@mcp-ts/sdk 2.3.3 → 2.3.4

package/dist/adapters/agui-adapter.d.mts

@@ -1,4 +1,4 @@
-import { M as MCPClient, a as MultiSessionClient } from '../multi-session-client-DYNe6az3.mjs';
+import { M as MCPClient, a as MultiSessionClient } from '../multi-session-client-C7hGqzgM.mjs';
 import { d as ToolRouter } from '../tool-router-BhHsvBfP.mjs';
 import '../events-CK3N--3g.mjs';
 import '@modelcontextprotocol/sdk/types.js';

package/dist/adapters/agui-adapter.d.ts

@@ -1,4 +1,4 @@
-import { M as MCPClient, a as MultiSessionClient } from '../multi-session-client-BYtguGJm.js';
+import { M as MCPClient, a as MultiSessionClient } from '../multi-session-client-C_kPHpD5.js';
 import { d as ToolRouter } from '../tool-router-BMzhoNYt.js';
 import '../events-CK3N--3g.js';
 import '@modelcontextprotocol/sdk/types.js';

package/dist/adapters/agui-middleware.d.mts

@@ -2,7 +2,7 @@ import { Observable } from 'rxjs';
 import { Middleware, RunAgentInput, AbstractAgent, BaseEvent } from '@ag-ui/client';
 export { AbstractAgent, BaseEvent, EventType, Middleware, RunAgentInput, Tool, ToolCallEndEvent } from '@ag-ui/client';
 import { AguiTool } from './agui-adapter.mjs';
-import '../multi-session-client-DYNe6az3.mjs';
+import '../multi-session-client-C7hGqzgM.mjs';
 import '../events-CK3N--3g.mjs';
 import '@modelcontextprotocol/sdk/types.js';
 import '@modelcontextprotocol/sdk/client/auth.js';

package/dist/adapters/agui-middleware.d.ts

@@ -2,7 +2,7 @@ import { Observable } from 'rxjs';
 import { Middleware, RunAgentInput, AbstractAgent, BaseEvent } from '@ag-ui/client';
 export { AbstractAgent, BaseEvent, EventType, Middleware, RunAgentInput, Tool, ToolCallEndEvent } from '@ag-ui/client';
 import { AguiTool } from './agui-adapter.js';
-import '../multi-session-client-BYtguGJm.js';
+import '../multi-session-client-C_kPHpD5.js';
 import '../events-CK3N--3g.js';
 import '@modelcontextprotocol/sdk/types.js';
 import '@modelcontextprotocol/sdk/client/auth.js';

package/dist/adapters/ai-adapter.d.mts

@@ -1,4 +1,4 @@
-import { M as MCPClient, a as MultiSessionClient } from '../multi-session-client-DYNe6az3.mjs';
+import { M as MCPClient, a as MultiSessionClient } from '../multi-session-client-C7hGqzgM.mjs';
 import { ToolSet } from 'ai';
 import { d as ToolRouter } from '../tool-router-BhHsvBfP.mjs';
 import '../events-CK3N--3g.mjs';

package/dist/adapters/ai-adapter.d.ts

@@ -1,4 +1,4 @@
-import { M as MCPClient, a as MultiSessionClient } from '../multi-session-client-BYtguGJm.js';
+import { M as MCPClient, a as MultiSessionClient } from '../multi-session-client-C_kPHpD5.js';
 import { ToolSet } from 'ai';
 import { d as ToolRouter } from '../tool-router-BMzhoNYt.js';
 import '../events-CK3N--3g.js';

package/dist/adapters/langchain-adapter.d.mts

@@ -1,4 +1,4 @@
-import { M as MCPClient, a as MultiSessionClient } from '../multi-session-client-DYNe6az3.mjs';
+import { M as MCPClient, a as MultiSessionClient } from '../multi-session-client-C7hGqzgM.mjs';
 import { StructuredTool } from '@langchain/core/tools';
 import { d as ToolRouter } from '../tool-router-BhHsvBfP.mjs';
 import '../events-CK3N--3g.mjs';

package/dist/adapters/langchain-adapter.d.ts

@@ -1,4 +1,4 @@
-import { M as MCPClient, a as MultiSessionClient } from '../multi-session-client-BYtguGJm.js';
+import { M as MCPClient, a as MultiSessionClient } from '../multi-session-client-C_kPHpD5.js';
 import { StructuredTool } from '@langchain/core/tools';
 import { d as ToolRouter } from '../tool-router-BMzhoNYt.js';
 import '../events-CK3N--3g.js';

package/dist/adapters/mastra-adapter.d.mts

@@ -1,4 +1,4 @@
-import { M as MCPClient, a as MultiSessionClient } from '../multi-session-client-DYNe6az3.mjs';
+import { M as MCPClient, a as MultiSessionClient } from '../multi-session-client-C7hGqzgM.mjs';
 import { z } from 'zod';
 import '../events-CK3N--3g.mjs';
 import '@modelcontextprotocol/sdk/types.js';

package/dist/adapters/mastra-adapter.d.ts

@@ -1,4 +1,4 @@
-import { M as MCPClient, a as MultiSessionClient } from '../multi-session-client-BYtguGJm.js';
+import { M as MCPClient, a as MultiSessionClient } from '../multi-session-client-C_kPHpD5.js';
 import { z } from 'zod';
 import '../events-CK3N--3g.js';
 import '@modelcontextprotocol/sdk/types.js';

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-export { M as MCPClient, a as MultiSessionClient, S as StorageOAuthClientProvider } from './multi-session-client-DYNe6az3.mjs';
+export { M as MCPClient, a as MultiSessionClient, S as StorageOAuthClientProvider } from './multi-session-client-C7hGqzgM.mjs';
 export { A as AuthenticationError, C as ConfigurationError, a as ConnectionError, I as InvalidStateError, M as McpError, N as NotConnectedError, R as RpcErrorCode, b as RpcErrorCodes, S as SessionNotFoundError, c as SessionValidationError, T as ToolExecutionError, U as UnauthorizedError, s as sanitizeServerLabel } from './utils-DELRKQPU.mjs';
 export { ClientMetadata, NextMcpHandlerOptions, SSEConnectionManager, SSEHandlerOptions, Session, SessionMutationEvent, SessionMutationListener, SessionMutationType, SessionStore, createNextMcpHandler, createSSEHandler, onSessionMutation, sessions } from './server/index.mjs';
 export { D as Disposable, a as DisposableStore, E as Emitter, b as Event, M as McpConnectionEvent, c as McpConnectionState, d as McpObservabilityEvent } from './events-CK3N--3g.mjs';

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { M as MCPClient, a as MultiSessionClient, S as StorageOAuthClientProvider } from './multi-session-client-BYtguGJm.js';
+export { M as MCPClient, a as MultiSessionClient, S as StorageOAuthClientProvider } from './multi-session-client-C_kPHpD5.js';
 export { A as AuthenticationError, C as ConfigurationError, a as ConnectionError, I as InvalidStateError, M as McpError, N as NotConnectedError, R as RpcErrorCode, b as RpcErrorCodes, S as SessionNotFoundError, c as SessionValidationError, T as ToolExecutionError, U as UnauthorizedError, s as sanitizeServerLabel } from './utils-DELRKQPU.js';
 export { ClientMetadata, NextMcpHandlerOptions, SSEConnectionManager, SSEHandlerOptions, Session, SessionMutationEvent, SessionMutationListener, SessionMutationType, SessionStore, createNextMcpHandler, createSSEHandler, onSessionMutation, sessions } from './server/index.js';
 export { D as Disposable, a as DisposableStore, E as Emitter, b as Event, M as McpConnectionEvent, c as McpConnectionState, d as McpObservabilityEvent } from './events-CK3N--3g.js';

package/dist/index.js

@@ -926,7 +926,7 @@ var SupabaseStorageBackend = class {
     if ("active" in data) updateData.active = data.active;
     if ("headers" in data) updateData.headers = encryptObject(data.headers);
     if ("clientInformation" in data) updateData.client_information = data.clientInformation;
-    if ("tokens" in data) updateData.tokens = encryptObject(data.tokens);
+    if ("tokens" in data) updateData.tokens = data.tokens === void 0 ? null : encryptObject(data.tokens);
     if ("codeVerifier" in data) updateData.code_verifier = data.codeVerifier;
     if ("clientId" in data) updateData.client_id = data.clientId;
     const { data: updatedRows, error } = await this.supabase.from("mcp_sessions").update(updateData).eq("user_id", userId).eq("session_id", sessionId).select("id");
@@ -1129,7 +1129,7 @@ var NeonStorageBackend = class {
         updatedSession.active ?? false,
         encryptObject(updatedSession.headers),
         updatedSession.clientInformation,
-        encryptObject(updatedSession.tokens),
+        updatedSession.tokens === void 0 ? null : encryptObject(updatedSession.tokens),
         updatedSession.codeVerifier,
         updatedSession.clientId,
         expiresAt,
@@ -1783,14 +1783,7 @@ var RpcErrorCodes = {
 };
 
 // src/server/mcp/oauth-client.ts
-function isInvalidRefreshTokenError(error) {
-  if (!(error instanceof Error)) {
-    return false;
-  }
-  const text = `${error.name} ${error.message}`.toLowerCase();
-  return text.includes("invalidgrant") || text.includes("invalid_grant") || text.includes("invalid refresh token") || /refresh\s+token\s+(?:is\s+)?(?:invalid|expired|revoked)/i.test(text);
-}
-var MCPClient = class _MCPClient {
+var MCPClient = class {
   /**
    * Creates a new MCP client instance
    * Can be initialized with minimal options (userId + sessionId) for session restoration
@@ -2124,8 +2117,6 @@ var MCPClient = class _MCPClient {
       throw new Error(error);
     }
     try {
-      this.emitProgress("Validating OAuth tokens...");
-      await this.getValidTokens();
       this.emitStateChange("CONNECTING");
       const { transportType } = await this.tryConnect();
       this.transportType = transportType;
@@ -2450,67 +2441,6 @@ var MCPClient = class _MCPClient {
     };
     return await this.client.request(request, types_js.ReadResourceResultSchema);
   }
-  /**
-   * Refreshes the OAuth access token using the refresh token
-   * Discovers OAuth metadata from server and exchanges refresh token for new access token
-   * @returns True if refresh was successful, false otherwise
-   */
-  async refreshToken() {
-    await this.initialize();
-    if (!this.oauthProvider) {
-      return false;
-    }
-    const tokens = await this.oauthProvider.tokens();
-    if (!tokens || !tokens.refresh_token) {
-      return false;
-    }
-    const clientInformation = await this.oauthProvider.clientInformation();
-    if (!clientInformation) {
-      return false;
-    }
-    try {
-      const resourceMetadata = await auth_js.discoverOAuthProtectedResourceMetadata(this.serverUrl);
-      const authServerUrl = resourceMetadata?.authorization_servers?.[0] || this.serverUrl;
-      const authMetadata = await auth_js.discoverAuthorizationServerMetadata(authServerUrl);
-      const newTokens = await auth_js.refreshAuthorization(authServerUrl, {
-        metadata: authMetadata,
-        clientInformation,
-        refreshToken: tokens.refresh_token
-      });
-      await this.oauthProvider.saveTokens(newTokens);
-      return true;
-    } catch (error) {
-      console.error("[OAuth] Token refresh failed:", error);
-      if (isInvalidRefreshTokenError(error)) {
-        try {
-          await this.oauthProvider.invalidateCredentials?.("tokens");
-          this.emitProgress("OAuth refresh token is invalid; requesting reauthorization...");
-        } catch (invalidateError) {
-          console.warn("[OAuth] Failed to invalidate stale refresh token credentials:", invalidateError);
-        }
-      }
-      return false;
-    }
-  }
-  /**
-   * Ensures OAuth tokens are valid, refreshing them if expired
-   * Called automatically by connect() - rarely needs to be called manually
-   * @returns True if valid tokens are available, false otherwise
-   */
-  async getValidTokens() {
-    await this.initialize();
-    if (!this.oauthProvider) {
-      return false;
-    }
-    const tokens = await this.oauthProvider.tokens();
-    if (!tokens) {
-      return false;
-    }
-    if (this.oauthProvider.isTokenExpired()) {
-      return await this.refreshToken();
-    }
-    return true;
-  }
   /**
    * Reconnects to MCP server using existing OAuth provider from Redis
    * Used for session restoration in serverless environments
@@ -2642,10 +2572,14 @@ var MCPClient = class _MCPClient {
   }
   /**
    * Gets MCP server configuration for all active user sessions
-   * Loads sessions from Redis, validates OAuth tokens, refreshes if expired
-   * Returns ready-to-use configuration with valid auth headers
+   * Loads sessions from storage and returns server connection metadata.
+   * OAuth refresh is handled by SDK transports through their authProvider.
+   * @deprecated This returns legacy connection metadata only and does not
+   * include OAuth tokens or generated Authorization headers. Prefer
+   * MultiSessionClient or explicit MCPClient instances so SDK transports can
+   * own OAuth refresh and reauthorization.
    * @param userId - User ID to fetch sessions for
-   * @returns Object keyed by sanitized server labels containing transport, url, headers, etc.
+   * @returns Object keyed by sanitized server labels containing transport and url.
    * @static
    */
   static async getMcpServerConfig(userId) {
@@ -2659,29 +2593,6 @@ var MCPClient = class _MCPClient {
             await sessions.delete(userId, sessionId);
             return;
           }
-          let headers;
-          try {
-            const client = new _MCPClient({
-              userId,
-              sessionId,
-              serverId: sessionData.serverId,
-              serverUrl: sessionData.serverUrl,
-              callbackUrl: sessionData.callbackUrl,
-              serverName: sessionData.serverName,
-              transportType: sessionData.transportType,
-              headers: sessionData.headers
-            });
-            await client.initialize();
-            const hasValidTokens = await client.getValidTokens();
-            if (hasValidTokens && client.oauthProvider) {
-              const tokens = await client.oauthProvider.tokens();
-              if (tokens?.access_token) {
-                headers = { Authorization: `Bearer ${tokens.access_token}` };
-              }
-            }
-          } catch (error) {
-            console.warn(`[MCP] Failed to get OAuth tokens for ${sessionId}:`, error);
-          }
           const label = sanitizeServerLabel(
             sessionData.serverName || sessionData.serverId || "server"
           );
@@ -2691,8 +2602,7 @@ var MCPClient = class _MCPClient {
             ...sessionData.serverName && {
               serverName: sessionData.serverName,
               serverLabel: label
-            },
-            ...headers && { headers }
+            }
           };
         } catch (error) {
           await sessions.delete(userId, sessionId);