Work through the spec-conformance gaps recorded by the interaction suite#2999

Draft

maxisbey wants to merge 14 commits into

mainfrom

requirements-divergences

Commits on Jun 27, 2026

Tighten requirements-catalog divergence notes to match current SDK behaviour
maxisbey
committed
Emit RFC 6750 scope= in WWW-Authenticate and validate token audience
maxisbey
committed
Stop replying to cancelled requests; map unhandled handler exceptions to -32603
maxisbey
committed
Reject bearer tokens that carry no audience claim
maxisbey
committed
Use spec error codes for unhandled elicitation/create and roots/list
maxisbey
committed
Reject non-HTTPS, non-loopback redirect URIs at client registration
maxisbey
committed
Align OAuth client with spec on PKCE verification and scope selection
maxisbey
committed
Reject a second initialize on an already-initialized session
maxisbey
committed
Make the prompt test's opaque coverage workaround explicit
maxisbey
committed
Add an opt-in strict_capabilities flag to Client and ClientSession
maxisbey
committed
Deprecate ServerSession.send_progress_notification
maxisbey
committed
Type the elicitation requested schema on the send side
maxisbey
committed
Record two divergences as intentional, ecosystem-consistent choices
maxisbey
committed

Commits on Jun 28, 2026

Close cancelled HTTP exchanges and harden auth validation
maxisbey
committed