deadbyte-mcp 0.15.49 → 0.15.50

package/node_modules/@modelcontextprotocol/client/dist/index.d.mts

@@ -1,8 +1,99 @@
-import { $ as withInputRequired, $i as TRACESTATE_META_KEY, $n as Notification, $r as SetLevelRequest, $t as GetTaskResult, A as SpecTypes, Ai as UnsubscribeRequest, An as ListPromptsRequest, Ar as RequestTypeMap, At as CreateMessageRequestParamsWithTools, B as isJSONRPCNotification, Bi as INVALID_PARAMS, Bn as ListToolsRequest, Br as Result, Bt as ElicitRequestURLParams, C as ServerContext, Ca as StoredOAuthTokens, Ci as Tool, Cn as JSONRPCResponse, Cr as Request, Ct as CompleteRequestPrompt, D as TransportSendOptions, Di as ToolListChangedNotification, Dn as ListChangedCallback, Dr as RequestMetaObject, Dt as CreateMessageRequest, E as Transport, Ei as ToolExecution, En as LegacyTitledEnumSchema, Er as RequestMetaEnvelope, Et as ContentBlock, F as isCallToolResult, Fi as BAGGAGE_META_KEY, Fn as ListResourcesResult, Fr as ResourceRequestParams, Ft as DiscoverRequest, G as parseJSONRPCMessage, Gi as METHOD_NOT_FOUND, Gn as MessageClassification, Gr as RootsListChangedNotification, Gt as EmptyResult, H as isJSONRPCResponse, Hi as JSONRPC_VERSION, Hn as LoggingLevel, Hr as ResultTypeMap, Ht as ElicitationCompleteNotification, I as isInitializeRequest, Ii as CLIENT_CAPABILITIES_META_KEY, In as ListRootsRequest, Ir as ResourceTemplateReference, It as DiscoverResult, J as ResourceNotFoundError, Ji as RELATED_TASK_META_KEY, Jn as MethodNotFoundError, Jr as SamplingMessageContentBlock, Jt as GetPromptRequestParams, K as MissingRequiredClientCapabilityError, Ki as PARSE_ERROR, Kn as MessageExtraInfo, Kr as SamplingContent, Kt as EnumSchema, L as isInitializedNotification, Li as CLIENT_INFO_META_KEY, Ln as ListRootsResult, Lr as ResourceTemplateType, Lt as ElicitRequest, M as specTypeSchemas, Mi as UnsupportedProtocolVersionErrorData, Mn as ListResourceTemplatesRequest, Mr as ResourceContents, Mt as CreateMessageResultWithTools, N as assertCompleteRequestPrompt, Ni as UntitledMultiSelectEnumSchema, Nn as ListResourceTemplatesResult, Nr as ResourceLink, Nt as CreateTaskResult, O as createFetchWithInit, Oi as ToolResultContent, On as ListChangedHandlers, Or as RequestMethod, Ot as CreateMessageRequestParams, P as assertCompleteRequestResourceTemplate, Pi as UntitledSingleSelectEnumSchema, Pn as ListResourcesRequest, Pr as ResourceListChangedNotification, Pt as Cursor, Q as InputRequiredOptions, Qi as TRACEPARENT_META_KEY, Qn as MultiSelectEnumSchema, Qr as ServerResult, Qt as GetTaskRequest, R as isInputRequiredResult, Ri as DEFAULT_NEGOTIATED_PROTOCOL_VERSION, Rn as ListTasksRequest, Rr as ResourceUpdatedNotification, Rt as ElicitRequestFormParams, S as RequestStateAccessor, Sa as StoredOAuthClientInformation, Si as TitledSingleSelectEnumSchema, Sn as JSONRPCRequest, Sr as RelatedTaskMetadata, St as CompleteRequestParams, T as FetchLike, Ti as ToolChoice, Tn as JSONValue, Tr as RequestMeta, Tt as CompleteResult, U as isJSONRPCResultResponse, Ui as LATEST_PROTOCOL_VERSION, Un as LoggingMessageNotification, Ur as Role, Ut as ElicitationCompleteNotificationParams, V as isJSONRPCRequest, Vi as INVALID_REQUEST, Vn as ListToolsResult, Vr as ResultMetaObject, Vt as ElicitResult, W as isTaskAugmentedRequestParams, Wi as LOG_LEVEL_META_KEY, Wn as LoggingMessageNotificationParams, Wr as Root, Wt as EmbeddedResource, X as UrlElicitationRequiredError, Xi as SUBSCRIPTION_ID_META_KEY, Xn as ModelHint, Xr as ServerNotification, Xt as GetTaskPayloadRequest, Y as UnsupportedProtocolVersionError, Yi as SERVER_INFO_META_KEY, Yn as MissingRequiredClientCapabilityErrorData, Yr as ServerCapabilities, Yt as GetPromptResult, Z as ProtocolErrorCode, Zi as SUPPORTED_PROTOCOL_VERSIONS, Zn as ModelPreferences, Zr as ServerRequest, Zt as GetTaskPayloadResult, _ as ProgressCallback, _a as OAuthProtectedResourceMetadata, _i as TaskStatusNotification, _n as JSONArray, _r as PromptMessage, _t as ClientNotification, a as ReadBuffer, aa as SdkHttpErrorData, ai as SubscriptionFilter, an as InitializeRequest, ar as PaginatedRequestParams, at as AuthInfo, b as RequestHandlerSchemas, ba as OpenIdProviderDiscoveryMetadata, bi as TextResourceContents, bn as JSONRPCMessage, br as ReadResourceRequestParams, bt as CompatibilityCallToolResult, c as serializeMessage, ca as AuthorizationServerMetadata, ci as SubscriptionsListenRequest, cn as InitializedNotification, cr as PingRequest, ct as BooleanSchema, d as isJsonContentType, da as OAuthClientInformationFull, di as SubscriptionsListenResultMeta, dn as InputRequiredResult, dr as ProgressNotification, dt as CallToolResult, ea as checkResourceAllowed, ei as SetLevelRequestParams, en as HandlerResultTypeMap, er as NotificationMethod, et as StandardSchemaV1, f as BaseContext, fa as OAuthClientInformationMixed, fi as Task, fn as InputResponse, fr as ProgressNotificationParams, ft as CancelTaskRequest, g as NotificationOptions, ga as OAuthMetadata, gi as TaskStatus, gn as InvalidRequestError, gr as PromptListChangedNotification, gt as ClientCapabilities, h as NonCompleteResultFlow, ha as OAuthErrorResponse, hi as TaskMetadata, hn as InvalidParamsError, hr as PromptArgument, ht as CancelledNotificationParams, i as Variables, ia as SdkHttpError, ii as SubscribeRequestParams, in as Implementation, ir as PaginatedRequest, it as AudioContent, j as isSpecType, ji as UnsubscribeRequestParams, jn as ListPromptsResult, jr as Resource, jt as CreateMessageResult, k as SpecTypeName, ki as ToolUseContent, kn as ListChangedOptions, kr as RequestParams, kt as CreateMessageRequestParamsBase, l as ProtocolEra, la as IdJagTokenExchangeResponse, li as SubscriptionsListenRequestParams, ln as InputRequest, lr as PrimitiveSchemaDefinition, lt as CallToolRequest, m as DEFAULT_REQUEST_TIMEOUT_MSEC, ma as OAuthClientRegistrationError, mi as TaskCreationParams, mn as InternalError, mr as Prompt, mt as CancelledNotification, n as InMemoryTransport, na as SdkError, ni as StringSchema, nn as Icons, nr as NotificationTypeMap, nt as StandardSchemaWithJSON, o as STDIO_DEFAULT_MAX_BUFFER_SIZE, oa as OAuthError, oi as SubscriptionsAcknowledgedNotification, on as InitializeRequestParams, or as PaginatedResult, ot as BaseMetadata, p as ClientContext, pa as OAuthClientMetadata, pi as TaskAugmentedRequestParams, pn as InputResponses, pr as ProgressToken, pt as CancelTaskResult, q as ProtocolError, qi as PROTOCOL_VERSION_META_KEY, qn as MetaObject, qr as SamplingMessage, qt as GetPromptRequest, r as UriTemplate, ra as SdkErrorCode, ri as SubscribeRequest, rn as ImageContent, rr as NumberSchema, rt as Annotations, s as deserializeMessage, sa as OAuthErrorCode, si as SubscriptionsAcknowledgedNotificationParams, sn as InitializeResult, sr as ParseError, st as BlobResourceContents, t as preloadSchemas, ta as resourceUrlFromServerUrl, ti as SingleSelectEnumSchema, tn as Icon, tr as NotificationParams, tt as StandardSchemaV1Sync, u as getDisplayName, ua as OAuthClientInformation, ui as SubscriptionsListenResult, un as InputRequests, ur as Progress, ut as CallToolRequestParams, v as Protocol, va as OAuthTokenRevocationRequest, vi as TaskStatusNotificationParams, vn as JSONObject, vr as PromptReference, vt as ClientRequest, w as mergeCapabilities, wi as ToolAnnotations, wn as JSONRPCResultResponse, wr as RequestId, wt as CompleteRequestResourceTemplate, x as RequestOptions, xa as OpenIdProviderMetadata, xi as TitledMultiSelectEnumSchema, xn as JSONRPCNotification, xr as ReadResourceResult, xt as CompleteRequest, y as ProtocolOptions, ya as OAuthTokens, yi as TextContent, yn as JSONRPCErrorResponse, yr as ReadResourceRequest, yt as ClientResult, z as isJSONRPCErrorResponse, zi as INTERNAL_ERROR, zn as ListTasksResult, zr as ResourceUpdatedNotificationParams, zt as ElicitRequestParams } from "./index-BCtJi0p5.mjs";
+import { $ as withInputRequired, $i as TRACESTATE_META_KEY, $n as Notification, $r as SetLevelRequest, $t as GetTaskResult, A as SpecTypes, Ai as UnsubscribeRequest, An as ListPromptsRequest, Ar as RequestTypeMap, At as CreateMessageRequestParamsWithTools, B as isJSONRPCNotification, Bi as INVALID_PARAMS, Bn as ListToolsRequest, Br as Result, Bt as ElicitRequestURLParams, C as ServerContext, Ca as StoredOAuthTokens, Ci as Tool, Cn as JSONRPCResponse, Cr as Request, Ct as CompleteRequestPrompt, D as TransportSendOptions, Di as ToolListChangedNotification, Dn as ListChangedCallback, Dr as RequestMetaObject, Dt as CreateMessageRequest, E as Transport, Ei as ToolExecution, En as LegacyTitledEnumSchema, Er as RequestMetaEnvelope, Et as ContentBlock, F as isCallToolResult, Fi as BAGGAGE_META_KEY, Fn as ListResourcesResult, Fr as ResourceRequestParams, Ft as DiscoverRequest, G as parseJSONRPCMessage, Gi as METHOD_NOT_FOUND, Gn as MessageClassification, Gr as RootsListChangedNotification, Gt as EmptyResult, H as isJSONRPCResponse, Hi as JSONRPC_VERSION, Hn as LoggingLevel, Hr as ResultTypeMap, Ht as ElicitationCompleteNotification, I as isInitializeRequest, Ii as CLIENT_CAPABILITIES_META_KEY, In as ListRootsRequest, Ir as ResourceTemplateReference, It as DiscoverResult, J as ResourceNotFoundError, Ji as RELATED_TASK_META_KEY, Jn as MethodNotFoundError, Jr as SamplingMessageContentBlock, Jt as GetPromptRequestParams, K as MissingRequiredClientCapabilityError, Ki as PARSE_ERROR, Kn as MessageExtraInfo, Kr as SamplingContent, Kt as EnumSchema, L as isInitializedNotification, Li as CLIENT_INFO_META_KEY, Ln as ListRootsResult, Lr as ResourceTemplateType, Lt as ElicitRequest, M as specTypeSchemas, Mi as UnsupportedProtocolVersionErrorData, Mn as ListResourceTemplatesRequest, Mr as ResourceContents, Mt as CreateMessageResultWithTools, N as assertCompleteRequestPrompt, Ni as UntitledMultiSelectEnumSchema, Nn as ListResourceTemplatesResult, Nr as ResourceLink, Nt as CreateTaskResult, O as createFetchWithInit, Oi as ToolResultContent, On as ListChangedHandlers, Or as RequestMethod, Ot as CreateMessageRequestParams, P as assertCompleteRequestResourceTemplate, Pi as UntitledSingleSelectEnumSchema, Pn as ListResourcesRequest, Pr as ResourceListChangedNotification, Pt as Cursor, Q as InputRequiredOptions, Qi as TRACEPARENT_META_KEY, Qn as MultiSelectEnumSchema, Qr as ServerResult, Qt as GetTaskRequest, R as isInputRequiredResult, Ri as DEFAULT_NEGOTIATED_PROTOCOL_VERSION, Rn as ListTasksRequest, Rr as ResourceUpdatedNotification, Rt as ElicitRequestFormParams, S as RequestStateAccessor, Sa as StoredOAuthClientInformation, Si as TitledSingleSelectEnumSchema, Sn as JSONRPCRequest, Sr as RelatedTaskMetadata, St as CompleteRequestParams, T as FetchLike, Ti as ToolChoice, Tn as JSONValue, Tr as RequestMeta, Tt as CompleteResult, U as isJSONRPCResultResponse, Ui as LATEST_PROTOCOL_VERSION, Un as LoggingMessageNotification, Ur as Role, Ut as ElicitationCompleteNotificationParams, V as isJSONRPCRequest, Vi as INVALID_REQUEST, Vn as ListToolsResult, Vr as ResultMetaObject, Vt as ElicitResult, W as isTaskAugmentedRequestParams, Wi as LOG_LEVEL_META_KEY, Wn as LoggingMessageNotificationParams, Wr as Root, Wt as EmbeddedResource, X as UrlElicitationRequiredError, Xi as SUBSCRIPTION_ID_META_KEY, Xn as ModelHint, Xr as ServerNotification, Xt as GetTaskPayloadRequest, Y as UnsupportedProtocolVersionError, Yi as SERVER_INFO_META_KEY, Yn as MissingRequiredClientCapabilityErrorData, Yr as ServerCapabilities, Yt as GetPromptResult, Z as ProtocolErrorCode, Zi as SUPPORTED_PROTOCOL_VERSIONS, Zn as ModelPreferences, Zr as ServerRequest, Zt as GetTaskPayloadResult, _ as ProgressCallback, _a as OAuthProtectedResourceMetadata, _i as TaskStatusNotification, _n as JSONArray, _r as PromptMessage, _t as ClientNotification, a as ReadBuffer, aa as SdkHttpErrorData, ai as SubscriptionFilter, an as InitializeRequest, ar as PaginatedRequestParams, at as AuthInfo, b as RequestHandlerSchemas, ba as OpenIdProviderDiscoveryMetadata, bi as TextResourceContents, bn as JSONRPCMessage, br as ReadResourceRequestParams, bt as CompatibilityCallToolResult, c as serializeMessage, ca as AuthorizationServerMetadata, ci as SubscriptionsListenRequest, cn as InitializedNotification, cr as PingRequest, ct as BooleanSchema, d as isJsonContentType, da as OAuthClientInformationFull, di as SubscriptionsListenResultMeta, dn as InputRequiredResult, dr as ProgressNotification, dt as CallToolResult, ea as checkResourceAllowed, ei as SetLevelRequestParams, en as HandlerResultTypeMap, er as NotificationMethod, et as StandardSchemaV1, f as BaseContext, fa as OAuthClientInformationMixed, fi as Task, fn as InputResponse, fr as ProgressNotificationParams, ft as CancelTaskRequest, g as NotificationOptions, ga as OAuthMetadata, gi as TaskStatus, gn as InvalidRequestError, gr as PromptListChangedNotification, gt as ClientCapabilities, h as NonCompleteResultFlow, ha as OAuthErrorResponse, hi as TaskMetadata, hn as InvalidParamsError, hr as PromptArgument, ht as CancelledNotificationParams, i as Variables, ia as SdkHttpError, ii as SubscribeRequestParams, in as Implementation, ir as PaginatedRequest, it as AudioContent, j as isSpecType, ji as UnsubscribeRequestParams, jn as ListPromptsResult, jr as Resource, jt as CreateMessageResult, k as SpecTypeName, ki as ToolUseContent, kn as ListChangedOptions, kr as RequestParams, kt as CreateMessageRequestParamsBase, l as ProtocolEra, la as IdJagTokenExchangeResponse, li as SubscriptionsListenRequestParams, ln as InputRequest, lr as PrimitiveSchemaDefinition, lt as CallToolRequest, m as DEFAULT_REQUEST_TIMEOUT_MSEC, ma as OAuthClientRegistrationError, mi as TaskCreationParams, mn as InternalError, mr as Prompt, mt as CancelledNotification, n as InMemoryTransport, na as SdkError, ni as StringSchema, nn as Icons, nr as NotificationTypeMap, nt as StandardSchemaWithJSON, o as STDIO_DEFAULT_MAX_BUFFER_SIZE, oa as OAuthError, oi as SubscriptionsAcknowledgedNotification, on as InitializeRequestParams, or as PaginatedResult, ot as BaseMetadata, p as ClientContext, pa as OAuthClientMetadata, pi as TaskAugmentedRequestParams, pn as InputResponses, pr as ProgressToken, pt as CancelTaskResult, q as ProtocolError, qi as PROTOCOL_VERSION_META_KEY, qn as MetaObject, qr as SamplingMessage, qt as GetPromptRequest, r as UriTemplate, ra as SdkErrorCode, ri as SubscribeRequest, rn as ImageContent, rr as NumberSchema, rt as Annotations, s as deserializeMessage, sa as OAuthErrorCode, si as SubscriptionsAcknowledgedNotificationParams, sn as InitializeResult, sr as ParseError, st as BlobResourceContents, t as preloadSchemas, ta as resourceUrlFromServerUrl, ti as SingleSelectEnumSchema, tn as Icon, tr as NotificationParams, tt as StandardSchemaV1Sync, u as getDisplayName, ua as OAuthClientInformation, ui as SubscriptionsListenResult, un as InputRequests, ur as Progress, ut as CallToolRequestParams, v as Protocol, va as OAuthTokenRevocationRequest, vi as TaskStatusNotificationParams, vn as JSONObject, vr as PromptReference, vt as ClientRequest, w as mergeCapabilities, wi as ToolAnnotations, wn as JSONRPCResultResponse, wr as RequestId, wt as CompleteRequestResourceTemplate, x as RequestOptions, xa as OpenIdProviderMetadata, xi as TitledMultiSelectEnumSchema, xn as JSONRPCNotification, xr as ReadResourceResult, xt as CompleteRequest, y as ProtocolOptions, ya as OAuthTokens, yi as TextContent, yn as JSONRPCErrorResponse, yr as ReadResourceRequest, yt as ClientResult, z as isJSONRPCErrorResponse, zi as INTERNAL_ERROR, zn as ListTasksResult, zr as ResourceUpdatedNotificationParams, zt as ElicitRequestParams } from "./index-B-4n9P0J.mjs";
 import { i as jsonSchemaValidator, n as JsonSchemaValidator, r as JsonSchemaValidatorResult, t as JsonSchemaType } from "./types-mS0yxCL0.mjs";
 import { ErrorEvent, EventSourceInit } from "eventsource";
-import { CryptoKey, JWK } from "jose";
 
+//#region ../../node_modules/.pnpm/jose@6.2.2/node_modules/jose/dist/types/types.d.ts
+/** Generic JSON Web Key Parameters. */
+interface JWKParameters {
+  /** JWK "kty" (Key Type) Parameter */
+  kty?: string;
+  /**
+   * JWK "alg" (Algorithm) Parameter
+   *
+   * @see {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}
+   */
+  alg?: string;
+  /** JWK "key_ops" (Key Operations) Parameter */
+  key_ops?: string[];
+  /** JWK "ext" (Extractable) Parameter */
+  ext?: boolean;
+  /** JWK "use" (Public Key Use) Parameter */
+  use?: string;
+  /** JWK "x5c" (X.509 Certificate Chain) Parameter */
+  x5c?: string[];
+  /** JWK "x5t" (X.509 Certificate SHA-1 Thumbprint) Parameter */
+  x5t?: string;
+  /** JWK "x5t#S256" (X.509 Certificate SHA-256 Thumbprint) Parameter */
+  'x5t#S256'?: string;
+  /** JWK "x5u" (X.509 URL) Parameter */
+  x5u?: string;
+  /** JWK "kid" (Key ID) Parameter */
+  kid?: string;
+}
+/**
+ * JSON Web Key ({@link https://www.rfc-editor.org/rfc/rfc7517 JWK}). "RSA", "EC", "OKP", "AKP", and
+ * "oct" key types are supported.
+ *
+ * @see {@link JWK_AKP_Public}
+ * @see {@link JWK_AKP_Private}
+ * @see {@link JWK_OKP_Public}
+ * @see {@link JWK_OKP_Private}
+ * @see {@link JWK_EC_Public}
+ * @see {@link JWK_EC_Private}
+ * @see {@link JWK_RSA_Public}
+ * @see {@link JWK_RSA_Private}
+ * @see {@link JWK_oct}
+ */
+interface JWK extends JWKParameters {
+  /**
+   * - EC JWK "crv" (Curve) Parameter
+   * - OKP JWK "crv" (The Subtype of Key Pair) Parameter
+   */
+  crv?: string;
+  /**
+   * - Private RSA JWK "d" (Private Exponent) Parameter
+   * - Private EC JWK "d" (ECC Private Key) Parameter
+   * - Private OKP JWK "d" (The Private Key) Parameter
+   */
+  d?: string;
+  /** Private RSA JWK "dp" (First Factor CRT Exponent) Parameter */
+  dp?: string;
+  /** Private RSA JWK "dq" (Second Factor CRT Exponent) Parameter */
+  dq?: string;
+  /** RSA JWK "e" (Exponent) Parameter */
+  e?: string;
+  /** Oct JWK "k" (Key Value) Parameter */
+  k?: string;
+  /** RSA JWK "n" (Modulus) Parameter */
+  n?: string;
+  /** Private RSA JWK "p" (First Prime Factor) Parameter */
+  p?: string;
+  /** Private RSA JWK "q" (Second Prime Factor) Parameter */
+  q?: string;
+  /** Private RSA JWK "qi" (First CRT Coefficient) Parameter */
+  qi?: string;
+  /**
+   * - EC JWK "x" (X Coordinate) Parameter
+   * - OKP JWK "x" (The public key) Parameter
+   */
+  x?: string;
+  /** EC JWK "y" (Y Coordinate) Parameter */
+  y?: string;
+  /** AKP JWK "pub" (Public Key) Parameter */
+  pub?: string;
+  /** AKP JWK "priv" (Private key) Parameter */
+  priv?: string;
+}
+/**
+ * {@link !CryptoKey} is a representation of a key/secret available in all supported runtimes. In
+ * addition to the {@link key/import Key Import Functions} you may use the
+ * {@link !SubtleCrypto.importKey} API to obtain a {@link !CryptoKey} from your existing key
+ * material.
+ */
+type CryptoKey = Extract<Awaited<ReturnType<typeof crypto.subtle.generateKey>>, {
+  type: string;
+}>;
+//#endregion
 //#region src/client/dpop.d.ts
 
 /** Asymmetric JWS algorithms usable for a DPoP proof (RFC 9449 §11.6 forbids symmetric algs and `none`). */
@@ -191,10 +282,12 @@ declare class RegistrationRejectedError extends OAuthClientFlowError {
 }
 /**
  * Thrown by the token-exchange and refresh paths when the resolved token
- * endpoint is not `https:` and is not a loopback host (SEP-2207). This is a
- * configuration error — re-authorizing cannot fix it — so it intentionally does
- * **not** extend `OAuthError` and `auth()`'s refresh branch rethrows it instead
- * of falling through to a fresh `/authorize` redirect.
+ * endpoint is not `https:` and is not a loopback host. The MCP authorization
+ * specification requires authorization server endpoints to use HTTPS; loopback
+ * hosts are exempt here for local development. This is a configuration error —
+ * re-authorizing cannot fix it — so it intentionally does **not** extend
+ * `OAuthError` and `auth()`'s refresh branch rethrows it instead of falling
+ * through to a fresh `/authorize` redirect.
  */
 declare class InsecureTokenEndpointError extends OAuthClientFlowError {
   /** The token endpoint URL that was rejected. */
@@ -222,21 +315,25 @@ declare class InsecureTokenEndpointError extends OAuthClientFlowError {
  * `requiredScope`, which appears in the error message).
  */
 /**
- * Thrown by `auth()` on the authorization-code callback leg when the
- * authorization server resolved by discovery differs from the one recorded in
- * `discoveryState()` at redirect time. The `authorization_code` and PKCE
- * `code_verifier` are bound to the AS that minted the code (RFC 7636); sending
- * them to a different AS's token endpoint is a credential-exfiltration vector.
+ * Thrown by `auth()` and `fetchToken()` when the authorization server in use differs
+ * from the one a credential is bound to and the flow cannot simply start over:
  *
- * This is the only runtime check left in the SEP-2352 model — stored tokens and
- * client credentials are protected structurally by the `issuer` stamp instead.
+ * - on the authorization-code callback leg, when it differs from the one recorded
+ *   in `discoveryState()` at redirect time — the `authorization_code` and PKCE
+ *   `code_verifier` are bound to the AS that minted the code (RFC 7636);
+ * - for client information whose `issuer` stamp names a different authorization
+ *   server on a provider that cannot re-register (no `saveClientInformation()`,
+ *   e.g. the bundled static-credential providers); `fetchToken()` throws for any provider.
+ *
+ * Stored tokens and re-registrable client information are protected structurally
+ * by the `issuer` stamp instead (they read back as absent).
  */
 declare class AuthorizationServerMismatchError extends OAuthClientFlowError {
-  /** The issuer recorded in `discoveryState()` when the authorization redirect was issued. */
+  /** The issuer the credential is bound to (recorded in `discoveryState()` at redirect time, or stamped on the client information). */
   readonly recordedIssuer: string;
   /** The issuer resolved by discovery on this call. */
   readonly currentIssuer: string;
-  constructor(/** The issuer recorded in `discoveryState()` when the authorization redirect was issued. */
+  constructor(/** The issuer the credential is bound to (recorded in `discoveryState()` at redirect time, or stamped on the client information). */
   recordedIssuer: string, /** The issuer resolved by discovery on this call. */
   currentIssuer: string);
 }
@@ -295,7 +392,8 @@ interface AuthProvider {
   token(): Promise<string | undefined>;
   /**
    * Called when the server responds with 401. If provided, the transport will
-   * await this, then retry the request once. If the retry also gets 401, or if
+   * await this, then retry the request once. If the retry also gets 401, the
+   * transport throws `SdkHttpError` (`SdkErrorCode.ClientHttpAuthentication`). If
    * this method is not provided, the transport throws {@linkcode UnauthorizedError}.
    *
    * Implementations should refresh tokens, re-authenticate, etc. — whatever is
@@ -655,8 +753,11 @@ type ClientAuthMethod = 'client_secret_basic' | 'client_secret_post' | 'none';
  */
 declare function selectClientAuthMethod(clientInformation: OAuthClientInformationMixed, supportedMethods: string[]): ClientAuthMethod;
 /**
- * SEP-2207: refuse to send credentials to a non-TLS, non-loopback token endpoint.
- * Throws {@linkcode InsecureTokenEndpointError}. Loopback hosts are exempt.
+ * Refuse to send credentials to a non-TLS token endpoint. The MCP authorization
+ * specification requires authorization server endpoints to use HTTPS. Loopback
+ * hosts are exempt here for local development.
+ *
+ * @throws {@linkcode InsecureTokenEndpointError} if the endpoint is insecure.
  */
 declare function assertSecureTokenEndpoint(tokenEndpoint: string | URL): URL;
 /**
@@ -722,7 +823,8 @@ interface AuthOptions {
   /**
    * Opt-out for the RFC 8414 §3.3 issuer-echo check during authorization
    * server discovery. Disabling it is **security-weakening** and intended only
-   * for authorization servers known to publish a mismatched `issuer`.
+   * for authorization servers known to publish a mismatched `issuer`. The unchecked
+   * `issuer` is also what `expectedIssuer` and stored `issuer` stamps are compared with.
    *
    * @default false
    */
@@ -1088,10 +1190,17 @@ declare function fetchToken(provider: OAuthClientProvider, authorizationServerUr
  * consistently across both DCR and the subsequent authorization request.
  *
  * @deprecated Dynamic Client Registration is deprecated as of protocol version
- * 2026-07-28 (SEP-2577) in favor of Client ID Metadata Documents (SEP-991).
- * Remains functional during the deprecation window (at least twelve months).
- * Prefer a CIMD URL `client_id` when the authorization server advertises
- * `client_id_metadata_document_supported`; the SDK already gates on this for you.
+ * 2026-07-28 in favor of Client ID Metadata Documents (SEP-991); the deprecation
+ * landed via spec PR
+ * {@link https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2858 | modelcontextprotocol#2858}
+ * (SEP-2577 is the separate roots/sampling/logging deprecation). Remains
+ * functional during the deprecation window — at least twelve months under the
+ * feature lifecycle policy (SEP-2596), so 2027-07-28 is the earliest possible
+ * removal date. Prefer a CIMD URL `client_id` when the authorization server
+ * advertises `client_id_metadata_document_supported`: the built-in `auth()` flow
+ * skips registration for you when that capability is advertised AND your
+ * provider supplies `clientMetadataUrl`, but `registerClient` itself does not
+ * gate — calling it directly always sends the registration request.
  */
 declare function registerClient(authorizationServerUrl: string | URL, {
   metadata,
@@ -1152,9 +1261,10 @@ interface ClientCredentialsProviderOptions {
   /**
    * The authorization server's `issuer` identifier these credentials were registered with.
    * Stamped onto the stored client information so `auth()`'s SEP-2352 issuer check
-   * refuses to send the credential to any other authorization server. Hosts supplying
-   * static client credentials SHOULD set this; omitting it preserves the legacy
-   * (no-binding) behaviour for back-compat.
+   * refuses to send the credential to any other authorization server.
+   *
+   * Omitting it is deprecated: the credential then goes to whichever authorization server
+   * the MCP server advertises.
    */
   expectedIssuer?: string;
 }
@@ -1168,7 +1278,8 @@ interface ClientCredentialsProviderOptions {
  * ```ts source="./authExtensions.examples.ts#ClientCredentialsProvider_basicUsage"
  * const provider = new ClientCredentialsProvider({
  *     clientId: 'my-client',
- *     clientSecret: 'my-secret'
+ *     clientSecret: 'my-secret',
+ *     expectedIssuer: 'https://auth.example.com'
  * });
  *
  * const transport = new StreamableHTTPClientTransport(serverUrl, {
@@ -1180,6 +1291,10 @@ declare class ClientCredentialsProvider implements OAuthClientProvider {
   private _tokens?;
   private _clientInfo;
   private _clientMetadata;
+  constructor(options: ClientCredentialsProviderOptions & {
+    expectedIssuer: string;
+  });
+  /** @deprecated Pass `expectedIssuer` so the credentials are only sent to that authorization server. */
   constructor(options: ClientCredentialsProviderOptions);
   get redirectUrl(): undefined;
   get clientMetadata(): OAuthClientMetadata;
@@ -1247,7 +1362,8 @@ interface PrivateKeyJwtProviderOptions {
  * const provider = new PrivateKeyJwtProvider({
  *     clientId: 'my-client',
  *     privateKey: pemEncodedPrivateKey,
- *     algorithm: 'RS256'
+ *     algorithm: 'RS256',
+ *     expectedIssuer: 'https://auth.example.com'
  * });
  *
  * const transport = new StreamableHTTPClientTransport(serverUrl, {
@@ -1260,6 +1376,10 @@ declare class PrivateKeyJwtProvider implements OAuthClientProvider {
   private _clientInfo;
   private _clientMetadata;
   addClientAuthentication: AddClientAuthentication;
+  constructor(options: PrivateKeyJwtProviderOptions & {
+    expectedIssuer: string;
+  });
+  /** @deprecated Pass `expectedIssuer` so the credentials are only sent to that authorization server. */
   constructor(options: PrivateKeyJwtProviderOptions);
   get redirectUrl(): undefined;
   get clientMetadata(): OAuthClientMetadata;
@@ -1312,6 +1432,10 @@ declare class StaticPrivateKeyJwtProvider implements OAuthClientProvider {
   private _clientInfo;
   private _clientMetadata;
   addClientAuthentication: AddClientAuthentication;
+  constructor(options: StaticPrivateKeyJwtProviderOptions & {
+    expectedIssuer: string;
+  });
+  /** @deprecated Pass `expectedIssuer` so the credentials are only sent to that authorization server. */
   constructor(options: StaticPrivateKeyJwtProviderOptions);
   get redirectUrl(): undefined;
   get clientMetadata(): OAuthClientMetadata;
@@ -1440,7 +1564,8 @@ interface CrossAppAccessProviderOptions {
  *         return result.jwtAuthGrant;
  *     },
  *     clientId: 'my-mcp-client',
- *     clientSecret: 'my-mcp-secret'
+ *     clientSecret: 'my-mcp-secret',
+ *     expectedIssuer: 'https://auth.example.com'
  * });
  *
  * const transport = new StreamableHTTPClientTransport(serverUrl, {
@@ -1457,6 +1582,10 @@ declare class CrossAppAccessProvider implements OAuthClientProvider {
   private _authorizationServerUrl?;
   private _resourceUrl?;
   private _scope?;
+  constructor(options: CrossAppAccessProviderOptions & {
+    expectedIssuer: string;
+  });
+  /** @deprecated Pass `expectedIssuer` so the credentials are only sent to that authorization server. */
   constructor(options: CrossAppAccessProviderOptions);
   get redirectUrl(): undefined;
   get clientMetadata(): OAuthClientMetadata;
@@ -2359,8 +2488,7 @@ declare class Client extends Protocol<ClientContext> {
    * methods' no-`cursor` auto-aggregate path. Page 1's result object is
    * mutated in place (its items array is extended; `nextCursor` is
    * cleared); page-1 metadata (`ttlMs`, `cacheScope`, `_meta`) is preserved.
-   * A `nextCursor` that repeats stops the walk (defence against a
-   * non-converging server, mcp.d's `drainList` guard);
+   * A page with the same items and `nextCursor` as the previous page ends the walk;
    * {@linkcode ClientOptions.listMaxPages} is a hard cap — hitting it
    * throws, so a partial aggregate is never cached. The
    * captured-generation guard skips the write when a `list_changed` landed
@@ -3034,8 +3162,8 @@ type SSEClientTransportOptions = {
    * {@linkcode AuthProvider.token | token()} is called before every request to obtain the
    * bearer token. When the server responds with 401, {@linkcode AuthProvider.onUnauthorized | onUnauthorized()}
    * is called (if provided) to refresh credentials, then the request is retried once. If
-   * the retry also gets 401, or `onUnauthorized` is not provided, {@linkcode UnauthorizedError}
-   * is thrown.
+   * the retry also gets 401, `SdkHttpError` (`SdkErrorCode.ClientHttpAuthentication`) is thrown.
+   * If `onUnauthorized` is not provided, {@linkcode UnauthorizedError} is thrown.
    *
    * For simple bearer tokens: `{ token: async () => myApiKey }`.
    *
@@ -3071,12 +3199,33 @@ type SSEClientTransportOptions = {
    * `mcp-protocol-version`. A caller-supplied `Authorization` value is therefore only sent
    * while the provider has no token, which lets a static API key fall back to OAuth once
    * the provider obtains one.
+   *
+   * A `redirect` of `'error'` or `'manual'` is passed to fetch as it is for the `POST`
+   * requests that carry messages. For the OAuth requests, and for any other value,
+   * `redirect` is consulted only when
+   * {@linkcode SSEClientTransportOptions.redirectPolicy | redirectPolicy} is `'follow'`. The
+   * request that begins the stream does not read it.
    */
   requestInit?: RequestInit;
   /**
    * Custom fetch implementation used for all network requests.
    */
   fetch?: FetchLike;
+  /**
+   * How a redirect of one of the transport's requests is handled, including the OAuth
+   * requests it makes for {@linkcode SSEClientTransportOptions.authProvider | authProvider}.
+   * The option does not reach requests that a provider makes with a fetch of its own, such as
+   * those of the `assertion` callback of a `CrossAppAccessProvider`.
+   *
+   * - `'same-origin'` (default): a redirect is followed only when it stays within the origin
+   *   of the request and keeps the method, and any other redirect fails the request.
+   * - `'follow'`: redirects are left to the fetch implementation, as in earlier versions. It
+   *   follows them to any origin unless `requestInit.redirect` says otherwise, which the
+   *   request that begins the stream does not read.
+   *
+   * @default 'same-origin'
+   */
+  redirectPolicy?: 'same-origin' | 'follow';
 };
 /**
  * Client transport for SSE: this will connect to a server using Server-Sent Events for receiving
@@ -3097,6 +3246,7 @@ declare class SSEClientTransport implements Transport {
   private _skipIssuerMetadataValidation?;
   private _fetch?;
   private _fetchWithInit;
+  private _redirectPolicy?;
   private _dpop?;
   private _protocolVersion?;
   onclose?: () => void;
@@ -3104,6 +3254,11 @@ declare class SSEClientTransport implements Transport {
   onmessage?: (message: JSONRPCMessage) => void;
   constructor(url: URL, opts?: SSEClientTransportOptions);
   private _last401Response?;
+  private _connectAuthRetried;
+  /** `baseFetch` with redirects handled as `redirectPolicy` says. */
+  private _redirects;
+  /** Error text for a redirect `response` that was not followed, or `undefined` for any other response. */
+  private _unfollowedRedirect;
   private _commonHeaders;
   private _startOrAuth;
   start(): Promise<void>;
@@ -3233,8 +3388,8 @@ type StreamableHTTPClientTransportOptions = {
    * {@linkcode AuthProvider.token | token()} is called before every request to obtain the
    * bearer token. When the server responds with 401, {@linkcode AuthProvider.onUnauthorized | onUnauthorized()}
    * is called (if provided) to refresh credentials, then the request is retried once. If
-   * the retry also gets 401, or `onUnauthorized` is not provided, {@linkcode UnauthorizedError}
-   * is thrown.
+   * the retry also gets 401, `SdkHttpError` (`SdkErrorCode.ClientHttpAuthentication`) is thrown.
+   * If `onUnauthorized` is not provided, {@linkcode UnauthorizedError} is thrown.
    *
    * For simple bearer tokens: `{ token: async () => myApiKey }`.
    *
@@ -3262,12 +3417,31 @@ type StreamableHTTPClientTransportOptions = {
    * token, `mcp-session-id`, and `mcp-protocol-version`. A caller-supplied `Authorization`
    * value is therefore only sent while the provider has no token, which lets a static API
    * key fall back to OAuth once the provider obtains one.
+   *
+   * A `redirect` of `'error'` or `'manual'` is passed to fetch as it is for the POST, GET and
+   * DELETE requests to the server URL. For the OAuth requests, and for any other value,
+   * `redirect` is consulted only when
+   * {@linkcode StreamableHTTPClientTransportOptions.redirectPolicy | redirectPolicy} is `'follow'`.
    */
   requestInit?: RequestInit;
   /**
    * Custom fetch implementation used for all network requests.
    */
   fetch?: FetchLike;
+  /**
+   * How a redirect of one of the transport's requests is handled, including the OAuth
+   * requests it makes for {@linkcode StreamableHTTPClientTransportOptions.authProvider | authProvider}.
+   * The option does not reach requests that a provider makes with a fetch of its own, such as
+   * those of the `assertion` callback of a `CrossAppAccessProvider`.
+   *
+   * - `'same-origin'` (default): a redirect is followed only when it stays within the origin
+   *   of the request and keeps the method, and any other redirect fails the request.
+   * - `'follow'`: redirects are left to the fetch implementation, as in earlier versions. It
+   *   follows them to any origin unless `requestInit.redirect` says otherwise.
+   *
+   * @default 'same-origin'
+   */
+  redirectPolicy?: 'same-origin' | 'follow';
   /**
    * Options to configure the reconnection behavior.
    */
@@ -3338,6 +3512,7 @@ declare class StreamableHTTPClientTransport implements Transport {
   private _skipIssuerMetadataValidation?;
   private _fetch?;
   private _fetchWithInit;
+  private _redirectPolicy?;
   private _sessionId?;
   private _reconnectionOptions;
   private _protocolVersion?;
@@ -3366,6 +3541,10 @@ declare class StreamableHTTPClientTransport implements Transport {
    */
   private _stepUpAuthorize;
   private _stepUpAuthorizeInner;
+  /** `baseFetch` with redirects handled as `redirectPolicy` says. */
+  private _redirects;
+  /** Error text for a redirect `response` that was not followed, or `undefined` for any other response. */
+  private _unfollowedRedirect;
   private _commonHeaders;
   /**
    * Body-derived per-request headers: when an outgoing request carries a