deadbyte-mcp 0.15.49 → 0.15.50

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (93) hide show
  1. package/MANIFEST.SHA256 +82 -78
  2. package/PROVENANCE.json +3 -3
  3. package/README.txt +18 -18
  4. package/RELEASE.json +5 -5
  5. package/SBOM.cdx.json +2 -2
  6. package/TEST-MATRIX.json +2 -2
  7. package/docs/R130-SDK-SECURITY-PATCH.md +34 -0
  8. package/node_modules/@modelcontextprotocol/client/README.md +1 -7
  9. package/node_modules/@modelcontextprotocol/client/dist/{index-BCtJi0p5.d.mts → index-B-4n9P0J.d.mts} +5 -1
  10. package/node_modules/@modelcontextprotocol/client/dist/index-B-4n9P0J.d.mts.map +1 -0
  11. package/node_modules/@modelcontextprotocol/client/dist/{index-CEk3qkZM.d.cts → index-J2FaQ-KY.d.cts} +5 -1
  12. package/node_modules/@modelcontextprotocol/client/dist/index-J2FaQ-KY.d.cts.map +1 -0
  13. package/node_modules/@modelcontextprotocol/client/dist/index.cjs +175 -76
  14. package/node_modules/@modelcontextprotocol/client/dist/index.cjs.map +1 -1
  15. package/node_modules/@modelcontextprotocol/client/dist/index.d.cts +214 -35
  16. package/node_modules/@modelcontextprotocol/client/dist/index.d.cts.map +1 -1
  17. package/node_modules/@modelcontextprotocol/client/dist/index.d.mts +214 -35
  18. package/node_modules/@modelcontextprotocol/client/dist/index.d.mts.map +1 -1
  19. package/node_modules/@modelcontextprotocol/client/dist/index.mjs +175 -76
  20. package/node_modules/@modelcontextprotocol/client/dist/index.mjs.map +1 -1
  21. package/node_modules/@modelcontextprotocol/client/dist/shimsWorkerd.cjs +1 -1
  22. package/node_modules/@modelcontextprotocol/client/dist/shimsWorkerd.mjs +1 -1
  23. package/node_modules/@modelcontextprotocol/client/dist/{src-D0qEN74R.cjs → src-DpAS0jfg.cjs} +125 -11
  24. package/node_modules/@modelcontextprotocol/client/dist/src-DpAS0jfg.cjs.map +1 -0
  25. package/node_modules/@modelcontextprotocol/client/dist/{src-DDAAhLnO.mjs → src-WCy6ifGf.mjs} +102 -12
  26. package/node_modules/@modelcontextprotocol/client/dist/src-WCy6ifGf.mjs.map +1 -0
  27. package/node_modules/@modelcontextprotocol/client/dist/stdio.cjs +1 -1
  28. package/node_modules/@modelcontextprotocol/client/dist/stdio.d.cts +1 -1
  29. package/node_modules/@modelcontextprotocol/client/dist/stdio.d.mts +1 -1
  30. package/node_modules/@modelcontextprotocol/client/dist/stdio.mjs +1 -1
  31. package/node_modules/@modelcontextprotocol/client/package.json +5 -5
  32. package/node_modules/@modelcontextprotocol/core/dist/{auth--n_Yzytt.d.cts → auth-Anm-lwWi.d.mts} +9 -8
  33. package/node_modules/@modelcontextprotocol/core/dist/{auth--n_Yzytt.d.cts.map → auth-Anm-lwWi.d.mts.map} +1 -1
  34. package/node_modules/@modelcontextprotocol/core/dist/{auth-CGP0BDVq.mjs → auth-BNDyLTqp.mjs} +5 -3
  35. package/node_modules/@modelcontextprotocol/core/dist/{auth-CGP0BDVq.mjs.map → auth-BNDyLTqp.mjs.map} +1 -1
  36. package/node_modules/@modelcontextprotocol/core/dist/{auth-4-zilcqg.cjs → auth-D1CeV_Jr.cjs} +5 -3
  37. package/node_modules/@modelcontextprotocol/core/dist/{auth-4-zilcqg.cjs.map → auth-D1CeV_Jr.cjs.map} +1 -1
  38. package/node_modules/@modelcontextprotocol/core/dist/{auth-YUQV3RRv.d.mts → auth-V9XJSCfa.d.cts} +9 -8
  39. package/node_modules/@modelcontextprotocol/core/dist/{auth-YUQV3RRv.d.mts.map → auth-V9XJSCfa.d.cts.map} +1 -1
  40. package/node_modules/@modelcontextprotocol/core/dist/index.cjs +1 -1
  41. package/node_modules/@modelcontextprotocol/core/dist/index.d.cts +1 -1
  42. package/node_modules/@modelcontextprotocol/core/dist/index.d.mts +1 -1
  43. package/node_modules/@modelcontextprotocol/core/dist/index.mjs +1 -1
  44. package/node_modules/@modelcontextprotocol/core/dist/internal.cjs +1 -1
  45. package/node_modules/@modelcontextprotocol/core/dist/internal.d.cts +1 -1
  46. package/node_modules/@modelcontextprotocol/core/dist/internal.d.mts +1 -1
  47. package/node_modules/@modelcontextprotocol/core/dist/internal.mjs +1 -1
  48. package/node_modules/@modelcontextprotocol/core/package.json +2 -2
  49. package/node_modules/@modelcontextprotocol/server/README.md +1 -7
  50. package/node_modules/@modelcontextprotocol/server/dist/{createMcpHandler-Bt6U_Fqb.d.mts → createMcpHandler-D4NN8WsG.d.mts} +35 -13
  51. package/node_modules/@modelcontextprotocol/server/dist/createMcpHandler-D4NN8WsG.d.mts.map +1 -0
  52. package/node_modules/@modelcontextprotocol/server/dist/{createMcpHandler-BLVe3qmU.d.cts → createMcpHandler-DZmmlN8e.d.cts} +35 -13
  53. package/node_modules/@modelcontextprotocol/server/dist/createMcpHandler-DZmmlN8e.d.cts.map +1 -0
  54. package/node_modules/@modelcontextprotocol/server/dist/index.cjs +32 -5
  55. package/node_modules/@modelcontextprotocol/server/dist/index.cjs.map +1 -1
  56. package/node_modules/@modelcontextprotocol/server/dist/index.d.cts +41 -5
  57. package/node_modules/@modelcontextprotocol/server/dist/index.d.cts.map +1 -1
  58. package/node_modules/@modelcontextprotocol/server/dist/index.d.mts +41 -5
  59. package/node_modules/@modelcontextprotocol/server/dist/index.d.mts.map +1 -1
  60. package/node_modules/@modelcontextprotocol/server/dist/index.mjs +32 -5
  61. package/node_modules/@modelcontextprotocol/server/dist/index.mjs.map +1 -1
  62. package/node_modules/@modelcontextprotocol/server/dist/{mcp-DUcCQSTW.cjs → mcp-BumlNux0.cjs} +73 -23
  63. package/node_modules/@modelcontextprotocol/server/dist/mcp-BumlNux0.cjs.map +1 -0
  64. package/node_modules/@modelcontextprotocol/server/dist/{mcp-Dw2OlZ1f.mjs → mcp-DIH4cS6P.mjs} +73 -23
  65. package/node_modules/@modelcontextprotocol/server/dist/mcp-DIH4cS6P.mjs.map +1 -0
  66. package/node_modules/@modelcontextprotocol/server/dist/shimsWorkerd.cjs +1 -1
  67. package/node_modules/@modelcontextprotocol/server/dist/shimsWorkerd.mjs +1 -1
  68. package/node_modules/@modelcontextprotocol/server/dist/{src-CgFsfg3E.cjs → src-BhnGYybN.cjs} +29 -11
  69. package/node_modules/@modelcontextprotocol/server/dist/src-BhnGYybN.cjs.map +1 -0
  70. package/node_modules/@modelcontextprotocol/server/dist/{src-D-y6h4N7.mjs → src-Cqbh3MYc.mjs} +29 -11
  71. package/node_modules/@modelcontextprotocol/server/dist/src-Cqbh3MYc.mjs.map +1 -0
  72. package/node_modules/@modelcontextprotocol/server/dist/stdio.cjs +2 -2
  73. package/node_modules/@modelcontextprotocol/server/dist/stdio.d.cts +1 -1
  74. package/node_modules/@modelcontextprotocol/server/dist/stdio.d.mts +1 -1
  75. package/node_modules/@modelcontextprotocol/server/dist/stdio.mjs +2 -2
  76. package/node_modules/@modelcontextprotocol/server/package.json +4 -4
  77. package/node_modules/which/CHANGELOG.md +166 -0
  78. package/package.json +3 -3
  79. package/src/version.mjs +1 -1
  80. package/test/r129-sdk-security-baseline.test.mjs +38 -0
  81. package/test/r130-release-security-contract.test.mjs +28 -0
  82. package/test/r59-tool-surface-compat.test.mjs +1 -1
  83. package/test/r74-prepublish-contract.test.mjs +2 -2
  84. package/node_modules/@modelcontextprotocol/client/dist/index-BCtJi0p5.d.mts.map +0 -1
  85. package/node_modules/@modelcontextprotocol/client/dist/index-CEk3qkZM.d.cts.map +0 -1
  86. package/node_modules/@modelcontextprotocol/client/dist/src-D0qEN74R.cjs.map +0 -1
  87. package/node_modules/@modelcontextprotocol/client/dist/src-DDAAhLnO.mjs.map +0 -1
  88. package/node_modules/@modelcontextprotocol/server/dist/createMcpHandler-BLVe3qmU.d.cts.map +0 -1
  89. package/node_modules/@modelcontextprotocol/server/dist/createMcpHandler-Bt6U_Fqb.d.mts.map +0 -1
  90. package/node_modules/@modelcontextprotocol/server/dist/mcp-DUcCQSTW.cjs.map +0 -1
  91. package/node_modules/@modelcontextprotocol/server/dist/mcp-Dw2OlZ1f.mjs.map +0 -1
  92. package/node_modules/@modelcontextprotocol/server/dist/src-CgFsfg3E.cjs.map +0 -1
  93. package/node_modules/@modelcontextprotocol/server/dist/src-D-y6h4N7.mjs.map +0 -1
@@ -1,4 +1,4 @@
1
- const require_src = require('./src-CgFsfg3E.cjs');
1
+ const require_src = require('./src-BhnGYybN.cjs');
2
2
  const require_cfWorkerProvider = require('./cfWorkerProvider-BwbPzsdI.cjs');
3
3
 
4
4
  //#region src/shimsWorkerd.ts
@@ -1,4 +1,4 @@
1
- import { n as preloadSchemas } from "./src-D-y6h4N7.mjs";
1
+ import { n as preloadSchemas } from "./src-Cqbh3MYc.mjs";
2
2
  import { t as CfWorkerJsonSchemaValidator } from "./cfWorkerProvider-p3WaZPqB.mjs";
3
3
 
4
4
  //#region src/shimsWorkerd.ts
@@ -3165,7 +3165,7 @@ function build() {
3165
3165
  const subscriptionsListenParamsShape = { notifications: SubscriptionFilterSchema$1 };
3166
3166
  const SubscriptionsListenRequestSchema$1 = wireRequest("subscriptions/listen", subscriptionsListenParamsShape);
3167
3167
  /**
3168
- * Anchor SubscriptionsListenResultMeta — required subscriptionId stamp on
3168
+ * Anchor SubscriptionsListenResultMetaObject — required subscriptionId stamp on
3169
3169
  * the graceful-close result. Extends `ResultMetaObject` since spec PR
3170
3170
  * #3002 (composed, so the serverInfo key and its leniency stay single-sourced).
3171
3171
  */
@@ -3438,7 +3438,8 @@ function build() {
3438
3438
  ListResourceTemplatesResultResponseSchema: wireResultResponse(ListResourceTemplatesResultSchema$1),
3439
3439
  ReadResourceResultResponseSchema: wireResultResponse(zod_v4.union([ReadResourceResultSchema$1, InputRequiredResultSchema])),
3440
3440
  CompleteResultResponseSchema: wireResultResponse(CompleteResultSchema$1),
3441
- DiscoverResultResponseSchema: wireResultResponse(DiscoverResultSchema$1)
3441
+ DiscoverResultResponseSchema: wireResultResponse(DiscoverResultSchema$1),
3442
+ SubscriptionsListenResultResponseSchema: wireResultResponse(SubscriptionsListenResultSchema$1)
3442
3443
  };
3443
3444
  }
3444
3445
  let memo;
@@ -4100,6 +4101,8 @@ const rev2026Codec = {
4100
4101
  const rawInputRequests = raw["inputRequests"];
4101
4102
  const inputRequests = isPlainObject$4(rawInputRequests) ? rawInputRequests : {};
4102
4103
  const requestState = raw["requestState"];
4104
+ const metaParse = raw["_meta"] === void 0 ? void 0 : buildSchemas2026().ResultMetaSchema.safeParse(raw["_meta"]);
4105
+ const meta = metaParse?.success ? metaParse.data : void 0;
4103
4106
  if (Object.keys(inputRequests).length === 0 && typeof requestState !== "string") return {
4104
4107
  kind: "invalid",
4105
4108
  error: new SdkError(SdkErrorCode.InvalidResult, `Invalid result for ${method}: input_required carries neither inputRequests nor requestState (every input_required result must include at least one of the two)`, {
@@ -4110,7 +4113,8 @@ const rev2026Codec = {
4110
4113
  return {
4111
4114
  kind: "input_required",
4112
4115
  inputRequests,
4113
- ...typeof requestState === "string" && { requestState }
4116
+ ...typeof requestState === "string" && { requestState },
4117
+ ...meta !== void 0 && { _meta: meta }
4114
4118
  };
4115
4119
  }
4116
4120
  if (rawResultType !== "complete") return {
@@ -4218,6 +4222,10 @@ function isSpecRequestMethod(method) {
4218
4222
  function isSpecNotificationMethod(method) {
4219
4223
  return ALL_CODECS.some((codec) => codec.hasNotificationMethod(method));
4220
4224
  }
4225
+ /** The names SEP-2663 re-defines for the Tasks extension on the era that removed them from core. */
4226
+ function isExtensionReusedRequestMethod(method) {
4227
+ return method === "tasks/get" || method === "tasks/cancel";
4228
+ }
4221
4229
  const ALL_CODECS = [rev2025Codec, rev2026Codec];
4222
4230
 
4223
4231
  //#endregion
@@ -5624,13 +5632,14 @@ function buildInputRequired(spec) {
5624
5632
  * @example Write-once tool requesting confirmation
5625
5633
  * ```ts
5626
5634
  * server.registerTool('deploy', { inputSchema: z.object({ env: z.string() }) }, async ({ env }, ctx) => {
5627
- * const confirmed = acceptedContent<{ confirm: boolean }>(ctx.mcpReq.inputResponses, 'confirm');
5628
- * if (!confirmed) {
5635
+ * const confirmationSchema = z.object({ confirm: z.boolean() });
5636
+ * const confirmed = acceptedContent(ctx.mcpReq.inputResponses, 'confirm', confirmationSchema);
5637
+ * if (confirmed?.confirm !== true) {
5629
5638
  * return inputRequired({
5630
5639
  * inputRequests: {
5631
5640
  * confirm: inputRequired.elicit({
5632
5641
  * message: `Deploy to ${env}?`,
5633
- * requestedSchema: { type: 'object', properties: { confirm: { type: 'boolean' } }, required: ['confirm'] }
5642
+ * requestedSchema: confirmationSchema
5634
5643
  * })
5635
5644
  * }
5636
5645
  * });
@@ -6191,6 +6200,8 @@ var Protocol = class {
6191
6200
  _transport;
6192
6201
  _requestMessageId = 0;
6193
6202
  _requestHandlers = /* @__PURE__ */ new Map();
6203
+ /** Methods registered with an explicit schema; the era gate in `_onrequest` reads it for the Tasks extension names. */
6204
+ _customSchemaRequestMethods = /* @__PURE__ */ new Set();
6194
6205
  _requestHandlerAbortControllers = /* @__PURE__ */ new Map();
6195
6206
  _notificationHandlers = /* @__PURE__ */ new Map();
6196
6207
  _responseHandlers = /* @__PURE__ */ new Map();
@@ -6472,7 +6483,7 @@ var Protocol = class {
6472
6483
  return;
6473
6484
  }
6474
6485
  }
6475
- if (isSpecRequestMethod(request.method) && !codec.hasRequestMethod(request.method)) {
6486
+ if (isSpecRequestMethod(request.method) && !codec.hasRequestMethod(request.method) && !(isExtensionReusedRequestMethod(request.method) && this._customSchemaRequestMethods.has(request.method))) {
6476
6487
  sendErrorResponse(ProtocolErrorCode.MethodNotFound, "Method not found");
6477
6488
  return;
6478
6489
  }
@@ -6605,8 +6616,11 @@ var Protocol = class {
6605
6616
  }
6606
6617
  request(request, schemaOrOptions, maybeOptions) {
6607
6618
  const codec = this._resolveOutboundCodec(request.method);
6619
+ if (isStandardSchema(schemaOrOptions)) {
6620
+ if (!isExtensionReusedRequestMethod(request.method)) this._assertOutboundRequestInEra(codec, request.method);
6621
+ return this._requestWithSchemaViaCodec(codec, request, schemaOrOptions, maybeOptions);
6622
+ }
6608
6623
  this._assertOutboundRequestInEra(codec, request.method);
6609
- if (isStandardSchema(schemaOrOptions)) return this._requestWithSchemaViaCodec(codec, request, schemaOrOptions, maybeOptions);
6610
6624
  const validate = codecResultValidator(codec, request.method);
6611
6625
  if (validate === void 0) throw new TypeError(`'${request.method}' is not a spec method; pass a result schema as the second argument to request().`);
6612
6626
  return this._requestWithSchemaViaCodec(codec, request, validate, schemaOrOptions);
@@ -6799,7 +6813,7 @@ var Protocol = class {
6799
6813
  * Emits a notification, which is a one-way message that does not expect a response.
6800
6814
  */
6801
6815
  async notification(notification, options) {
6802
- return this._notificationViaCodec(this._resolveOutboundCodec(notification.method), notification, options);
6816
+ return await this._notificationViaCodec(this._resolveOutboundCodec(notification.method), notification, options);
6803
6817
  }
6804
6818
  /**
6805
6819
  * The notification funnel proper, keyed by the resolved era codec —
@@ -6850,6 +6864,8 @@ var Protocol = class {
6850
6864
  return maybeHandler(parsed.data, ctx);
6851
6865
  };
6852
6866
  else throw new TypeError("setRequestHandler: handler is required");
6867
+ if (typeof schemasOrHandler === "function") this._customSchemaRequestMethods.delete(method);
6868
+ else this._customSchemaRequestMethods.add(method);
6853
6869
  this._requestHandlers.set(method, this._wrapHandler(method, stored));
6854
6870
  }
6855
6871
  /**
@@ -6878,6 +6894,7 @@ var Protocol = class {
6878
6894
  */
6879
6895
  removeRequestHandler(method) {
6880
6896
  this._requestHandlers.delete(method);
6897
+ this._customSchemaRequestMethods.delete(method);
6881
6898
  }
6882
6899
  /**
6883
6900
  * Asserts that a request handler has not already been set for the given method, in preparation for a new one being automatically installed.
@@ -6971,7 +6988,8 @@ function manualInputRequiredValue(decoded) {
6971
6988
  return {
6972
6989
  resultType: "input_required",
6973
6990
  inputRequests: decoded.inputRequests,
6974
- ...decoded.requestState !== void 0 && { requestState: decoded.requestState }
6991
+ ...decoded.requestState !== void 0 && { requestState: decoded.requestState },
6992
+ ...decoded._meta !== void 0 && { _meta: decoded._meta }
6975
6993
  };
6976
6994
  }
6977
6995
 
@@ -8179,4 +8197,4 @@ Object.defineProperty(exports, 'withRequestStateValue', {
8179
8197
  return withRequestStateValue;
8180
8198
  }
8181
8199
  });
8182
- //# sourceMappingURL=src-CgFsfg3E.cjs.map
8200
+ //# sourceMappingURL=src-BhnGYybN.cjs.map