@zuplo/cli 7.9.5 → 7.9.6

package/node_modules/@modelcontextprotocol/server/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { $ as BaseContext, $a as resourceUrlFromServerUrl, $i as SingleSelectEnumSchema, $n as Icon, $r as NotificationParams, $t as InboundValidationRung, A as RegisteredResourceTemplate, Aa as UnsupportedProtocolVersionErrorData, Ai as ResourceContents, An as CreateMessageResultWithTools, Ar as ListResourceTemplatesRequest, At as isTaskAugmentedRequestParams, B as preloadSchemas, Ba as JSONRPC_VERSION, Bi as ResultTypeMap, Bn as ElicitationCompleteNotification, Br as LoggingLevel, Bt as acceptedContent, C as ListResourcesCallback, Ca as ToolChoice, Ci as RequestMeta, Cn as CompleteResult, Cr as JSONValue, Ct as isInitializedNotification, D as ReadResourceTemplateCallback, Da as ToolUseContent, Di as RequestParams, Dn as CreateMessageRequestParamsBase, Dr as ListChangedOptions, Dt as isJSONRPCRequest, E as ReadResourceCallback, Ea as ToolResultContent, Ei as RequestMethod, En as CreateMessageRequestParams, Er as ListChangedHandlers, Et as isJSONRPCNotification, F as Server, Fa as CLIENT_INFO_META_KEY, Fi as ResourceTemplateType, Fn as ElicitRequest, Fr as ListRootsResult, Ft as UnsupportedProtocolVersionError, G as STDIO_DEFAULT_MAX_BUFFER_SIZE, Ga as PROTOCOL_VERSION_META_KEY, Gi as SamplingMessage, Gn as GetPromptRequest, Gr as MetaObject, Gt as StandardSchemaV1Sync, H as UriTemplate, Ha as LOG_LEVEL_META_KEY, Hi as Root, Hn as EmbeddedResource, Hr as LoggingMessageNotificationParams, Ht as inputResponse, I as ServerOptions, Ia as DEFAULT_NEGOTIATED_PROTOCOL_VERSION, Ii as ResourceUpdatedNotification, In as ElicitRequestFormParams, Ir as ListTasksRequest, It as UrlElicitationRequiredError, J as CacheHint, Ja as SUBSCRIPTION_ID_META_KEY, Ji as ServerNotification, Jn as GetTaskPayloadRequest, Jr as ModelHint, Jt as InboundHttpRequest, K as deserializeMessage, Ka as RELATED_TASK_META_KEY, Ki as SamplingMessageContentBlock, Kn as GetPromptRequestParams, Kr as MethodNotFoundError, Kt as StandardSchemaWithJSON, L as ScopeChallenge, La as INTERNAL_ERROR, Li as ResourceUpdatedNotificationParams, Ln as ElicitRequestParams, Lr as ListTasksResult, Lt as ProtocolErrorCode, M as ResourceMetadata, Ma as UntitledSingleSelectEnumSchema, Mi as ResourceListChangedNotification, Mn as Cursor, Mr as ListResourcesRequest, Mt as MissingRequiredClientCapabilityError, N as ResourceTemplate, Na as BAGGAGE_META_KEY, Ni as ResourceRequestParams, Nn as DiscoverRequest, Nr as ListResourcesResult, Nt as ProtocolError, O as RegisteredPrompt, Oa as UnsubscribeRequest, Oi as RequestTypeMap, On as CreateMessageRequestParamsWithTools, Or as ListPromptsRequest, Ot as isJSONRPCResponse, P as ToolCallback, Pa as CLIENT_CAPABILITIES_META_KEY, Pi as ResourceTemplateReference, Pn as DiscoverResult, Pr as ListRootsRequest, Pt as ResourceNotFoundError, Q as isJsonContentType, Qa as checkResourceAllowed, Qi as SetLevelRequestParams, Qn as HandlerResultTypeMap, Qr as NotificationMethod, Qt as InboundModernRoute, R as ScopeChallengeHandler, Ra as INVALID_PARAMS, Ri as Result, Rn as ElicitRequestURLParams, Rr as ListToolsRequest, Rt as InputRequiredSpec, S as CompleteResourceTemplateCallback, Sa as ToolAnnotations, Si as RequestId, Sn as CompleteRequestResourceTemplate, Sr as JSONRPCResultResponse, St as isInitializeRequest, T as PromptCallback, Ta as ToolListChangedNotification, Ti as RequestMetaObject, Tn as CreateMessageRequest, Tr as ListChangedCallback, Tt as isJSONRPCErrorResponse, U as Variables, Ua as METHOD_NOT_FOUND, Ui as RootsListChangedNotification, Un as EmptyResult, Ur as MessageClassification, Ut as ElicitInputParams, V as InMemoryTransport, Va as LATEST_PROTOCOL_VERSION, Vi as Role, Vn as ElicitationCompleteNotificationParams, Vr as LoggingMessageNotification, Vt as inputRequired, W as ReadBuffer, Wa as PARSE_ERROR, Wi as SamplingContent, Wn as EnumSchema, Wr as MessageExtraInfo, Wt as StandardSchemaV1, X as ProtocolEra, Xa as TRACEPARENT_META_KEY, Xi as ServerResult, Xn as GetTaskRequest, Xr as MultiSelectEnumSchema, Xt as InboundLegacyRoute, Y as CacheScope, Ya as SUPPORTED_PROTOCOL_VERSIONS, Yi as ServerRequest, Yn as GetTaskPayloadResult, Yr as ModelPreferences, Yt as InboundLadderRejection, Z as getDisplayName, Za as TRACESTATE_META_KEY, Zi as SetLevelRequest, Zn as GetTaskResult, Zr as Notification, Zt as InboundLegacyRouteReason, _ as PerRequestHTTPServerTransportOptions, _a as TextContent, _i as ReadResourceRequest, _n as ClientResult, _o as OAuthTokens, _r as JSONRPCErrorResponse, _t as isSpecType, a as McpHandlerRequestOptions, aa as SubscriptionsAcknowledgedNotificationParams, ai as ParseError, an as BlobResourceContents, ao as OAuthErrorCode, ar as InitializeResult, at as ProtocolOptions, b as AnyToolHandler, ba as TitledSingleSelectEnumSchema, bi as RelatedTaskMetadata, bn as CompleteRequestParams, bo as StoredOAuthClientInformation, br as JSONRPCRequest, bt as assertCompleteRequestResourceTemplate, c as McpServerFactory, ca as SubscriptionsListenResult, ci as Progress, cn as CallToolRequestParams, co as OAuthClientInformation, cr as InputRequests, ct as RequestStateAccessor, d as legacyStatelessFallback, da as TaskAugmentedRequestParams, di as ProgressToken, dn as CancelTaskResult, do as OAuthClientMetadata, dr as InputResponses, dt as FetchLike, ea as StringSchema, ei as NotificationTypeMap, en as classifyInboundRequest, eo as SdkError, er as Icons, et as ClientContext, f as InMemoryServerEventBus, fa as TaskCreationParams, fi as Prompt, fn as CancelledNotification, fo as OAuthClientRegistrationError, fr as InternalError, ft as Transport, g as PerRequestHTTPServerTransport, ga as TaskStatusNotificationParams, gi as PromptReference, gn as ClientRequest, go as OAuthTokenRevocationRequest, gr as JSONObject, gt as SpecTypes, h as ServerNotifier, ha as TaskStatusNotification, hi as PromptMessage, hn as ClientNotification, ho as OAuthProtectedResourceMetadata, hr as JSONArray, ht as SpecTypeName, i as LegacyStatelessFallbackOptions, ia as SubscriptionsAcknowledgedNotification, ii as PaginatedResult, in as BaseMetadata, io as OAuthError, ir as InitializeRequestParams, it as Protocol, j as RegisteredTool, ja as UntitledMultiSelectEnumSchema, ji as ResourceLink, jn as CreateTaskResult, jr as ListResourceTemplatesResult, jt as parseJSONRPCMessage, k as RegisteredResource, ka as UnsubscribeRequestParams, ki as Resource, kn as CreateMessageResult, kr as ListPromptsResult, kt as isJSONRPCResultResponse, l as createMcpHandler, la as SubscriptionsListenResultMeta, li as ProgressNotification, ln as CallToolResult, lo as OAuthClientInformationFull, lr as InputRequiredResult, lt as ServerContext, m as ServerEventBus, ma as TaskStatus, mi as PromptListChangedNotification, mn as ClientCapabilities, mo as OAuthMetadata, mr as InvalidRequestError, mt as createFetchWithInit, n as IsLegacyRequestOptions, na as SubscribeRequestParams, ni as PaginatedRequest, nn as AudioContent, no as SdkHttpError, nr as Implementation, nt as NotificationOptions, o as McpHttpHandler, oa as SubscriptionsListenRequest, oi as PingRequest, on as BooleanSchema, oo as AuthorizationServerMetadata, or as InitializedNotification, ot as RequestHandlerSchemas, p as ServerEvent, pa as TaskMetadata, pi as PromptArgument, pn as CancelledNotificationParams, po as OAuthErrorResponse, pr as InvalidParamsError, pt as TransportSendOptions, q as serializeMessage, qa as SERVER_INFO_META_KEY, qi as ServerCapabilities, qn as GetPromptResult, qr as MissingRequiredClientCapabilityErrorData, qt as InboundClassificationOutcome, r as LegacyHttpHandler, ra as SubscriptionFilter, ri as PaginatedRequestParams, rn as AuthInfo, ro as SdkHttpErrorData, rr as InitializeRequest, rt as ProgressCallback, s as McpRequestContext, sa as SubscriptionsListenRequestParams, si as PrimitiveSchemaDefinition, sn as CallToolRequest, so as IdJagTokenExchangeResponse, sr as InputRequest, st as RequestOptions, t as CreateMcpHandlerOptions, ta as SubscribeRequest, ti as NumberSchema, tn as Annotations, to as SdkErrorCode, tr as ImageContent, tt as DEFAULT_REQUEST_TIMEOUT_MSEC, u as isLegacyRequest, ua as Task, ui as ProgressNotificationParams, un as CancelTaskRequest, uo as OAuthClientInformationMixed, ur as InputResponse, ut as mergeCapabilities, v as PerRequestMessageExtra, va as TextResourceContents, vi as ReadResourceRequestParams, vn as CompatibilityCallToolResult, vo as OpenIdProviderDiscoveryMetadata, vr as JSONRPCMessage, vt as specTypeSchemas, w as McpServer, wa as ToolExecution, wi as RequestMetaEnvelope, wn as ContentBlock, wr as LegacyTitledEnumSchema, wt as isInputRequiredResult, x as BaseToolCallback, xa as Tool, xi as Request$1, xn as CompleteRequestPrompt, xo as StoredOAuthTokens, xr as JSONRPCResponse, xt as isCallToolResult, y as PerRequestResponseMode, ya as TitledMultiSelectEnumSchema, yi as ReadResourceResult, yn as CompleteRequest, yo as OpenIdProviderMetadata, yr as JSONRPCNotification, yt as assertCompleteRequestPrompt, z as requireScopes, za as INVALID_REQUEST, zi as ResultMetaObject, zn as ElicitResult, zr as ListToolsResult, zt as InputResponseView } from "./createMcpHandler-LSKhyqpU.cjs";
+import { $ as isJsonContentType, $a as checkResourceAllowed, $i as SetLevelRequestParams, $n as HandlerResultTypeMap, $r as NotificationMethod, $t as InboundModernRoute, A as RegisteredResource, Aa as UnsubscribeRequestParams, Ai as Resource, An as CreateMessageResult, Ar as ListPromptsResult, At as isJSONRPCResultResponse, B as requireScopes, Ba as INVALID_REQUEST, Bi as ResultMetaObject, Bn as ElicitResult, Br as ListToolsResult, Bt as InputResponseView, C as ListResourcesCallback, Ca as ToolAnnotations, Ci as RequestId, Cn as CompleteRequestResourceTemplate, Cr as JSONRPCResultResponse, Ct as isInitializeRequest, D as ReadResourceCallback, Da as ToolResultContent, Di as RequestMethod, Dn as CreateMessageRequestParams, Dr as ListChangedHandlers, Dt as isJSONRPCNotification, E as PromptCallback, Ea as ToolListChangedNotification, Ei as RequestMetaObject, En as CreateMessageRequest, Er as ListChangedCallback, Et as isJSONRPCErrorResponse, F as ToolCallback, Fa as CLIENT_CAPABILITIES_META_KEY, Fi as ResourceTemplateReference, Fn as DiscoverResult, Fr as ListRootsRequest, Ft as ResourceNotFoundError, G as ReadBuffer, Ga as PARSE_ERROR, Gi as SamplingContent, Gn as EnumSchema, Gr as MessageExtraInfo, Gt as StandardSchemaV1, H as InMemoryTransport, Ha as LATEST_PROTOCOL_VERSION, Hi as Role, Hn as ElicitationCompleteNotificationParams, Hr as LoggingMessageNotification, Ht as inputRequired, I as Server, Ia as CLIENT_INFO_META_KEY, Ii as ResourceTemplateType, In as ElicitRequest, Ir as ListRootsResult, It as UnsupportedProtocolVersionError, J as serializeMessage, Ja as SERVER_INFO_META_KEY, Ji as ServerCapabilities, Jn as GetPromptResult, Jr as MissingRequiredClientCapabilityErrorData, Jt as InboundClassificationOutcome, K as STDIO_DEFAULT_MAX_BUFFER_SIZE, Ka as PROTOCOL_VERSION_META_KEY, Ki as SamplingMessage, Kn as GetPromptRequest, Kr as MetaObject, Kt as StandardSchemaV1Sync, L as ServerOptions, La as DEFAULT_NEGOTIATED_PROTOCOL_VERSION, Li as ResourceUpdatedNotification, Ln as ElicitRequestFormParams, Lr as ListTasksRequest, Lt as UrlElicitationRequiredError, M as RegisteredTool, Ma as UntitledMultiSelectEnumSchema, Mi as ResourceLink, Mn as CreateTaskResult, Mr as ListResourceTemplatesResult, Mt as parseJSONRPCMessage, N as ResourceMetadata, Na as UntitledSingleSelectEnumSchema, Ni as ResourceListChangedNotification, Nn as Cursor, Nr as ListResourcesRequest, Nt as MissingRequiredClientCapabilityError, O as ReadResourceTemplateCallback, Oa as ToolUseContent, Oi as RequestParams, On as CreateMessageRequestParamsBase, Or as ListChangedOptions, Ot as isJSONRPCRequest, P as ResourceTemplate, Pa as BAGGAGE_META_KEY, Pi as ResourceRequestParams, Pn as DiscoverRequest, Pr as ListResourcesResult, Pt as ProtocolError, Q as getDisplayName, Qa as TRACESTATE_META_KEY, Qi as SetLevelRequest, Qn as GetTaskResult, Qr as Notification, Qt as InboundLegacyRouteReason, R as ScopeChallenge, Ra as INTERNAL_ERROR, Ri as ResourceUpdatedNotificationParams, Rn as ElicitRequestParams, Rr as ListTasksResult, Rt as ProtocolErrorCode, S as CompleteResourceTemplateCallback, Sa as Tool, Si as Request$1, Sn as CompleteRequestPrompt, So as StoredOAuthTokens, Sr as JSONRPCResponse, St as isCallToolResult, T as McpServerOptions, Ta as ToolExecution, Ti as RequestMetaEnvelope, Tn as ContentBlock, Tr as LegacyTitledEnumSchema, Tt as isInputRequiredResult, U as UriTemplate, Ua as LOG_LEVEL_META_KEY, Ui as Root, Un as EmbeddedResource, Ur as LoggingMessageNotificationParams, Ut as inputResponse, V as preloadSchemas, Va as JSONRPC_VERSION, Vi as ResultTypeMap, Vn as ElicitationCompleteNotification, Vr as LoggingLevel, Vt as acceptedContent, W as Variables, Wa as METHOD_NOT_FOUND, Wi as RootsListChangedNotification, Wn as EmptyResult, Wr as MessageClassification, Wt as ElicitInputParams, X as CacheScope, Xa as SUPPORTED_PROTOCOL_VERSIONS, Xi as ServerRequest, Xn as GetTaskPayloadResult, Xr as ModelPreferences, Xt as InboundLadderRejection, Y as CacheHint, Ya as SUBSCRIPTION_ID_META_KEY, Yi as ServerNotification, Yn as GetTaskPayloadRequest, Yr as ModelHint, Yt as InboundHttpRequest, Z as ProtocolEra, Za as TRACEPARENT_META_KEY, Zi as ServerResult, Zn as GetTaskRequest, Zr as MultiSelectEnumSchema, Zt as InboundLegacyRoute, _ as PerRequestHTTPServerTransportOptions, _a as TaskStatusNotificationParams, _i as PromptReference, _n as ClientRequest, _o as OAuthTokenRevocationRequest, _r as JSONObject, _t as SpecTypes, a as McpHandlerRequestOptions, aa as SubscriptionsAcknowledgedNotification, ai as PaginatedResult, an as BaseMetadata, ao as OAuthError, ar as InitializeRequestParams, at as Protocol, b as AnyToolHandler, ba as TitledMultiSelectEnumSchema, bi as ReadResourceResult, bn as CompleteRequest, bo as OpenIdProviderMetadata, br as JSONRPCNotification, bt as assertCompleteRequestPrompt, c as McpServerFactory, ca as SubscriptionsListenRequestParams, ci as PrimitiveSchemaDefinition, cn as CallToolRequest, co as IdJagTokenExchangeResponse, cr as InputRequest, ct as RequestOptions, d as legacyStatelessFallback, da as Task, di as ProgressNotificationParams, dn as CancelTaskRequest, do as OAuthClientInformationMixed, dr as InputResponse, dt as mergeCapabilities, ea as SingleSelectEnumSchema, ei as NotificationParams, en as InboundValidationRung, eo as resourceUrlFromServerUrl, er as Icon, et as BaseContext, f as InMemoryServerEventBus, fa as TaskAugmentedRequestParams, fi as ProgressToken, fn as CancelTaskResult, fo as OAuthClientMetadata, fr as InputResponses, ft as FetchLike, g as PerRequestHTTPServerTransport, ga as TaskStatusNotification, gi as PromptMessage, gn as ClientNotification, go as OAuthProtectedResourceMetadata, gr as JSONArray, gt as SpecTypeName, h as ServerNotifier, ha as TaskStatus, hi as PromptListChangedNotification, hn as ClientCapabilities, ho as OAuthMetadata, hr as InvalidRequestError, ht as createFetchWithInit, i as LegacyStatelessFallbackOptions, ia as SubscriptionFilter, ii as PaginatedRequestParams, in as AuthInfo, io as SdkHttpErrorData, ir as InitializeRequest, it as ProgressCallback, j as RegisteredResourceTemplate, ja as UnsupportedProtocolVersionErrorData, ji as ResourceContents, jn as CreateMessageResultWithTools, jr as ListResourceTemplatesRequest, jt as isTaskAugmentedRequestParams, k as RegisteredPrompt, ka as UnsubscribeRequest, ki as RequestTypeMap, kn as CreateMessageRequestParamsWithTools, kr as ListPromptsRequest, kt as isJSONRPCResponse, l as createMcpHandler, la as SubscriptionsListenResult, li as Progress, ln as CallToolRequestParams, lo as OAuthClientInformation, lr as InputRequests, lt as RequestStateAccessor, m as ServerEventBus, ma as TaskMetadata, mi as PromptArgument, mn as CancelledNotificationParams, mo as OAuthErrorResponse, mr as InvalidParamsError, mt as TransportSendOptions, n as IsLegacyRequestOptions, na as SubscribeRequest, ni as NumberSchema, nn as Annotations, no as SdkErrorCode, nr as ImageContent, nt as DEFAULT_REQUEST_TIMEOUT_MSEC, o as McpHttpHandler, oa as SubscriptionsAcknowledgedNotificationParams, oi as ParseError, on as BlobResourceContents, oo as OAuthErrorCode, or as InitializeResult, ot as ProtocolOptions, p as ServerEvent, pa as TaskCreationParams, pi as Prompt, pn as CancelledNotification, po as OAuthClientRegistrationError, pr as InternalError, pt as Transport, q as deserializeMessage, qa as RELATED_TASK_META_KEY, qi as SamplingMessageContentBlock, qn as GetPromptRequestParams, qr as MethodNotFoundError, qt as StandardSchemaWithJSON, r as LegacyHttpHandler, ra as SubscribeRequestParams, ri as PaginatedRequest, rn as AudioContent, ro as SdkHttpError, rr as Implementation, rt as NotificationOptions, s as McpRequestContext, sa as SubscriptionsListenRequest, si as PingRequest, sn as BooleanSchema, so as AuthorizationServerMetadata, sr as InitializedNotification, st as RequestHandlerSchemas, t as CreateMcpHandlerOptions, ta as StringSchema, ti as NotificationTypeMap, tn as classifyInboundRequest, to as SdkError, tr as Icons, tt as ClientContext, u as isLegacyRequest, ua as SubscriptionsListenResultMeta, ui as ProgressNotification, un as CallToolResult, uo as OAuthClientInformationFull, ur as InputRequiredResult, ut as ServerContext, v as PerRequestMessageExtra, va as TextContent, vi as ReadResourceRequest, vn as ClientResult, vo as OAuthTokens, vr as JSONRPCErrorResponse, vt as isSpecType, w as McpServer, wa as ToolChoice, wi as RequestMeta, wn as CompleteResult, wr as JSONValue, wt as isInitializedNotification, x as BaseToolCallback, xa as TitledSingleSelectEnumSchema, xi as RelatedTaskMetadata, xn as CompleteRequestParams, xo as StoredOAuthClientInformation, xr as JSONRPCRequest, xt as assertCompleteRequestResourceTemplate, y as PerRequestResponseMode, ya as TextResourceContents, yi as ReadResourceRequestParams, yn as CompatibilityCallToolResult, yo as OpenIdProviderDiscoveryMetadata, yr as JSONRPCMessage, yt as specTypeSchemas, z as ScopeChallengeHandler, za as INVALID_PARAMS, zi as Result, zn as ElicitRequestURLParams, zr as ListToolsRequest, zt as InputRequiredSpec } from "./createMcpHandler-DZmmlN8e.cjs";
 import { i as jsonSchemaValidator, n as JsonSchemaValidator, r as JsonSchemaValidatorResult, t as JsonSchemaType } from "./types-DsbMXNFL.cjs";
 
 //#region src/server/completable.d.ts
@@ -105,12 +105,34 @@ interface BearerAuthOptions {
    */
   resourceMetadataUrl?: string;
 }
+/**
+ * Options for {@link verifyBearerToken} and {@link requireBearerAuth}:
+ * {@link BearerAuthOptions} plus `expectedResource`.
+ */
+interface VerifyBearerTokenOptions extends BearerAuthOptions {
+  /**
+   * Accept only tokens issued for this resource (the token's audience):
+   * the value your authorization server puts into tokens meant for this
+   * server, usually the server's URL (its
+   * {@link https://datatracker.ietf.org/doc/html/rfc8707 | RFC 8707}
+   * resource identifier).
+   *
+   * When set, a token is accepted only if the verifier reports that value
+   * in `AuthInfo.resource`. The two are compared as strings, ignoring a
+   * fragment and one trailing slash. A token reported for another value, or
+   * for none, is refused with `401 invalid_token`, so the verifier has to
+   * fill `AuthInfo.resource`, for example from the token's `aud` claim.
+   * When unset, `AuthInfo.resource` is not compared with anything.
+   */
+  expectedResource?: URL;
+}
 /**
  * Validate a raw `Authorization` header value as a Bearer token and return
  * the verified {@link AuthInfo}.
  *
  * The runtime-neutral core of Bearer authentication: it parses the header,
- * runs the verifier, enforces `requiredScopes`, and rejects tokens without an
+ * runs the verifier, compares the token's resource with `expectedResource`,
+ * enforces `requiredScopes`, and rejects tokens without an
  * expiration or past it. On any failure it throws an {@link OAuthError} —
  * pass that to {@link bearerAuthChallengeResponse} for the matching HTTP
  * answer, or use {@link requireBearerAuth} to get both steps as one call.
@@ -118,7 +140,7 @@ interface BearerAuthOptions {
  * Framework adapters build on this: `requireBearerAuth` from
  * `@modelcontextprotocol/express` feeds it `req.headers.authorization`.
  */
-declare function verifyBearerToken(authorizationHeader: string | null | undefined, options: BearerAuthOptions): Promise<AuthInfo>;
+declare function verifyBearerToken(authorizationHeader: string | null | undefined, options: VerifyBearerTokenOptions): Promise<AuthInfo>;
 /**
  * Build the HTTP answer for a Bearer authentication failure.
  *
@@ -150,7 +172,7 @@ declare function bearerAuthChallengeResponse(error: unknown, options?: Pick<Bear
  * }
  * ```
  */
-declare function requireBearerAuth(options: BearerAuthOptions): (request: Request) => Promise<AuthInfo | Response>;
+declare function requireBearerAuth(options: VerifyBearerTokenOptions): (request: Request) => Promise<AuthInfo | Response>;
 //#endregion
 //#region src/server/middleware/hostHeaderValidation.d.ts
 type HostHeaderValidationResult = {
@@ -305,6 +327,11 @@ type OriginValidationResult = {
  *   and only browser-originated requests carry the header this check defends against.
  * - Allowlist items are hostnames only (no scheme, no port), the same convention as
  *   `validateHostHeader`. For IPv6, include brackets (e.g. `[::1]`).
+ * - A browser extension's origin carries its extension ID as the hostname; list the
+ *   ID to allow one extension. An allowlist item of the form `<scheme>://*`
+ *   (lowercase, e.g. `moz-extension://*`) allows every origin of that scheme, which
+ *   Firefox needs because its extension IDs differ on every install.
+ *   `http://*` and `https://*` are not honoured: list websites by hostname.
  * - Any present value that cannot be parsed as an origin URL — including the literal
  *   `null` origin browsers send for opaque contexts — is rejected (deny on failure).
  */
@@ -603,6 +630,10 @@ interface HandleRequestOptions {
  * @example Hono.js
  * ```ts source="./streamableHttp.examples.ts#WebStandardStreamableHTTPServerTransport_hono"
  * app.all('/mcp', async c => {
+ *     // Stateless example: create a server and a transport per request.
+ *     const server = new McpServer({ name: 'my-server', version: '1.0.0' });
+ *     const transport = new WebStandardStreamableHTTPServerTransport({ sessionIdGenerator: undefined });
+ *     await server.connect(transport);
  *     return transport.handleRequest(c.req.raw);
  * });
  * ```
@@ -611,6 +642,10 @@ interface HandleRequestOptions {
  * ```ts source="./streamableHttp.examples.ts#WebStandardStreamableHTTPServerTransport_workers"
  * const worker = {
  *     async fetch(request: Request): Promise<Response> {
+ *         // Stateless example: create a server and a transport per request.
+ *         const server = new McpServer({ name: 'my-server', version: '1.0.0' });
+ *         const transport = new WebStandardStreamableHTTPServerTransport({ sessionIdGenerator: undefined });
+ *         await server.connect(transport);
  *         return transport.handleRequest(request);
  *     }
  * };
@@ -619,6 +654,7 @@ interface HandleRequestOptions {
 declare class WebStandardStreamableHTTPServerTransport implements Transport {
   private sessionIdGenerator;
   private _started;
+  private _hasHandledRequest;
   private _closed;
   private _streamMapping;
   private _requestToStreamMapping;
@@ -770,5 +806,5 @@ declare function readRequestBody(request: Request, maxBytes?: number): Promise<{
 //#region src/fromJsonSchema.d.ts
 declare function fromJsonSchema<T = unknown>(schema: JsonSchemaType, validator?: jsonSchemaValidator): StandardSchemaWithJSON<T, T>;
 //#endregion
-export { Annotations, type AnyToolHandler, AudioContent, AuthInfo, type AuthMetadataOptions, type AuthorizationServerMetadata, BAGGAGE_META_KEY, type BaseContext, BaseMetadata, type BaseToolCallback, type BearerAuthOptions, BlobResourceContents, BooleanSchema, CLIENT_CAPABILITIES_META_KEY, CLIENT_INFO_META_KEY, type CacheHint, type CacheScope, CallToolRequest, CallToolRequestParams, CallToolResult, CancelTaskRequest, CancelTaskResult, CancelledNotification, CancelledNotificationParams, ClientCapabilities, type ClientContext, ClientNotification, ClientRequest, ClientResult, CompatibilityCallToolResult, type CompletableSchema, type CompleteCallback, CompleteRequest, CompleteRequestParams, CompleteRequestPrompt, CompleteRequestResourceTemplate, type CompleteResourceTemplateCallback, CompleteResult, ContentBlock, type CreateMcpHandlerOptions, CreateMessageRequest, CreateMessageRequestParams, CreateMessageRequestParamsBase, CreateMessageRequestParamsWithTools, CreateMessageResult, CreateMessageResultWithTools, CreateTaskResult, Cursor, DEFAULT_MAX_REQUEST_BODY_SIZE, DEFAULT_NEGOTIATED_PROTOCOL_VERSION, DEFAULT_REQUEST_TIMEOUT_MSEC, DiscoverRequest, DiscoverResult, type ElicitInputParams, ElicitRequest, ElicitRequestFormParams, ElicitRequestParams, ElicitRequestURLParams, ElicitResult, ElicitationCompleteNotification, ElicitationCompleteNotificationParams, EmbeddedResource, EmptyResult, EnumSchema, type EventId, type EventStore, type FetchLike, GetPromptRequest, GetPromptRequestParams, GetPromptResult, GetTaskPayloadRequest, GetTaskPayloadResult, GetTaskRequest, GetTaskResult, type HandleRequestOptions, HandlerResultTypeMap, type HostHeaderValidationResult, INTERNAL_ERROR, INVALID_PARAMS, INVALID_REQUEST, Icon, Icons, type IdJagTokenExchangeResponse, ImageContent, Implementation, InMemoryServerEventBus, InMemoryTransport, type InboundClassificationOutcome, type InboundHttpRequest, type InboundLadderRejection, type InboundLegacyRoute, type InboundLegacyRouteReason, type InboundModernRoute, type InboundValidationRung, InitializeRequest, InitializeRequestParams, InitializeResult, InitializedNotification, InputRequest, InputRequests, InputRequiredResult, type InputRequiredSpec, InputResponse, type InputResponseView, InputResponses, InternalError, InvalidParamsError, InvalidRequestError, type IsLegacyRequestOptions, JSONArray, JSONObject, JSONRPCErrorResponse, JSONRPCMessage, JSONRPCNotification, JSONRPCRequest, JSONRPCResponse, JSONRPCResultResponse, JSONRPC_VERSION, JSONValue, type JsonSchemaType, type JsonSchemaValidator, type JsonSchemaValidatorResult, LATEST_PROTOCOL_VERSION, LOG_LEVEL_META_KEY, type LegacyHttpHandler, type LegacyStatelessFallbackOptions, LegacyTitledEnumSchema, ListChangedCallback, ListChangedHandlers, ListChangedOptions, ListPromptsRequest, ListPromptsResult, ListResourceTemplatesRequest, ListResourceTemplatesResult, type ListResourcesCallback, ListResourcesRequest, ListResourcesResult, ListRootsRequest, ListRootsResult, ListTasksRequest, ListTasksResult, ListToolsRequest, ListToolsResult, LoggingLevel, LoggingMessageNotification, LoggingMessageNotificationParams, METHOD_NOT_FOUND, type McpHandlerRequestOptions, type McpHttpHandler, type McpRequestContext, McpServer, type McpServerFactory, MessageClassification, MessageExtraInfo, MetaObject, MethodNotFoundError, MissingRequiredClientCapabilityError, MissingRequiredClientCapabilityErrorData, ModelHint, ModelPreferences, MultiSelectEnumSchema, Notification, NotificationMethod, type NotificationOptions, NotificationParams, NotificationTypeMap, NumberSchema, type OAuthClientInformation, type OAuthClientInformationFull, type OAuthClientInformationMixed, type OAuthClientMetadata, type OAuthClientRegistrationError, OAuthError, OAuthErrorCode, type OAuthErrorResponse, type OAuthMetadata, type OAuthProtectedResourceMetadata, type OAuthTokenRevocationRequest, type OAuthTokenVerifier, type OAuthTokens, type OpenIdProviderDiscoveryMetadata, type OpenIdProviderMetadata, type OriginValidationResult, PARSE_ERROR, PROTOCOL_VERSION_META_KEY, PaginatedRequest, PaginatedRequestParams, PaginatedResult, ParseError, PerRequestHTTPServerTransport, type PerRequestHTTPServerTransportOptions, type PerRequestMessageExtra, type PerRequestResponseMode, PingRequest, PrimitiveSchemaDefinition, Progress, type ProgressCallback, ProgressNotification, ProgressNotificationParams, ProgressToken, Prompt, PromptArgument, type PromptCallback, PromptListChangedNotification, PromptMessage, PromptReference, Protocol, type ProtocolEra, ProtocolError, ProtocolErrorCode, type ProtocolOptions, RELATED_TASK_META_KEY, ReadBuffer, type ReadResourceCallback, ReadResourceRequest, ReadResourceRequestParams, ReadResourceResult, type ReadResourceTemplateCallback, type RegisteredPrompt, type RegisteredResource, type RegisteredResourceTemplate, type RegisteredTool, RelatedTaskMetadata, Request$1 as Request, type RequestHandlerSchemas, RequestId, RequestMeta, RequestMetaEnvelope, RequestMetaObject, RequestMethod, type RequestOptions, RequestParams, type RequestStateAccessor, type RequestStateCodec, type RequestStateCodecOptions, RequestTypeMap, Resource, ResourceContents, ResourceLink, ResourceListChangedNotification, type ResourceMetadata, ResourceNotFoundError, ResourceRequestParams, ResourceTemplate, ResourceTemplateReference, ResourceTemplateType, ResourceUpdatedNotification, ResourceUpdatedNotificationParams, Result, ResultMetaObject, ResultTypeMap, Role, Root, RootsListChangedNotification, SERVER_INFO_META_KEY, STDIO_DEFAULT_MAX_BUFFER_SIZE, SUBSCRIPTION_ID_META_KEY, SUPPORTED_PROTOCOL_VERSIONS, SamplingContent, SamplingMessage, SamplingMessageContentBlock, type ScopeChallenge, type ScopeChallengeHandler, SdkError, SdkErrorCode, SdkHttpError, type SdkHttpErrorData, Server, ServerCapabilities, type ServerContext, type ServerEvent, type ServerEventBus, ServerNotification, type ServerNotifier, type ServerOptions, ServerRequest, ServerResult, SetLevelRequest, SetLevelRequestParams, SingleSelectEnumSchema, type SpecTypeName, type SpecTypes, type StandardSchemaV1, type StandardSchemaV1Sync, type StandardSchemaWithJSON, type StoredOAuthClientInformation, type StoredOAuthTokens, type StreamId, StringSchema, SubscribeRequest, SubscribeRequestParams, SubscriptionFilter, SubscriptionsAcknowledgedNotification, SubscriptionsAcknowledgedNotificationParams, SubscriptionsListenRequest, SubscriptionsListenRequestParams, SubscriptionsListenResult, SubscriptionsListenResultMeta, TRACEPARENT_META_KEY, TRACESTATE_META_KEY, Task, TaskAugmentedRequestParams, TaskCreationParams, TaskMetadata, TaskStatus, TaskStatusNotification, TaskStatusNotificationParams, TextContent, TextResourceContents, TitledMultiSelectEnumSchema, TitledSingleSelectEnumSchema, Tool, ToolAnnotations, type ToolCallback, ToolChoice, ToolExecution, ToolListChangedNotification, ToolResultContent, ToolUseContent, type Transport, type TransportSendOptions, UnsubscribeRequest, UnsubscribeRequestParams, UnsupportedProtocolVersionError, UnsupportedProtocolVersionErrorData, UntitledMultiSelectEnumSchema, UntitledSingleSelectEnumSchema, UriTemplate, UrlElicitationRequiredError, type Variables, WebStandardStreamableHTTPServerTransport, type WebStandardStreamableHTTPServerTransportOptions, acceptedContent, assertCompleteRequestPrompt, assertCompleteRequestResourceTemplate, bearerAuthChallengeResponse, buildOAuthProtectedResourceMetadata, checkResourceAllowed, classifyInboundRequest, completable, createFetchWithInit, createMcpHandler, createRequestStateCodec, deserializeMessage, fromJsonSchema, getDisplayName, getOAuthProtectedResourceMetadataUrl, hostHeaderValidationResponse, inputRequired, inputResponse, isCallToolResult, isCompletable, isInitializeRequest, isInitializedNotification, isInputRequiredResult, isJSONRPCErrorResponse, isJSONRPCNotification, isJSONRPCRequest, isJSONRPCResponse, isJSONRPCResultResponse, isJsonContentType, isLegacyRequest, isSpecType, isTaskAugmentedRequestParams, type jsonSchemaValidator, legacyStatelessFallback, localhostAllowedHostnames, localhostAllowedOrigins, mergeCapabilities, oauthMetadataResponse, originValidationResponse, parseJSONRPCMessage, preloadSchemas, readRequestBody, requireBearerAuth, requireScopes, resourceUrlFromServerUrl, serializeMessage, specTypeSchemas, validateHostHeader, validateOriginHeader, verifyBearerToken };
+export { Annotations, type AnyToolHandler, AudioContent, AuthInfo, type AuthMetadataOptions, type AuthorizationServerMetadata, BAGGAGE_META_KEY, type BaseContext, BaseMetadata, type BaseToolCallback, type BearerAuthOptions, BlobResourceContents, BooleanSchema, CLIENT_CAPABILITIES_META_KEY, CLIENT_INFO_META_KEY, type CacheHint, type CacheScope, CallToolRequest, CallToolRequestParams, CallToolResult, CancelTaskRequest, CancelTaskResult, CancelledNotification, CancelledNotificationParams, ClientCapabilities, type ClientContext, ClientNotification, ClientRequest, ClientResult, CompatibilityCallToolResult, type CompletableSchema, type CompleteCallback, CompleteRequest, CompleteRequestParams, CompleteRequestPrompt, CompleteRequestResourceTemplate, type CompleteResourceTemplateCallback, CompleteResult, ContentBlock, type CreateMcpHandlerOptions, CreateMessageRequest, CreateMessageRequestParams, CreateMessageRequestParamsBase, CreateMessageRequestParamsWithTools, CreateMessageResult, CreateMessageResultWithTools, CreateTaskResult, Cursor, DEFAULT_MAX_REQUEST_BODY_SIZE, DEFAULT_NEGOTIATED_PROTOCOL_VERSION, DEFAULT_REQUEST_TIMEOUT_MSEC, DiscoverRequest, DiscoverResult, type ElicitInputParams, ElicitRequest, ElicitRequestFormParams, ElicitRequestParams, ElicitRequestURLParams, ElicitResult, ElicitationCompleteNotification, ElicitationCompleteNotificationParams, EmbeddedResource, EmptyResult, EnumSchema, type EventId, type EventStore, type FetchLike, GetPromptRequest, GetPromptRequestParams, GetPromptResult, GetTaskPayloadRequest, GetTaskPayloadResult, GetTaskRequest, GetTaskResult, type HandleRequestOptions, HandlerResultTypeMap, type HostHeaderValidationResult, INTERNAL_ERROR, INVALID_PARAMS, INVALID_REQUEST, Icon, Icons, type IdJagTokenExchangeResponse, ImageContent, Implementation, InMemoryServerEventBus, InMemoryTransport, type InboundClassificationOutcome, type InboundHttpRequest, type InboundLadderRejection, type InboundLegacyRoute, type InboundLegacyRouteReason, type InboundModernRoute, type InboundValidationRung, InitializeRequest, InitializeRequestParams, InitializeResult, InitializedNotification, InputRequest, InputRequests, InputRequiredResult, type InputRequiredSpec, InputResponse, type InputResponseView, InputResponses, InternalError, InvalidParamsError, InvalidRequestError, type IsLegacyRequestOptions, JSONArray, JSONObject, JSONRPCErrorResponse, JSONRPCMessage, JSONRPCNotification, JSONRPCRequest, JSONRPCResponse, JSONRPCResultResponse, JSONRPC_VERSION, JSONValue, type JsonSchemaType, type JsonSchemaValidator, type JsonSchemaValidatorResult, LATEST_PROTOCOL_VERSION, LOG_LEVEL_META_KEY, type LegacyHttpHandler, type LegacyStatelessFallbackOptions, LegacyTitledEnumSchema, ListChangedCallback, ListChangedHandlers, ListChangedOptions, ListPromptsRequest, ListPromptsResult, ListResourceTemplatesRequest, ListResourceTemplatesResult, type ListResourcesCallback, ListResourcesRequest, ListResourcesResult, ListRootsRequest, ListRootsResult, ListTasksRequest, ListTasksResult, ListToolsRequest, ListToolsResult, LoggingLevel, LoggingMessageNotification, LoggingMessageNotificationParams, METHOD_NOT_FOUND, type McpHandlerRequestOptions, type McpHttpHandler, type McpRequestContext, McpServer, type McpServerFactory, type McpServerOptions, MessageClassification, MessageExtraInfo, MetaObject, MethodNotFoundError, MissingRequiredClientCapabilityError, MissingRequiredClientCapabilityErrorData, ModelHint, ModelPreferences, MultiSelectEnumSchema, Notification, NotificationMethod, type NotificationOptions, NotificationParams, NotificationTypeMap, NumberSchema, type OAuthClientInformation, type OAuthClientInformationFull, type OAuthClientInformationMixed, type OAuthClientMetadata, type OAuthClientRegistrationError, OAuthError, OAuthErrorCode, type OAuthErrorResponse, type OAuthMetadata, type OAuthProtectedResourceMetadata, type OAuthTokenRevocationRequest, type OAuthTokenVerifier, type OAuthTokens, type OpenIdProviderDiscoveryMetadata, type OpenIdProviderMetadata, type OriginValidationResult, PARSE_ERROR, PROTOCOL_VERSION_META_KEY, PaginatedRequest, PaginatedRequestParams, PaginatedResult, ParseError, PerRequestHTTPServerTransport, type PerRequestHTTPServerTransportOptions, type PerRequestMessageExtra, type PerRequestResponseMode, PingRequest, PrimitiveSchemaDefinition, Progress, type ProgressCallback, ProgressNotification, ProgressNotificationParams, ProgressToken, Prompt, PromptArgument, type PromptCallback, PromptListChangedNotification, PromptMessage, PromptReference, Protocol, type ProtocolEra, ProtocolError, ProtocolErrorCode, type ProtocolOptions, RELATED_TASK_META_KEY, ReadBuffer, type ReadResourceCallback, ReadResourceRequest, ReadResourceRequestParams, ReadResourceResult, type ReadResourceTemplateCallback, type RegisteredPrompt, type RegisteredResource, type RegisteredResourceTemplate, type RegisteredTool, RelatedTaskMetadata, Request$1 as Request, type RequestHandlerSchemas, RequestId, RequestMeta, RequestMetaEnvelope, RequestMetaObject, RequestMethod, type RequestOptions, RequestParams, type RequestStateAccessor, type RequestStateCodec, type RequestStateCodecOptions, RequestTypeMap, Resource, ResourceContents, ResourceLink, ResourceListChangedNotification, type ResourceMetadata, ResourceNotFoundError, ResourceRequestParams, ResourceTemplate, ResourceTemplateReference, ResourceTemplateType, ResourceUpdatedNotification, ResourceUpdatedNotificationParams, Result, ResultMetaObject, ResultTypeMap, Role, Root, RootsListChangedNotification, SERVER_INFO_META_KEY, STDIO_DEFAULT_MAX_BUFFER_SIZE, SUBSCRIPTION_ID_META_KEY, SUPPORTED_PROTOCOL_VERSIONS, SamplingContent, SamplingMessage, SamplingMessageContentBlock, type ScopeChallenge, type ScopeChallengeHandler, SdkError, SdkErrorCode, SdkHttpError, type SdkHttpErrorData, Server, ServerCapabilities, type ServerContext, type ServerEvent, type ServerEventBus, ServerNotification, type ServerNotifier, type ServerOptions, ServerRequest, ServerResult, SetLevelRequest, SetLevelRequestParams, SingleSelectEnumSchema, type SpecTypeName, type SpecTypes, type StandardSchemaV1, type StandardSchemaV1Sync, type StandardSchemaWithJSON, type StoredOAuthClientInformation, type StoredOAuthTokens, type StreamId, StringSchema, SubscribeRequest, SubscribeRequestParams, SubscriptionFilter, SubscriptionsAcknowledgedNotification, SubscriptionsAcknowledgedNotificationParams, SubscriptionsListenRequest, SubscriptionsListenRequestParams, SubscriptionsListenResult, SubscriptionsListenResultMeta, TRACEPARENT_META_KEY, TRACESTATE_META_KEY, Task, TaskAugmentedRequestParams, TaskCreationParams, TaskMetadata, TaskStatus, TaskStatusNotification, TaskStatusNotificationParams, TextContent, TextResourceContents, TitledMultiSelectEnumSchema, TitledSingleSelectEnumSchema, Tool, ToolAnnotations, type ToolCallback, ToolChoice, ToolExecution, ToolListChangedNotification, ToolResultContent, ToolUseContent, type Transport, type TransportSendOptions, UnsubscribeRequest, UnsubscribeRequestParams, UnsupportedProtocolVersionError, UnsupportedProtocolVersionErrorData, UntitledMultiSelectEnumSchema, UntitledSingleSelectEnumSchema, UriTemplate, UrlElicitationRequiredError, type Variables, type VerifyBearerTokenOptions, WebStandardStreamableHTTPServerTransport, type WebStandardStreamableHTTPServerTransportOptions, acceptedContent, assertCompleteRequestPrompt, assertCompleteRequestResourceTemplate, bearerAuthChallengeResponse, buildOAuthProtectedResourceMetadata, checkResourceAllowed, classifyInboundRequest, completable, createFetchWithInit, createMcpHandler, createRequestStateCodec, deserializeMessage, fromJsonSchema, getDisplayName, getOAuthProtectedResourceMetadataUrl, hostHeaderValidationResponse, inputRequired, inputResponse, isCallToolResult, isCompletable, isInitializeRequest, isInitializedNotification, isInputRequiredResult, isJSONRPCErrorResponse, isJSONRPCNotification, isJSONRPCRequest, isJSONRPCResponse, isJSONRPCResultResponse, isJsonContentType, isLegacyRequest, isSpecType, isTaskAugmentedRequestParams, type jsonSchemaValidator, legacyStatelessFallback, localhostAllowedHostnames, localhostAllowedOrigins, mergeCapabilities, oauthMetadataResponse, originValidationResponse, parseJSONRPCMessage, preloadSchemas, readRequestBody, requireBearerAuth, requireScopes, resourceUrlFromServerUrl, serializeMessage, specTypeSchemas, validateHostHeader, validateOriginHeader, verifyBearerToken };
 //# sourceMappingURL=index.d.cts.map

package/node_modules/@modelcontextprotocol/server/dist/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","names":[],"sources":["../src/server/completable.ts","../src/server/middleware/bearerAuth.ts","../src/server/middleware/hostHeaderValidation.ts","../src/server/middleware/oauthMetadata.ts","../src/server/middleware/originValidation.ts","../src/server/requestStateCodec.ts","../src/server/streamableHttp.ts","../src/server/requestBody.ts","../src/fromJsonSchema.ts"],"sourcesContent":[],"mappings":";;;;cAEa;KAED,2BAA2B,mBAAmB,4BAC/C,gBAAA,CAAiB,WAAW,WAHvC;cAKoB;AALpB,CAAA,EAAA,GAOK,gBAAA,CAAiB,UAPwD,CAO7C,CAP6C,CAAA,EAAA,GAOtC,OAPsC,CAO9B,gBAAA,CAAiB,UAPa,CAOF,CAPE,CAAA,EAAA,CAAA;AAElE,KAOA,eAPgB,CAAA,UAOU,gBAPV,GAO6B,gBAP7B,CAAA,GAAA;EAAW,QAAA,EAQzB,gBARyB,CAQR,CARQ,CAAA;CAAmB;AACnB,KAU3B,iBAV2B,CAAA,UAUC,gBAVD,CAAA,GAUqB,CAVrB,GAAA;EAA5B,CAWN,kBAAA,CAXuB,EAWF,eAXE,CAWc,CAXd,CAAA;CAER;;;;;;;AAIpB;;;;;;AAIA;;;;;;;AAmCA;;;;;;;;AAaA;;;;ACnDiB,iBDsCD,WCtCmB,CAAA,UDsCG,gBCxBO,CAAA,CAAA,MAAA,EDwBmB,CCxBnB,EAAA,QAAA,EDwBgC,gBCxBhC,CDwBiD,CCxBjD,CAAA,CAAA,EDwBsD,iBCxBtD,CDwBwE,CCxBxE,CAAA;AAO7C;AA2EA;;AAA6H,iBD7C7G,aAAA,CC6C6G,MAAA,EAAA,OAAA,CAAA,EAAA,MAAA,ID7CnE,iBC6CmE,CD7CjD,gBC6CiD,CAAA;;;;;;AD1G7H;AAEA;;;;;AAGoB,UCKH,kBAAA,CDLG;EAEa;;;;;;AAEjC;;;;;;AAIA;EAAwC,iBAAA,CAAA,KAAA,EAAA,MAAA,CAAA,ECWF,ODXE,CCWM,QDXN,CAAA;;;;;;AAmCxB,UCjBC,iBAAA,CDiBU;EAAW;;;EAAuC,QAAA,ECb/D,kBDa+D;EAAwC;;;AAarH;;;;ACnDA;AAqBA;AA2EA;;;;;AAkDA;;;;;EAiDgB,mBAAA,CAAiB,EAAA,MAAA;;ACxKjC;AAWA;;;;AC3CA;;;;;AA8DA;AAqBA;AA6EA;AAA+C,iBF3DzB,iBAAA,CE2DyB,mBAAA,EAAA,MAAA,GAAA,IAAA,GAAA,SAAA,EAAA,OAAA,EF3DkD,iBE2DlD,CAAA,EF3DsE,OE2DtE,CF3D8E,QE2D9E,CAAA;;;;;;;ACtJ/C;AAoBA;AA4BA;AAcA;iBH+EgB,2BAAA,2BAEF,KAAK,+DAChB;;;AI5JH;AAiDA;;;;;;;;AA0FA;;;;;;;;ACtHA;AACY,iBLoLI,iBAAA,CKpLG,OAAA,ELoLwB,iBKpLxB,CAAA,EAAA,CAAA,OAAA,ELoLsD,OKpLtD,EAAA,GLoLkE,OKpLlE,CLoL0E,QKpL1E,GLoLqF,QKpLrF,CAAA;;;KJ3BP,0BAAA;;;;EFEC,EAAA,EAAA,KAAA;EAED,SAAA,EAAA,cAAgB,GAAA,qBAAA,GAAA,cAAA;EAAW,OAAA,EAAA,MAAA;EAAmB,UAAA,CAAA,EAAA,MAAA;EACnB,QAAA,CAAA,EAAA,MAAA;CAA5B;;;;;;;AAIoC,iBEO/B,kBAAA,CFP+B,UAAA,EAAA,MAAA,GAAA,IAAA,GAAA,SAAA,EAAA,gBAAA,EAAA,MAAA,EAAA,CAAA,EEOwD,0BFPxD;AAE/C;;;AAC+B,iBE2Bf,yBAAA,CAAA,CF3Be,EAAA,MAAA,EAAA;;;AAG/B;;;;;AACK,iBEkCW,4BAAA,CFlCX,GAAA,EEkC6C,OFlC7C,EAAA,gBAAA,EAAA,MAAA,EAAA,CAAA,EEkCmF,QFlCnF,GAAA,SAAA;;;;;;AAdL;AAEY,UGGK,mBAAA,CHHW;EAAW;;;;;EAKN,aAAA,EGId,aHJc;EAA5B;;;;;EAEO,iBAAA,EGSW,GHTI;EAAW;;;EACxB,uBAAA,CAAA,EGagB,GHbhB;EAAgB;AAG9B;;;EAC0C,eAAA,CAAA,EAAA,MAAA,EAAA;EAAhB;;;EAkCV,YAAA,CAAA,EAAW,MAAA;EAAW;;;;;EAA6D,iCAAA,CAAA,EAAA,OAAA;;AAanG;;;;ACnDA;AAqBA;AA2EA;;;;AAA4H,iBEvC5G,mCAAA,CFuC4G,OAAA,EEvC/D,mBFuC+D,CAAA,EEvCzC,8BFuCyC;AAkD5H;;;;;AAiDA;;;;;AAAqF,iBErHrE,oCAAA,CFqHqE,SAAA,EErHrB,GFqHqB,CAAA,EAAA,MAAA;;;;;AC/MrF;AAgBA;AAuBA;AAWA;;;;AC3CA;;;;;AA8DA;AAqBA;AA6EA;;;;;;;iBAAgB,qBAAA,UAA+B,kBAAkB,sBAAsB;;;;;;;AHrKvF;AAEA;;;;;;;;;;;AAK+C,KIQnC,sBAAA,GJRmC;EAEnC,EAAA,EAAA,IAAA;EAA0B,MAAA,CAAA,EAAA,MAAA;EAAmB,QAAA,CAAA,EAAA,MAAA;CAC1B,GAAA;EAAjB,EAAA,EAAA,KAAA;EAAgB,SAAA,EAAA,uBAAA,GAAA,gBAAA;EAGlB,OAAA,EAAA,MAAA;EAA4B,YAAA,CAAA,EAAA,MAAA;EAAoB,QAAA,CAAA,EAAA,MAAA;CAClB;;;;AAkC1C;;;;;;;AAAoH,iBIbpG,oBAAA,CJaoG,YAAA,EAAA,MAAA,GAAA,IAAA,GAAA,SAAA,EAAA,sBAAA,EAAA,MAAA,EAAA,CAAA,EIbH,sBJaG;AAapH;;;;ACnDiB,iBGqDD,uBAAA,CAAA,CHvCsB,EAAA,MAAO,EAAA;AAO7C;AA2EA;;;;;AAkDA;;;;AAGW,iBGlFK,wBAAA,CHkFL,GAAA,EGlFmC,OHkFnC,EAAA,sBAAA,EAAA,MAAA,EAAA,CAAA,EGlF+E,QHkF/E,GAAA,SAAA;;;;;;AD/JE,UKGI,wBAAA,CLH6D;EAElE;;;;;;;EAKP,GAAA,EKII,ULJa,GAAA,MAAA;EAAsD;;;;AAE5E;EAAsC,UAAA,CAAA,EAAA,MAAA;EAAmB;;;;AAIzD;;;;;;;AAmCA;;;;;;;;EAagB,IAAA,CAAA,EAAA,CAAA,GAAA,EKtBC,aLsBY,EAA+C,GAAA,MAAA;;;;ACnD5E;AAqBA;AA2EA;;;;;AAkDA;AAEmB,UI1GF,iBJ0GE,CAAA,IAAA,OAAA,CAAA,CAAA;EAAL;;;AA+Cd;;;;;EAAqF,IAAA,CAAA,OAAA,EIhJnE,CJgJmE,EAAA,GAAA,CAAA,EIhJ1D,aJgJ0D,CAAA,EIhJ1C,OJgJ0C,CAAA,MAAA,CAAA;EAAO;;;;AC/M5F;AAgBA;AAuBA;AAWA;;6BGwB+B,gBAAgB,QAAQ;;AFnEvD;;;;;AA8DA;AAqBA;AA6EA;;;;;;;;ACtJA;AAoBA;AA4BA;AAcA;;;;AC1EA;AAiDA;;;;;;;;AA0FA;;AAA2G,iBAA3F,uBAA2F,CAAA,IAAA,OAAA,CAAA,CAAA,OAAA,EAA7C,wBAA6C,CAAA,EAAlB,iBAAkB,CAAA,CAAA,CAAA;;;ALzIvF,KMmBR,QAAA,GNnBQ,MAAA;AAEa,KMkBrB,OAAA,GNlBqB,MAAA;;;;AAAO,UMuBvB,UAAA,CNvBuB;EAAO;AAE/C;;;;;EAC8B,UAAA,CAAA,QAAA,EM2BL,QN3BK,EAAA,OAAA,EM2Bc,cN3Bd,CAAA,EM2B+B,ON3B/B,CM2BuC,ON3BvC,CAAA;EAGlB;;;;;;;AAmCZ;EAAsC,qBAAA,EAAA,OAAA,EMDF,ONCE,CAAA,EMDQ,ONCR,CMDgB,QNChB,GAAA,SAAA,CAAA;EAA0B,iBAAA,CAAA,WAAA,EME3C,ONF2C,EAAA;IAAA;EAAa,CAAb,EAAA;IAA8B,IAAA,EAAA,CAAA,OAAA,EMMlE,ONNkE,EAAA,OAAA,EMMhD,cNNgD,EAAA,GMM7B,ONN6B,CAAA,IAAA,CAAA;EAAjB,CAAA,CAAA,EMQtE,ONRsE,CMQ9D,QNR8D,CAAA;;;;AAa7E;UMqBiB,+CAAA;;;ALxEjB;AAqBA;AA2EA;;EAA6H,kBAAA,CAAA,EAAA,CAAA,GAAA,GAAA,MAAA,CAAA,GAAA,SAAA;EAAR;;AAkDrH;;;;;EAiDgB,oBAAiB,CAAA,EAAA,CAAA,CAAA,SAAA,EAAA,MAAA,EAAA,GAAA,IAAA,GK3GyB,OL2GzB,CAAA,IAAA,CAAA,CAAA,GAAA,SAAA;EAAU;;;;;;;;;AC/M3C;EAgBgB,eAAA,CAAA,EAAA,CAAA,CAAA,SAAkB,EAAA,MAAqE,EAAA,GAAA,IAAA,GIgGlD,OJhGkD,CAAA,IAA0B,CAAA,CAAA,GAAA,SAAA;EAuBjH;AAWhB;;;;EC3CiB,kBAAA,CAAA,EAAA,OAAmB;EAMjB;;;;EAwDH,UAAA,CAAA,EGwDC,UHxDD;EAqBA;AA6EhB;;;;EAA+F,YAAA,CAAA,EAAA,MAAA,EAAA;;;;ACtJ/F;AAoBA;EA4BgB,cAAA,CAAA,EAAA,MAAA,EAAA;EAcA;;;;AC1EhB;EAiDiB,4BAAiB,CAAA,EAAA,OAAA;EAShB;;;;;EAW6B,aAAA,CAAA,EAAA,MAAA;EAAO;AAsEtD;;;EAAyF,WAAA,CAAA,EAAA,MAAA;EAAiB;;;;ACtH1G;AACA;AAKA;EAOyB,kBAAA,CAAA,EAAA,MAAA;EAAmB;;;;;;;;;;EAiBqB,yBAAA,CAAA,EAAA,MAAA,EAAA;;;;AA4BjE;AAgB0D,UAsFzC,oBAAA,CAtFyC;EAYL;;;AA0ErD;EAgEa,UAAA,CAAA,EAAA,OAAA;EAyBS;;;EAGG,QAAA,CAAA,EAlFV,QAkFU;;;;;;;;;;;;;;;;;ACrRzB;AA+BA;;;;AC1BA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cFoPa,wCAAA,YAAoD;;;;;;;;;;;;;;;;;;;;;;;oBAyB3C;wBACI,wBAAwB;wBAEzB;;;sCAgCe;;;;;WAQrB;;;;;;;;;;;;;;;;;;;;qBA8FU,mBAAmB,uBAAuB,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAqrB5D;;;;;;4BAsBW;;;;;;gBAqBN;uBAA+C;MAAc;;;;;cC3nCxE;;;;;;APUb;AAAsC,iBOqBhB,eAAA,CPrBgB,OAAA,EOsBzB,OPtByB,EAAA,QAAA,CAAA,EAAA,MAAA,CAAA,EOwBnC,OPxBmC,CAAA;EAAmB,QAAA,EAAA,IAAA;CAC1B,GAAA;EAAjB,QAAA,EAAA,KAAA;EAAgB,IAAA,EAAA,MAAA;AAG9B,CAAA,CAAA;;;iBQTgB,oCAAoC,4BAA4B,sBAAsB,uBAAuB,GAAG"}
+{"version":3,"file":"index.d.cts","names":[],"sources":["../src/server/completable.ts","../src/server/middleware/bearerAuth.ts","../src/server/middleware/hostHeaderValidation.ts","../src/server/middleware/oauthMetadata.ts","../src/server/middleware/originValidation.ts","../src/server/requestStateCodec.ts","../src/server/streamableHttp.ts","../src/server/requestBody.ts","../src/fromJsonSchema.ts"],"sourcesContent":[],"mappings":";;;;cAEa;KAED,2BAA2B,mBAAmB,4BAC/C,gBAAA,CAAiB,WAAW,WAHvC;cAKoB;AALpB,CAAA,EAAA,GAOK,gBAAA,CAAiB,UAPwD,CAO7C,CAP6C,CAAA,EAAA,GAOtC,OAPsC,CAO9B,gBAAA,CAAiB,UAPa,CAOF,CAPE,CAAA,EAAA,CAAA;AAElE,KAOA,eAPgB,CAAA,UAOU,gBAPV,GAO6B,gBAP7B,CAAA,GAAA;EAAW,QAAA,EAQzB,gBARyB,CAQR,CARQ,CAAA;CAAmB;AACnB,KAU3B,iBAV2B,CAAA,UAUC,gBAVD,CAAA,GAUqB,CAVrB,GAAA;EAA5B,CAWN,kBAAA,CAXuB,EAWF,eAXE,CAWc,CAXd,CAAA;CAER;;;;;;;AAIpB;;;;;;AAIA;;;;;;;AAmCA;;;;;;;;AAaA;;;;ACnDiB,iBDsCD,WCtCmB,CAAA,UDsCG,gBCxBO,CAAA,CAAA,MAAA,EDwBmB,CCxBnB,EAAA,QAAA,EDwBgC,gBCxBhC,CDwBiD,CCxBjD,CAAA,CAAA,EDwBsD,iBCxBtD,CDwBwE,CCxBxE,CAAA;AAO7C;AAiCA;AA8EA;AAEa,iBDnFG,aAAA,CCmFH,MAAA,EAAA,OAAA,CAAA,EAAA,MAAA,IDnF6C,iBCmF7C,CDnF+D,gBCmF/D,CAAA;;;;;;ADhJb;AAEA;;;;;AAGoB,UCKH,kBAAA,CDLG;EAEa;;;;;;AAEjC;;;;;;AAIA;EAAwC,iBAAA,CAAA,KAAA,EAAA,MAAA,CAAA,ECWF,ODXE,CCWM,QDXN,CAAA;;;;;;AAmCxB,UCjBC,iBAAA,CDiBU;EAAW;;;EAAuC,QAAA,ECb/D,kBDa+D;EAAwC;;;AAarH;;;;ACnDA;AAqBA;AAiCA;AA8EA;;;;;AA0DA;;;;EAGW,mBAAA,CAAA,EAAA,MAAA;AA8CX;;;;;AAA4F,UAzL3E,wBAAA,SAAiC,iBAyL0C,CAAA;EAAO;;;;AC3PnG;AAgBA;AAuBA;AAWA;;;;AC3CA;;;EAkB8B,gBAAA,CAAA,EFwDP,GExDO;;ACR9B;AAyBA;AAgCA;AAcA;;;;ACnFA;AAiDA;;;;;;AAoB+C,iBJsEzB,iBAAA,CItEyB,mBAAA,EAAA,MAAA,GAAA,IAAA,GAAA,SAAA,EAAA,OAAA,EJwElC,wBIxEkC,CAAA,EJyE5C,OIzE4C,CJyEpC,QIzEoC,CAAA;;AAsE/C;;;;;;;;ACtHA;AACY,iBL+KI,2BAAA,CK/KG,KAAA,EAAA,OAAA,EAAA,OAAA,CAAA,ELiLL,IKjLK,CLiLA,iBKjLA,EAAA,gBAAA,GAAA,qBAAA,CAAA,CAAA,ELkLhB,QKlLgB;AAKnB;;;;;;;;;;;;;;;;AAoDA;;;;AAyC2B,iBL8HX,iBAAA,CK9HW,OAAA,EL8HgB,wBK9HhB,CAAA,EAAA,CAAA,OAAA,EL8HqD,OK9HrD,EAAA,GL8HiE,OK9HjE,CL8HyE,QK9HzE,GL8HoF,QK9HpF,CAAA;;;KJ7Hf,0BAAA;;;;EFEC,EAAA,EAAA,KAAA;EAED,SAAA,EAAA,cAAgB,GAAA,qBAAA,GAAA,cAAA;EAAW,OAAA,EAAA,MAAA;EAAmB,UAAA,CAAA,EAAA,MAAA;EACnB,QAAA,CAAA,EAAA,MAAA;CAA5B;;;;;;;AAIoC,iBEO/B,kBAAA,CFP+B,UAAA,EAAA,MAAA,GAAA,IAAA,GAAA,SAAA,EAAA,gBAAA,EAAA,MAAA,EAAA,CAAA,EEOwD,0BFPxD;AAE/C;;;AAC+B,iBE2Bf,yBAAA,CAAA,CF3Be,EAAA,MAAA,EAAA;;;AAG/B;;;;;AACK,iBEkCW,4BAAA,CFlCX,GAAA,EEkC6C,OFlC7C,EAAA,gBAAA,EAAA,MAAA,EAAA,CAAA,EEkCmF,QFlCnF,GAAA,SAAA;;;;;;AAdL;AAEY,UGGK,mBAAA,CHHW;EAAW;;;;;EAKN,aAAA,EGId,aHJc;EAA5B;;;;;EAEO,iBAAA,EGSW,GHTI;EAAW;;;EACxB,uBAAA,CAAA,EGagB,GHbhB;EAAgB;AAG9B;;;EAC0C,eAAA,CAAA,EAAA,MAAA,EAAA;EAAhB;;;EAkCV,YAAA,CAAA,EAAW,MAAA;EAAW;;;;;EAA6D,iCAAA,CAAA,EAAA,OAAA;;AAanG;;;;ACnDA;AAqBA;AAiCA;AA8EA;;;AAGG,iBE9Ea,mCAAA,CF8Eb,OAAA,EE9E0D,mBF8E1D,CAAA,EE9EgF,8BF8EhF;;AAuDH;;;;;AAiDA;;;;AAA+G,iBEjK/F,oCAAA,CFiK+F,SAAA,EEjK/C,GFiK+C,CAAA,EAAA,MAAA;;;;;;AC3P/G;AAgBA;AAuBA;AAWA;;;;AC3CA;;;;;AA8DA;AAqBA;AA6EA;;;;;;iBAAgB,qBAAA,UAA+B,kBAAkB,sBAAsB;;;;;;;AHrKvF;AAEA;;;;;;;;;;;AAK+C,KIQnC,sBAAA,GJRmC;EAEnC,EAAA,EAAA,IAAA;EAA0B,MAAA,CAAA,EAAA,MAAA;EAAmB,QAAA,CAAA,EAAA,MAAA;CAC1B,GAAA;EAAjB,EAAA,EAAA,KAAA;EAAgB,SAAA,EAAA,uBAAA,GAAA,gBAAA;EAGlB,OAAA,EAAA,MAAA;EAA4B,YAAA,CAAA,EAAA,MAAA;EAAoB,QAAA,CAAA,EAAA,MAAA;CAClB;;;;AAkC1C;;;;;;;;AAaA;;;;ACnDiB,iBG8BD,oBAAA,CHhB8B,YAAD,EAAA,MAAA,GAAA,IAAA,GAAA,SAAA,EAAA,sBAAA,EAAA,MAAA,EAAA,CAAA,EGgBoE,sBHhBpE;AAO7C;AAiCA;AA8EA;;AAGW,iBGzEK,uBAAA,CAAA,CHyEL,EAAA,MAAA,EAAA;;;AAuDX;;;;;AAiDA;;;AAAoG,iBGnKpF,wBAAA,CHmKoF,GAAA,EGnKtD,OHmKsD,EAAA,sBAAA,EAAA,MAAA,EAAA,CAAA,EGnKV,QHmKU,GAAA,SAAA;;;;;;ADzPvF,UKGI,wBAAA,CLH6D;EAElE;;;;;;;EAKP,GAAA,EKII,ULJa,GAAA,MAAA;EAAsD;;;;AAE5E;EAAsC,UAAA,CAAA,EAAA,MAAA;EAAmB;;;;AAIzD;;;;;;;AAmCA;;;;;;;;EAagB,IAAA,CAAA,EAAA,CAAA,GAAA,EKtBC,aLsBY,EAA+C,GAAA,MAAA;;;;ACnD5E;AAqBA;AAiCA;AA8EA;;;;;AA0DgB,UIpJC,iBJoJ0B,CAAA,IAAA,OAAA,CAAA,CAAA;EAExB;;;;AA+CnB;;;;EAA+G,IAAA,CAAA,OAAA,EI5L7F,CJ4L6F,EAAA,GAAA,CAAA,EI5LpF,aJ4LoF,CAAA,EI5LpE,OJ4LoE,CAAA,MAAA,CAAA;EAAnB;;;;;AC3P5F;AAgBA;AAuBA;AAWA;6BGwB+B,gBAAgB,QAAQ;;;AFnEvD;;;;;AA8DA;AAqBA;AA6EA;;;;;;;;ACtJA;AAyBA;AAgCA;AAcA;;;;ACnFA;AAiDA;;;;;;;;AA0FA;AAA8D,iBAA9C,uBAA8C,CAAA,IAAA,OAAA,CAAA,CAAA,OAAA,EAAA,wBAAA,CAAA,EAA2B,iBAA3B,CAA6C,CAA7C,CAAA;;;ALzI1C,KMmBR,QAAA,GNnBQ,MAAA;AAEa,KMkBrB,OAAA,GNlBqB,MAAA;;;;AAAO,UMuBvB,UAAA,CNvBuB;EAAO;AAE/C;;;;;EAC8B,UAAA,CAAA,QAAA,EM2BL,QN3BK,EAAA,OAAA,EM2Bc,cN3Bd,CAAA,EM2B+B,ON3B/B,CM2BuC,ON3BvC,CAAA;EAGlB;;;;;;;AAmCZ;EAAsC,qBAAA,EAAA,OAAA,EMDF,ONCE,CAAA,EMDQ,ONCR,CMDgB,QNChB,GAAA,SAAA,CAAA;EAA0B,iBAAA,CAAA,WAAA,EME3C,ONF2C,EAAA;IAAA;EAAa,CAAb,EAAA;IAA8B,IAAA,EAAA,CAAA,OAAA,EMMlE,ONNkE,EAAA,OAAA,EMMhD,cNNgD,EAAA,GMM7B,ONN6B,CAAA,IAAA,CAAA;EAAjB,CAAA,CAAA,EMQtE,ONRsE,CMQ9D,QNR8D,CAAA;;;;AAa7E;UMqBiB,+CAAA;;;ALxEjB;AAqBA;AAiCA;AA8EA;EAEa,kBAAA,CAAA,EAAA,CAAA,GAAA,GAAA,MAAA,CAAA,GAAA,SAAA;EACF;;;AAuDX;;;;EAGW,oBAAA,CAAA,EAAA,CAAA,CAAA,SAAA,EAAA,MAAA,EAAA,GAAA,IAAA,GKzG+C,OLyG/C,CAAA,IAAA,CAAA,CAAA,GAAA,SAAA;EA8CK;;;;;;;;;;EC3PJ,eAAA,CAAA,EAAA,CAAA,CAAA,SAA0B,EAAA,MAAA,EAAA,GAAA,IAAA,GIgHe,OJhHf,CAAA,IAAA,CAAA,CAAA,GAAA,SAAA;EAgBtB;AAuBhB;AAWA;;;;EC3CiB;;;;EAkBgB,UAAA,CAAA,EGoGhB,UHpGgB;EA4CjB;AAqBhB;AA6EA;;;EAAuF,YAAA,CAAA,EAAA,MAAA,EAAA;EAAQ;;;;ACtJ/F;EAyBgB,cAAA,CAAA,EAAA,MAAoB,EAAA;EAgCpB;AAchB;;;;ECnFiB,4BAAwB,CAAA,EAAA,OAAA;EAiDxB;;;;;EAoBsC,aAAA,CAAA,EAAA,MAAA;EAAR;;AAsE/C;;EAA2G,WAAA,CAAA,EAAA,MAAA;EAAlB;;;;;ACtHzF;AACA;EAKiB,kBAAU,CAAA,EAAA,MAAA;EAOF;;;;;;;;;;EAiBqB,yBAAA,CAAA,EAAA,MAAA,EAAA;;;;;AA4B7B,UAsGA,oBAAA,CAtGA;EAgByC;;;;EAsFzC,UAAA,CAAA,EAAA,OAAA;EAwEJ;;;EA2BqC,QAAA,CAAA,EAzFnC,QAyFmC;;;;;;;;;;;;;;;;;;AC5RlD;AA+BA;;;;AC1BA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cF4Pa,wCAAA,YAAoD;;;;;;;;;;;;;;;;;;;;;;;;oBA0B3C;wBACI,wBAAwB;wBAEzB;;;sCAgCe;;;;;WAQrB;;;;;;;;;;;;;;;;;;;;qBA8FU,mBAAmB,uBAAuB,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA2rB5D;;;;;;4BAsBW;;;;;;gBAqBN;uBAA+C;MAAc;;;;;cC1oCxE;;;;;;APUb;AAAsC,iBOqBhB,eAAA,CPrBgB,OAAA,EOsBzB,OPtByB,EAAA,QAAA,CAAA,EAAA,MAAA,CAAA,EOwBnC,OPxBmC,CAAA;EAAmB,QAAA,EAAA,IAAA;CAC1B,GAAA;EAAjB,QAAA,EAAA,KAAA;EAAgB,IAAA,EAAA,MAAA;AAG9B,CAAA,CAAA;;;iBQTgB,oCAAoC,4BAA4B,sBAAsB,uBAAuB,GAAG"}

package/node_modules/@modelcontextprotocol/server/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { $ as BaseContext, $a as resourceUrlFromServerUrl, $i as SingleSelectEnumSchema, $n as Icon, $r as NotificationParams, $t as InboundValidationRung, A as RegisteredResourceTemplate, Aa as UnsupportedProtocolVersionErrorData, Ai as ResourceContents, An as CreateMessageResultWithTools, Ar as ListResourceTemplatesRequest, At as isTaskAugmentedRequestParams, B as preloadSchemas, Ba as JSONRPC_VERSION, Bi as ResultTypeMap, Bn as ElicitationCompleteNotification, Br as LoggingLevel, Bt as acceptedContent, C as ListResourcesCallback, Ca as ToolChoice, Ci as RequestMeta, Cn as CompleteResult, Cr as JSONValue, Ct as isInitializedNotification, D as ReadResourceTemplateCallback, Da as ToolUseContent, Di as RequestParams, Dn as CreateMessageRequestParamsBase, Dr as ListChangedOptions, Dt as isJSONRPCRequest, E as ReadResourceCallback, Ea as ToolResultContent, Ei as RequestMethod, En as CreateMessageRequestParams, Er as ListChangedHandlers, Et as isJSONRPCNotification, F as Server, Fa as CLIENT_INFO_META_KEY, Fi as ResourceTemplateType, Fn as ElicitRequest, Fr as ListRootsResult, Ft as UnsupportedProtocolVersionError, G as STDIO_DEFAULT_MAX_BUFFER_SIZE, Ga as PROTOCOL_VERSION_META_KEY, Gi as SamplingMessage, Gn as GetPromptRequest, Gr as MetaObject, Gt as StandardSchemaV1Sync, H as UriTemplate, Ha as LOG_LEVEL_META_KEY, Hi as Root, Hn as EmbeddedResource, Hr as LoggingMessageNotificationParams, Ht as inputResponse, I as ServerOptions, Ia as DEFAULT_NEGOTIATED_PROTOCOL_VERSION, Ii as ResourceUpdatedNotification, In as ElicitRequestFormParams, Ir as ListTasksRequest, It as UrlElicitationRequiredError, J as CacheHint, Ja as SUBSCRIPTION_ID_META_KEY, Ji as ServerNotification, Jn as GetTaskPayloadRequest, Jr as ModelHint, Jt as InboundHttpRequest, K as deserializeMessage, Ka as RELATED_TASK_META_KEY, Ki as SamplingMessageContentBlock, Kn as GetPromptRequestParams, Kr as MethodNotFoundError, Kt as StandardSchemaWithJSON, L as ScopeChallenge, La as INTERNAL_ERROR, Li as ResourceUpdatedNotificationParams, Ln as ElicitRequestParams, Lr as ListTasksResult, Lt as ProtocolErrorCode, M as ResourceMetadata, Ma as UntitledSingleSelectEnumSchema, Mi as ResourceListChangedNotification, Mn as Cursor, Mr as ListResourcesRequest, Mt as MissingRequiredClientCapabilityError, N as ResourceTemplate, Na as BAGGAGE_META_KEY, Ni as ResourceRequestParams, Nn as DiscoverRequest, Nr as ListResourcesResult, Nt as ProtocolError, O as RegisteredPrompt, Oa as UnsubscribeRequest, Oi as RequestTypeMap, On as CreateMessageRequestParamsWithTools, Or as ListPromptsRequest, Ot as isJSONRPCResponse, P as ToolCallback, Pa as CLIENT_CAPABILITIES_META_KEY, Pi as ResourceTemplateReference, Pn as DiscoverResult, Pr as ListRootsRequest, Pt as ResourceNotFoundError, Q as isJsonContentType, Qa as checkResourceAllowed, Qi as SetLevelRequestParams, Qn as HandlerResultTypeMap, Qr as NotificationMethod, Qt as InboundModernRoute, R as ScopeChallengeHandler, Ra as INVALID_PARAMS, Ri as Result, Rn as ElicitRequestURLParams, Rr as ListToolsRequest, Rt as InputRequiredSpec, S as CompleteResourceTemplateCallback, Sa as ToolAnnotations, Si as RequestId, Sn as CompleteRequestResourceTemplate, Sr as JSONRPCResultResponse, St as isInitializeRequest, T as PromptCallback, Ta as ToolListChangedNotification, Ti as RequestMetaObject, Tn as CreateMessageRequest, Tr as ListChangedCallback, Tt as isJSONRPCErrorResponse, U as Variables, Ua as METHOD_NOT_FOUND, Ui as RootsListChangedNotification, Un as EmptyResult, Ur as MessageClassification, Ut as ElicitInputParams, V as InMemoryTransport, Va as LATEST_PROTOCOL_VERSION, Vi as Role, Vn as ElicitationCompleteNotificationParams, Vr as LoggingMessageNotification, Vt as inputRequired, W as ReadBuffer, Wa as PARSE_ERROR, Wi as SamplingContent, Wn as EnumSchema, Wr as MessageExtraInfo, Wt as StandardSchemaV1, X as ProtocolEra, Xa as TRACEPARENT_META_KEY, Xi as ServerResult, Xn as GetTaskRequest, Xr as MultiSelectEnumSchema, Xt as InboundLegacyRoute, Y as CacheScope, Ya as SUPPORTED_PROTOCOL_VERSIONS, Yi as ServerRequest, Yn as GetTaskPayloadResult, Yr as ModelPreferences, Yt as InboundLadderRejection, Z as getDisplayName, Za as TRACESTATE_META_KEY, Zi as SetLevelRequest, Zn as GetTaskResult, Zr as Notification, Zt as InboundLegacyRouteReason, _ as PerRequestHTTPServerTransportOptions, _a as TextContent, _i as ReadResourceRequest, _n as ClientResult, _o as OAuthTokens, _r as JSONRPCErrorResponse, _t as isSpecType, a as McpHandlerRequestOptions, aa as SubscriptionsAcknowledgedNotificationParams, ai as ParseError, an as BlobResourceContents, ao as OAuthErrorCode, ar as InitializeResult, at as ProtocolOptions, b as AnyToolHandler, ba as TitledSingleSelectEnumSchema, bi as RelatedTaskMetadata, bn as CompleteRequestParams, bo as StoredOAuthClientInformation, br as JSONRPCRequest, bt as assertCompleteRequestResourceTemplate, c as McpServerFactory, ca as SubscriptionsListenResult, ci as Progress, cn as CallToolRequestParams, co as OAuthClientInformation, cr as InputRequests, ct as RequestStateAccessor, d as legacyStatelessFallback, da as TaskAugmentedRequestParams, di as ProgressToken, dn as CancelTaskResult, do as OAuthClientMetadata, dr as InputResponses, dt as FetchLike, ea as StringSchema, ei as NotificationTypeMap, en as classifyInboundRequest, eo as SdkError, er as Icons, et as ClientContext, f as InMemoryServerEventBus, fa as TaskCreationParams, fi as Prompt, fn as CancelledNotification, fo as OAuthClientRegistrationError, fr as InternalError, ft as Transport, g as PerRequestHTTPServerTransport, ga as TaskStatusNotificationParams, gi as PromptReference, gn as ClientRequest, go as OAuthTokenRevocationRequest, gr as JSONObject, gt as SpecTypes, h as ServerNotifier, ha as TaskStatusNotification, hi as PromptMessage, hn as ClientNotification, ho as OAuthProtectedResourceMetadata, hr as JSONArray, ht as SpecTypeName, i as LegacyStatelessFallbackOptions, ia as SubscriptionsAcknowledgedNotification, ii as PaginatedResult, in as BaseMetadata, io as OAuthError, ir as InitializeRequestParams, it as Protocol, j as RegisteredTool, ja as UntitledMultiSelectEnumSchema, ji as ResourceLink, jn as CreateTaskResult, jr as ListResourceTemplatesResult, jt as parseJSONRPCMessage, k as RegisteredResource, ka as UnsubscribeRequestParams, ki as Resource, kn as CreateMessageResult, kr as ListPromptsResult, kt as isJSONRPCResultResponse, l as createMcpHandler, la as SubscriptionsListenResultMeta, li as ProgressNotification, ln as CallToolResult, lo as OAuthClientInformationFull, lr as InputRequiredResult, lt as ServerContext, m as ServerEventBus, ma as TaskStatus, mi as PromptListChangedNotification, mn as ClientCapabilities, mo as OAuthMetadata, mr as InvalidRequestError, mt as createFetchWithInit, n as IsLegacyRequestOptions, na as SubscribeRequestParams, ni as PaginatedRequest, nn as AudioContent, no as SdkHttpError, nr as Implementation, nt as NotificationOptions, o as McpHttpHandler, oa as SubscriptionsListenRequest, oi as PingRequest, on as BooleanSchema, oo as AuthorizationServerMetadata, or as InitializedNotification, ot as RequestHandlerSchemas, p as ServerEvent, pa as TaskMetadata, pi as PromptArgument, pn as CancelledNotificationParams, po as OAuthErrorResponse, pr as InvalidParamsError, pt as TransportSendOptions, q as serializeMessage, qa as SERVER_INFO_META_KEY, qi as ServerCapabilities, qn as GetPromptResult, qr as MissingRequiredClientCapabilityErrorData, qt as InboundClassificationOutcome, r as LegacyHttpHandler, ra as SubscriptionFilter, ri as PaginatedRequestParams, rn as AuthInfo, ro as SdkHttpErrorData, rr as InitializeRequest, rt as ProgressCallback, s as McpRequestContext, sa as SubscriptionsListenRequestParams, si as PrimitiveSchemaDefinition, sn as CallToolRequest, so as IdJagTokenExchangeResponse, sr as InputRequest, st as RequestOptions, t as CreateMcpHandlerOptions, ta as SubscribeRequest, ti as NumberSchema, tn as Annotations, to as SdkErrorCode, tr as ImageContent, tt as DEFAULT_REQUEST_TIMEOUT_MSEC, u as isLegacyRequest, ua as Task, ui as ProgressNotificationParams, un as CancelTaskRequest, uo as OAuthClientInformationMixed, ur as InputResponse, ut as mergeCapabilities, v as PerRequestMessageExtra, va as TextResourceContents, vi as ReadResourceRequestParams, vn as CompatibilityCallToolResult, vo as OpenIdProviderDiscoveryMetadata, vr as JSONRPCMessage, vt as specTypeSchemas, w as McpServer, wa as ToolExecution, wi as RequestMetaEnvelope, wn as ContentBlock, wr as LegacyTitledEnumSchema, wt as isInputRequiredResult, x as BaseToolCallback, xa as Tool, xi as Request$1, xn as CompleteRequestPrompt, xo as StoredOAuthTokens, xr as JSONRPCResponse, xt as isCallToolResult, y as PerRequestResponseMode, ya as TitledMultiSelectEnumSchema, yi as ReadResourceResult, yn as CompleteRequest, yo as OpenIdProviderMetadata, yr as JSONRPCNotification, yt as assertCompleteRequestPrompt, z as requireScopes, za as INVALID_REQUEST, zi as ResultMetaObject, zn as ElicitResult, zr as ListToolsResult, zt as InputResponseView } from "./createMcpHandler-CfX6zgs1.mjs";
+import { $ as isJsonContentType, $a as checkResourceAllowed, $i as SetLevelRequestParams, $n as HandlerResultTypeMap, $r as NotificationMethod, $t as InboundModernRoute, A as RegisteredResource, Aa as UnsubscribeRequestParams, Ai as Resource, An as CreateMessageResult, Ar as ListPromptsResult, At as isJSONRPCResultResponse, B as requireScopes, Ba as INVALID_REQUEST, Bi as ResultMetaObject, Bn as ElicitResult, Br as ListToolsResult, Bt as InputResponseView, C as ListResourcesCallback, Ca as ToolAnnotations, Ci as RequestId, Cn as CompleteRequestResourceTemplate, Cr as JSONRPCResultResponse, Ct as isInitializeRequest, D as ReadResourceCallback, Da as ToolResultContent, Di as RequestMethod, Dn as CreateMessageRequestParams, Dr as ListChangedHandlers, Dt as isJSONRPCNotification, E as PromptCallback, Ea as ToolListChangedNotification, Ei as RequestMetaObject, En as CreateMessageRequest, Er as ListChangedCallback, Et as isJSONRPCErrorResponse, F as ToolCallback, Fa as CLIENT_CAPABILITIES_META_KEY, Fi as ResourceTemplateReference, Fn as DiscoverResult, Fr as ListRootsRequest, Ft as ResourceNotFoundError, G as ReadBuffer, Ga as PARSE_ERROR, Gi as SamplingContent, Gn as EnumSchema, Gr as MessageExtraInfo, Gt as StandardSchemaV1, H as InMemoryTransport, Ha as LATEST_PROTOCOL_VERSION, Hi as Role, Hn as ElicitationCompleteNotificationParams, Hr as LoggingMessageNotification, Ht as inputRequired, I as Server, Ia as CLIENT_INFO_META_KEY, Ii as ResourceTemplateType, In as ElicitRequest, Ir as ListRootsResult, It as UnsupportedProtocolVersionError, J as serializeMessage, Ja as SERVER_INFO_META_KEY, Ji as ServerCapabilities, Jn as GetPromptResult, Jr as MissingRequiredClientCapabilityErrorData, Jt as InboundClassificationOutcome, K as STDIO_DEFAULT_MAX_BUFFER_SIZE, Ka as PROTOCOL_VERSION_META_KEY, Ki as SamplingMessage, Kn as GetPromptRequest, Kr as MetaObject, Kt as StandardSchemaV1Sync, L as ServerOptions, La as DEFAULT_NEGOTIATED_PROTOCOL_VERSION, Li as ResourceUpdatedNotification, Ln as ElicitRequestFormParams, Lr as ListTasksRequest, Lt as UrlElicitationRequiredError, M as RegisteredTool, Ma as UntitledMultiSelectEnumSchema, Mi as ResourceLink, Mn as CreateTaskResult, Mr as ListResourceTemplatesResult, Mt as parseJSONRPCMessage, N as ResourceMetadata, Na as UntitledSingleSelectEnumSchema, Ni as ResourceListChangedNotification, Nn as Cursor, Nr as ListResourcesRequest, Nt as MissingRequiredClientCapabilityError, O as ReadResourceTemplateCallback, Oa as ToolUseContent, Oi as RequestParams, On as CreateMessageRequestParamsBase, Or as ListChangedOptions, Ot as isJSONRPCRequest, P as ResourceTemplate, Pa as BAGGAGE_META_KEY, Pi as ResourceRequestParams, Pn as DiscoverRequest, Pr as ListResourcesResult, Pt as ProtocolError, Q as getDisplayName, Qa as TRACESTATE_META_KEY, Qi as SetLevelRequest, Qn as GetTaskResult, Qr as Notification, Qt as InboundLegacyRouteReason, R as ScopeChallenge, Ra as INTERNAL_ERROR, Ri as ResourceUpdatedNotificationParams, Rn as ElicitRequestParams, Rr as ListTasksResult, Rt as ProtocolErrorCode, S as CompleteResourceTemplateCallback, Sa as Tool, Si as Request$1, Sn as CompleteRequestPrompt, So as StoredOAuthTokens, Sr as JSONRPCResponse, St as isCallToolResult, T as McpServerOptions, Ta as ToolExecution, Ti as RequestMetaEnvelope, Tn as ContentBlock, Tr as LegacyTitledEnumSchema, Tt as isInputRequiredResult, U as UriTemplate, Ua as LOG_LEVEL_META_KEY, Ui as Root, Un as EmbeddedResource, Ur as LoggingMessageNotificationParams, Ut as inputResponse, V as preloadSchemas, Va as JSONRPC_VERSION, Vi as ResultTypeMap, Vn as ElicitationCompleteNotification, Vr as LoggingLevel, Vt as acceptedContent, W as Variables, Wa as METHOD_NOT_FOUND, Wi as RootsListChangedNotification, Wn as EmptyResult, Wr as MessageClassification, Wt as ElicitInputParams, X as CacheScope, Xa as SUPPORTED_PROTOCOL_VERSIONS, Xi as ServerRequest, Xn as GetTaskPayloadResult, Xr as ModelPreferences, Xt as InboundLadderRejection, Y as CacheHint, Ya as SUBSCRIPTION_ID_META_KEY, Yi as ServerNotification, Yn as GetTaskPayloadRequest, Yr as ModelHint, Yt as InboundHttpRequest, Z as ProtocolEra, Za as TRACEPARENT_META_KEY, Zi as ServerResult, Zn as GetTaskRequest, Zr as MultiSelectEnumSchema, Zt as InboundLegacyRoute, _ as PerRequestHTTPServerTransportOptions, _a as TaskStatusNotificationParams, _i as PromptReference, _n as ClientRequest, _o as OAuthTokenRevocationRequest, _r as JSONObject, _t as SpecTypes, a as McpHandlerRequestOptions, aa as SubscriptionsAcknowledgedNotification, ai as PaginatedResult, an as BaseMetadata, ao as OAuthError, ar as InitializeRequestParams, at as Protocol, b as AnyToolHandler, ba as TitledMultiSelectEnumSchema, bi as ReadResourceResult, bn as CompleteRequest, bo as OpenIdProviderMetadata, br as JSONRPCNotification, bt as assertCompleteRequestPrompt, c as McpServerFactory, ca as SubscriptionsListenRequestParams, ci as PrimitiveSchemaDefinition, cn as CallToolRequest, co as IdJagTokenExchangeResponse, cr as InputRequest, ct as RequestOptions, d as legacyStatelessFallback, da as Task, di as ProgressNotificationParams, dn as CancelTaskRequest, do as OAuthClientInformationMixed, dr as InputResponse, dt as mergeCapabilities, ea as SingleSelectEnumSchema, ei as NotificationParams, en as InboundValidationRung, eo as resourceUrlFromServerUrl, er as Icon, et as BaseContext, f as InMemoryServerEventBus, fa as TaskAugmentedRequestParams, fi as ProgressToken, fn as CancelTaskResult, fo as OAuthClientMetadata, fr as InputResponses, ft as FetchLike, g as PerRequestHTTPServerTransport, ga as TaskStatusNotification, gi as PromptMessage, gn as ClientNotification, go as OAuthProtectedResourceMetadata, gr as JSONArray, gt as SpecTypeName, h as ServerNotifier, ha as TaskStatus, hi as PromptListChangedNotification, hn as ClientCapabilities, ho as OAuthMetadata, hr as InvalidRequestError, ht as createFetchWithInit, i as LegacyStatelessFallbackOptions, ia as SubscriptionFilter, ii as PaginatedRequestParams, in as AuthInfo, io as SdkHttpErrorData, ir as InitializeRequest, it as ProgressCallback, j as RegisteredResourceTemplate, ja as UnsupportedProtocolVersionErrorData, ji as ResourceContents, jn as CreateMessageResultWithTools, jr as ListResourceTemplatesRequest, jt as isTaskAugmentedRequestParams, k as RegisteredPrompt, ka as UnsubscribeRequest, ki as RequestTypeMap, kn as CreateMessageRequestParamsWithTools, kr as ListPromptsRequest, kt as isJSONRPCResponse, l as createMcpHandler, la as SubscriptionsListenResult, li as Progress, ln as CallToolRequestParams, lo as OAuthClientInformation, lr as InputRequests, lt as RequestStateAccessor, m as ServerEventBus, ma as TaskMetadata, mi as PromptArgument, mn as CancelledNotificationParams, mo as OAuthErrorResponse, mr as InvalidParamsError, mt as TransportSendOptions, n as IsLegacyRequestOptions, na as SubscribeRequest, ni as NumberSchema, nn as Annotations, no as SdkErrorCode, nr as ImageContent, nt as DEFAULT_REQUEST_TIMEOUT_MSEC, o as McpHttpHandler, oa as SubscriptionsAcknowledgedNotificationParams, oi as ParseError, on as BlobResourceContents, oo as OAuthErrorCode, or as InitializeResult, ot as ProtocolOptions, p as ServerEvent, pa as TaskCreationParams, pi as Prompt, pn as CancelledNotification, po as OAuthClientRegistrationError, pr as InternalError, pt as Transport, q as deserializeMessage, qa as RELATED_TASK_META_KEY, qi as SamplingMessageContentBlock, qn as GetPromptRequestParams, qr as MethodNotFoundError, qt as StandardSchemaWithJSON, r as LegacyHttpHandler, ra as SubscribeRequestParams, ri as PaginatedRequest, rn as AudioContent, ro as SdkHttpError, rr as Implementation, rt as NotificationOptions, s as McpRequestContext, sa as SubscriptionsListenRequest, si as PingRequest, sn as BooleanSchema, so as AuthorizationServerMetadata, sr as InitializedNotification, st as RequestHandlerSchemas, t as CreateMcpHandlerOptions, ta as StringSchema, ti as NotificationTypeMap, tn as classifyInboundRequest, to as SdkError, tr as Icons, tt as ClientContext, u as isLegacyRequest, ua as SubscriptionsListenResultMeta, ui as ProgressNotification, un as CallToolResult, uo as OAuthClientInformationFull, ur as InputRequiredResult, ut as ServerContext, v as PerRequestMessageExtra, va as TextContent, vi as ReadResourceRequest, vn as ClientResult, vo as OAuthTokens, vr as JSONRPCErrorResponse, vt as isSpecType, w as McpServer, wa as ToolChoice, wi as RequestMeta, wn as CompleteResult, wr as JSONValue, wt as isInitializedNotification, x as BaseToolCallback, xa as TitledSingleSelectEnumSchema, xi as RelatedTaskMetadata, xn as CompleteRequestParams, xo as StoredOAuthClientInformation, xr as JSONRPCRequest, xt as assertCompleteRequestResourceTemplate, y as PerRequestResponseMode, ya as TextResourceContents, yi as ReadResourceRequestParams, yn as CompatibilityCallToolResult, yo as OpenIdProviderDiscoveryMetadata, yr as JSONRPCMessage, yt as specTypeSchemas, z as ScopeChallengeHandler, za as INVALID_PARAMS, zi as Result, zn as ElicitRequestURLParams, zr as ListToolsRequest, zt as InputRequiredSpec } from "./createMcpHandler-D4NN8WsG.mjs";
 import { i as jsonSchemaValidator, n as JsonSchemaValidator, r as JsonSchemaValidatorResult, t as JsonSchemaType } from "./types-DUs7mGBv.mjs";
 
 //#region src/server/completable.d.ts
@@ -105,12 +105,34 @@ interface BearerAuthOptions {
    */
   resourceMetadataUrl?: string;
 }
+/**
+ * Options for {@link verifyBearerToken} and {@link requireBearerAuth}:
+ * {@link BearerAuthOptions} plus `expectedResource`.
+ */
+interface VerifyBearerTokenOptions extends BearerAuthOptions {
+  /**
+   * Accept only tokens issued for this resource (the token's audience):
+   * the value your authorization server puts into tokens meant for this
+   * server, usually the server's URL (its
+   * {@link https://datatracker.ietf.org/doc/html/rfc8707 | RFC 8707}
+   * resource identifier).
+   *
+   * When set, a token is accepted only if the verifier reports that value
+   * in `AuthInfo.resource`. The two are compared as strings, ignoring a
+   * fragment and one trailing slash. A token reported for another value, or
+   * for none, is refused with `401 invalid_token`, so the verifier has to
+   * fill `AuthInfo.resource`, for example from the token's `aud` claim.
+   * When unset, `AuthInfo.resource` is not compared with anything.
+   */
+  expectedResource?: URL;
+}
 /**
  * Validate a raw `Authorization` header value as a Bearer token and return
  * the verified {@link AuthInfo}.
  *
  * The runtime-neutral core of Bearer authentication: it parses the header,
- * runs the verifier, enforces `requiredScopes`, and rejects tokens without an
+ * runs the verifier, compares the token's resource with `expectedResource`,
+ * enforces `requiredScopes`, and rejects tokens without an
  * expiration or past it. On any failure it throws an {@link OAuthError} —
  * pass that to {@link bearerAuthChallengeResponse} for the matching HTTP
  * answer, or use {@link requireBearerAuth} to get both steps as one call.
@@ -118,7 +140,7 @@ interface BearerAuthOptions {
  * Framework adapters build on this: `requireBearerAuth` from
  * `@modelcontextprotocol/express` feeds it `req.headers.authorization`.
  */
-declare function verifyBearerToken(authorizationHeader: string | null | undefined, options: BearerAuthOptions): Promise<AuthInfo>;
+declare function verifyBearerToken(authorizationHeader: string | null | undefined, options: VerifyBearerTokenOptions): Promise<AuthInfo>;
 /**
  * Build the HTTP answer for a Bearer authentication failure.
  *
@@ -150,7 +172,7 @@ declare function bearerAuthChallengeResponse(error: unknown, options?: Pick<Bear
  * }
  * ```
  */
-declare function requireBearerAuth(options: BearerAuthOptions): (request: Request) => Promise<AuthInfo | Response>;
+declare function requireBearerAuth(options: VerifyBearerTokenOptions): (request: Request) => Promise<AuthInfo | Response>;
 //#endregion
 //#region src/server/middleware/hostHeaderValidation.d.ts
 type HostHeaderValidationResult = {
@@ -305,6 +327,11 @@ type OriginValidationResult = {
  *   and only browser-originated requests carry the header this check defends against.
  * - Allowlist items are hostnames only (no scheme, no port), the same convention as
  *   `validateHostHeader`. For IPv6, include brackets (e.g. `[::1]`).
+ * - A browser extension's origin carries its extension ID as the hostname; list the
+ *   ID to allow one extension. An allowlist item of the form `<scheme>://*`
+ *   (lowercase, e.g. `moz-extension://*`) allows every origin of that scheme, which
+ *   Firefox needs because its extension IDs differ on every install.
+ *   `http://*` and `https://*` are not honoured: list websites by hostname.
  * - Any present value that cannot be parsed as an origin URL — including the literal
  *   `null` origin browsers send for opaque contexts — is rejected (deny on failure).
  */
@@ -603,6 +630,10 @@ interface HandleRequestOptions {
  * @example Hono.js
  * ```ts source="./streamableHttp.examples.ts#WebStandardStreamableHTTPServerTransport_hono"
  * app.all('/mcp', async c => {
+ *     // Stateless example: create a server and a transport per request.
+ *     const server = new McpServer({ name: 'my-server', version: '1.0.0' });
+ *     const transport = new WebStandardStreamableHTTPServerTransport({ sessionIdGenerator: undefined });
+ *     await server.connect(transport);
  *     return transport.handleRequest(c.req.raw);
  * });
  * ```
@@ -611,6 +642,10 @@ interface HandleRequestOptions {
  * ```ts source="./streamableHttp.examples.ts#WebStandardStreamableHTTPServerTransport_workers"
  * const worker = {
  *     async fetch(request: Request): Promise<Response> {
+ *         // Stateless example: create a server and a transport per request.
+ *         const server = new McpServer({ name: 'my-server', version: '1.0.0' });
+ *         const transport = new WebStandardStreamableHTTPServerTransport({ sessionIdGenerator: undefined });
+ *         await server.connect(transport);
  *         return transport.handleRequest(request);
  *     }
  * };
@@ -619,6 +654,7 @@ interface HandleRequestOptions {
 declare class WebStandardStreamableHTTPServerTransport implements Transport {
   private sessionIdGenerator;
   private _started;
+  private _hasHandledRequest;
   private _closed;
   private _streamMapping;
   private _requestToStreamMapping;
@@ -770,5 +806,5 @@ declare function readRequestBody(request: Request, maxBytes?: number): Promise<{
 //#region src/fromJsonSchema.d.ts
 declare function fromJsonSchema<T = unknown>(schema: JsonSchemaType, validator?: jsonSchemaValidator): StandardSchemaWithJSON<T, T>;
 //#endregion
-export { Annotations, type AnyToolHandler, AudioContent, AuthInfo, type AuthMetadataOptions, type AuthorizationServerMetadata, BAGGAGE_META_KEY, type BaseContext, BaseMetadata, type BaseToolCallback, type BearerAuthOptions, BlobResourceContents, BooleanSchema, CLIENT_CAPABILITIES_META_KEY, CLIENT_INFO_META_KEY, type CacheHint, type CacheScope, CallToolRequest, CallToolRequestParams, CallToolResult, CancelTaskRequest, CancelTaskResult, CancelledNotification, CancelledNotificationParams, ClientCapabilities, type ClientContext, ClientNotification, ClientRequest, ClientResult, CompatibilityCallToolResult, type CompletableSchema, type CompleteCallback, CompleteRequest, CompleteRequestParams, CompleteRequestPrompt, CompleteRequestResourceTemplate, type CompleteResourceTemplateCallback, CompleteResult, ContentBlock, type CreateMcpHandlerOptions, CreateMessageRequest, CreateMessageRequestParams, CreateMessageRequestParamsBase, CreateMessageRequestParamsWithTools, CreateMessageResult, CreateMessageResultWithTools, CreateTaskResult, Cursor, DEFAULT_MAX_REQUEST_BODY_SIZE, DEFAULT_NEGOTIATED_PROTOCOL_VERSION, DEFAULT_REQUEST_TIMEOUT_MSEC, DiscoverRequest, DiscoverResult, type ElicitInputParams, ElicitRequest, ElicitRequestFormParams, ElicitRequestParams, ElicitRequestURLParams, ElicitResult, ElicitationCompleteNotification, ElicitationCompleteNotificationParams, EmbeddedResource, EmptyResult, EnumSchema, type EventId, type EventStore, type FetchLike, GetPromptRequest, GetPromptRequestParams, GetPromptResult, GetTaskPayloadRequest, GetTaskPayloadResult, GetTaskRequest, GetTaskResult, type HandleRequestOptions, HandlerResultTypeMap, type HostHeaderValidationResult, INTERNAL_ERROR, INVALID_PARAMS, INVALID_REQUEST, Icon, Icons, type IdJagTokenExchangeResponse, ImageContent, Implementation, InMemoryServerEventBus, InMemoryTransport, type InboundClassificationOutcome, type InboundHttpRequest, type InboundLadderRejection, type InboundLegacyRoute, type InboundLegacyRouteReason, type InboundModernRoute, type InboundValidationRung, InitializeRequest, InitializeRequestParams, InitializeResult, InitializedNotification, InputRequest, InputRequests, InputRequiredResult, type InputRequiredSpec, InputResponse, type InputResponseView, InputResponses, InternalError, InvalidParamsError, InvalidRequestError, type IsLegacyRequestOptions, JSONArray, JSONObject, JSONRPCErrorResponse, JSONRPCMessage, JSONRPCNotification, JSONRPCRequest, JSONRPCResponse, JSONRPCResultResponse, JSONRPC_VERSION, JSONValue, type JsonSchemaType, type JsonSchemaValidator, type JsonSchemaValidatorResult, LATEST_PROTOCOL_VERSION, LOG_LEVEL_META_KEY, type LegacyHttpHandler, type LegacyStatelessFallbackOptions, LegacyTitledEnumSchema, ListChangedCallback, ListChangedHandlers, ListChangedOptions, ListPromptsRequest, ListPromptsResult, ListResourceTemplatesRequest, ListResourceTemplatesResult, type ListResourcesCallback, ListResourcesRequest, ListResourcesResult, ListRootsRequest, ListRootsResult, ListTasksRequest, ListTasksResult, ListToolsRequest, ListToolsResult, LoggingLevel, LoggingMessageNotification, LoggingMessageNotificationParams, METHOD_NOT_FOUND, type McpHandlerRequestOptions, type McpHttpHandler, type McpRequestContext, McpServer, type McpServerFactory, MessageClassification, MessageExtraInfo, MetaObject, MethodNotFoundError, MissingRequiredClientCapabilityError, MissingRequiredClientCapabilityErrorData, ModelHint, ModelPreferences, MultiSelectEnumSchema, Notification, NotificationMethod, type NotificationOptions, NotificationParams, NotificationTypeMap, NumberSchema, type OAuthClientInformation, type OAuthClientInformationFull, type OAuthClientInformationMixed, type OAuthClientMetadata, type OAuthClientRegistrationError, OAuthError, OAuthErrorCode, type OAuthErrorResponse, type OAuthMetadata, type OAuthProtectedResourceMetadata, type OAuthTokenRevocationRequest, type OAuthTokenVerifier, type OAuthTokens, type OpenIdProviderDiscoveryMetadata, type OpenIdProviderMetadata, type OriginValidationResult, PARSE_ERROR, PROTOCOL_VERSION_META_KEY, PaginatedRequest, PaginatedRequestParams, PaginatedResult, ParseError, PerRequestHTTPServerTransport, type PerRequestHTTPServerTransportOptions, type PerRequestMessageExtra, type PerRequestResponseMode, PingRequest, PrimitiveSchemaDefinition, Progress, type ProgressCallback, ProgressNotification, ProgressNotificationParams, ProgressToken, Prompt, PromptArgument, type PromptCallback, PromptListChangedNotification, PromptMessage, PromptReference, Protocol, type ProtocolEra, ProtocolError, ProtocolErrorCode, type ProtocolOptions, RELATED_TASK_META_KEY, ReadBuffer, type ReadResourceCallback, ReadResourceRequest, ReadResourceRequestParams, ReadResourceResult, type ReadResourceTemplateCallback, type RegisteredPrompt, type RegisteredResource, type RegisteredResourceTemplate, type RegisteredTool, RelatedTaskMetadata, Request$1 as Request, type RequestHandlerSchemas, RequestId, RequestMeta, RequestMetaEnvelope, RequestMetaObject, RequestMethod, type RequestOptions, RequestParams, type RequestStateAccessor, type RequestStateCodec, type RequestStateCodecOptions, RequestTypeMap, Resource, ResourceContents, ResourceLink, ResourceListChangedNotification, type ResourceMetadata, ResourceNotFoundError, ResourceRequestParams, ResourceTemplate, ResourceTemplateReference, ResourceTemplateType, ResourceUpdatedNotification, ResourceUpdatedNotificationParams, Result, ResultMetaObject, ResultTypeMap, Role, Root, RootsListChangedNotification, SERVER_INFO_META_KEY, STDIO_DEFAULT_MAX_BUFFER_SIZE, SUBSCRIPTION_ID_META_KEY, SUPPORTED_PROTOCOL_VERSIONS, SamplingContent, SamplingMessage, SamplingMessageContentBlock, type ScopeChallenge, type ScopeChallengeHandler, SdkError, SdkErrorCode, SdkHttpError, type SdkHttpErrorData, Server, ServerCapabilities, type ServerContext, type ServerEvent, type ServerEventBus, ServerNotification, type ServerNotifier, type ServerOptions, ServerRequest, ServerResult, SetLevelRequest, SetLevelRequestParams, SingleSelectEnumSchema, type SpecTypeName, type SpecTypes, type StandardSchemaV1, type StandardSchemaV1Sync, type StandardSchemaWithJSON, type StoredOAuthClientInformation, type StoredOAuthTokens, type StreamId, StringSchema, SubscribeRequest, SubscribeRequestParams, SubscriptionFilter, SubscriptionsAcknowledgedNotification, SubscriptionsAcknowledgedNotificationParams, SubscriptionsListenRequest, SubscriptionsListenRequestParams, SubscriptionsListenResult, SubscriptionsListenResultMeta, TRACEPARENT_META_KEY, TRACESTATE_META_KEY, Task, TaskAugmentedRequestParams, TaskCreationParams, TaskMetadata, TaskStatus, TaskStatusNotification, TaskStatusNotificationParams, TextContent, TextResourceContents, TitledMultiSelectEnumSchema, TitledSingleSelectEnumSchema, Tool, ToolAnnotations, type ToolCallback, ToolChoice, ToolExecution, ToolListChangedNotification, ToolResultContent, ToolUseContent, type Transport, type TransportSendOptions, UnsubscribeRequest, UnsubscribeRequestParams, UnsupportedProtocolVersionError, UnsupportedProtocolVersionErrorData, UntitledMultiSelectEnumSchema, UntitledSingleSelectEnumSchema, UriTemplate, UrlElicitationRequiredError, type Variables, WebStandardStreamableHTTPServerTransport, type WebStandardStreamableHTTPServerTransportOptions, acceptedContent, assertCompleteRequestPrompt, assertCompleteRequestResourceTemplate, bearerAuthChallengeResponse, buildOAuthProtectedResourceMetadata, checkResourceAllowed, classifyInboundRequest, completable, createFetchWithInit, createMcpHandler, createRequestStateCodec, deserializeMessage, fromJsonSchema, getDisplayName, getOAuthProtectedResourceMetadataUrl, hostHeaderValidationResponse, inputRequired, inputResponse, isCallToolResult, isCompletable, isInitializeRequest, isInitializedNotification, isInputRequiredResult, isJSONRPCErrorResponse, isJSONRPCNotification, isJSONRPCRequest, isJSONRPCResponse, isJSONRPCResultResponse, isJsonContentType, isLegacyRequest, isSpecType, isTaskAugmentedRequestParams, type jsonSchemaValidator, legacyStatelessFallback, localhostAllowedHostnames, localhostAllowedOrigins, mergeCapabilities, oauthMetadataResponse, originValidationResponse, parseJSONRPCMessage, preloadSchemas, readRequestBody, requireBearerAuth, requireScopes, resourceUrlFromServerUrl, serializeMessage, specTypeSchemas, validateHostHeader, validateOriginHeader, verifyBearerToken };
+export { Annotations, type AnyToolHandler, AudioContent, AuthInfo, type AuthMetadataOptions, type AuthorizationServerMetadata, BAGGAGE_META_KEY, type BaseContext, BaseMetadata, type BaseToolCallback, type BearerAuthOptions, BlobResourceContents, BooleanSchema, CLIENT_CAPABILITIES_META_KEY, CLIENT_INFO_META_KEY, type CacheHint, type CacheScope, CallToolRequest, CallToolRequestParams, CallToolResult, CancelTaskRequest, CancelTaskResult, CancelledNotification, CancelledNotificationParams, ClientCapabilities, type ClientContext, ClientNotification, ClientRequest, ClientResult, CompatibilityCallToolResult, type CompletableSchema, type CompleteCallback, CompleteRequest, CompleteRequestParams, CompleteRequestPrompt, CompleteRequestResourceTemplate, type CompleteResourceTemplateCallback, CompleteResult, ContentBlock, type CreateMcpHandlerOptions, CreateMessageRequest, CreateMessageRequestParams, CreateMessageRequestParamsBase, CreateMessageRequestParamsWithTools, CreateMessageResult, CreateMessageResultWithTools, CreateTaskResult, Cursor, DEFAULT_MAX_REQUEST_BODY_SIZE, DEFAULT_NEGOTIATED_PROTOCOL_VERSION, DEFAULT_REQUEST_TIMEOUT_MSEC, DiscoverRequest, DiscoverResult, type ElicitInputParams, ElicitRequest, ElicitRequestFormParams, ElicitRequestParams, ElicitRequestURLParams, ElicitResult, ElicitationCompleteNotification, ElicitationCompleteNotificationParams, EmbeddedResource, EmptyResult, EnumSchema, type EventId, type EventStore, type FetchLike, GetPromptRequest, GetPromptRequestParams, GetPromptResult, GetTaskPayloadRequest, GetTaskPayloadResult, GetTaskRequest, GetTaskResult, type HandleRequestOptions, HandlerResultTypeMap, type HostHeaderValidationResult, INTERNAL_ERROR, INVALID_PARAMS, INVALID_REQUEST, Icon, Icons, type IdJagTokenExchangeResponse, ImageContent, Implementation, InMemoryServerEventBus, InMemoryTransport, type InboundClassificationOutcome, type InboundHttpRequest, type InboundLadderRejection, type InboundLegacyRoute, type InboundLegacyRouteReason, type InboundModernRoute, type InboundValidationRung, InitializeRequest, InitializeRequestParams, InitializeResult, InitializedNotification, InputRequest, InputRequests, InputRequiredResult, type InputRequiredSpec, InputResponse, type InputResponseView, InputResponses, InternalError, InvalidParamsError, InvalidRequestError, type IsLegacyRequestOptions, JSONArray, JSONObject, JSONRPCErrorResponse, JSONRPCMessage, JSONRPCNotification, JSONRPCRequest, JSONRPCResponse, JSONRPCResultResponse, JSONRPC_VERSION, JSONValue, type JsonSchemaType, type JsonSchemaValidator, type JsonSchemaValidatorResult, LATEST_PROTOCOL_VERSION, LOG_LEVEL_META_KEY, type LegacyHttpHandler, type LegacyStatelessFallbackOptions, LegacyTitledEnumSchema, ListChangedCallback, ListChangedHandlers, ListChangedOptions, ListPromptsRequest, ListPromptsResult, ListResourceTemplatesRequest, ListResourceTemplatesResult, type ListResourcesCallback, ListResourcesRequest, ListResourcesResult, ListRootsRequest, ListRootsResult, ListTasksRequest, ListTasksResult, ListToolsRequest, ListToolsResult, LoggingLevel, LoggingMessageNotification, LoggingMessageNotificationParams, METHOD_NOT_FOUND, type McpHandlerRequestOptions, type McpHttpHandler, type McpRequestContext, McpServer, type McpServerFactory, type McpServerOptions, MessageClassification, MessageExtraInfo, MetaObject, MethodNotFoundError, MissingRequiredClientCapabilityError, MissingRequiredClientCapabilityErrorData, ModelHint, ModelPreferences, MultiSelectEnumSchema, Notification, NotificationMethod, type NotificationOptions, NotificationParams, NotificationTypeMap, NumberSchema, type OAuthClientInformation, type OAuthClientInformationFull, type OAuthClientInformationMixed, type OAuthClientMetadata, type OAuthClientRegistrationError, OAuthError, OAuthErrorCode, type OAuthErrorResponse, type OAuthMetadata, type OAuthProtectedResourceMetadata, type OAuthTokenRevocationRequest, type OAuthTokenVerifier, type OAuthTokens, type OpenIdProviderDiscoveryMetadata, type OpenIdProviderMetadata, type OriginValidationResult, PARSE_ERROR, PROTOCOL_VERSION_META_KEY, PaginatedRequest, PaginatedRequestParams, PaginatedResult, ParseError, PerRequestHTTPServerTransport, type PerRequestHTTPServerTransportOptions, type PerRequestMessageExtra, type PerRequestResponseMode, PingRequest, PrimitiveSchemaDefinition, Progress, type ProgressCallback, ProgressNotification, ProgressNotificationParams, ProgressToken, Prompt, PromptArgument, type PromptCallback, PromptListChangedNotification, PromptMessage, PromptReference, Protocol, type ProtocolEra, ProtocolError, ProtocolErrorCode, type ProtocolOptions, RELATED_TASK_META_KEY, ReadBuffer, type ReadResourceCallback, ReadResourceRequest, ReadResourceRequestParams, ReadResourceResult, type ReadResourceTemplateCallback, type RegisteredPrompt, type RegisteredResource, type RegisteredResourceTemplate, type RegisteredTool, RelatedTaskMetadata, Request$1 as Request, type RequestHandlerSchemas, RequestId, RequestMeta, RequestMetaEnvelope, RequestMetaObject, RequestMethod, type RequestOptions, RequestParams, type RequestStateAccessor, type RequestStateCodec, type RequestStateCodecOptions, RequestTypeMap, Resource, ResourceContents, ResourceLink, ResourceListChangedNotification, type ResourceMetadata, ResourceNotFoundError, ResourceRequestParams, ResourceTemplate, ResourceTemplateReference, ResourceTemplateType, ResourceUpdatedNotification, ResourceUpdatedNotificationParams, Result, ResultMetaObject, ResultTypeMap, Role, Root, RootsListChangedNotification, SERVER_INFO_META_KEY, STDIO_DEFAULT_MAX_BUFFER_SIZE, SUBSCRIPTION_ID_META_KEY, SUPPORTED_PROTOCOL_VERSIONS, SamplingContent, SamplingMessage, SamplingMessageContentBlock, type ScopeChallenge, type ScopeChallengeHandler, SdkError, SdkErrorCode, SdkHttpError, type SdkHttpErrorData, Server, ServerCapabilities, type ServerContext, type ServerEvent, type ServerEventBus, ServerNotification, type ServerNotifier, type ServerOptions, ServerRequest, ServerResult, SetLevelRequest, SetLevelRequestParams, SingleSelectEnumSchema, type SpecTypeName, type SpecTypes, type StandardSchemaV1, type StandardSchemaV1Sync, type StandardSchemaWithJSON, type StoredOAuthClientInformation, type StoredOAuthTokens, type StreamId, StringSchema, SubscribeRequest, SubscribeRequestParams, SubscriptionFilter, SubscriptionsAcknowledgedNotification, SubscriptionsAcknowledgedNotificationParams, SubscriptionsListenRequest, SubscriptionsListenRequestParams, SubscriptionsListenResult, SubscriptionsListenResultMeta, TRACEPARENT_META_KEY, TRACESTATE_META_KEY, Task, TaskAugmentedRequestParams, TaskCreationParams, TaskMetadata, TaskStatus, TaskStatusNotification, TaskStatusNotificationParams, TextContent, TextResourceContents, TitledMultiSelectEnumSchema, TitledSingleSelectEnumSchema, Tool, ToolAnnotations, type ToolCallback, ToolChoice, ToolExecution, ToolListChangedNotification, ToolResultContent, ToolUseContent, type Transport, type TransportSendOptions, UnsubscribeRequest, UnsubscribeRequestParams, UnsupportedProtocolVersionError, UnsupportedProtocolVersionErrorData, UntitledMultiSelectEnumSchema, UntitledSingleSelectEnumSchema, UriTemplate, UrlElicitationRequiredError, type Variables, type VerifyBearerTokenOptions, WebStandardStreamableHTTPServerTransport, type WebStandardStreamableHTTPServerTransportOptions, acceptedContent, assertCompleteRequestPrompt, assertCompleteRequestResourceTemplate, bearerAuthChallengeResponse, buildOAuthProtectedResourceMetadata, checkResourceAllowed, classifyInboundRequest, completable, createFetchWithInit, createMcpHandler, createRequestStateCodec, deserializeMessage, fromJsonSchema, getDisplayName, getOAuthProtectedResourceMetadataUrl, hostHeaderValidationResponse, inputRequired, inputResponse, isCallToolResult, isCompletable, isInitializeRequest, isInitializedNotification, isInputRequiredResult, isJSONRPCErrorResponse, isJSONRPCNotification, isJSONRPCRequest, isJSONRPCResponse, isJSONRPCResultResponse, isJsonContentType, isLegacyRequest, isSpecType, isTaskAugmentedRequestParams, type jsonSchemaValidator, legacyStatelessFallback, localhostAllowedHostnames, localhostAllowedOrigins, mergeCapabilities, oauthMetadataResponse, originValidationResponse, parseJSONRPCMessage, preloadSchemas, readRequestBody, requireBearerAuth, requireScopes, resourceUrlFromServerUrl, serializeMessage, specTypeSchemas, validateHostHeader, validateOriginHeader, verifyBearerToken };
 //# sourceMappingURL=index.d.mts.map

package/node_modules/@modelcontextprotocol/server/dist/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../src/server/completable.ts","../src/server/middleware/bearerAuth.ts","../src/server/middleware/hostHeaderValidation.ts","../src/server/middleware/oauthMetadata.ts","../src/server/middleware/originValidation.ts","../src/server/requestStateCodec.ts","../src/server/streamableHttp.ts","../src/server/requestBody.ts","../src/fromJsonSchema.ts"],"sourcesContent":[],"mappings":";;;;cAEa;KAED,2BAA2B,mBAAmB,4BAC/C,gBAAA,CAAiB,WAAW,WAHvC;cAKoB;AALpB,CAAA,EAAA,GAOK,gBAAA,CAAiB,UAPwD,CAO7C,CAP6C,CAAA,EAAA,GAOtC,OAPsC,CAO9B,gBAAA,CAAiB,UAPa,CAOF,CAPE,CAAA,EAAA,CAAA;AAElE,KAOA,eAPgB,CAAA,UAOU,gBAPV,GAO6B,gBAP7B,CAAA,GAAA;EAAW,QAAA,EAQzB,gBARyB,CAQR,CARQ,CAAA;CAAmB;AACnB,KAU3B,iBAV2B,CAAA,UAUC,gBAVD,CAAA,GAUqB,CAVrB,GAAA;EAA5B,CAWN,kBAAA,CAXuB,EAWF,eAXE,CAWc,CAXd,CAAA;CAER;;;;;;;AAIpB;;;;;;AAIA;;;;;;;AAmCA;;;;;;;;AAaA;;;;ACnDiB,iBDsCD,WCtCmB,CAAA,UDsCG,gBCxBO,CAAA,CAAA,MAAA,EDwBmB,CCxBnB,EAAA,QAAA,EDwBgC,gBCxBhC,CDwBiD,CCxBjD,CAAA,CAAA,EDwBsD,iBCxBtD,CDwBwE,CCxBxE,CAAA;AAO7C;AA2EA;;AAA6H,iBD7C7G,aAAA,CC6C6G,MAAA,EAAA,OAAA,CAAA,EAAA,MAAA,ID7CnE,iBC6CmE,CD7CjD,gBC6CiD,CAAA;;;;;;AD1G7H;AAEA;;;;;AAGoB,UCKH,kBAAA,CDLG;EAEa;;;;;;AAEjC;;;;;;AAIA;EAAwC,iBAAA,CAAA,KAAA,EAAA,MAAA,CAAA,ECWF,ODXE,CCWM,QDXN,CAAA;;;;;;AAmCxB,UCjBC,iBAAA,CDiBU;EAAW;;;EAAuC,QAAA,ECb/D,kBDa+D;EAAwC;;;AAarH;;;;ACnDA;AAqBA;AA2EA;;;;;AAkDA;;;;;EAiDgB,mBAAA,CAAiB,EAAA,MAAA;;ACxKjC;AAWA;;;;AC3CA;;;;;AA8DA;AAqBA;AA6EA;AAA+C,iBF3DzB,iBAAA,CE2DyB,mBAAA,EAAA,MAAA,GAAA,IAAA,GAAA,SAAA,EAAA,OAAA,EF3DkD,iBE2DlD,CAAA,EF3DsE,OE2DtE,CF3D8E,QE2D9E,CAAA;;;;;;;ACtJ/C;AAoBA;AA4BA;AAcA;iBH+EgB,2BAAA,2BAEF,KAAK,+DAChB;;;AI5JH;AAiDA;;;;;;;;AA0FA;;;;;;;;ACtHA;AACY,iBLoLI,iBAAA,CKpLG,OAAA,ELoLwB,iBKpLxB,CAAA,EAAA,CAAA,OAAA,ELoLsD,OKpLtD,EAAA,GLoLkE,OKpLlE,CLoL0E,QKpL1E,GLoLqF,QKpLrF,CAAA;;;KJ3BP,0BAAA;;;;EFEC,EAAA,EAAA,KAAA;EAED,SAAA,EAAA,cAAgB,GAAA,qBAAA,GAAA,cAAA;EAAW,OAAA,EAAA,MAAA;EAAmB,UAAA,CAAA,EAAA,MAAA;EACnB,QAAA,CAAA,EAAA,MAAA;CAA5B;;;;;;;AAIoC,iBEO/B,kBAAA,CFP+B,UAAA,EAAA,MAAA,GAAA,IAAA,GAAA,SAAA,EAAA,gBAAA,EAAA,MAAA,EAAA,CAAA,EEOwD,0BFPxD;AAE/C;;;AAC+B,iBE2Bf,yBAAA,CAAA,CF3Be,EAAA,MAAA,EAAA;;;AAG/B;;;;;AACK,iBEkCW,4BAAA,CFlCX,GAAA,EEkC6C,OFlC7C,EAAA,gBAAA,EAAA,MAAA,EAAA,CAAA,EEkCmF,QFlCnF,GAAA,SAAA;;;;;;AAdL;AAEY,UGGK,mBAAA,CHHW;EAAW;;;;;EAKN,aAAA,EGId,aHJc;EAA5B;;;;;EAEO,iBAAA,EGSW,GHTI;EAAW;;;EACxB,uBAAA,CAAA,EGagB,GHbhB;EAAgB;AAG9B;;;EAC0C,eAAA,CAAA,EAAA,MAAA,EAAA;EAAhB;;;EAkCV,YAAA,CAAA,EAAW,MAAA;EAAW;;;;;EAA6D,iCAAA,CAAA,EAAA,OAAA;;AAanG;;;;ACnDA;AAqBA;AA2EA;;;;AAA4H,iBEvC5G,mCAAA,CFuC4G,OAAA,EEvC/D,mBFuC+D,CAAA,EEvCzC,8BFuCyC;AAkD5H;;;;;AAiDA;;;;;AAAqF,iBErHrE,oCAAA,CFqHqE,SAAA,EErHrB,GFqHqB,CAAA,EAAA,MAAA;;;;;AC/MrF;AAgBA;AAuBA;AAWA;;;;AC3CA;;;;;AA8DA;AAqBA;AA6EA;;;;;;;iBAAgB,qBAAA,UAA+B,kBAAkB,sBAAsB;;;;;;;AHrKvF;AAEA;;;;;;;;;;;AAK+C,KIQnC,sBAAA,GJRmC;EAEnC,EAAA,EAAA,IAAA;EAA0B,MAAA,CAAA,EAAA,MAAA;EAAmB,QAAA,CAAA,EAAA,MAAA;CAC1B,GAAA;EAAjB,EAAA,EAAA,KAAA;EAAgB,SAAA,EAAA,uBAAA,GAAA,gBAAA;EAGlB,OAAA,EAAA,MAAA;EAA4B,YAAA,CAAA,EAAA,MAAA;EAAoB,QAAA,CAAA,EAAA,MAAA;CAClB;;;;AAkC1C;;;;;;;AAAoH,iBIbpG,oBAAA,CJaoG,YAAA,EAAA,MAAA,GAAA,IAAA,GAAA,SAAA,EAAA,sBAAA,EAAA,MAAA,EAAA,CAAA,EIbH,sBJaG;AAapH;;;;ACnDiB,iBGqDD,uBAAA,CAAA,CHvCsB,EAAA,MAAO,EAAA;AAO7C;AA2EA;;;;;AAkDA;;;;AAGW,iBGlFK,wBAAA,CHkFL,GAAA,EGlFmC,OHkFnC,EAAA,sBAAA,EAAA,MAAA,EAAA,CAAA,EGlF+E,QHkF/E,GAAA,SAAA;;;;;;AD/JE,UKGI,wBAAA,CLH6D;EAElE;;;;;;;EAKP,GAAA,EKII,ULJa,GAAA,MAAA;EAAsD;;;;AAE5E;EAAsC,UAAA,CAAA,EAAA,MAAA;EAAmB;;;;AAIzD;;;;;;;AAmCA;;;;;;;;EAagB,IAAA,CAAA,EAAA,CAAA,GAAA,EKtBC,aLsBY,EAA+C,GAAA,MAAA;;;;ACnD5E;AAqBA;AA2EA;;;;;AAkDA;AAEmB,UI1GF,iBJ0GE,CAAA,IAAA,OAAA,CAAA,CAAA;EAAL;;;AA+Cd;;;;;EAAqF,IAAA,CAAA,OAAA,EIhJnE,CJgJmE,EAAA,GAAA,CAAA,EIhJ1D,aJgJ0D,CAAA,EIhJ1C,OJgJ0C,CAAA,MAAA,CAAA;EAAO;;;;AC/M5F;AAgBA;AAuBA;AAWA;;6BGwB+B,gBAAgB,QAAQ;;AFnEvD;;;;;AA8DA;AAqBA;AA6EA;;;;;;;;ACtJA;AAoBA;AA4BA;AAcA;;;;AC1EA;AAiDA;;;;;;;;AA0FA;;AAA2G,iBAA3F,uBAA2F,CAAA,IAAA,OAAA,CAAA,CAAA,OAAA,EAA7C,wBAA6C,CAAA,EAAlB,iBAAkB,CAAA,CAAA,CAAA;;;ALzIvF,KMmBR,QAAA,GNnBQ,MAAA;AAEa,KMkBrB,OAAA,GNlBqB,MAAA;;;;AAAO,UMuBvB,UAAA,CNvBuB;EAAO;AAE/C;;;;;EAC8B,UAAA,CAAA,QAAA,EM2BL,QN3BK,EAAA,OAAA,EM2Bc,cN3Bd,CAAA,EM2B+B,ON3B/B,CM2BuC,ON3BvC,CAAA;EAGlB;;;;;;;AAmCZ;EAAsC,qBAAA,EAAA,OAAA,EMDF,ONCE,CAAA,EMDQ,ONCR,CMDgB,QNChB,GAAA,SAAA,CAAA;EAA0B,iBAAA,CAAA,WAAA,EME3C,ONF2C,EAAA;IAAA;EAAa,CAAb,EAAA;IAA8B,IAAA,EAAA,CAAA,OAAA,EMMlE,ONNkE,EAAA,OAAA,EMMhD,cNNgD,EAAA,GMM7B,ONN6B,CAAA,IAAA,CAAA;EAAjB,CAAA,CAAA,EMQtE,ONRsE,CMQ9D,QNR8D,CAAA;;;;AAa7E;UMqBiB,+CAAA;;;ALxEjB;AAqBA;AA2EA;;EAA6H,kBAAA,CAAA,EAAA,CAAA,GAAA,GAAA,MAAA,CAAA,GAAA,SAAA;EAAR;;AAkDrH;;;;;EAiDgB,oBAAiB,CAAA,EAAA,CAAA,CAAA,SAAA,EAAA,MAAA,EAAA,GAAA,IAAA,GK3GyB,OL2GzB,CAAA,IAAA,CAAA,CAAA,GAAA,SAAA;EAAU;;;;;;;;;AC/M3C;EAgBgB,eAAA,CAAA,EAAA,CAAA,CAAA,SAAkB,EAAA,MAAqE,EAAA,GAAA,IAAA,GIgGlD,OJhGkD,CAAA,IAA0B,CAAA,CAAA,GAAA,SAAA;EAuBjH;AAWhB;;;;EC3CiB,kBAAA,CAAA,EAAA,OAAmB;EAMjB;;;;EAwDH,UAAA,CAAA,EGwDC,UHxDD;EAqBA;AA6EhB;;;;EAA+F,YAAA,CAAA,EAAA,MAAA,EAAA;;;;ACtJ/F;AAoBA;EA4BgB,cAAA,CAAA,EAAA,MAAA,EAAA;EAcA;;;;AC1EhB;EAiDiB,4BAAiB,CAAA,EAAA,OAAA;EAShB;;;;;EAW6B,aAAA,CAAA,EAAA,MAAA;EAAO;AAsEtD;;;EAAyF,WAAA,CAAA,EAAA,MAAA;EAAiB;;;;ACtH1G;AACA;AAKA;EAOyB,kBAAA,CAAA,EAAA,MAAA;EAAmB;;;;;;;;;;EAiBqB,yBAAA,CAAA,EAAA,MAAA,EAAA;;;;AA4BjE;AAgB0D,UAsFzC,oBAAA,CAtFyC;EAYL;;;AA0ErD;EAgEa,UAAA,CAAA,EAAA,OAAA;EAyBS;;;EAGG,QAAA,CAAA,EAlFV,QAkFU;;;;;;;;;;;;;;;;;ACrRzB;AA+BA;;;;AC1BA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cFoPa,wCAAA,YAAoD;;;;;;;;;;;;;;;;;;;;;;;oBAyB3C;wBACI,wBAAwB;wBAEzB;;;sCAgCe;;;;;WAQrB;;;;;;;;;;;;;;;;;;;;qBA8FU,mBAAmB,uBAAuB,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAqrB5D;;;;;;4BAsBW;;;;;;gBAqBN;uBAA+C;MAAc;;;;;cC3nCxE;;;;;;APUb;AAAsC,iBOqBhB,eAAA,CPrBgB,OAAA,EOsBzB,OPtByB,EAAA,QAAA,CAAA,EAAA,MAAA,CAAA,EOwBnC,OPxBmC,CAAA;EAAmB,QAAA,EAAA,IAAA;CAC1B,GAAA;EAAjB,QAAA,EAAA,KAAA;EAAgB,IAAA,EAAA,MAAA;AAG9B,CAAA,CAAA;;;iBQTgB,oCAAoC,4BAA4B,sBAAsB,uBAAuB,GAAG"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../src/server/completable.ts","../src/server/middleware/bearerAuth.ts","../src/server/middleware/hostHeaderValidation.ts","../src/server/middleware/oauthMetadata.ts","../src/server/middleware/originValidation.ts","../src/server/requestStateCodec.ts","../src/server/streamableHttp.ts","../src/server/requestBody.ts","../src/fromJsonSchema.ts"],"sourcesContent":[],"mappings":";;;;cAEa;KAED,2BAA2B,mBAAmB,4BAC/C,gBAAA,CAAiB,WAAW,WAHvC;cAKoB;AALpB,CAAA,EAAA,GAOK,gBAAA,CAAiB,UAPwD,CAO7C,CAP6C,CAAA,EAAA,GAOtC,OAPsC,CAO9B,gBAAA,CAAiB,UAPa,CAOF,CAPE,CAAA,EAAA,CAAA;AAElE,KAOA,eAPgB,CAAA,UAOU,gBAPV,GAO6B,gBAP7B,CAAA,GAAA;EAAW,QAAA,EAQzB,gBARyB,CAQR,CARQ,CAAA;CAAmB;AACnB,KAU3B,iBAV2B,CAAA,UAUC,gBAVD,CAAA,GAUqB,CAVrB,GAAA;EAA5B,CAWN,kBAAA,CAXuB,EAWF,eAXE,CAWc,CAXd,CAAA;CAER;;;;;;;AAIpB;;;;;;AAIA;;;;;;;AAmCA;;;;;;;;AAaA;;;;ACnDiB,iBDsCD,WCtCmB,CAAA,UDsCG,gBCxBO,CAAA,CAAA,MAAA,EDwBmB,CCxBnB,EAAA,QAAA,EDwBgC,gBCxBhC,CDwBiD,CCxBjD,CAAA,CAAA,EDwBsD,iBCxBtD,CDwBwE,CCxBxE,CAAA;AAO7C;AAiCA;AA8EA;AAEa,iBDnFG,aAAA,CCmFH,MAAA,EAAA,OAAA,CAAA,EAAA,MAAA,IDnF6C,iBCmF7C,CDnF+D,gBCmF/D,CAAA;;;;;;ADhJb;AAEA;;;;;AAGoB,UCKH,kBAAA,CDLG;EAEa;;;;;;AAEjC;;;;;;AAIA;EAAwC,iBAAA,CAAA,KAAA,EAAA,MAAA,CAAA,ECWF,ODXE,CCWM,QDXN,CAAA;;;;;;AAmCxB,UCjBC,iBAAA,CDiBU;EAAW;;;EAAuC,QAAA,ECb/D,kBDa+D;EAAwC;;;AAarH;;;;ACnDA;AAqBA;AAiCA;AA8EA;;;;;AA0DA;;;;EAGW,mBAAA,CAAA,EAAA,MAAA;AA8CX;;;;;AAA4F,UAzL3E,wBAAA,SAAiC,iBAyL0C,CAAA;EAAO;;;;AC3PnG;AAgBA;AAuBA;AAWA;;;;AC3CA;;;EAkB8B,gBAAA,CAAA,EFwDP,GExDO;;ACR9B;AAyBA;AAgCA;AAcA;;;;ACnFA;AAiDA;;;;;;AAoB+C,iBJsEzB,iBAAA,CItEyB,mBAAA,EAAA,MAAA,GAAA,IAAA,GAAA,SAAA,EAAA,OAAA,EJwElC,wBIxEkC,CAAA,EJyE5C,OIzE4C,CJyEpC,QIzEoC,CAAA;;AAsE/C;;;;;;;;ACtHA;AACY,iBL+KI,2BAAA,CK/KG,KAAA,EAAA,OAAA,EAAA,OAAA,CAAA,ELiLL,IKjLK,CLiLA,iBKjLA,EAAA,gBAAA,GAAA,qBAAA,CAAA,CAAA,ELkLhB,QKlLgB;AAKnB;;;;;;;;;;;;;;;;AAoDA;;;;AAyC2B,iBL8HX,iBAAA,CK9HW,OAAA,EL8HgB,wBK9HhB,CAAA,EAAA,CAAA,OAAA,EL8HqD,OK9HrD,EAAA,GL8HiE,OK9HjE,CL8HyE,QK9HzE,GL8HoF,QK9HpF,CAAA;;;KJ7Hf,0BAAA;;;;EFEC,EAAA,EAAA,KAAA;EAED,SAAA,EAAA,cAAgB,GAAA,qBAAA,GAAA,cAAA;EAAW,OAAA,EAAA,MAAA;EAAmB,UAAA,CAAA,EAAA,MAAA;EACnB,QAAA,CAAA,EAAA,MAAA;CAA5B;;;;;;;AAIoC,iBEO/B,kBAAA,CFP+B,UAAA,EAAA,MAAA,GAAA,IAAA,GAAA,SAAA,EAAA,gBAAA,EAAA,MAAA,EAAA,CAAA,EEOwD,0BFPxD;AAE/C;;;AAC+B,iBE2Bf,yBAAA,CAAA,CF3Be,EAAA,MAAA,EAAA;;;AAG/B;;;;;AACK,iBEkCW,4BAAA,CFlCX,GAAA,EEkC6C,OFlC7C,EAAA,gBAAA,EAAA,MAAA,EAAA,CAAA,EEkCmF,QFlCnF,GAAA,SAAA;;;;;;AAdL;AAEY,UGGK,mBAAA,CHHW;EAAW;;;;;EAKN,aAAA,EGId,aHJc;EAA5B;;;;;EAEO,iBAAA,EGSW,GHTI;EAAW;;;EACxB,uBAAA,CAAA,EGagB,GHbhB;EAAgB;AAG9B;;;EAC0C,eAAA,CAAA,EAAA,MAAA,EAAA;EAAhB;;;EAkCV,YAAA,CAAA,EAAW,MAAA;EAAW;;;;;EAA6D,iCAAA,CAAA,EAAA,OAAA;;AAanG;;;;ACnDA;AAqBA;AAiCA;AA8EA;;;AAGG,iBE9Ea,mCAAA,CF8Eb,OAAA,EE9E0D,mBF8E1D,CAAA,EE9EgF,8BF8EhF;;AAuDH;;;;;AAiDA;;;;AAA+G,iBEjK/F,oCAAA,CFiK+F,SAAA,EEjK/C,GFiK+C,CAAA,EAAA,MAAA;;;;;;AC3P/G;AAgBA;AAuBA;AAWA;;;;AC3CA;;;;;AA8DA;AAqBA;AA6EA;;;;;;iBAAgB,qBAAA,UAA+B,kBAAkB,sBAAsB;;;;;;;AHrKvF;AAEA;;;;;;;;;;;AAK+C,KIQnC,sBAAA,GJRmC;EAEnC,EAAA,EAAA,IAAA;EAA0B,MAAA,CAAA,EAAA,MAAA;EAAmB,QAAA,CAAA,EAAA,MAAA;CAC1B,GAAA;EAAjB,EAAA,EAAA,KAAA;EAAgB,SAAA,EAAA,uBAAA,GAAA,gBAAA;EAGlB,OAAA,EAAA,MAAA;EAA4B,YAAA,CAAA,EAAA,MAAA;EAAoB,QAAA,CAAA,EAAA,MAAA;CAClB;;;;AAkC1C;;;;;;;;AAaA;;;;ACnDiB,iBG8BD,oBAAA,CHhB8B,YAAD,EAAA,MAAA,GAAA,IAAA,GAAA,SAAA,EAAA,sBAAA,EAAA,MAAA,EAAA,CAAA,EGgBoE,sBHhBpE;AAO7C;AAiCA;AA8EA;;AAGW,iBGzEK,uBAAA,CAAA,CHyEL,EAAA,MAAA,EAAA;;;AAuDX;;;;;AAiDA;;;AAAoG,iBGnKpF,wBAAA,CHmKoF,GAAA,EGnKtD,OHmKsD,EAAA,sBAAA,EAAA,MAAA,EAAA,CAAA,EGnKV,QHmKU,GAAA,SAAA;;;;;;ADzPvF,UKGI,wBAAA,CLH6D;EAElE;;;;;;;EAKP,GAAA,EKII,ULJa,GAAA,MAAA;EAAsD;;;;AAE5E;EAAsC,UAAA,CAAA,EAAA,MAAA;EAAmB;;;;AAIzD;;;;;;;AAmCA;;;;;;;;EAagB,IAAA,CAAA,EAAA,CAAA,GAAA,EKtBC,aLsBY,EAA+C,GAAA,MAAA;;;;ACnD5E;AAqBA;AAiCA;AA8EA;;;;;AA0DgB,UIpJC,iBJoJ0B,CAAA,IAAA,OAAA,CAAA,CAAA;EAExB;;;;AA+CnB;;;;EAA+G,IAAA,CAAA,OAAA,EI5L7F,CJ4L6F,EAAA,GAAA,CAAA,EI5LpF,aJ4LoF,CAAA,EI5LpE,OJ4LoE,CAAA,MAAA,CAAA;EAAnB;;;;;AC3P5F;AAgBA;AAuBA;AAWA;6BGwB+B,gBAAgB,QAAQ;;;AFnEvD;;;;;AA8DA;AAqBA;AA6EA;;;;;;;;ACtJA;AAyBA;AAgCA;AAcA;;;;ACnFA;AAiDA;;;;;;;;AA0FA;AAA8D,iBAA9C,uBAA8C,CAAA,IAAA,OAAA,CAAA,CAAA,OAAA,EAAA,wBAAA,CAAA,EAA2B,iBAA3B,CAA6C,CAA7C,CAAA;;;ALzI1C,KMmBR,QAAA,GNnBQ,MAAA;AAEa,KMkBrB,OAAA,GNlBqB,MAAA;;;;AAAO,UMuBvB,UAAA,CNvBuB;EAAO;AAE/C;;;;;EAC8B,UAAA,CAAA,QAAA,EM2BL,QN3BK,EAAA,OAAA,EM2Bc,cN3Bd,CAAA,EM2B+B,ON3B/B,CM2BuC,ON3BvC,CAAA;EAGlB;;;;;;;AAmCZ;EAAsC,qBAAA,EAAA,OAAA,EMDF,ONCE,CAAA,EMDQ,ONCR,CMDgB,QNChB,GAAA,SAAA,CAAA;EAA0B,iBAAA,CAAA,WAAA,EME3C,ONF2C,EAAA;IAAA;EAAa,CAAb,EAAA;IAA8B,IAAA,EAAA,CAAA,OAAA,EMMlE,ONNkE,EAAA,OAAA,EMMhD,cNNgD,EAAA,GMM7B,ONN6B,CAAA,IAAA,CAAA;EAAjB,CAAA,CAAA,EMQtE,ONRsE,CMQ9D,QNR8D,CAAA;;;;AAa7E;UMqBiB,+CAAA;;;ALxEjB;AAqBA;AAiCA;AA8EA;EAEa,kBAAA,CAAA,EAAA,CAAA,GAAA,GAAA,MAAA,CAAA,GAAA,SAAA;EACF;;;AAuDX;;;;EAGW,oBAAA,CAAA,EAAA,CAAA,CAAA,SAAA,EAAA,MAAA,EAAA,GAAA,IAAA,GKzG+C,OLyG/C,CAAA,IAAA,CAAA,CAAA,GAAA,SAAA;EA8CK;;;;;;;;;;EC3PJ,eAAA,CAAA,EAAA,CAAA,CAAA,SAA0B,EAAA,MAAA,EAAA,GAAA,IAAA,GIgHe,OJhHf,CAAA,IAAA,CAAA,CAAA,GAAA,SAAA;EAgBtB;AAuBhB;AAWA;;;;EC3CiB;;;;EAkBgB,UAAA,CAAA,EGoGhB,UHpGgB;EA4CjB;AAqBhB;AA6EA;;;EAAuF,YAAA,CAAA,EAAA,MAAA,EAAA;EAAQ;;;;ACtJ/F;EAyBgB,cAAA,CAAA,EAAA,MAAoB,EAAA;EAgCpB;AAchB;;;;ECnFiB,4BAAwB,CAAA,EAAA,OAAA;EAiDxB;;;;;EAoBsC,aAAA,CAAA,EAAA,MAAA;EAAR;;AAsE/C;;EAA2G,WAAA,CAAA,EAAA,MAAA;EAAlB;;;;;ACtHzF;AACA;EAKiB,kBAAU,CAAA,EAAA,MAAA;EAOF;;;;;;;;;;EAiBqB,yBAAA,CAAA,EAAA,MAAA,EAAA;;;;;AA4B7B,UAsGA,oBAAA,CAtGA;EAgByC;;;;EAsFzC,UAAA,CAAA,EAAA,OAAA;EAwEJ;;;EA2BqC,QAAA,CAAA,EAzFnC,QAyFmC;;;;;;;;;;;;;;;;;;AC5RlD;AA+BA;;;;AC1BA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cF4Pa,wCAAA,YAAoD;;;;;;;;;;;;;;;;;;;;;;;;oBA0B3C;wBACI,wBAAwB;wBAEzB;;;sCAgCe;;;;;WAQrB;;;;;;;;;;;;;;;;;;;;qBA8FU,mBAAmB,uBAAuB,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA2rB5D;;;;;;4BAsBW;;;;;;gBAqBN;uBAA+C;MAAc;;;;;cC1oCxE;;;;;;APUb;AAAsC,iBOqBhB,eAAA,CPrBgB,OAAA,EOsBzB,OPtByB,EAAA,QAAA,CAAA,EAAA,MAAA,CAAA,EOwBnC,OPxBmC,CAAA;EAAmB,QAAA,EAAA,IAAA;CAC1B,GAAA;EAAjB,QAAA,EAAA,KAAA;EAAgB,IAAA,EAAA,MAAA;AAG9B,CAAA,CAAA;;;iBQTgB,oCAAoC,4BAA4B,sBAAsB,uBAAuB,GAAG"}

package/node_modules/@modelcontextprotocol/server/dist/index.mjs

@@ -1,5 +1,5 @@
-import { C as armSseKeepAlive, S as DEFAULT_SSE_KEEP_ALIVE_MS, T as isCompletable, _ as DEFAULT_MAX_SUBSCRIPTIONS, a as seedClientIdentityFromEnvelope, b as InMemoryServerEventBus, c as findScopeChallenge, d as buildOAuthProtectedResourceMetadata, f as getOAuthProtectedResourceMetadataUrl, g as verifyBearerToken, h as requireBearerAuth, i as installModernOnlyHandlers, l as requireScopes, m as bearerAuthChallengeResponse, n as ResourceTemplate, o as serverIdentityOf, p as oauthMetadataResponse, r as Server, s as createScopeChallengeResponse, t as McpServer, u as scopeChallengeResourceMetadataUrl, w as completable, x as createServerNotifier, y as createListenRouter } from "./mcp-DYuW2ZSs.mjs";
-import { $ as isTaskAugmentedRequestParams, At as LATEST_PROTOCOL_VERSION, B as scanXMcpHeaderDeclarations, Bt as TRACESTATE_META_KEY, Ct as CLIENT_CAPABILITIES_META_KEY, D as acceptedContent, Dt as INVALID_PARAMS, Et as INTERNAL_ERROR, Ft as RELATED_TASK_META_KEY, G as isInitializeRequest, Gt as resourceUrlFromServerUrl, H as assertCompleteRequestPrompt, I as classifyInboundRequest, It as SERVER_INFO_META_KEY, J as isJSONRPCErrorResponse, Jt as SdkHttpError, K as isInitializedNotification, Kt as SdkError, L as httpStatusForErrorCode, Lt as SUBSCRIPTION_ID_META_KEY, Mt as METHOD_NOT_FOUND, Nt as PARSE_ERROR, O as inputRequired, Ot as INVALID_REQUEST, P as LADDER_ERROR_HTTP_STATUS, Pt as PROTOCOL_VERSION_META_KEY, Q as isJSONRPCResultResponse, R as modernOnlyStrictRejection, Rt as SUPPORTED_PROTOCOL_VERSIONS, S as specTypeSchemas, St as BAGGAGE_META_KEY, Tt as DEFAULT_NEGOTIATED_PROTOCOL_VERSION, U as assertCompleteRequestResourceTemplate, Ut as requiredClientCapabilitiesForRequest, V as validateMcpParamHeaders, Vt as missingClientCapabilities, W as isCallToolResult, Wt as checkResourceAllowed, X as isJSONRPCRequest, Xt as OAuthErrorCode, Y as isJSONRPCNotification, Yt as OAuthError, Z as isJSONRPCResponse, _ as mergeCapabilities, a as UriTemplate, at as requestMetaOf, c as ReadBuffer, d as serializeMessage, dt as ResourceNotFoundError, et as parseJSONRPCMessage, f as getDisplayName, ft as UnsupportedProtocolVersionError, g as Protocol, h as DEFAULT_REQUEST_TIMEOUT_MSEC, i as InMemoryTransport, jt as LOG_LEVEL_META_KEY, k as inputResponse, kt as JSONRPC_VERSION, l as STDIO_DEFAULT_MAX_BUFFER_SIZE, lt as MissingRequiredClientCapabilityError, m as mediaTypeEssence, mt as ProtocolErrorCode, n as preloadSchemas, o as createFetchWithInit, p as isJsonContentType, pt as UrlElicitationRequiredError, q as isInputRequiredResult, qt as SdkErrorCode, t as fromJsonSchema$1, tt as JSONRPCMessageSchema, u as deserializeMessage, ut as ProtocolError, vt as SUPPORTED_MODERN_PROTOCOL_VERSIONS, wt as CLIENT_INFO_META_KEY, x as isSpecType, y as setNegotiatedProtocolVersion, z as validateStandardRequestHeaders, zt as TRACEPARENT_META_KEY } from "./src-BHSMhZ_W.mjs";
+import { C as armSseKeepAlive, S as DEFAULT_SSE_KEEP_ALIVE_MS, T as isCompletable, _ as DEFAULT_MAX_SUBSCRIPTIONS, a as seedClientIdentityFromEnvelope, b as InMemoryServerEventBus, c as findScopeChallenge, d as buildOAuthProtectedResourceMetadata, f as getOAuthProtectedResourceMetadataUrl, g as verifyBearerToken, h as requireBearerAuth, i as installModernOnlyHandlers, l as requireScopes, m as bearerAuthChallengeResponse, n as ResourceTemplate, o as serverIdentityOf, p as oauthMetadataResponse, r as Server, s as createScopeChallengeResponse, t as McpServer, u as scopeChallengeResourceMetadataUrl, w as completable, x as createServerNotifier, y as createListenRouter } from "./mcp-DIH4cS6P.mjs";
+import { $ as isTaskAugmentedRequestParams, At as LATEST_PROTOCOL_VERSION, B as scanXMcpHeaderDeclarations, Bt as TRACESTATE_META_KEY, Ct as CLIENT_CAPABILITIES_META_KEY, D as acceptedContent, Dt as INVALID_PARAMS, Et as INTERNAL_ERROR, Ft as RELATED_TASK_META_KEY, G as isInitializeRequest, Gt as resourceUrlFromServerUrl, H as assertCompleteRequestPrompt, I as classifyInboundRequest, It as SERVER_INFO_META_KEY, J as isJSONRPCErrorResponse, Jt as SdkHttpError, K as isInitializedNotification, Kt as SdkError, L as httpStatusForErrorCode, Lt as SUBSCRIPTION_ID_META_KEY, Mt as METHOD_NOT_FOUND, Nt as PARSE_ERROR, O as inputRequired, Ot as INVALID_REQUEST, P as LADDER_ERROR_HTTP_STATUS, Pt as PROTOCOL_VERSION_META_KEY, Q as isJSONRPCResultResponse, R as modernOnlyStrictRejection, Rt as SUPPORTED_PROTOCOL_VERSIONS, S as specTypeSchemas, St as BAGGAGE_META_KEY, Tt as DEFAULT_NEGOTIATED_PROTOCOL_VERSION, U as assertCompleteRequestResourceTemplate, Ut as requiredClientCapabilitiesForRequest, V as validateMcpParamHeaders, Vt as missingClientCapabilities, W as isCallToolResult, Wt as checkResourceAllowed, X as isJSONRPCRequest, Xt as OAuthErrorCode, Y as isJSONRPCNotification, Yt as OAuthError, Z as isJSONRPCResponse, _ as mergeCapabilities, a as UriTemplate, at as requestMetaOf, c as ReadBuffer, d as serializeMessage, dt as ResourceNotFoundError, et as parseJSONRPCMessage, f as getDisplayName, ft as UnsupportedProtocolVersionError, g as Protocol, h as DEFAULT_REQUEST_TIMEOUT_MSEC, i as InMemoryTransport, jt as LOG_LEVEL_META_KEY, k as inputResponse, kt as JSONRPC_VERSION, l as STDIO_DEFAULT_MAX_BUFFER_SIZE, lt as MissingRequiredClientCapabilityError, m as mediaTypeEssence, mt as ProtocolErrorCode, n as preloadSchemas, o as createFetchWithInit, p as isJsonContentType, pt as UrlElicitationRequiredError, q as isInputRequiredResult, qt as SdkErrorCode, t as fromJsonSchema$1, tt as JSONRPCMessageSchema, u as deserializeMessage, ut as ProtocolError, vt as SUPPORTED_MODERN_PROTOCOL_VERSIONS, wt as CLIENT_INFO_META_KEY, x as isSpecType, y as setNegotiatedProtocolVersion, z as validateStandardRequestHeaders, zt as TRACEPARENT_META_KEY } from "./src-Cqbh3MYc.mjs";
 import { DefaultJsonSchemaValidator } from "@modelcontextprotocol/server/_shims";
 
 //#region src/server/perRequestTransport.ts
@@ -339,6 +339,10 @@ async function readRequestBody(request, maxBytes = DEFAULT_MAX_REQUEST_BODY_SIZE
 * @example Hono.js
 * ```ts source="./streamableHttp.examples.ts#WebStandardStreamableHTTPServerTransport_hono"
 * app.all('/mcp', async c => {
+*     // Stateless example: create a server and a transport per request.
+*     const server = new McpServer({ name: 'my-server', version: '1.0.0' });
+*     const transport = new WebStandardStreamableHTTPServerTransport({ sessionIdGenerator: undefined });
+*     await server.connect(transport);
 *     return transport.handleRequest(c.req.raw);
 * });
 * ```
@@ -347,6 +351,10 @@ async function readRequestBody(request, maxBytes = DEFAULT_MAX_REQUEST_BODY_SIZE
 * ```ts source="./streamableHttp.examples.ts#WebStandardStreamableHTTPServerTransport_workers"
 * const worker = {
 *     async fetch(request: Request): Promise<Response> {
+*         // Stateless example: create a server and a transport per request.
+*         const server = new McpServer({ name: 'my-server', version: '1.0.0' });
+*         const transport = new WebStandardStreamableHTTPServerTransport({ sessionIdGenerator: undefined });
+*         await server.connect(transport);
 *         return transport.handleRequest(request);
 *     }
 * };
@@ -355,6 +363,7 @@ async function readRequestBody(request, maxBytes = DEFAULT_MAX_REQUEST_BODY_SIZE
 var WebStandardStreamableHTTPServerTransport = class {
 	sessionIdGenerator;
 	_started = false;
+	_hasHandledRequest = false;
 	_closed = false;
 	_streamMapping = /* @__PURE__ */ new Map();
 	_requestToStreamMapping = /* @__PURE__ */ new Map();
@@ -476,6 +485,8 @@ var WebStandardStreamableHTTPServerTransport = class {
 	*/
 	async handleRequest(req, options) {
 		if (this._closed) return this.createJsonErrorResponse(404, -32001, "Session not found");
+		if (!this.sessionIdGenerator && this._hasHandledRequest) throw new Error("Stateless transport cannot be reused across requests. Create a new transport per request.");
+		this._hasHandledRequest = true;
 		const validationError = this.validateRequestHeaders(req);
 		if (validationError) return validationError;
 		switch (req.method) {
@@ -1027,6 +1038,10 @@ function toError(value) {
 function internalServerErrorResponse(id = null) {
 	return jsonRpcErrorResponse(500, -32603, "Internal server error", void 0, id);
 }
+/** Throws when the factory returned an instance that is still connected to another exchange. */
+function assertNotServing(server) {
+	if (server.transport !== void 0) throw new Error("The factory returned an instance that is still serving another request. Return a new instance for each request.");
+}
 /**
 * The entry's default legacy serving (`legacy: 'stateless'`): per-request
 * stateless serving of 2025-era traffic using the same factory as the modern
@@ -1365,6 +1380,7 @@ function createMcpHandler(factory, options = {}) {
 			requestInfo: request
 		});
 		const server = product instanceof McpServer ? product.server : product;
+		assertNotServing(server);
 		if (route.messageKind === "request" && route.message.method === "subscriptions/listen") {
 			const capabilities = server.getCapabilities();
 			const serverInfo = serverIdentityOf(server);
@@ -1398,6 +1414,7 @@ function createMcpHandler(factory, options = {}) {
 			reportError(toError(error));
 			return internalServerErrorResponse(route.message.id);
 		}
+		assertNotServing(server);
 		setNegotiatedProtocolVersion(server, claimedRevision);
 		installModernOnlyHandlers(server, SUPPORTED_MODERN_PROTOCOL_VERSIONS);
 		if (meta !== void 0) seedClientIdentityFromEnvelope(server, {
@@ -1569,14 +1586,22 @@ function hostHeaderValidationResponse(req, allowedHostnames) {
 *   and only browser-originated requests carry the header this check defends against.
 * - Allowlist items are hostnames only (no scheme, no port), the same convention as
 *   `validateHostHeader`. For IPv6, include brackets (e.g. `[::1]`).
+* - A browser extension's origin carries its extension ID as the hostname; list the
+*   ID to allow one extension. An allowlist item of the form `<scheme>://*`
+*   (lowercase, e.g. `moz-extension://*`) allows every origin of that scheme, which
+*   Firefox needs because its extension IDs differ on every install.
+*   `http://*` and `https://*` are not honoured: list websites by hostname.
 * - Any present value that cannot be parsed as an origin URL — including the literal
 *   `null` origin browsers send for opaque contexts — is rejected (deny on failure).
 */
 function validateOriginHeader(originHeader, allowedOriginHostnames) {
 	if (originHeader === null || originHeader === void 0 || originHeader === "") return { ok: true };
 	let hostname;
+	let scheme;
 	try {
-		hostname = new URL(originHeader).hostname;
+		const url = new URL(originHeader);
+		hostname = url.hostname;
+		scheme = url.protocol;
 	} catch {
 		return {
 			ok: false,
@@ -1591,7 +1616,7 @@ function validateOriginHeader(originHeader, allowedOriginHostnames) {
 		message: `Invalid Origin header: ${originHeader}`,
 		originHeader
 	};
-	if (!allowedOriginHostnames.includes(hostname)) return {
+	if (!(scheme !== "http:" && scheme !== "https:" && allowedOriginHostnames.includes(`${scheme}//*`)) && !allowedOriginHostnames.includes(hostname)) return {
 		ok: false,
 		errorCode: "invalid_origin",
 		message: `Invalid Origin: ${hostname}`,