@mastra/mcp 1.15.1 → 1.16.0-alpha.0

package/dist/index.js

@@ -3,14 +3,9 @@ import { AsyncLocalStorage } from "async_hooks";
 import { MastraBase } from "@mastra/core/base";
 import { ErrorCategory, ErrorDomain, MastraError } from "@mastra/core/error";
 import { createTool, isValidationError } from "@mastra/core/tools";
-import { Client } from "@modelcontextprotocol/sdk/client/index.js";
-import { SSEClientTransport } from "@modelcontextprotocol/sdk/client/sse.js";
-import { StdioClientTransport, getDefaultEnvironment } from "@modelcontextprotocol/sdk/client/stdio.js";
-import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
-import { DEFAULT_REQUEST_TIMEOUT_MSEC } from "@modelcontextprotocol/sdk/shared/protocol.js";
-import { CallToolRequestSchema, CallToolResultSchema, ElicitRequestSchema, EmptyResultSchema, ErrorCode, GetPromptRequestSchema, GetPromptResultSchema, JSONRPCMessageSchema, ListPromptsRequestSchema, ListPromptsResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListRootsRequestSchema, ListToolsRequestSchema, LoggingMessageNotificationSchema, McpError, ProgressNotificationSchema, PromptListChangedNotificationSchema, PromptSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, ResourceUpdatedNotificationSchema, SetLevelRequestSchema, SubscribeRequestSchema, ToolListChangedNotificationSchema, UnsubscribeRequestSchema } from "@modelcontextprotocol/sdk/types.js";
+import { Client, DEFAULT_REQUEST_TIMEOUT_MSEC, ProtocolErrorCode, SSEClientTransport, SdkHttpError, StreamableHTTPClientTransport, UnauthorizedError, auth, buildDiscoveryUrls, discoverAuthorizationServerMetadata, discoverOAuthMetadata, discoverOAuthProtectedResourceMetadata, exchangeAuthorization, extractResourceMetadataUrl, parseErrorResponse, refreshAuthorization, registerClient, selectResourceURL, startAuthorization } from "@modelcontextprotocol/client";
+import { StdioClientTransport, getDefaultEnvironment } from "@modelcontextprotocol/client/stdio";
 import { asyncExitHook, gracefulExit } from "exit-hook";
-import { UnauthorizedError, auth, buildDiscoveryUrls, discoverAuthorizationServerMetadata, discoverOAuthMetadata, discoverOAuthProtectedResourceMetadata, exchangeAuthorization, extractResourceMetadataUrl, parseErrorResponse, refreshAuthorization, registerClient, selectResourceURL, startAuthorization } from "@modelcontextprotocol/sdk/client/auth.js";
 import { createHash, randomUUID, timingSafeEqual } from "crypto";
 import equal from "fast-deep-equal";
 import { createServer } from "http";
@@ -19,11 +14,12 @@ import { isStandardSchemaWithJSON, standardSchemaToJSONSchema } from "@mastra/co
 import { readFileSync } from "fs";
 import { RequestContext } from "@mastra/core/request-context";
 import { makeCoreTool } from "@mastra/core/utils";
+import { PromptSchema } from "@modelcontextprotocol/core";
 import { RESOURCE_MIME_TYPE, RESOURCE_URI_META_KEY } from "@modelcontextprotocol/ext-apps";
-import { Server } from "@modelcontextprotocol/sdk/server/index.js";
-import { SSEServerTransport } from "@modelcontextprotocol/sdk/server/sse.js";
-import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { NodeStreamableHTTPServerTransport } from "@modelcontextprotocol/node";
+import { ProtocolError, ProtocolErrorCode as ProtocolErrorCode$1, Server } from "@modelcontextprotocol/server";
+import { StdioServerTransport } from "@modelcontextprotocol/server/stdio";
+import { SSEServerTransport } from "@modelcontextprotocol/server-legacy/sse";
 //#region \0rolldown/runtime.js
 var __defProp$3 = Object.defineProperty;
 var __exportAll = (all, no_symbols) => {
@@ -1990,6 +1986,62 @@ const $ZodUnion = /*@__PURE__*/ $constructor("$ZodUnion", (inst, def) => {
 		});
 	};
 });
+const $ZodDiscriminatedUnion = /*@__PURE__*/ $constructor("$ZodDiscriminatedUnion", (inst, def) => {
+	def.inclusive = false;
+	$ZodUnion.init(inst, def);
+	const _super = inst._zod.parse;
+	defineLazy(inst._zod, "propValues", () => {
+		const propValues = {};
+		for (const option of def.options) {
+			const pv = option._zod.propValues;
+			if (!pv || Object.keys(pv).length === 0) throw new Error(`Invalid discriminated union option at index "${def.options.indexOf(option)}"`);
+			for (const [k, v] of Object.entries(pv)) {
+				if (!propValues[k]) propValues[k] = /* @__PURE__ */ new Set();
+				for (const val of v) propValues[k].add(val);
+			}
+		}
+		return propValues;
+	});
+	const disc = cached(() => {
+		const opts = def.options;
+		const map = /* @__PURE__ */ new Map();
+		for (const o of opts) {
+			const values = o._zod.propValues?.[def.discriminator];
+			if (!values || values.size === 0) throw new Error(`Invalid discriminated union option at index "${def.options.indexOf(o)}"`);
+			for (const v of values) {
+				if (map.has(v)) throw new Error(`Duplicate discriminator value "${String(v)}"`);
+				map.set(v, o);
+			}
+		}
+		return map;
+	});
+	inst._zod.parse = (payload, ctx) => {
+		const input = payload.value;
+		if (!isObject(input)) {
+			payload.issues.push({
+				code: "invalid_type",
+				expected: "object",
+				input,
+				inst
+			});
+			return payload;
+		}
+		const opt = disc.value.get(input?.[def.discriminator]);
+		if (opt) return opt._zod.run(payload, ctx);
+		if (def.unionFallback || ctx.direction === "backward") return _super(payload, ctx);
+		payload.issues.push({
+			code: "invalid_union",
+			errors: [],
+			note: "No matching discriminator",
+			discriminator: def.discriminator,
+			options: Array.from(disc.value.keys()),
+			input,
+			path: [def.discriminator],
+			inst
+		});
+		return payload;
+	};
+});
 const $ZodIntersection = /*@__PURE__*/ $constructor("$ZodIntersection", (inst, def) => {
 	$ZodType.init(inst, def);
 	inst._zod.parse = (payload, ctx) => {
@@ -2525,6 +2577,9 @@ function handlePipeResult(left, next, ctx) {
 		fallback: left.fallback
 	}, ctx);
 }
+const $ZodPreprocess = /*@__PURE__*/ $constructor("$ZodPreprocess", (inst, def) => {
+	$ZodPipe.init(inst, def);
+});
 const $ZodReadonly = /*@__PURE__*/ $constructor("$ZodReadonly", (inst, def) => {
 	$ZodType.init(inst, def);
 	defineLazy(inst._zod, "propValues", () => def.innerType._zod.propValues);
@@ -4544,6 +4599,14 @@ function object$1(shape, params) {
 	};
 	return new ZodObject$1(def);
 }
+function looseObject(shape, params) {
+	return new ZodObject$1({
+		type: "object",
+		shape,
+		catchall: unknown(),
+		...normalizeParams(params)
+	});
+}
 const ZodUnion$1 = /*@__PURE__*/ $constructor("ZodUnion", (inst, def) => {
 	$ZodUnion.init(inst, def);
 	ZodType$1.init(inst, def);
@@ -4557,6 +4620,18 @@ function union(options, params) {
 		...normalizeParams(params)
 	});
 }
+const ZodDiscriminatedUnion$1 = /*@__PURE__*/ $constructor("ZodDiscriminatedUnion", (inst, def) => {
+	ZodUnion$1.init(inst, def);
+	$ZodDiscriminatedUnion.init(inst, def);
+});
+function discriminatedUnion(discriminator, options, params) {
+	return new ZodDiscriminatedUnion$1({
+		type: "union",
+		options,
+		discriminator,
+		...normalizeParams(params)
+	});
+}
 const ZodIntersection$1 = /*@__PURE__*/ $constructor("ZodIntersection", (inst, def) => {
 	$ZodIntersection.init(inst, def);
 	ZodType$1.init(inst, def);
@@ -4816,6 +4891,10 @@ function pipe(in_, out) {
 		out
 	});
 }
+const ZodPreprocess = /*@__PURE__*/ $constructor("ZodPreprocess", (inst, def) => {
+	ZodPipe.init(inst, def);
+	$ZodPreprocess.init(inst, def);
+});
 const ZodReadonly$1 = /*@__PURE__*/ $constructor("ZodReadonly", (inst, def) => {
 	$ZodReadonly.init(inst, def);
 	ZodType$1.init(inst, def);
@@ -4874,6 +4953,13 @@ function _instanceof(cls, params = {}) {
 	};
 	return inst;
 }
+function preprocess(fn, schema) {
+	return new ZodPreprocess({
+		type: "pipe",
+		in: transform(fn),
+		out: schema
+	});
+}
 //#endregion
 //#region ../../../../../setup-pnpm/node_modules/.bin/store/v11/links/@/zod-to-json-schema/3.25.2/e44095b6546ec71c6bc64e08880b3fed52703321484b7225302b788f83667662/node_modules/zod-to-json-schema/dist/esm/Options.js
 const ignoreOverride$1 = Symbol("Let zodToJsonSchema decide on which parser to use");
@@ -20391,12 +20477,12 @@ var ClientOrServerImplementationSchema = object$1({
 	version: string()
 }).passthrough();
 var BaseParamsSchema = object$1({ _meta: optional(object$1({}).passthrough()) }).passthrough();
-var ResultSchema = BaseParamsSchema;
-var RequestSchema = object$1({
+var ResultSchema$1 = BaseParamsSchema;
+var RequestSchema$1 = object$1({
 	method: string(),
 	params: optional(BaseParamsSchema)
 });
-var ServerCapabilitiesSchema = object$1({
+var ServerCapabilitiesSchema$1 = object$1({
 	experimental: optional(object$1({}).passthrough()),
 	logging: optional(object$1({}).passthrough()),
 	prompts: optional(object$1({ listChanged: optional(boolean()) }).passthrough()),
@@ -20406,14 +20492,14 @@ var ServerCapabilitiesSchema = object$1({
 	}).passthrough()),
 	tools: optional(object$1({ listChanged: optional(boolean()) }).passthrough())
 }).passthrough();
-ResultSchema.extend({
+ResultSchema$1.extend({
 	protocolVersion: string(),
-	capabilities: ServerCapabilitiesSchema,
+	capabilities: ServerCapabilitiesSchema$1,
 	serverInfo: ClientOrServerImplementationSchema,
 	instructions: optional(string())
 });
-var PaginatedResultSchema = ResultSchema.extend({ nextCursor: optional(string()) });
-var ToolSchema = object$1({
+var PaginatedResultSchema$1 = ResultSchema$1.extend({ nextCursor: optional(string()) });
+var ToolSchema$1 = object$1({
 	name: string(),
 	description: optional(string()),
 	inputSchema: object$1({
@@ -20421,17 +20507,17 @@ var ToolSchema = object$1({
 		properties: optional(object$1({}).passthrough())
 	}).passthrough()
 }).passthrough();
-PaginatedResultSchema.extend({ tools: array(ToolSchema) });
-var TextContentSchema = object$1({
+PaginatedResultSchema$1.extend({ tools: array(ToolSchema$1) });
+var TextContentSchema$1 = object$1({
 	type: literal("text"),
 	text: string()
 }).passthrough();
-var ImageContentSchema = object$1({
+var ImageContentSchema$1 = object$1({
 	type: literal("image"),
 	data: string().base64(),
 	mimeType: string()
 }).passthrough();
-var ResourceContentsSchema = object$1({
+var ResourceContentsSchema$1 = object$1({
 	/**
 	* The URI of this resource.
 	*/
@@ -20441,32 +20527,32 @@ var ResourceContentsSchema = object$1({
 	*/
 	mimeType: optional(string())
 }).passthrough();
-var TextResourceContentsSchema = ResourceContentsSchema.extend({ text: string() });
-var BlobResourceContentsSchema = ResourceContentsSchema.extend({ blob: string().base64() });
-var EmbeddedResourceSchema = object$1({
+var TextResourceContentsSchema$1 = ResourceContentsSchema$1.extend({ text: string() });
+var BlobResourceContentsSchema$1 = ResourceContentsSchema$1.extend({ blob: string().base64() });
+var EmbeddedResourceSchema$1 = object$1({
 	type: literal("resource"),
-	resource: union([TextResourceContentsSchema, BlobResourceContentsSchema])
+	resource: union([TextResourceContentsSchema$1, BlobResourceContentsSchema$1])
 }).passthrough();
-ResultSchema.extend({
+ResultSchema$1.extend({
 	content: array(union([
-		TextContentSchema,
-		ImageContentSchema,
-		EmbeddedResourceSchema
+		TextContentSchema$1,
+		ImageContentSchema$1,
+		EmbeddedResourceSchema$1
 	])),
 	isError: boolean().default(false).optional()
-}).or(ResultSchema.extend({ toolResult: unknown() }));
-var JSONRPC_VERSION = "2.0";
-var JSONRPCRequestSchema = object$1({
-	jsonrpc: literal(JSONRPC_VERSION),
+}).or(ResultSchema$1.extend({ toolResult: unknown() }));
+var JSONRPC_VERSION$1 = "2.0";
+var JSONRPCRequestSchema$1 = object$1({
+	jsonrpc: literal(JSONRPC_VERSION$1),
 	id: union([string(), number().int()])
-}).merge(RequestSchema).strict();
-var JSONRPCResponseSchema = object$1({
-	jsonrpc: literal(JSONRPC_VERSION),
+}).merge(RequestSchema$1).strict();
+var JSONRPCResponseSchema$1 = object$1({
+	jsonrpc: literal(JSONRPC_VERSION$1),
 	id: union([string(), number().int()]),
-	result: ResultSchema
+	result: ResultSchema$1
 }).strict();
 var JSONRPCErrorSchema = object$1({
-	jsonrpc: literal(JSONRPC_VERSION),
+	jsonrpc: literal(JSONRPC_VERSION$1),
 	id: union([string(), number().int()]),
 	error: object$1({
 		code: number().int(),
@@ -20475,12 +20561,12 @@ var JSONRPCErrorSchema = object$1({
 	})
 }).strict();
 union([
-	JSONRPCRequestSchema,
-	object$1({ jsonrpc: literal(JSONRPC_VERSION) }).merge(object$1({
+	JSONRPCRequestSchema$1,
+	object$1({ jsonrpc: literal(JSONRPC_VERSION$1) }).merge(object$1({
 		method: string(),
 		params: optional(BaseParamsSchema)
 	})).strict(),
-	JSONRPCResponseSchema,
+	JSONRPCResponseSchema$1,
 	JSONRPCErrorSchema
 ]);
 __export({}, {
@@ -20803,7 +20889,7 @@ var PromptClientActions = class {
 				return [];
 			}
 		} catch (e) {
-			if (e.code === ErrorCode.MethodNotFound) return [];
+			if (e.code === ProtocolErrorCode.MethodNotFound) return [];
 			this.logger.error("Error getting prompts from server", {
 				server: this.client.name,
 				error: e instanceof Error ? e.message : String(e)
@@ -20910,7 +20996,7 @@ var ResourceClientActions = class {
 				return [];
 			}
 		} catch (e) {
-			if (e.code === ErrorCode.MethodNotFound) return [];
+			if (e.code === ProtocolErrorCode.MethodNotFound) return [];
 			this.logger.error("Error getting resources from server", {
 				server: this.client.name,
 				error: e instanceof Error ? e.message : String(e)
@@ -20947,7 +21033,7 @@ var ResourceClientActions = class {
 				return [];
 			}
 		} catch (e) {
-			if (e.code === ErrorCode.MethodNotFound) return [];
+			if (e.code === ProtocolErrorCode.MethodNotFound) return [];
 			this.logger.error("Error getting resource templates from server", {
 				server: this.client.name,
 				error: e instanceof Error ? e.message : String(e)
@@ -21055,6 +21141,202 @@ function isReconnectableMCPError(error) {
 	return errorMessage.includes("no valid session") || errorMessage.includes("session") || errorMessage.includes("server not initialized") || errorMessage.includes("not connected") || errorMessage.includes("http 400") || errorMessage.includes("http 401") || errorMessage.includes("http 403") || errorMessage.includes("http 404") || errorMessage.includes("econnrefused") || errorMessage.includes("fetch failed") || errorMessage.includes("connection refused") || errorMessage.includes("connection closed") || errorMessage.includes("sse stream disconnected") || errorMessage.includes("typeerror: terminated");
 }
 //#endregion
+//#region src/client/url-policy.ts
+/**
+* Redirect status codes the manual redirect loop follows. Other 3xx statuses
+* (e.g. 304) are not redirects and are returned to the caller as-is.
+*/
+const REDIRECT_STATUS_CODES = /* @__PURE__ */ new Set([
+	301,
+	302,
+	303,
+	307,
+	308
+]);
+/** Maximum number of redirect hops followed before failing. */
+const MAX_REDIRECT_HOPS = 5;
+function normalizeHost(host) {
+	return host.toLowerCase();
+}
+/** Best-effort release of a discarded response body so its socket is not left undrained. */
+function cancelResponseBody(response) {
+	const body = response.body;
+	if (typeof body?.cancel !== "function") return;
+	try {
+		Promise.resolve(body.cancel()).catch(() => {});
+	} catch {}
+}
+function isHostAllowed(host, allowedHosts) {
+	const normalized = normalizeHost(host);
+	return allowedHosts.some((allowed) => normalizeHost(allowed) === normalized);
+}
+/**
+* Marker phrase embedded in every policy error's message. The `eventsource`
+* package flattens errors thrown from the SSE stream's fetch into a plain
+* message string (its internal `flattenError`), and the SDK re-wraps that
+* string as `SseError` — the `MastraError` identity does not survive that
+* boundary, but the message text does. {@link isUrlPolicyError} falls back to
+* matching this marker.
+*/
+const URL_POLICY_ERROR_MARKER = "allowedHosts policy";
+/**
+* Build the policy-violation error. The message deliberately avoids every
+* substring matched by `isReconnectableMCPError` (see ./error-utils.ts) so a
+* policy violation is never treated as a transient transport failure and fed
+* into the reconnect machinery — a blocked host must not be retried.
+*/
+function hostNotAllowedError(host, allowedHosts, detail) {
+	const allowedList = allowedHosts.length > 0 ? allowedHosts.map((h) => `"${h}"`).join(", ") : "(empty list — all hosts are denied)";
+	return new MastraError({
+		id: "MCP_CLIENT_HOST_NOT_ALLOWED",
+		domain: ErrorDomain.MCP,
+		category: ErrorCategory.USER,
+		text: `Host "${host}" is blocked by the allowedHosts policy. Allowed hosts: ${allowedList}. ${detail}`,
+		details: {
+			host,
+			allowedHosts: allowedHosts.join(",")
+		}
+	});
+}
+/**
+* Assert that the URL's host is in the allowlist.
+*
+* Matching is exact and case-insensitive against `URL.host` (hostname plus
+* port when the URL carries a non-default port — WHATWG URL elides default
+* ports, so `https://x.com:443` has host `x.com`). No wildcards. An empty
+* allowlist denies every host. The URL scheme is not checked.
+*
+* @returns the parsed URL, for callers that need it.
+* @throws {MastraError} `MCP_CLIENT_HOST_NOT_ALLOWED` when the host is not allowed.
+*/
+function assertHostAllowed(url, allowedHosts, detail = "The request was not sent.") {
+	const parsed = typeof url === "string" ? new URL(url) : url;
+	if (!isHostAllowed(parsed.host, allowedHosts)) throw hostNotAllowedError(parsed.host, allowedHosts, detail);
+	return parsed;
+}
+/**
+* Post-hoc validation for responses produced by a caller-supplied fetch.
+*
+* A custom fetch may auto-follow redirects, so the final URL can differ from
+* the (already validated) request URL. When `response.url` lands on a
+* disallowed host the response is discarded by throwing — the outbound hop
+* already happened, but the data never reaches the caller or the model.
+*
+* Limitation (fail-open by design): a hand-built or proxied `Response` with an
+* empty `response.url` skips this check, because custom fetch implementations
+* legitimately construct such responses.
+*/
+function assertResponseHostAllowed(response, allowedHosts) {
+	if (!response.url) return response;
+	const parsed = new URL(response.url);
+	if (!isHostAllowed(parsed.host, allowedHosts)) {
+		cancelResponseBody(response);
+		throw hostNotAllowedError(parsed.host, allowedHosts, "A custom fetch implementation followed a redirect to this host; the response was discarded.");
+	}
+	return response;
+}
+/**
+* True when the error is one of the allowedHosts policy errors. Policy
+* violations are final: they must never trigger the SSE fallback or the
+* reconnect machinery, because retrying a blocked host cannot succeed.
+*
+* Matches by `MastraError` id when the identity is intact, and by the
+* {@link URL_POLICY_ERROR_MARKER} message marker for errors that crossed the
+* eventsource boundary (which flattens thrown errors to message strings) or
+* were re-wrapped by another layer.
+*/
+const URL_POLICY_ERROR_IDS = /* @__PURE__ */ new Set([
+	"MCP_CLIENT_HOST_NOT_ALLOWED",
+	"MCP_CLIENT_TOO_MANY_REDIRECTS",
+	"MCP_CLIENT_REDIRECT_MISSING_LOCATION",
+	"MCP_CLIENT_REDIRECT_BODY_NOT_REPLAYABLE"
+]);
+function isUrlPolicyError(error) {
+	if (!(error instanceof Error)) return false;
+	if (error instanceof MastraError && URL_POLICY_ERROR_IDS.has(error.id)) return true;
+	return error.message.includes(URL_POLICY_ERROR_MARKER);
+}
+/**
+* Wrap a caller-supplied fetch with the allowedHosts policy: the request URL is
+* validated before the wrapped fetch runs, and the response is validated
+* post-hoc via {@link assertResponseHostAllowed}.
+*
+* Variadic over the trailing arguments deliberately: the same wrapper serves
+* the 3-arg `MastraFetchLike` (url, init, requestContext) and the 2-arg
+* eventsource stream fetch (url, init).
+*/
+function wrapFetchWithHostPolicy(fetchImpl, allowedHosts) {
+	return async (...args) => {
+		assertHostAllowed(args[0], allowedHosts);
+		return assertResponseHostAllowed(await fetchImpl(...args), allowedHosts);
+	};
+}
+/**
+* Fetch with manual redirect handling so every redirect hop is validated
+* against the allowlist BEFORE the hop request is sent. Platform fetch follows
+* redirects transparently, which would bypass a per-call host check.
+*
+* Semantics follow platform conventions:
+* - `Location` is resolved against the current hop's URL (relative Locations are legal).
+* - 303 switches the method to GET and drops the body; 301/302 on POST do the same.
+* - 307/308 preserve method and body; a non-replayable body (anything other
+*   than a string) throws rather than silently re-sending an empty body.
+* - 301/302 on non-POST methods preserve the method and body, matching
+*   platform behavior.
+* - The `Authorization` header is not carried across hops to a different
+*   origin (scheme, host, or port change), matching the WHATWG Fetch
+*   credential-stripping rule — same host over a downgraded scheme still
+*   drops the header.
+* - A redirect status with no `Location` header throws.
+* - More than {@link MAX_REDIRECT_HOPS} hops throws.
+*/
+async function fetchFollowingAllowedRedirects(fetchImpl, url, init, allowedHosts) {
+	let currentUrl = assertHostAllowed(url, allowedHosts);
+	let method = init?.method ?? "GET";
+	let body = init?.body;
+	const headers = new Headers(init?.headers);
+	for (let redirectsFollowed = 0;; redirectsFollowed++) {
+		const response = await fetchImpl(currentUrl, {
+			...init,
+			method,
+			body,
+			headers,
+			redirect: "manual"
+		});
+		if (!REDIRECT_STATUS_CODES.has(response.status)) return response;
+		const location = response.headers.get("location");
+		if (!location) throw new MastraError({
+			id: "MCP_CLIENT_REDIRECT_MISSING_LOCATION",
+			domain: ErrorDomain.MCP,
+			category: ErrorCategory.THIRD_PARTY,
+			text: `Received a ${response.status} redirect with no Location header from "${currentUrl.host}" while following redirects under the allowedHosts policy.`
+		});
+		if (redirectsFollowed >= MAX_REDIRECT_HOPS) throw new MastraError({
+			id: "MCP_CLIENT_TOO_MANY_REDIRECTS",
+			domain: ErrorDomain.MCP,
+			category: ErrorCategory.THIRD_PARTY,
+			text: `Exceeded the maximum of ${MAX_REDIRECT_HOPS} redirect hops while requesting host "${currentUrl.host}" under the allowedHosts policy.`
+		});
+		cancelResponseBody(response);
+		const nextUrl = new URL(location, currentUrl);
+		assertHostAllowed(nextUrl, allowedHosts, `A redirect from "${currentUrl.host}" pointed at it; the hop was not followed.`);
+		const methodUpper = method.toUpperCase();
+		if (response.status === 303 || (response.status === 301 || response.status === 302) && methodUpper === "POST") {
+			method = "GET";
+			body = void 0;
+			headers.delete("content-type");
+			headers.delete("content-length");
+		} else if (body != null && typeof body !== "string") throw new MastraError({
+			id: "MCP_CLIENT_REDIRECT_BODY_NOT_REPLAYABLE",
+			domain: ErrorDomain.MCP,
+			category: ErrorCategory.USER,
+			text: `Cannot follow a ${response.status} redirect under the allowedHosts policy: the request body is not replayable (only string bodies can be re-sent).`
+		});
+		if (nextUrl.origin !== currentUrl.origin) headers.delete("authorization");
+		currentUrl = nextUrl;
+	}
+}
+//#endregion
 //#region src/client/client.ts
 const DEFAULT_SERVER_CONNECT_TIMEOUT_MSEC = 3e3;
 const DEFAULT_INSTRUCTIONS_MAX_LENGTH = 512;
@@ -21238,7 +21520,7 @@ var InternalMastraMCPClient = class extends MastraBase {
 		});
 	}
 	setupLogging() {
-		if (this.enableServerLogs) this.client.setNotificationHandler(LoggingMessageNotificationSchema, (notification) => {
+		if (this.enableServerLogs) this.client.setNotificationHandler("notifications/message", (notification) => {
 			const { level, ...params } = notification.params;
 			this.log(level, "[MCP SERVER LOG]", params);
 		});
@@ -21251,7 +21533,7 @@ var InternalMastraMCPClient = class extends MastraBase {
 	*/
 	setupRootsHandler() {
 		this.log("debug", "Setting up roots/list request handler");
-		this.client.setRequestHandler(ListRootsRequestSchema, async () => {
+		this.client.setRequestHandler("roots/list", async () => {
 			this.log("debug", `Responding to roots/list request with ${this._roots.length} roots`);
 			return { roots: this._roots };
 		});
@@ -21300,16 +21582,28 @@ var InternalMastraMCPClient = class extends MastraBase {
 		this.log("debug", "Sending notifications/roots/list_changed");
 		await this.client.notification({ method: "notifications/roots/list_changed" });
 	}
+	buildStdioEnv() {
+		const configured = this.serverConfig.env || {};
+		if (this.serverConfig.inheritDefaultEnv === false) {
+			const suppressed = {};
+			for (const key of Object.keys(getDefaultEnvironment())) suppressed[key] = void 0;
+			return {
+				...suppressed,
+				...configured
+			};
+		}
+		return {
+			...getDefaultEnvironment(),
+			...configured
+		};
+	}
 	async connectStdio(command) {
 		this.log("debug", `Using Stdio transport for command: ${command}`);
 		try {
 			this.transport = new StdioClientTransport({
 				command,
 				args: this.serverConfig.args,
-				env: {
-					...getDefaultEnvironment(),
-					...this.serverConfig.env || {}
-				},
+				env: this.buildStdioEnv(),
 				stderr: this.serverConfig.stderr,
 				cwd: this.serverConfig.cwd
 			});
@@ -21321,10 +21615,16 @@ var InternalMastraMCPClient = class extends MastraBase {
 		}
 	}
 	async connectHttp(url) {
-		const { requestInit, eventSourceInit, authProvider, connectTimeout, fetch: userFetch } = this.serverConfig;
+		const { requestInit, eventSourceInit, authProvider, connectTimeout, fetch: userFetch, allowedHosts } = this.serverConfig;
+		if (allowedHosts !== void 0) assertHostAllowed(url, allowedHosts);
+		const policyUserFetch = userFetch && allowedHosts !== void 0 ? wrapFetchWithHostPolicy(userFetch, allowedHosts) : void 0;
 		const fetch = (requestUrl, init) => {
 			const requestContext = this.operationContextStore.getStore() ?? null;
-			const executeFetch = () => userFetch ? userFetch(requestUrl, init, requestContext) : globalThis.fetch(requestUrl, init);
+			const executeFetch = () => {
+				if (allowedHosts === void 0) return userFetch ? userFetch(requestUrl, init, requestContext) : globalThis.fetch(requestUrl, init);
+				if (policyUserFetch) return policyUserFetch(requestUrl, init, requestContext);
+				return fetchFollowingAllowedRedirects((u, i) => globalThis.fetch(u, i), requestUrl, init, allowedHosts);
+			};
 			return shouldDetachPersistentTransportRequest(init) ? runOutsideDatadogTraceScope(executeFetch) : executeFetch();
 		};
 		this.log("debug", `Attempting to connect to URL: ${url}`);
@@ -21347,7 +21647,8 @@ var InternalMastraMCPClient = class extends MastraBase {
 					this.markNeedsAuth(streamableTransport);
 					throw error;
 				}
-				const status = error?.code;
+				if (isUrlPolicyError(error)) throw error;
+				const status = error instanceof SdkHttpError ? error.status : void 0;
 				if (status !== void 0 && !SSE_FALLBACK_STATUS_CODES.includes(status)) throw error;
 				shouldTrySSE = true;
 			}
@@ -21355,11 +21656,12 @@ var InternalMastraMCPClient = class extends MastraBase {
 		if (shouldTrySSE) {
 			await this.detachStaleClientTransport();
 			this.log("debug", "Falling back to deprecated HTTP+SSE transport...");
+			const callerSseFetch = eventSourceInit?.fetch;
 			const sseTransport = new SSEClientTransport(url, {
 				requestInit,
 				eventSourceInit: {
 					...eventSourceInit,
-					fetch: eventSourceInit?.fetch ?? fetch
+					fetch: callerSseFetch && allowedHosts !== void 0 ? wrapFetchWithHostPolicy(callerSseFetch, allowedHosts) : callerSseFetch ?? fetch
 				},
 				authProvider,
 				fetch
@@ -21373,6 +21675,7 @@ var InternalMastraMCPClient = class extends MastraBase {
 					this.markNeedsAuth(sseTransport);
 					throw sseError;
 				}
+				if (isUrlPolicyError(sseError)) throw sseError;
 				this.log("error", `Failed to connect with SSE transport after failing to connect to Streamable HTTP transport first. SSE error: ${sseError}`);
 				throw new Error("Could not connect to server with any available HTTP transport");
 			}
@@ -21665,39 +21968,39 @@ var InternalMastraMCPClient = class extends MastraBase {
 	}
 	async listResources() {
 		this.log("debug", `Requesting resources from MCP server`);
-		return await this.client.request({ method: "resources/list" }, ListResourcesResultSchema, { timeout: this.timeout });
+		return await this.client.request({ method: "resources/list" }, { timeout: this.timeout });
 	}
 	async readResource(uri) {
 		this.log("debug", `Reading resource from MCP server: ${uri}`);
 		return await this.client.request({
 			method: "resources/read",
 			params: { uri }
-		}, ReadResourceResultSchema, { timeout: this.timeout });
+		}, { timeout: this.timeout });
 	}
 	async subscribeResource(uri) {
 		this.log("debug", `Subscribing to resource on MCP server: ${uri}`);
 		return await this.client.request({
 			method: "resources/subscribe",
 			params: { uri }
-		}, EmptyResultSchema, { timeout: this.timeout });
+		}, { timeout: this.timeout });
 	}
 	async unsubscribeResource(uri) {
 		this.log("debug", `Unsubscribing from resource on MCP server: ${uri}`);
 		return await this.client.request({
 			method: "resources/unsubscribe",
 			params: { uri }
-		}, EmptyResultSchema, { timeout: this.timeout });
+		}, { timeout: this.timeout });
 	}
 	async listResourceTemplates() {
 		this.log("debug", `Requesting resource templates from MCP server`);
-		return await this.client.request({ method: "resources/templates/list" }, ListResourceTemplatesResultSchema, { timeout: this.timeout });
+		return await this.client.request({ method: "resources/templates/list" }, { timeout: this.timeout });
 	}
 	/**
 	* Fetch the list of available prompts from the MCP server.
 	*/
 	async listPrompts() {
 		this.log("debug", `Requesting prompts from MCP server`);
-		return await this.client.request({ method: "prompts/list" }, ListPromptsResultSchema, { timeout: this.timeout });
+		return await this.client.request({ method: "prompts/list" }, { timeout: this.timeout });
 	}
 	/**
 	* Get a prompt and its dynamic messages from the server.
@@ -21712,7 +22015,7 @@ var InternalMastraMCPClient = class extends MastraBase {
 				name,
 				arguments: args
 			}
-		}, GetPromptResultSchema, { timeout: this.timeout });
+		}, { timeout: this.timeout });
 	}
 	/**
 	* Register a handler to be called when the prompt list changes on the server.
@@ -21720,7 +22023,7 @@ var InternalMastraMCPClient = class extends MastraBase {
 	*/
 	setPromptListChangedNotificationHandler(handler) {
 		this.log("debug", "Setting prompt list changed notification handler");
-		this.client.setNotificationHandler(PromptListChangedNotificationSchema, () => {
+		this.client.setNotificationHandler("notifications/prompts/list_changed", () => {
 			handler();
 		});
 	}
@@ -21730,19 +22033,19 @@ var InternalMastraMCPClient = class extends MastraBase {
 	*/
 	setToolListChangedNotificationHandler(handler) {
 		this.log("debug", "Setting tool list changed notification handler");
-		this.client.setNotificationHandler(ToolListChangedNotificationSchema, () => {
+		this.client.setNotificationHandler("notifications/tools/list_changed", () => {
 			handler();
 		});
 	}
 	setResourceUpdatedNotificationHandler(handler) {
 		this.log("debug", "Setting resource updated notification handler");
-		this.client.setNotificationHandler(ResourceUpdatedNotificationSchema, (notification) => {
+		this.client.setNotificationHandler("notifications/resources/updated", (notification) => {
 			handler(notification.params);
 		});
 	}
 	setResourceListChangedNotificationHandler(handler) {
 		this.log("debug", "Setting resource list changed notification handler");
-		this.client.setNotificationHandler(ResourceListChangedNotificationSchema, () => {
+		this.client.setNotificationHandler("notifications/resources/list_changed", () => {
 			handler();
 		});
 	}
@@ -21754,14 +22057,14 @@ var InternalMastraMCPClient = class extends MastraBase {
 		} catch (error) {
 			throw new Error("Cannot register an elicitation handler after connecting unless elicitation capability was configured before initialization.", { cause: error });
 		}
-		this.client.setRequestHandler(ElicitRequestSchema, async (request) => {
+		this.client.setRequestHandler("elicitation/create", async (request) => {
 			this.log("debug", `Received elicitation request: ${request.params.message}`);
 			return handler(request.params);
 		});
 	}
 	setProgressNotificationHandler(handler) {
 		this.log("debug", "Setting progress notification handler");
-		this.client.setNotificationHandler(ProgressNotificationSchema, (notification) => {
+		this.client.setNotificationHandler("notifications/progress", (notification) => {
 			handler(notification.params);
 		});
 	}
@@ -21769,7 +22072,7 @@ var InternalMastraMCPClient = class extends MastraBase {
 		return "jsonSchema" in inputSchema ? inputSchema.jsonSchema : inputSchema;
 	}
 	/**
-	* Wraps the output schema with a validator that always succeeds. The MCP SDK validates
+	* Wraps the output schema with a validator that always succeeds. The MCP client validates
 	* structuredContent via AJV; the JSON schema is surfaced here for documentation only.
 	*/
 	convertOutputSchema(outputSchema) {
@@ -21841,7 +22144,7 @@ var InternalMastraMCPClient = class extends MastraBase {
 									name: tool.name,
 									arguments: input,
 									...combinedMeta ? { _meta: combinedMeta } : {}
-								}, CallToolResultSchema, {
+								}, {
 									timeout: this.timeout,
 									signal: context?.abortSignal
 								});
@@ -23783,162 +24086,1993 @@ var streamSSE = (c, cb, onError) => {
 	return c.newResponse(stream.responseReadable);
 };
 //#endregion
-//#region ../../../../../setup-pnpm/node_modules/.bin/store/v11/links/@/hono-mcp-server-sse-transport/0.0.7/518df2f53e0bbb46e48def5118fc7f6b5bba3a268854c8a5c7e83260299d376e/node_modules/hono-mcp-server-sse-transport/build/sse.js
-const MAXIMUM_MESSAGE_SIZE = 4 * 1024 * 1024;
-var SSETransport = class {
-	messageUrl;
-	stream;
-	_sessionId;
-	onclose;
-	onerror;
-	onmessage;
-	/**
-	* Creates a new SSETransport, which will direct the MPC client to POST messages to messageUrl
-	*/
-	constructor(messageUrl, stream) {
-		this.messageUrl = messageUrl;
-		this.stream = stream;
-		this._sessionId = crypto.randomUUID();
-		this.stream.onAbort(() => {
-			this.close();
-		});
-	}
-	get sessionId() {
-		return this._sessionId;
-	}
-	async start() {
-		if (this.stream == null) throw new Error("Stream not initialized");
-		if (this.stream.closed) throw new Error("SSE transport already closed!");
-		await this.stream.writeSSE({
-			event: "ping",
-			data: ""
-		});
-		await this.stream.writeSSE({
-			event: "endpoint",
-			data: `${this.messageUrl}?sessionId=${this.sessionId}`
-		});
-	}
-	async handlePostMessage(context) {
-		if (this.stream?.closed == null) return context.text("SSE connection not established", 500);
-		try {
-			const contentType = context.req.header("content-type") || "";
-			if (!contentType.includes("application/json")) throw new Error(`Unsupported content-type: ${contentType}`);
-			const contentLength = Number.parseInt(context.req.header("content-length") || "0", 10);
-			if (contentLength > MAXIMUM_MESSAGE_SIZE) throw new Error(`Request body too large: ${contentLength} bytes`);
-			const body = await context.req.json();
-			await this.handleMessage(body);
-			return context.text("Accepted", 202);
-		} catch (error) {
-			this.onerror?.(error);
-			return context.text("Error", 400);
-		}
-	}
-	/**
-	* Handle a client message, regardless of how it arrived. This can be used to inform the server of messages that arrive via a means different than HTTP POST.
-	*/
-	async handleMessage(message) {
-		let parsedMessage;
-		try {
-			parsedMessage = JSONRPCMessageSchema.parse(message);
-		} catch (error) {
-			this.onerror?.(error);
-			throw error;
-		}
-		this.onmessage?.(parsedMessage);
-	}
-	async close() {
-		if (this.stream?.closed) this.stream.abort();
-	}
-	async send(message) {
-		if (this.stream?.closed) throw new Error("Not connected");
-		await this.stream.writeSSE({
-			event: "message",
-			data: JSON.stringify(message)
-		});
-	}
-};
-//#endregion
-//#region src/server/notificationBroadcast.ts
+//#region ../../../../../setup-pnpm/node_modules/.bin/store/v11/links/@modelcontextprotocol/sdk/1.29.0/989ce0cb833930f9ef8da3e25bac11110cfeac46669bc69ae9534a6aa55b0aa7/node_modules/@modelcontextprotocol/sdk/dist/esm/types.js
+const RELATED_TASK_META_KEY = "io.modelcontextprotocol/related-task";
 /**
-* Sends a notification to every active server instance (the main stdio/SSE
-* instance plus each streamable HTTP session instance).
-*
-* Failures are aggregated: if only some instances fail, the failure is logged
-* and the broadcast is considered best-effort. A `MastraError` is thrown only
-* when every send fails.
-*
-* Note: clients connected in stateless/serverless mode cannot receive
-* notifications because each request uses a transient server instance.
+* Assert 'object' type schema.
 *
 * @internal
 */
-async function broadcastNotification({ servers, send, logger, errorId, errorText, errorDetails }) {
-	const errors = [];
-	for (const server of servers) try {
-		await send(server);
-	} catch (error) {
-		errors.push(error);
-	}
-	if (errors.length === 0) return;
-	const mastraError = new MastraError({
-		id: errorId,
-		domain: ErrorDomain.MCP,
-		category: ErrorCategory.THIRD_PARTY,
-		text: errorText,
-		details: {
-			...errorDetails,
-			failedInstances: errors.length,
-			totalInstances: servers.length
-		}
-	}, errors[0]);
-	logger.error(`${errorText}:`, { error: mastraError.toString() });
-	if (errors.length === servers.length) {
-		logger.trackException(mastraError);
-		throw mastraError;
-	}
-}
-//#endregion
-//#region src/server/promptActions.ts
+const AssertObjectSchema = custom$1((v) => v !== null && (typeof v === "object" || typeof v === "function"));
 /**
-* Server-side prompt actions for notifying clients about prompt changes.
-*
-* This class provides methods for MCP servers to notify connected clients when
-* the list of available prompts changes.
-*
-* Notifications are broadcast to every active server instance (the main
-* stdio/SSE instance plus each streamable HTTP session). Clients connected in
-* stateless/serverless mode cannot receive notifications because each request
-* uses a transient server instance.
+* A progress token, used to associate progress notifications with the original request.
 */
-var ServerPromptActions = class {
-	getLogger;
-	getSdkServers;
-	clearDefinedPrompts;
+const ProgressTokenSchema = union([string(), number().int()]);
+/**
+* An opaque token used to represent a cursor for pagination.
+*/
+const CursorSchema = string();
+looseObject({
 	/**
-	* @internal
+	* Requested duration in milliseconds to retain task from creation.
 	*/
-	constructor(dependencies) {
-		this.getLogger = dependencies.getLogger;
-		this.getSdkServers = dependencies.getSdkServers;
-		this.clearDefinedPrompts = dependencies.clearDefinedPrompts;
-	}
+	ttl: number().optional(),
 	/**
-	* Notifies clients that the overall list of available prompts has changed.
-	*
-	* This clears the internal prompt cache and sends a `notifications/prompts/list_changed`
-	* message to all clients, prompting them to re-fetch the prompt list.
-	*
-	* @throws {MastraError} If sending the notification fails on all server instances
-	*
-	* @example
-	* ```typescript
-	* // After adding or modifying prompts
-	* await server.prompts.notifyListChanged();
-	* ```
+	* Time in milliseconds to wait between task status requests.
 	*/
-	async notifyListChanged() {
-		this.getLogger().info("Prompt list change externally notified. Clearing definedPrompts and sending notification.");
-		this.clearDefinedPrompts();
+	pollInterval: number().optional()
+});
+const TaskMetadataSchema = object$1({ ttl: number().optional() });
+/**
+* Metadata for associating messages with a task.
+* Include this in the `_meta` field under the key `io.modelcontextprotocol/related-task`.
+*/
+const RelatedTaskMetadataSchema = object$1({ taskId: string() });
+const RequestMetaSchema = looseObject({
+	/**
+	* If specified, the caller is requesting out-of-band progress notifications for this request (as represented by notifications/progress). The value of this parameter is an opaque token that will be attached to any subsequent notifications. The receiver is not obligated to provide these notifications.
+	*/
+	progressToken: ProgressTokenSchema.optional(),
+	/**
+	* If specified, this request is related to the provided task.
+	*/
+	[RELATED_TASK_META_KEY]: RelatedTaskMetadataSchema.optional()
+});
+/**
+* Common params for any request.
+*/
+const BaseRequestParamsSchema = object$1({ 
+/**
+* See [General fields: `_meta`](/specification/draft/basic/index#meta) for notes on `_meta` usage.
+*/
+_meta: RequestMetaSchema.optional() });
+/**
+* Common params for any task-augmented request.
+*/
+const TaskAugmentedRequestParamsSchema = BaseRequestParamsSchema.extend({ 
+/**
+* If specified, the caller is requesting task-augmented execution for this request.
+* The request will return a CreateTaskResult immediately, and the actual result can be
+* retrieved later via tasks/result.
+*
+* Task augmentation is subject to capability negotiation - receivers MUST declare support
+* for task augmentation of specific request types in their capabilities.
+*/
+task: TaskMetadataSchema.optional() });
+const RequestSchema = object$1({
+	method: string(),
+	params: BaseRequestParamsSchema.loose().optional()
+});
+const NotificationsParamsSchema = object$1({ 
+/**
+* See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
+* for notes on _meta usage.
+*/
+_meta: RequestMetaSchema.optional() });
+const NotificationSchema = object$1({
+	method: string(),
+	params: NotificationsParamsSchema.loose().optional()
+});
+const ResultSchema = looseObject({ 
+/**
+* See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
+* for notes on _meta usage.
+*/
+_meta: RequestMetaSchema.optional() });
+/**
+* A uniquely identifying ID for a request in JSON-RPC.
+*/
+const RequestIdSchema = union([string(), number().int()]);
+/**
+* A request that expects a response.
+*/
+const JSONRPCRequestSchema = object$1({
+	jsonrpc: literal("2.0"),
+	id: RequestIdSchema,
+	...RequestSchema.shape
+}).strict();
+/**
+* A notification which does not expect a response.
+*/
+const JSONRPCNotificationSchema = object$1({
+	jsonrpc: literal("2.0"),
+	...NotificationSchema.shape
+}).strict();
+/**
+* A successful (non-error) response to a request.
+*/
+const JSONRPCResultResponseSchema = object$1({
+	jsonrpc: literal("2.0"),
+	id: RequestIdSchema,
+	result: ResultSchema
+}).strict();
+/**
+* Error codes defined by the JSON-RPC specification.
+*/
+var ErrorCode;
+(function(ErrorCode) {
+	ErrorCode[ErrorCode["ConnectionClosed"] = -32e3] = "ConnectionClosed";
+	ErrorCode[ErrorCode["RequestTimeout"] = -32001] = "RequestTimeout";
+	ErrorCode[ErrorCode["ParseError"] = -32700] = "ParseError";
+	ErrorCode[ErrorCode["InvalidRequest"] = -32600] = "InvalidRequest";
+	ErrorCode[ErrorCode["MethodNotFound"] = -32601] = "MethodNotFound";
+	ErrorCode[ErrorCode["InvalidParams"] = -32602] = "InvalidParams";
+	ErrorCode[ErrorCode["InternalError"] = -32603] = "InternalError";
+	ErrorCode[ErrorCode["UrlElicitationRequired"] = -32042] = "UrlElicitationRequired";
+})(ErrorCode || (ErrorCode = {}));
+/**
+* A response to a request that indicates an error occurred.
+*/
+const JSONRPCErrorResponseSchema = object$1({
+	jsonrpc: literal("2.0"),
+	id: RequestIdSchema.optional(),
+	error: object$1({
+		/**
+		* The error type that occurred.
+		*/
+		code: number().int(),
+		/**
+		* A short description of the error. The message SHOULD be limited to a concise single sentence.
+		*/
+		message: string(),
+		/**
+		* Additional information about the error. The value of this member is defined by the sender (e.g. detailed error information, nested errors etc.).
+		*/
+		data: unknown().optional()
+	})
+}).strict();
+const JSONRPCMessageSchema = union([
+	JSONRPCRequestSchema,
+	JSONRPCNotificationSchema,
+	JSONRPCResultResponseSchema,
+	JSONRPCErrorResponseSchema
+]);
+union([JSONRPCResultResponseSchema, JSONRPCErrorResponseSchema]);
+/**
+* A response that indicates success but carries no data.
+*/
+const EmptyResultSchema = ResultSchema.strict();
+const CancelledNotificationParamsSchema = NotificationsParamsSchema.extend({
+	/**
+	* The ID of the request to cancel.
+	*
+	* This MUST correspond to the ID of a request previously issued in the same direction.
+	*/
+	requestId: RequestIdSchema.optional(),
+	/**
+	* An optional string describing the reason for the cancellation. This MAY be logged or presented to the user.
+	*/
+	reason: string().optional()
+});
+/**
+* This notification can be sent by either side to indicate that it is cancelling a previously-issued request.
+*
+* The request SHOULD still be in-flight, but due to communication latency, it is always possible that this notification MAY arrive after the request has already finished.
+*
+* This notification indicates that the result will be unused, so any associated processing SHOULD cease.
+*
+* A client MUST NOT attempt to cancel its `initialize` request.
+*/
+const CancelledNotificationSchema = NotificationSchema.extend({
+	method: literal("notifications/cancelled"),
+	params: CancelledNotificationParamsSchema
+});
+/**
+* Base schema to add `icons` property.
+*
+*/
+const IconsSchema = object$1({ 
+/**
+* Optional set of sized icons that the client can display in a user interface.
+*
+* Clients that support rendering icons MUST support at least the following MIME types:
+* - `image/png` - PNG images (safe, universal compatibility)
+* - `image/jpeg` (and `image/jpg`) - JPEG images (safe, universal compatibility)
+*
+* Clients that support rendering icons SHOULD also support:
+* - `image/svg+xml` - SVG images (scalable but requires security precautions)
+* - `image/webp` - WebP images (modern, efficient format)
+*/
+icons: array(object$1({
+	/**
+	* URL or data URI for the icon.
+	*/
+	src: string(),
+	/**
+	* Optional MIME type for the icon.
+	*/
+	mimeType: string().optional(),
+	/**
+	* Optional array of strings that specify sizes at which the icon can be used.
+	* Each string should be in WxH format (e.g., `"48x48"`, `"96x96"`) or `"any"` for scalable formats like SVG.
+	*
+	* If not provided, the client should assume that the icon can be used at any size.
+	*/
+	sizes: array(string()).optional(),
+	/**
+	* Optional specifier for the theme this icon is designed for. `light` indicates
+	* the icon is designed to be used with a light background, and `dark` indicates
+	* the icon is designed to be used with a dark background.
+	*
+	* If not provided, the client should assume the icon can be used with any theme.
+	*/
+	theme: _enum(["light", "dark"]).optional()
+})).optional() });
+/**
+* Base metadata interface for common properties across resources, tools, prompts, and implementations.
+*/
+const BaseMetadataSchema = object$1({
+	/** Intended for programmatic or logical use, but used as a display name in past specs or fallback */
+	name: string(),
+	/**
+	* Intended for UI and end-user contexts — optimized to be human-readable and easily understood,
+	* even by those unfamiliar with domain-specific terminology.
+	*
+	* If not provided, the name should be used for display (except for Tool,
+	* where `annotations.title` should be given precedence over using `name`,
+	* if present).
+	*/
+	title: string().optional()
+});
+/**
+* Describes the name and version of an MCP implementation.
+*/
+const ImplementationSchema = BaseMetadataSchema.extend({
+	...BaseMetadataSchema.shape,
+	...IconsSchema.shape,
+	version: string(),
+	/**
+	* An optional URL of the website for this implementation.
+	*/
+	websiteUrl: string().optional(),
+	/**
+	* An optional human-readable description of what this implementation does.
+	*
+	* This can be used by clients or servers to provide context about their purpose
+	* and capabilities. For example, a server might describe the types of resources
+	* or tools it provides, while a client might describe its intended use case.
+	*/
+	description: string().optional()
+});
+const ElicitationCapabilitySchema = preprocess((value) => {
+	if (value && typeof value === "object" && !Array.isArray(value)) {
+		if (Object.keys(value).length === 0) return { form: {} };
+	}
+	return value;
+}, intersection(object$1({
+	form: intersection(object$1({ applyDefaults: boolean().optional() }), record(string(), unknown())).optional(),
+	url: AssertObjectSchema.optional()
+}), record(string(), unknown()).optional()));
+/**
+* Task capabilities for clients, indicating which request types support task creation.
+*/
+const ClientTasksCapabilitySchema = looseObject({
+	/**
+	* Present if the client supports listing tasks.
+	*/
+	list: AssertObjectSchema.optional(),
+	/**
+	* Present if the client supports cancelling tasks.
+	*/
+	cancel: AssertObjectSchema.optional(),
+	/**
+	* Capabilities for task creation on specific request types.
+	*/
+	requests: looseObject({
+		/**
+		* Task support for sampling requests.
+		*/
+		sampling: looseObject({ createMessage: AssertObjectSchema.optional() }).optional(),
+		/**
+		* Task support for elicitation requests.
+		*/
+		elicitation: looseObject({ create: AssertObjectSchema.optional() }).optional()
+	}).optional()
+});
+/**
+* Task capabilities for servers, indicating which request types support task creation.
+*/
+const ServerTasksCapabilitySchema = looseObject({
+	/**
+	* Present if the server supports listing tasks.
+	*/
+	list: AssertObjectSchema.optional(),
+	/**
+	* Present if the server supports cancelling tasks.
+	*/
+	cancel: AssertObjectSchema.optional(),
+	/**
+	* Capabilities for task creation on specific request types.
+	*/
+	requests: looseObject({ 
+	/**
+	* Task support for tool requests.
+	*/
+tools: looseObject({ call: AssertObjectSchema.optional() }).optional() }).optional()
+});
+/**
+* Capabilities a client may support. Known capabilities are defined here, in this schema, but this is not a closed set: any client can define its own, additional capabilities.
+*/
+const ClientCapabilitiesSchema = object$1({
+	/**
+	* Experimental, non-standard capabilities that the client supports.
+	*/
+	experimental: record(string(), AssertObjectSchema).optional(),
+	/**
+	* Present if the client supports sampling from an LLM.
+	*/
+	sampling: object$1({
+		/**
+		* Present if the client supports context inclusion via includeContext parameter.
+		* If not declared, servers SHOULD only use `includeContext: "none"` (or omit it).
+		*/
+		context: AssertObjectSchema.optional(),
+		/**
+		* Present if the client supports tool use via tools and toolChoice parameters.
+		*/
+		tools: AssertObjectSchema.optional()
+	}).optional(),
+	/**
+	* Present if the client supports eliciting user input.
+	*/
+	elicitation: ElicitationCapabilitySchema.optional(),
+	/**
+	* Present if the client supports listing roots.
+	*/
+	roots: object$1({ 
+	/**
+	* Whether the client supports issuing notifications for changes to the roots list.
+	*/
+listChanged: boolean().optional() }).optional(),
+	/**
+	* Present if the client supports task creation.
+	*/
+	tasks: ClientTasksCapabilitySchema.optional(),
+	/**
+	* Extensions that the client supports. Keys are extension identifiers (vendor-prefix/extension-name).
+	*/
+	extensions: record(string(), AssertObjectSchema).optional()
+});
+const InitializeRequestParamsSchema = BaseRequestParamsSchema.extend({
+	/**
+	* The latest version of the Model Context Protocol that the client supports. The client MAY decide to support older versions as well.
+	*/
+	protocolVersion: string(),
+	capabilities: ClientCapabilitiesSchema,
+	clientInfo: ImplementationSchema
+});
+/**
+* This request is sent from the client to the server when it first connects, asking it to begin initialization.
+*/
+const InitializeRequestSchema = RequestSchema.extend({
+	method: literal("initialize"),
+	params: InitializeRequestParamsSchema
+});
+/**
+* Capabilities that a server may support. Known capabilities are defined here, in this schema, but this is not a closed set: any server can define its own, additional capabilities.
+*/
+const ServerCapabilitiesSchema = object$1({
+	/**
+	* Experimental, non-standard capabilities that the server supports.
+	*/
+	experimental: record(string(), AssertObjectSchema).optional(),
+	/**
+	* Present if the server supports sending log messages to the client.
+	*/
+	logging: AssertObjectSchema.optional(),
+	/**
+	* Present if the server supports sending completions to the client.
+	*/
+	completions: AssertObjectSchema.optional(),
+	/**
+	* Present if the server offers any prompt templates.
+	*/
+	prompts: object$1({ 
+	/**
+	* Whether this server supports issuing notifications for changes to the prompt list.
+	*/
+listChanged: boolean().optional() }).optional(),
+	/**
+	* Present if the server offers any resources to read.
+	*/
+	resources: object$1({
+		/**
+		* Whether this server supports clients subscribing to resource updates.
+		*/
+		subscribe: boolean().optional(),
+		/**
+		* Whether this server supports issuing notifications for changes to the resource list.
+		*/
+		listChanged: boolean().optional()
+	}).optional(),
+	/**
+	* Present if the server offers any tools to call.
+	*/
+	tools: object$1({ 
+	/**
+	* Whether this server supports issuing notifications for changes to the tool list.
+	*/
+listChanged: boolean().optional() }).optional(),
+	/**
+	* Present if the server supports task creation.
+	*/
+	tasks: ServerTasksCapabilitySchema.optional(),
+	/**
+	* Extensions that the server supports. Keys are extension identifiers (vendor-prefix/extension-name).
+	*/
+	extensions: record(string(), AssertObjectSchema).optional()
+});
+/**
+* After receiving an initialize request from the client, the server sends this response.
+*/
+const InitializeResultSchema = ResultSchema.extend({
+	/**
+	* The version of the Model Context Protocol that the server wants to use. This may not match the version that the client requested. If the client cannot support this version, it MUST disconnect.
+	*/
+	protocolVersion: string(),
+	capabilities: ServerCapabilitiesSchema,
+	serverInfo: ImplementationSchema,
+	/**
+	* Instructions describing how to use the server and its features.
+	*
+	* This can be used by clients to improve the LLM's understanding of available tools, resources, etc. It can be thought of like a "hint" to the model. For example, this information MAY be added to the system prompt.
+	*/
+	instructions: string().optional()
+});
+/**
+* This notification is sent from the client to the server after initialization has finished.
+*/
+const InitializedNotificationSchema = NotificationSchema.extend({
+	method: literal("notifications/initialized"),
+	params: NotificationsParamsSchema.optional()
+});
+/**
+* A ping, issued by either the server or the client, to check that the other party is still alive. The receiver must promptly respond, or else may be disconnected.
+*/
+const PingRequestSchema = RequestSchema.extend({
+	method: literal("ping"),
+	params: BaseRequestParamsSchema.optional()
+});
+const ProgressSchema = object$1({
+	/**
+	* The progress thus far. This should increase every time progress is made, even if the total is unknown.
+	*/
+	progress: number(),
+	/**
+	* Total number of items to process (or total progress required), if known.
+	*/
+	total: optional(number()),
+	/**
+	* An optional message describing the current progress.
+	*/
+	message: optional(string())
+});
+const ProgressNotificationParamsSchema = object$1({
+	...NotificationsParamsSchema.shape,
+	...ProgressSchema.shape,
+	/**
+	* The progress token which was given in the initial request, used to associate this notification with the request that is proceeding.
+	*/
+	progressToken: ProgressTokenSchema
+});
+/**
+* An out-of-band notification used to inform the receiver of a progress update for a long-running request.
+*
+* @category notifications/progress
+*/
+const ProgressNotificationSchema = NotificationSchema.extend({
+	method: literal("notifications/progress"),
+	params: ProgressNotificationParamsSchema
+});
+const PaginatedRequestParamsSchema = BaseRequestParamsSchema.extend({ 
+/**
+* An opaque token representing the current pagination position.
+* If provided, the server should return results starting after this cursor.
+*/
+cursor: CursorSchema.optional() });
+const PaginatedRequestSchema = RequestSchema.extend({ params: PaginatedRequestParamsSchema.optional() });
+const PaginatedResultSchema = ResultSchema.extend({ 
+/**
+* An opaque token representing the pagination position after the last returned result.
+* If present, there may be more results available.
+*/
+nextCursor: CursorSchema.optional() });
+/**
+* The status of a task.
+* */
+const TaskStatusSchema = _enum([
+	"working",
+	"input_required",
+	"completed",
+	"failed",
+	"cancelled"
+]);
+/**
+* A pollable state object associated with a request.
+*/
+const TaskSchema = object$1({
+	taskId: string(),
+	status: TaskStatusSchema,
+	/**
+	* Time in milliseconds to keep task results available after completion.
+	* If null, the task has unlimited lifetime until manually cleaned up.
+	*/
+	ttl: union([number(), _null()]),
+	/**
+	* ISO 8601 timestamp when the task was created.
+	*/
+	createdAt: string(),
+	/**
+	* ISO 8601 timestamp when the task was last updated.
+	*/
+	lastUpdatedAt: string(),
+	pollInterval: optional(number()),
+	/**
+	* Optional diagnostic message for failed tasks or other status information.
+	*/
+	statusMessage: optional(string())
+});
+/**
+* Result returned when a task is created, containing the task data wrapped in a task field.
+*/
+const CreateTaskResultSchema = ResultSchema.extend({ task: TaskSchema });
+/**
+* Parameters for task status notification.
+*/
+const TaskStatusNotificationParamsSchema = NotificationsParamsSchema.merge(TaskSchema);
+/**
+* A notification sent when a task's status changes.
+*/
+const TaskStatusNotificationSchema = NotificationSchema.extend({
+	method: literal("notifications/tasks/status"),
+	params: TaskStatusNotificationParamsSchema
+});
+/**
+* A request to get the state of a specific task.
+*/
+const GetTaskRequestSchema = RequestSchema.extend({
+	method: literal("tasks/get"),
+	params: BaseRequestParamsSchema.extend({ taskId: string() })
+});
+/**
+* The response to a tasks/get request.
+*/
+const GetTaskResultSchema = ResultSchema.merge(TaskSchema);
+/**
+* A request to get the result of a specific task.
+*/
+const GetTaskPayloadRequestSchema = RequestSchema.extend({
+	method: literal("tasks/result"),
+	params: BaseRequestParamsSchema.extend({ taskId: string() })
+});
+ResultSchema.loose();
+/**
+* A request to list tasks.
+*/
+const ListTasksRequestSchema = PaginatedRequestSchema.extend({ method: literal("tasks/list") });
+/**
+* The response to a tasks/list request.
+*/
+const ListTasksResultSchema = PaginatedResultSchema.extend({ tasks: array(TaskSchema) });
+/**
+* A request to cancel a specific task.
+*/
+const CancelTaskRequestSchema = RequestSchema.extend({
+	method: literal("tasks/cancel"),
+	params: BaseRequestParamsSchema.extend({ taskId: string() })
+});
+ResultSchema.merge(TaskSchema);
+/**
+* The contents of a specific resource or sub-resource.
+*/
+const ResourceContentsSchema = object$1({
+	/**
+	* The URI of this resource.
+	*/
+	uri: string(),
+	/**
+	* The MIME type of this resource, if known.
+	*/
+	mimeType: optional(string()),
+	/**
+	* See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
+	* for notes on _meta usage.
+	*/
+	_meta: record(string(), unknown()).optional()
+});
+const TextResourceContentsSchema = ResourceContentsSchema.extend({ 
+/**
+* The text of the item. This must only be set if the item can actually be represented as text (not binary data).
+*/
+text: string() });
+/**
+* A Zod schema for validating Base64 strings that is more performant and
+* robust for very large inputs than the default regex-based check. It avoids
+* stack overflows by using the native `atob` function for validation.
+*/
+const Base64Schema = string().refine((val) => {
+	try {
+		atob(val);
+		return true;
+	} catch {
+		return false;
+	}
+}, { message: "Invalid Base64 string" });
+const BlobResourceContentsSchema = ResourceContentsSchema.extend({ 
+/**
+* A base64-encoded string representing the binary data of the item.
+*/
+blob: Base64Schema });
+/**
+* The sender or recipient of messages and data in a conversation.
+*/
+const RoleSchema = _enum(["user", "assistant"]);
+/**
+* Optional annotations providing clients additional context about a resource.
+*/
+const AnnotationsSchema = object$1({
+	/**
+	* Intended audience(s) for the resource.
+	*/
+	audience: array(RoleSchema).optional(),
+	/**
+	* Importance hint for the resource, from 0 (least) to 1 (most).
+	*/
+	priority: number().min(0).max(1).optional(),
+	/**
+	* ISO 8601 timestamp for the most recent modification.
+	*/
+	lastModified: datetime({ offset: true }).optional()
+});
+/**
+* A known resource that the server is capable of reading.
+*/
+const ResourceSchema = object$1({
+	...BaseMetadataSchema.shape,
+	...IconsSchema.shape,
+	/**
+	* The URI of this resource.
+	*/
+	uri: string(),
+	/**
+	* A description of what this resource represents.
+	*
+	* This can be used by clients to improve the LLM's understanding of available resources. It can be thought of like a "hint" to the model.
+	*/
+	description: optional(string()),
+	/**
+	* The MIME type of this resource, if known.
+	*/
+	mimeType: optional(string()),
+	/**
+	* The size of the raw resource content, in bytes (i.e., before base64 encoding or any tokenization), if known.
+	*
+	* This can be used by Hosts to display file sizes and estimate context window usage.
+	*/
+	size: optional(number()),
+	/**
+	* Optional annotations for the client.
+	*/
+	annotations: AnnotationsSchema.optional(),
+	/**
+	* See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
+	* for notes on _meta usage.
+	*/
+	_meta: optional(looseObject({}))
+});
+/**
+* A template description for resources available on the server.
+*/
+const ResourceTemplateSchema = object$1({
+	...BaseMetadataSchema.shape,
+	...IconsSchema.shape,
+	/**
+	* A URI template (according to RFC 6570) that can be used to construct resource URIs.
+	*/
+	uriTemplate: string(),
+	/**
+	* A description of what this template is for.
+	*
+	* This can be used by clients to improve the LLM's understanding of available resources. It can be thought of like a "hint" to the model.
+	*/
+	description: optional(string()),
+	/**
+	* The MIME type for all resources that match this template. This should only be included if all resources matching this template have the same type.
+	*/
+	mimeType: optional(string()),
+	/**
+	* Optional annotations for the client.
+	*/
+	annotations: AnnotationsSchema.optional(),
+	/**
+	* See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
+	* for notes on _meta usage.
+	*/
+	_meta: optional(looseObject({}))
+});
+/**
+* Sent from the client to request a list of resources the server has.
+*/
+const ListResourcesRequestSchema = PaginatedRequestSchema.extend({ method: literal("resources/list") });
+/**
+* The server's response to a resources/list request from the client.
+*/
+const ListResourcesResultSchema = PaginatedResultSchema.extend({ resources: array(ResourceSchema) });
+/**
+* Sent from the client to request a list of resource templates the server has.
+*/
+const ListResourceTemplatesRequestSchema = PaginatedRequestSchema.extend({ method: literal("resources/templates/list") });
+/**
+* The server's response to a resources/templates/list request from the client.
+*/
+const ListResourceTemplatesResultSchema = PaginatedResultSchema.extend({ resourceTemplates: array(ResourceTemplateSchema) });
+const ResourceRequestParamsSchema = BaseRequestParamsSchema.extend({ 
+/**
+* The URI of the resource to read. The URI can use any protocol; it is up to the server how to interpret it.
+*
+* @format uri
+*/
+uri: string() });
+/**
+* Parameters for a `resources/read` request.
+*/
+const ReadResourceRequestParamsSchema = ResourceRequestParamsSchema;
+/**
+* Sent from the client to the server, to read a specific resource URI.
+*/
+const ReadResourceRequestSchema = RequestSchema.extend({
+	method: literal("resources/read"),
+	params: ReadResourceRequestParamsSchema
+});
+/**
+* The server's response to a resources/read request from the client.
+*/
+const ReadResourceResultSchema = ResultSchema.extend({ contents: array(union([TextResourceContentsSchema, BlobResourceContentsSchema])) });
+/**
+* An optional notification from the server to the client, informing it that the list of resources it can read from has changed. This may be issued by servers without any previous subscription from the client.
+*/
+const ResourceListChangedNotificationSchema = NotificationSchema.extend({
+	method: literal("notifications/resources/list_changed"),
+	params: NotificationsParamsSchema.optional()
+});
+const SubscribeRequestParamsSchema = ResourceRequestParamsSchema;
+/**
+* Sent from the client to request resources/updated notifications from the server whenever a particular resource changes.
+*/
+const SubscribeRequestSchema = RequestSchema.extend({
+	method: literal("resources/subscribe"),
+	params: SubscribeRequestParamsSchema
+});
+const UnsubscribeRequestParamsSchema = ResourceRequestParamsSchema;
+/**
+* Sent from the client to request cancellation of resources/updated notifications from the server. This should follow a previous resources/subscribe request.
+*/
+const UnsubscribeRequestSchema = RequestSchema.extend({
+	method: literal("resources/unsubscribe"),
+	params: UnsubscribeRequestParamsSchema
+});
+/**
+* Parameters for a `notifications/resources/updated` notification.
+*/
+const ResourceUpdatedNotificationParamsSchema = NotificationsParamsSchema.extend({ 
+/**
+* The URI of the resource that has been updated. This might be a sub-resource of the one that the client actually subscribed to.
+*/
+uri: string() });
+/**
+* A notification from the server to the client, informing it that a resource has changed and may need to be read again. This should only be sent if the client previously sent a resources/subscribe request.
+*/
+const ResourceUpdatedNotificationSchema = NotificationSchema.extend({
+	method: literal("notifications/resources/updated"),
+	params: ResourceUpdatedNotificationParamsSchema
+});
+/**
+* Describes an argument that a prompt can accept.
+*/
+const PromptArgumentSchema = object$1({
+	/**
+	* The name of the argument.
+	*/
+	name: string(),
+	/**
+	* A human-readable description of the argument.
+	*/
+	description: optional(string()),
+	/**
+	* Whether this argument must be provided.
+	*/
+	required: optional(boolean())
+});
+/**
+* A prompt or prompt template that the server offers.
+*/
+const PromptSchema$1 = object$1({
+	...BaseMetadataSchema.shape,
+	...IconsSchema.shape,
+	/**
+	* An optional description of what this prompt provides
+	*/
+	description: optional(string()),
+	/**
+	* A list of arguments to use for templating the prompt.
+	*/
+	arguments: optional(array(PromptArgumentSchema)),
+	/**
+	* See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
+	* for notes on _meta usage.
+	*/
+	_meta: optional(looseObject({}))
+});
+/**
+* Sent from the client to request a list of prompts and prompt templates the server has.
+*/
+const ListPromptsRequestSchema = PaginatedRequestSchema.extend({ method: literal("prompts/list") });
+/**
+* The server's response to a prompts/list request from the client.
+*/
+const ListPromptsResultSchema = PaginatedResultSchema.extend({ prompts: array(PromptSchema$1) });
+/**
+* Parameters for a `prompts/get` request.
+*/
+const GetPromptRequestParamsSchema = BaseRequestParamsSchema.extend({
+	/**
+	* The name of the prompt or prompt template.
+	*/
+	name: string(),
+	/**
+	* Arguments to use for templating the prompt.
+	*/
+	arguments: record(string(), string()).optional()
+});
+/**
+* Used by the client to get a prompt provided by the server.
+*/
+const GetPromptRequestSchema = RequestSchema.extend({
+	method: literal("prompts/get"),
+	params: GetPromptRequestParamsSchema
+});
+/**
+* Text provided to or from an LLM.
+*/
+const TextContentSchema = object$1({
+	type: literal("text"),
+	/**
+	* The text content of the message.
+	*/
+	text: string(),
+	/**
+	* Optional annotations for the client.
+	*/
+	annotations: AnnotationsSchema.optional(),
+	/**
+	* See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
+	* for notes on _meta usage.
+	*/
+	_meta: record(string(), unknown()).optional()
+});
+/**
+* An image provided to or from an LLM.
+*/
+const ImageContentSchema = object$1({
+	type: literal("image"),
+	/**
+	* The base64-encoded image data.
+	*/
+	data: Base64Schema,
+	/**
+	* The MIME type of the image. Different providers may support different image types.
+	*/
+	mimeType: string(),
+	/**
+	* Optional annotations for the client.
+	*/
+	annotations: AnnotationsSchema.optional(),
+	/**
+	* See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
+	* for notes on _meta usage.
+	*/
+	_meta: record(string(), unknown()).optional()
+});
+/**
+* An Audio provided to or from an LLM.
+*/
+const AudioContentSchema = object$1({
+	type: literal("audio"),
+	/**
+	* The base64-encoded audio data.
+	*/
+	data: Base64Schema,
+	/**
+	* The MIME type of the audio. Different providers may support different audio types.
+	*/
+	mimeType: string(),
+	/**
+	* Optional annotations for the client.
+	*/
+	annotations: AnnotationsSchema.optional(),
+	/**
+	* See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
+	* for notes on _meta usage.
+	*/
+	_meta: record(string(), unknown()).optional()
+});
+/**
+* A tool call request from an assistant (LLM).
+* Represents the assistant's request to use a tool.
+*/
+const ToolUseContentSchema = object$1({
+	type: literal("tool_use"),
+	/**
+	* The name of the tool to invoke.
+	* Must match a tool name from the request's tools array.
+	*/
+	name: string(),
+	/**
+	* Unique identifier for this tool call.
+	* Used to correlate with ToolResultContent in subsequent messages.
+	*/
+	id: string(),
+	/**
+	* Arguments to pass to the tool.
+	* Must conform to the tool's inputSchema.
+	*/
+	input: record(string(), unknown()),
+	/**
+	* See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
+	* for notes on _meta usage.
+	*/
+	_meta: record(string(), unknown()).optional()
+});
+/**
+* The contents of a resource, embedded into a prompt or tool call result.
+*/
+const EmbeddedResourceSchema = object$1({
+	type: literal("resource"),
+	resource: union([TextResourceContentsSchema, BlobResourceContentsSchema]),
+	/**
+	* Optional annotations for the client.
+	*/
+	annotations: AnnotationsSchema.optional(),
+	/**
+	* See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
+	* for notes on _meta usage.
+	*/
+	_meta: record(string(), unknown()).optional()
+});
+/**
+* A content block that can be used in prompts and tool results.
+*/
+const ContentBlockSchema = union([
+	TextContentSchema,
+	ImageContentSchema,
+	AudioContentSchema,
+	ResourceSchema.extend({ type: literal("resource_link") }),
+	EmbeddedResourceSchema
+]);
+/**
+* Describes a message returned as part of a prompt.
+*/
+const PromptMessageSchema = object$1({
+	role: RoleSchema,
+	content: ContentBlockSchema
+});
+/**
+* The server's response to a prompts/get request from the client.
+*/
+const GetPromptResultSchema = ResultSchema.extend({
+	/**
+	* An optional description for the prompt.
+	*/
+	description: string().optional(),
+	messages: array(PromptMessageSchema)
+});
+/**
+* An optional notification from the server to the client, informing it that the list of prompts it offers has changed. This may be issued by servers without any previous subscription from the client.
+*/
+const PromptListChangedNotificationSchema = NotificationSchema.extend({
+	method: literal("notifications/prompts/list_changed"),
+	params: NotificationsParamsSchema.optional()
+});
+/**
+* Additional properties describing a Tool to clients.
+*
+* NOTE: all properties in ToolAnnotations are **hints**.
+* They are not guaranteed to provide a faithful description of
+* tool behavior (including descriptive properties like `title`).
+*
+* Clients should never make tool use decisions based on ToolAnnotations
+* received from untrusted servers.
+*/
+const ToolAnnotationsSchema = object$1({
+	/**
+	* A human-readable title for the tool.
+	*/
+	title: string().optional(),
+	/**
+	* If true, the tool does not modify its environment.
+	*
+	* Default: false
+	*/
+	readOnlyHint: boolean().optional(),
+	/**
+	* If true, the tool may perform destructive updates to its environment.
+	* If false, the tool performs only additive updates.
+	*
+	* (This property is meaningful only when `readOnlyHint == false`)
+	*
+	* Default: true
+	*/
+	destructiveHint: boolean().optional(),
+	/**
+	* If true, calling the tool repeatedly with the same arguments
+	* will have no additional effect on the its environment.
+	*
+	* (This property is meaningful only when `readOnlyHint == false`)
+	*
+	* Default: false
+	*/
+	idempotentHint: boolean().optional(),
+	/**
+	* If true, this tool may interact with an "open world" of external
+	* entities. If false, the tool's domain of interaction is closed.
+	* For example, the world of a web search tool is open, whereas that
+	* of a memory tool is not.
+	*
+	* Default: true
+	*/
+	openWorldHint: boolean().optional()
+});
+/**
+* Execution-related properties for a tool.
+*/
+const ToolExecutionSchema = object$1({ 
+/**
+* Indicates the tool's preference for task-augmented execution.
+* - "required": Clients MUST invoke the tool as a task
+* - "optional": Clients MAY invoke the tool as a task or normal request
+* - "forbidden": Clients MUST NOT attempt to invoke the tool as a task
+*
+* If not present, defaults to "forbidden".
+*/
+taskSupport: _enum([
+	"required",
+	"optional",
+	"forbidden"
+]).optional() });
+/**
+* Definition for a tool the client can call.
+*/
+const ToolSchema = object$1({
+	...BaseMetadataSchema.shape,
+	...IconsSchema.shape,
+	/**
+	* A human-readable description of the tool.
+	*/
+	description: string().optional(),
+	/**
+	* A JSON Schema 2020-12 object defining the expected parameters for the tool.
+	* Must have type: 'object' at the root level per MCP spec.
+	*/
+	inputSchema: object$1({
+		type: literal("object"),
+		properties: record(string(), AssertObjectSchema).optional(),
+		required: array(string()).optional()
+	}).catchall(unknown()),
+	/**
+	* An optional JSON Schema 2020-12 object defining the structure of the tool's output
+	* returned in the structuredContent field of a CallToolResult.
+	* Must have type: 'object' at the root level per MCP spec.
+	*/
+	outputSchema: object$1({
+		type: literal("object"),
+		properties: record(string(), AssertObjectSchema).optional(),
+		required: array(string()).optional()
+	}).catchall(unknown()).optional(),
+	/**
+	* Optional additional tool information.
+	*/
+	annotations: ToolAnnotationsSchema.optional(),
+	/**
+	* Execution-related properties for this tool.
+	*/
+	execution: ToolExecutionSchema.optional(),
+	/**
+	* See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
+	* for notes on _meta usage.
+	*/
+	_meta: record(string(), unknown()).optional()
+});
+/**
+* Sent from the client to request a list of tools the server has.
+*/
+const ListToolsRequestSchema = PaginatedRequestSchema.extend({ method: literal("tools/list") });
+/**
+* The server's response to a tools/list request from the client.
+*/
+const ListToolsResultSchema = PaginatedResultSchema.extend({ tools: array(ToolSchema) });
+/**
+* The server's response to a tool call.
+*/
+const CallToolResultSchema = ResultSchema.extend({
+	/**
+	* A list of content objects that represent the result of the tool call.
+	*
+	* If the Tool does not define an outputSchema, this field MUST be present in the result.
+	* For backwards compatibility, this field is always present, but it may be empty.
+	*/
+	content: array(ContentBlockSchema).default([]),
+	/**
+	* An object containing structured tool output.
+	*
+	* If the Tool defines an outputSchema, this field MUST be present in the result, and contain a JSON object that matches the schema.
+	*/
+	structuredContent: record(string(), unknown()).optional(),
+	/**
+	* Whether the tool call ended in an error.
+	*
+	* If not set, this is assumed to be false (the call was successful).
+	*
+	* Any errors that originate from the tool SHOULD be reported inside the result
+	* object, with `isError` set to true, _not_ as an MCP protocol-level error
+	* response. Otherwise, the LLM would not be able to see that an error occurred
+	* and self-correct.
+	*
+	* However, any errors in _finding_ the tool, an error indicating that the
+	* server does not support tool calls, or any other exceptional conditions,
+	* should be reported as an MCP error response.
+	*/
+	isError: boolean().optional()
+});
+CallToolResultSchema.or(ResultSchema.extend({ toolResult: unknown() }));
+/**
+* Parameters for a `tools/call` request.
+*/
+const CallToolRequestParamsSchema = TaskAugmentedRequestParamsSchema.extend({
+	/**
+	* The name of the tool to call.
+	*/
+	name: string(),
+	/**
+	* Arguments to pass to the tool.
+	*/
+	arguments: record(string(), unknown()).optional()
+});
+/**
+* Used by the client to invoke a tool provided by the server.
+*/
+const CallToolRequestSchema = RequestSchema.extend({
+	method: literal("tools/call"),
+	params: CallToolRequestParamsSchema
+});
+/**
+* An optional notification from the server to the client, informing it that the list of tools it offers has changed. This may be issued by servers without any previous subscription from the client.
+*/
+const ToolListChangedNotificationSchema = NotificationSchema.extend({
+	method: literal("notifications/tools/list_changed"),
+	params: NotificationsParamsSchema.optional()
+});
+object$1({
+	/**
+	* If true, the list will be refreshed automatically when a list changed notification is received.
+	* The callback will be called with the updated list.
+	*
+	* If false, the callback will be called with null items, allowing manual refresh.
+	*
+	* @default true
+	*/
+	autoRefresh: boolean().default(true),
+	/**
+	* Debounce time in milliseconds for list changed notification processing.
+	*
+	* Multiple notifications received within this timeframe will only trigger one refresh.
+	* Set to 0 to disable debouncing.
+	*
+	* @default 300
+	*/
+	debounceMs: number().int().nonnegative().default(300)
+});
+/**
+* The severity of a log message.
+*/
+const LoggingLevelSchema = _enum([
+	"debug",
+	"info",
+	"notice",
+	"warning",
+	"error",
+	"critical",
+	"alert",
+	"emergency"
+]);
+/**
+* Parameters for a `logging/setLevel` request.
+*/
+const SetLevelRequestParamsSchema = BaseRequestParamsSchema.extend({ 
+/**
+* The level of logging that the client wants to receive from the server. The server should send all logs at this level and higher (i.e., more severe) to the client as notifications/logging/message.
+*/
+level: LoggingLevelSchema });
+/**
+* A request from the client to the server, to enable or adjust logging.
+*/
+const SetLevelRequestSchema = RequestSchema.extend({
+	method: literal("logging/setLevel"),
+	params: SetLevelRequestParamsSchema
+});
+/**
+* Parameters for a `notifications/message` notification.
+*/
+const LoggingMessageNotificationParamsSchema = NotificationsParamsSchema.extend({
+	/**
+	* The severity of this log message.
+	*/
+	level: LoggingLevelSchema,
+	/**
+	* An optional name of the logger issuing this message.
+	*/
+	logger: string().optional(),
+	/**
+	* The data to be logged, such as a string message or an object. Any JSON serializable type is allowed here.
+	*/
+	data: unknown()
+});
+/**
+* Notification of a log message passed from server to client. If no logging/setLevel request has been sent from the client, the server MAY decide which messages to send automatically.
+*/
+const LoggingMessageNotificationSchema = NotificationSchema.extend({
+	method: literal("notifications/message"),
+	params: LoggingMessageNotificationParamsSchema
+});
+/**
+* The server's preferences for model selection, requested of the client during sampling.
+*/
+const ModelPreferencesSchema = object$1({
+	/**
+	* Optional hints to use for model selection.
+	*/
+	hints: array(object$1({ 
+	/**
+	* A hint for a model name.
+	*/
+name: string().optional() })).optional(),
+	/**
+	* How much to prioritize cost when selecting a model.
+	*/
+	costPriority: number().min(0).max(1).optional(),
+	/**
+	* How much to prioritize sampling speed (latency) when selecting a model.
+	*/
+	speedPriority: number().min(0).max(1).optional(),
+	/**
+	* How much to prioritize intelligence and capabilities when selecting a model.
+	*/
+	intelligencePriority: number().min(0).max(1).optional()
+});
+/**
+* Controls tool usage behavior in sampling requests.
+*/
+const ToolChoiceSchema = object$1({ 
+/**
+* Controls when tools are used:
+* - "auto": Model decides whether to use tools (default)
+* - "required": Model MUST use at least one tool before completing
+* - "none": Model MUST NOT use any tools
+*/
+mode: _enum([
+	"auto",
+	"required",
+	"none"
+]).optional() });
+/**
+* The result of a tool execution, provided by the user (server).
+* Represents the outcome of invoking a tool requested via ToolUseContent.
+*/
+const ToolResultContentSchema = object$1({
+	type: literal("tool_result"),
+	toolUseId: string().describe("The unique identifier for the corresponding tool call."),
+	content: array(ContentBlockSchema).default([]),
+	structuredContent: object$1({}).loose().optional(),
+	isError: boolean().optional(),
+	/**
+	* See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
+	* for notes on _meta usage.
+	*/
+	_meta: record(string(), unknown()).optional()
+});
+/**
+* Basic content types for sampling responses (without tool use).
+* Used for backwards-compatible CreateMessageResult when tools are not used.
+*/
+const SamplingContentSchema = discriminatedUnion("type", [
+	TextContentSchema,
+	ImageContentSchema,
+	AudioContentSchema
+]);
+/**
+* Content block types allowed in sampling messages.
+* This includes text, image, audio, tool use requests, and tool results.
+*/
+const SamplingMessageContentBlockSchema = discriminatedUnion("type", [
+	TextContentSchema,
+	ImageContentSchema,
+	AudioContentSchema,
+	ToolUseContentSchema,
+	ToolResultContentSchema
+]);
+/**
+* Describes a message issued to or received from an LLM API.
+*/
+const SamplingMessageSchema = object$1({
+	role: RoleSchema,
+	content: union([SamplingMessageContentBlockSchema, array(SamplingMessageContentBlockSchema)]),
+	/**
+	* See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
+	* for notes on _meta usage.
+	*/
+	_meta: record(string(), unknown()).optional()
+});
+/**
+* Parameters for a `sampling/createMessage` request.
+*/
+const CreateMessageRequestParamsSchema = TaskAugmentedRequestParamsSchema.extend({
+	messages: array(SamplingMessageSchema),
+	/**
+	* The server's preferences for which model to select. The client MAY modify or omit this request.
+	*/
+	modelPreferences: ModelPreferencesSchema.optional(),
+	/**
+	* An optional system prompt the server wants to use for sampling. The client MAY modify or omit this prompt.
+	*/
+	systemPrompt: string().optional(),
+	/**
+	* A request to include context from one or more MCP servers (including the caller), to be attached to the prompt.
+	* The client MAY ignore this request.
+	*
+	* Default is "none". Values "thisServer" and "allServers" are soft-deprecated. Servers SHOULD only use these values if the client
+	* declares ClientCapabilities.sampling.context. These values may be removed in future spec releases.
+	*/
+	includeContext: _enum([
+		"none",
+		"thisServer",
+		"allServers"
+	]).optional(),
+	temperature: number().optional(),
+	/**
+	* The requested maximum number of tokens to sample (to prevent runaway completions).
+	*
+	* The client MAY choose to sample fewer tokens than the requested maximum.
+	*/
+	maxTokens: number().int(),
+	stopSequences: array(string()).optional(),
+	/**
+	* Optional metadata to pass through to the LLM provider. The format of this metadata is provider-specific.
+	*/
+	metadata: AssertObjectSchema.optional(),
+	/**
+	* Tools that the model may use during generation.
+	* The client MUST return an error if this field is provided but ClientCapabilities.sampling.tools is not declared.
+	*/
+	tools: array(ToolSchema).optional(),
+	/**
+	* Controls how the model uses tools.
+	* The client MUST return an error if this field is provided but ClientCapabilities.sampling.tools is not declared.
+	* Default is `{ mode: "auto" }`.
+	*/
+	toolChoice: ToolChoiceSchema.optional()
+});
+/**
+* A request from the server to sample an LLM via the client. The client has full discretion over which model to select. The client should also inform the user before beginning sampling, to allow them to inspect the request (human in the loop) and decide whether to approve it.
+*/
+const CreateMessageRequestSchema = RequestSchema.extend({
+	method: literal("sampling/createMessage"),
+	params: CreateMessageRequestParamsSchema
+});
+/**
+* The client's response to a sampling/create_message request from the server.
+* This is the backwards-compatible version that returns single content (no arrays).
+* Used when the request does not include tools.
+*/
+const CreateMessageResultSchema = ResultSchema.extend({
+	/**
+	* The name of the model that generated the message.
+	*/
+	model: string(),
+	/**
+	* The reason why sampling stopped, if known.
+	*
+	* Standard values:
+	* - "endTurn": Natural end of the assistant's turn
+	* - "stopSequence": A stop sequence was encountered
+	* - "maxTokens": Maximum token limit was reached
+	*
+	* This field is an open string to allow for provider-specific stop reasons.
+	*/
+	stopReason: optional(_enum([
+		"endTurn",
+		"stopSequence",
+		"maxTokens"
+	]).or(string())),
+	role: RoleSchema,
+	/**
+	* Response content. Single content block (text, image, or audio).
+	*/
+	content: SamplingContentSchema
+});
+/**
+* The client's response to a sampling/create_message request when tools were provided.
+* This version supports array content for tool use flows.
+*/
+const CreateMessageResultWithToolsSchema = ResultSchema.extend({
+	/**
+	* The name of the model that generated the message.
+	*/
+	model: string(),
+	/**
+	* The reason why sampling stopped, if known.
+	*
+	* Standard values:
+	* - "endTurn": Natural end of the assistant's turn
+	* - "stopSequence": A stop sequence was encountered
+	* - "maxTokens": Maximum token limit was reached
+	* - "toolUse": The model wants to use one or more tools
+	*
+	* This field is an open string to allow for provider-specific stop reasons.
+	*/
+	stopReason: optional(_enum([
+		"endTurn",
+		"stopSequence",
+		"maxTokens",
+		"toolUse"
+	]).or(string())),
+	role: RoleSchema,
+	/**
+	* Response content. May be a single block or array. May include ToolUseContent if stopReason is "toolUse".
+	*/
+	content: union([SamplingMessageContentBlockSchema, array(SamplingMessageContentBlockSchema)])
+});
+/**
+* Primitive schema definition for boolean fields.
+*/
+const BooleanSchemaSchema = object$1({
+	type: literal("boolean"),
+	title: string().optional(),
+	description: string().optional(),
+	default: boolean().optional()
+});
+/**
+* Primitive schema definition for string fields.
+*/
+const StringSchemaSchema = object$1({
+	type: literal("string"),
+	title: string().optional(),
+	description: string().optional(),
+	minLength: number().optional(),
+	maxLength: number().optional(),
+	format: _enum([
+		"email",
+		"uri",
+		"date",
+		"date-time"
+	]).optional(),
+	default: string().optional()
+});
+/**
+* Primitive schema definition for number fields.
+*/
+const NumberSchemaSchema = object$1({
+	type: _enum(["number", "integer"]),
+	title: string().optional(),
+	description: string().optional(),
+	minimum: number().optional(),
+	maximum: number().optional(),
+	default: number().optional()
+});
+/**
+* Schema for single-selection enumeration without display titles for options.
+*/
+const UntitledSingleSelectEnumSchemaSchema = object$1({
+	type: literal("string"),
+	title: string().optional(),
+	description: string().optional(),
+	enum: array(string()),
+	default: string().optional()
+});
+/**
+* Schema for single-selection enumeration with display titles for each option.
+*/
+const TitledSingleSelectEnumSchemaSchema = object$1({
+	type: literal("string"),
+	title: string().optional(),
+	description: string().optional(),
+	oneOf: array(object$1({
+		const: string(),
+		title: string()
+	})),
+	default: string().optional()
+});
+/**
+* Union of all primitive schema definitions.
+*/
+const PrimitiveSchemaDefinitionSchema = union([
+	union([
+		object$1({
+			type: literal("string"),
+			title: string().optional(),
+			description: string().optional(),
+			enum: array(string()),
+			enumNames: array(string()).optional(),
+			default: string().optional()
+		}),
+		union([UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema]),
+		union([object$1({
+			type: literal("array"),
+			title: string().optional(),
+			description: string().optional(),
+			minItems: number().optional(),
+			maxItems: number().optional(),
+			items: object$1({
+				type: literal("string"),
+				enum: array(string())
+			}),
+			default: array(string()).optional()
+		}), object$1({
+			type: literal("array"),
+			title: string().optional(),
+			description: string().optional(),
+			minItems: number().optional(),
+			maxItems: number().optional(),
+			items: object$1({ anyOf: array(object$1({
+				const: string(),
+				title: string()
+			})) }),
+			default: array(string()).optional()
+		})])
+	]),
+	BooleanSchemaSchema,
+	StringSchemaSchema,
+	NumberSchemaSchema
+]);
+/**
+* The parameters for a request to elicit additional information from the user via the client.
+*/
+const ElicitRequestParamsSchema = union([TaskAugmentedRequestParamsSchema.extend({
+	/**
+	* The elicitation mode.
+	*
+	* Optional for backward compatibility. Clients MUST treat missing mode as "form".
+	*/
+	mode: literal("form").optional(),
+	/**
+	* The message to present to the user describing what information is being requested.
+	*/
+	message: string(),
+	/**
+	* A restricted subset of JSON Schema.
+	* Only top-level properties are allowed, without nesting.
+	*/
+	requestedSchema: object$1({
+		type: literal("object"),
+		properties: record(string(), PrimitiveSchemaDefinitionSchema),
+		required: array(string()).optional()
+	})
+}), TaskAugmentedRequestParamsSchema.extend({
+	/**
+	* The elicitation mode.
+	*/
+	mode: literal("url"),
+	/**
+	* The message to present to the user explaining why the interaction is needed.
+	*/
+	message: string(),
+	/**
+	* The ID of the elicitation, which must be unique within the context of the server.
+	* The client MUST treat this ID as an opaque value.
+	*/
+	elicitationId: string(),
+	/**
+	* The URL that the user should navigate to.
+	*/
+	url: string().url()
+})]);
+/**
+* A request from the server to elicit user input via the client.
+* The client should present the message and form fields to the user (form mode)
+* or navigate to a URL (URL mode).
+*/
+const ElicitRequestSchema = RequestSchema.extend({
+	method: literal("elicitation/create"),
+	params: ElicitRequestParamsSchema
+});
+/**
+* Parameters for a `notifications/elicitation/complete` notification.
+*
+* @category notifications/elicitation/complete
+*/
+const ElicitationCompleteNotificationParamsSchema = NotificationsParamsSchema.extend({ 
+/**
+* The ID of the elicitation that completed.
+*/
+elicitationId: string() });
+/**
+* A notification from the server to the client, informing it of a completion of an out-of-band elicitation request.
+*
+* @category notifications/elicitation/complete
+*/
+const ElicitationCompleteNotificationSchema = NotificationSchema.extend({
+	method: literal("notifications/elicitation/complete"),
+	params: ElicitationCompleteNotificationParamsSchema
+});
+/**
+* The client's response to an elicitation/create request from the server.
+*/
+const ElicitResultSchema = ResultSchema.extend({
+	/**
+	* The user action in response to the elicitation.
+	* - "accept": User submitted the form/confirmed the action
+	* - "decline": User explicitly decline the action
+	* - "cancel": User dismissed without making an explicit choice
+	*/
+	action: _enum([
+		"accept",
+		"decline",
+		"cancel"
+	]),
+	/**
+	* The submitted form data, only present when action is "accept".
+	* Contains values matching the requested schema.
+	* Per MCP spec, content is "typically omitted" for decline/cancel actions.
+	* We normalize null to undefined for leniency while maintaining type compatibility.
+	*/
+	content: preprocess((val) => val === null ? void 0 : val, record(string(), union([
+		string(),
+		number(),
+		boolean(),
+		array(string())
+	])).optional())
+});
+/**
+* A reference to a resource or resource template definition.
+*/
+const ResourceTemplateReferenceSchema = object$1({
+	type: literal("ref/resource"),
+	/**
+	* The URI or URI template of the resource.
+	*/
+	uri: string()
+});
+/**
+* Identifies a prompt.
+*/
+const PromptReferenceSchema = object$1({
+	type: literal("ref/prompt"),
+	/**
+	* The name of the prompt or prompt template
+	*/
+	name: string()
+});
+/**
+* Parameters for a `completion/complete` request.
+*/
+const CompleteRequestParamsSchema = BaseRequestParamsSchema.extend({
+	ref: union([PromptReferenceSchema, ResourceTemplateReferenceSchema]),
+	/**
+	* The argument's information
+	*/
+	argument: object$1({
+		/**
+		* The name of the argument
+		*/
+		name: string(),
+		/**
+		* The value of the argument to use for completion matching.
+		*/
+		value: string()
+	}),
+	context: object$1({ 
+	/**
+	* Previously-resolved variables in a URI template or prompt.
+	*/
+arguments: record(string(), string()).optional() }).optional()
+});
+/**
+* A request from the client to the server, to ask for completion options.
+*/
+const CompleteRequestSchema = RequestSchema.extend({
+	method: literal("completion/complete"),
+	params: CompleteRequestParamsSchema
+});
+/**
+* The server's response to a completion/complete request
+*/
+const CompleteResultSchema = ResultSchema.extend({ completion: looseObject({
+	/**
+	* An array of completion values. Must not exceed 100 items.
+	*/
+	values: array(string()).max(100),
+	/**
+	* The total number of completion options available. This can exceed the number of values actually sent in the response.
+	*/
+	total: optional(number().int()),
+	/**
+	* Indicates whether there are additional completion options beyond those provided in the current response, even if the exact total is unknown.
+	*/
+	hasMore: optional(boolean())
+}) });
+/**
+* Represents a root directory or file that the server can operate on.
+*/
+const RootSchema = object$1({
+	/**
+	* The URI identifying the root. This *must* start with file:// for now.
+	*/
+	uri: string().startsWith("file://"),
+	/**
+	* An optional name for the root.
+	*/
+	name: string().optional(),
+	/**
+	* See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
+	* for notes on _meta usage.
+	*/
+	_meta: record(string(), unknown()).optional()
+});
+/**
+* Sent from the server to request a list of root URIs from the client.
+*/
+const ListRootsRequestSchema = RequestSchema.extend({
+	method: literal("roots/list"),
+	params: BaseRequestParamsSchema.optional()
+});
+/**
+* The client's response to a roots/list request from the server.
+*/
+const ListRootsResultSchema = ResultSchema.extend({ roots: array(RootSchema) });
+/**
+* A notification from the client to the server, informing it that the list of roots has changed.
+*/
+const RootsListChangedNotificationSchema = NotificationSchema.extend({
+	method: literal("notifications/roots/list_changed"),
+	params: NotificationsParamsSchema.optional()
+});
+union([
+	PingRequestSchema,
+	InitializeRequestSchema,
+	CompleteRequestSchema,
+	SetLevelRequestSchema,
+	GetPromptRequestSchema,
+	ListPromptsRequestSchema,
+	ListResourcesRequestSchema,
+	ListResourceTemplatesRequestSchema,
+	ReadResourceRequestSchema,
+	SubscribeRequestSchema,
+	UnsubscribeRequestSchema,
+	CallToolRequestSchema,
+	ListToolsRequestSchema,
+	GetTaskRequestSchema,
+	GetTaskPayloadRequestSchema,
+	ListTasksRequestSchema,
+	CancelTaskRequestSchema
+]);
+union([
+	CancelledNotificationSchema,
+	ProgressNotificationSchema,
+	InitializedNotificationSchema,
+	RootsListChangedNotificationSchema,
+	TaskStatusNotificationSchema
+]);
+union([
+	EmptyResultSchema,
+	CreateMessageResultSchema,
+	CreateMessageResultWithToolsSchema,
+	ElicitResultSchema,
+	ListRootsResultSchema,
+	GetTaskResultSchema,
+	ListTasksResultSchema,
+	CreateTaskResultSchema
+]);
+union([
+	PingRequestSchema,
+	CreateMessageRequestSchema,
+	ElicitRequestSchema,
+	ListRootsRequestSchema,
+	GetTaskRequestSchema,
+	GetTaskPayloadRequestSchema,
+	ListTasksRequestSchema,
+	CancelTaskRequestSchema
+]);
+union([
+	CancelledNotificationSchema,
+	ProgressNotificationSchema,
+	LoggingMessageNotificationSchema,
+	ResourceUpdatedNotificationSchema,
+	ResourceListChangedNotificationSchema,
+	ToolListChangedNotificationSchema,
+	PromptListChangedNotificationSchema,
+	TaskStatusNotificationSchema,
+	ElicitationCompleteNotificationSchema
+]);
+union([
+	EmptyResultSchema,
+	InitializeResultSchema,
+	CompleteResultSchema,
+	GetPromptResultSchema,
+	ListPromptsResultSchema,
+	ListResourcesResultSchema,
+	ListResourceTemplatesResultSchema,
+	ReadResourceResultSchema,
+	CallToolResultSchema,
+	ListToolsResultSchema,
+	GetTaskResultSchema,
+	ListTasksResultSchema,
+	CreateTaskResultSchema
+]);
+//#endregion
+//#region ../../../../../setup-pnpm/node_modules/.bin/store/v11/links/@/hono-mcp-server-sse-transport/0.0.7/518df2f53e0bbb46e48def5118fc7f6b5bba3a268854c8a5c7e83260299d376e/node_modules/hono-mcp-server-sse-transport/build/sse.js
+const MAXIMUM_MESSAGE_SIZE = 4 * 1024 * 1024;
+var SSETransport = class {
+	messageUrl;
+	stream;
+	_sessionId;
+	onclose;
+	onerror;
+	onmessage;
+	/**
+	* Creates a new SSETransport, which will direct the MPC client to POST messages to messageUrl
+	*/
+	constructor(messageUrl, stream) {
+		this.messageUrl = messageUrl;
+		this.stream = stream;
+		this._sessionId = crypto.randomUUID();
+		this.stream.onAbort(() => {
+			this.close();
+		});
+	}
+	get sessionId() {
+		return this._sessionId;
+	}
+	async start() {
+		if (this.stream == null) throw new Error("Stream not initialized");
+		if (this.stream.closed) throw new Error("SSE transport already closed!");
+		await this.stream.writeSSE({
+			event: "ping",
+			data: ""
+		});
+		await this.stream.writeSSE({
+			event: "endpoint",
+			data: `${this.messageUrl}?sessionId=${this.sessionId}`
+		});
+	}
+	async handlePostMessage(context) {
+		if (this.stream?.closed == null) return context.text("SSE connection not established", 500);
+		try {
+			const contentType = context.req.header("content-type") || "";
+			if (!contentType.includes("application/json")) throw new Error(`Unsupported content-type: ${contentType}`);
+			const contentLength = Number.parseInt(context.req.header("content-length") || "0", 10);
+			if (contentLength > MAXIMUM_MESSAGE_SIZE) throw new Error(`Request body too large: ${contentLength} bytes`);
+			const body = await context.req.json();
+			await this.handleMessage(body);
+			return context.text("Accepted", 202);
+		} catch (error) {
+			this.onerror?.(error);
+			return context.text("Error", 400);
+		}
+	}
+	/**
+	* Handle a client message, regardless of how it arrived. This can be used to inform the server of messages that arrive via a means different than HTTP POST.
+	*/
+	async handleMessage(message) {
+		let parsedMessage;
+		try {
+			parsedMessage = JSONRPCMessageSchema.parse(message);
+		} catch (error) {
+			this.onerror?.(error);
+			throw error;
+		}
+		this.onmessage?.(parsedMessage);
+	}
+	async close() {
+		if (this.stream?.closed) this.stream.abort();
+	}
+	async send(message) {
+		if (this.stream?.closed) throw new Error("Not connected");
+		await this.stream.writeSSE({
+			event: "message",
+			data: JSON.stringify(message)
+		});
+	}
+};
+//#endregion
+//#region src/server/notificationBroadcast.ts
+/**
+* Sends a notification to every active server instance (the main stdio/SSE
+* instance plus each streamable HTTP session instance).
+*
+* Failures are aggregated: if only some instances fail, the failure is logged
+* and the broadcast is considered best-effort. A `MastraError` is thrown only
+* when every send fails.
+*
+* Note: clients connected in stateless/serverless mode cannot receive
+* notifications because each request uses a transient server instance.
+*
+* @internal
+*/
+async function broadcastNotification({ servers, send, logger, errorId, errorText, errorDetails }) {
+	const errors = [];
+	for (const server of servers) try {
+		await send(server);
+	} catch (error) {
+		errors.push(error);
+	}
+	if (errors.length === 0) return;
+	const mastraError = new MastraError({
+		id: errorId,
+		domain: ErrorDomain.MCP,
+		category: ErrorCategory.THIRD_PARTY,
+		text: errorText,
+		details: {
+			...errorDetails,
+			failedInstances: errors.length,
+			totalInstances: servers.length
+		}
+	}, errors[0]);
+	logger.error(`${errorText}:`, { error: mastraError.toString() });
+	if (errors.length === servers.length) {
+		logger.trackException(mastraError);
+		throw mastraError;
+	}
+}
+//#endregion
+//#region src/server/promptActions.ts
+/**
+* Server-side prompt actions for notifying clients about prompt changes.
+*
+* This class provides methods for MCP servers to notify connected clients when
+* the list of available prompts changes.
+*
+* Notifications are broadcast to every active server instance (the main
+* stdio/SSE instance plus each streamable HTTP session). Clients connected in
+* stateless/serverless mode cannot receive notifications because each request
+* uses a transient server instance.
+*/
+var ServerPromptActions = class {
+	getLogger;
+	getSdkServers;
+	clearDefinedPrompts;
+	/**
+	* @internal
+	*/
+	constructor(dependencies) {
+		this.getLogger = dependencies.getLogger;
+		this.getSdkServers = dependencies.getSdkServers;
+		this.clearDefinedPrompts = dependencies.clearDefinedPrompts;
+	}
+	/**
+	* Notifies clients that the overall list of available prompts has changed.
+	*
+	* This clears the internal prompt cache and sends a `notifications/prompts/list_changed`
+	* message to all clients, prompting them to re-fetch the prompt list.
+	*
+	* @throws {MastraError} If sending the notification fails on all server instances
+	*
+	* @example
+	* ```typescript
+	* // After adding or modifying prompts
+	* await server.prompts.notifyListChanged();
+	* ```
+	*/
+	async notifyListChanged() {
+		this.getLogger().info("Prompt list change externally notified. Clearing definedPrompts and sending notification.");
+		this.clearDefinedPrompts();
 		await broadcastNotification({
 			servers: this.getSdkServers(),
 			send: (server) => server.sendPromptListChanged(),
@@ -24125,6 +26259,25 @@ var ServerToolActions = class {
 };
 //#endregion
 //#region src/server/server.ts
+/**
+* Flattens the MCP `ServerContext` into the shape Mastra tools receive as `extra`.
+*
+* MCP 2.0 nests per-request plumbing under `ctx.mcpReq` and transport details under
+* `ctx.http`, while Mastra tools have always read `signal`, `requestId`, `authInfo`,
+* `sendNotification`, `sendRequest`, and `_meta` off the top level. Both the nested and
+* flattened members are kept so tools written against either shape keep working.
+*/
+const toMCPRequestHandlerExtra = (ctx) => {
+	return {
+		...ctx,
+		signal: ctx.mcpReq.signal,
+		requestId: ctx.mcpReq.id,
+		authInfo: ctx.http?.authInfo,
+		sendNotification: ctx.mcpReq.notify,
+		sendRequest: ctx.mcpReq.send,
+		_meta: ctx.mcpReq._meta
+	};
+};
 const LOG_LEVEL_SEVERITY = {
 	debug: 0,
 	info: 1,
@@ -24271,11 +26424,11 @@ var MCPServer = class extends MCPServerBase {
 		return this.sseHonoTransports.get(sessionId);
 	}
 	/**
-	* Gets the underlying MCP SDK Server instance.
+	* Gets the underlying MCP Server instance.
 	*
 	* This provides access to the low-level server instance for advanced use cases.
 	*
-	* @returns The Server instance from @modelcontextprotocol/sdk
+	* @returns The Server instance from @modelcontextprotocol/server
 	*/
 	getServer() {
 		return this.server;
@@ -24645,8 +26798,8 @@ var MCPServer = class extends MCPServerBase {
 	* This allows us to create multiple server instances with identical functionality.
 	*/
 	registerHandlersOnServer(serverInstance) {
-		serverInstance.setRequestHandler(ListToolsRequestSchema, async (_request, extra) => {
-			const proxiedContext = await this.createProxiedRequestContext(extra);
+		serverInstance.setRequestHandler("tools/list", async (_request, ctx) => {
+			const proxiedContext = await this.createProxiedRequestContext(toMCPRequestHandlerExtra(ctx));
 			return { tools: (await this.getAuthorizedConvertedToolEntries(proxiedContext)).map(([, tool]) => {
 				const toolSpec = {
 					name: tool.id || "unknown",
@@ -24675,8 +26828,9 @@ var MCPServer = class extends MCPServerBase {
 				return toolSpec;
 			}) };
 		});
-		serverInstance.setRequestHandler(CallToolRequestSchema, async (request, extra) => {
+		serverInstance.setRequestHandler("tools/call", async (request, ctx) => {
 			const startTime = Date.now();
+			const extra = toMCPRequestHandlerExtra(ctx);
 			try {
 				const tool = this.convertedTools[request.params.name];
 				if (!tool) {
@@ -24844,7 +26998,7 @@ var MCPServer = class extends MCPServerBase {
 				};
 			}
 		});
-		serverInstance.setRequestHandler(SetLevelRequestSchema, async (request) => {
+		serverInstance.setRequestHandler("logging/setLevel", async (request) => {
 			this.loggingLevels.set(serverInstance, request.params.level);
 			this.logger.debug("Logging level set", { level: request.params.level });
 			return {};
@@ -24858,9 +27012,9 @@ var MCPServer = class extends MCPServerBase {
 	registerResourceHandlersOnServer(serverInstance) {
 		const capturedResourceOptions = this.resourceOptions;
 		if (!capturedResourceOptions) return;
-		if (capturedResourceOptions.listResources) serverInstance.setRequestHandler(ListResourcesRequestSchema, async (_request, extra) => {
+		if (capturedResourceOptions.listResources) serverInstance.setRequestHandler("resources/list", async (_request, ctx) => {
 			try {
-				const resources = await capturedResourceOptions.listResources({ extra });
+				const resources = await capturedResourceOptions.listResources({ extra: toMCPRequestHandlerExtra(ctx) });
 				this.logger.debug("Fetched resources", { count: resources.length });
 				return { resources };
 			} catch (error) {
@@ -24868,21 +27022,21 @@ var MCPServer = class extends MCPServerBase {
 				throw error;
 			}
 		});
-		if (capturedResourceOptions.getResourceContent) serverInstance.setRequestHandler(ReadResourceRequestSchema, async (request, extra) => {
+		if (capturedResourceOptions.getResourceContent) serverInstance.setRequestHandler("resources/read", async (request, ctx) => {
 			const startTime = Date.now();
 			const uri = request.params.uri;
 			this.logger.debug("Handling ReadResource request", { uri });
-			const resources = await capturedResourceOptions.listResources?.({ extra });
+			const resources = await capturedResourceOptions.listResources?.({ extra: toMCPRequestHandlerExtra(ctx) });
 			if (!resources) throw new Error("Failed to load resources");
 			const resource = resources.find((r) => r.uri === uri);
 			if (!resource) {
 				this.logger.warn("Unknown resource URI requested", { uri });
-				throw new McpError(ErrorCode.InvalidParams, `Resource not found: ${uri}`);
+				throw new ProtocolError(ProtocolErrorCode$1.InvalidParams, `Resource not found: ${uri}`);
 			}
 			try {
 				const resourcesOrResourceContent = await capturedResourceOptions.getResourceContent({
 					uri,
-					extra
+					extra: toMCPRequestHandlerExtra(ctx)
 				});
 				const resourcesContent = Array.isArray(resourcesOrResourceContent) ? resourcesOrResourceContent : [resourcesOrResourceContent];
 				const resourceMeta = resource._meta ? { _meta: resource._meta } : {};
@@ -24918,9 +27072,9 @@ var MCPServer = class extends MCPServerBase {
 				throw error;
 			}
 		});
-		if (capturedResourceOptions.resourceTemplates) serverInstance.setRequestHandler(ListResourceTemplatesRequestSchema, async (_request, extra) => {
+		if (capturedResourceOptions.resourceTemplates) serverInstance.setRequestHandler("resources/templates/list", async (_request, ctx) => {
 			try {
-				const templates = await capturedResourceOptions.resourceTemplates({ extra });
+				const templates = await capturedResourceOptions.resourceTemplates({ extra: toMCPRequestHandlerExtra(ctx) });
 				this.logger.debug("Fetched resource templates", { count: templates.length });
 				return { resourceTemplates: templates };
 			} catch (error) {
@@ -24928,7 +27082,7 @@ var MCPServer = class extends MCPServerBase {
 				throw error;
 			}
 		});
-		serverInstance.setRequestHandler(SubscribeRequestSchema, async (request) => {
+		serverInstance.setRequestHandler("resources/subscribe", async (request) => {
 			const uri = request.params.uri;
 			this.logger.info("Received resources/subscribe request", { uri });
 			let subscriptions = this.subscriptionsByInstance.get(serverInstance);
@@ -24939,7 +27093,7 @@ var MCPServer = class extends MCPServerBase {
 			subscriptions.add(uri);
 			return {};
 		});
-		serverInstance.setRequestHandler(UnsubscribeRequestSchema, async (request) => {
+		serverInstance.setRequestHandler("resources/unsubscribe", async (request) => {
 			const uri = request.params.uri;
 			this.logger.info("Received resources/unsubscribe request", { uri });
 			this.subscriptionsByInstance.get(serverInstance)?.delete(uri);
@@ -24952,11 +27106,11 @@ var MCPServer = class extends MCPServerBase {
 	registerPromptHandlersOnServer(serverInstance) {
 		const capturedPromptOptions = this.promptOptions;
 		if (!capturedPromptOptions) return;
-		if (capturedPromptOptions.listPrompts) serverInstance.setRequestHandler(ListPromptsRequestSchema, async (_request, extra) => {
+		if (capturedPromptOptions.listPrompts) serverInstance.setRequestHandler("prompts/list", async (_request, ctx) => {
 			this.logger.debug("Handling ListPrompts request");
 			if (this.definedPrompts) return { prompts: this.definedPrompts };
 			else try {
-				const prompts = await capturedPromptOptions.listPrompts({ extra });
+				const prompts = await capturedPromptOptions.listPrompts({ extra: toMCPRequestHandlerExtra(ctx) });
 				for (const prompt of prompts) PromptSchema.parse(prompt);
 				this.definedPrompts = prompts;
 				this.logger.debug("Fetched and cached prompts", { count: this.definedPrompts.length });
@@ -24966,18 +27120,18 @@ var MCPServer = class extends MCPServerBase {
 				throw error;
 			}
 		});
-		if (capturedPromptOptions.getPromptMessages) serverInstance.setRequestHandler(GetPromptRequestSchema, async (request, extra) => {
+		if (capturedPromptOptions.getPromptMessages) serverInstance.setRequestHandler("prompts/get", async (request, ctx) => {
 			const startTime = Date.now();
 			const { name, arguments: args } = request.params;
 			if (!this.definedPrompts) {
-				const prompts = await this.promptOptions?.listPrompts?.({ extra });
+				const prompts = await this.promptOptions?.listPrompts?.({ extra: toMCPRequestHandlerExtra(ctx) });
 				if (!prompts) throw new Error("Failed to load prompts");
 				this.definedPrompts = prompts;
 			}
 			const prompt = this.definedPrompts?.find((p) => p.name === name);
 			if (!prompt) throw new Error(`Prompt "${name}" not found`);
 			if (prompt.arguments) {
-				for (const arg of prompt.arguments) if (arg.required && (args?.[arg.name] === void 0 || args?.[arg.name] === null)) throw new McpError(ErrorCode.InvalidParams, `Missing required argument: ${arg.name}`);
+				for (const arg of prompt.arguments) if (arg.required && (args?.[arg.name] === void 0 || args?.[arg.name] === null)) throw new ProtocolError(ProtocolErrorCode$1.InvalidParams, `Missing required argument: ${arg.name}`);
 			}
 			try {
 				let messages = [];
@@ -24985,7 +27139,7 @@ var MCPServer = class extends MCPServerBase {
 					name,
 					version: prompt.version,
 					args,
-					extra
+					extra: toMCPRequestHandlerExtra(ctx)
 				});
 				const duration = Date.now() - startTime;
 				this.logger.info("Prompt retrieved successfully", {
@@ -25496,11 +27650,11 @@ var MCPServer = class extends MCPServerBase {
 				this.logger.debug("No session ID provided", { method: req.method });
 				if (req.method === "POST") {
 					const body = await this.readJsonBody(req);
-					const { isInitializeRequest } = await import("@modelcontextprotocol/sdk/types.js");
+					const { isInitializeRequest } = await import("@modelcontextprotocol/server");
 					if (isInitializeRequest(body)) {
 						this.logger.debug("Received initialize request, creating new transport");
 						const sessionServerInstance = this.createServerInstance();
-						transport = new StreamableHTTPServerTransport({
+						transport = new NodeStreamableHTTPServerTransport({
 							...mergedOptions,
 							sessionIdGenerator: mergedOptions.sessionIdGenerator,
 							onsessioninitialized: (id) => {
@@ -25597,7 +27751,7 @@ var MCPServer = class extends MCPServerBase {
 				enableJsonResponse
 			});
 			const transientServer = this.createServerInstance();
-			const tempTransport = new StreamableHTTPServerTransport({
+			const tempTransport = new NodeStreamableHTTPServerTransport({
 				sessionIdGenerator: void 0,
 				enableJsonResponse
 			});
@@ -25838,8 +27992,12 @@ var MCPServer = class extends MCPServerBase {
 		};
 	}
 	convertSchema(schema) {
-		if (isStandardSchemaWithJSON(schema)) return standardSchemaToJSONSchema(schema);
-		return schema?.jsonSchema || schema;
+		const jsonSchema = isStandardSchemaWithJSON(schema) ? standardSchemaToJSONSchema(schema) : schema?.jsonSchema ?? schema;
+		if (jsonSchema && typeof jsonSchema === "object" && "$schema" in jsonSchema) {
+			const { $schema: _dialect, ...rest } = jsonSchema;
+			return rest;
+		}
+		return jsonSchema;
 	}
 	/**
 	* Gets a list of all tools provided by this MCP server with their schemas.
@@ -25929,6 +28087,8 @@ var MCPServer = class extends MCPServerBase {
 			Object.entries(extraRecord).forEach(([key, value]) => {
 				proxiedContext.set(key, value);
 			});
+			const http = extraRecord.http;
+			if (http && typeof http === "object" && "authInfo" in http) proxiedContext.set("authInfo", http.authInfo);
 		}
 		await this.resolveMappedFGAUser(proxiedContext, extraRecord);
 		return proxiedContext;