@mastra/mcp 1.8.1 → 1.9.0-alpha.1

package/dist/index.js

@@ -418,6 +418,7 @@ function isReconnectableMCPError(error) {
 
 // src/client/client.ts
 var DEFAULT_SERVER_CONNECT_TIMEOUT_MSEC = 3e3;
+var DEFAULT_INSTRUCTIONS_MAX_LENGTH = 512;
 var require2 = createRequire(import.meta.url);
 var SSE_FALLBACK_STATUS_CODES = [400, 404, 405];
 var DATADOG_TRACER_TEST_SYMBOL = /* @__PURE__ */ Symbol.for("mastra.mcp.dd-trace-test-tracer");
@@ -500,6 +501,7 @@ var InternalMastraMCPClient = class extends MastraBase {
   exitHookUnsubscribe;
   sigTermHandler;
   sigHupHandler;
+  serverInstructions;
   _roots;
   requireToolApproval;
   /** Provides access to resource operations (list, read, subscribe, etc.) */
@@ -746,11 +748,19 @@ var InternalMastraMCPClient = class extends MastraBase {
         } else {
           throw new Error("Server configuration must include either a command or a url.");
         }
+        this.refreshServerInstructions();
         resolve(true);
         const originalOnClose = this.client.onclose;
         this.client.onclose = () => {
           this.log("debug", `MCP server connection closed`);
+          const staleTransport = this.transport;
+          this.transport = void 0;
           this.isConnected = null;
+          this.serverInstructions = void 0;
+          if (staleTransport) {
+            void staleTransport.close().catch(() => {
+            });
+          }
           if (typeof originalOnClose === "function") {
             originalOnClose();
           }
@@ -808,6 +818,18 @@ var InternalMastraMCPClient = class extends MastraBase {
     }
     return null;
   }
+  get instructions() {
+    return this.serverInstructions;
+  }
+  get forwardInstructions() {
+    return this.serverConfig.forwardInstructions ?? false;
+  }
+  get instructionsMaxLength() {
+    return this.serverConfig.instructionsMaxLength ?? DEFAULT_INSTRUCTIONS_MAX_LENGTH;
+  }
+  refreshServerInstructions() {
+    this.serverInstructions = this.client.getInstructions();
+  }
   async disconnect() {
     if (!this.transport) {
       this.log("debug", "Disconnect called but no transport was connected.");
@@ -825,6 +847,7 @@ var InternalMastraMCPClient = class extends MastraBase {
     } finally {
       this.transport = void 0;
       this.isConnected = null;
+      this.serverInstructions = void 0;
       if (this.exitHookUnsubscribe) {
         this.exitHookUnsubscribe();
         this.exitHookUnsubscribe = void 0;
@@ -863,6 +886,7 @@ var InternalMastraMCPClient = class extends MastraBase {
     }
     this.transport = void 0;
     this.isConnected = null;
+    this.serverInstructions = void 0;
     await this.connect();
     this.log("debug", "Successfully reconnected to MCP server");
   }
@@ -1001,7 +1025,10 @@ var InternalMastraMCPClient = class extends MastraBase {
           requireApproval,
           mcpMetadata: {
             serverName: this.name,
-            serverVersion: this.client.getServerVersion()?.version
+            serverVersion: this.client.getServerVersion()?.version,
+            serverInstructions: this.serverInstructions,
+            forwardInstructions: this.forwardInstructions,
+            instructionsMaxLength: this.instructionsMaxLength
           },
           execute: async (input, context) => {
             const operationContext = context?.requestContext ?? null;
@@ -1865,6 +1892,19 @@ To fix this you have three different options:
       await this.getConnectedClientForServer(serverName);
     }
   }
+  /**
+   * Returns instructions advertised by connected MCP servers during initialize.
+   *
+   * Servers that have not connected yet, or did not advertise instructions,
+   * return `undefined`.
+   */
+  getServerInstructions() {
+    const instructions = {};
+    for (const serverName of Object.keys(this.serverConfigs)) {
+      instructions[serverName] = this.mcpClientsById.get(serverName)?.instructions;
+    }
+    return instructions;
+  }
   /**
    * Retrieves all tools from all configured servers with namespaced names.
    *
@@ -2310,7 +2350,7 @@ function createSimpleTokenProvider(accessToken, options) {
   });
 }
 
-// ../../node_modules/.pnpm/hono@4.12.18/node_modules/hono/dist/utils/stream.js
+// ../../../../../setup-pnpm/node_modules/.bin/store/v11/links/@/hono/4.12.18/a4592d669eb2c33e4f24995614864047f2c1a155accc9d64dd2de0f4e8d608a9/node_modules/hono/dist/utils/stream.js
 var StreamingApi = class {
   writer;
   encoder;
@@ -2387,7 +2427,7 @@ var StreamingApi = class {
   }
 };
 
-// ../../node_modules/.pnpm/hono@4.12.18/node_modules/hono/dist/helper/streaming/utils.js
+// ../../../../../setup-pnpm/node_modules/.bin/store/v11/links/@/hono/4.12.18/a4592d669eb2c33e4f24995614864047f2c1a155accc9d64dd2de0f4e8d608a9/node_modules/hono/dist/helper/streaming/utils.js
 var isOldBunVersion = () => {
   const version = typeof Bun !== "undefined" ? Bun.version : void 0;
   if (version === void 0) {
@@ -2398,7 +2438,7 @@ var isOldBunVersion = () => {
   return result;
 };
 
-// ../../node_modules/.pnpm/hono@4.12.18/node_modules/hono/dist/utils/html.js
+// ../../../../../setup-pnpm/node_modules/.bin/store/v11/links/@/hono/4.12.18/a4592d669eb2c33e4f24995614864047f2c1a155accc9d64dd2de0f4e8d608a9/node_modules/hono/dist/utils/html.js
 var HtmlEscapedCallbackPhase = {
   Stringify: 1};
 var resolveCallback = async (str, phase, preserveCallbacks, context, buffer) => {
@@ -2429,7 +2469,7 @@ var resolveCallback = async (str, phase, preserveCallbacks, context, buffer) =>
   }
 };
 
-// ../../node_modules/.pnpm/hono@4.12.18/node_modules/hono/dist/helper/streaming/sse.js
+// ../../../../../setup-pnpm/node_modules/.bin/store/v11/links/@/hono/4.12.18/a4592d669eb2c33e4f24995614864047f2c1a155accc9d64dd2de0f4e8d608a9/node_modules/hono/dist/helper/streaming/sse.js
 var SSEStreamingApi = class extends StreamingApi {
   constructor(writable, readable) {
     super(writable, readable);
@@ -2736,6 +2776,7 @@ var MCPServer = class extends MCPServerBase {
   definedPrompts;
   promptOptions;
   jsonSchemaValidator;
+  mapAuthInfoToUser;
   subscriptions = /* @__PURE__ */ new Set();
   currentLoggingLevel;
   /**
@@ -2837,6 +2878,7 @@ var MCPServer = class extends MCPServerBase {
    * @param opts.prompts - Optional prompt configuration for exposing reusable templates
    * @param opts.id - Optional unique identifier (generated if not provided)
    * @param opts.description - Optional description of what the server does
+   * @param opts.mapAuthInfoToUser - Optional mapper from MCP `extra.authInfo` to the FGA user context
    *
    * @example
    * ```typescript
@@ -2873,6 +2915,7 @@ var MCPServer = class extends MCPServerBase {
     this.resourceOptions = this.mergeAppResources(opts.resources, opts.appResources);
     this.promptOptions = opts.prompts;
     this.jsonSchemaValidator = opts.jsonSchemaValidator;
+    this.mapAuthInfoToUser = opts.mapAuthInfoToUser;
     const capabilities = {
       tools: {},
       logging: { enabled: true }
@@ -3109,7 +3152,7 @@ var MCPServer = class extends MCPServerBase {
    */
   registerHandlersOnServer(serverInstance) {
     serverInstance.setRequestHandler(ListToolsRequestSchema, async (_request, extra) => {
-      const proxiedContext = this.createProxiedRequestContext(extra);
+      const proxiedContext = await this.createProxiedRequestContext(extra);
       const tools = await this.getAuthorizedConvertedToolEntries(proxiedContext);
       return {
         tools: tools.map(([, tool]) => {
@@ -3189,12 +3232,7 @@ Provided arguments: ${JSON.stringify(request.params.arguments, null, 2)}`
             return this.handleElicitationRequest(request2, serverInstance, options);
           }
         };
-        const proxiedContext = new RequestContext();
-        if (extra) {
-          Object.entries(extra).forEach(([key, value]) => {
-            proxiedContext.set(key, value);
-          });
-        }
+        const proxiedContext = await this.createProxiedRequestContext(extra);
         const mcpOptions = {
           messages: [],
           toolCallId: "",
@@ -4473,22 +4511,50 @@ Provided arguments: ${JSON.stringify(request.params.arguments, null, 2)}`
       _meta: withMastraToolStrictMeta(tool.mcp?._meta, tool.strict)
     };
   }
-  createProxiedRequestContext(extra) {
+  async createProxiedRequestContext(extra) {
     const proxiedContext = new RequestContext();
+    let extraRecord;
     if (extra && typeof extra === "object") {
-      Object.entries(extra).forEach(([key, value]) => {
+      extraRecord = extra;
+      Object.entries(extraRecord).forEach(([key, value]) => {
         proxiedContext.set(key, value);
       });
     }
+    await this.resolveMappedFGAUser(proxiedContext, extraRecord);
     return proxiedContext;
   }
+  async resolveMappedFGAUser(requestContext, extra) {
+    if (!requestContext) {
+      return void 0;
+    }
+    const existingUser = requestContext.get("user");
+    if (existingUser) {
+      return existingUser;
+    }
+    if (!this.mapAuthInfoToUser) {
+      return void 0;
+    }
+    const authInfo = extra && "authInfo" in extra ? extra.authInfo : requestContext.get("authInfo");
+    if (!authInfo) {
+      return void 0;
+    }
+    const user = await this.mapAuthInfoToUser({
+      authInfo,
+      extra: extra ?? { authInfo },
+      requestContext
+    });
+    if (user) {
+      requestContext.set("user", user);
+    }
+    return user;
+  }
   async getAuthorizedConvertedToolEntries(requestContext) {
     const entries = Object.entries(this.convertedTools);
     const fgaProvider = this.mastra?.getServer?.()?.fga;
     if (!fgaProvider) {
       return entries;
     }
-    const user = requestContext.get("user");
+    const user = await this.resolveMappedFGAUser(requestContext);
     if (!user) {
       return [];
     }
@@ -4512,17 +4578,26 @@ Provided arguments: ${JSON.stringify(request.params.arguments, null, 2)}`
     if (!fgaProvider) {
       return;
     }
-    const { checkFGA, FGADeniedError, MastraFGAPermissions } = await import('@mastra/core/auth/ee');
-    const resourceId = JSON.stringify([this.id, toolId]);
-    const user = requestContext?.get("user");
+    const { getMCPToolFGAResourceId, requireFGA, FGADeniedError, MastraFGAPermissions } = await import('@mastra/core/auth/ee');
+    const resourceId = getMCPToolFGAResourceId(this.id, toolId);
+    const user = await this.resolveMappedFGAUser(requestContext);
     if (!user) {
       throw new FGADeniedError({ id: "unknown" }, { type: "tool", id: resourceId }, MastraFGAPermissions.TOOLS_EXECUTE);
     }
-    await checkFGA({
+    await requireFGA({
       fgaProvider,
       user,
       resource: { type: "tool", id: resourceId },
-      permission: MastraFGAPermissions.TOOLS_EXECUTE
+      permission: MastraFGAPermissions.TOOLS_EXECUTE,
+      requestContext,
+      context: {
+        resourceId
+      },
+      metadata: {
+        mcpServerId: this.id,
+        mcpServerName: this.name,
+        toolId
+      }
     });
   }
   /**