@introspection-ai/recipes 0.28.0 → 0.30.0

package/dist/mcp-chunks/{chunk-S5F3HEZZ.js → chunk-IR5SMKTP.js}

@@ -3,7 +3,7 @@ import {
   __export
 } from "./chunk-LRKZP7DJ.js";
 
-// node_modules/.pnpm/@modelcontextprotocol+client@2.0.0/node_modules/@modelcontextprotocol/client/dist/chunk-Br0eD_fh.mjs
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/@modelcontextprotocol/client/dist/chunk-Br0eD_fh.mjs
 var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
@@ -43,7 +43,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   enumerable: true
 }) : target, mod));
 
-// node_modules/.pnpm/@modelcontextprotocol+client@2.0.0/node_modules/@modelcontextprotocol/client/dist/dialects-BOhdv1Fc.mjs
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/@modelcontextprotocol/client/dist/dialects-BOhdv1Fc.mjs
 var DRAFT_2020_12_URIS = /* @__PURE__ */ new Set(["https://json-schema.org/draft/2020-12/schema", "http://json-schema.org/draft/2020-12/schema"]);
 var DRAFT_2019_09_URIS = /* @__PURE__ */ new Set(["https://json-schema.org/draft/2019-09/schema", "http://json-schema.org/draft/2019-09/schema"]);
 var DRAFT_07_URIS = /* @__PURE__ */ new Set(["https://json-schema.org/draft-07/schema", "http://json-schema.org/draft-07/schema"]);
@@ -60,7 +60,7 @@ function declaredDialect(schema, remedy) {
   throw new Error(`JSON Schema declares an unsupported dialect ("$schema": "${schema.$schema.slice(0, 200)}"). The default validator supports JSON Schema 2020-12, 2019-09, draft-07, and draft-06; ${remedy}`);
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/classic/external.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/classic/external.js
 var external_exports = {};
 __export(external_exports, {
   $brand: () => $brand,
@@ -323,7 +323,7 @@ __export(external_exports, {
   xor: () => xor
 });
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/index.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/core/index.js
 var core_exports2 = {};
 __export(core_exports2, {
   $ZodAny: () => $ZodAny,
@@ -640,7 +640,7 @@ __export(core_exports2, {
   withParser: () => withParser
 });
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/util.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/core/util.js
 var util_exports = {};
 __export(util_exports, {
   BIGINT_FORMAT_RANGES: () => BIGINT_FORMAT_RANGES,
@@ -1483,7 +1483,7 @@ function constantCatch(value) {
   return fn;
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/core.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/core/core.js
 var _a;
 var NEVER = /* @__PURE__ */ Object.freeze({
   status: "aborted"
@@ -1605,7 +1605,7 @@ function config(newConfig) {
   return globalConfig;
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/errors.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/core/errors.js
 function _getMessage() {
   const internals = this._zod;
   internals.message ?? (internals.message = JSON.stringify(internals.def, jsonStringifyReplacer, 2));
@@ -1797,7 +1797,7 @@ function prettifyError(error62) {
   return lines.join("\n");
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/parse.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/core/parse.js
 function finalizeParams(callee, params) {
   return { callee: params?.callee ?? callee, Err: params?.Err };
 }
@@ -1957,7 +1957,7 @@ var _safeDecodeAsync = (_Err) => async (schema, value, _ctx) => {
 };
 var safeDecodeAsync = /* @__PURE__ */ _safeDecodeAsync($ZodRealError);
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/regexes.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/core/regexes.js
 var regexes_exports = {};
 __export(regexes_exports, {
   anyString: () => anyString,
@@ -2129,7 +2129,7 @@ var sha512_hex = /^[0-9a-fA-F]{128}$/;
 var sha512_base64 = /* @__PURE__ */ fixedBase64(86, "==");
 var sha512_base64url = /* @__PURE__ */ fixedBase64url(86);
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/checks.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/core/checks.js
 var $ZodCheck = /* @__PURE__ */ $constructor("$ZodCheck", (inst, def) => {
   var _a3;
   inst._zod ?? (inst._zod = {});
@@ -2605,7 +2605,7 @@ var $ZodCheckOverwrite = /* @__PURE__ */ $constructor("$ZodCheckOverwrite", (ins
   };
 });
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/doc.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/core/doc.js
 var Doc = class {
   constructor(args = [], closed = {}) {
     this.content = [];
@@ -2646,14 +2646,14 @@ ${content.join("\n")}
   }
 };
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/versions.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/core/versions.js
 var version = {
   major: 4,
   minor: 6,
   patch: 5
 };
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/schemas.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/core/schemas.js
 var $ZodType = /* @__PURE__ */ $constructor("$ZodType", (inst, def) => {
   var _a3;
   inst ?? (inst = {});
@@ -5067,7 +5067,7 @@ function handleRefineResult(result, payload, input2, inst) {
   }
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/memoizer.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/core/memoizer.js
 var $ZodCyclicError = class extends Error {
   constructor() {
     super(`Cannot parse a reference cycle that closes through a transform`);
@@ -5344,7 +5344,7 @@ function isBackEdge(ctx, value) {
   return backEdges !== void 0 && isRef(value) && backEdges.has(value);
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/index.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/index.js
 var locales_exports = {};
 __export(locales_exports, {
   ar: () => ar_default,
@@ -5412,7 +5412,7 @@ __export(locales_exports, {
   zhTW: () => zh_TW_default
 });
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/ar.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/ar.js
 var error = () => {
   const Sizable = {
     string: { unit: "\u062D\u0631\u0641", verb: "\u0623\u0646 \u064A\u062D\u0648\u064A" },
@@ -5524,7 +5524,7 @@ function ar_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/az.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/az.js
 var error2 = () => {
   const Sizable = {
     string: { unit: "simvol", verb: "olmal\u0131d\u0131r" },
@@ -5635,7 +5635,7 @@ function az_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/be.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/be.js
 function getBelarusianPlural(count, one, few, many) {
   const absCount = Math.abs(count);
   const lastDigit = absCount % 10;
@@ -5804,7 +5804,7 @@ function be_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/bg.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/bg.js
 var error4 = () => {
   const Sizable = {
     string: { unit: "\u0441\u0438\u043C\u0432\u043E\u043B\u0430", verb: "\u0434\u0430 \u0441\u044A\u0434\u044A\u0440\u0436\u0430" },
@@ -5930,7 +5930,7 @@ function bg_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/bn.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/bn.js
 var error5 = () => {
   const Sizable = {
     string: { unit: "\u0985\u0995\u09CD\u09B7\u09B0", verb: "\u09A5\u09BE\u0995\u09A4\u09C7 \u09B9\u09AC\u09C7" },
@@ -6044,7 +6044,7 @@ function bn_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/ca.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/ca.js
 var error6 = () => {
   const Sizable = {
     string: { unit: "car\xE0cters", verb: "contenir" },
@@ -6158,7 +6158,7 @@ function ca_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/ckb.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/ckb.js
 var error7 = () => {
   const Sizable = {
     string: { unit: "\u067E\u06CC\u062A", verb: "\u0628\u06CE\u062A" },
@@ -6291,7 +6291,7 @@ function ckb_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/cs.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/cs.js
 var error8 = () => {
   const Sizable = {
     string: { unit: "znak\u016F", verb: "m\xEDt" },
@@ -6408,7 +6408,7 @@ function cs_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/da.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/da.js
 var error9 = () => {
   const Sizable = {
     string: { unit: "tegn", verb: "havde" },
@@ -6529,7 +6529,7 @@ function da_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/de.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/de.js
 var error10 = () => {
   const Sizable = {
     string: { unit: "Zeichen", verb: "zu haben" },
@@ -6643,7 +6643,7 @@ function de_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/el.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/el.js
 var error11 = () => {
   const Sizable = {
     string: { unit: "\u03C7\u03B1\u03C1\u03B1\u03BA\u03C4\u03AE\u03C1\u03B5\u03C2", verb: "\u03BD\u03B1 \u03AD\u03C7\u03B5\u03B9" },
@@ -6756,7 +6756,7 @@ function el_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/en.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/en.js
 var error12 = () => {
   const Sizable = {
     string: { unit: "characters", verb: "to have" },
@@ -6881,7 +6881,7 @@ function en_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/eo.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/eo.js
 var error13 = () => {
   const Sizable = {
     string: { unit: "karaktrojn", verb: "havi" },
@@ -6996,7 +6996,7 @@ function eo_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/es.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/es.js
 var error14 = () => {
   const Sizable = {
     string: { unit: "caracteres", verb: "tener" },
@@ -7133,7 +7133,7 @@ function es_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/fa.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/fa.js
 var error15 = () => {
   const Sizable = {
     string: { unit: "\u06A9\u0627\u0631\u0627\u06A9\u062A\u0631", verb: "\u062F\u0627\u0634\u062A\u0647 \u0628\u0627\u0634\u062F" },
@@ -7253,7 +7253,7 @@ function fa_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/fi.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/fi.js
 var error16 = () => {
   const Sizable = {
     string: { unit: "merkki\xE4", subject: "merkkijonon" },
@@ -7371,7 +7371,7 @@ function fi_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/fr.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/fr.js
 var error17 = () => {
   const Sizable = {
     string: { unit: "caract\xE8res", verb: "avoir" },
@@ -7501,7 +7501,7 @@ function fr_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/fr-CA.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/fr-CA.js
 var error18 = () => {
   const Sizable = {
     string: { unit: "caract\xE8res", verb: "avoir" },
@@ -7614,7 +7614,7 @@ function fr_CA_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/gu.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/gu.js
 var error19 = () => {
   const Sizable = {
     string: { unit: "\u0A85\u0A95\u0ACD\u0AB7\u0AB0", verb: "\u0AB9\u0ACB\u0AB5\u0ABE \u0A9C\u0ACB\u0A88\u0A8F" },
@@ -7728,7 +7728,7 @@ function gu_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/he.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/he.js
 var error20 = () => {
   const TypeNames = {
     string: { label: "\u05DE\u05D7\u05E8\u05D5\u05D6\u05EA", gender: "f" },
@@ -7930,7 +7930,7 @@ function he_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/hi.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/hi.js
 var error21 = () => {
   const Sizable = {
     string: { unit: "\u0905\u0915\u094D\u0937\u0930", verb: "\u0930\u0916\u0928\u0947 \u0915\u0947 \u0932\u093F\u090F" },
@@ -8042,7 +8042,7 @@ function hi_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/hr.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/hr.js
 var error22 = () => {
   const Sizable = {
     string: { unit: "znakova", verb: "imati" },
@@ -8169,7 +8169,7 @@ function hr_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/hu.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/hu.js
 var error23 = () => {
   const Sizable = {
     string: { unit: "karakter", verb: "legyen" },
@@ -8283,7 +8283,7 @@ function hu_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/hy.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/hy.js
 function getArmenianPlural(count, one, many) {
   return Math.abs(count) === 1 ? one : many;
 }
@@ -8442,7 +8442,7 @@ function hy_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/id.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/id.js
 var error25 = () => {
   const Sizable = {
     string: { unit: "karakter", verb: "memiliki" },
@@ -8554,7 +8554,7 @@ function id_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/is.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/is.js
 var error26 = () => {
   const Sizable = {
     string: { unit: "stafi", verb: "a\xF0 hafa" },
@@ -8669,7 +8669,7 @@ function is_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/it.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/it.js
 var error27 = () => {
   const Sizable = {
     string: { unit: "caratteri", verb: "avere" },
@@ -8783,7 +8783,7 @@ function it_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/ja.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/ja.js
 var error28 = () => {
   const Sizable = {
     string: { unit: "\u6587\u5B57", verb: "\u3067\u3042\u308B" },
@@ -8896,7 +8896,7 @@ function ja_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/ka.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/ka.js
 var error29 = () => {
   const Sizable = {
     string: { unit: "\u10E1\u10D8\u10DB\u10D1\u10DD\u10DA\u10DD", verb: "\u10E3\u10DC\u10D3\u10D0 \u10E8\u10D4\u10D8\u10EA\u10D0\u10D5\u10D3\u10D4\u10E1" },
@@ -9014,7 +9014,7 @@ function ka_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/km.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/km.js
 var error30 = () => {
   const Sizable = {
     string: { unit: "\u178F\u17BD\u17A2\u1780\u17D2\u179F\u179A", verb: "\u1782\u17BD\u179A\u1798\u17B6\u1793" },
@@ -9130,12 +9130,12 @@ function km_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/kh.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/kh.js
 function kh_default() {
   return km_default();
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/kn.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/kn.js
 var error31 = () => {
   const Sizable = {
     string: { unit: "\u0C85\u0C95\u0CCD\u0CB7\u0CB0\u0C97\u0CB3\u0CC1", verb: "\u0CB9\u0CCA\u0C82\u0CA6\u0CB2\u0CC1" },
@@ -9251,7 +9251,7 @@ function kn_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/ko.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/ko.js
 var error32 = () => {
   const Sizable = {
     string: { unit: "\uBB38\uC790", verb: "to have" },
@@ -9368,7 +9368,7 @@ function ko_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/lt.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/lt.js
 var capitalizeFirstCharacter = (text) => {
   return text.charAt(0).toUpperCase() + text.slice(1);
 };
@@ -9576,7 +9576,7 @@ function lt_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/mk.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/mk.js
 var error34 = () => {
   const Sizable = {
     string: { unit: "\u0437\u043D\u0430\u0446\u0438", verb: "\u0434\u0430 \u0438\u043C\u0430\u0430\u0442" },
@@ -9691,7 +9691,7 @@ function mk_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/ms.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/ms.js
 var error35 = () => {
   const Sizable = {
     string: { unit: "aksara", verb: "mempunyai" },
@@ -9804,7 +9804,7 @@ function ms_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/ne.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/ne.js
 var error36 = () => {
   const Sizable = {
     string: { unit: "\u0905\u0915\u094D\u0937\u0930", verb: "\u0939\u0941\u0928\u0941\u092A\u0930\u094D\u091B" },
@@ -9916,7 +9916,7 @@ function ne_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/nl.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/nl.js
 var error37 = () => {
   const Sizable = {
     string: { unit: "tekens", verb: "heeft" },
@@ -10032,7 +10032,7 @@ function nl_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/nn.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/nn.js
 var error38 = () => {
   const Sizable = {
     string: { unit: "teikn", verb: "\xE5 ha" },
@@ -10146,7 +10146,7 @@ function nn_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/no.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/no.js
 var error39 = () => {
   const Sizable = {
     string: { unit: "tegn", verb: "\xE5 ha" },
@@ -10260,7 +10260,7 @@ function no_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/ota.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/ota.js
 var error40 = () => {
   const Sizable = {
     string: { unit: "harf", verb: "olmal\u0131d\u0131r" },
@@ -10375,7 +10375,7 @@ function ota_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/ps.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/ps.js
 var error41 = () => {
   const Sizable = {
     string: { unit: "\u062A\u0648\u06A9\u064A", verb: "\u0648\u0644\u0631\u064A" },
@@ -10495,7 +10495,7 @@ function ps_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/pl.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/pl.js
 var error42 = () => {
   const Sizable = {
     string: { unit: "znak\xF3w", verb: "mie\u0107" },
@@ -10610,7 +10610,7 @@ function pl_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/pt.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/pt.js
 var error43 = () => {
   const Sizable = {
     string: { unit: "caracteres" },
@@ -10754,7 +10754,7 @@ function pt_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/pt-BR.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/pt-BR.js
 var error44 = () => {
   const Sizable = {
     string: { unit: "caracteres" },
@@ -10899,7 +10899,7 @@ function pt_BR_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/ro.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/ro.js
 var error45 = () => {
   const Sizable = {
     string: { unit: "caractere", verb: "s\u0103 aib\u0103" },
@@ -11022,7 +11022,7 @@ function ro_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/ru.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/ru.js
 function getRussianPlural(count, one, few, many) {
   const absCount = Math.abs(count);
   const lastDigit = absCount % 10;
@@ -11191,7 +11191,7 @@ function ru_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/sk.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/sk.js
 var error47 = () => {
   const Sizable = {
     string: { unit: "znakov", verb: "ma\u0165" },
@@ -11308,7 +11308,7 @@ function sk_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/sl.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/sl.js
 var error48 = () => {
   const Sizable = {
     string: { unit: "znakov", verb: "imeti" },
@@ -11423,7 +11423,7 @@ function sl_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/sv.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/sv.js
 var error49 = () => {
   const Sizable = {
     string: { unit: "tecken", verb: "att ha" },
@@ -11539,7 +11539,7 @@ function sv_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/ta.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/ta.js
 var error50 = () => {
   const Sizable = {
     string: { unit: "\u0B8E\u0BB4\u0BC1\u0BA4\u0BCD\u0BA4\u0BC1\u0B95\u0BCD\u0B95\u0BB3\u0BCD", verb: "\u0B95\u0BCA\u0BA3\u0BCD\u0B9F\u0BBF\u0BB0\u0BC1\u0B95\u0BCD\u0B95 \u0BB5\u0BC7\u0BA3\u0BCD\u0B9F\u0BC1\u0BAE\u0BCD" },
@@ -11655,7 +11655,7 @@ function ta_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/tg.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/tg.js
 var error51 = () => {
   const Sizable = {
     string: { unit: "\u0430\u043B\u043E\u043C\u0430\u0442", verb: "\u0434\u043E\u0448\u0442\u0430 \u0431\u043E\u0448\u0430\u0434" },
@@ -11772,7 +11772,7 @@ function tg_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/th.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/th.js
 var error52 = () => {
   const Sizable = {
     string: { unit: "\u0E15\u0E31\u0E27\u0E2D\u0E31\u0E01\u0E29\u0E23", verb: "\u0E04\u0E27\u0E23\u0E21\u0E35" },
@@ -11888,7 +11888,7 @@ function th_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/tk.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/tk.js
 var error53 = () => {
   const Sizable = {
     string: { unit: "simwol", verb: "bolmaly" },
@@ -11996,7 +11996,7 @@ function tk_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/tr.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/tr.js
 var error54 = () => {
   const Sizable = {
     string: { unit: "karakter", verb: "olmal\u0131" },
@@ -12107,7 +12107,7 @@ function tr_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/uk.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/uk.js
 var error55 = () => {
   const Sizable = {
     string: { unit: "\u0441\u0438\u043C\u0432\u043E\u043B\u0456\u0432", verb: "\u043C\u0430\u0442\u0438\u043C\u0435" },
@@ -12221,12 +12221,12 @@ function uk_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/ua.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/ua.js
 function ua_default() {
   return uk_default();
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/ur.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/ur.js
 var error56 = () => {
   const Sizable = {
     string: { unit: "\u062D\u0631\u0648\u0641", verb: "\u06C1\u0648\u0646\u0627" },
@@ -12342,7 +12342,7 @@ function ur_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/uz.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/uz.js
 var error57 = () => {
   const Sizable = {
     string: { unit: "belgi", verb: "bo\u2018lishi kerak" },
@@ -12456,7 +12456,7 @@ function uz_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/vi.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/vi.js
 var error58 = () => {
   const Sizable = {
     string: { unit: "k\xFD t\u1EF1", verb: "c\xF3" },
@@ -12570,7 +12570,7 @@ function vi_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/zh-CN.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/zh-CN.js
 var error59 = () => {
   const Sizable = {
     string: { unit: "\u5B57\u7B26", verb: "\u5305\u542B" },
@@ -12685,7 +12685,7 @@ function zh_CN_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/zh-TW.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/zh-TW.js
 var error60 = () => {
   const Sizable = {
     string: { unit: "\u5B57\u5143", verb: "\u64C1\u6709" },
@@ -12798,7 +12798,7 @@ function zh_TW_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/yo.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/locales/yo.js
 var error61 = () => {
   const Sizable = {
     string: { unit: "\xE0mi", verb: "n\xED" },
@@ -12911,7 +12911,7 @@ function yo_default() {
   };
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/registries.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/core/registries.js
 var _a2;
 var $output = /* @__PURE__ */ Symbol("ZodOutput");
 var $input = /* @__PURE__ */ Symbol("ZodInput");
@@ -12961,7 +12961,7 @@ function registry() {
 (_a2 = globalThis).__zod_globalRegistry ?? (_a2.__zod_globalRegistry = registry());
 var globalRegistry = globalThis.__zod_globalRegistry;
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/compile.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/core/compile.js
 var INVALID = /* @__PURE__ */ Symbol.for("zod.compile.invalid");
 var FALLBACK_FLAG = /* @__PURE__ */ Symbol.for("zod.compile.fallback");
 var ZodCompileAsyncError = class extends Error {
@@ -14563,7 +14563,7 @@ function generateTransformCheck(doc, ctx, schema, accessor) {
   return accessor;
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/api.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/core/api.js
 function snapshotChecks(def) {
   if (def.checks)
     def.checks = [...def.checks];
@@ -15622,7 +15622,7 @@ function _stringFormat(Class2, format, fnOrRegex, _params = {}) {
   return inst;
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/to-json-schema.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/core/to-json-schema.js
 function assignProps(target, ...sources) {
   for (const source of sources) {
     for (const key of Reflect.ownKeys(source)) {
@@ -16152,7 +16152,7 @@ var createStandardJSONSchemaMethod = (schema, io, processors = {}) => (params) =
   return finalize(ctx, schema);
 };
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/json-schema-processors.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/core/json-schema-processors.js
 var narrowMin = (agg, key, value) => {
   if (agg[key] === void 0 || value > agg[key])
     agg[key] = value;
@@ -16900,7 +16900,7 @@ function toJSONSchema(input2, params) {
   return finalize(ctx, input2);
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/json-schema-generator.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/core/json-schema-generator.js
 var JSONSchemaGenerator = class {
   /** @deprecated Access via ctx instead */
   get metadataRegistry() {
@@ -16978,10 +16978,10 @@ var JSONSchemaGenerator = class {
   }
 };
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/json-schema.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/core/json-schema.js
 var json_schema_exports = {};
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/classic/schemas.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/classic/schemas.js
 var schemas_exports2 = {};
 __export(schemas_exports2, {
   ZodAny: () => ZodAny,
@@ -17162,7 +17162,7 @@ __export(schemas_exports2, {
   xor: () => xor
 });
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/classic/checks.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/classic/checks.js
 var checks_exports2 = {};
 __export(checks_exports2, {
   endsWith: () => _endsWith,
@@ -17197,7 +17197,7 @@ __export(checks_exports2, {
   uppercase: () => _uppercase
 });
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/classic/errors.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/classic/errors.js
 var _installedErrorProtos = /* @__PURE__ */ new WeakSet([Object.prototype, Error.prototype]);
 function _lazyMethod(proto, key, make) {
   Object.defineProperty(proto, key, {
@@ -17243,7 +17243,7 @@ var ZodRealError = /* @__PURE__ */ $constructor("ZodError", initializer2, void 0
   Parent: Error
 });
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/classic/parse.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/classic/parse.js
 var parse2 = /* @__PURE__ */ _parse(ZodRealError);
 var parseAsync2 = /* @__PURE__ */ _parseAsync(ZodRealError);
 var safeParse2 = /* @__PURE__ */ _safeParse(ZodRealError);
@@ -17257,7 +17257,7 @@ var safeDecode2 = /* @__PURE__ */ _safeDecode(ZodRealError);
 var safeEncodeAsync2 = /* @__PURE__ */ _safeEncodeAsync(ZodRealError);
 var safeDecodeAsync2 = /* @__PURE__ */ _safeDecodeAsync(ZodRealError);
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/classic/schemas.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/classic/schemas.js
 function _ensureDefaultLocale() {
   if (!globalConfig.localeError)
     config(en_default());
@@ -18722,7 +18722,7 @@ function preprocess(fn, schema) {
   });
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/classic/compat.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/classic/compat.js
 var ZodIssueCode = {
   invalid_type: "invalid_type",
   too_big: "too_big",
@@ -18748,7 +18748,7 @@ var ZodFirstPartyTypeKind;
 /* @__PURE__ */ (function(ZodFirstPartyTypeKind2) {
 })(ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {}));
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/classic/iso.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/classic/iso.js
 var iso_exports = {};
 __export(iso_exports, {
   ZodISODate: () => ZodISODate,
@@ -18773,7 +18773,7 @@ function duration2(params) {
   return _isoDuration(ZodISODuration, params);
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/classic/from-json-schema.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/classic/from-json-schema.js
 var z = {
   ...schemas_exports2,
   ...checks_exports2,
@@ -19506,7 +19506,7 @@ function fromJSONSchema(schema, params) {
   return convertSchema(normalized, ctx);
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/visit.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/core/visit.js
 var RESOLVING = /* @__PURE__ */ Symbol("z.visit/resolving");
 function visit(schema, fnOrHandlers) {
   const fn = typeof fnOrHandlers === "function" ? fnOrHandlers : (node2, rewritten) => {
@@ -19661,7 +19661,7 @@ function visit(schema, fnOrHandlers) {
   return run(schema);
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/classic/deep-partial.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/classic/deep-partial.js
 function deepPartial(schema) {
   return visit(schema, {
     object: (s) => s.partial(),
@@ -19673,7 +19673,7 @@ function deepPartial(schema) {
   });
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/classic/in-out.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/classic/in-out.js
 function withChecks(side, checks) {
   if (!checks?.length)
     return side;
@@ -19703,7 +19703,7 @@ function output(schema) {
   });
 }
 
-// node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/classic/coerce.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/zod/v4/classic/coerce.js
 var coerce_exports = {};
 __export(coerce_exports, {
   bigint: () => bigint3,
@@ -19728,9 +19728,8 @@ function date4(params) {
   return _coercedDate(ZodDate, params);
 }
 
-// node_modules/.pnpm/@modelcontextprotocol+core@2.0.0/node_modules/@modelcontextprotocol/core/dist/auth-CUe6YdwF.mjs
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/@modelcontextprotocol/core/dist/auth-BNDyLTqp.mjs
 var LATEST_PROTOCOL_VERSION = "2025-11-25";
-var DEFAULT_NEGOTIATED_PROTOCOL_VERSION = "2025-03-26";
 var SUPPORTED_PROTOCOL_VERSIONS = [
   LATEST_PROTOCOL_VERSION,
   "2025-06-18",
@@ -20566,7 +20565,8 @@ var OAuthMetadataSchema = looseObject({
   introspection_endpoint_auth_signing_alg_values_supported: array(string2()).optional(),
   code_challenge_methods_supported: array(string2()).optional(),
   client_id_metadata_document_supported: boolean2().optional(),
-  authorization_response_iss_parameter_supported: boolean2().optional().catch(void 0)
+  authorization_response_iss_parameter_supported: boolean2().optional().catch(void 0),
+  dpop_signing_alg_values_supported: array(string2()).optional()
 });
 var OpenIdProviderMetadataSchema = looseObject({
   issuer: string2(),
@@ -20617,7 +20617,8 @@ var OAuthTokensSchema = object({
   token_type: string2(),
   expires_in: coerce_exports.number().optional(),
   scope: string2().optional(),
-  refresh_token: string2().optional()
+  refresh_token: string2().optional(),
+  issuer: string2().optional().catch(void 0)
 }).strip();
 var IdJagTokenExchangeResponseSchema = object({
   issued_token_type: literal("urn:ietf:params:oauth:token-type:id-jag"),
@@ -20655,7 +20656,8 @@ var OAuthClientInformationSchema = object({
   client_id: string2(),
   client_secret: string2().optional(),
   client_id_issued_at: number2().optional(),
-  client_secret_expires_at: number2().optional()
+  client_secret_expires_at: number2().optional(),
+  issuer: string2().optional().catch(void 0)
 }).strip();
 var OAuthClientInformationFullSchema = OAuthClientMetadataSchema.merge(OAuthClientInformationSchema);
 var OAuthClientRegistrationErrorSchema = object({
@@ -20667,7 +20669,7 @@ var OAuthTokenRevocationRequestSchema = object({
   token_type_hint: string2().optional()
 }).strip();
 
-// node_modules/.pnpm/@modelcontextprotocol+client@2.0.0/node_modules/@modelcontextprotocol/client/dist/src-D_zzAWoS.mjs
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/@modelcontextprotocol/client/dist/src-xKF0PJN-.mjs
 var BRANDS = /* @__PURE__ */ Symbol.for("mcp.sdk.errorBrands");
 function stampErrorBrands(instance, ctor) {
   const brands = /* @__PURE__ */ new Set();
@@ -20713,6 +20715,8 @@ var OAuthErrorCode = /* @__PURE__ */ (function(OAuthErrorCode$1) {
   OAuthErrorCode$1["InvalidRedirectUri"] = "invalid_redirect_uri";
   OAuthErrorCode$1["InsufficientScope"] = "insufficient_scope";
   OAuthErrorCode$1["InvalidTarget"] = "invalid_target";
+  OAuthErrorCode$1["InvalidDpopProof"] = "invalid_dpop_proof";
+  OAuthErrorCode$1["UseDpopNonce"] = "use_dpop_nonce";
   return OAuthErrorCode$1;
 })({});
 var OAuthError = class OAuthError2 extends Error {
@@ -20802,8 +20806,18 @@ var SdkError = class extends Error {
     if (typeof this !== "function") throw new TypeError("isInstance must be called on the class (e.g. `SdkError.isInstance(value)`); for callbacks use `v => SdkError.isInstance(v)`");
     return brandedHasInstance(this, value);
   }
-  constructor(code, message, data) {
-    super(message);
+  /**
+  * @param code - Stable string code identifying the failure ({@linkcode SdkErrorCode}).
+  * @param message - Human-readable description.
+  * @param data - Optional structured payload (for example the HTTP status carried by
+  * {@linkcode SdkHttpError}). Opaque to the SDK: a `cause` key inside `data` is not
+  * promoted to `Error.cause`.
+  * @param options - Standard `ErrorOptions`, forwarded to `Error`. Pass the underlying
+  * failure as `{ cause }` so it is reachable through the `Error.cause` chain that
+  * loggers and error trackers walk.
+  */
+  constructor(code, message, data, options) {
+    super(message, options);
     this.code = code;
     this.data = data;
     this.name = "SdkError";
@@ -20814,8 +20828,11 @@ var SdkHttpError = class extends SdkError {
   static {
     Object.defineProperty(this, "mcpBrand", { value: "mcp.SdkHttpError" });
   }
-  constructor(code, message, data) {
-    super(code, message, data);
+  /**
+  * @param options - Standard `ErrorOptions`, forwarded to `Error` (see {@linkcode SdkError}).
+  */
+  constructor(code, message, data, options) {
+    super(code, message, data, options);
     this.name = "SdkHttpError";
   }
   get status() {
@@ -20830,6 +20847,12 @@ function resourceUrlFromServerUrl(url2) {
   resourceURL.hash = "";
   return resourceURL;
 }
+function withoutIssuer(body) {
+  if (typeof body !== "object" || body === null || Array.isArray(body)) return body;
+  const copy = { ...body };
+  delete copy.issuer;
+  return copy;
+}
 function checkResourceAllowed({ requestedResource, configuredResource }) {
   const requested = typeof requestedResource === "string" ? new URL(requestedResource) : new URL(requestedResource.href);
   const configured = typeof configuredResource === "string" ? new URL(configuredResource) : new URL(configuredResource.href);
@@ -21939,7 +21962,7 @@ function getNotificationSchema(method) {
 }
 var rev2025RequestMethods = Object.keys(requestMethodKeys$1);
 var rev2025NotificationMethods = Object.keys(notificationMethodKeys$1);
-function isPlainObject$4(value) {
+function isPlainObject$5(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 function triState$1(schema, raw) {
@@ -21962,7 +21985,7 @@ var NOT_IN_ERA$1 = {
   reason: "not-in-era"
 };
 function toolNeedsLegacyWrap(t) {
-  return isPlainObject$4(t) && isPlainObject$4(t["outputSchema"]) && isNonObjectJsonSchemaRoot(t["outputSchema"]);
+  return isPlainObject$5(t) && isPlainObject$5(t["outputSchema"]) && isNonObjectJsonSchemaRoot(t["outputSchema"]);
 }
 function toNeutralResult(value) {
   return value;
@@ -21996,7 +22019,7 @@ var rev2025Codec = {
     };
   },
   decodeResult(_method, raw) {
-    if (isPlainObject$4(raw) && "resultType" in raw) {
+    if (isPlainObject$5(raw) && "resultType" in raw) {
       const stripped = { ...raw };
       delete stripped["resultType"];
       return {
@@ -23075,7 +23098,7 @@ function fillCacheFields(method, result) {
   delete filled[RESULT_CACHE_HINT_FALLBACK];
   return filled;
 }
-function isPlainObject$3(value) {
+function isPlainObject$4(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 function stampServerInfoMeta(result, serverInfo) {
@@ -23085,7 +23108,7 @@ function stampServerInfoMeta(result, serverInfo) {
     ...result,
     _meta: { [SERVER_INFO_META_KEY]: serverInfo }
   };
-  if (!isPlainObject$3(meta3)) return result;
+  if (!isPlainObject$4(meta3)) return result;
   if (meta3[SERVER_INFO_META_KEY] !== void 0) return result;
   return {
     ...result,
@@ -23189,7 +23212,7 @@ function getNotificationSchema2026(method) {
 }
 var rev2026RequestMethods = Object.keys(requestMethodKeys);
 var rev2026NotificationMethods = Object.keys(notificationMethodKeys);
-function isPlainObject$2(value) {
+function isPlainObject$3(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 function triState(schema, raw) {
@@ -23223,14 +23246,14 @@ function enforceDeletedFields(method, result) {
     return next;
   };
   const tools = result.tools;
-  if (method === "tools/list" && Array.isArray(tools) && tools.some((tool) => isPlainObject$2(tool) && "execution" in tool)) copy().tools = tools.map((tool) => {
-    if (!isPlainObject$2(tool) || !("execution" in tool)) return tool;
+  if (method === "tools/list" && Array.isArray(tools) && tools.some((tool) => isPlainObject$3(tool) && "execution" in tool)) copy().tools = tools.map((tool) => {
+    if (!isPlainObject$3(tool) || !("execution" in tool)) return tool;
     const rest = { ...tool };
     delete rest["execution"];
     return rest;
   });
   const capabilities = result.capabilities;
-  if (isPlainObject$2(capabilities) && "tasks" in capabilities) {
+  if (isPlainObject$3(capabilities) && "tasks" in capabilities) {
     const rest = { ...capabilities };
     delete rest["tasks"];
     copy().capabilities = rest;
@@ -23277,7 +23300,7 @@ var rev2026Codec = {
   projectCallToolResult: (result) => appendTextFallbackForNonObject(result),
   inputRequestSchema: getInputRequestSchema2026,
   decodeResult(method, raw) {
-    if (!isPlainObject$2(raw)) return {
+    if (!isPlainObject$3(raw)) return {
       kind: "invalid",
       error: new SdkError(SdkErrorCode.InvalidResult, `Invalid result for ${method}: not an object`, { method })
     };
@@ -23298,8 +23321,10 @@ var rev2026Codec = {
     };
     if (rawResultType === "input_required") {
       const rawInputRequests = raw["inputRequests"];
-      const inputRequests = isPlainObject$2(rawInputRequests) ? rawInputRequests : {};
+      const inputRequests = isPlainObject$3(rawInputRequests) ? rawInputRequests : {};
       const requestState = raw["requestState"];
+      const metaParse = raw["_meta"] === void 0 ? void 0 : buildSchemas2026().ResultMetaSchema.safeParse(raw["_meta"]);
+      const meta3 = metaParse?.success ? metaParse.data : void 0;
       if (Object.keys(inputRequests).length === 0 && typeof requestState !== "string") return {
         kind: "invalid",
         error: new SdkError(SdkErrorCode.InvalidResult, `Invalid result for ${method}: input_required carries neither inputRequests nor requestState (every input_required result must include at least one of the two)`, {
@@ -23310,7 +23335,8 @@ var rev2026Codec = {
       return {
         kind: "input_required",
         inputRequests,
-        ...typeof requestState === "string" && { requestState }
+        ...typeof requestState === "string" && { requestState },
+        ...meta3 !== void 0 && { _meta: meta3 }
       };
     }
     if (rawResultType !== "complete") return {
@@ -23748,7 +23774,7 @@ var INBOUND_VALIDATION_LADDER = [
     evaluatedAt: "pre-dispatch",
     codes: [HEADER_MISMATCH_ERROR_CODE],
     conformance: ["http-header-validation"],
-    rationale: "SEP-2243 standard `Mcp-Method` / `Mcp-Name` headers \u2014 presence, sentinel decoding, and `Mcp-Name` \u2194 body cross-check \u2014 are validated by the HTTP entry on a modern-classified request after the supported-revision gate and before dispatch. The classifier\u2019s own header-mismatch cells (protocol-version, `Mcp-Method` mismatch) stay on the edge `era-classification` rung; this rung carries the entry-layer presence/`Mcp-Name` half. Evaluated before the capability gate, the factory call, and the `Mcp-Param-*` rung so a request that fails several rungs is answered by the standard-header rung first. The documented order (after method-registry 5 and request-params 6) is NOT the observed precedence: serveModern evaluates this rung immediately after the supported-revision gate, so a request that also fails a dispatch rung is answered here before the dispatch rungs (5\u20136) are consulted."
+    rationale: "SEP-2243 standard `MCP-Protocol-Version` / `Mcp-Method` / `Mcp-Name` headers \u2014 presence, sentinel decoding, and `Mcp-Name` \u2194 body cross-check \u2014 are validated by the HTTP entry on a modern-classified request after the supported-revision gate and before dispatch. The spec requires `MCP-Protocol-Version` and `Mcp-Method` on every modern *request* POST (`Mcp-Name` only for the methods that mirror `params.name` / `params.uri` / `params.taskId`, see `MCP_NAME_HEADER_SOURCE`) and names them in that order, so a request missing several is answered by the earliest. Notification POSTs are exempt: the presence half runs on requests only, so a modern-enveloped notification is dispatched even with no standard headers at all. The classifier\u2019s own header-mismatch cells (protocol-version, `Mcp-Method` mismatch) stay on the edge `era-classification` rung; this rung carries the entry-layer presence/`Mcp-Name` half \u2014 including the missing `MCP-Protocol-Version` cell, which cannot live on the edge rung without breaking body-primary classification. Evaluated before the capability gate, the factory call, and the `Mcp-Param-*` rung so a request that fails several rungs is answered by the standard-header rung first. The documented order (after method-registry 5 and request-params 6) is NOT the observed precedence: serveModern evaluates this rung immediately after the supported-revision gate, so a request that also fails a dispatch rung is answered here before the dispatch rungs (5\u20136) are consulted."
   },
   {
     rung: "client-capabilities",
@@ -23775,6 +23801,26 @@ var LADDER_ERROR_HTTP_STATUS = {
   [ProtocolErrorCode.MissingRequiredClientCapability]: 400,
   [HEADER_MISMATCH_ERROR_CODE]: 400
 };
+var MCP_NAME_HEADER_SOURCE = {
+  "tools/call": "name",
+  "prompts/get": "name",
+  "resources/read": "uri",
+  "tasks/get": "taskId",
+  "tasks/update": "taskId",
+  "tasks/cancel": "taskId"
+};
+function mcpNameSource(method, params) {
+  const field = Object.hasOwn(MCP_NAME_HEADER_SOURCE, method) ? MCP_NAME_HEADER_SOURCE[method] : void 0;
+  if (field === void 0) return;
+  const raw = isPlainObject$2(params) ? params[field] : void 0;
+  return {
+    field,
+    value: typeof raw === "string" ? raw : void 0
+  };
+}
+function isPlainObject$2(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
 function parseSchema(schema, data) {
   return safeParse2(schema, data);
 }
@@ -24531,7 +24577,7 @@ var Protocol = class {
     return this._requestHandlers.get(method);
   }
   async _oncancel(notification) {
-    if (!notification.params.requestId) return;
+    if (notification.params.requestId === void 0) return;
     this._requestHandlerAbortControllers.get(notification.params.requestId)?.abort(notification.params.reason);
   }
   _setupTimeout(messageId, timeout, maxTotalTimeout, onTimeout, resetTimeoutOnProgress = false) {
@@ -24930,19 +24976,20 @@ var Protocol = class {
       const cancel = (reason) => {
         if (responseReceived) return;
         this._progressHandlers.delete(messageId);
-        if (requestAbort === void 0) this._transport?.send(this._envelopeOutbound({
-          jsonrpc: "2.0",
-          method: "notifications/cancelled",
-          params: {
-            requestId: messageId,
-            reason: String(reason)
-          }
-        }), {
-          relatedRequestId,
-          resumptionToken,
-          onresumptiontoken
-        }).catch((error62) => this._onerror(/* @__PURE__ */ new Error(`Failed to send cancellation: ${error62}`)));
-        else requestAbort.abort();
+        if (requestAbort === void 0) {
+          if (request.method !== "initialize") this._transport?.send(this._envelopeOutbound({
+            jsonrpc: "2.0",
+            method: "notifications/cancelled",
+            params: {
+              requestId: messageId,
+              reason: String(reason)
+            }
+          }), {
+            relatedRequestId,
+            resumptionToken,
+            onresumptiontoken
+          }).catch((error62) => this._onerror(/* @__PURE__ */ new Error(`Failed to send cancellation: ${error62}`)));
+        } else requestAbort.abort();
         reject(reason instanceof SdkError ? reason : new SdkError(SdkErrorCode.RequestTimeout, String(reason)));
       };
       this._responseHandlers.set(messageId, (response) => {
@@ -25004,7 +25051,7 @@ var Protocol = class {
   * Emits a notification, which is a one-way message that does not expect a response.
   */
   async notification(notification, options) {
-    return this._notificationViaCodec(this._resolveOutboundCodec(notification.method), notification, options);
+    return await this._notificationViaCodec(this._resolveOutboundCodec(notification.method), notification, options);
   }
   /**
   * The notification funnel proper, keyed by the resolved era codec —
@@ -25022,7 +25069,7 @@ var Protocol = class {
       jsonrpc: "2.0",
       ...notification
     });
-    if ((this._options?.debouncedNotificationMethods ?? []).includes(notification.method) && !notification.params && !options?.relatedRequestId) {
+    if ((this._options?.debouncedNotificationMethods ?? []).includes(notification.method) && !notification.params && options?.relatedRequestId === void 0) {
       if (this._pendingDebouncedNotifications.has(notification.method)) return;
       this._pendingDebouncedNotifications.add(notification.method);
       Promise.resolve().then(() => {
@@ -25234,7 +25281,8 @@ function manualInputRequiredValue(decoded) {
   return {
     resultType: "input_required",
     inputRequests: decoded.inputRequests,
-    ...decoded.requestState !== void 0 && { requestState: decoded.requestState }
+    ...decoded.requestState !== void 0 && { requestState: decoded.requestState },
+    ...decoded._meta !== void 0 && { _meta: decoded._meta }
   };
 }
 var require_content_type = /* @__PURE__ */ __commonJSMin(((exports) => {
@@ -25352,7 +25400,7 @@ function createFetchWithInit(baseFetch = fetch, baseInit) {
   };
 }
 
-// node_modules/.pnpm/@modelcontextprotocol+client@2.0.0/node_modules/@modelcontextprotocol/client/dist/ajvProvider-97rDpkRx.mjs
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/@modelcontextprotocol/client/dist/ajvProvider-97rDpkRx.mjs
 var require_code$1 = /* @__PURE__ */ __commonJSMin(((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.regexpCode = exports.getEsmExportName = exports.getProperty = exports.safeStringify = exports.stringify = exports.strConcat = exports.addCodeArg = exports.str = exports._ = exports.nil = exports._Code = exports.Name = exports.IDENTIFIER = exports._CodeOrName = void 0;
@@ -32362,10 +32410,10 @@ var AjvJsonSchemaValidator = class {
 };
 var Ajv = import_ajv.Ajv;
 
-// node_modules/.pnpm/@modelcontextprotocol+client@2.0.0/node_modules/@modelcontextprotocol/client/dist/shimsNode.mjs
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/@modelcontextprotocol/client/dist/shimsNode.mjs
 var CORS_IS_POSSIBLE = false;
 
-// node_modules/.pnpm/pkce-challenge@5.0.1/node_modules/pkce-challenge/dist/index.node.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/pkce-challenge/dist/index.node.js
 var crypto;
 crypto = globalThis.crypto?.webcrypto ?? // Node.js [18-16] REPL
 globalThis.crypto ?? // Node.js >18
@@ -32408,7 +32456,7 @@ async function pkceChallenge(length) {
   };
 }
 
-// node_modules/.pnpm/eventsource-parser@3.1.1/node_modules/eventsource-parser/dist/index.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/eventsource-parser/dist/index.js
 var ParseError = class extends Error {
   constructor(message, options) {
     super(message), this.name = "ParseError", this.type = options.type, this.field = options.field, this.value = options.value, this.line = options.line;
@@ -32584,7 +32632,7 @@ function isEventPrefix(chunk, i, firstCharCode) {
   return firstCharCode === 101 && chunk.charCodeAt(i + 1) === 118 && chunk.charCodeAt(i + 2) === 101 && chunk.charCodeAt(i + 3) === 110 && chunk.charCodeAt(i + 4) === 116 && chunk.charCodeAt(i + 5) === 58;
 }
 
-// node_modules/.pnpm/eventsource@3.0.7/node_modules/eventsource/dist/index.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/eventsource/dist/index.js
 var ErrorEvent = class extends Event {
   /**
    * Constructs a new `ErrorEvent` instance. This is typically not called directly,
@@ -32881,7 +32929,7 @@ function getBaseURL() {
   return doc && typeof doc == "object" && "baseURI" in doc && typeof doc.baseURI == "string" ? doc.baseURI : void 0;
 }
 
-// node_modules/.pnpm/eventsource-parser@3.1.1/node_modules/eventsource-parser/dist/stream.js
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/eventsource-parser/dist/stream.js
 var EventSourceParserStream = class extends TransformStream {
   constructor({ onError, onRetry, onComment, maxBufferSize } = {}) {
     let parser;
@@ -32906,7 +32954,7 @@ var EventSourceParserStream = class extends TransformStream {
   }
 };
 
-// node_modules/.pnpm/@modelcontextprotocol+client@2.0.0/node_modules/@modelcontextprotocol/client/dist/index.mjs
+// node_modules/.pnpm/mcporter@0.14.2/node_modules/mcporter/node_modules/@modelcontextprotocol/client/dist/index.mjs
 var OAuthClientFlowError = class extends Error {
   static {
     Object.defineProperty(this, "mcpBrand", { value: "mcp.OAuthClientFlowError" });
@@ -32974,7 +33022,7 @@ var InsecureTokenEndpointError = class extends OAuthClientFlowError {
   /** The token endpoint URL that was rejected. */
   tokenEndpoint;
   constructor(tokenEndpoint) {
-    super(`Refusing to send credentials to non-https token endpoint '${tokenEndpoint}'. OAuth token requests MUST use TLS (localhost / 127.0.0.1 / ::1 are exempt).`);
+    super(`Refusing to send credentials to non-https token endpoint '${tokenEndpoint}'. OAuth token requests MUST use TLS (localhost / *.localhost / 127.0.0.1 / ::1 are exempt).`);
     this.tokenEndpoint = tokenEndpoint;
   }
 };
@@ -32983,7 +33031,7 @@ var AuthorizationServerMismatchError = class extends OAuthClientFlowError {
     Object.defineProperty(this, "mcpBrand", { value: "mcp.AuthorizationServerMismatchError" });
   }
   constructor(recordedIssuer, currentIssuer) {
-    super(`Authorization server changed between redirect and callback (redirected to ${JSON.stringify(recordedIssuer)}, callback resolved ${JSON.stringify(currentIssuer)}); refusing to send authorization_code/code_verifier to a different token endpoint`);
+    super(`Authorization server mismatch: credentials are bound to ${JSON.stringify(recordedIssuer)} but this call resolved ${JSON.stringify(currentIssuer)}; refusing to present them to a different authorization server`);
     this.recordedIssuer = recordedIssuer;
     this.currentIssuer = currentIssuer;
   }
@@ -33006,10 +33054,13 @@ var InsufficientScopeError = class extends OAuthClientFlowError {
   }
 };
 function discardIfIssuerMismatch(stored, issuer, opts) {
-  if (stored === void 0) return void 0;
-  if (stored.issuer === void 0) {
+  if (!stored) return void 0;
+  if (typeof stored.issuer !== "string") {
     if (opts?.canPersistStamp !== false) console.warn("[mcp-sdk] SEP-2352: stored OAuth credential has no 'issuer' stamp (pre-upgrade storage or provider not round-tripping the value). SEP-2352 isolation is inactive for this read; ensure your provider round-trips the issuer field.");
-    return stored;
+    return stored.issuer === void 0 ? stored : {
+      ...stored,
+      issuer: void 0
+    };
   }
   return issuersMatch(stored.issuer, issuer) ? stored : void 0;
 }
@@ -33021,22 +33072,49 @@ function isOAuthClientProvider(provider) {
   const p = provider;
   return typeof p.tokens === "function" && typeof p.clientInformation === "function";
 }
-async function handleOAuthUnauthorized(provider, ctx, extraAuthOptions) {
+async function handleOAuthUnauthorized(provider, ctx, extraAuthOptions, options) {
   const { resourceMetadataUrl, scope } = extractWWWAuthenticateParams(ctx.response);
   if (await auth(provider, {
     serverUrl: ctx.serverUrl,
     resourceMetadataUrl,
     scope,
-    fetchFn: ctx.fetchFn,
+    fetchFn: options?.fetchFn ?? ctx.fetchFn,
     ...extraAuthOptions
   }) !== "AUTHORIZED") throw new UnauthorizedError();
 }
+function presentedBearerToken(headers) {
+  const authorization = headers.get("authorization");
+  const match = authorization?.match(/^Bearer\s+(.+)$/i);
+  return match?.[1];
+}
 function adaptOAuthProvider(provider, extraAuthOptions) {
+  const tokensByAccessToken = /* @__PURE__ */ new Map();
   return {
     token: async () => {
-      return (await provider.tokens())?.access_token;
+      const tokens = await provider.tokens();
+      if (tokens?.access_token) {
+        if (!tokensByAccessToken.has(tokens.access_token) && tokensByAccessToken.size >= 8) {
+          tokensByAccessToken.delete(tokensByAccessToken.keys().next().value);
+        }
+        tokensByAccessToken.set(tokens.access_token, tokens);
+      }
+      return tokens?.access_token;
     },
-    onUnauthorized: async (ctx) => handleOAuthUnauthorized(provider, ctx, extraAuthOptions)
+    onUnauthorized: async (ctx) => {
+      const presentedTokens = ctx.presentedToken ? tokensByAccessToken.get(ctx.presentedToken) : void 0;
+      if (ctx.presentedToken) tokensByAccessToken.delete(ctx.presentedToken);
+      const continueDefault = async (options) => handleOAuthUnauthorized(provider, ctx, extraAuthOptions, options);
+      if (provider.onOAuthUnauthorized) {
+        await provider.onOAuthUnauthorized({
+          response: ctx.response,
+          serverUrl: ctx.serverUrl,
+          fetchFn: ctx.fetchFn,
+          presentedTokens
+        }, continueDefault);
+        return;
+      }
+      await continueDefault();
+    }
   };
 }
 var UnauthorizedError = class extends Error {
@@ -33164,7 +33242,7 @@ function applyPublicAuth(clientId, params) {
   params.set("client_id", clientId);
 }
 function isLoopbackHost(hostname3) {
-  return hostname3 === "localhost" || hostname3 === "127.0.0.1" || hostname3 === "[::1]" || hostname3 === "::1";
+  return hostname3 === "localhost" || hostname3.endsWith(".localhost") || hostname3 === "127.0.0.1" || hostname3 === "[::1]" || hostname3 === "::1";
 }
 function assertSecureTokenEndpoint(tokenEndpoint) {
   const url2 = new URL(String(tokenEndpoint));
@@ -33203,16 +33281,22 @@ async function parseErrorResponse(input2) {
     return new OAuthError(OAuthErrorCode.ServerError, errorMessage);
   }
 }
+function warnCredentialInvalidation(provider, error62, invalidated) {
+  const action = provider.invalidateCredentials === void 0 ? `retrying authorization without discarding the stored ${invalidated} (provider implements no invalidateCredentials())` : `invalidating the stored ${invalidated} and retrying authorization`;
+  console.warn(`[mcp-sdk] OAuth ${JSON.stringify(error62.code)} \u2014 ${action}. Cause: ${JSON.stringify(error62.message)}`);
+}
 async function auth(provider, options) {
   try {
     return await authInternal(provider, options);
   } catch (error62) {
     if (error62 instanceof OAuthError) {
       if (error62.code === OAuthErrorCode.InvalidClient || error62.code === OAuthErrorCode.UnauthorizedClient) {
+        warnCredentialInvalidation(provider, error62, "client credentials and tokens");
         await provider.invalidateCredentials?.("client");
         await provider.invalidateCredentials?.("tokens");
         return await authInternal(provider, options);
-      } else if (error62.code === OAuthErrorCode.InvalidGrant) {
+      } else if (error62.code === OAuthErrorCode.InvalidGrant || error62.code === OAuthErrorCode.InvalidDpopProof) {
+        warnCredentialInvalidation(provider, error62, "tokens");
         await provider.invalidateCredentials?.("tokens");
         return await authInternal(provider, options);
       }
@@ -33280,8 +33364,9 @@ async function authInternal(provider, { serverUrl, authorizationCode, iss, scope
     } else if (!issuersMatch(recordedIssuer, issuer)) throw new AuthorizationServerMismatchError(recordedIssuer, issuer);
   }
   if (freshDiscoveryState) await provider.saveDiscoveryState?.(freshDiscoveryState);
-  const resource = await selectResourceURL(serverUrl, provider, resourceMetadata);
-  if (resource) await provider.saveResourceUrl?.(String(resource));
+  const selectedResource = await selectResourceURL(serverUrl, provider, resourceMetadata);
+  const resource = selectedResource && resourceMetadata && !provider.validateResourceURL ? resourceMetadata.resource : selectedResource;
+  if (resource) await provider.saveResourceUrl?.(resourceIndicatorToString(resource));
   const resolvedScope = determineScope({
     requestedScope: scope,
     resourceMetadata,
@@ -33352,24 +33437,30 @@ async function authInternal(provider, { serverUrl, authorizationCode, iss, scope
     };
     await provider.saveTokens(tokens, infoCtx);
   }
-  if (tokens?.refresh_token && !forceReauthorization) try {
-    const newTokens = await refreshAuthorization(authorizationServerUrl, {
-      metadata,
-      clientInformation,
-      refreshToken: tokens.refresh_token,
-      resource,
-      addClientAuthentication: provider.addClientAuthentication,
-      fetchFn
-    });
-    await provider.saveTokens({
-      ...newTokens,
-      issuer
-    }, infoCtx);
-    return "AUTHORIZED";
-  } catch (error62) {
-    if (error62 instanceof InsecureTokenEndpointError) throw error62;
-    if (!(error62 instanceof OAuthError) || error62.code === OAuthErrorCode.ServerError) {
-    } else throw error62;
+  if (tokens?.refresh_token && !forceReauthorization) {
+    let newTokens;
+    try {
+      newTokens = await refreshAuthorization(authorizationServerUrl, {
+        metadata,
+        clientInformation,
+        refreshToken: tokens.refresh_token,
+        resource,
+        addClientAuthentication: provider.addClientAuthentication,
+        dpop: await provider.dpop?.(),
+        fetchFn
+      });
+    } catch (error62) {
+      if (error62 instanceof InsecureTokenEndpointError) throw error62;
+      if (!(error62 instanceof OAuthError) || error62.code === OAuthErrorCode.ServerError) console.warn(`[mcp-sdk] Could not refresh OAuth tokens; falling back to a new authorization request. Cause: ${JSON.stringify(error62 instanceof Error ? error62.message : String(error62))}`);
+      else throw error62;
+    }
+    if (newTokens) {
+      await provider.saveTokens({
+        ...newTokens,
+        issuer
+      }, infoCtx);
+      return "AUTHORIZED";
+    }
   }
   const state = provider.state ? await provider.state() : void 0;
   const { authorizationUrl, codeVerifier } = await startAuthorization(authorizationServerUrl, {
@@ -33406,11 +33497,12 @@ async function selectResourceURL(serverUrl, provider, resourceMetadata) {
   })) throw new Error(`Protected resource ${resourceMetadata.resource} does not match expected ${defaultResource} (or origin)`);
   return new URL(resourceMetadata.resource);
 }
+var RECOGNIZED_CHALLENGE_SCHEMES = /* @__PURE__ */ new Set(["bearer", "dpop"]);
 function extractWWWAuthenticateParams(res) {
   const authenticateHeader = res.headers.get("WWW-Authenticate");
   if (!authenticateHeader) return {};
   const [type, scheme] = authenticateHeader.split(" ");
-  if (type?.toLowerCase() !== "bearer" || !scheme) return {};
+  if (!type || !RECOGNIZED_CHALLENGE_SCHEMES.has(type.toLowerCase()) || !scheme) return {};
   const resourceMetadataMatch = extractFieldFromWwwAuth(res, "resource_metadata") || void 0;
   let resourceMetadataUrl;
   if (resourceMetadataMatch) try {
@@ -33567,6 +33659,9 @@ async function discoverOAuthServerInfo(serverUrl, opts) {
     resourceMetadata
   };
 }
+function resourceIndicatorToString(resource) {
+  return typeof resource === "string" ? resource : resource.href;
+}
 async function startAuthorization(authorizationServerUrl, { metadata, clientInformation, redirectUrl, scope, state, resource }) {
   let authorizationUrl;
   if (metadata) {
@@ -33585,7 +33680,7 @@ async function startAuthorization(authorizationServerUrl, { metadata, clientInfo
   if (state) authorizationUrl.searchParams.set("state", state);
   if (scope) authorizationUrl.searchParams.set("scope", scope);
   if (scope?.split(" ").includes("offline_access")) authorizationUrl.searchParams.append("prompt", "consent");
-  if (resource) authorizationUrl.searchParams.set("resource", resource.href);
+  if (resource) authorizationUrl.searchParams.set("resource", resourceIndicatorToString(resource));
   return {
     authorizationUrl,
     codeVerifier
@@ -33599,30 +33694,46 @@ function prepareAuthorizationCodeRequest(authorizationCode, codeVerifier, redire
     redirect_uri: String(redirectUri)
   });
 }
-async function executeTokenRequest(authorizationServerUrl, { metadata, tokenRequestParams, clientInformation, addClientAuthentication, resource, fetchFn }) {
+async function executeTokenRequest(authorizationServerUrl, { metadata, tokenRequestParams, clientInformation, addClientAuthentication, resource, dpop, fetchFn }) {
   const tokenUrl = assertSecureTokenEndpoint(metadata?.token_endpoint ?? new URL("/token", authorizationServerUrl));
   const headers = new Headers({
     "Content-Type": "application/x-www-form-urlencoded",
     Accept: "application/json"
   });
-  if (resource) tokenRequestParams.set("resource", resource.href);
-  if (addClientAuthentication) await addClientAuthentication(headers, tokenRequestParams, tokenUrl, metadata);
-  else if (clientInformation) applyClientAuthentication(selectClientAuthMethod(clientInformation, metadata?.token_endpoint_auth_methods_supported ?? []), clientInformation, headers, tokenRequestParams);
-  const response = await (fetchFn ?? fetch)(tokenUrl, {
-    method: "POST",
-    headers,
-    body: tokenRequestParams
-  });
+  if (resource) tokenRequestParams.set("resource", resourceIndicatorToString(resource));
+  if (!addClientAuthentication && clientInformation) applyClientAuthentication(selectClientAuthMethod(clientInformation, metadata?.token_endpoint_auth_methods_supported ?? []), clientInformation, headers, tokenRequestParams);
+  const requestOnce = async () => {
+    const requestHeaders = new Headers(headers);
+    if (addClientAuthentication) await addClientAuthentication(requestHeaders, tokenRequestParams, tokenUrl, metadata);
+    if (dpop) requestHeaders.set("DPoP", await dpop.buildProof({
+      htm: "POST",
+      htu: tokenUrl
+    }));
+    return (fetchFn ?? fetch)(tokenUrl, {
+      method: "POST",
+      headers: requestHeaders,
+      body: tokenRequestParams
+    });
+  };
+  let response = await requestOnce();
+  if (dpop && response.status === 400) {
+    if ((await response.clone().json().catch(() => {
+    }))?.error === OAuthErrorCode.UseDpopNonce) {
+      dpop.observeNonce(response, tokenUrl);
+      response = await requestOnce();
+    }
+  }
+  dpop?.observeNonce(response, tokenUrl);
   if (!response.ok) throw await parseErrorResponse(response);
   const json2 = await response.json();
   try {
-    return OAuthTokensSchema.parse(json2);
+    return OAuthTokensSchema.parse(withoutIssuer(json2));
   } catch (parseError) {
     if (typeof json2 === "object" && json2 !== null && "error" in json2) throw await parseErrorResponse(JSON.stringify(json2));
     throw parseError;
   }
 }
-async function refreshAuthorization(authorizationServerUrl, { metadata, clientInformation, refreshToken, resource, addClientAuthentication, fetchFn }) {
+async function refreshAuthorization(authorizationServerUrl, { metadata, clientInformation, refreshToken, resource, addClientAuthentication, dpop, fetchFn }) {
   return {
     refresh_token: refreshToken,
     ...await executeTokenRequest(authorizationServerUrl, {
@@ -33634,6 +33745,7 @@ async function refreshAuthorization(authorizationServerUrl, { metadata, clientIn
       clientInformation,
       addClientAuthentication,
       resource,
+      dpop,
       fetchFn
     })
   };
@@ -33644,6 +33756,14 @@ async function fetchToken(provider, authorizationServerUrl, { metadata, resource
     expectedIssuer: metadata?.issuer,
     issParameterSupported: isIssParameterSupported(metadata)
   });
+  const issuer = metadata?.issuer ?? String(authorizationServerUrl);
+  const readClientInformation = async () => {
+    const rawClientInfo = await provider.clientInformation({ issuer });
+    const checked = discardIfIssuerMismatch(rawClientInfo, issuer, { canPersistStamp: false });
+    if (rawClientInfo && checked === void 0) throw new AuthorizationServerMismatchError(String(rawClientInfo.issuer), issuer);
+    return checked;
+  };
+  let clientInformation = await readClientInformation();
   const effectiveScope = scope ?? provider.clientMetadata.scope;
   let tokenRequestParams;
   if (provider.prepareTokenRequest) tokenRequestParams = await provider.prepareTokenRequest(effectiveScope);
@@ -33652,13 +33772,14 @@ async function fetchToken(provider, authorizationServerUrl, { metadata, resource
     if (!provider.redirectUrl) throw new Error("redirectUrl is required for authorization_code flow");
     tokenRequestParams = prepareAuthorizationCodeRequest(authorizationCode, await provider.codeVerifier(), provider.redirectUrl);
   }
-  const clientInformation = await provider.clientInformation({ issuer: metadata?.issuer ?? String(authorizationServerUrl) });
+  clientInformation ??= await readClientInformation();
   return executeTokenRequest(authorizationServerUrl, {
     metadata,
     tokenRequestParams,
-    clientInformation: clientInformation ?? void 0,
+    clientInformation,
     addClientAuthentication: provider.addClientAuthentication,
     resource,
+    dpop: await provider.dpop?.(),
     fetchFn
   });
 }
@@ -33682,7 +33803,7 @@ async function registerClient(authorizationServerUrl, { metadata, clientMetadata
     body: await response.text(),
     submittedMetadata
   });
-  return OAuthClientInformationFullSchema.parse(await response.json());
+  return OAuthClientInformationFullSchema.parse(withoutIssuer(await response.json()));
 }
 var CAP_EXEMPT_METHODS = /* @__PURE__ */ new Set([
   "tools/list",
@@ -34268,7 +34389,7 @@ function classifyNetworkError(error62, context) {
   if (context.environment === "browser" && isOpaqueFetchTypeError(error62)) return { kind: "legacy" };
   return {
     kind: "error",
-    error: new SdkError(SdkErrorCode.EraNegotiationFailed, `Version negotiation probe failed: ${describeError(error62)}`, { cause: error62 })
+    error: new SdkError(SdkErrorCode.EraNegotiationFailed, `Version negotiation probe failed: ${describeError(error62)}`, { cause: error62 }, { cause: error62 })
   };
 }
 function isOpaqueFetchTypeError(error62) {
@@ -35302,7 +35423,7 @@ var Client = class extends Protocol {
     }, options);
     const hit = await this._serveFromCache("prompts/list", void 0, options);
     if (hit !== void 0) return hit;
-    return this._listAllPages("prompts/list", params, options, (acc, page) => acc.prompts.push(...page.prompts));
+    return this._listAllPages("prompts/list", params, options, (r) => r.prompts);
   }
   /**
   * Lists available resources.
@@ -35341,7 +35462,7 @@ var Client = class extends Protocol {
     }, options);
     const hit = await this._serveFromCache("resources/list", void 0, options);
     if (hit !== void 0) return hit;
-    return this._listAllPages("resources/list", params, options, (acc, page) => acc.resources.push(...page.resources));
+    return this._listAllPages("resources/list", params, options, (r) => r.resources);
   }
   /**
   * Lists available resource URI templates for dynamic resources.
@@ -35366,7 +35487,7 @@ var Client = class extends Protocol {
     }, options);
     const hit = await this._serveFromCache("resources/templates/list", void 0, options);
     if (hit !== void 0) return hit;
-    return this._listAllPages("resources/templates/list", params, options, (acc, page) => acc.resourceTemplates.push(...page.resourceTemplates));
+    return this._listAllPages("resources/templates/list", params, options, (r) => r.resourceTemplates);
   }
   /**
   * Walk every page of a paginated list verb, aggregate, and write ONE
@@ -35374,8 +35495,7 @@ var Client = class extends Protocol {
   * methods' no-`cursor` auto-aggregate path. Page 1's result object is
   * mutated in place (its items array is extended; `nextCursor` is
   * cleared); page-1 metadata (`ttlMs`, `cacheScope`, `_meta`) is preserved.
-  * A `nextCursor` that repeats stops the walk (defence against a
-  * non-converging server, mcp.d's `drainList` guard);
+  * A page with the same items and `nextCursor` as the previous page ends the walk;
   * {@linkcode ClientOptions.listMaxPages} is a hard cap — hitting it
   * throws, so a partial aggregate is never cached. The
   * captured-generation guard skips the write when a `list_changed` landed
@@ -35390,7 +35510,7 @@ var Client = class extends Protocol {
   * trace context) supplied to the public `list*()` reaches every wire
   * request the walk issues.
   */
-  async _listAllPages(method, baseParams, options, append, finalize2) {
+  async _listAllPages(method, baseParams, options, items, finalize2) {
     const bypass = options?.cacheMode === "bypass";
     const generation = this._cache.captureGeneration(method);
     const acc = await this.request({
@@ -35398,14 +35518,13 @@ var Client = class extends Protocol {
       ...baseParams && { params: { ...baseParams } }
     }, options);
     let cursor = acc.nextCursor;
-    const seen = /* @__PURE__ */ new Set();
+    let previous = acc;
     let pages = 1;
-    while (cursor !== void 0 && !seen.has(cursor)) {
+    while (cursor !== void 0) {
       if (this._listMaxPages !== 0 && pages >= this._listMaxPages) throw new SdkError(SdkErrorCode.ListPaginationExceeded, `${method}: exceeded listMaxPages (${this._listMaxPages}); server pagination did not terminate`, {
         method,
         listMaxPages: this._listMaxPages
       });
-      seen.add(cursor);
       const page = await this.request({
         method,
         params: {
@@ -35413,7 +35532,9 @@ var Client = class extends Protocol {
           cursor
         }
       }, options);
-      append(acc, page);
+      if (page.nextCursor === cursor && JSON.stringify(items(page)) === JSON.stringify(items(previous))) break;
+      items(acc).push(...items(page));
+      previous = page;
       cursor = page.nextCursor;
       pages++;
     }
@@ -35677,19 +35798,22 @@ var Client = class extends Protocol {
         notifications: filter
       }
     };
+    const routeSendFailure = (error62) => {
+      settle2({
+        cause: "remote",
+        error: error62 instanceof Error ? error62 : new Error(String(error62))
+      });
+    };
     try {
-      await this.transport.send(jsonrpcRequest, {
+      this.transport.send(jsonrpcRequest, {
         requestSignal: requestAbort.signal,
         onRequestStreamEnd: () => settle2({
           cause: "remote",
           error: /* @__PURE__ */ new Error("subscriptions/listen: stream ended")
         })
-      });
+      }).catch(routeSendFailure);
     } catch (error62) {
-      settle2({
-        cause: "remote",
-        error: error62 instanceof Error ? error62 : new Error(String(error62))
-      });
+      routeSendFailure(error62);
     }
     return {
       honoredFilter: await opening,
@@ -35941,7 +36065,7 @@ var Client = class extends Protocol {
     }
     const hit = await this._serveFromCache("tools/list", void 0, options);
     if (hit !== void 0) return hit;
-    return this._listAllPages("tools/list", params, options, (acc, page) => acc.tools.push(...page.tools), (acc) => this._excludeInvalidXMcpHeaderTools(acc));
+    return this._listAllPages("tools/list", params, options, (r) => r.tools, (acc) => this._excludeInvalidXMcpHeaderTools(acc));
   }
   /**
   * SEP-2243 (protocol revision 2026-07-28): a Streamable HTTP client MUST
@@ -36012,6 +36136,63 @@ var Client = class extends Protocol {
     return this.notification({ method: "notifications/roots/list_changed" });
   }
 };
+function hasDpopChallenge(wwwAuthenticate) {
+  return /(?:^|,)\s*dpop(?:\s|$|,)/i.test(wwwAuthenticate);
+}
+function isDpopNonceChallenge(response) {
+  if (response.status !== 401) return false;
+  const wwwAuthenticate = response.headers.get("www-authenticate") ?? "";
+  return hasDpopChallenge(wwwAuthenticate) && /use_dpop_nonce/i.test(wwwAuthenticate);
+}
+var withDpop = (session, getToken) => (next) => {
+  const resolveSession = typeof session === "function" ? session : () => session;
+  return async (input2, init) => {
+    const method = (init?.method ?? "GET").toUpperCase();
+    const url2 = new URL(input2.toString());
+    const activeSession = await resolveSession();
+    if (!activeSession) return next(input2, init);
+    const makeRequest = async () => {
+      const accessToken = await getToken();
+      if (!accessToken) return next(input2, init);
+      const headers = new Headers(init?.headers);
+      const proof = await activeSession.buildProof({
+        htm: method,
+        htu: url2,
+        accessToken
+      });
+      headers.set("Authorization", `DPoP ${accessToken}`);
+      headers.set("DPoP", proof);
+      return next(input2, {
+        ...init,
+        headers
+      });
+    };
+    let response = await makeRequest();
+    if (isDpopNonceChallenge(response) && response.headers.has("dpop-nonce")) {
+      activeSession.observeNonce(response, url2);
+      await response.text?.().catch(() => {
+      });
+      response = await makeRequest();
+    }
+    activeSession.observeNonce(response, url2);
+    return response;
+  };
+};
+var withDpopFromProvider = (provider) => withDpop(async () => {
+  try {
+    return await provider.dpop?.();
+  } catch (error62) {
+    throw markAuthSeamEscape(error62);
+  }
+}, async () => {
+  let tokens;
+  try {
+    tokens = await provider.tokens();
+  } catch (error62) {
+    throw markAuthSeamEscape(error62);
+  }
+  return tokens?.token_type?.toLowerCase() === "dpop" ? tokens.access_token : void 0;
+});
 var SseError = class extends Error {
   static {
     Object.defineProperty(this, "mcpBrand", { value: "mcp.SseError" });
@@ -36053,6 +36234,7 @@ var SSEClientTransport = class {
   _skipIssuerMetadataValidation;
   _fetch;
   _fetchWithInit;
+  _dpop;
   _protocolVersion;
   onclose;
   onerror;
@@ -36064,32 +36246,34 @@ var SSEClientTransport = class {
     this._eventSourceInit = opts?.eventSourceInit;
     this._requestInit = opts?.requestInit;
     this._skipIssuerMetadataValidation = opts?.skipIssuerMetadataValidation;
+    this._fetch = opts?.fetch;
     if (isOAuthClientProvider(opts?.authProvider)) {
       this._oauthProvider = opts.authProvider;
       this._authProvider = adaptOAuthProvider(opts.authProvider, { skipIssuerMetadataValidation: opts.skipIssuerMetadataValidation });
+      if (opts.authProvider.dpop) {
+        this._dpop = withDpopFromProvider(opts.authProvider);
+        this._fetch = this._dpop(opts.fetch ?? fetch);
+      }
     } else this._authProvider = opts?.authProvider;
-    this._fetch = opts?.fetch;
     this._fetchWithInit = createFetchWithInit(opts?.fetch, opts?.requestInit);
   }
   _last401Response;
+  _last401PresentedToken;
   async _commonHeaders() {
-    const headers = {};
+    const headers = new Headers(this._requestInit?.headers || void 0);
     let token;
     try {
       token = await this._authProvider?.token();
     } catch (error62) {
       throw markAuthSeamEscape(error62);
     }
-    if (token) headers["Authorization"] = `Bearer ${token}`;
-    if (this._protocolVersion) headers["mcp-protocol-version"] = this._protocolVersion;
-    const extraHeaders = normalizeHeaders(this._requestInit?.headers);
-    return new Headers({
-      ...headers,
-      ...extraHeaders
-    });
+    if (token) headers.set("Authorization", `Bearer ${token}`);
+    if (this._protocolVersion) headers.set("mcp-protocol-version", this._protocolVersion);
+    return headers;
   }
   _startOrAuth() {
-    const fetchImpl = this?._eventSourceInit?.fetch ?? this._fetch ?? fetch;
+    const eventSourceFetch = this._eventSourceInit?.fetch;
+    const fetchImpl = eventSourceFetch ? this._dpop?.(eventSourceFetch) ?? eventSourceFetch : this._fetch ?? fetch;
     return new Promise((resolve, reject) => {
       this._eventSource = new EventSource(this._url.href, {
         ...this._eventSourceInit,
@@ -36102,6 +36286,7 @@ var SSEClientTransport = class {
           });
           if (response.status === 401) {
             this._last401Response = response;
+            this._last401PresentedToken = presentedBearerToken(headers);
             if (response.headers.has("www-authenticate")) {
               const { resourceMetadataUrl, scope } = extractWWWAuthenticateParams(response);
               this._resourceMetadataUrl = resourceMetadataUrl;
@@ -36116,12 +36301,15 @@ var SSEClientTransport = class {
         if (event.code === 401 && this._authProvider) {
           if (this._authProvider.onUnauthorized && this._last401Response) {
             const response = this._last401Response;
+            const presentedToken = this._last401PresentedToken;
             this._last401Response = void 0;
+            this._last401PresentedToken = void 0;
             this._eventSource?.close();
             this._authProvider.onUnauthorized({
               response,
               serverUrl: this._url,
-              fetchFn: this._fetchWithInit
+              fetchFn: this._fetchWithInit,
+              presentedToken
             }).then(() => this._startOrAuth().then(resolve, reject), (error$2) => {
               markAuthSeamEscape(error$2);
               this.onerror?.(error$2);
@@ -36219,7 +36407,8 @@ var SSEClientTransport = class {
               await this._authProvider.onUnauthorized({
                 response,
                 serverUrl: this._url,
-                fetchFn: this._fetchWithInit
+                fetchFn: this._fetchWithInit,
+                presentedToken: presentedBearerToken(headers)
               });
             } catch (error62) {
               throw markAuthSeamEscape(error62);
@@ -36259,6 +36448,7 @@ var DEFAULT_STREAMABLE_HTTP_RECONNECTION_OPTIONS = {
 };
 var RESERVED_REQUEST_HEADER_NAMES = /* @__PURE__ */ new Set([
   "authorization",
+  "dpop",
   "content-type",
   "mcp-protocol-version",
   "mcp-method",
@@ -36321,11 +36511,12 @@ var StreamableHTTPClientTransport = class {
     this._scope = void 0;
     this._requestInit = opts?.requestInit;
     this._skipIssuerMetadataValidation = opts?.skipIssuerMetadataValidation;
+    this._fetch = opts?.fetch;
     if (isOAuthClientProvider(opts?.authProvider)) {
       this._oauthProvider = opts.authProvider;
       this._authProvider = adaptOAuthProvider(opts.authProvider, { skipIssuerMetadataValidation: opts.skipIssuerMetadataValidation });
+      if (opts.authProvider.dpop) this._fetch = withDpopFromProvider(opts.authProvider)(opts.fetch ?? fetch);
     } else this._authProvider = opts?.authProvider;
-    this._fetch = opts?.fetch;
     this._fetchWithInit = createFetchWithInit(opts?.fetch, opts?.requestInit);
     this._sessionId = opts?.sessionId;
     this._protocolVersion = opts?.protocolVersion;
@@ -36379,21 +36570,17 @@ var StreamableHTTPClientTransport = class {
     });
   }
   async _commonHeaders() {
-    const headers = {};
+    const headers = new Headers(this._requestInit?.headers || void 0);
     let token;
     try {
       token = await this._authProvider?.token();
     } catch (error62) {
       throw markAuthSeamEscape(error62);
     }
-    if (token) headers["Authorization"] = `Bearer ${token}`;
-    if (this._sessionId) headers["mcp-session-id"] = this._sessionId;
-    if (this._protocolVersion) headers["mcp-protocol-version"] = this._protocolVersion;
-    const extraHeaders = normalizeHeaders(this._requestInit?.headers);
-    return new Headers({
-      ...headers,
-      ...extraHeaders
-    });
+    if (token) headers.set("Authorization", `Bearer ${token}`);
+    if (this._sessionId) headers.set("mcp-session-id", this._sessionId);
+    if (this._protocolVersion) headers.set("mcp-protocol-version", this._protocolVersion);
+    return headers;
   }
   /**
   * Body-derived per-request headers: when an outgoing request carries a
@@ -36409,9 +36596,8 @@ var StreamableHTTPClientTransport = class {
     if (typeof envelopeVersion !== "string") return;
     headers.set("mcp-protocol-version", envelopeVersion);
     headers.set("mcp-method", message.method);
-    const params = message.params;
-    const nameHeader = message.method === "resources/read" ? typeof params?.uri === "string" ? params.uri : void 0 : typeof params?.name === "string" ? params.name : void 0;
-    if (nameHeader !== void 0) headers.set("mcp-name", encodeMcpParamValue(nameHeader));
+    const source = mcpNameSource(message.method, message.params);
+    if (source?.value !== void 0) headers.set("mcp-name", encodeMcpParamValue(source.value));
   }
   /**
   * `true` when the outbound message is a single request carrying a
@@ -36452,7 +36638,8 @@ var StreamableHTTPClientTransport = class {
               await this._authProvider.onUnauthorized({
                 response,
                 serverUrl: this._url,
-                fetchFn: this._fetchWithInit
+                fetchFn: this._fetchWithInit,
+                presentedToken: presentedBearerToken(headers)
               });
             } catch (error62) {
               throw markAuthSeamEscape(error62);
@@ -36692,7 +36879,8 @@ var StreamableHTTPClientTransport = class {
               await this._authProvider.onUnauthorized({
                 response,
                 serverUrl: this._url,
-                fetchFn: this._fetchWithInit
+                fetchFn: this._fetchWithInit,
+                presentedToken: presentedBearerToken(headers)
               });
             } catch (error62) {
               throw markAuthSeamEscape(error62);
@@ -36827,216 +37015,7 @@ var StreamableHTTPClientTransport = class {
 };
 
 export {
-  toJSONSchema,
-  safeParse2 as safeParse,
-  string2 as string,
-  email2 as email,
-  url,
-  number2 as number,
-  boolean2 as boolean,
-  _null3 as _null,
-  unknown,
-  array,
-  object,
-  looseObject,
-  union,
-  discriminatedUnion,
-  intersection,
-  record,
-  _enum2 as _enum,
-  literal,
-  optional,
-  lazy,
-  preprocess,
-  iso_exports,
   external_exports,
-  LATEST_PROTOCOL_VERSION,
-  DEFAULT_NEGOTIATED_PROTOCOL_VERSION,
-  SUPPORTED_PROTOCOL_VERSIONS,
-  PROTOCOL_VERSION_META_KEY,
-  CLIENT_INFO_META_KEY,
-  SERVER_INFO_META_KEY,
-  CLIENT_CAPABILITIES_META_KEY,
-  SUBSCRIPTION_ID_META_KEY,
-  LOG_LEVEL_META_KEY,
-  JSONValueSchema,
-  JSONObjectSchema,
-  JSONArraySchema,
-  ProgressTokenSchema,
-  CursorSchema,
-  TaskMetadataSchema,
-  RelatedTaskMetadataSchema,
-  RequestMetaSchema,
-  BaseRequestParamsSchema,
-  TaskAugmentedRequestParamsSchema,
-  RequestSchema,
-  NotificationsParamsSchema,
-  NotificationSchema,
-  ResultMetaObjectSchema,
-  ResultSchema,
-  RequestIdSchema,
-  JSONRPCRequestSchema,
-  JSONRPCNotificationSchema,
-  JSONRPCResultResponseSchema,
-  JSONRPCErrorResponseSchema,
-  JSONRPCMessageSchema,
-  JSONRPCResponseSchema,
-  EmptyResultSchema,
-  CancelledNotificationParamsSchema,
-  CancelledNotificationSchema,
-  IconSchema,
-  IconsSchema,
-  BaseMetadataSchema,
-  ImplementationSchema,
-  ClientTasksCapabilitySchema,
-  ServerTasksCapabilitySchema,
-  ClientCapabilitiesSchema,
-  InitializeRequestParamsSchema,
-  InitializeRequestSchema,
-  ServerCapabilitiesSchema,
-  InitializeResultSchema,
-  InitializedNotificationSchema,
-  DiscoverRequestSchema,
-  DiscoverResultSchema,
-  PingRequestSchema,
-  ProgressSchema,
-  ProgressNotificationParamsSchema,
-  ProgressNotificationSchema,
-  PaginatedRequestParamsSchema,
-  PaginatedRequestSchema,
-  PaginatedResultSchema,
-  ResourceContentsSchema,
-  TextResourceContentsSchema,
-  BlobResourceContentsSchema,
-  RoleSchema,
-  AnnotationsSchema,
-  ResourceSchema,
-  ResourceTemplateSchema,
-  ListResourcesRequestSchema,
-  ListResourcesResultSchema,
-  ListResourceTemplatesRequestSchema,
-  ListResourceTemplatesResultSchema,
-  ResourceRequestParamsSchema,
-  ReadResourceRequestParamsSchema,
-  ReadResourceRequestSchema,
-  ReadResourceResultSchema,
-  ResourceListChangedNotificationSchema,
-  SubscribeRequestParamsSchema,
-  SubscribeRequestSchema,
-  UnsubscribeRequestParamsSchema,
-  UnsubscribeRequestSchema,
-  SubscriptionFilterSchema,
-  SubscriptionsListenRequestParamsSchema,
-  SubscriptionsListenRequestSchema,
-  SubscriptionsAcknowledgedNotificationParamsSchema,
-  SubscriptionsAcknowledgedNotificationSchema,
-  SubscriptionsListenResultMetaSchema,
-  SubscriptionsListenResultSchema,
-  ResourceUpdatedNotificationParamsSchema,
-  ResourceUpdatedNotificationSchema,
-  PromptArgumentSchema,
-  PromptSchema,
-  ListPromptsRequestSchema,
-  ListPromptsResultSchema,
-  GetPromptRequestParamsSchema,
-  GetPromptRequestSchema,
-  TextContentSchema,
-  ImageContentSchema,
-  AudioContentSchema,
-  ToolUseContentSchema,
-  EmbeddedResourceSchema,
-  ResourceLinkSchema,
-  ContentBlockSchema,
-  PromptMessageSchema,
-  GetPromptResultSchema,
-  PromptListChangedNotificationSchema,
-  ToolAnnotationsSchema,
-  ToolExecutionSchema,
-  ToolSchema,
-  ListToolsRequestSchema,
-  ListToolsResultSchema,
-  CallToolResultSchema,
-  CompatibilityCallToolResultSchema,
-  CallToolRequestParamsSchema,
-  CallToolRequestSchema,
-  ToolListChangedNotificationSchema,
-  ListChangedOptionsBaseSchema,
-  LoggingLevelSchema,
-  SetLevelRequestParamsSchema,
-  SetLevelRequestSchema,
-  LoggingMessageNotificationParamsSchema,
-  LoggingMessageNotificationSchema,
-  ModelHintSchema,
-  ModelPreferencesSchema,
-  ToolChoiceSchema,
-  ToolResultContentSchema,
-  SamplingContentSchema,
-  SamplingMessageContentBlockSchema,
-  SamplingMessageSchema,
-  CreateMessageRequestParamsSchema,
-  CreateMessageRequestSchema,
-  CreateMessageResultSchema,
-  CreateMessageResultWithToolsSchema,
-  BooleanSchemaSchema,
-  StringSchemaSchema,
-  NumberSchemaSchema,
-  UntitledSingleSelectEnumSchemaSchema,
-  TitledSingleSelectEnumSchemaSchema,
-  LegacyTitledEnumSchemaSchema,
-  SingleSelectEnumSchemaSchema,
-  UntitledMultiSelectEnumSchemaSchema,
-  TitledMultiSelectEnumSchemaSchema,
-  MultiSelectEnumSchemaSchema,
-  EnumSchemaSchema,
-  PrimitiveSchemaDefinitionSchema,
-  ElicitRequestFormParamsSchema,
-  ElicitRequestURLParamsSchema,
-  ElicitRequestParamsSchema,
-  ElicitRequestSchema,
-  ElicitationCompleteNotificationParamsSchema,
-  ElicitationCompleteNotificationSchema,
-  ElicitResultSchema,
-  ResourceTemplateReferenceSchema,
-  PromptReferenceSchema,
-  CompleteRequestParamsSchema,
-  CompleteRequestSchema,
-  CompleteResultSchema,
-  RootSchema,
-  ListRootsRequestSchema,
-  ListRootsResultSchema,
-  RootsListChangedNotificationSchema,
-  TaskCreationParamsSchema,
-  TaskStatusSchema,
-  TaskSchema,
-  CreateTaskResultSchema,
-  TaskStatusNotificationParamsSchema,
-  TaskStatusNotificationSchema,
-  GetTaskRequestSchema,
-  GetTaskResultSchema,
-  GetTaskPayloadRequestSchema,
-  GetTaskPayloadResultSchema,
-  ListTasksRequestSchema,
-  ListTasksResultSchema,
-  CancelTaskRequestSchema,
-  CancelTaskResultSchema,
-  ClientRequestSchema,
-  ClientNotificationSchema,
-  ClientResultSchema,
-  ServerRequestSchema,
-  ServerNotificationSchema,
-  ServerResultSchema,
-  OAuthProtectedResourceMetadataSchema,
-  OAuthMetadataSchema,
-  OpenIdProviderMetadataSchema,
-  OpenIdProviderDiscoveryMetadataSchema,
-  OAuthTokensSchema,
-  IdJagTokenExchangeResponseSchema,
-  OAuthErrorResponseSchema,
-  OAuthClientMetadataSchema,
-  OAuthClientInformationSchema,
-  OAuthClientInformationFullSchema,
-  OAuthClientRegistrationErrorSchema,
-  OAuthTokenRevocationRequestSchema,
   SdkErrorCode,
   SdkError,
   SdkHttpError,
@@ -37047,6 +37026,7 @@ export {
   DEFAULT_REQUEST_TIMEOUT_MSEC,
   ReadBuffer,
   serializeMessage,
+  AjvJsonSchemaValidator,
   IssuerMismatchError,
   UnauthorizedError,
   auth,