ostacky 0.9.4 → 0.9.5

package/assets/mcp/ostacky-controller/node_modules/@modelcontextprotocol/server/dist/shimsBrowser.cjs

@@ -1,4 +1,4 @@
-const require_cfWorkerProvider = require('./cfWorkerProvider-ojcZaap3.cjs');
+const require_cfWorkerProvider = require('./cfWorkerProvider-BwbPzsdI.cjs');
 
 //#region src/shimsBrowser.ts
 /**

package/assets/mcp/ostacky-controller/node_modules/@modelcontextprotocol/server/dist/shimsBrowser.d.cts

@@ -1,4 +1,4 @@
-import { t as CfWorkerJsonSchemaValidator } from "./cfWorkerProvider-D9GAttn8.cjs";
+import { t as CfWorkerJsonSchemaValidator } from "./cfWorkerProvider-doTkZbTr.cjs";
 
 //#region src/shimsBrowser.d.ts
 

package/assets/mcp/ostacky-controller/node_modules/@modelcontextprotocol/server/dist/shimsBrowser.d.mts

@@ -1,4 +1,4 @@
-import { t as CfWorkerJsonSchemaValidator } from "./cfWorkerProvider-BYRW5af5.mjs";
+import { t as CfWorkerJsonSchemaValidator } from "./cfWorkerProvider-C03CSigr.mjs";
 
 //#region src/shimsBrowser.d.ts
 

package/assets/mcp/ostacky-controller/node_modules/@modelcontextprotocol/server/dist/shimsBrowser.mjs

@@ -1,4 +1,4 @@
-import { t as CfWorkerJsonSchemaValidator } from "./cfWorkerProvider-Bd-iTHAF.mjs";
+import { t as CfWorkerJsonSchemaValidator } from "./cfWorkerProvider-p3WaZPqB.mjs";
 
 //#region src/shimsBrowser.ts
 /**

package/assets/mcp/ostacky-controller/node_modules/@modelcontextprotocol/server/dist/shimsNode.cjs

@@ -1,5 +1,5 @@
 const require_chunk = require('./chunk-Bnu9O96Y.cjs');
-const require_ajvProvider = require('./ajvProvider-Brn-Q2J_.cjs');
+const require_ajvProvider = require('./ajvProvider-ZaoO9afR.cjs');
 let node_process = require("node:process");
 node_process = require_chunk.__toESM(node_process);
 

package/assets/mcp/ostacky-controller/node_modules/@modelcontextprotocol/server/dist/shimsNode.d.cts

@@ -1,3 +1,3 @@
-import { n as AjvJsonSchemaValidator } from "./ajvProvider-B_4czhCS.cjs";
+import { n as AjvJsonSchemaValidator } from "./ajvProvider-FOQRM7up.cjs";
 import process from "node:process";
 export { AjvJsonSchemaValidator as DefaultJsonSchemaValidator, process };

package/assets/mcp/ostacky-controller/node_modules/@modelcontextprotocol/server/dist/shimsNode.d.mts

@@ -1,3 +1,3 @@
-import { n as AjvJsonSchemaValidator } from "./ajvProvider-BdSo9BII.mjs";
+import { n as AjvJsonSchemaValidator } from "./ajvProvider-CgI-5L6O.mjs";
 import process from "node:process";
 export { AjvJsonSchemaValidator as DefaultJsonSchemaValidator, process };

package/assets/mcp/ostacky-controller/node_modules/@modelcontextprotocol/server/dist/shimsNode.mjs

@@ -1,4 +1,4 @@
-import { n as AjvJsonSchemaValidator } from "./ajvProvider-CplOkyLC.mjs";
+import { n as AjvJsonSchemaValidator } from "./ajvProvider-CEoC__sr.mjs";
 import process from "node:process";
 
 export { AjvJsonSchemaValidator as DefaultJsonSchemaValidator, process };

package/assets/mcp/ostacky-controller/node_modules/@modelcontextprotocol/server/dist/shimsWorkerd.cjs

@@ -1,5 +1,5 @@
-const require_src = require('./src-BX_fm-dB.cjs');
-const require_cfWorkerProvider = require('./cfWorkerProvider-ojcZaap3.cjs');
+const require_src = require('./src-CgFsfg3E.cjs');
+const require_cfWorkerProvider = require('./cfWorkerProvider-BwbPzsdI.cjs');
 
 //#region src/shimsWorkerd.ts
 /**

package/assets/mcp/ostacky-controller/node_modules/@modelcontextprotocol/server/dist/shimsWorkerd.d.cts

@@ -1,4 +1,4 @@
-import { t as CfWorkerJsonSchemaValidator } from "./cfWorkerProvider-D9GAttn8.cjs";
+import { t as CfWorkerJsonSchemaValidator } from "./cfWorkerProvider-doTkZbTr.cjs";
 
 //#region src/shimsWorkerd.d.ts
 declare const process: {

package/assets/mcp/ostacky-controller/node_modules/@modelcontextprotocol/server/dist/shimsWorkerd.d.mts

@@ -1,4 +1,4 @@
-import { t as CfWorkerJsonSchemaValidator } from "./cfWorkerProvider-BYRW5af5.mjs";
+import { t as CfWorkerJsonSchemaValidator } from "./cfWorkerProvider-C03CSigr.mjs";
 
 //#region src/shimsWorkerd.d.ts
 declare const process: {

package/assets/mcp/ostacky-controller/node_modules/@modelcontextprotocol/server/dist/shimsWorkerd.mjs

@@ -1,5 +1,5 @@
-import { n as preloadSchemas } from "./src-D86MbS1I.mjs";
-import { t as CfWorkerJsonSchemaValidator } from "./cfWorkerProvider-Bd-iTHAF.mjs";
+import { n as preloadSchemas } from "./src-D-y6h4N7.mjs";
+import { t as CfWorkerJsonSchemaValidator } from "./cfWorkerProvider-p3WaZPqB.mjs";
 
 //#region src/shimsWorkerd.ts
 /**

package/assets/mcp/ostacky-controller/node_modules/@modelcontextprotocol/server/dist/{src-BX_fm-dB.cjs → src-CgFsfg3E.cjs}

@@ -1,4 +1,5 @@
 const require_chunk = require('./chunk-Bnu9O96Y.cjs');
+const require_dialects = require('./dialects-D8eXzoGv.cjs');
 let _modelcontextprotocol_core_internal = require("@modelcontextprotocol/core/internal");
 let zod_v4 = require("zod/v4");
 zod_v4 = require_chunk.__toESM(zod_v4);
@@ -176,6 +177,16 @@ let OAuthErrorCode = /* @__PURE__ */ function(OAuthErrorCode$1) {
 	* The requested resource is invalid, missing, unknown, or malformed. (Custom error for resource indicators - RFC 8707)
 	*/
 	OAuthErrorCode$1["InvalidTarget"] = "invalid_target";
+	/**
+	* The DPoP proof accompanying the request is invalid, or does not match the key the grant
+	* (e.g. a refresh token) is bound to. (RFC 9449 §5 / §7.1)
+	*/
+	OAuthErrorCode$1["InvalidDpopProof"] = "invalid_dpop_proof";
+	/**
+	* The server requires a server-supplied nonce in the DPoP proof; retry with the `DPoP-Nonce`
+	* it returned. (RFC 9449 §8 / §9)
+	*/
+	OAuthErrorCode$1["UseDpopNonce"] = "use_dpop_nonce";
 	return OAuthErrorCode$1;
 }({});
 /**
@@ -289,14 +300,32 @@ let SdkErrorCode = /* @__PURE__ */ function(SdkErrorCode$1) {
 	/**
 	* Protocol-era negotiation at connect time failed without producing either a
 	* usable modern (2026-07-28+) era or a definitive legacy fallback signal —
-	* e.g. the negotiation mode forbids falling back (`pin`), or the probe hit a
-	* network failure (a typed connect error, never an era verdict).
+	* e.g. the negotiation mode forbids falling back (`pin`), the probe hit a
+	* network failure, or the server answered the probe with a 5xx (a typed
+	* connect error, never an era verdict).
 	*
-	* Negotiation-phase only: this code is never used once an era is established.
+	* Negotiation-phase only: this code is never used once an era is
+	* established. Auth walls never carry it: a 401/403 rejecting the probe
+	* uses {@linkcode ClientHttpAuthentication} / {@linkcode ClientHttpForbidden}
+	* instead, so era-recovery flows keyed on this code (e.g. cached-verdict
+	* gateways) can never persist a verdict for an unauthorized exchange.
 	*/
 	SdkErrorCode$1["EraNegotiationFailed"] = "ERA_NEGOTIATION_FAILED";
 	SdkErrorCode$1["ClientHttpNotImplemented"] = "CLIENT_HTTP_NOT_IMPLEMENTED";
+	/**
+	* HTTP 401 authentication failure: the transport's re-auth retry still got
+	* 401 (`Server returned 401 after re-authentication`), or the version
+	* negotiation probe was rejected 401 with no `authProvider` configured
+	* (`Version negotiation failed: the server requires authorization (HTTP 401)`).
+	* Carried on an {@linkcode SdkHttpError} with `status: 401`.
+	*/
 	SdkErrorCode$1["ClientHttpAuthentication"] = "CLIENT_HTTP_AUTHENTICATION";
+	/**
+	* HTTP 403 denial: the step-up re-authorization retry limit was reached,
+	* or the version negotiation probe was rejected 403
+	* (`Version negotiation failed: the server denied access (HTTP 403)`).
+	* Carried on an {@linkcode SdkHttpError} with `status: 403`.
+	*/
 	SdkErrorCode$1["ClientHttpForbidden"] = "CLIENT_HTTP_FORBIDDEN";
 	SdkErrorCode$1["ClientHttpUnexpectedContent"] = "CLIENT_HTTP_UNEXPECTED_CONTENT";
 	SdkErrorCode$1["ClientHttpFailedToOpenStream"] = "CLIENT_HTTP_FAILED_TO_OPEN_STREAM";
@@ -341,8 +370,18 @@ var SdkError = class extends Error {
 		if (typeof this !== "function") throw new TypeError("isInstance must be called on the class (e.g. `SdkError.isInstance(value)`); for callbacks use `v => SdkError.isInstance(v)`");
 		return brandedHasInstance(this, value);
 	}
-	constructor(code, message, data) {
-		super(message);
+	/**
+	* @param code - Stable string code identifying the failure ({@linkcode SdkErrorCode}).
+	* @param message - Human-readable description.
+	* @param data - Optional structured payload (for example the HTTP status carried by
+	* {@linkcode SdkHttpError}). Opaque to the SDK: a `cause` key inside `data` is not
+	* promoted to `Error.cause`.
+	* @param options - Standard `ErrorOptions`, forwarded to `Error`. Pass the underlying
+	* failure as `{ cause }` so it is reachable through the `Error.cause` chain that
+	* loggers and error trackers walk.
+	*/
+	constructor(code, message, data, options) {
+		super(message, options);
 		this.code = code;
 		this.data = data;
 		this.name = "SdkError";
@@ -369,8 +408,11 @@ var SdkHttpError = class extends SdkError {
 	static {
 		Object.defineProperty(this, "mcpBrand", { value: "mcp.SdkHttpError" });
 	}
-	constructor(code, message, data) {
-		super(code, message, data);
+	/**
+	* @param options - Standard `ErrorOptions`, forwarded to `Error` (see {@linkcode SdkError}).
+	*/
+	constructor(code, message, data, options) {
+		super(code, message, data, options);
 		this.name = "SdkHttpError";
 	}
 	get status() {
@@ -2080,9 +2122,19 @@ const REF_REWRITE_NAME_MAP_KEYS = new Set([
 	"patternProperties",
 	"$defs",
 	"definitions",
-	"dependentSchemas"
+	"dependentSchemas",
+	"dependencies"
 ]);
 /**
+* Whether a subtree's `$id` establishes a new resolution base. A fragment-only
+* `$id` (`"#item"`, the draft-07/06 spelling of 2020-12's `$anchor`) does not
+* change the RFC 3986 base URI — same-document pointers inside still resolve
+* against the document root and must be rewritten.
+*/
+function establishesNewBase(id) {
+	return id !== void 0 && !(typeof id === "string" && id.startsWith("#"));
+}
+/**
 * Wrap a non-object output schema in the 2025-era envelope:
 * `{type:'object', properties:{result:<natural>}, required:['result']}`.
 *
@@ -2095,31 +2147,37 @@ const REF_REWRITE_NAME_MAP_KEYS = new Set([
 * The rewrite is position-aware: data-valued keywords
 * (`const`/`enum`/`default`/`examples`) in keyword position are NOT descended
 * into; the same names appearing as property names under
-* `properties`/`patternProperties`/`$defs`/`definitions`/`dependentSchemas`
-* ARE descended into (they're subschemas). The rewrite is also `$id`-scoped:
-* if the natural root carries `$id` no pointer is rewritten (same-document
-* refs inside resolve against the embedded `$id` base, not the wrapper root),
-* and any subtree that establishes its own `$id` is left untouched for the
-* same reason.
+* `properties`/`patternProperties`/`$defs`/`definitions`/`dependentSchemas`/
+* `dependencies` ARE descended into (they're subschemas). The rewrite is also
+* `$id`-scoped: if the natural root carries a base-establishing `$id` no
+* pointer is rewritten (same-document refs inside resolve against the embedded
+* `$id` base, not the wrapper root), and any subtree that establishes its own
+* `$id` is left untouched for the same reason. Fragment-only `$id` (`"#item"`,
+* draft-07's anchor spelling) does not establish a base and IS descended into.
 */
 function wrapOutputSchemaForLegacy(natural) {
 	const $schema = typeof natural["$schema"] === "string" ? natural["$schema"] : void 0;
-	if (natural["$id"] !== void 0) return {
+	if (establishesNewBase(natural["$id"])) return {
 		...$schema !== void 0 && { $schema },
 		type: "object",
 		properties: { result: natural },
 		required: ["result"]
 	};
+	const convertRecursiveRefs = require_dialects.declares2019Dialect(natural["$schema"]) && natural["$recursiveAnchor"] !== true;
 	const rewriteRefs = (node, parentIsNameMap) => {
 		if (Array.isArray(node)) return node.map((item) => rewriteRefs(item, false));
 		if (node === null || typeof node !== "object") return node;
-		if (!parentIsNameMap && node["$id"] !== void 0) return node;
+		if (!parentIsNameMap && establishesNewBase(node["$id"])) return node;
 		const out = {};
+		let convertedRecursion = false;
 		for (const [k, v] of Object.entries(node)) if (parentIsNameMap) out[k] = rewriteRefs(v, false);
 		else if ((k === "$ref" || k === "$dynamicRef") && typeof v === "string") out[k] = v === "#" ? "#/properties/result" : v.startsWith("#/") ? `#/properties/result${v.slice(1)}` : v;
+		else if (k === "$recursiveRef" && v === "#" && convertRecursiveRefs) convertedRecursion = true;
 		else if (REF_REWRITE_DATA_POSITION_KEYS.has(k)) out[k] = v;
 		else if (REF_REWRITE_NAME_MAP_KEYS.has(k)) out[k] = rewriteRefs(v, true);
 		else out[k] = rewriteRefs(v, false);
+		if (convertedRecursion) if ("$ref" in out) out["allOf"] = [...Array.isArray(out["allOf"]) ? out["allOf"] : [], { $ref: "#/properties/result" }];
+		else out["$ref"] = "#/properties/result";
 		return out;
 	};
 	return {
@@ -4736,9 +4794,15 @@ function paramHeaderMismatchRejection(cell, header, body) {
 *   named revision belongs to (a malformed envelope behind a present claim is
 *   a validation error, never a silent fall back to legacy handling).
 * - A request without a claim is legacy-era traffic.
-* - The `MCP-Protocol-Version` header is a cross-check only: it never
-*   upgrades or downgrades a body-derived classification, and a disagreement
-*   between header and body is an explicit ladder outcome.
+* - The `MCP-Protocol-Version` header is a cross-check only *for
+*   classification*: it never upgrades or downgrades a body-derived
+*   classification, and a disagreement between header and body is an explicit
+*   ladder outcome. Its absence likewise never changes the era — but the spec
+*   requires the header on every modern *request* POST, so a
+*   modern-classified request that omits it is refused one rung later, by
+*   {@linkcode validateStandardRequestHeaders}, not here. Notification POSTs
+*   are exempt (see the next bullet), and that rung enforces presence on
+*   requests only.
 * - Notifications carry no envelope claim of their own under the current
 *   spec, so for notification POSTs without a body claim the modern header is
 *   determinative; the `Mcp-Method` header is validated against the body when
@@ -4866,7 +4930,7 @@ const INBOUND_VALIDATION_LADDER = [
 		evaluatedAt: "pre-dispatch",
 		codes: [HEADER_MISMATCH_ERROR_CODE],
 		conformance: ["http-header-validation"],
-		rationale: "SEP-2243 standard `Mcp-Method` / `Mcp-Name` headers — presence, sentinel decoding, and `Mcp-Name` ↔ body cross-check — are validated by the HTTP entry on a modern-classified request after the supported-revision gate and before dispatch. The classifier’s own header-mismatch cells (protocol-version, `Mcp-Method` mismatch) stay on the edge `era-classification` rung; this rung carries the entry-layer presence/`Mcp-Name` half. Evaluated before the capability gate, the factory call, and the `Mcp-Param-*` rung so a request that fails several rungs is answered by the standard-header rung first. The documented order (after method-registry 5 and request-params 6) is NOT the observed precedence: serveModern evaluates this rung immediately after the supported-revision gate, so a request that also fails a dispatch rung is answered here before the dispatch rungs (5–6) are consulted."
+		rationale: "SEP-2243 standard `MCP-Protocol-Version` / `Mcp-Method` / `Mcp-Name` headers — presence, sentinel decoding, and `Mcp-Name` ↔ body cross-check — are validated by the HTTP entry on a modern-classified request after the supported-revision gate and before dispatch. The spec requires `MCP-Protocol-Version` and `Mcp-Method` on every modern *request* POST (`Mcp-Name` only for the methods that mirror `params.name` / `params.uri` / `params.taskId`, see `MCP_NAME_HEADER_SOURCE`) and names them in that order, so a request missing several is answered by the earliest. Notification POSTs are exempt: the presence half runs on requests only, so a modern-enveloped notification is dispatched even with no standard headers at all. The classifier’s own header-mismatch cells (protocol-version, `Mcp-Method` mismatch) stay on the edge `era-classification` rung; this rung carries the entry-layer presence/`Mcp-Name` half — including the missing `MCP-Protocol-Version` cell, which cannot live on the edge rung without breaking body-primary classification. Evaluated before the capability gate, the factory call, and the `Mcp-Param-*` rung so a request that fails several rungs is answered by the standard-header rung first. The documented order (after method-registry 5 and request-params 6) is NOT the observed precedence: serveModern evaluates this rung immediately after the supported-revision gate, so a request that also fails a dispatch rung is answered here before the dispatch rungs (5–6) are consulted."
 	},
 	{
 		rung: "client-capabilities",
@@ -4949,15 +5013,51 @@ function crossCheckMismatch(cell, header, body, rung = "era-classification") {
 	} }), true);
 }
 /**
-* The methods whose body carries a `params.name` / `params.uri` value the
-* `Mcp-Name` header must mirror, and which body field supplies it (SEP-2243
-* § Standard Request Headers, `Required For` column).
+* The methods whose body carries a `params.name` / `params.uri` /
+* `params.taskId` value the `Mcp-Name` header must mirror, and which body
+* field supplies it. The core rows come from SEP-2243 § Standard Request
+* Headers (`Required For` column); the `tasks/*` rows come from SEP-2663's
+* Streamable HTTP binding ("the client MUST set the `Mcp-Name` header to the
+* value of `params.taskId`" for `tasks/get` / `tasks/update` /
+* `tasks/cancel`, so intermediaries can route every request for a task to the
+* instance holding its state). Shared by the client transport (header
+* emission) and the server ladder (validation) so both sides derive from one
+* table.
 */
 const MCP_NAME_HEADER_SOURCE = {
 	"tools/call": "name",
 	"prompts/get": "name",
-	"resources/read": "uri"
+	"resources/read": "uri",
+	"tasks/get": "taskId",
+	"tasks/update": "taskId",
+	"tasks/cancel": "taskId"
 };
+/**
+* Resolve the `Mcp-Name` source for one request against
+* {@linkcode MCP_NAME_HEADER_SOURCE}: which body field the header mirrors for
+* `method`, and the string value that field carries in `params`.
+*
+* Returns `undefined` when `method` is off-table (no `Mcp-Name` is emitted or
+* required). Otherwise `value` is the field's string value, or `undefined`
+* when `params` is not a plain object or the field is absent / not a string —
+* the client emits no header then, and the server leaves that body to the
+* rungs further down the ladder.
+*
+* `method` is peer-supplied on the server and caller-supplied on the client,
+* so the table lookup is `Object.hasOwn`-guarded against `Object.prototype`
+* collisions (`constructor`, `toString`, …). Shared by the client transport
+* (emission) and {@linkcode validateStandardRequestHeaders} (validation) so
+* the extraction — not just the table — cannot drift between the two sides.
+*/
+function mcpNameSource(method, params) {
+	const field = Object.hasOwn(MCP_NAME_HEADER_SOURCE, method) ? MCP_NAME_HEADER_SOURCE[method] : void 0;
+	if (field === void 0) return;
+	const raw = isPlainObject$2(params) ? params[field] : void 0;
+	return {
+		field,
+		value: typeof raw === "string" ? raw : void 0
+	};
+}
 /** Strip RFC 9110 optional whitespace (SP / HTAB) around a field value in linear time. */
 function stripHttpOws(value) {
 	let start = 0;
@@ -4985,13 +5085,19 @@ function stripHttpOws(value) {
 * `era-classification` rung for the `MCP-Protocol-Version` and
 * `Mcp-Method` *mismatch* cells) when:
 *
+* - the required `MCP-Protocol-Version` header is absent (SEP-2243 requires it
+*   on every modern *request* POST, and lists it first among the required
+*   standard headers — so a request missing it *and* `Mcp-Method` is answered
+*   by this cell);
 * - the required `Mcp-Method` header is absent;
 * - the required `Mcp-Name` header is absent on a `tools/call`,
-*   `prompts/get`, or `resources/read` request whose body carries the
-*   `params.name` / `params.uri` value the header mirrors;
+*   `prompts/get`, `resources/read`, or (per SEP-2663's Streamable HTTP
+*   binding) `tasks/get` / `tasks/update` / `tasks/cancel` request whose
+*   body carries the `params.name` / `params.uri` / `params.taskId` value
+*   the header mirrors;
 * - the `Mcp-Name` header carries an invalid `=?base64?…?=` sentinel; or
 * - the (decoded) `Mcp-Name` value disagrees with the body's
-*   `params.name` / `params.uri`.
+*   `params.name` / `params.uri` / `params.taskId`.
 *
 * Returns `undefined` (pass) for notifications (the spec table reads
 * "All requests"), for methods that have no `Mcp-Name` source, and when the
@@ -5002,16 +5108,22 @@ function stripHttpOws(value) {
 * call to the classifier (no headers passed) keeps routing a modern request
 * unchanged: the classifier remains a pure body-primary router, and this
 * function is the presence/`Mcp-Name` half of the standard-header rung the
-* entry layers on top.
+* entry layers on top. That separation is what lets the missing
+* `MCP-Protocol-Version` cell live here without disturbing the body-primary
+* rule — classification still resolves from the body (a proxy stripping the
+* header must not change the era), and only this rung refuses to serve it.
 */
 function validateStandardRequestHeaders(request, route) {
 	if (route.messageKind !== "request") return;
 	const method = route.message.method;
+	if (request.protocolVersionHeader === void 0) {
+		const claimed = route.classification.revision;
+		return crossCheckMismatch("version-header-missing", "(missing)", claimed === void 0 ? "the body carries a modern per-request envelope but the required MCP-Protocol-Version header is absent" : `the body envelope names protocol version ${claimed} but the required MCP-Protocol-Version header is absent`, "standard-header-validation");
+	}
 	if (request.mcpMethodHeader === void 0) return crossCheckMismatch("method-header-missing", "(missing)", `the body names method ${method} but the required Mcp-Method header is absent`, "standard-header-validation");
-	const sourceField = Object.hasOwn(MCP_NAME_HEADER_SOURCE, method) ? MCP_NAME_HEADER_SOURCE[method] : void 0;
-	if (sourceField === void 0) return;
-	const sourceValue = route.message.params?.[sourceField];
-	const bodyValue = typeof sourceValue === "string" ? sourceValue : void 0;
+	const source = mcpNameSource(method, route.message.params);
+	if (source === void 0) return;
+	const { field: sourceField, value: bodyValue } = source;
 	if (request.mcpNameHeader === void 0) {
 		if (bodyValue === void 0) return;
 		return crossCheckMismatch("name-header-missing", "(missing)", `the body carries params.${sourceField}="${bodyValue}" but the required Mcp-Name header is absent`, "standard-header-validation");
@@ -6213,7 +6325,7 @@ var Protocol = class {
 		return this._requestHandlers.get(method);
 	}
 	async _oncancel(notification) {
-		if (!notification.params.requestId) return;
+		if (notification.params.requestId === void 0) return;
 		this._requestHandlerAbortControllers.get(notification.params.requestId)?.abort(notification.params.reason);
 	}
 	_setupTimeout(messageId, timeout, maxTotalTimeout, onTimeout, resetTimeoutOnProgress = false) {
@@ -6612,19 +6724,20 @@ var Protocol = class {
 			const cancel = (reason) => {
 				if (responseReceived) return;
 				this._progressHandlers.delete(messageId);
-				if (requestAbort === void 0) this._transport?.send(this._envelopeOutbound({
-					jsonrpc: "2.0",
-					method: "notifications/cancelled",
-					params: {
-						requestId: messageId,
-						reason: String(reason)
-					}
-				}), {
-					relatedRequestId,
-					resumptionToken,
-					onresumptiontoken
-				}).catch((error) => this._onerror(/* @__PURE__ */ new Error(`Failed to send cancellation: ${error}`)));
-				else requestAbort.abort();
+				if (requestAbort === void 0) {
+					if (request.method !== "initialize") this._transport?.send(this._envelopeOutbound({
+						jsonrpc: "2.0",
+						method: "notifications/cancelled",
+						params: {
+							requestId: messageId,
+							reason: String(reason)
+						}
+					}), {
+						relatedRequestId,
+						resumptionToken,
+						onresumptiontoken
+					}).catch((error) => this._onerror(/* @__PURE__ */ new Error(`Failed to send cancellation: ${error}`)));
+				} else requestAbort.abort();
 				reject(reason instanceof SdkError ? reason : new SdkError(SdkErrorCode.RequestTimeout, String(reason)));
 			};
 			this._responseHandlers.set(messageId, (response) => {
@@ -6704,7 +6817,7 @@ var Protocol = class {
 			jsonrpc: "2.0",
 			...notification
 		});
-		if ((this._options?.debouncedNotificationMethods ?? []).includes(notification.method) && !notification.params && !options?.relatedRequestId) {
+		if ((this._options?.debouncedNotificationMethods ?? []).includes(notification.method) && !notification.params && options?.relatedRequestId === void 0) {
 			if (this._pendingDebouncedNotifications.has(notification.method)) return;
 			this._pendingDebouncedNotifications.add(notification.method);
 			Promise.resolve().then(() => {
@@ -8066,4 +8179,4 @@ Object.defineProperty(exports, 'withRequestStateValue', {
     return withRequestStateValue;
   }
 });
-//# sourceMappingURL=src-BX_fm-dB.cjs.map
+//# sourceMappingURL=src-CgFsfg3E.cjs.map