@zackbart/connecta 0.8.1 → 0.9.0

package/src/routes/shared.ts

@@ -1,4 +1,4 @@
-import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { Implementation } from "@modelcontextprotocol/server";
 import type { ActivityActor, ActivityReadGate, ActivityStore } from "../activity.js";
 import type { CredentialVault } from "../credentials.js";
 import type { DeferredWork } from "../connector-scope.js";
@@ -18,7 +18,7 @@ export interface ServerOptions {
   publicUrl?: string;
   // The SDK's Implementation shape: name/version plus optional title,
   // websiteUrl, and icons (MCP icons spec) that clients may render.
-  serverInfo: ConstructorParameters<typeof McpServer>[0];
+  serverInfo: Implementation;
   logger: Logger;
   activity?: ActivityStore;
   activityReadGate?: ActivityReadGate;

package/src/types.ts

@@ -276,8 +276,16 @@ export interface Connector {
    * pending URL could complete consent with their own account.
    */
   verifyState?(state: string | null, ctx: ConnectorContext): Promise<boolean>;
-  /** Optional: complete a downstream OAuth flow (called by /oauth/callback/<id>). */
-  finishAuth?(code: string, ctx: ConnectorContext): Promise<void>;
+  /**
+   * Optional: complete a downstream OAuth flow (called by
+   * /oauth/callback/<id>). `callbackParams` preserves the authorization
+   * server's RFC 9207 `iss` response parameter for SDK validation.
+   */
+  finishAuth?(
+    code: string,
+    ctx: ConnectorContext,
+    callbackParams?: URLSearchParams,
+  ): Promise<void>;
   /**
    * Optional: serve a connector-owned HTTP route — for example a signed
    * download link minted by one of the connector's tools. Called only after

package/src/version.ts

@@ -4,4 +4,4 @@
  * a bump that forgets this file fails the build rather than shipping a stale
  * version to `/health` and to downstream MCP handshakes.
  */
-export const CONNECTA_VERSION = "0.8.1";
+export const CONNECTA_VERSION = "0.9.0";