SDK v2 migration (behavior-neutral, versionNegotiation: 'legacy') (#1624)

Migrate all three clients + core + test-servers from
@modelcontextprotocol/sdk@1.29 to SDK v2 (2.0.0-beta.4), keeping behavior
identical against legacy (2025-11-25) servers. Foundation for the SDK V2 +
New Spec stack.

Packages
- Split @modelcontextprotocol/sdk -> @modelcontextprotocol/client (Client,
  transports, OAuth, error taxonomy, protocol types) + core (Zod schemas);
  stdio -> client/stdio, Ajv -> client/validators/ajv. Test-servers ->
  @modelcontextprotocol/server (+ server-legacy/sse). Deterministic import
  rewrite (schemas -> core, everything else -> client); the codemod misroutes
  client code to /server so it was not used for path routing.
- new Client(..., { versionNegotiation: { mode: 'legacy' } }) — nothing
  2026-era goes on the wire.

Runtime (core/mcp/inspectorClient.ts)
- Error taxonomy: McpError -> ProtocolError, ErrorCode -> ProtocolErrorCode;
  RequestTimeout -> SdkError/SdkErrorCode.
- Handlers take method strings; task methods (tasks/*, notifications/tasks/*)
  use the 3-arg custom form (excluded from v2's spec-method set).
- Legacy tasks kept working (per project requirement): requestor tasks re-
  implemented over raw client.request + explicit deprecated schemas;
  experimental.tasks.callToolStream replaced by a local pollTaskToolCall
  async generator (with _progressHandlers revival so task-execution progress
  still reaches the caller). Receiver (server-initiated) tasks: the v2 Client
  validates a sampling/elicit handler result and rejects the legacy { task }
  response with -32602 — installReceiverTaskResponseBypass swaps the wrapped
  entry in the private _requestHandlers map for the task-augmented branch so
  { task } reaches the wire (fixes server-initiated sampling-via-task).
- Pagination: list verbs use raw client.request({method}, List*ResultSchema)
  for single-page behavior (v2's client.listX() auto-aggregate all pages).

Web / auth / apps
- Rename local JsonSchemaType -> InspectorFormSchema + add toFormSchema()
  structural narrowing at the SDK-schema -> form boundary.
- ext-apps still peers on SDK v1: one compat boundary with documented casts
  (remove when ext-apps#702 lands a v2 peer).
- OAuth provider saveClientInformation reconciled with v2's
  OAuthClientInformationContext; InvalidClientMetadataError re-homed as a
  local class (server-legacy/auth is not browser-safe).
- vitest.shared.mts dedupes @modelcontextprotocol/client+core to one copy so
  vi.mock intercepts the SUT's import.

Accepted v2 behavior changes (per #1624 / spec §9.2): unknown-tool call
rejects with -32602; cancellation is stream-abort (no guaranteed
notifications/cancelled frame); output-schema strictness restored via the
Inspector's own Ajv check on the default path.

npm run ci green: validate (web 3087 / cli 212 / tui 274 / launcher 5),
coverage (>=90 per-file, all clients), smoke (launcher/cli/web), storybook
(410).

Closes #1624

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

clients/web/src/components/groups/AppControls/AppControls.stories.tsx

@@ -1,7 +1,7 @@
 import { useState } from "react";
 import type { ComponentProps } from "react";
 import type { Meta, StoryObj } from "@storybook/react-vite";
-import type { Tool } from "@modelcontextprotocol/sdk/types.js";
+import type { Tool } from "@modelcontextprotocol/client";
 import { fn, userEvent, within } from "storybook/test";
 import { AppControls } from "./AppControls";
 import { SUN_ICON_SVG } from "../../../test/fixtures/storyIcons";

clients/web/src/components/groups/AppControls/AppControls.test.tsx

@@ -1,7 +1,7 @@
 import { useState } from "react";
 import { describe, it, expect, vi } from "vitest";
 import userEvent from "@testing-library/user-event";
-import type { Tool } from "@modelcontextprotocol/sdk/types.js";
+import type { Tool } from "@modelcontextprotocol/client";
 import { renderWithMantine, screen } from "../../../test/renderWithMantine";
 import { AppControls, type AppControlsProps } from "./AppControls";
 

clients/web/src/components/groups/AppControls/AppControls.tsx

@@ -7,7 +7,7 @@ import {
   Title,
 } from "@mantine/core";
 import { ClearButton } from "../../elements/ClearButton/ClearButton";
-import type { Tool } from "@modelcontextprotocol/sdk/types.js";
+import type { Tool } from "@modelcontextprotocol/client";
 import { ListChangedIndicator } from "../../elements/ListChangedIndicator/ListChangedIndicator";
 import { AppListItem } from "../AppListItem/AppListItem";
 import { useScrollMemory } from "../../../hooks/useScrollMemory";

clients/web/src/components/groups/AppDetailPanel/AppDetailPanel.stories.tsx

@@ -1,5 +1,5 @@
 import type { Meta, StoryObj } from "@storybook/react-vite";
-import type { Tool } from "@modelcontextprotocol/sdk/types.js";
+import type { Tool } from "@modelcontextprotocol/client";
 import { fn } from "storybook/test";
 import { SUN_ICON_SVG } from "../../../test/fixtures/storyIcons";
 import { AppDetailPanel } from "./AppDetailPanel";

clients/web/src/components/groups/AppDetailPanel/AppDetailPanel.test.tsx

@@ -1,6 +1,6 @@
 import { describe, it, expect, vi } from "vitest";
 import userEvent from "@testing-library/user-event";
-import type { Tool } from "@modelcontextprotocol/sdk/types.js";
+import type { Tool } from "@modelcontextprotocol/client";
 import { renderWithMantine, screen } from "../../../test/renderWithMantine";
 import { AppDetailPanel } from "./AppDetailPanel";
 

clients/web/src/components/groups/AppDetailPanel/AppDetailPanel.tsx

@@ -1,9 +1,12 @@
 import { Button, Divider, ScrollArea, Stack, Text } from "@mantine/core";
 import { MdPlayArrow } from "react-icons/md";
-import type { Tool } from "@modelcontextprotocol/sdk/types.js";
+import type { Tool } from "@modelcontextprotocol/client";
 import { SchemaForm } from "../SchemaForm/SchemaForm";
 import { hasInputFields } from "../../../utils/toolUtils";
-import { hasMissingRequiredFields } from "../../../utils/jsonUtils";
+import {
+  hasMissingRequiredFields,
+  toFormSchema,
+} from "../../../utils/jsonUtils";
 
 export interface AppDetailPanelProps {
   tool: Tool;
@@ -43,7 +46,12 @@ export function AppDetailPanel({
   onOpenApp,
 }: AppDetailPanelProps) {
   const { description, inputSchema } = tool;
-  const hasErrors = hasMissingRequiredFields(inputSchema, formValues);
+  // Narrow the SDK protocol schema to the form renderer's schema type. A Tool's
+  // `inputSchema` is always an object per the SDK types, so `toFormSchema` never
+  // returns null here — the `?? {}` is a defensive fallback that can't be hit.
+  /* v8 ignore next -- unreachable: Tool.inputSchema is always an object */
+  const formSchema = toFormSchema(inputSchema) ?? {};
+  const hasErrors = hasMissingRequiredFields(formSchema, formValues);
   const disabled = isOpening || hasErrors;
   const hasFields = hasInputFields(tool);
 
@@ -58,7 +66,7 @@ export function AppDetailPanel({
             filling required fields. The disabled-when-incomplete gate is on
             the Open App button below, not on the form itself. */}
         <SchemaForm
-          schema={inputSchema}
+          schema={formSchema}
           values={formValues}
           onChange={onFormChange}
           disabled={isOpening}

clients/web/src/components/groups/AppListItem/AppListItem.stories.tsx

@@ -1,5 +1,5 @@
 import type { Meta, StoryObj } from "@storybook/react-vite";
-import type { Tool } from "@modelcontextprotocol/sdk/types.js";
+import type { Tool } from "@modelcontextprotocol/client";
 import { fn } from "storybook/test";
 import { SUN_ICON_SVG } from "../../../test/fixtures/storyIcons";
 import { AppListItem } from "./AppListItem";

clients/web/src/components/groups/AppListItem/AppListItem.test.tsx

@@ -1,6 +1,6 @@
 import { describe, it, expect, vi } from "vitest";
 import userEvent from "@testing-library/user-event";
-import type { Tool } from "@modelcontextprotocol/sdk/types.js";
+import type { Tool } from "@modelcontextprotocol/client";
 import { renderWithMantine, screen } from "../../../test/renderWithMantine";
 import { AppListItem } from "./AppListItem";
 

clients/web/src/components/groups/AppListItem/AppListItem.tsx

@@ -1,6 +1,6 @@
 import { Group, Image, Stack, Text, UnstyledButton } from "@mantine/core";
 import { MdChevronRight } from "react-icons/md";
-import type { Tool } from "@modelcontextprotocol/sdk/types.js";
+import type { Tool } from "@modelcontextprotocol/client";
 import { resolveDisplayLabel } from "../../../utils/toolUtils";
 
 export interface AppListItemProps {

clients/web/src/components/groups/ConnectionInfoContent/ConnectionInfoContent.stories.tsx

@@ -1,7 +1,7 @@
 import type {
   ClientCapabilities,
   InitializeResult,
-} from "@modelcontextprotocol/sdk/types.js";
+} from "@modelcontextprotocol/client";
 import type { Meta, StoryObj } from "@storybook/react-vite";
 import { ConnectionInfoContent } from "./ConnectionInfoContent";
 

clients/web/src/components/groups/ConnectionInfoContent/ConnectionInfoContent.test.tsx

@@ -3,7 +3,7 @@ import userEvent from "@testing-library/user-event";
 import type {
   ClientCapabilities,
   InitializeResult,
-} from "@modelcontextprotocol/sdk/types.js";
+} from "@modelcontextprotocol/client";
 import { renderWithMantine, screen } from "../../../test/renderWithMantine";
 import {
   CLEAR_OAUTH_STATE_AND_DISCONNECT_LABEL,

clients/web/src/components/groups/ConnectionInfoContent/ConnectionInfoContent.tsx

@@ -12,7 +12,7 @@ import {
 import type {
   ClientCapabilities,
   InitializeResult,
-} from "@modelcontextprotocol/sdk/types.js";
+} from "@modelcontextprotocol/client";
 import type { ServerType } from "@inspector/core/mcp/types.js";
 import type { OAuthClientRegistrationKind } from "@inspector/core/auth/types.js";
 import {

clients/web/src/components/groups/ConnectionInfoModal/ConnectionInfoModal.stories.tsx

@@ -1,7 +1,7 @@
 import type {
   ClientCapabilities,
   InitializeResult,
-} from "@modelcontextprotocol/sdk/types.js";
+} from "@modelcontextprotocol/client";
 import { AppShell } from "@mantine/core";
 import type { Meta, StoryObj } from "@storybook/react-vite";
 import { fn } from "storybook/test";

clients/web/src/components/groups/ConnectionInfoModal/ConnectionInfoModal.test.tsx

@@ -3,7 +3,7 @@ import userEvent from "@testing-library/user-event";
 import type {
   ClientCapabilities,
   InitializeResult,
-} from "@modelcontextprotocol/sdk/types.js";
+} from "@modelcontextprotocol/client";
 import { renderWithMantine, screen } from "../../../test/renderWithMantine";
 import { ConnectionInfoModal } from "./ConnectionInfoModal";
 

clients/web/src/components/groups/ConnectionInfoModal/ConnectionInfoModal.tsx

@@ -2,7 +2,7 @@ import { CloseButton, Group, Modal, Stack } from "@mantine/core";
 import type {
   ClientCapabilities,
   InitializeResult,
-} from "@modelcontextprotocol/sdk/types.js";
+} from "@modelcontextprotocol/client";
 import type { ServerType } from "@inspector/core/mcp/types.js";
 import {
   ConnectionInfoContent,

clients/web/src/components/groups/ElicitationFormPanel/ElicitationFormPanel.stories.tsx

@@ -1,5 +1,5 @@
 import type { Meta, StoryObj } from "@storybook/react-vite";
-import type { ElicitRequestFormParams } from "@modelcontextprotocol/sdk/types.js";
+import type { ElicitRequestFormParams } from "@modelcontextprotocol/client";
 import { fn } from "storybook/test";
 import { ElicitationFormPanel } from "./ElicitationFormPanel";
 

clients/web/src/components/groups/ElicitationFormPanel/ElicitationFormPanel.test.tsx

@@ -1,6 +1,6 @@
 import { describe, it, expect, vi } from "vitest";
 import userEvent from "@testing-library/user-event";
-import type { ElicitRequestFormParams } from "@modelcontextprotocol/sdk/types.js";
+import type { ElicitRequestFormParams } from "@modelcontextprotocol/client";
 import { renderWithMantine, screen } from "../../../test/renderWithMantine";
 import { ElicitationFormPanel } from "./ElicitationFormPanel";
 

clients/web/src/components/groups/ElicitationFormPanel/ElicitationFormPanel.tsx

@@ -7,10 +7,10 @@ import {
   Stack,
   Text,
 } from "@mantine/core";
-import type { ElicitRequestFormParams } from "@modelcontextprotocol/sdk/types.js";
+import type { ElicitRequestFormParams } from "@modelcontextprotocol/client";
 import {
   hasMissingRequiredFields,
-  type JsonSchemaType,
+  type InspectorFormSchema,
 } from "../../../utils/jsonUtils";
 import { SchemaForm } from "../SchemaForm/SchemaForm";
 
@@ -68,7 +68,7 @@ export function ElicitationFormPanel({
   onCancel,
   busy = false,
 }: ElicitationFormPanelProps) {
-  const requestedSchema = request.requestedSchema as JsonSchemaType;
+  const requestedSchema = request.requestedSchema as InspectorFormSchema;
   const submitDisabled =
     busy || hasMissingRequiredFields(requestedSchema, values);
   return (

clients/web/src/components/groups/ExperimentalFeaturesPanel/ExperimentalFeaturesPanel.tsx

@@ -20,7 +20,7 @@ import type {
   JSONRPCErrorResponse,
   JSONRPCResponse,
   ServerCapabilities,
-} from "@modelcontextprotocol/sdk/types.js";
+} from "@modelcontextprotocol/client";
 
 export interface HeaderPair {
   key: string;

clients/web/src/components/groups/InlineElicitationRequest/InlineElicitationRequest.stories.tsx

@@ -1,5 +1,5 @@
 import type { Meta, StoryObj } from "@storybook/react-vite";
-import type { ElicitRequest } from "@modelcontextprotocol/sdk/types.js";
+import type { ElicitRequest } from "@modelcontextprotocol/client";
 import { fn } from "storybook/test";
 import { InlineElicitationRequest } from "./InlineElicitationRequest";