@quidli/connect-mcp 0.6.4 → 0.6.5

package/dist/mount.d.ts

@@ -8,5 +8,8 @@ export interface ConnectMcpMountOptions {
 }
 export declare function resolveEmbeddedApiBaseUrl(port: number, env?: NodeJS.ProcessEnv): string;
 export declare function isConnectMcpHost(hostname: string, env?: NodeJS.ProcessEnv): boolean;
-export declare function normalizeAcceptHeader(req: Pick<Request, 'headers'>): void;
+type NormalizableRequest = Pick<Request, 'headers'> & {
+    rawHeaders?: string[];
+};
+export declare function normalizeAcceptHeader(req: NormalizableRequest): void;
 export declare function mountConnectMcpHttp(router: IRouter, options: ConnectMcpMountOptions): void;

package/dist/mount.js

@@ -51,12 +51,44 @@ export function isConnectMcpHost(hostname, env = process.env) {
 // wildcards). A client that genuinely accepts neither is left alone and still
 // gets its 406.
 const CANONICAL_ACCEPT = 'application/json, text/event-stream';
+// The SDK's StreamableHTTPServerTransport (>= 1.26) is a wrapper that converts the
+// Node request into a web-standard Request using @hono/node-server. That converter
+// rebuilds the header set from `req.rawHeaders` and never reads `req.headers`, so
+// writing only `req.headers.accept` is invisible to the transport and the 406 still
+// fires. Write both: `headers` for anything else in the stack, `rawHeaders` for the
+// SDK. Duplicate Accept entries are collapsed, because `new Headers()` would comma
+// join them back into a value we did not intend.
+function setAcceptHeader(req, value) {
+    req.headers.accept = value;
+    const raw = req.rawHeaders;
+    if (!Array.isArray(raw)) {
+        return;
+    }
+    const rebuilt = [];
+    let written = false;
+    for (let i = 0; i + 1 < raw.length; i += 2) {
+        const key = raw[i];
+        if (key.toLowerCase() === 'accept') {
+            if (!written) {
+                rebuilt.push(key, value);
+                written = true;
+            }
+            continue;
+        }
+        rebuilt.push(key, raw[i + 1]);
+    }
+    if (!written) {
+        rebuilt.push('Accept', value);
+    }
+    raw.length = 0;
+    raw.push(...rebuilt);
+}
 export function normalizeAcceptHeader(req) {
     const raw = req.headers.accept;
     const value = Array.isArray(raw) ? raw.join(',') : (raw ?? '');
     // No Accept header means "anything" per RFC 9110.
     if (!value.trim()) {
-        req.headers.accept = CANONICAL_ACCEPT;
+        setAcceptHeader(req, CANONICAL_ACCEPT);
         return;
     }
     const types = value
@@ -65,7 +97,7 @@ export function normalizeAcceptHeader(req) {
         .filter(Boolean);
     const permits = (type) => types.includes(type) || types.includes('*/*') || types.includes(`${type.split('/')[0]}/*`);
     if (permits('application/json') && permits('text/event-stream')) {
-        req.headers.accept = CANONICAL_ACCEPT;
+        setAcceptHeader(req, CANONICAL_ACCEPT);
     }
 }
 export function mountConnectMcpHttp(router, options) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quidli/connect-mcp",
-  "version": "0.6.4",
+  "version": "0.6.5",
   "description": "Onchain reputation and identity for AI agents: score onchain reputation across social accounts, resolve handles to EVM and Solana wallet addresses, and send USDC from any MCP client.",
   "keywords": [
     "mcp",