ruby-sdk/test/mcp/client/mcp_param_headers_test.rb
Koichi ITO 3511375204 Mirror x-mcp-header tool parameters into Mcp-Param-* headers per SEP-2243
## Motivation and Context

SEP-2243's custom-header half (MCP 2026-07-28) lets a tool annotate `inputSchema` properties with
`x-mcp-header` so intermediaries can route on argument values without parsing bodies: the client MUST
mirror each annotated argument of a `tools/call` into an `Mcp-Param-{Name}` header, encode values that
cannot ride as plain ASCII field values with the `=?base64?...?=` sentinel, and omit the header for
`null` or absent arguments. `MCP::Client::HTTP` sent only the standard `Mcp-Method`/`Mcp-Name` mirror
headers, so every `http-custom-headers` check of the 2026-07-28 conformance requirements fails.

The new `MCP::Client::McpParamHeaders` module ports the TypeScript SDK's `mcpParamHeaders` codec:

- `scan` walks a tool's `inputSchema` for declarations and validates every constraint the spec places
  on them: RFC 9110 token names, case-insensitive uniqueness, primitive-typed declaring properties
  (`number` is accepted alongside the spec's `string`/`integer`/`boolean` because the published
  referee annotates `type: "number"` parameters, the same accommodation the TypeScript SDK makes),
  and static reachability through a chain of `properties` keys only: an annotation under `items`,
  the combinators, or `$defs` invalidates the whole tool definition.
- `build` resolves each declaration's path in the call's `arguments`, omits `null`/absent and
  non-representable values (unsafe integers, non-finite floats, non-primitives), converts primitives
  per the spec's rules, and encodes with the sentinel exactly where a plain ASCII field value
  cannot carry the value (empty, edge whitespace, bytes outside visible ASCII, sentinel-shaped input).

`MCP::Client::HTTP` learns declarations from the `tools/list` responses passing through it (the same
source of truth the TypeScript SDK's response cache uses) and mirrors on each `tools/call` alongside
the existing `Mcp-Method`/`Mcp-Name` construction. Learning and mirroring exist on the modern
lifecycle only, matching both reference SDKs. An invalid tool definition mirrors nothing, per
the spec's guidance to send without custom headers when no reliable declarations are available;
a complete (uncursored, `nextCursor`-less) listing rebuilds the registry so declarations of
unlisted tools stop mirroring (the Python SDK's pruning), and the registry is capped
(`MAX_MCP_PARAM_TOOLS`, 1000) so a server rotating tool names cannot grow it without bound.

On the modern lifecycle, `MCP::Client#list_tools` and `#tools` also enforce the spec's MUST:
a tool definition whose `x-mcp-header` annotations violate the constraints is excluded from
the listing, with a warning naming the tool and the reason (the spec's SHOULD), so one malformed
definition does not block the valid tools - the same filtering the Python SDK's
`_absorb_tool_listing` and the TypeScript SDK's cached-listing finalize apply. A value that cannot
be represented as UTF-8 omits its header like the other non-representable values.
The README documents the mirroring and the exclusion under the lifecycle negotiation section.
The server-side validation half of the codec is a follow-up.

## How Has This Been Tested?

New `test/mcp/client/mcp_param_headers_test.rb` covers the scan constraint matrix (root and
non-reachable placements, empty/non-token/duplicate names, non-primitive types), the primitive
conversions (including `42.0` serializing as `42` and unsafe integers refusing), the encoding matrix
(plain pass-through, empty, non-ASCII, edge whitespace, CR/LF, sentinel-shaped input), and header
construction with nested paths and omitted values (including a value that cannot be represented
as UTF-8). `test/mcp/client/http_test.rb` drives the transport end to end over a modern connection:
a `tools/list` teaching the declarations, the following `tools/call` carrying the mirrored headers,
an invalid declaration mirroring nothing, a legacy connection learning nothing, and a complete
listing pruning the declarations of unlisted tools. `test/mcp/client_test.rb` covers the MUST-level
exclusion: the invalid definition dropped from `#tools` with the warning on a modern connection,
and listed unchanged on a legacy one. `bundle exec rake` is green.

## Breaking Changes

None. Requests to servers whose tools carry no `x-mcp-header` annotations are byte-for-byte unchanged,
and the new headers only appear for tools that declare them.
2026-08-08 20:58:35 +09:00

208 lines
7.6 KiB
Ruby

# frozen_string_literal: true
require "test_helper"
require "mcp/client/mcp_param_headers"
module MCP
class Client
class McpParamHeadersTest < Minitest::Test
def test_scan_collects_declarations_from_properties
scan = McpParamHeaders.scan({
"type" => "object",
"properties" => {
"region" => { "type" => "string", "x-mcp-header" => "Region" },
"priority" => { "type" => "integer", "x-mcp-header" => "Priority" },
"verbose" => { "type" => "boolean", "x-mcp-header" => "Verbose" },
"plain" => { "type" => "string" },
},
})
assert(scan[:valid])
assert_equal(
[
{ path: ["region"], header_name: "Region", type: "string" },
{ path: ["priority"], header_name: "Priority", type: "integer" },
{ path: ["verbose"], header_name: "Verbose", type: "boolean" },
],
scan[:declarations],
)
end
def test_scan_collects_nested_declarations_and_symbol_keys
scan = McpParamHeaders.scan({
type: "object",
properties: {
options: {
type: "object",
properties: {
region: { type: "string", "x-mcp-header": "Region" },
},
},
},
})
assert(scan[:valid])
assert_equal([{ path: ["options", "region"], header_name: "Region", type: "string" }], scan[:declarations])
end
def test_scan_accepts_number_typed_declarations
scan = McpParamHeaders.scan({
"type" => "object",
"properties" => { "float_val" => { "type" => "number", "x-mcp-header" => "FloatVal" } },
})
assert(scan[:valid])
assert_equal("number", scan[:declarations].first[:type])
end
def test_scan_rejects_an_annotation_at_the_schema_root
scan = McpParamHeaders.scan({ "type" => "object", "x-mcp-header" => "Root" })
refute(scan[:valid])
assert_includes(scan[:reason], "statically reachable")
end
def test_scan_rejects_annotations_under_non_reachable_keywords
["oneOf", "items", "$defs"].each do |keyword|
nested = { "type" => "string", "x-mcp-header" => "Hidden" }
sub = keyword == "$defs" ? { "entry" => nested } : [nested]
scan = McpParamHeaders.scan({ "type" => "object", keyword => sub })
refute(scan[:valid], "expected the annotation under #{keyword} to invalidate the schema")
end
end
def test_scan_rejects_empty_and_non_string_annotations
["", 42].each do |annotation|
scan = McpParamHeaders.scan({
"type" => "object",
"properties" => { "value" => { "type" => "string", "x-mcp-header" => annotation } },
})
refute(scan[:valid])
assert_includes(scan[:reason], "non-empty string")
end
end
def test_scan_rejects_non_token_annotation_names
["has space", "colon:name", "日本語", "line\nbreak"].each do |annotation|
scan = McpParamHeaders.scan({
"type" => "object",
"properties" => { "value" => { "type" => "string", "x-mcp-header" => annotation } },
})
refute(scan[:valid], "expected #{annotation.inspect} to be rejected")
assert_includes(scan[:reason], "RFC 9110")
end
end
def test_scan_rejects_non_primitive_declaring_properties
[{ "type" => "object" }, { "type" => "array" }, {}].each do |extra|
scan = McpParamHeaders.scan({
"type" => "object",
"properties" => { "value" => extra.merge("x-mcp-header" => "Value") },
})
refute(scan[:valid])
assert_includes(scan[:reason], "primitive-typed")
end
end
def test_scan_rejects_case_insensitively_duplicated_names
scan = McpParamHeaders.scan({
"type" => "object",
"properties" => {
"one" => { "type" => "string", "x-mcp-header" => "Region" },
"two" => { "type" => "string", "x-mcp-header" => "REGION" },
},
})
refute(scan[:valid])
assert_includes(scan[:reason], "case-insensitively unique")
end
def test_primitive_to_string_conversions
assert_equal("us-west1", McpParamHeaders.primitive_to_string("us-west1"))
assert_equal("true", McpParamHeaders.primitive_to_string(true))
assert_equal("false", McpParamHeaders.primitive_to_string(false))
assert_equal("42", McpParamHeaders.primitive_to_string(42))
assert_equal("42", McpParamHeaders.primitive_to_string(42.0))
assert_equal("3.14159", McpParamHeaders.primitive_to_string(3.14159))
assert_nil(McpParamHeaders.primitive_to_string(2**53 + 1))
assert_nil(McpParamHeaders.primitive_to_string(Float::INFINITY))
assert_nil(McpParamHeaders.primitive_to_string({ "nested" => true }))
end
def test_encode_value_passes_safe_ascii_through
assert_equal("us-west1", McpParamHeaders.encode_value("us-west1"))
assert_equal("SELECT * FROM users", McpParamHeaders.encode_value("SELECT * FROM users"))
end
def test_encode_value_wraps_unsafe_values_in_the_base64_sentinel
{
"" => "",
"Hello, 世界" => "Hello, 世界",
" padded " => " padded ",
"\tindented" => "\tindented",
"line1\nline2" => "line1\nline2",
"line1\r\nline2" => "line1\r\nline2",
"=?base64?Zm9v?=" => "=?base64?Zm9v?=",
}.each do |raw, decoded|
encoded = McpParamHeaders.encode_value(raw)
assert_match(/\A=\?base64\?.*\?=\z/, encoded, "expected #{raw.inspect} to be wrapped")
payload = encoded.delete_prefix("=?base64?").delete_suffix("?=")
assert_equal(decoded, payload.unpack1("m0").force_encoding(Encoding::UTF_8))
end
end
def test_build_mirrors_declared_arguments_into_prefixed_headers
declarations = [
{ path: ["region"], header_name: "Region", type: "string" },
{ path: ["priority"], header_name: "Priority", type: "integer" },
{ path: ["method_val"], header_name: "Method", type: "string" },
]
headers = McpParamHeaders.build(declarations, { "region" => "us-west1", priority: 42, "method_val" => "test-method" })
assert_equal(
{
"Mcp-Param-Region" => "us-west1",
"Mcp-Param-Priority" => "42",
"Mcp-Param-Method" => "test-method",
},
headers,
)
end
def test_build_omits_null_absent_and_non_primitive_values
declarations = [
{ path: ["null_val"], header_name: "NullVal", type: "string" },
{ path: ["absent"], header_name: "Absent", type: "string" },
{ path: ["object_val"], header_name: "ObjectVal", type: "string" },
]
headers = McpParamHeaders.build(declarations, { "null_val" => nil, "object_val" => { "a" => 1 } })
assert_empty(headers)
end
def test_build_reads_nested_paths
declarations = [{ path: ["options", "region"], header_name: "Region", type: "string" }]
headers = McpParamHeaders.build(declarations, { "options" => { "region" => "us-east1" } })
assert_equal({ "Mcp-Param-Region" => "us-east1" }, headers)
end
def test_build_omits_values_that_cannot_be_represented_as_utf_8
declarations = [{ path: ["blob"], header_name: "Blob", type: "string" }]
binary = (+"\xff\xfe").force_encoding(Encoding::ASCII_8BIT)
headers = McpParamHeaders.build(declarations, { "blob" => binary })
assert_empty(headers)
end
end
end
end