address deletion-audit findings: scrub planning vocabulary, fix phantom spec-type entries, restore collateral cancellation test

Author: felixweinberger

docs/migration.md

@@ -894,7 +894,7 @@ The 2025-11 experimental tasks side-channel woven through `Protocol` has been re
 
 **Also removed:** the storage layer (`TaskStore`, `InMemoryTaskStore`, `CreateTaskOptions`, `isTerminal`) and `TaskCreationParams`. They will return as part of the SEP-2663 server-directed plugin in a follow-up.
 
-There is no migration path for the removed surface; it was always `@experimental`. Under SEP-2663, tasks reattach via a `DispatchMiddleware` (`mcp.use(tasksPlugin({ store }))`) and handlers read task context from `ctx.ext.task` instead of `ctx.task`.
+There is no migration path for the removed surface; it was always `@experimental`. Task support is planned to return as an opt-in extension plugin per SEP-2663.
 
 ## Enhancements
 

examples/client/src/simpleOAuthClient.ts

@@ -209,7 +209,7 @@ class InteractiveOAuthClient {
         console.log('Commands:');
         console.log('  list - List available tools');
         console.log('  call <tool_name> [args] - Call a tool');
-        console.log('  stream <tool_name> [args] - (disabled pending SEP-2663 tasksPlugin)');
+        console.log('  stream <tool_name> [args] - (disabled; returns when the SEP-2663 tasks extension lands)');
         console.log('  quit - Exit the client');
         console.log();
 
@@ -358,12 +358,11 @@ class InteractiveOAuthClient {
             return;
         }
 
-        // TODO(F3): re-enable streaming-tool demo via tasksPlugin (SEP-2663).
-        // The 2025-11 callToolStream API is removed by R0; this command is disabled
-        // until the F3 rewrite.
+        // The streaming-tool demo (callToolStream) was removed with the 2025-11
+        // experimental tasks (SEP-2663); it returns when the tasks extension lands.
         void toolName;
         void toolArgs;
-        console.log('Streaming tool demo disabled pending tasksPlugin (SEP-2663). See TODO(F3).');
+        console.log('Streaming tool demo removed with the 2025-11 experimental tasks (SEP-2663); returns when the tasks extension lands.');
     }
 
     close(): void {

examples/server/README.md

@@ -27,7 +27,7 @@ pnpm tsx src/simpleStreamableHttp.ts
 
 | Scenario                                  | Description                                                                                                                 | File                                                                                     |
 | ----------------------------------------- | --------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------- |
-| Streamable HTTP server (stateful)         | Feature-rich server with tools/resources/prompts, logging, tasks, sampling, and optional OAuth.                             | [`src/simpleStreamableHttp.ts`](src/simpleStreamableHttp.ts)                             |
+| Streamable HTTP server (stateful)         | Feature-rich server with tools/resources/prompts, logging, sampling, and optional OAuth.                                    | [`src/simpleStreamableHttp.ts`](src/simpleStreamableHttp.ts)                             |
 | Streamable HTTP server (stateless)        | No session tracking; good for simple API-style servers.                                                                     | [`src/simpleStatelessStreamableHttp.ts`](src/simpleStatelessStreamableHttp.ts)           |
 | Resource-Server-only auth                 | Minimal OAuth RS using `mcpAuthMetadataRouter` + `requireBearerAuth` from `@modelcontextprotocol/express` (no better-auth). | [`src/resourceServerOnly.ts`](src/resourceServerOnly.ts)                                 |
 | JSON response mode (no SSE)               | Streamable HTTP with JSON-only responses and limited notifications.                                                         | [`src/jsonResponseStreamableHttp.ts`](src/jsonResponseStreamableHttp.ts)                 |

packages/core/src/types/schemas.ts

@@ -1052,7 +1052,14 @@ export const ToolAnnotationsSchema = z.object({
  * Execution-related properties for a tool.
  */
 export const ToolExecutionSchema = z.object({
-    // taskSupport field removed in P0.2 alongside spec.types.ts regen (kept here only while spec.types.ts still declares it).
+    /**
+     * Indicates the tool's preference for task-augmented execution
+     * (`"required"`, `"optional"`, or `"forbidden"`; defaults to `"forbidden"`).
+     *
+     * The SDK no longer implements task-augmented execution (SEP-2663). The field is
+     * kept for parity with the spec schema's `ToolExecution` type and will be removed
+     * when the generated spec types next sync.
+     */
     taskSupport: z.enum(['required', 'optional', 'forbidden']).optional()
 });
 

packages/core/test/shared/protocol.test.ts

@@ -771,6 +771,53 @@ describe('protocol tests', () => {
             expect(sendSpy).toHaveBeenCalledTimes(2);
         });
     });
+
+    describe('notifications/cancelled behavior', () => {
+        test('should abort request handler when notifications/cancelled is received', async () => {
+            await protocol.connect(transport);
+
+            // Set up a request handler that checks if it was aborted
+            let wasAborted = false;
+            protocol.setRequestHandler('ping', async (_request, ctx) => {
+                // Simulate a long-running operation
+                await new Promise(resolve => setTimeout(resolve, 100));
+                wasAborted = ctx.mcpReq.signal.aborted;
+                return {};
+            });
+
+            // Simulate an incoming request
+            const requestId = 123;
+            if (transport.onmessage) {
+                transport.onmessage({
+                    jsonrpc: '2.0',
+                    id: requestId,
+                    method: 'ping',
+                    params: {}
+                });
+            }
+
+            // Wait a bit for the handler to start
+            await new Promise(resolve => setTimeout(resolve, 10));
+
+            // Send cancellation notification
+            if (transport.onmessage) {
+                transport.onmessage({
+                    jsonrpc: '2.0',
+                    method: 'notifications/cancelled',
+                    params: {
+                        requestId: requestId,
+                        reason: 'User cancelled'
+                    }
+                });
+            }
+
+            // Wait for the handler to complete
+            await new Promise(resolve => setTimeout(resolve, 150));
+
+            // Verify the request was aborted
+            expect(wasAborted).toBe(true);
+        });
+    });
 });
 
 // (2025-11 experimental test suites removed under SEP-2663; see git history.)

packages/core/test/spec.types.test.ts

@@ -962,7 +962,6 @@ const MISSING_SDK_TYPES = [
     'Task',
     'TaskStatus',
     'TaskMetadata',
-    'TaskCreationParams',
     'TaskAugmentedRequestParams',
     'RelatedTaskMetadata',
     'CreateTaskResult',
@@ -980,9 +979,7 @@ const MISSING_SDK_TYPES = [
     'CancelTaskResult',
     'CancelTaskResultResponse',
     'TaskStatusNotification',
-    'TaskStatusNotificationParams',
-    'ClientTasksCapability',
-    'ServerTasksCapability'
+    'TaskStatusNotificationParams'
 ];
 
 function extractExportedTypes(source: string): string[] {

test/integration/test/server.test.ts

@@ -1821,7 +1821,7 @@ describe('createMessage validation', () => {
 });
 
 // SEP-2663 removes the client-hosted task store these tests relied on (server polls
-// the client's tasks/* for async sampling). That direction becomes MRTR (S3/F4),
+// the client's tasks/* for async sampling). That direction becomes MRTR,
 // not tasks. The remaining sampling.tools capability assertions are covered by
 // `_createMessageVia` tests; the `createMessageStream` wrapper has no equivalent and is
 // removed.