Merge branch 'main' into fix/1

Author: sunrabbit123

CLAUDE.md

@@ -1,7 +1,8 @@
 # MCP TypeScript SDK Guide
 
 ## Build & Test Commands
-```
+
+```sh
 npm run build        # Build ESM and CJS versions
 npm run lint         # Run ESLint
 npm test             # Run all tests
@@ -10,6 +11,7 @@ npx jest -t "test name"        # Run tests matching pattern
 ```
 
 ## Code Style Guidelines
+
 - **TypeScript**: Strict type checking, ES modules, explicit return types
 - **Naming**: PascalCase for classes/types, camelCase for functions/variables
 - **Files**: Lowercase with hyphens, test files with `.test.ts` suffix
@@ -20,6 +22,7 @@ npx jest -t "test name"        # Run tests matching pattern
 - **Comments**: JSDoc for public APIs, inline comments for complex logic
 
 ## Project Structure
+
 - `/src`: Source code with client, server, and shared modules
 - Tests alongside source files with `.test.ts` suffix
-- Node.js >= 18 required
+- Node.js >= 18 required

CODE_OF_CONDUCT.md

@@ -60,7 +60,7 @@ representative at an online or offline event.
 
 Instances of abusive, harassing, or otherwise unacceptable behavior may be
 reported to the community leaders responsible for enforcement at
-mcp-coc@anthropic.com.
+<mcp-coc@anthropic.com>.
 All complaints will be reviewed and investigated promptly and fairly.
 
 All community leaders are obligated to respect the privacy and security of the
@@ -116,13 +116,13 @@ the community.
 
 This Code of Conduct is adapted from the [Contributor Covenant][homepage],
 version 2.0, available at
-https://www.contributor-covenant.org/version/2/0/code_of_conduct.html.
+<https://www.contributor-covenant.org/version/2/0/code_of_conduct.html>.
 
 Community Impact Guidelines were inspired by [Mozilla's code of conduct
 enforcement ladder](https://github.com/mozilla/diversity).
 
 [homepage]: https://www.contributor-covenant.org
 
 For answers to common questions about this code of conduct, see the FAQ at
-https://www.contributor-covenant.org/faq. Translations are available at
-https://www.contributor-covenant.org/translations.
+<https://www.contributor-covenant.org/faq>. Translations are available at
+<https://www.contributor-covenant.org/translations>.

README.md

@@ -1,9 +1,10 @@
 # MCP TypeScript SDK ![NPM Version](https://img.shields.io/npm/v/%40modelcontextprotocol%2Fsdk) ![MIT licensed](https://img.shields.io/npm/l/%40modelcontextprotocol%2Fsdk)
 
 ## Table of Contents
+
 - [Overview](#overview)
 - [Installation](#installation)
-- [Quickstart](#quickstart)
+- [Quickstart](#quick-start)
 - [What is MCP?](#what-is-mcp)
 - [Core Concepts](#core-concepts)
   - [Server](#server)
@@ -18,11 +19,14 @@
   - [Echo Server](#echo-server)
   - [SQLite Explorer](#sqlite-explorer)
 - [Advanced Usage](#advanced-usage)
+  - [Dynamic Servers](#dynamic-servers)
   - [Low-Level Server](#low-level-server)
   - [Writing MCP Clients](#writing-mcp-clients)
-  - [Server Capabilities](#server-capabilities)
-  - [Proxy OAuth Server](#proxy-authorization-requests-upstream)
+  - [Proxy Authorization Requests Upstream](#proxy-authorization-requests-upstream)
   - [Backwards Compatibility](#backwards-compatibility)
+- [Documentation](#documentation)
+- [Contributing](#contributing)
+- [License](#license)
 
 ## Overview
 
@@ -377,6 +381,7 @@ app.listen(PORT, () => {
 ```
 
 This stateless approach is useful for:
+
 - Simple API wrappers
 - RESTful scenarios where each request is independent
 - Horizontally scaled deployments without shared session state
@@ -512,7 +517,7 @@ server.tool(
 
 ### Dynamic Servers
 
-If you want to offer an initial set of tools/prompts/resources, but later add additional ones based on user action or external state change, you can add/update/remove them _after_ the Server is connected. This will automatically emit the corresponding `listChanged` notificaions:
+If you want to offer an initial set of tools/prompts/resources, but later add additional ones based on user action or external state change, you can add/update/remove them _after_ the Server is connected. This will automatically emit the corresponding `listChanged` notifications:
 
 ```ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -543,7 +548,7 @@ putMessageTool.disable()
 
 const upgradeAuthTool = server.tool(
   "upgradeAuth",
-  { permission: z.enum(["write', vadmin"])},
+  { permission: z.enum(["write', admin"])},
   // Any mutations here will automatically emit `listChanged` notifications
   async ({ permission }) => {
     const { ok, err, previous } = await upgradeAuthAndStoreToken(permission)
@@ -686,7 +691,8 @@ You can proxy OAuth requests to an external authorization provider:
 
 ```typescript
 import express from 'express';
-import { ProxyOAuthServerProvider, mcpAuthRouter } from '@modelcontextprotocol/sdk';
+import { ProxyOAuthServerProvider } from '@modelcontextprotocol/sdk/server/auth/providers/proxyProvider.js';
+import { mcpAuthRouter } from '@modelcontextprotocol/sdk/server/auth/router.js';
 
 const app = express();
 
@@ -720,6 +726,7 @@ app.use(mcpAuthRouter({
 ```
 
 This setup allows you to:
+
 - Forward OAuth requests to an external provider
 - Add custom token validation logic
 - Manage client registrations
@@ -833,7 +840,7 @@ app.listen(3000);
 
 ## Contributing
 
-Issues and pull requests are welcome on GitHub at https://github.com/modelcontextprotocol/typescript-sdk.
+Issues and pull requests are welcome on GitHub at <https://github.com/modelcontextprotocol/typescript-sdk>.
 
 ## License
 

SECURITY.md

@@ -1,4 +1,5 @@
 # Security Policy
+
 Thank you for helping us keep the SDKs and systems they interact with secure.
 
 ## Reporting Security Issues

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@modelcontextprotocol/sdk",
-  "version": "1.11.1",
+  "version": "1.12.0",
   "description": "Model Context Protocol implementation for TypeScript",
   "license": "MIT",
   "author": "Anthropic, PBC (https://anthropic.com)",
@@ -46,9 +46,10 @@
     "client": "tsx src/cli.ts client"
   },
   "dependencies": {
+    "ajv": "^6.12.6",
     "content-type": "^1.0.5",
     "cors": "^2.8.5",
-    "cross-spawn": "^7.0.3",
+    "cross-spawn": "^7.0.5",
     "eventsource": "^3.0.2",
     "express": "^5.0.1",
     "express-rate-limit": "^7.5.0",