deadbyte-mcp 0.15.49 → 0.15.51
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/MANIFEST.SHA256 +88 -81
- package/PROVENANCE.json +17 -9
- package/README.txt +18 -18
- package/RELEASE.json +379 -368
- package/SBOM.cdx.json +9 -4
- package/TEST-MATRIX.json +17 -2
- package/docs/R130-SDK-SECURITY-PATCH.md +34 -0
- package/docs/R132-MANIFEST-PORTABILITY.md +23 -0
- package/node_modules/@modelcontextprotocol/client/README.md +1 -7
- package/node_modules/@modelcontextprotocol/client/dist/{index-BCtJi0p5.d.mts → index-B-4n9P0J.d.mts} +5 -1
- package/node_modules/@modelcontextprotocol/client/dist/index-B-4n9P0J.d.mts.map +1 -0
- package/node_modules/@modelcontextprotocol/client/dist/{index-CEk3qkZM.d.cts → index-J2FaQ-KY.d.cts} +5 -1
- package/node_modules/@modelcontextprotocol/client/dist/index-J2FaQ-KY.d.cts.map +1 -0
- package/node_modules/@modelcontextprotocol/client/dist/index.cjs +175 -76
- package/node_modules/@modelcontextprotocol/client/dist/index.cjs.map +1 -1
- package/node_modules/@modelcontextprotocol/client/dist/index.d.cts +214 -35
- package/node_modules/@modelcontextprotocol/client/dist/index.d.cts.map +1 -1
- package/node_modules/@modelcontextprotocol/client/dist/index.d.mts +214 -35
- package/node_modules/@modelcontextprotocol/client/dist/index.d.mts.map +1 -1
- package/node_modules/@modelcontextprotocol/client/dist/index.mjs +175 -76
- package/node_modules/@modelcontextprotocol/client/dist/index.mjs.map +1 -1
- package/node_modules/@modelcontextprotocol/client/dist/shimsWorkerd.cjs +1 -1
- package/node_modules/@modelcontextprotocol/client/dist/shimsWorkerd.mjs +1 -1
- package/node_modules/@modelcontextprotocol/client/dist/{src-D0qEN74R.cjs → src-DpAS0jfg.cjs} +125 -11
- package/node_modules/@modelcontextprotocol/client/dist/src-DpAS0jfg.cjs.map +1 -0
- package/node_modules/@modelcontextprotocol/client/dist/{src-DDAAhLnO.mjs → src-WCy6ifGf.mjs} +102 -12
- package/node_modules/@modelcontextprotocol/client/dist/src-WCy6ifGf.mjs.map +1 -0
- package/node_modules/@modelcontextprotocol/client/dist/stdio.cjs +1 -1
- package/node_modules/@modelcontextprotocol/client/dist/stdio.d.cts +1 -1
- package/node_modules/@modelcontextprotocol/client/dist/stdio.d.mts +1 -1
- package/node_modules/@modelcontextprotocol/client/dist/stdio.mjs +1 -1
- package/node_modules/@modelcontextprotocol/client/package.json +5 -5
- package/node_modules/@modelcontextprotocol/core/dist/{auth--n_Yzytt.d.cts → auth-Anm-lwWi.d.mts} +9 -8
- package/node_modules/@modelcontextprotocol/core/dist/{auth--n_Yzytt.d.cts.map → auth-Anm-lwWi.d.mts.map} +1 -1
- package/node_modules/@modelcontextprotocol/core/dist/{auth-CGP0BDVq.mjs → auth-BNDyLTqp.mjs} +5 -3
- package/node_modules/@modelcontextprotocol/core/dist/{auth-CGP0BDVq.mjs.map → auth-BNDyLTqp.mjs.map} +1 -1
- package/node_modules/@modelcontextprotocol/core/dist/{auth-4-zilcqg.cjs → auth-D1CeV_Jr.cjs} +5 -3
- package/node_modules/@modelcontextprotocol/core/dist/{auth-4-zilcqg.cjs.map → auth-D1CeV_Jr.cjs.map} +1 -1
- package/node_modules/@modelcontextprotocol/core/dist/{auth-YUQV3RRv.d.mts → auth-V9XJSCfa.d.cts} +9 -8
- package/node_modules/@modelcontextprotocol/core/dist/{auth-YUQV3RRv.d.mts.map → auth-V9XJSCfa.d.cts.map} +1 -1
- package/node_modules/@modelcontextprotocol/core/dist/index.cjs +1 -1
- package/node_modules/@modelcontextprotocol/core/dist/index.d.cts +1 -1
- package/node_modules/@modelcontextprotocol/core/dist/index.d.mts +1 -1
- package/node_modules/@modelcontextprotocol/core/dist/index.mjs +1 -1
- package/node_modules/@modelcontextprotocol/core/dist/internal.cjs +1 -1
- package/node_modules/@modelcontextprotocol/core/dist/internal.d.cts +1 -1
- package/node_modules/@modelcontextprotocol/core/dist/internal.d.mts +1 -1
- package/node_modules/@modelcontextprotocol/core/dist/internal.mjs +1 -1
- package/node_modules/@modelcontextprotocol/core/package.json +2 -2
- package/node_modules/@modelcontextprotocol/server/README.md +1 -7
- package/node_modules/@modelcontextprotocol/server/dist/{createMcpHandler-Bt6U_Fqb.d.mts → createMcpHandler-D4NN8WsG.d.mts} +35 -13
- package/node_modules/@modelcontextprotocol/server/dist/createMcpHandler-D4NN8WsG.d.mts.map +1 -0
- package/node_modules/@modelcontextprotocol/server/dist/{createMcpHandler-BLVe3qmU.d.cts → createMcpHandler-DZmmlN8e.d.cts} +35 -13
- package/node_modules/@modelcontextprotocol/server/dist/createMcpHandler-DZmmlN8e.d.cts.map +1 -0
- package/node_modules/@modelcontextprotocol/server/dist/index.cjs +32 -5
- package/node_modules/@modelcontextprotocol/server/dist/index.cjs.map +1 -1
- package/node_modules/@modelcontextprotocol/server/dist/index.d.cts +41 -5
- package/node_modules/@modelcontextprotocol/server/dist/index.d.cts.map +1 -1
- package/node_modules/@modelcontextprotocol/server/dist/index.d.mts +41 -5
- package/node_modules/@modelcontextprotocol/server/dist/index.d.mts.map +1 -1
- package/node_modules/@modelcontextprotocol/server/dist/index.mjs +32 -5
- package/node_modules/@modelcontextprotocol/server/dist/index.mjs.map +1 -1
- package/node_modules/@modelcontextprotocol/server/dist/{mcp-DUcCQSTW.cjs → mcp-BumlNux0.cjs} +73 -23
- package/node_modules/@modelcontextprotocol/server/dist/mcp-BumlNux0.cjs.map +1 -0
- package/node_modules/@modelcontextprotocol/server/dist/{mcp-Dw2OlZ1f.mjs → mcp-DIH4cS6P.mjs} +73 -23
- package/node_modules/@modelcontextprotocol/server/dist/mcp-DIH4cS6P.mjs.map +1 -0
- package/node_modules/@modelcontextprotocol/server/dist/shimsWorkerd.cjs +1 -1
- package/node_modules/@modelcontextprotocol/server/dist/shimsWorkerd.mjs +1 -1
- package/node_modules/@modelcontextprotocol/server/dist/{src-CgFsfg3E.cjs → src-BhnGYybN.cjs} +29 -11
- package/node_modules/@modelcontextprotocol/server/dist/src-BhnGYybN.cjs.map +1 -0
- package/node_modules/@modelcontextprotocol/server/dist/{src-D-y6h4N7.mjs → src-Cqbh3MYc.mjs} +29 -11
- package/node_modules/@modelcontextprotocol/server/dist/src-Cqbh3MYc.mjs.map +1 -0
- package/node_modules/@modelcontextprotocol/server/dist/stdio.cjs +2 -2
- package/node_modules/@modelcontextprotocol/server/dist/stdio.d.cts +1 -1
- package/node_modules/@modelcontextprotocol/server/dist/stdio.d.mts +1 -1
- package/node_modules/@modelcontextprotocol/server/dist/stdio.mjs +2 -2
- package/node_modules/@modelcontextprotocol/server/package.json +4 -4
- package/node_modules/which/CHANGELOG.md +166 -0
- package/package.json +3 -3
- package/scripts/npm-prepublish-contract-r74.mjs +8 -2
- package/scripts/release-manifest.mjs +15 -1
- package/src/release-slot.mjs +13 -3
- package/src/version.mjs +1 -1
- package/test/r129-sdk-security-baseline.test.mjs +38 -0
- package/test/r130-release-security-contract.test.mjs +28 -0
- package/test/r131-installed-manifest-boundary.test.mjs +65 -0
- package/test/r132-release-identity.test.mjs +44 -0
- package/test/r59-tool-surface-compat.test.mjs +1 -1
- package/test/r74-prepublish-contract.test.mjs +5 -3
- package/node_modules/@modelcontextprotocol/client/dist/index-BCtJi0p5.d.mts.map +0 -1
- package/node_modules/@modelcontextprotocol/client/dist/index-CEk3qkZM.d.cts.map +0 -1
- package/node_modules/@modelcontextprotocol/client/dist/src-D0qEN74R.cjs.map +0 -1
- package/node_modules/@modelcontextprotocol/client/dist/src-DDAAhLnO.mjs.map +0 -1
- package/node_modules/@modelcontextprotocol/server/dist/createMcpHandler-BLVe3qmU.d.cts.map +0 -1
- package/node_modules/@modelcontextprotocol/server/dist/createMcpHandler-Bt6U_Fqb.d.mts.map +0 -1
- package/node_modules/@modelcontextprotocol/server/dist/mcp-DUcCQSTW.cjs.map +0 -1
- package/node_modules/@modelcontextprotocol/server/dist/mcp-Dw2OlZ1f.mjs.map +0 -1
- package/node_modules/@modelcontextprotocol/server/dist/src-CgFsfg3E.cjs.map +0 -1
- package/node_modules/@modelcontextprotocol/server/dist/src-D-y6h4N7.mjs.map +0 -1
package/node_modules/@modelcontextprotocol/server/dist/{src-D-y6h4N7.mjs → src-Cqbh3MYc.mjs}
RENAMED
|
@@ -3164,7 +3164,7 @@ function build() {
|
|
|
3164
3164
|
const subscriptionsListenParamsShape = { notifications: SubscriptionFilterSchema$1 };
|
|
3165
3165
|
const SubscriptionsListenRequestSchema$1 = wireRequest("subscriptions/listen", subscriptionsListenParamsShape);
|
|
3166
3166
|
/**
|
|
3167
|
-
* Anchor
|
|
3167
|
+
* Anchor SubscriptionsListenResultMetaObject — required subscriptionId stamp on
|
|
3168
3168
|
* the graceful-close result. Extends `ResultMetaObject` since spec PR
|
|
3169
3169
|
* #3002 (composed, so the serverInfo key and its leniency stay single-sourced).
|
|
3170
3170
|
*/
|
|
@@ -3437,7 +3437,8 @@ function build() {
|
|
|
3437
3437
|
ListResourceTemplatesResultResponseSchema: wireResultResponse(ListResourceTemplatesResultSchema$1),
|
|
3438
3438
|
ReadResourceResultResponseSchema: wireResultResponse(z.union([ReadResourceResultSchema$1, InputRequiredResultSchema])),
|
|
3439
3439
|
CompleteResultResponseSchema: wireResultResponse(CompleteResultSchema$1),
|
|
3440
|
-
DiscoverResultResponseSchema: wireResultResponse(DiscoverResultSchema$1)
|
|
3440
|
+
DiscoverResultResponseSchema: wireResultResponse(DiscoverResultSchema$1),
|
|
3441
|
+
SubscriptionsListenResultResponseSchema: wireResultResponse(SubscriptionsListenResultSchema$1)
|
|
3441
3442
|
};
|
|
3442
3443
|
}
|
|
3443
3444
|
let memo;
|
|
@@ -4099,6 +4100,8 @@ const rev2026Codec = {
|
|
|
4099
4100
|
const rawInputRequests = raw["inputRequests"];
|
|
4100
4101
|
const inputRequests = isPlainObject$4(rawInputRequests) ? rawInputRequests : {};
|
|
4101
4102
|
const requestState = raw["requestState"];
|
|
4103
|
+
const metaParse = raw["_meta"] === void 0 ? void 0 : buildSchemas2026().ResultMetaSchema.safeParse(raw["_meta"]);
|
|
4104
|
+
const meta = metaParse?.success ? metaParse.data : void 0;
|
|
4102
4105
|
if (Object.keys(inputRequests).length === 0 && typeof requestState !== "string") return {
|
|
4103
4106
|
kind: "invalid",
|
|
4104
4107
|
error: new SdkError(SdkErrorCode.InvalidResult, `Invalid result for ${method}: input_required carries neither inputRequests nor requestState (every input_required result must include at least one of the two)`, {
|
|
@@ -4109,7 +4112,8 @@ const rev2026Codec = {
|
|
|
4109
4112
|
return {
|
|
4110
4113
|
kind: "input_required",
|
|
4111
4114
|
inputRequests,
|
|
4112
|
-
...typeof requestState === "string" && { requestState }
|
|
4115
|
+
...typeof requestState === "string" && { requestState },
|
|
4116
|
+
...meta !== void 0 && { _meta: meta }
|
|
4113
4117
|
};
|
|
4114
4118
|
}
|
|
4115
4119
|
if (rawResultType !== "complete") return {
|
|
@@ -4217,6 +4221,10 @@ function isSpecRequestMethod(method) {
|
|
|
4217
4221
|
function isSpecNotificationMethod(method) {
|
|
4218
4222
|
return ALL_CODECS.some((codec) => codec.hasNotificationMethod(method));
|
|
4219
4223
|
}
|
|
4224
|
+
/** The names SEP-2663 re-defines for the Tasks extension on the era that removed them from core. */
|
|
4225
|
+
function isExtensionReusedRequestMethod(method) {
|
|
4226
|
+
return method === "tasks/get" || method === "tasks/cancel";
|
|
4227
|
+
}
|
|
4220
4228
|
const ALL_CODECS = [rev2025Codec, rev2026Codec];
|
|
4221
4229
|
|
|
4222
4230
|
//#endregion
|
|
@@ -5623,13 +5631,14 @@ function buildInputRequired(spec) {
|
|
|
5623
5631
|
* @example Write-once tool requesting confirmation
|
|
5624
5632
|
* ```ts
|
|
5625
5633
|
* server.registerTool('deploy', { inputSchema: z.object({ env: z.string() }) }, async ({ env }, ctx) => {
|
|
5626
|
-
* const
|
|
5627
|
-
*
|
|
5634
|
+
* const confirmationSchema = z.object({ confirm: z.boolean() });
|
|
5635
|
+
* const confirmed = acceptedContent(ctx.mcpReq.inputResponses, 'confirm', confirmationSchema);
|
|
5636
|
+
* if (confirmed?.confirm !== true) {
|
|
5628
5637
|
* return inputRequired({
|
|
5629
5638
|
* inputRequests: {
|
|
5630
5639
|
* confirm: inputRequired.elicit({
|
|
5631
5640
|
* message: `Deploy to ${env}?`,
|
|
5632
|
-
* requestedSchema:
|
|
5641
|
+
* requestedSchema: confirmationSchema
|
|
5633
5642
|
* })
|
|
5634
5643
|
* }
|
|
5635
5644
|
* });
|
|
@@ -6190,6 +6199,8 @@ var Protocol = class {
|
|
|
6190
6199
|
_transport;
|
|
6191
6200
|
_requestMessageId = 0;
|
|
6192
6201
|
_requestHandlers = /* @__PURE__ */ new Map();
|
|
6202
|
+
/** Methods registered with an explicit schema; the era gate in `_onrequest` reads it for the Tasks extension names. */
|
|
6203
|
+
_customSchemaRequestMethods = /* @__PURE__ */ new Set();
|
|
6193
6204
|
_requestHandlerAbortControllers = /* @__PURE__ */ new Map();
|
|
6194
6205
|
_notificationHandlers = /* @__PURE__ */ new Map();
|
|
6195
6206
|
_responseHandlers = /* @__PURE__ */ new Map();
|
|
@@ -6471,7 +6482,7 @@ var Protocol = class {
|
|
|
6471
6482
|
return;
|
|
6472
6483
|
}
|
|
6473
6484
|
}
|
|
6474
|
-
if (isSpecRequestMethod(request.method) && !codec.hasRequestMethod(request.method)) {
|
|
6485
|
+
if (isSpecRequestMethod(request.method) && !codec.hasRequestMethod(request.method) && !(isExtensionReusedRequestMethod(request.method) && this._customSchemaRequestMethods.has(request.method))) {
|
|
6475
6486
|
sendErrorResponse(ProtocolErrorCode.MethodNotFound, "Method not found");
|
|
6476
6487
|
return;
|
|
6477
6488
|
}
|
|
@@ -6604,8 +6615,11 @@ var Protocol = class {
|
|
|
6604
6615
|
}
|
|
6605
6616
|
request(request, schemaOrOptions, maybeOptions) {
|
|
6606
6617
|
const codec = this._resolveOutboundCodec(request.method);
|
|
6618
|
+
if (isStandardSchema(schemaOrOptions)) {
|
|
6619
|
+
if (!isExtensionReusedRequestMethod(request.method)) this._assertOutboundRequestInEra(codec, request.method);
|
|
6620
|
+
return this._requestWithSchemaViaCodec(codec, request, schemaOrOptions, maybeOptions);
|
|
6621
|
+
}
|
|
6607
6622
|
this._assertOutboundRequestInEra(codec, request.method);
|
|
6608
|
-
if (isStandardSchema(schemaOrOptions)) return this._requestWithSchemaViaCodec(codec, request, schemaOrOptions, maybeOptions);
|
|
6609
6623
|
const validate = codecResultValidator(codec, request.method);
|
|
6610
6624
|
if (validate === void 0) throw new TypeError(`'${request.method}' is not a spec method; pass a result schema as the second argument to request().`);
|
|
6611
6625
|
return this._requestWithSchemaViaCodec(codec, request, validate, schemaOrOptions);
|
|
@@ -6798,7 +6812,7 @@ var Protocol = class {
|
|
|
6798
6812
|
* Emits a notification, which is a one-way message that does not expect a response.
|
|
6799
6813
|
*/
|
|
6800
6814
|
async notification(notification, options) {
|
|
6801
|
-
return this._notificationViaCodec(this._resolveOutboundCodec(notification.method), notification, options);
|
|
6815
|
+
return await this._notificationViaCodec(this._resolveOutboundCodec(notification.method), notification, options);
|
|
6802
6816
|
}
|
|
6803
6817
|
/**
|
|
6804
6818
|
* The notification funnel proper, keyed by the resolved era codec —
|
|
@@ -6849,6 +6863,8 @@ var Protocol = class {
|
|
|
6849
6863
|
return maybeHandler(parsed.data, ctx);
|
|
6850
6864
|
};
|
|
6851
6865
|
else throw new TypeError("setRequestHandler: handler is required");
|
|
6866
|
+
if (typeof schemasOrHandler === "function") this._customSchemaRequestMethods.delete(method);
|
|
6867
|
+
else this._customSchemaRequestMethods.add(method);
|
|
6852
6868
|
this._requestHandlers.set(method, this._wrapHandler(method, stored));
|
|
6853
6869
|
}
|
|
6854
6870
|
/**
|
|
@@ -6877,6 +6893,7 @@ var Protocol = class {
|
|
|
6877
6893
|
*/
|
|
6878
6894
|
removeRequestHandler(method) {
|
|
6879
6895
|
this._requestHandlers.delete(method);
|
|
6896
|
+
this._customSchemaRequestMethods.delete(method);
|
|
6880
6897
|
}
|
|
6881
6898
|
/**
|
|
6882
6899
|
* Asserts that a request handler has not already been set for the given method, in preparation for a new one being automatically installed.
|
|
@@ -6970,7 +6987,8 @@ function manualInputRequiredValue(decoded) {
|
|
|
6970
6987
|
return {
|
|
6971
6988
|
resultType: "input_required",
|
|
6972
6989
|
inputRequests: decoded.inputRequests,
|
|
6973
|
-
...decoded.requestState !== void 0 && { requestState: decoded.requestState }
|
|
6990
|
+
...decoded.requestState !== void 0 && { requestState: decoded.requestState },
|
|
6991
|
+
...decoded._meta !== void 0 && { _meta: decoded._meta }
|
|
6974
6992
|
};
|
|
6975
6993
|
}
|
|
6976
6994
|
|
|
@@ -7681,4 +7699,4 @@ function fromJsonSchema(schema, validator) {
|
|
|
7681
7699
|
|
|
7682
7700
|
//#endregion
|
|
7683
7701
|
export { isTaskAugmentedRequestParams as $, promptArgumentsFromStandardSchema as A, LATEST_PROTOCOL_VERSION as At, scanXMcpHeaderDeclarations as B, TRACESTATE_META_KEY as Bt, REQUEST_STATE_ONLY_LEG_PACING_MS as C, CLIENT_CAPABILITIES_META_KEY as Ct, acceptedContent as D, INVALID_PARAMS as Dt, sleep as E, INTERNAL_ERROR as Et, carriesValidModernEnvelopeClaim as F, RELATED_TASK_META_KEY as Ft, isInitializeRequest as G, resourceUrlFromServerUrl as Gt, assertCompleteRequestPrompt as H, requiredClientCapabilitiesForInputRequest as Ht, classifyInboundRequest as I, SERVER_INFO_META_KEY as It, isJSONRPCErrorResponse as J, SdkHttpError as Jt, isInitializedNotification as K, SdkError as Kt, httpStatusForErrorCode as L, SUBSCRIPTION_ID_META_KEY as Lt, validateStandardSchema as M, METHOD_NOT_FOUND as Mt, parseSchema as N, PARSE_ERROR as Nt, inputRequired as O, INVALID_REQUEST as Ot, LADDER_ERROR_HTTP_STATUS as P, PROTOCOL_VERSION_META_KEY as Pt, isJSONRPCResultResponse as Q, modernOnlyStrictRejection as R, SUPPORTED_PROTOCOL_VERSIONS as Rt, specTypeSchemas as S, BAGGAGE_META_KEY as St, linkedRoundAbort as T, DEFAULT_NEGOTIATED_PROTOCOL_VERSION as Tt, assertCompleteRequestResourceTemplate as U, requiredClientCapabilitiesForRequest as Ut, validateMcpParamHeaders as V, missingClientCapabilities as Vt, isCallToolResult as W, checkResourceAllowed as Wt, isJSONRPCRequest as X, OAuthErrorCode as Xt, isJSONRPCNotification as Y, OAuthError as Yt, isJSONRPCResponse as Z, mergeCapabilities as _, normalizeContentlessToolResult as _t, UriTemplate as a, requestMetaOf as at, withRequestStateValue as b, legacyProtocolVersions as bt, ReadBuffer as c, codecForVersion as ct, serializeMessage as d, ResourceNotFoundError as dt, parseJSONRPCMessage as et, getDisplayName as f, UnsupportedProtocolVersionError as ft, Protocol as g, attachCacheHintFallback as gt, DEFAULT_REQUEST_TIMEOUT_MSEC as h, assertValidCacheHint as ht, InMemoryTransport as i, hasEnvelopeClaim as it, standardSchemaToJsonSchema as j, LOG_LEVEL_META_KEY as jt, inputResponse as k, JSONRPC_VERSION as kt, STDIO_DEFAULT_MAX_BUFFER_SIZE as l, MissingRequiredClientCapabilityError as lt, mediaTypeEssence as m, ProtocolErrorCode as mt, preloadSchemas as n, LoggingLevelSchema as nt, createFetchWithInit as o, validateEnvelopeMeta as ot, isJsonContentType as p, UrlElicitationRequiredError as pt, isInputRequiredResult as q, SdkErrorCode as qt, normalizeRawShapeSchema as r, envelopeClaimVersion as rt, validateAndWarnToolName as s, MODERN_WIRE_REVISION as st, fromJsonSchema as t, JSONRPCMessageSchema as tt, deserializeMessage as u, ProtocolError as ut, requestStateAccessor as v, SUPPORTED_MODERN_PROTOCOL_VERSIONS as vt, inputRequiredRoundsExceededMessage as w, CLIENT_INFO_META_KEY as wt, isSpecType as x, modernProtocolVersions as xt, setNegotiatedProtocolVersion as y, isModernProtocolVersion as yt, validateStandardRequestHeaders as z, TRACEPARENT_META_KEY as zt };
|
|
7684
|
-
//# sourceMappingURL=src-
|
|
7702
|
+
//# sourceMappingURL=src-Cqbh3MYc.mjs.map
|