernRequest}: a defined result can
@@ -486,7 +484,7 @@ function parseRequestContext(value, limits = {
 	}
 }
 /**
-* Parse the opened value carried by an opaque `requestState` continuation.
+* Parses the opened value carried by an opaque `requestState` continuation.
 *
 * @remarks
 * This parser does not open the opaque continuation carrier; the configured
@@ -544,7 +542,69 @@ function parseMCPInputState(value) {
 //#endregion
 //#region src/core/helpers.ts
 /**
-* Deterministically serialize one exact JSON value within explicit bounds.
+* Determines whether a client capability record declares form-mode elicitation.
+*
+* @remarks
+* The protocol's empty `elicitation` object is the implicit form-only declaration.
+* A non-empty declaration must carry a record-valued `form` member; URL-only support
+* does not authorize a form request. Total over hostile input.
+*
+* @param value - The client capability record to inspect
+* @returns `true` when form-mode elicitation is declared
+*
+* @example
+* ```ts
+* isFormElicitationSupported({ elicitation: {} }) // true — implicit form mode
+* isFormElicitationSupported({ elicitation: { url: {} } }) // false
+* ```
+*/
+function isFormElicitationSupported(value) {
+	const owned = (0, _orkestrel_contract.attempt)(() => (0, _orkestrel_contract.cloneJSONRecord)(value));
+	if (!owned.success) return false;
+	try {
+		const elicitation = owned.value["elicitation"];
+		if (!(0, _orkestrel_contract.isRecord)(elicitation)) return false;
+		if ((0, _orkestrel_contract.isRecord)(elicitation["form"])) return true;
+		return Object.keys(elicitation).length === 0;
+	} catch {
+		return false;
+	}
+}
+/**
+* Determines whether a client capability record declares the draft Tasks extension.
+*
+* @remarks
+* The declaration lives at `extensions['io.modelcontextprotocol/tasks']` and its value is
+* an empty object, so this is a PRESENCE check: the extension defines no options, and a
+* server that read one would be reading a field no client can meaningfully set. The value
+* must still be a record, because that is the shape the capability record declares — a
+* `true` or a string there is a client speaking a different protocol, not a shorthand.
+*
+* A client declares this PER REQUEST. Nothing here consults a session, because the modern
+* revision is stateless and a capability declared once at connect time says nothing about
+* the request in hand. Total over hostile input.
+*
+* @param value - The client capability record to inspect
+* @returns `true` when the tasks extension is declared
+*
+* @example
+* ```ts
+* isTaskSupported({ extensions: { 'io.modelcontextprotocol/tasks': {} } }) // true
+* isTaskSupported({ extensions: {} }) // false — the key is the declaration
+* ```
+*/
+function isTaskSupported(value) {
+	const owned = (0, _orkestrel_contract.attempt)(() => (0, _orkestrel_contract.cloneJSONRecord)(value));
+	if (!owned.success) return false;
+	try {
+		const extensions = owned.value["extensions"];
+		return (0, _orkestrel_contract.isRecord)(extensions) && (0, _orkestrel_contract.isRecord)(extensions["io.modelcontextprotocol/tasks"]);
+	} catch {
+		return false;
+	}
+}
+/**
+* Serializes one exact JSON value deterministically within explicit bounds.
 *
 * @param value - The unknown value to validate and serialize
 * @param limits - Serialized byte, key, and depth limits
@@ -763,7 +823,7 @@ function serializeJSON(value, limits) {
 	return serialized.success ? serialized.value : void 0;
 }
 /**
-* Compute a lowercase host-neutral SHA-256 digest of one bounded canonical JSON value.
+* Computes a lowercase host-neutral SHA-256 digest of one bounded canonical JSON value.
 *
 * @param value - The unknown value to validate and digest
 * @param limits - Serialized byte, key, and depth limits
@@ -776,7 +836,7 @@ async function digestJSON(value, limits) {
 	return Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, "0")).join("");
 }
 /**
-* Build one official progress notification for the original request stream.
+* Builds one official progress notification for the original request stream.
 *
 * @param token - The request's original opaque progress token
 * @param progress - The finite progress payload
@@ -795,7 +855,7 @@ function buildProgressNotification(token, progress) {
 	};
 }
 /**
-* Build one official cancellation notification for a request already sent.
+* Builds one official cancellation notification for a request already sent.
 *
 * @remarks
 * `requestId` and `reason` are WIRE SPELLINGS carried verbatim from the dated schema's
@@ -833,15 +893,15 @@ function buildCancelledNotification(id, reason) {
 	};
 }
 /**
-* Determine whether one method may answer with a given modern `resultType`.
+* Determines whether one method may answer with a given modern `resultType`.
 *
 * @remarks
-* The dated protocol lets a `tools/call` answer three ways — it COMPLETED, it became a
+* The dated protocol lets a `tools/call` answer in more than one way — it COMPLETED, it became a
 * durable task, or it needs another round trip — while every other method this client
 * issues has exactly one legal answer. So the arm a peer chose is only meaningful beside
 * the method it answers, and this is the one place that pairing is decided.
 *
-* The rule is deliberately a WHITELIST: an unrecognized `resultType` is refused for every
+* The rule is deliberately closed: an unrecognized `resultType` is refused for every
 * method, including `tools/call`. A client that carried an arm it cannot name would hand
 * its caller a value whose meaning it invented.
 *
@@ -862,7 +922,7 @@ function matchesResultType(method, resultType) {
 	return resultType === "task" || resultType === "input_required";
 }
 /**
-* Concatenate an MCP tool-call result's text content blocks into one string.
+* Concatenates an MCP tool-call result's text content blocks into one string.
 *
 * @remarks
 * The inverse of a server splitting a value into text block(s), and TOTAL: a non-record
@@ -886,12 +946,12 @@ function extractContentText(result) {
 	return parts.join("\n");
 }
 /**
-* Narrow one `tools/call` answer to the arm the peer chose.
+* Narrows one `tools/call` answer to the arm the peer chose.
 *
 * @remarks
-* The three arms {@link matchesResultType} admits are the whole space this sees, because a
+* The arms {@link matchesResultType} admits are the whole space this sees, because a
 * `resultType` the client cannot name is refused at correlation. What is left is validating
-* the two arms the protocol gives a shape to, and deriving the tool's value from the one it
+* the arms the protocol gives a shape to, and deriving the tool's value from the one it
 * does not:
 *
 * - A peer's `structuredContent` is PREFERRED over the content blocks, because it is the
@@ -939,7 +999,7 @@ function buildCallOutcome(name, result) {
 	});
 }
 /**
-* Build the canonical Tool call for one validated MCP `tools/call` request.
+* Builds the canonical Tool call for one validated MCP `tools/call` request.
 *
 * @param request - The original MCP request
 * @param caller - Optional consumer-asserted caller context
@@ -958,7 +1018,7 @@ function buildToolCall(request, caller, args) {
 	};
 }
 /**
-* Build a JSON-RPC success {@link JSONRPCResultResponse} — the `id` echoed, the
+* Builds a JSON-RPC success {@link JSONRPCResultResponse} — the `id` echoed, the
 * method's value as `result`.
 *
 * @remarks
@@ -977,7 +1037,7 @@ function buildJSONRPCResult(id, result) {
 	};
 }
 /**
-* Build a JSON-RPC error {@link JSONRPCErrorResponse} — the `id` echoed, the failure
+* Builds a JSON-RPC error {@link JSONRPCErrorResponse} — the `id` echoed, the failure
 * as an `error` object.
 *
 * @remarks
@@ -1006,7 +1066,7 @@ function buildJSONRPCError(id, code, message, data) {
 	};
 }
 /**
-* Resolve the caller-facing dispatch options into the options a dispatched method
+* Resolves the caller-facing dispatch options into the options a dispatched method
 * receives.
 *
 * @remarks
@@ -1040,7 +1100,7 @@ function buildMethodOptions(options, lifetime) {
 	};
 }
 /**
-* Map a {@link ToolManagerInterface}'s definitions to MCP `tools/list` descriptors
+* Maps a {@link ToolManagerInterface}'s definitions to MCP `tools/list` descriptors
 * — renaming `parameters` to the wire's `inputSchema`.
 *
 * @remarks
@@ -1083,7 +1143,7 @@ function buildModernResult(result, identity, ttl, scope) {
 	};
 }
 /**
-* Intersect a requested subscription filter with the notification families a server supports.
+* Intersects a requested subscription filter with the notification families a server supports.
 *
 * @param requested - The notification families requested by the client
 * @param supported - The notification families the server can actually produce
@@ -1103,7 +1163,7 @@ function buildSubscriptionFilter(requested, supported) {
 	};
 }
 /**
-* Determine whether a produced notification belongs to an honoured subscription filter.
+* Determines whether a produced notification belongs to an honoured subscription filter.
 *
 * @param notification - The server notification offered by the configured producer
 * @param filter - The filter acknowledged to the client
@@ -1118,7 +1178,7 @@ function matchesSubscriptionNotification(notification, filter) {
 	return typeof uri === "string" && filter.resourceSubscriptions?.includes(uri) === true;
 }
 /**
-* Stamp a subscription notification with the request id reserved for its held-open stream.
+* Stamps a subscription notification with the request id reserved for its held-open stream.
 *
 * @param notification - The notification to copy and stamp
 * @param id - The `subscriptions/listen` request id
@@ -1139,7 +1199,7 @@ function stampSubscriptionNotification(notification, id) {
 	};
 }
 /**
-* Build the first notification carrying a subscription id for a listen request.
+* Builds the first notification carrying a subscription id for a listen request.
 *
 * @param notifications - The exact notification filter the server will honour
 * @param id - The `subscriptions/listen` request id
@@ -1153,7 +1213,7 @@ function buildSubscriptionAcknowledgement(notifications, id) {
 	}, id);
 }
 /**
-* Build the terminating response for a subscription source that closes gracefully.
+* Builds the terminating response for a subscription source that closes gracefully.
 *
 * @param id - The `subscriptions/listen` request id
 * @param identity - The server identity included by the modern result stamping site
@@ -1163,7 +1223,7 @@ function buildSubscriptionResult(id, identity) {
 	return buildJSONRPCResult(id, buildModernResult({ _meta: { [MCP_META_SUBSCRIPTION]: id } }, identity));
 }
 /**
-* Build the mandatory modern `server/discover` result.
+* Builds the mandatory modern `server/discover` result.
 *
 * @remarks
 * `capabilities.resources` and `capabilities.prompts` appear only for servers with their
@@ -1195,7 +1255,7 @@ function buildDiscoverResult(options) {
 	}, options.identity, options.cache?.ttl ?? 6e4, options.cache?.scope);
 }
 /**
-* Build the MCP `initialize` result — the negotiated protocol version, the
+* Builds the MCP `initialize` result — the negotiated protocol version, the
 * advertised capabilities, and the server identity.
 *
 * @remarks
@@ -1222,7 +1282,7 @@ function buildInitializeResult(name, version, requested) {
 	};
 }
 /**
-* Decode one raw inbound message within an explicit bound — the decode a binder performs
+* Decodes one raw inbound message within an explicit bound — the decode a binder performs
 * before it hands the string on.
 *
 * @remarks
@@ -1230,14 +1290,14 @@ function buildInitializeResult(name, version, requested) {
 * `JSON.parse`d at all: a decoder that parses before it measures has already spent the work
 * the bound exists to refuse. A message over the bound, malformed JSON, and a well-formed
 * value that is not a JSON-RPC message are one answer — `undefined` — because a binder does
-* exactly the same thing with all three: nothing, and let
+* exactly the same thing with each of them: nothing, and let
 * {@link import('./types.js').MCPServerInterface.handle} produce the wire refusal from the
 * same bound.
 *
-* Total (§14) — never throws, whatever the input.
+* Total — never throws, whatever the input.
 *
 * @param message - The raw inbound JSON-RPC message string
-* @param limits - The byte and depth bounds to decode within (the server's own, via `limit`)
+* @param limits - The byte and depth bounds to decode within (the server's own, from `limit`)
 * @returns The decoded message, or `undefined` when it is over the bound or is not one
 *
 * @example
@@ -1251,7 +1311,7 @@ function decodeBoundedMessage(message, limits) {
 	return parsed.success ? parseJSONRPCMessage(parsed.value, limits) : void 0;
 }
 /**
-* Read the request id an inbound `notifications/cancelled` names — the inverse of
+* Reads the request id an inbound `notifications/cancelled` names — the inverse of
 * {@link buildCancelledNotification}.
 *
 * @remarks
@@ -1259,7 +1319,7 @@ function decodeBoundedMessage(message, limits) {
 * real {@link JSONRPCId}: `null` is not one, and neither is an absent member, so a
 * malformed frame reads as "cancels nothing" rather than as an error. Anything that is not a
 * `notifications/cancelled` notification — a response, a request that happens to use the
-* method name, another notification — reads the same way. Total (§14).
+* method name, another notification — reads the same way. Total.
 *
 * @param message - The decoded inbound message to read
 * @returns The id of the request being cancelled, or `undefined` when the message cancels nothing
@@ -1275,7 +1335,7 @@ function readCancelledId(message) {
 	return isJSONRPCId(requested) ? requested : void 0;
 }
 /**
-* Pump a controlled serialized exchange onto a transport — every notification in order, then
+* Pumps a controlled serialized exchange onto a transport — every notification in order, then
 * the terminating response — and END the exchange however the pump leaves.
 *
 * @remarks
@@ -1320,9 +1380,9 @@ async function sendStream(stream, transport) {
 	}
 }
 /**
-* Pipe an {@link MCPTransportInterface} into an {@link MCPDispatcherInterface} — every
+* Pipes an {@link MCPTransportInterface} into an {@link MCPDispatcherInterface} — every
 * inbound message runs through `server.handle`, and a defined reply is written back
-* via `transport.send`.
+* through `transport.send`.
 *
 * @remarks
 * `server.handle` already turns a malformed message into a serialized `-32700` /
@@ -1343,7 +1403,7 @@ async function sendStream(stream, transport) {
 * **This binder OWNS every exchange it starts, and ends each one on every exit.** It holds one
 * `AbortController` per live request, keyed by the request's id and deleted whenever that
 * request leaves — normally, by a throw, or by cancellation — and it supplies that signal to
-* `handle` as {@link import('./types.js').MCPDispatchOptions}. Three consequences follow.
+* `handle` as {@link import('./types.js').MCPDispatchOptions}. These consequences follow.
 * An inbound `notifications/cancelled` ABORTS the request it names, which is how the message-
 * based cancellation path reaches a tool on the carriers that have one (stdio, WebSocket,
 * `MessagePort`); a cancelled request writes NO response, because a peer that asked for a call
@@ -1416,7 +1476,7 @@ function bindServer(server, transport) {
 	};
 }
 /**
-* Pipe an {@link MCPTransportInterface} into an {@link MCPClientInterface} — every
+* Pipes an {@link MCPTransportInterface} into an {@link MCPClientInterface} — every
 * inbound message is decoded and delivered onto the client's OWN transport
 * (`client.transport.emitter`'s `message` / `close` events), resolving/rejecting the
 * client's correlated pending requests exactly as a direct reply would.
@@ -1430,7 +1490,7 @@ function bindServer(server, transport) {
 * this binder then completes the inbound half by decoding each message and pushing it
 * onto `client.transport.emitter` (an {@link import('@orkestrel/emitter').EmitterInterface}
 * exposes `emit`, so no client modification is needed). A malformed / non-JSON-RPC
-* inbound message is DROPPED (§14, total — never throws); a delivery fault is routed to
+* inbound message is DROPPED (total — never throws); a delivery fault is routed to
 * `client.transport.emitter`'s `error` event (never rethrown). The returned unbind
 * DETACHES this binder (further inbound messages and the transport's `closed` signal are
 * ignored) WITHOUT closing the transport.
@@ -1448,7 +1508,7 @@ function bindServer(server, transport) {
 * itself when a caller's `signal` aborts, on a carrier declaring `duplex`. Adding a registry
 * here would be a second correlation table for ids the client is already correlating, and two
 * tables for one fact drift. The one obligation this binder does carry is delivery: a
-* malformed / non-JSON-RPC inbound message is DROPPED (§14, total — never throws).
+* malformed / non-JSON-RPC inbound message is DROPPED (total — never throws).
 *
 * @param client - The transport-agnostic client whose transport to deliver messages onto
 * @param transport - The duplex channel to pipe the client over
@@ -1498,11 +1558,11 @@ function bindClient(client, transport) {
 }
 //#endregion
 //#region src/core/validators.ts
-/** Determine whether a value is an exact finite JSON object. */
+/** Determines whether a value is an exact finite JSON object. */
 function isJSONObject(value) {
 	return (0, _orkestrel_contract.attempt)(() => (0, _orkestrel_contract.cloneJSONRecord)(value)).success;
 }
-/** Determine whether a string follows the dated MCP `_meta` key grammar. */
+/** Determines whether a string follows the dated MCP `_meta` key grammar. */
 function isMCPMetaKey(value) {
 	if (!(0, _orkestrel_contract.isString)(value)) return false;
 	const slash = value.indexOf("/");
@@ -1515,24 +1575,24 @@ function isMCPMetaKey(value) {
 	}
 	return name.length === 0 || /^[A-Za-z0-9](?:[A-Za-z0-9._-]*[A-Za-z0-9])?$/.test(name);
 }
-/** Determine whether a value is exact finite MCP metadata with valid keys. */
+/** Determines whether a value is exact finite MCP metadata with valid keys. */
 function isMCPMetaObject(value) {
 	const owned = (0, _orkestrel_contract.attempt)(() => (0, _orkestrel_contract.cloneJSONRecord)(value));
 	return owned.success && Object.keys(owned.value).every((key) => isMCPMetaKey(key));
 }
-/** Determine whether a value is exact result metadata with a valid reserved server identity. */
+/** Determines whether a value is exact result metadata with a valid reserved server identity. */
 function isMCPResultMetaObject(value) {
 	const owned = (0, _orkestrel_contract.attempt)(() => (0, _orkestrel_contract.cloneJSONRecord)(value));
 	if (!owned.success || !Object.keys(owned.value).every((key) => isMCPMetaKey(key))) return false;
 	const identity = owned.value[MCP_META_SERVER];
 	return (0, _orkestrel_contract.isUndefined)(identity) || isMCPIdentity(identity);
 }
-/** Determine whether a value is one dated MCP logging level. */
+/** Determines whether a value is one dated MCP logging level. */
 function isMCPLoggingLevel(value) {
 	return value === "debug" || value === "info" || value === "notice" || value === "warning" || value === "error" || value === "critical" || value === "alert" || value === "emergency";
 }
 /**
-* Determine whether a value is standard padded base64 as required by JSON Schema `byte` format.
+* Determines whether a value is standard padded base64 as required by JSON Schema `byte` format.
 *
 * @param value - The unknown value to inspect
 * @returns Whether the value is an empty or completely padded standard base64 encoding
@@ -1541,7 +1601,7 @@ function isStandardBase64(value) {
 	return (0, _orkestrel_contract.isString)(value) && /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(value);
 }
 /**
-* Determine whether a value is one absolute URI under RFC 3986 syntax.
+* Determines whether a value is one absolute URI under RFC 3986 syntax.
 *
 * @remarks
 * This host-neutral syntax guard does not resolve, normalize, decode, fetch, or apply a
@@ -1630,7 +1690,7 @@ function isAbsoluteURI(value) {
 	return /^[A-Za-z0-9\-._~!$&'()*+,;=%]*$/.test(host);
 }
 /**
-* Determine whether a value is one RFC 3339 `full-date` naming a real calendar day.
+* Determines whether a value is one RFC 3339 `full-date` naming a real calendar day.
 *
 * @remarks
 * RFC 3339 §5.6 defines `date-mday` as `01-28`, `29`, `30`, or `31` BASED ON the month and
@@ -1665,7 +1725,7 @@ function isRFC3339Date(value) {
 	return day <= (month === 4 || month === 6 || month === 9 || month === 11 ? 30 : 31);
 }
 /**
-* Determine whether a value is one RFC 3339 `date-time` naming a real calendar day.
+* Determines whether a value is one RFC 3339 `date-time` naming a real calendar day.
 *
 * @remarks
 * The `full-date` half is {@link isRFC3339Date}, so an impossible day is refused here for
@@ -1692,7 +1752,7 @@ function isRFC3339DateTime(value) {
 	return matched !== null && isRFC3339Date(matched[1]);
 }
 /**
-* Determine whether a value is one exact finite MCP progress payload.
+* Determines whether a value is one exact finite MCP progress payload.
 *
 * @param value - The unknown value to inspect
 * @returns Whether required progress and optional total/message fields match the dated schema
@@ -1711,7 +1771,7 @@ function isMCPProgress(value) {
 	}
 }
 /**
-* Determine whether a value carries valid dated-schema MCP content annotations.
+* Determines whether a value carries valid dated-schema MCP content annotations.
 *
 * @param value - The unknown value to inspect
 * @returns Whether the value is valid MCP annotations
@@ -1732,7 +1792,7 @@ function isMCPAnnotations(value) {
 	}
 }
 /**
-* Determine whether a value is one exact dated-schema MCP icon.
+* Determines whether a value is one exact dated-schema MCP icon.
 *
 * @param value - The unknown value to inspect
 * @returns Whether the value is a valid MCP icon
@@ -1751,7 +1811,7 @@ function isMCPIcon(value) {
 		return false;
 	}
 }
-/** Determine whether a value is one complete dated MCP implementation identity. */
+/** Determines whether a value is one complete dated MCP implementation identity. */
 function isMCPIdentity(value) {
 	const owned = (0, _orkestrel_contract.attempt)(() => (0, _orkestrel_contract.cloneJSONRecord)(value));
 	if (!owned.success) return false;
@@ -1767,7 +1827,7 @@ function isMCPIdentity(value) {
 		return false;
 	}
 }
-/** Determine whether a value is one exact open dated client-capability declaration. */
+/** Determines whether a value is one exact open dated client-capability declaration. */
 function isMCPClientCapabilities(value) {
 	const owned = (0, _orkestrel_contract.attempt)(() => (0, _orkestrel_contract.cloneJSONRecord)(value));
 	if (!owned.success) return false;
@@ -1797,7 +1857,7 @@ function isMCPClientCapabilities(value) {
 		return false;
 	}
 }
-/** Determine whether a value is one exact open dated server-capability declaration. */
+/** Determines whether a value is one exact open dated server-capability declaration. */
 function isMCPServerCapabilities(value) {
 	const owned = (0, _orkestrel_contract.attempt)(() => (0, _orkestrel_contract.cloneJSONRecord)(value));
 	if (!owned.success) return false;
@@ -1823,7 +1883,7 @@ function isMCPServerCapabilities(value) {
 	}
 }
 /**
-* Determine whether a value is embedded textual MCP resource contents.
+* Determines whether a value is embedded textual MCP resource contents.
 *
 * @param value - The unknown value to inspect
 * @returns Whether the value is embedded textual resource contents
@@ -1842,7 +1902,7 @@ function isMCPTextResource(value) {
 	}
 }
 /**
-* Determine whether a value is embedded blob MCP resource contents.
+* Determines whether a value is embedded blob MCP resource contents.
 *
 * @param value - The unknown value to inspect
 * @returns Whether the value is embedded blob resource contents
@@ -1861,7 +1921,7 @@ function isMCPBlobResource(value) {
 	}
 }
 /**
-* Determine whether a value is one `resources/list` descriptor.
+* Determines whether a value is one `resources/list` descriptor.
 *
 * @param value - The unknown value to inspect
 * @returns Whether the value is a valid resource descriptor
@@ -1879,7 +1939,7 @@ function isMCPResource(value) {
 	}
 }
 /**
-* Determine whether a value is one resource-template descriptor.
+* Determines whether a value is one resource-template descriptor.
 *
 * @remarks
 * This guard validates the descriptor shape. Template expansion and the RFC 6570 feature
@@ -1900,7 +1960,7 @@ function isMCPResourceTemplate(value) {
 	}
 }
 /**
-* Determine whether a value is structurally discriminated resource contents.
+* Determines whether a value is structurally discriminated resource contents.
 *
 * @param value - The unknown value to inspect
 * @returns Whether exactly one of `text` and `blob` is present and valid
@@ -1914,7 +1974,7 @@ function isMCPResourceContents(value) {
 	return text ? isMCPTextResource(resource) : isMCPBlobResource(resource);
 }
 /**
-* Determine whether a value carries the shared optional pagination cursor.
+* Determines whether a value carries the shared optional pagination cursor.
 *
 * @param value - The unknown value to inspect
 * @returns Whether a present `cursor` is a string
@@ -1924,7 +1984,7 @@ function isMCPPaginationParams(value) {
 	return owned.success && ((0, _orkestrel_contract.isUndefined)(owned.value["cursor"]) || (0, _orkestrel_contract.isString)(owned.value["cursor"]));
 }
 /**
-* Determine whether a value is one consumer-owned resource page.
+* Determines whether a value is one consumer-owned resource page.
 *
 * @param value - The unknown value to inspect
 * @returns Whether the resources and optional following cursor are valid
@@ -1937,7 +1997,7 @@ function isMCPResourcePage(value) {
 	return Array.isArray(resources) && resources.every((resource) => isMCPResource(resource)) && ((0, _orkestrel_contract.isUndefined)(cursor) || (0, _orkestrel_contract.isString)(cursor));
 }
 /**
-* Determine whether a value is one consumer-owned resource-template page.
+* Determines whether a value is one consumer-owned resource-template page.
 *
 * @param value - The unknown value to inspect
 * @returns Whether the templates and optional following cursor are valid
@@ -1950,7 +2010,7 @@ function isMCPResourceTemplatePage(value) {
 	return Array.isArray(templates) && templates.every((template) => isMCPResourceTemplate(template)) && ((0, _orkestrel_contract.isUndefined)(cursor) || (0, _orkestrel_contract.isString)(cursor));
 }
 /**
-* Determine whether a value is a string-valued MCP argument record.
+* Determines whether a value is a string-valued MCP argument record.
 *
 * @param value - The unknown value to inspect
 * @returns Whether every own argument value is a string
@@ -1960,7 +2020,7 @@ function isMCPStringArguments(value) {
 	return owned.success && Object.values(owned.value).every((argument) => (0, _orkestrel_contract.isString)(argument));
 }
 /**
-* Determine whether a value is one prompt argument descriptor.
+* Determines whether a value is one prompt argument descriptor.
 *
 * @param value - The unknown value to inspect
 * @returns Whether the prompt argument descriptor is valid
@@ -1972,7 +2032,7 @@ function isMCPPromptArgument(value) {
 	return (0, _orkestrel_contract.isString)(argument["name"]) && ((0, _orkestrel_contract.isUndefined)(argument["title"]) || (0, _orkestrel_contract.isString)(argument["title"])) && ((0, _orkestrel_contract.isUndefined)(argument["description"]) || (0, _orkestrel_contract.isString)(argument["description"])) && ((0, _orkestrel_contract.isUndefined)(argument["required"]) || (0, _orkestrel_contract.isBoolean)(argument["required"]));
 }
 /**
-* Determine whether a value is one `prompts/list` descriptor.
+* Determines whether a value is one `prompts/list` descriptor.
 *
 * @param value - The unknown value to inspect
 * @returns Whether the prompt descriptor is valid
@@ -1986,7 +2046,7 @@ function isMCPPrompt(value) {
 	return (0, _orkestrel_contract.isString)(prompt["name"]) && ((0, _orkestrel_contract.isUndefined)(prompt["title"]) || (0, _orkestrel_contract.isString)(prompt["title"])) && ((0, _orkestrel_contract.isUndefined)(prompt["description"]) || (0, _orkestrel_contract.isString)(prompt["description"])) && ((0, _orkestrel_contract.isUndefined)(argumentsValue) || Array.isArray(argumentsValue) && argumentsValue.every((argument) => isMCPPromptArgument(argument))) && ((0, _orkestrel_contract.isUndefined)(icons) || Array.isArray(icons) && icons.every((icon) => isMCPIcon(icon))) && ((0, _orkestrel_contract.isUndefined)(prompt["_meta"]) || isMCPMetaObject(prompt["_meta"]));
 }
 /**
-* Determine whether a value is one prompt message with existing rich content.
+* Determines whether a value is one prompt message with existing rich content.
 *
 * @param value - The unknown value to inspect
 * @returns Whether the role and content are valid
@@ -1996,7 +2056,7 @@ function isMCPPromptMessage(value) {
 	return owned.success && (owned.value["role"] === "user" || owned.value["role"] === "assistant") && isMCPContent(owned.value["content"]);
 }
 /**
-* Determine whether a value is one consumer-owned prompt page.
+* Determines whether a value is one consumer-owned prompt page.
 *
 * @param value - The unknown value to inspect
 * @returns Whether the prompts and optional following cursor are valid
@@ -2009,7 +2069,7 @@ function isMCPPromptPage(value) {
 	return Array.isArray(prompts) && prompts.every((prompt) => isMCPPrompt(prompt)) && ((0, _orkestrel_contract.isUndefined)(cursor) || (0, _orkestrel_contract.isString)(cursor));
 }
 /**
-* Determine whether a value is one complete `prompts/get` result.
+* Determines whether a value is one complete `prompts/get` result.
 *
 * @param value - The unknown value to inspect
 * @returns Whether the prompt result and all messages are valid
@@ -2022,7 +2082,7 @@ function isMCPPromptGetResult(value) {
 	return result["resultType"] === "complete" && ((0, _orkestrel_contract.isUndefined)(result["description"]) || (0, _orkestrel_contract.isString)(result["description"])) && Array.isArray(messages) && messages.every((message) => isMCPPromptMessage(message)) && ((0, _orkestrel_contract.isUndefined)(result["_meta"]) || isMCPResultMetaObject(result["_meta"]));
 }
 /**
-* Determine whether a value is a prompt or resource-template completion reference.
+* Determines whether a value is a prompt or resource-template completion reference.
 *
 * @param value - The unknown value to inspect
 * @returns Whether the discriminated reference is valid
@@ -2034,7 +2094,7 @@ function isMCPCompletionReference(value) {
 	return reference["type"] === "ref/prompt" ? (0, _orkestrel_contract.isString)(reference["name"]) : reference["type"] === "ref/resource" && (0, _orkestrel_contract.isString)(reference["uri"]);
 }
 /**
-* Determine whether a value is one `completion/complete` parameter object.
+* Determines whether a value is one `completion/complete` parameter object.
 *
 * @param value - The unknown value to inspect
 * @returns Whether its reference, fragment, and optional string context are valid
@@ -2053,7 +2113,7 @@ function isMCPCompletionParams(value) {
 	return isMCPCompletionReference(params["ref"]) && (0, _orkestrel_contract.isString)(argument.value["name"]) && (0, _orkestrel_contract.isString)(argument.value["value"]);
 }
 /**
-* Determine whether a value is one host-produced completion candidate set.
+* Determines whether a value is one host-produced completion candidate set.
 *
 * @param value - The unknown value to inspect
 * @returns Whether its candidates and optional result facts are valid
@@ -2067,7 +2127,7 @@ function isMCPCompletion(value) {
 	return Array.isArray(values) && values.every((candidate) => (0, _orkestrel_contract.isString)(candidate)) && ((0, _orkestrel_contract.isUndefined)(total) || (0, _orkestrel_contract.isInteger)(total) && total >= 0) && ((0, _orkestrel_contract.isUndefined)(completion["hasMore"]) || (0, _orkestrel_contract.isBoolean)(completion["hasMore"]));
 }
 /**
-* Determine whether a value is one complete, capped `completion/complete` result.
+* Determines whether a value is one complete, capped `completion/complete` result.
 *
 * @param value - The unknown value to inspect
 * @returns Whether the result is complete and carries at most 100 candidates
@@ -2079,7 +2139,7 @@ function isMCPCompletionResult(value) {
 	return isMCPCompletion(completion) && completion.values.length <= 100 && ((0, _orkestrel_contract.isUndefined)(owned.value["_meta"]) || isMCPResultMetaObject(owned.value["_meta"]));
 }
 /**
-* Determine whether a value is one exact dated-schema MCP tool content block.
+* Determines whether a value is one exact dated-schema MCP tool content block.
 *
 * @param value - The unknown value to inspect
 * @returns Whether the value is valid MCP content
@@ -2111,7 +2171,7 @@ function isMCPContent(value) {
 	}
 }
 /**
-* Determine whether a value is one modern MCP result.
+* Determines whether a value is one modern MCP result.
 *
 * @remarks
 * The open contract's guard: a record carrying a string `resultType` and, when
@@ -2141,7 +2201,7 @@ function isMCPResult(value) {
 	return (0, _orkestrel_contract.isUndefined)(metadata) || isMCPResultMetaObject(metadata);
 }
 /**
-* Determine whether a value is one legacy-era MCP result.
+* Determines whether a value is one legacy-era MCP result.
 *
 * @remarks
 * The legacy revision has no result discriminator, so the absence of `resultType` is
@@ -2162,7 +2222,7 @@ function isMCPLegacyResult(value) {
 	return owned.success && !Object.hasOwn(owned.value, "resultType");
 }
 /**
-* Determine whether a value is a complete modern MCP tool result.
+* Determines whether a value is a complete modern MCP tool result.
 *
 * @param value - The unknown value to inspect
 * @returns Whether the value is a complete MCP call result
@@ -2182,7 +2242,7 @@ function isMCPCallResult(value) {
 	}
 }
 /**
-* Determine whether a value is a modern MCP task-creation result.
+* Determines whether a value is a modern MCP task-creation result.
 *
 * @remarks
 * The runtime enforcement of {@link MCPTaskManagerInterface.start}'s declared return
@@ -2216,7 +2276,7 @@ function isMCPTaskResult(value) {
 	}
 }
 /**
-* Determine whether a value is one of the extension's five task lifecycle states.
+* Determines whether a value is one of the extension's task lifecycle states.
 *
 * @param value - The unknown value to inspect
 * @returns Whether the value is an {@link MCPTaskStatus}
@@ -2231,7 +2291,7 @@ function isMCPTaskStatus(value) {
 	return value === "working" || value === "input_required" || value === "completed" || value === "failed" || value === "cancelled";
 }
 /**
-* Determine whether a value is one durable task's full snapshot.
+* Determines whether a value is one durable task's full snapshot.
 *
 * @remarks
 * The runtime enforcement of {@link MCPTaskManagerInterface.task}'s declared return shape,
@@ -2274,7 +2334,7 @@ function isMCPTaskDetail(value) {
 	}
 }
 /**
-* Determine whether a value is a string within a UTF-8 byte bound.
+* Determines whether a value is a string within a UTF-8 byte bound.
 *
 * @param value - The unknown value to inspect
 * @param bytes - The maximum accepted encoded bytes
@@ -2305,7 +2365,7 @@ function isBoundedString(value, bytes) {
 	return true;
 }
 /**
-* Determine whether a value is bounded, cycle-free exact JSON.
+* Determines whether a value is bounded, cycle-free exact JSON.
 *
 * @remarks
 * Traversal is iterative, ancestor-aware, and contained by {@link attempt}; deep input,
@@ -2325,7 +2385,7 @@ function isBoundedJSON(value, limits) {
 	return serializeJSON(value, limits) !== void 0;
 }
 /**
-* Determine whether a value is a valid JSON-RPC correlation id — a string or a
+* Determines whether a value is a valid JSON-RPC correlation id — a string or a
 * finite integer.
 *
 * @remarks
@@ -2333,7 +2393,7 @@ function isBoundedJSON(value, limits) {
 * absence is what makes a call a notification) and `null` is not one either (MCP
 * omits an unreadable id rather than nulling it). A runtime numeric id must be a
 * finite integer; an empty string is a legal id, because the dated schema imposes
-* no minimum length. Total (§14): any other input returns `false`.
+* no minimum length. Total: any other input returns `false`.
 *
 * @param value - The already-parsed value to test
 * @returns `true` when `value` is a string or a finite integer
@@ -2351,7 +2411,7 @@ function isJSONRPCId(value) {
 	return (0, _orkestrel_contract.isString)(value) || (0, _orkestrel_contract.isInteger)(value);
 }
 /**
-* Determine whether a value is a supported {@link MCPVersion}.
+* Determines whether a value is a supported {@link MCPVersion}.
 *
 * @param value - The unknown value to inspect
 * @returns `true` when the value is one of {@link SUPPORTED_PROTOCOL_VERSIONS}
@@ -2360,7 +2420,7 @@ function isMCPVersion(value) {
 	return (0, _orkestrel_contract.isString)(value) && SUPPORTED_PROTOCOL_VERSIONS.some((version) => version === value);
 }
 /**
-* Determine whether a value is an MCP {@link MCPSubscriptionFilter}.
+* Determines whether a value is an MCP {@link MCPSubscriptionFilter}.
 *
 * @remarks
 * Every filter field is optional. Boolean notification families accept only booleans, and
@@ -2385,69 +2445,7 @@ function isMCPSubscriptionFilter(value) {
 	return (0, _orkestrel_contract.isUndefined)(subscriptions) || (0, _orkestrel_contract.arrayOf)(_orkestrel_contract.isString)(subscriptions);
 }
 /**
-* Determine whether a client capability record declares form-mode elicitation.
-*
-* @remarks
-* The protocol's empty `elicitation` object is the implicit form-only declaration.
-* A non-empty declaration must carry a record-valued `form` member; URL-only support
-* does not authorize a form request. Total over hostile input.
-*
-* @param value - The client capability record to inspect
-* @returns `true` when form-mode elicitation is declared
-*
-* @example
-* ```ts
-* isFormElicitationSupported({ elicitation: {} }) // true — implicit form mode
-* isFormElicitationSupported({ elicitation: { url: {} } }) // false
-* ```
-*/
-function isFormElicitationSupported(value) {
-	const owned = (0, _orkestrel_contract.attempt)(() => (0, _orkestrel_contract.cloneJSONRecord)(value));
-	if (!owned.success) return false;
-	try {
-		const elicitation = owned.value["elicitation"];
-		if (!(0, _orkestrel_contract.isRecord)(elicitation)) return false;
-		if ((0, _orkestrel_contract.isRecord)(elicitation["form"])) return true;
-		return Object.keys(elicitation).length === 0;
-	} catch {
-		return false;
-	}
-}
-/**
-* Determine whether a client capability record declares the draft Tasks extension.
-*
-* @remarks
-* The declaration lives at `extensions['io.modelcontextprotocol/tasks']` and its value is
-* an empty object, so this is a PRESENCE check: the extension defines no options, and a
-* server that read one would be reading a field no client can meaningfully set. The value
-* must still be a record, because that is the shape the capability record declares — a
-* `true` or a string there is a client speaking a different protocol, not a shorthand.
-*
-* A client declares this PER REQUEST. Nothing here consults a session, because the modern
-* revision is stateless and a capability declared once at connect time says nothing about
-* the request in hand. Total over hostile input.
-*
-* @param value - The client capability record to inspect
-* @returns `true` when the tasks extension is declared
-*
-* @example
-* ```ts
-* isTaskSupported({ extensions: { 'io.modelcontextprotocol/tasks': {} } }) // true
-* isTaskSupported({ extensions: {} }) // false — the key is the declaration
-* ```
-*/
-function isTaskSupported(value) {
-	const owned = (0, _orkestrel_contract.attempt)(() => (0, _orkestrel_contract.cloneJSONRecord)(value));
-	if (!owned.success) return false;
-	try {
-		const extensions = owned.value["extensions"];
-		return (0, _orkestrel_contract.isRecord)(extensions) && (0, _orkestrel_contract.isRecord)(extensions["io.modelcontextprotocol/tasks"]);
-	} catch {
-		return false;
-	}
-}
-/**
-* Determine whether a value is one restricted primitive form-elicitation schema.
+* Determines whether a value is one restricted primitive form-elicitation schema.
 *
 * @param value - The unknown value to inspect
 * @returns `true` for a supported boolean, numeric, string, or string-array schema
@@ -2503,7 +2501,7 @@ function isMCPElicitFieldSchema(value) {
 	}
 }
 /**
-* Determine whether a value is the restricted top-level object schema a form elicitation issues.
+* Determines whether a value is the restricted top-level object schema a form elicitation issues.
 *
 * @remarks
 * The schema half of {@link isMCPElicitForm}, exported on its own because the issued schema
@@ -2537,7 +2535,7 @@ function isMCPElicitSchema(value) {
 	}
 }
 /**
-* Determine whether a value is a form-mode elicitation parameter object.
+* Determines whether a value is a form-mode elicitation parameter object.
 *
 * @param value - The unknown value to inspect
 * @returns `true` when `value` has the restricted form elicitation shape
@@ -2563,7 +2561,7 @@ function isMCPElicitForm(value) {
 	}
 }
 /**
-* Determine whether a value is a URL-mode elicitation parameter object.
+* Determines whether a value is a URL-mode elicitation parameter object.
 *
 * @param value - The unknown value to inspect
 * @returns `true` when `value` has the URL elicitation shape
@@ -2584,7 +2582,7 @@ function isMCPElicitURL(value) {
 	}
 }
 /**
-* Determine whether a value is an embedded `elicitation/create` request.
+* Determines whether a value is an embedded `elicitation/create` request.
 *
 * @param value - The unknown value to inspect
 * @returns `true` when `value` is a form- or URL-mode elicitation request
@@ -2609,7 +2607,7 @@ function isMCPElicitRequest(value) {
 	}
 }
 /**
-* Determine whether a value is one legal embedded multi-round-trip request.
+* Determines whether a value is one legal embedded multi-round-trip request.
 *
 * @param value - The unknown value to inspect
 * @returns `true` for elicitation, deprecated sampling, or deprecated roots requests
@@ -2633,7 +2631,7 @@ function isMCPInputRequest(value) {
 	}
 }
 /**
-* Determine whether a value is a server-keyed map of embedded input requests.
+* Determines whether a value is a server-keyed map of embedded input requests.
 *
 * @param value - The unknown value to inspect
 * @returns `true` when every own value is a legal {@link MCPInputRequest}
@@ -2653,7 +2651,7 @@ function isMCPInputRequestMap(value) {
 	}
 }
 /**
-* Determine whether a value is one elicitation response.
+* Determines whether a value is one elicitation response.
 *
 * @param value - The unknown value to inspect
 * @returns `true` when action/content have the protocol shape
@@ -2680,7 +2678,7 @@ function isMCPElicitResult(value) {
 	}
 }
 /**
-* Determine whether accepted elicitation content satisfies the exact schema that was issued.
+* Determines whether accepted elicitation content satisfies the exact schema that was issued.
 *
 * @remarks
 * {@link isMCPElicitResult} says a response has the SHAPE of a response; this says the
@@ -2702,7 +2700,7 @@ function isMCPElicitResult(value) {
 * that answers more than it was asked is not refused for it. A `schema` that is not itself a
 * valid {@link MCPElicitSchema} admits NOTHING — an unenforceable schema is never a permissive
 * one — which is why `schema` is accepted as `unknown` and checked rather than trusted. Total
-* (§14) over hostile content and hostile schemas alike.
+* over hostile content and hostile schemas alike.
 *
 * @param value - The accepted response content to check
 * @param schema - The exact {@link MCPElicitSchema} that was issued with the elicitation
@@ -2787,7 +2785,7 @@ function isElicitContent(value, schema) {
 	}
 }
 /**
-* Determine whether a value is an MCP input-required result.
+* Determines whether a value is an MCP input-required result.
 *
 * @remarks
 * Enforces the at-least-one-of rule at runtime: `inputRequests`, `requestState`, or
@@ -2820,15 +2818,15 @@ function isMCPInputResult(value) {
 	}
 }
 /**
-* Determine whether a parsed value is a {@link JSONRPCRequest}.
+* Determines whether a parsed value is a {@link JSONRPCRequest}.
 *
 * @remarks
 * A request is a record with `jsonrpc === '2.0'`, a string `method`, and an `id`
 * that {@link isJSONRPCId} accepts. An id-less call is NOT a request — it is a
 * {@link JSONRPCNotification}, which {@link isJSONRPCNotification} answers for. The
-* two guards are mutually exclusive on every input: this one requires a valid `id`
+* guards are mutually exclusive on every input: this one requires a valid `id`
 * value, that one requires no own `id` member at all. `params`, when present, must
-* be a record. Total (§14): any other input returns `false`.
+* be a record. Total: any other input returns `false`.
 *
 * @param value - The already-parsed value to test
 * @returns `true` when `value` is a valid JSON-RPC request
@@ -2850,12 +2848,12 @@ function isJSONRPCRequest(value) {
 	return (0, _orkestrel_contract.isUndefined)(params) || (0, _orkestrel_contract.isRecord)(params);
 }
 /**
-* Determine whether a parsed value is a {@link JSONRPCNotification}.
+* Determines whether a parsed value is a {@link JSONRPCNotification}.
 *
 * @remarks
 * A notification is a request-shaped call carrying NO `id` member — the protocol
 * forbids one, because nothing answers a notification. `params`, when present, must
-* be a record. Total (§14): any other input returns `false`.
+* be a record. Total: any other input returns `false`.
 *
 * @param value - The already-parsed value to test
 * @returns `true` when `value` is a valid JSON-RPC notification
@@ -2876,12 +2874,12 @@ function isJSONRPCNotification(value) {
 	return (0, _orkestrel_contract.isUndefined)(params) || (0, _orkestrel_contract.isRecord)(params);
 }
 /**
-* Determine whether a parsed value is a {@link JSONRPCInvocation} — a request or a
+* Determines whether a parsed value is a {@link JSONRPCInvocation} — a request or a
 * notification.
 *
 * @remarks
 * The union of {@link isJSONRPCRequest} and {@link isJSONRPCNotification}, which are
-* mutually exclusive, so a positive answer names exactly one arm. Total (§14).
+* mutually exclusive, so a positive answer names exactly one arm. Total.
 *
 * @param value - The already-parsed value to test
 * @returns `true` when `value` is a valid JSON-RPC request or notification
@@ -2890,7 +2888,7 @@ function isJSONRPCInvocation(value) {
 	return isJSONRPCRequest(value) || isJSONRPCNotification(value);
 }
 /**
-* Determine whether a parsed value is a {@link JSONRPCResultResponse} — the success
+* Determines whether a parsed value is a {@link JSONRPCResultResponse} — the success
 * arm of a response.
 *
 * @remarks
@@ -2899,7 +2897,7 @@ function isJSONRPCInvocation(value) {
 * which is what makes this guard and {@link isJSONRPCErrorResponse} mutually
 * exclusive on every input. `result` itself must be an object: either a modern
 * {@link isMCPResult} or a legacy {@link isMCPLegacyResult}, never a bare primitive.
-* Total (§14).
+* Total.
 *
 * @param value - The already-parsed value to test
 * @returns `true` when `value` is a valid JSON-RPC result response
@@ -2920,22 +2918,22 @@ function isJSONRPCResultResponse(value) {
 	return isMCPResult(result) || isMCPLegacyResult(result);
 }
 /**
-* Determine whether a value is one JSON-RPC `error` member.
+* Determines whether a value is one JSON-RPC `error` member.
 *
 * @remarks
 * The failure OBJECT, not the envelope carrying it — the shape a failed response owns
 * under `error`, and the shape a `failed` {@link MCPTaskDetail} owns under the same name,
-* which is why it is one guard rather than the same three checks written twice.
+* which is why it is one guard rather than the same checks written twice.
 *
 * It is deliberately STRUCTURAL rather than exact-JSON: `data` is declared `unknown`, so
 * requiring the whole object to survive a JSON clone would refuse a legal error that
 * carried a non-JSON payload. Both callers here hand it an already-owned value.
 *
-* That choice is why the two key reads are guarded. Every sibling guard clones first, and a
+* That choice is why the key reads are guarded. Every sibling guard clones first, and a
 * clone reads each key once behind a boundary that already owns totality; this one is the
 * family's only DIRECT reader, so it meets `code` and `message` exactly as the value defines
 * them — including as accessors that throw. Reading a named key off an unowned value is
-* itself the hostile step, and it is bounded here rather than allowed to escape. Total (§14).
+* itself the hostile step, and it is bounded here rather than allowed to escape. Total.
 *
 * @param value - The already-parsed value to test
 * @returns `true` when `value` carries an integer `code` and a string `message`
@@ -2952,14 +2950,14 @@ function isJSONRPCError(value) {
 	return read.success && read.value;
 }
 /**
-* Determine whether a parsed value is a {@link JSONRPCErrorResponse} — the failure
+* Determines whether a parsed value is a {@link JSONRPCErrorResponse} — the failure
 * arm of a response.
 *
 * @remarks
 * `id` is OPTIONAL here and only here: a peer that could not read the failed
 * request's id OMITS the member rather than sending `null`, so an absent `id` is
 * valid and a `null` one is not. The envelope must own an `error` and must NOT own a
-* `result`. `error` carries an integer `code` and a string `message`. Total (§14).
+* `result`. `error` carries an integer `code` and a string `message`. Total.
 *
 * @param value - The already-parsed value to test
 * @returns `true` when `value` is a valid JSON-RPC error response
@@ -2980,10 +2978,10 @@ function isJSONRPCErrorResponse(value) {
 	return isJSONRPCError(response["error"]);
 }
 /**
-* Determine whether a parsed value is a {@link JSONRPCResponse}.
+* Determines whether a parsed value is a {@link JSONRPCResponse}.
 *
 * @remarks
-* The union of the two mutually exclusive arms. Total (§14).
+* The union of the mutually exclusive arms. Total.
 *
 * @param value - The already-parsed value to test
 * @returns `true` when `value` is a valid JSON-RPC response
@@ -2992,11 +2990,11 @@ function isJSONRPCResponse(value) {
 	return isJSONRPCResultResponse(value) || isJSONRPCErrorResponse(value);
 }
 /**
-* Determine whether a parsed value is a {@link JSONRPCMessage} — an invocation or a
+* Determines whether a parsed value is a {@link JSONRPCMessage} — an invocation or a
 * response.
 *
 * @remarks
-* The union of {@link isJSONRPCInvocation} and {@link isJSONRPCResponse}. Total (§14).
+* The union of {@link isJSONRPCInvocation} and {@link isJSONRPCResponse}. Total.
 *
 * @param value - The already-parsed value to test
 * @returns `true` when `value` is a valid JSON-RPC message
@@ -3005,7 +3003,7 @@ function isJSONRPCMessage(value) {
 	return isJSONRPCInvocation(value) || isJSONRPCResponse(value);
 }
 /**
-* Determine whether a parsed value is an MCP `initialize` invocation.
+* Determines whether a parsed value is an MCP `initialize` invocation.
 *
 * @param value - The already-parsed value to test
 * @returns `true` when `value` is a valid `initialize` request or notification
@@ -3021,7 +3019,7 @@ function isInitializeRequest(value) {
 	return owned.success && isJSONRPCInvocation(owned.value) && owned.value["method"] === "initialize";
 }
 /**
-* Determine whether a JSON-RPC invocation uses the modern per-request MCP wire shape.
+* Determines whether a JSON-RPC invocation uses the modern per-request MCP wire shape.
 *
 * @remarks
 * Presence routes and validity answers: this guard checks only that
@@ -3112,7 +3110,7 @@ var MCPProgressReporter = class {
 	#last;
 	#stopped = false;
 	/**
-	* Create one non-durable progress slot for an active request.
+	* Creates one non-durable progress slot for an active request.
 	*
 	* @param token - The opaque progress token copied into each notification
 	* @param limits - The byte, key, and depth bounds applied to every progress payload
@@ -3127,7 +3125,7 @@ var MCPProgressReporter = class {
 		else signal.addEventListener("abort", this.#listener, { once: true });
 	}
 	/**
-	* Publish one bounded, strictly increasing progress value and await its consumption.
+	* Publishes one bounded, strictly increasing progress value and awaits its consumption.
 	*
 	* @param progress - The progress payload to own and hand to the serial consumer
 	* @returns A promise resolving after {@link take} consumes the item
@@ -3148,7 +3146,7 @@ var MCPProgressReporter = class {
 		await consumed.promise;
 	}
 	/**
-	* Take the next progress notification, waiting for the single producer slot when empty.
+	* Takes the next progress notification, waiting for the single producer slot when empty.
 	*
 	* @returns The official progress notification carrying the original token
 	* @throws When the reporter stops or another consumer already has a pending take
@@ -3172,7 +3170,7 @@ var MCPProgressReporter = class {
 		return buildProgressNotification(this.#token, progress);
 	}
 	/**
-	* Permanently stop the reporter, reject pending work, and detach its abort listener.
+	* Stops the reporter permanently, rejects pending work, and detaches its abort listener.
 	*
 	* Repeated calls are idempotent. No queued or replayable progress survives the first call.
 	*
@@ -3214,10 +3212,10 @@ var MCPProgressReporter = class {
 * cleanup to the producer — so a cooperating producer is woken rather than waited on —
 * contains every promise the producer settles late, and makes every closure path idempotent.
 *
-* The three closures are deliberately different answers: the source's own return is the
+* The closures are deliberately different answers: the source's own return is the
 * terminal RESPONSE, `return(value)` is the consumer saying it has the answer already, and
-* {@link stop} is an owner saying there will be no answer at all. Only the first is a
-* message a peer ever sees.
+* {@link stop} is an owner saying there will be no answer at all. Only the source's own
+* return is a message a peer ever sees.
 *
 * A producer's own resource cleanup remains the producer's: JavaScript cannot settle work a
 * generator is suspended inside, so the signal is how an uncooperative producer is asked to
@@ -3250,7 +3248,7 @@ var MCPStreamController = class {
 	#error;
 	#closed = false;
 	/**
-	* Control one produced stream for the lifetime of one request.
+	* Controls one produced stream for the lifetime of one request.
 	*
 	* @param source - The produced held-open result whose cancellation this controller owns
 	* @param signal - The request signal every closure settles against; its abort ends the exchange
@@ -3265,7 +3263,7 @@ var MCPStreamController = class {
 		else signal.addEventListener("abort", this.#listener, { once: true });
 	}
 	/**
-	* Read the next message, or the terminating response that ends the exchange.
+	* Reads the next message, or the terminating response that ends the exchange.
 	*
 	* @remarks
 	* At most one read is outstanding against the source at a time, and a rival read is
@@ -3300,7 +3298,7 @@ var MCPStreamController = class {
 		};
 	}
 	/**
-	* End the exchange because the consumer already has its answer.
+	* Ends the exchange because the consumer already has its answer.
 	*
 	* @param value - The terminal the consumer is ending on
 	* @returns That terminal as the iteration's `return`
@@ -3314,7 +3312,7 @@ var MCPStreamController = class {
 		};
 	}
 	/**
-	* End the exchange with a failure the consumer is raising.
+	* Ends the exchange with a failure the consumer is raising.
 	*
 	* @param error - The failure to end the exchange with
 	* @returns Never — the returned promise always rejects
@@ -3325,7 +3323,7 @@ var MCPStreamController = class {
 		throw error;
 	}
 	/**
-	* End the exchange permanently, with no terminal response.
+	* Ends the exchange permanently, with no terminal response.
 	*
 	* @remarks
 	* Idempotent, and the operation an owner that is not the consumer uses: a transport whose
@@ -3340,7 +3338,7 @@ var MCPStreamController = class {
 		if (!this.#closed) this.#fail(this.#closure.signal.reason);
 	}
 	/**
-	* End the exchange when the scope that owns it exits.
+	* Ends the exchange when the scope that owns it exits.
 	*
 	* @remarks
 	* {@link stop} under the name a `finally` calls it by, so a pump discharges its ownership
@@ -3353,7 +3351,7 @@ var MCPStreamController = class {
 		this.stop();
 	}
 	/**
-	* Iterate this exchange — the controller is its own iterator.
+	* Iterates this exchange — the controller is its own iterator.
 	*
 	* @returns This controller
 	*/
@@ -3442,7 +3440,7 @@ var MCPStreamController = class {
 var MCPTextStreamController = class {
 	#stream;
 	/**
-	* Mirror one controlled typed exchange as its serialized sequence.
+	* Mirrors one controlled typed exchange as its serialized sequence.
 	*
 	* @param stream - The controlled typed stream this face serializes and delegates into
 	*/
@@ -3450,7 +3448,7 @@ var MCPTextStreamController = class {
 		this.#stream = stream;
 	}
 	/**
-	* Read the next serialized message, or the serialized terminating response.
+	* Reads the next serialized message, or the serialized terminating response.
 	*
 	* @returns The next message as a string, or the terminal as the iteration's `return`
 	* @throws Whatever ended the typed exchange, unserialized — an abort is not a message
@@ -3467,7 +3465,7 @@ var MCPTextStreamController = class {
 		};
 	}
 	/**
-	* End the exchange because the consumer already has its answer.
+	* Ends the exchange because the consumer already has its answer.
 	*
 	* @remarks
 	* The typed exchange ends with no terminal, because a string is not a
@@ -3486,7 +3484,7 @@ var MCPTextStreamController = class {
 		};
 	}
 	/**
-	* End the exchange with a failure the consumer is raising.
+	* Ends the exchange with a failure the consumer is raising.
 	*
 	* @param error - The failure to end the exchange with
 	* @returns Never — the returned promise always rejects
@@ -3497,7 +3495,7 @@ var MCPTextStreamController = class {
 		throw error;
 	}
 	/**
-	* End the typed exchange permanently, with no terminal response.
+	* Ends the typed exchange permanently, with no terminal response.
 	*
 	* @returns Nothing
 	*/
@@ -3505,7 +3503,7 @@ var MCPTextStreamController = class {
 		this.#stream.stop();
 	}
 	/**
-	* End the typed exchange when the scope that owns this face exits.
+	* Ends the typed exchange when the scope that owns this face exits.
 	*
 	* @remarks
 	* Delegates downward exactly as {@link stop} does — disposing the serialized arm is
@@ -3517,7 +3515,7 @@ var MCPTextStreamController = class {
 		this.#stream.stop();
 	}
 	/**
-	* Iterate this exchange — the controller is its own iterator.
+	* Iterates this exchange — the controller is its own iterator.
 	*
 	* @returns This controller
 	*/
@@ -3528,7 +3526,7 @@ var MCPTextStreamController = class {
 //#endregion
 //#region src/core/MCPLegacy.ts
 /**
-* Translate the fixed legacy method set onto one modern dispatcher.
+* Translates the fixed legacy method set onto one modern dispatcher.
 *
 * @remarks
 * This decorator owns no execution engine or result normalizer. Modern invocations
@@ -3539,7 +3537,7 @@ var MCPTextStreamController = class {
 var MCPLegacy = class {
 	#options;
 	/**
-	* Create a legacy decorator.
+	* Creates a legacy decorator.
 	*
 	* @param options - The sole dispatcher and legacy handshake identity
 	*/
@@ -3648,7 +3646,7 @@ var MCPLegacy = class {
 * requests over a live {@link ToolManagerInterface}, with NO transport coupling.
 *
 * @remarks
-* - **Two entry points.** `dispatch(invocation)` runs an already-parsed invocation and
+* - **`dispatch` and `handle`.** `dispatch(invocation)` runs an already-parsed invocation and
 *   resolves a {@link JSONRPCResponse} for a request — or `undefined` for a
 *   {@link JSONRPCNotification}, which carries no `id` and is answered by nothing.
 *   `handle(message)` is the string boundary: it
@@ -3664,8 +3662,8 @@ var MCPLegacy = class {
 *   every dispatch: the same path a later method or a consumer's own takes, with an
 *   unregistered method still answering `-32601`.
 * - **Provider-agnostic.** Imports only core siblings — JSON-RPC + the tool registry,
-*   no HTTP, no model. Wire fields are narrowed via the contracts guards (no `as`).
-* - **Observable (§13).** The owned `emitter` fires `request` at the top of every
+*   no HTTP, no model. Wire fields are narrowed with the contract guards (no `as`).
+* - **Observable.** The owned `emitter` fires `request` at the top of every
 *   dispatch; the emitter isolates a listener throw and routes it to its `error` handler
 *   (the `error` option), so a listener throw can never escape the dispatch.
 *
@@ -3786,6 +3784,11 @@ var MCPServer = class {
 	}
 	async #modern(request, options) {
 		const id = request.id;
+		const method = request.method;
+		if (!isModernRequest(request)) {
+			if (this.#methods.method(method) === void 0) return buildJSONRPCError(id, JSONRPC_METHOD_NOT_FOUND, `Method not found: ${method}`);
+			return buildJSONRPCError(id, JSONRPC_INVALID_PARAMS, "Invalid params: request declares no protocol version");
+		}
 		const context = parseRequestContext(request, {
 			bytes: this.#limits.message,
 			depth: this.#limits.depth
@@ -4314,7 +4317,7 @@ var MCPServer = class {
 //#endregion
 //#region src/core/MCPTaskClient.ts
 /**
-* The CLIENT half of the draft Tasks extension — the three `tasks/*` methods over one
+* The CLIENT half of the draft Tasks extension — the `tasks/*` methods over one
 * correlated-request door, exposed as an {@link import('./types.js').MCPClientInterface}'s
 * `tasks`.
 *
@@ -4334,7 +4337,7 @@ var MCPServer = class {
 *   client's id space, pending table, deadline policy, and `disconnect` drain rather than
 *   opening a second path to the same peer.
 * - **The peer authorizes.** Nothing is checked locally. A server that never configured the
-*   extension answers all three `-32601`, and a task that never existed, one whose TTL purged
+*   extension answers each of them `-32601`, and a task that never existed, one whose TTL purged
 *   it, and one belonging to another principal are all the same `-32602` — a refusal this
 *   client passes on rather than resolving into a distinction the peer refused to publish.
 *
@@ -4411,16 +4414,16 @@ var MCPTaskClient = class {
 *   exit — the deadline, an abort, a rejecting `send`, the answer itself, and the
 *   teardown's drain — without any of those paths knowing they exist.
 * - **Per-request deadline.** An ordinary `#request` carries `this.#timeout`. The initial
-*   discovery probe uses that same 30-second default, or the shorter probe deadline where
-*   `timeout` was configured, so a silent peer cannot hold negotiation indefinitely.
+*   discovery probe uses that same configured deadline, so a silent peer cannot hold
+*   negotiation indefinitely.
 *   `AbortSignal.timeout` (never a raw `setTimeout`) rejects only that pending request, and the
 *   same deadline bounds the WAIT on the transport's `close`, the one wait no drain and no signal
 *   can reach. It bounds the wait rather than the close, which keeps running, so a retry joins it
 *   instead of shutting one connection down twice.
 * - **Transport-agnostic.** Imports only core siblings (JSON-RPC + the tool vocabulary);
-*   the concrete transport is injected. Wire fields are narrowed via the contracts
+*   the concrete transport is injected. Wire fields are narrowed with the contract
 *   guards (no `as`).
-* - **Observable (§13).** The owned `emitter` fires `connect` / `disconnect` /
+* - **Observable.** The owned `emitter` fires `connect` / `disconnect` /
 *   `notification` / `error`; the emitter isolates a listener throw and routes it to its
 *   `error` handler (the `error` option), so a listener throw can never escape.
 *
@@ -4441,7 +4444,6 @@ var MCPClient = class {
 	#capabilities;
 	#pin;
 	#timeout;
-	#probe;
 	#tasks;
 	#pending = /* @__PURE__ */ new Map();
 	#nextId = 0;
@@ -4456,6 +4458,11 @@ var MCPClient = class {
 	#era = void 0;
 	#offer;
 	constructor(options) {
+		const requested = options.version;
+		if (requested !== void 0 && !isMCPVersion(requested)) throw new MCPError("Unsupported protocol version", MCP_UNSUPPORTED_VERSION, {
+			supported: SUPPORTED_PROTOCOL_VERSIONS,
+			requested
+		});
 		this.#emitter = new _orkestrel_emitter.Emitter({
 			...options.on !== void 0 ? { on: options.on } : {},
 			...options.error !== void 0 ? { error: options.error } : {}
@@ -4466,10 +4473,9 @@ var MCPClient = class {
 			version: "1.0.0"
 		};
 		this.#capabilities = options.capabilities ?? {};
-		this.#pin = options.version;
-		this.#offer = options.version ?? "2026-07-28";
+		this.#pin = requested;
+		this.#offer = requested ?? "2026-07-28";
 		this.#timeout = options.timeout ?? 3e4;
-		this.#probe = options.timeout === void 0 ? DEFAULT_MCP_REQUEST_TIMEOUT : Math.min(options.timeout, 50);
 		this.#tasks = new MCPTaskClient({
 			request: this.#request.bind(this),
 			timeout: this.#timeout
@@ -4491,9 +4497,6 @@ var MCPClient = class {
 	get tasks() {
 		return this.#tasks;
 	}
-	on(event, handler) {
-		this.#emitter.on(event, handler);
-	}
 	async connect() {
 		for (;;) {
 			const closing = this.#disconnecting;
@@ -4526,7 +4529,7 @@ var MCPClient = class {
 		}
 	}
 	async discover() {
-		const received = await this.#request("server/discover", void 0, this.#probe, this.#version ?? this.#offer);
+		const received = await this.#request("server/discover", void 0, this.#timeout, this.#version ?? this.#offer);
 		const owned = (0, _orkestrel_contract.attempt)(() => (0, _orkestrel_contract.cloneJSONRecord)(received));
 		if (!owned.success) throw new MCPError("MCP server returned a malformed discovery result", JSONRPC_INVALID_PARAMS);
 		const result = owned.value;
@@ -4736,7 +4739,13 @@ var MCPClient = class {
 				await this.#initialize(generation, MCP_PROTOCOL_VERSION);
 				return;
 			}
-			const version = inferVersion(discovery.supportedVersions);
+			let version;
+			if (this.#pin === void 0) version = inferVersion(discovery.supportedVersions);
+			else if (discovery.supportedVersions.includes(this.#pin)) version = this.#pin;
+			else throw new MCPError("MCP server does not support the pinned protocol version", MCP_UNSUPPORTED_VERSION, {
+				supported: discovery.supportedVersions,
+				requested: this.#pin
+			});
 			if (version === void 0) throw new MCPError("MCP server supports no compatible protocol version", MCP_UNSUPPORTED_VERSION, { supported: discovery.supportedVersions });
 			if (generation !== this.#generation) throw new Error("MCP client disconnected");
 			this.#version = version;
@@ -4812,6 +4821,10 @@ var MCPClient = class {
 		if (protocol === void 0) throw new Error("MCP server returned no protocol version");
 		if (!(0, _orkestrel_contract.isString)(protocol)) throw new Error("MCP server returned a malformed protocol version");
 		if (!isMCPVersion(protocol) || inferEra(protocol) !== "legacy") throw new Error(`MCP server negotiated unsupported protocol version '${protocol}'`);
+		if (this.#pin !== void 0 && protocol !== this.#pin) throw new MCPError("MCP server negotiated a different protocol version than the client pinned", MCP_UNSUPPORTED_VERSION, {
+			requested: this.#pin,
+			negotiated: protocol
+		});
 		if (generation !== this.#generation) throw new Error("MCP client disconnected");
 		await Promise.race([this.#transport.send({
 			jsonrpc: "2.0",
@@ -4845,7 +4858,7 @@ var MCPClient = class {
 //#endregion
 //#region src/core/factories.ts
 /**
-* Create a transport-agnostic Model Context Protocol server — exposes a live
+* Creates a transport-agnostic Model Context Protocol server — exposes a live
 * {@link import('@orkestrel/tool').ToolManagerInterface} and an optional
 * {@link import('./types.js').MCPResourceManagerInterface},
 * {@link import('./types.js').MCPPromptManagerInterface}, and
@@ -4858,7 +4871,7 @@ var MCPClient = class {
 * and no model. The {@link import('@orkestrel/tool').ToolManagerInterface} already
 * isolates a thrown tool into a `success: false` result (surfaced as an MCP
 * `isError: true` tool result), so a misbehaving tool never crashes a dispatch. Subscribe to the
-* `request` event via `server.emitter.on('request', …)` for tracing.
+* `request` event through `server.emitter.on('request', …)` for tracing.
 *
 * @param options - `identity` (the server identity), `tools` (the live tool
 *   registry), optional `resources` (the consumer-owned resource registry), optional
@@ -4870,7 +4883,8 @@ var MCPClient = class {
 *
 * @example
 * ```ts
-* import { createMCPServer, createTool, createToolManager } from '@src/core'
+* import { createMCPServer } from '@orkestrel/mcp'
+* import { createTool, createToolManager } from '@orkestrel/tool'
 *
 * const tools = createToolManager()
 * tools.add(createTool({ name: 'add', execute: (a) => Number(a.x) + Number(a.y) }))
@@ -4887,7 +4901,7 @@ function createMCPServer(options) {
 	return new MCPServer(options);
 }
 /**
-* Decorate one MCP server with the fixed legacy method translation.
+* Decorates one MCP server with the fixed legacy method translation.
 *
 * @param server - The sole modern dispatcher and handshake identity source
 * @returns A dispatcher accepting both modern and legacy invocations
@@ -4899,7 +4913,7 @@ function createMCPLegacy(server) {
 	});
 }
 /**
-* Create a transport-agnostic Model Context Protocol CLIENT — connects to a REMOTE
+* Creates a transport-agnostic Model Context Protocol CLIENT — connects to a REMOTE
 * MCP server over an injected {@link import('./types.js').MCPClientTransportInterface},
 * runs the `initialize` handshake, and exposes the server's tools as local
 * {@link import('@orkestrel/tool').ToolInterface}s an agent can run.
@@ -4913,8 +4927,7 @@ function createMCPLegacy(server) {
 * locally, so an agent's {@link import('@orkestrel/tool').ToolManagerInterface}
 * isolates it). The transport is injected — a concrete one (the HTTP transport over
 * `fetch`) lives in the published server environment; the client itself is provider-agnostic. Subscribe
-* to `connect` / `disconnect` / `notification` via `client.on(...)` (or
-* `client.emitter.on(...)`).
+* to `connect` / `disconnect` / `notification` through `client.emitter.on(...)`.
 *
 * @param options - `transport` (the carrier; REQUIRED), an optional `identity`
 *   (the client identity), `timeout` (the per-request deadline), and the reserved `on`
@@ -4923,7 +4936,7 @@ function createMCPLegacy(server) {
 *
 * @example
 * ```ts
-* import { createMCPClient } from '@src/core'
+* import { createMCPClient } from '@orkestrel/mcp'
 * import { createHTTPClientTransport } from '@orkestrel/mcp/server'
 *
 * const client = createMCPClient({
@@ -4938,7 +4951,7 @@ function createMCPClient(options) {
 	return new MCPClient(options);
 }
 /**
-* Adapt an {@link MCPTransportInterface} (the environment-agnostic duplex message
+* Adapts an {@link MCPTransportInterface} (the environment-agnostic duplex message
 * channel) into a {@link MCPClientTransportInterface} — the additive bridge that lets
 * `createMCPClient` run over the new port without any change to `MCPClient`'s
 * existing shape.
@@ -4946,7 +4959,7 @@ function createMCPClient(options) {
 * @remarks
 * Hand the RESULT to `createMCPClient({ transport })`, then pass the SAME
 * `transport` to {@link import('./helpers.js').bindClient} to complete the inbound
-* wiring: `send` serializes each outbound {@link JSONRPCMessage} and writes it via
+* wiring: `send` serializes each outbound {@link JSONRPCMessage} and writes it through
 * `transport.send`; `close` closes the underlying
 * `transport`; `start` is a no-op (the duplex channel is already open by the time
 * it is handed in — there is no separate connect step at this layer); `session` is
@@ -4990,7 +5003,6 @@ exports.DEFAULT_MCP_CACHE_TTL = DEFAULT_MCP_CACHE_TTL;
 exports.DEFAULT_MCP_CLIENT_NAME = DEFAULT_MCP_CLIENT_NAME;
 exports.DEFAULT_MCP_CLIENT_VERSION = DEFAULT_MCP_CLIENT_VERSION;
 exports.DEFAULT_MCP_LIMITS = DEFAULT_MCP_LIMITS;
-exports.DEFAULT_MCP_PROBE_TIMEOUT = DEFAULT_MCP_PROBE_TIMEOUT;
 exports.DEFAULT_MCP_REQUEST_TIMEOUT = DEFAULT_MCP_REQUEST_TIMEOUT;
 exports.EMPTY_MCP_ARGUMENTS = EMPTY_MCP_ARGUMENTS;
 exports.JSONRPC_INTERNAL_ERROR = JSONRPC_INTERNAL_ERROR;