feat(serve): protocol version and capabilities in health

[Moikapy]

Part of #144 (section B: "Protocol version and capabilities in health").

What

health now returns:

{ "status": "ok", "version": "…", "protocol_version": 1,
  "capabilities": { "methods": ["health", "session.create", …], "notifications": ["event"] } }

• protocol_version is SERVE_PROTOCOL_VERSION (exported). It is bumped only on breaking wire changes.
• New features (text_delta, client tools, deadline_ms) will add entries to capabilities rather than bump the version.
• methods lists prompt.submit / prompt.abort only when the server has an Agent. Without one they return an application error, so a client can now check first.

The change is additive: existing clients, Ossuary included, ignore the new fields.

Tests

• Exact health result without an agent, and the full method list with one. Mutation check: dropping the prompt.* filter fails the test.
• Health assertions that only cared about status/version now use objectContaining.
• tsc is clean, and the serve tests pass apart from ::1, which fails on main in this environment too. The other environment-only failures are three DNS-dependent fetch tests.

Not in this PR

JSON Schema export of the protocol (the next #144 box).

🤖 Generated with Claude Code

https://claude.ai/code/session_01LHQAfXHofy6QkAgmfmJava

---

Generated by Claude Code

[cursor]

PR #184 — Risk: HIGH (new exports from src/index.ts: SERVE_PROTOCOL_VERSION and ServeCapabilities; HealthResult now requires protocol_version and capabilities)

@Moikapy — this changes the public export surface, so it stays with you. The wire payload is additive. Ossuary fetch_health only checks status and version and ignores the new fields. I did not find a defect.

health reports SERVE_PROTOCOL_VERSION (1) and capabilities. methods omits prompt.* exactly when context.prompts is missing, which is the same check prompt.submit / prompt.abort use before returning agent not configured. The no-agent test locks the method list; the with-agent test expects the full SERVE_METHODS list. Other health assertions use objectContaining / toMatchObject, so the extra fields do not fail them.

Findings: Critical 0 / Warning 0 / Suggestion 0
Regressions of settled findings: none
Not reviewed: none
Action: escalated to @Moikapy
Log: 2026-10-08T16:13:25Z, escalated, HIGH because src/index.ts exports changed; auto-merge left off; needs-review added; CI typecheck_and_test (20) and (22) still in progress (ossuary, wiki_lint, AccessLint passed); head commit author claude is outside the example approved-bot set

  

_{Sent by Cursor Automation: PR REVIEW}