@mastra/mcp 1.18.1-alpha.2 → 2.0.0-alpha.4

package/dist/server/actions.d.ts

@@ -0,0 +1,34 @@
+import type { ToolsInput } from '@mastra/core/agent';
+import type { IMastraLogger } from '@mastra/core/logger';
+import type { ServerNotifier } from '@modelcontextprotocol/server';
+interface ActionDependencies {
+    getLogger: () => IMastraLogger;
+    /** Clients receive change events through `subscriptions/listen`; undefined until a transport is serving. */
+    getNotifier: () => ServerNotifier | undefined;
+}
+/** Runtime tool catalogue mutations. Every change is published to listening clients. */
+export declare class ServerToolActions {
+    private readonly deps;
+    constructor(deps: ActionDependencies & {
+        addTools: (tools: ToolsInput) => void;
+        removeTools: (toolIds: string[]) => string[];
+    });
+    add(tools: ToolsInput): Promise<void>;
+    remove(toolIds: string[]): Promise<void>;
+    notifyListChanged(): Promise<void>;
+}
+export declare class ServerResourceActions {
+    private readonly deps;
+    constructor(deps: ActionDependencies);
+    notifyUpdated({ uri }: {
+        uri: string;
+    }): Promise<void>;
+    notifyListChanged(): Promise<void>;
+}
+export declare class ServerPromptActions {
+    private readonly deps;
+    constructor(deps: ActionDependencies);
+    notifyListChanged(): Promise<void>;
+}
+export {};
+//# sourceMappingURL=actions.d.ts.map

package/dist/server/actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../src/server/actions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEnE,UAAU,kBAAkB;IAC1B,SAAS,EAAE,MAAM,aAAa,CAAC;IAC/B,4GAA4G;IAC5G,WAAW,EAAE,MAAM,cAAc,GAAG,SAAS,CAAC;CAC/C;AAED,wFAAwF;AACxF,qBAAa,iBAAiB;IAE1B,OAAO,CAAC,QAAQ,CAAC,IAAI;IADvB,YACmB,IAAI,EAAE,kBAAkB,GAAG;QAC1C,QAAQ,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;QACtC,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,MAAM,EAAE,CAAC;KAC9C,EACC;IAEE,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAG1C;IAEK,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAG7C;IAEK,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAGvC;CACF;AAED,qBAAa,qBAAqB;IACpB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,kBAAkB,EAAI;IAEnD,aAAa,CAAC,EAAE,GAAG,EAAE,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAG3D;IAEK,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAGvC;CACF;AAED,qBAAa,mBAAmB;IAClB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,kBAAkB,EAAI;IAEnD,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAGvC;CACF"}

package/dist/server/oauth-middleware.d.ts

@@ -4,7 +4,7 @@
  * Implements OAuth 2.0 Protected Resource support per RFC 9728 for MCP servers.
  * This allows MCP servers to require OAuth authentication from clients.
  *
- * @see https://modelcontextprotocol.io/specification/2025-06-18/basic/authorization
+ * @see https://modelcontextprotocol.io/specification/2026-07-28/basic/authorization
  * @see https://www.rfc-editor.org/rfc/rfc9728.html
  */
 import type * as http from 'node:http';

package/dist/server/request.d.ts

@@ -0,0 +1,54 @@
+import { RequestContext } from '@mastra/core/request-context';
+import type { MCPToolExecutionContext } from '@mastra/core/tools';
+import type { ServerContext } from '@modelcontextprotocol/server';
+import type { MCPAuthInfoToUserMapper } from './types.js';
+/**
+ * The `context.mcp` a 2026-07-28 request hands to tools: the 1.x shape, with the
+ * per-request facilities (cancellation, metadata, auth, log, progress) live and the
+ * removed server-initiated requests throwing at the call site.
+ */
+export declare function toToolExecutionContext(ctx: ServerContext, loggerName: string): MCPToolExecutionContext;
+/**
+ * Builds the trusted application context for one request. Auth is re-derived from
+ * the transport every time; nothing is carried between continuation rounds. The W3C
+ * trace fields sent by the client are exposed under `traceContext` as opaque
+ * strings for observability only; they are never consulted for authorization.
+ */
+export declare function toRequestContext(ctx: ServerContext, mapAuthInfoToUser: MCPAuthInfoToUserMapper | undefined): Promise<RequestContext>;
+/**
+ * The identity a continuation is bound to; a different caller cannot resume it.
+ * Prefers the token subject, then the id of the user `mapAuthInfoToUser` produced,
+ * and otherwise the bearer token itself, so two users sharing one OAuth client
+ * never share a principal. A token refreshed mid-round therefore starts over.
+ */
+export declare function principalOf(ctx: ServerContext, requestContext: RequestContext): string;
+export declare function hashArguments(value: unknown): string;
+/**
+ * What the server signs into `requestState` when a handler suspends. It names the
+ * exact operation and caller so a continuation can only answer the round it was
+ * issued for; `suspendPayload` is what the handler asked to be handed back.
+ */
+export interface ContinuationEnvelope {
+    method: 'tools/call' | 'resources/read' | 'prompts/get';
+    name: string;
+    argsHash: string;
+    principal: string;
+    round: number;
+    suspendPayload: unknown;
+    iat: number;
+}
+/** The key every suspended round asks the client to answer under. */
+export declare const INPUT_KEY = "input";
+export interface ContinuationRound {
+    round: number;
+    suspendPayload: unknown;
+    /** Present when the client accepted; a decline or cancel ends the request instead. */
+    resumeData?: unknown;
+    outcome: 'accept' | 'decline' | 'cancel';
+}
+/**
+ * Reads the continuation the SDK already integrity-checked and pairs it with this
+ * round's answer. Returns `undefined` for a fresh request.
+ */
+export declare function readContinuation(ctx: ServerContext, requestContext: RequestContext, expected: Pick<ContinuationEnvelope, 'method' | 'name' | 'argsHash'>): ContinuationRound | undefined;
+//# sourceMappingURL=request.d.ts.map

package/dist/server/request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../../src/server/request.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAElE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAKvD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,GAAG,uBAAuB,CA0BtG;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,aAAa,EAClB,iBAAiB,EAAE,uBAAuB,GAAG,SAAS,GACrD,OAAO,CAAC,cAAc,CAAC,CAUzB;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc,GAAG,MAAM,CAStF;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEpD;AAcD;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,YAAY,GAAG,gBAAgB,GAAG,aAAa,CAAC;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,OAAO,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,qEAAqE;AACrE,eAAO,MAAM,SAAS,UAAU,CAAC;AAEjC,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,OAAO,CAAC;IACxB,sFAAsF;IACtF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;CAC1C;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,aAAa,EAClB,cAAc,EAAE,cAAc,EAC9B,QAAQ,EAAE,IAAI,CAAC,oBAAoB,EAAE,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC,GACnE,iBAAiB,GAAG,SAAS,CA+B/B"}