agents 0.19.0 → 0.20.0

package/dist/handler-stateless-8hQN_kC3.js

@@ -0,0 +1,367 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+import { WebStandardStreamableHTTPServerTransport, createMcpHandler, hostHeaderValidationResponse, isJSONRPCRequest, isLegacyRequest, localhostAllowedHostnames, localhostAllowedOrigins, originValidationResponse } from "@modelcontextprotocol/server";
+//#region src/mcp/sse-keepalive.ts
+/**
+* Shared SSE keepalive utility for MCP transports.
+*
+* Cloudflare's edge closes idle SSE responses after ~5 minutes. Writers
+* that may sit silent for that long (long-running tool calls, idle
+* standalone GET streams) arm a keepalive to keep the response under the
+* watchdog.
+*
+* See cloudflare/agents#1583.
+*/
+/** Interval between SSE keepalive comment frames, in ms.
+*
+* The WHATWG SSE spec recommends a comment line every "15 seconds or so"
+* (html.spec.whatwg.org §9.2.7). 25s gives comfortable headroom below
+* both the ~30s post-handler background-work cancellation window on
+* Workers and the ~5min Cloudflare edge idle-stream watchdog.
+*/
+const KEEPALIVE_INTERVAL_MS = 25e3;
+/** SSE comment frame the parser drops before any event dispatch. */
+const KEEPALIVE_FRAME = ": keepalive\n\n";
+/**
+* Start an SSE keepalive on `writer`. Returns a `clearInterval` handle
+* that the stream cleanup must invoke when the stream closes.
+*/
+function startKeepalive(writer, encoder) {
+	const handle = setInterval(() => {
+		writer.write(encoder.encode(KEEPALIVE_FRAME)).catch(() => clearInterval(handle));
+	}, KEEPALIVE_INTERVAL_MS);
+	return handle;
+}
+//#endregion
+//#region src/mcp/auth-context.ts
+const VERIFIED_OAUTH_CONTEXT = Symbol.for("cloudflare.workers-oauth-provider.verified-context.v1");
+const authContextStorage = new AsyncLocalStorage();
+function getMcpAuthContext() {
+	return authContextStorage.getStore();
+}
+function runWithAuthContext(context, fn) {
+	return authContextStorage.run(context, fn);
+}
+function isPlainRecord(value) {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
+	const prototype = Object.getPrototypeOf(value);
+	return prototype === Object.prototype || prototype === null;
+}
+function invalidVerifiedContext() {
+	throw new TypeError("Invalid verified OAuth request context");
+}
+function getVerifiedOAuthAuthInfo(ctx) {
+	const symbolContext = ctx;
+	if (!(VERIFIED_OAUTH_CONTEXT in symbolContext)) return void 0;
+	const value = symbolContext[VERIFIED_OAUTH_CONTEXT];
+	if (!isPlainRecord(value) || value.version !== 1) invalidVerifiedContext();
+	const { token, clientId, scopes, expiresAt, resource, props } = value;
+	if (typeof token !== "string" || token.length === 0 || typeof clientId !== "string" || clientId.length === 0 || !Array.isArray(scopes) || !scopes.every((scope) => typeof scope === "string") || !isPlainRecord(props)) invalidVerifiedContext();
+	if (expiresAt !== void 0 && (typeof expiresAt !== "number" || !Number.isFinite(expiresAt) || expiresAt <= 0)) invalidVerifiedContext();
+	let resourceUrl;
+	if (resource !== void 0) {
+		if (typeof resource !== "string") invalidVerifiedContext();
+		try {
+			resourceUrl = new URL(resource);
+		} catch {
+			invalidVerifiedContext();
+		}
+		if (resourceUrl.protocol !== "http:" && resourceUrl.protocol !== "https:") invalidVerifiedContext();
+	}
+	if (ctx.props !== props) invalidVerifiedContext();
+	return {
+		props,
+		authInfo: {
+			token,
+			clientId,
+			scopes: [...scopes],
+			...expiresAt !== void 0 && { expiresAt },
+			...resourceUrl !== void 0 && { resource: resourceUrl },
+			extra: { props }
+		}
+	};
+}
+//#endregion
+//#region src/mcp/handler-errors.ts
+function internalErrorResponse(id = null) {
+	return Response.json({
+		jsonrpc: "2.0",
+		error: {
+			code: -32603,
+			message: "Internal server error"
+		},
+		id
+	}, { status: 500 });
+}
+function requestIdFromParsedBody(body) {
+	if (typeof body !== "object" || body === null || Array.isArray(body) || !("method" in body) || typeof body.method !== "string" || !("id" in body)) return null;
+	return typeof body.id === "string" || typeof body.id === "number" ? body.id : null;
+}
+function reportHandlerError(onerror, error) {
+	try {
+		onerror?.(error instanceof Error ? error : new Error(String(error)));
+	} catch {}
+}
+//#endregion
+//#region src/mcp/handler-legacy-compat.ts
+/**
+* Temporary adapter for Legacy compatibility on the SDK v2 transport.
+*
+* Local deltas from the upstream stateless fallback:
+*
+* - impossible stateless server-to-client requests fail immediately rather
+*   than leaving the tool handler waiting for a session response;
+* - streamed POST responses receive Cloudflare's 25-second SSE keepalive.
+*
+* Remove this adapter once the SDK exposes both policies directly.
+*/
+function createLegacyCompatibilityRequestHandler(factory, onerror) {
+	const fetch = async (request, options) => {
+		if (request.method.toUpperCase() !== "POST") return Response.json({
+			jsonrpc: "2.0",
+			error: {
+				code: -32e3,
+				message: "Method not allowed."
+			},
+			id: null
+		}, { status: 405 });
+		if (request.signal.aborted) return new Response(null, { status: 499 });
+		let product;
+		let transport;
+		let clearResponseKeepalive = () => {};
+		let teardownPromise;
+		const teardown = () => teardownPromise ??= (async () => {
+			clearResponseKeepalive();
+			await Promise.all([transport?.close().catch(() => {}), product?.close().catch(() => {})]);
+		})();
+		const onAbort = () => void teardown();
+		try {
+			product = await factory({
+				era: "legacy",
+				...options?.authInfo !== void 0 && { authInfo: options.authInfo },
+				requestInfo: request
+			});
+			transport = new WebStandardStreamableHTTPServerTransport({ sessionIdGenerator: void 0 });
+			const send = transport.send.bind(transport);
+			transport.send = async (message, sendOptions) => {
+				if (isJSONRPCRequest(message)) {
+					transport?.onmessage?.({
+						jsonrpc: "2.0",
+						id: message.id,
+						error: {
+							code: -32603,
+							message: "Server-to-client requests are unavailable in the Legacy compatibility lane. Use inputRequired(...) for Stateless clients, or route Legacy traffic to a sessionful transport."
+						}
+					});
+					return;
+				}
+				await send(message, sendOptions);
+			};
+			await product.connect(transport);
+			if (request.signal.aborted) {
+				await teardown();
+				return new Response(null, { status: 499 });
+			}
+			request.signal.addEventListener("abort", onAbort, { once: true });
+			const response = await transport.handleRequest(request, {
+				...options?.authInfo !== void 0 && { authInfo: options.authInfo },
+				...options?.parsedBody !== void 0 && { parsedBody: options.parsedBody }
+			});
+			if (response.body === null || !response.headers.get("content-type")?.includes("text/event-stream")) {
+				request.signal.removeEventListener("abort", onAbort);
+				await teardown();
+				return response;
+			}
+			const reader = response.body.getReader();
+			const encoder = new TextEncoder();
+			let keepalive;
+			const clearKeepalive = () => {
+				if (keepalive !== void 0) {
+					clearInterval(keepalive);
+					keepalive = void 0;
+				}
+			};
+			clearResponseKeepalive = clearKeepalive;
+			const body = new ReadableStream({
+				start(controller) {
+					if (teardownPromise) return;
+					keepalive = setInterval(() => {
+						try {
+							controller.enqueue(encoder.encode(KEEPALIVE_FRAME));
+						} catch {
+							clearKeepalive();
+						}
+					}, KEEPALIVE_INTERVAL_MS);
+				},
+				async pull(controller) {
+					try {
+						const { done, value } = await reader.read();
+						if (done) {
+							clearKeepalive();
+							request.signal.removeEventListener("abort", onAbort);
+							await teardown();
+							controller.close();
+						} else if (value !== void 0) controller.enqueue(value);
+					} catch (error) {
+						clearKeepalive();
+						request.signal.removeEventListener("abort", onAbort);
+						await teardown();
+						controller.error(error);
+					}
+				},
+				async cancel(reason) {
+					clearKeepalive();
+					request.signal.removeEventListener("abort", onAbort);
+					await reader.cancel(reason).catch(() => {});
+					await teardown();
+				}
+			});
+			return new Response(body, {
+				status: response.status,
+				statusText: response.statusText,
+				headers: response.headers
+			});
+		} catch (error) {
+			request.signal.removeEventListener("abort", onAbort);
+			await teardown();
+			reportHandlerError(onerror, error);
+			return internalErrorResponse(requestIdFromParsedBody(options?.parsedBody));
+		}
+	};
+	return { fetch };
+}
+//#endregion
+//#region src/mcp/handler-stateless.ts
+const DEFAULT_CORS_OPTIONS = {
+	origin: "*",
+	headers: "Content-Type, Accept, Authorization, mcp-session-id, MCP-Protocol-Version, Mcp-Method, Mcp-Name",
+	methods: "GET, POST, DELETE, OPTIONS",
+	exposeHeaders: "mcp-session-id",
+	maxAge: 86400
+};
+function corsHeaders(options = {}) {
+	const merged = {
+		...DEFAULT_CORS_OPTIONS,
+		...options
+	};
+	return new Headers({
+		"Access-Control-Allow-Headers": merged.headers,
+		"Access-Control-Allow-Methods": merged.methods,
+		"Access-Control-Allow-Origin": merged.origin,
+		"Access-Control-Expose-Headers": merged.exposeHeaders,
+		"Access-Control-Max-Age": String(merged.maxAge)
+	});
+}
+function withCors(response, options) {
+	const headers = new Headers(response.headers);
+	if (options === false) {
+		for (const name of Array.from(headers.keys())) if (name.toLowerCase().startsWith("access-control-")) headers.delete(name);
+	} else for (const [name, value] of corsHeaders(options)) headers.set(name, value);
+	return new Response(response.body, {
+		status: response.status,
+		statusText: response.statusText,
+		headers
+	});
+}
+function wrapResponseBodyWithAuthContext(response, authContext) {
+	if (!authContext || !response.body) return response;
+	const reader = response.body.getReader();
+	const body = new ReadableStream({
+		pull(controller) {
+			return runWithAuthContext(authContext, async () => {
+				try {
+					const { done, value } = await reader.read();
+					if (done) controller.close();
+					else controller.enqueue(value);
+				} catch (error) {
+					controller.error(error);
+				}
+			});
+		},
+		cancel(reason) {
+			return runWithAuthContext(authContext, () => reader.cancel(reason));
+		}
+	});
+	return new Response(body, {
+		status: response.status,
+		statusText: response.statusText,
+		headers: response.headers
+	});
+}
+function createStatelessMcpHandler(factory, options = {}) {
+	const optionRecord = options;
+	if (optionRecord.bus !== void 0) throw new TypeError("createMcpHandler option \"bus\" is not exposed by the Agents SDK.");
+	const legacyOnlyOption = [
+		"transport",
+		"storage",
+		"sessionIdGenerator",
+		"onsessioninitialized",
+		"onsessionclosed",
+		"enableJsonResponse",
+		"eventStore",
+		"allowedHosts",
+		"allowedOrigins",
+		"enableDnsRebindingProtection",
+		"retryInterval"
+	].find((key) => optionRecord[key] !== void 0);
+	if (legacyOnlyOption) throw new TypeError(`createMcpHandler option "${legacyOnlyOption}" is only supported with an MCP SDK v1 server. The managed SDK v2 handler is stateless; remove this option or keep the v1 server during migration.`);
+	const { route = "/mcp", corsOptions = {}, allowedHostnames, allowedOriginHostnames, authContext, legacy = "stateless", ...sdkOptions } = options;
+	const sdkHandler = createMcpHandler(factory, {
+		...sdkOptions,
+		legacy: "reject"
+	});
+	const legacyCompatibilityHandler = legacy === "stateless" ? createLegacyCompatibilityRequestHandler(factory, sdkOptions.onerror) : void 0;
+	const serve = async (request, requestOptions, workerCtx) => {
+		const requestUrl = new URL(request.url);
+		if (requestUrl.pathname !== route) return withCors(new Response("Not Found", { status: 404 }), corsOptions);
+		const localEndpoint = localhostAllowedHostnames().includes(requestUrl.hostname);
+		const workersDevEndpoint = requestUrl.hostname.endsWith(".workers.dev");
+		const acceptedHostnames = allowedHostnames ?? (localEndpoint ? localhostAllowedHostnames() : workersDevEndpoint ? [requestUrl.hostname] : void 0);
+		const hostRejection = acceptedHostnames ? hostHeaderValidationResponse(request, acceptedHostnames) : void 0;
+		if (hostRejection) return withCors(hostRejection, corsOptions);
+		if (allowedOriginHostnames !== "*") {
+			let acceptedOriginHostnames = allowedOriginHostnames;
+			if (acceptedOriginHostnames === void 0) {
+				const defaults = new Set(localhostAllowedOrigins());
+				if (workersDevEndpoint) defaults.add(requestUrl.hostname);
+				if (corsOptions !== false && corsOptions.origin !== void 0) try {
+					const configuredOrigin = new URL(corsOptions.origin);
+					if ((configuredOrigin.protocol === "http:" || configuredOrigin.protocol === "https:") && configuredOrigin.hostname) defaults.add(configuredOrigin.hostname);
+				} catch {}
+				acceptedOriginHostnames = [...defaults];
+			}
+			const originRejection = originValidationResponse(request, acceptedOriginHostnames ?? []);
+			if (originRejection) return withCors(originRejection, corsOptions);
+		}
+		if (request.method === "OPTIONS" && corsOptions !== false) return new Response(null, { headers: corsHeaders(corsOptions) });
+		const legacyRequest = legacyCompatibilityHandler !== void 0 && await isLegacyRequest(request, requestOptions?.parsedBody);
+		try {
+			const verified = workerCtx ? getVerifiedOAuthAuthInfo(workerCtx) : void 0;
+			const explicitAuthInfo = requestOptions?.authInfo;
+			if (verified && explicitAuthInfo && explicitAuthInfo.clientId !== verified.authInfo.clientId) throw new TypeError("Conflicting verified OAuth client identity");
+			const authInfo = explicitAuthInfo ?? verified?.authInfo;
+			const resolvedAuthContext = authContext ?? (verified ? { props: verified.props } : workerCtx?.props && Object.keys(workerCtx.props).length > 0 ? { props: workerCtx.props } : void 0);
+			const upstreamOptions = requestOptions || authInfo ? {
+				...requestOptions,
+				...authInfo && { authInfo }
+			} : void 0;
+			const invoke = async () => {
+				if (legacyRequest && legacyCompatibilityHandler) return legacyCompatibilityHandler.fetch(request, upstreamOptions);
+				return sdkHandler.fetch(request, upstreamOptions);
+			};
+			return withCors(wrapResponseBodyWithAuthContext(resolvedAuthContext ? await runWithAuthContext(resolvedAuthContext, invoke) : await invoke(), resolvedAuthContext), corsOptions);
+		} catch (error) {
+			reportHandlerError(sdkOptions.onerror, error);
+			return withCors(internalErrorResponse(), corsOptions);
+		}
+	};
+	const callable = (request, _env, ctx) => serve(request, void 0, ctx);
+	const fetch = (request, requestOptions) => serve(request, requestOptions);
+	return Object.assign(callable, {
+		fetch,
+		notify: sdkHandler.notify
+	});
+}
+//#endregion
+export { KEEPALIVE_INTERVAL_MS as a, KEEPALIVE_FRAME as i, getMcpAuthContext as n, startKeepalive as o, runWithAuthContext as r, createStatelessMcpHandler as t };
+
+//# sourceMappingURL=handler-stateless-8hQN_kC3.js.map

package/dist/handler-stateless-8hQN_kC3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler-stateless-8hQN_kC3.js","names":["candidate","createSdkMcpHandler"],"sources":["../src/mcp/sse-keepalive.ts","../src/mcp/auth-context.ts","../src/mcp/handler-errors.ts","../src/mcp/handler-legacy-compat.ts","../src/mcp/handler-stateless.ts"],"sourcesContent":["/**\n * Shared SSE keepalive utility for MCP transports.\n *\n * Cloudflare's edge closes idle SSE responses after ~5 minutes. Writers\n * that may sit silent for that long (long-running tool calls, idle\n * standalone GET streams) arm a keepalive to keep the response under the\n * watchdog.\n *\n * See cloudflare/agents#1583.\n */\n\n/** Interval between SSE keepalive comment frames, in ms.\n *\n * The WHATWG SSE spec recommends a comment line every \"15 seconds or so\"\n * (html.spec.whatwg.org §9.2.7). 25s gives comfortable headroom below\n * both the ~30s post-handler background-work cancellation window on\n * Workers and the ~5min Cloudflare edge idle-stream watchdog.\n */\nexport const KEEPALIVE_INTERVAL_MS = 25_000;\n\n/** SSE comment frame the parser drops before any event dispatch. */\nexport const KEEPALIVE_FRAME = \": keepalive\\n\\n\";\n\n/**\n * Start an SSE keepalive on `writer`. Returns a `clearInterval` handle\n * that the stream cleanup must invoke when the stream closes.\n */\nexport function startKeepalive(\n  writer: WritableStreamDefaultWriter<Uint8Array>,\n  encoder: TextEncoder\n): ReturnType<typeof setInterval> {\n  const handle = setInterval(() => {\n    writer\n      .write(encoder.encode(KEEPALIVE_FRAME))\n      .catch(() => clearInterval(handle));\n  }, KEEPALIVE_INTERVAL_MS);\n  return handle;\n}\n","import { AsyncLocalStorage } from \"node:async_hooks\";\nimport type { AuthInfo } from \"@modelcontextprotocol/server\";\n\nconst VERIFIED_OAUTH_CONTEXT = Symbol.for(\n  \"cloudflare.workers-oauth-provider.verified-context.v1\"\n);\n\ninterface VerifiedWorkersOAuthContext {\n  version: 1;\n  token: string;\n  clientId: string;\n  scopes: string[];\n  expiresAt?: number;\n  resource?: string;\n  props: Record<string, unknown>;\n}\n\nexport interface McpAuthContext {\n  props: Record<string, unknown>;\n}\n\nconst authContextStorage = new AsyncLocalStorage<McpAuthContext>();\n\nexport function getMcpAuthContext(): McpAuthContext | undefined {\n  return authContextStorage.getStore();\n}\n\nexport function runWithAuthContext<T>(context: McpAuthContext, fn: () => T): T {\n  return authContextStorage.run(context, fn);\n}\n\nfunction isPlainRecord(value: unknown): value is Record<string, unknown> {\n  if (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n    return false;\n  }\n  const prototype = Object.getPrototypeOf(value);\n  return prototype === Object.prototype || prototype === null;\n}\n\nfunction invalidVerifiedContext(): never {\n  throw new TypeError(\"Invalid verified OAuth request context\");\n}\n\nexport function getVerifiedOAuthAuthInfo(\n  ctx: ExecutionContext\n): { authInfo: AuthInfo; props: Record<string, unknown> } | undefined {\n  const symbolContext = ctx as ExecutionContext & Record<symbol, unknown>;\n  if (!(VERIFIED_OAUTH_CONTEXT in symbolContext)) return undefined;\n\n  const value = symbolContext[VERIFIED_OAUTH_CONTEXT];\n  if (!isPlainRecord(value) || value.version !== 1) invalidVerifiedContext();\n\n  const candidate = value as Partial<VerifiedWorkersOAuthContext>;\n  const { token, clientId, scopes, expiresAt, resource, props } = candidate;\n  if (\n    typeof token !== \"string\" ||\n    token.length === 0 ||\n    typeof clientId !== \"string\" ||\n    clientId.length === 0 ||\n    !Array.isArray(scopes) ||\n    !scopes.every((scope) => typeof scope === \"string\") ||\n    !isPlainRecord(props)\n  ) {\n    invalidVerifiedContext();\n  }\n\n  if (\n    expiresAt !== undefined &&\n    (typeof expiresAt !== \"number\" ||\n      !Number.isFinite(expiresAt) ||\n      expiresAt <= 0)\n  ) {\n    invalidVerifiedContext();\n  }\n\n  let resourceUrl: URL | undefined;\n  if (resource !== undefined) {\n    if (typeof resource !== \"string\") invalidVerifiedContext();\n    try {\n      resourceUrl = new URL(resource);\n    } catch {\n      invalidVerifiedContext();\n    }\n    if (resourceUrl.protocol !== \"http:\" && resourceUrl.protocol !== \"https:\") {\n      invalidVerifiedContext();\n    }\n  }\n\n  if (ctx.props !== props) invalidVerifiedContext();\n\n  return {\n    props,\n    authInfo: {\n      token,\n      clientId,\n      scopes: [...scopes],\n      ...(expiresAt !== undefined && { expiresAt }),\n      ...(resourceUrl !== undefined && { resource: resourceUrl }),\n      extra: { props }\n    }\n  };\n}\n","export function internalErrorResponse(\n  id: string | number | null = null\n): Response {\n  return Response.json(\n    {\n      jsonrpc: \"2.0\",\n      error: { code: -32603, message: \"Internal server error\" },\n      id\n    },\n    { status: 500 }\n  );\n}\n\nexport function requestIdFromParsedBody(body: unknown): string | number | null {\n  if (\n    typeof body !== \"object\" ||\n    body === null ||\n    Array.isArray(body) ||\n    !(\"method\" in body) ||\n    typeof body.method !== \"string\" ||\n    !(\"id\" in body)\n  ) {\n    return null;\n  }\n  return typeof body.id === \"string\" || typeof body.id === \"number\"\n    ? body.id\n    : null;\n}\n\nexport function reportHandlerError(\n  onerror: ((error: Error) => void) | undefined,\n  error: unknown\n): void {\n  try {\n    onerror?.(error instanceof Error ? error : new Error(String(error)));\n  } catch {\n    // Error reporting must not change the response.\n  }\n}\n","import {\n  WebStandardStreamableHTTPServerTransport,\n  isJSONRPCRequest,\n  type McpHandlerRequestOptions,\n  type McpServer,\n  type McpServerFactory,\n  type Server\n} from \"@modelcontextprotocol/server\";\nimport {\n  internalErrorResponse,\n  reportHandlerError,\n  requestIdFromParsedBody\n} from \"./handler-errors\";\nimport { KEEPALIVE_FRAME, KEEPALIVE_INTERVAL_MS } from \"./sse-keepalive\";\n\n/**\n * Temporary adapter for Legacy compatibility on the SDK v2 transport.\n *\n * Local deltas from the upstream stateless fallback:\n *\n * - impossible stateless server-to-client requests fail immediately rather\n *   than leaving the tool handler waiting for a session response;\n * - streamed POST responses receive Cloudflare's 25-second SSE keepalive.\n *\n * Remove this adapter once the SDK exposes both policies directly.\n */\nexport function createLegacyCompatibilityRequestHandler(\n  factory: McpServerFactory,\n  onerror?: (error: Error) => void\n) {\n  const fetch = async (\n    request: Request,\n    options: McpHandlerRequestOptions | undefined\n  ): Promise<Response> => {\n    // Match the upstream Legacy fallback: GET and DELETE are session operations\n    // and cannot be served by a fresh per-request transport. Reject\n    // them before running a factory with application-visible side effects.\n    if (request.method.toUpperCase() !== \"POST\") {\n      return Response.json(\n        {\n          jsonrpc: \"2.0\",\n          error: { code: -32000, message: \"Method not allowed.\" },\n          id: null\n        },\n        { status: 405 }\n      );\n    }\n\n    if (request.signal.aborted) {\n      return new Response(null, { status: 499 });\n    }\n\n    let product: McpServer | Server | undefined;\n    let transport: WebStandardStreamableHTTPServerTransport | undefined;\n    let clearResponseKeepalive = () => {};\n    let teardownPromise: Promise<void> | undefined;\n    const teardown = () =>\n      (teardownPromise ??= (async () => {\n        clearResponseKeepalive();\n        await Promise.all([\n          transport?.close().catch(() => {}),\n          product?.close().catch(() => {})\n        ]);\n      })());\n    const onAbort = () => void teardown();\n\n    try {\n      product = await factory({\n        era: \"legacy\",\n        ...(options?.authInfo !== undefined && { authInfo: options.authInfo }),\n        requestInfo: request\n      });\n      transport = new WebStandardStreamableHTTPServerTransport({\n        sessionIdGenerator: undefined\n      });\n\n      const send = transport.send.bind(transport);\n      transport.send = async (message, sendOptions) => {\n        if (isJSONRPCRequest(message)) {\n          transport?.onmessage?.({\n            jsonrpc: \"2.0\",\n            id: message.id,\n            error: {\n              code: -32603,\n              message:\n                \"Server-to-client requests are unavailable in the Legacy compatibility lane. \" +\n                \"Use inputRequired(...) for Stateless clients, or route \" +\n                \"Legacy traffic to a sessionful transport.\"\n            }\n          });\n          return;\n        }\n        await send(message, sendOptions);\n      };\n\n      await product.connect(transport);\n      if (request.signal.aborted) {\n        await teardown();\n        return new Response(null, { status: 499 });\n      }\n      request.signal.addEventListener(\"abort\", onAbort, { once: true });\n      const response = await transport.handleRequest(request, {\n        ...(options?.authInfo !== undefined && {\n          authInfo: options.authInfo\n        }),\n        ...(options?.parsedBody !== undefined && {\n          parsedBody: options.parsedBody\n        })\n      });\n\n      if (\n        response.body === null ||\n        !response.headers.get(\"content-type\")?.includes(\"text/event-stream\")\n      ) {\n        request.signal.removeEventListener(\"abort\", onAbort);\n        await teardown();\n        return response;\n      }\n\n      const reader = response.body.getReader();\n      const encoder = new TextEncoder();\n      let keepalive: ReturnType<typeof setInterval> | undefined;\n      const clearKeepalive = () => {\n        if (keepalive !== undefined) {\n          clearInterval(keepalive);\n          keepalive = undefined;\n        }\n      };\n      clearResponseKeepalive = clearKeepalive;\n\n      const body = new ReadableStream<Uint8Array>({\n        start(controller) {\n          if (teardownPromise) return;\n          keepalive = setInterval(() => {\n            try {\n              controller.enqueue(encoder.encode(KEEPALIVE_FRAME));\n            } catch {\n              clearKeepalive();\n            }\n          }, KEEPALIVE_INTERVAL_MS);\n        },\n        async pull(controller) {\n          try {\n            const { done, value } = await reader.read();\n            if (done) {\n              clearKeepalive();\n              request.signal.removeEventListener(\"abort\", onAbort);\n              await teardown();\n              controller.close();\n            } else if (value !== undefined) {\n              controller.enqueue(value);\n            }\n          } catch (error) {\n            clearKeepalive();\n            request.signal.removeEventListener(\"abort\", onAbort);\n            await teardown();\n            controller.error(error);\n          }\n        },\n        async cancel(reason) {\n          clearKeepalive();\n          request.signal.removeEventListener(\"abort\", onAbort);\n          await reader.cancel(reason).catch(() => {});\n          await teardown();\n        }\n      });\n      return new Response(body, {\n        status: response.status,\n        statusText: response.statusText,\n        headers: response.headers\n      });\n    } catch (error) {\n      request.signal.removeEventListener(\"abort\", onAbort);\n      await teardown();\n      reportHandlerError(onerror, error);\n      return internalErrorResponse(\n        requestIdFromParsedBody(options?.parsedBody)\n      );\n    }\n  };\n\n  return { fetch };\n}\n","import {\n  createMcpHandler as createSdkMcpHandler,\n  hostHeaderValidationResponse,\n  isLegacyRequest,\n  localhostAllowedHostnames,\n  localhostAllowedOrigins,\n  originValidationResponse,\n  type AuthInfo,\n  type CreateMcpHandlerOptions as SdkCreateMcpHandlerOptions,\n  type McpHandlerRequestOptions,\n  type McpServerFactory,\n  type ServerNotifier\n} from \"@modelcontextprotocol/server\";\nimport {\n  getVerifiedOAuthAuthInfo,\n  runWithAuthContext,\n  type McpAuthContext\n} from \"./auth-context\";\nimport { internalErrorResponse, reportHandlerError } from \"./handler-errors\";\nimport { createLegacyCompatibilityRequestHandler } from \"./handler-legacy-compat\";\nimport type { CORSOptions } from \"./types\";\n\nexport interface CreateStatelessMcpHandlerOptions extends Omit<\n  SdkCreateMcpHandlerOptions,\n  \"bus\"\n> {\n  /** Exact pathname handled by this Worker wrapper. @default \"/mcp\" */\n  route?: string;\n  /** CORS headers applied by the Worker wrapper. Pass `false` to disable. */\n  corsOptions?: CORSOptions | false;\n  /**\n   * Restrict `Host` headers to these hostnames. Localhost and `workers.dev`\n   * endpoints receive matching defaults; custom domains rely on Cloudflare\n   * routing unless this option is set.\n   */\n  allowedHostnames?: string[];\n  /**\n   * Restrict present browser `Origin` headers to these hostnames. Requests\n   * without an Origin (including non-browser MCP clients) remain valid. The\n   * default includes localhost-class Origins, the endpoint's `workers.dev`\n   * hostname, and a concrete `corsOptions.origin` hostname. Pass `\"*\"` only\n   * when equivalent Origin validation runs in trusted middleware upstream.\n   */\n  allowedOriginHostnames?: string[] | \"*\";\n  /** Application props exposed through {@link getMcpAuthContext}. */\n  authContext?: McpAuthContext;\n}\n\nexport type StatelessMcpHandler = {\n  (request: Request, env: unknown, ctx: ExecutionContext): Promise<Response>;\n  fetch(\n    request: Request,\n    options?: McpHandlerRequestOptions\n  ): Promise<Response>;\n  notify: ServerNotifier;\n};\n\nexport type StatelessMcpServerInput = McpServerFactory;\n\nconst DEFAULT_CORS_OPTIONS: Required<CORSOptions> = {\n  origin: \"*\",\n  headers:\n    \"Content-Type, Accept, Authorization, mcp-session-id, MCP-Protocol-Version, Mcp-Method, Mcp-Name\",\n  methods: \"GET, POST, DELETE, OPTIONS\",\n  exposeHeaders: \"mcp-session-id\",\n  maxAge: 86400\n};\n\nfunction corsHeaders(options: CORSOptions = {}): Headers {\n  const merged = { ...DEFAULT_CORS_OPTIONS, ...options };\n  return new Headers({\n    \"Access-Control-Allow-Headers\": merged.headers,\n    \"Access-Control-Allow-Methods\": merged.methods,\n    \"Access-Control-Allow-Origin\": merged.origin,\n    \"Access-Control-Expose-Headers\": merged.exposeHeaders,\n    \"Access-Control-Max-Age\": String(merged.maxAge)\n  });\n}\n\nfunction withCors(response: Response, options: CORSOptions | false): Response {\n  const headers = new Headers(response.headers);\n  if (options === false) {\n    for (const name of Array.from(headers.keys())) {\n      if (name.toLowerCase().startsWith(\"access-control-\")) {\n        headers.delete(name);\n      }\n    }\n  } else {\n    for (const [name, value] of corsHeaders(options)) {\n      headers.set(name, value);\n    }\n  }\n  return new Response(response.body, {\n    status: response.status,\n    statusText: response.statusText,\n    headers\n  });\n}\n\nfunction wrapResponseBodyWithAuthContext(\n  response: Response,\n  authContext: McpAuthContext | undefined\n): Response {\n  if (!authContext || !response.body) return response;\n\n  const reader = response.body.getReader();\n  const body = new ReadableStream<Uint8Array>({\n    pull(controller) {\n      return runWithAuthContext(authContext, async () => {\n        try {\n          const { done, value } = await reader.read();\n          if (done) {\n            controller.close();\n          } else {\n            controller.enqueue(value);\n          }\n        } catch (error) {\n          controller.error(error);\n        }\n      });\n    },\n    cancel(reason) {\n      return runWithAuthContext(authContext, () => reader.cancel(reason));\n    }\n  });\n\n  return new Response(body, {\n    status: response.status,\n    statusText: response.statusText,\n    headers: response.headers\n  });\n}\n\nexport function createStatelessMcpHandler(\n  factory: StatelessMcpServerInput,\n  options: CreateStatelessMcpHandlerOptions = {}\n): StatelessMcpHandler {\n  const optionRecord = options as Record<string, unknown>;\n  if (optionRecord.bus !== undefined) {\n    throw new TypeError(\n      'createMcpHandler option \"bus\" is not exposed by the Agents SDK.'\n    );\n  }\n  const legacyOnlyOption = [\n    \"transport\",\n    \"storage\",\n    \"sessionIdGenerator\",\n    \"onsessioninitialized\",\n    \"onsessionclosed\",\n    \"enableJsonResponse\",\n    \"eventStore\",\n    \"allowedHosts\",\n    \"allowedOrigins\",\n    \"enableDnsRebindingProtection\",\n    \"retryInterval\"\n  ].find((key) => optionRecord[key] !== undefined);\n  if (legacyOnlyOption) {\n    throw new TypeError(\n      `createMcpHandler option \"${legacyOnlyOption}\" is only supported with an MCP SDK v1 server. The managed SDK v2 handler is stateless; remove this option or keep the v1 server during migration.`\n    );\n  }\n\n  const {\n    route = \"/mcp\",\n    corsOptions = {},\n    allowedHostnames,\n    allowedOriginHostnames,\n    authContext,\n    legacy = \"stateless\",\n    ...sdkOptions\n  } = options;\n\n  const sdkHandler = createSdkMcpHandler(factory, {\n    ...sdkOptions,\n    legacy: \"reject\"\n  });\n  const legacyCompatibilityHandler =\n    legacy === \"stateless\"\n      ? createLegacyCompatibilityRequestHandler(factory, sdkOptions.onerror)\n      : undefined;\n\n  const serve = async (\n    request: Request,\n    requestOptions?: McpHandlerRequestOptions,\n    workerCtx?: ExecutionContext\n  ): Promise<Response> => {\n    const requestUrl = new URL(request.url);\n    if (requestUrl.pathname !== route) {\n      return withCors(new Response(\"Not Found\", { status: 404 }), corsOptions);\n    }\n\n    // The SDK app factories can distinguish their bind address from an\n    // attacker-controlled Host header. A bare Worker cannot. Use defaults we\n    // can establish independently: localhost-class names, a standard\n    // workers.dev route, and any concrete CORS Origin the application chose.\n    // Custom-domain deployments can provide explicit Host and Origin lists.\n    const localEndpoint = localhostAllowedHostnames().includes(\n      requestUrl.hostname\n    );\n    const workersDevEndpoint = requestUrl.hostname.endsWith(\".workers.dev\");\n    const acceptedHostnames =\n      allowedHostnames ??\n      (localEndpoint\n        ? localhostAllowedHostnames()\n        : workersDevEndpoint\n          ? [requestUrl.hostname]\n          : undefined);\n    const hostRejection = acceptedHostnames\n      ? hostHeaderValidationResponse(request, acceptedHostnames)\n      : undefined;\n    if (hostRejection) {\n      return withCors(hostRejection, corsOptions);\n    }\n    if (allowedOriginHostnames !== \"*\") {\n      let acceptedOriginHostnames = allowedOriginHostnames;\n      if (acceptedOriginHostnames === undefined) {\n        const defaults = new Set(localhostAllowedOrigins());\n        if (workersDevEndpoint) defaults.add(requestUrl.hostname);\n        if (corsOptions !== false && corsOptions.origin !== undefined) {\n          try {\n            const configuredOrigin = new URL(corsOptions.origin);\n            if (\n              (configuredOrigin.protocol === \"http:\" ||\n                configuredOrigin.protocol === \"https:\") &&\n              configuredOrigin.hostname\n            ) {\n              defaults.add(configuredOrigin.hostname);\n            }\n          } catch {\n            // A wildcard or malformed CORS value does not expand the allowlist.\n          }\n        }\n        acceptedOriginHostnames = [...defaults];\n      }\n      const originRejection = originValidationResponse(\n        request,\n        acceptedOriginHostnames ?? []\n      );\n      if (originRejection) {\n        return withCors(originRejection, corsOptions);\n      }\n    }\n\n    if (request.method === \"OPTIONS\" && corsOptions !== false) {\n      return new Response(null, { headers: corsHeaders(corsOptions) });\n    }\n\n    const legacyRequest =\n      legacyCompatibilityHandler !== undefined &&\n      (await isLegacyRequest(request, requestOptions?.parsedBody));\n\n    try {\n      const verified = workerCtx\n        ? getVerifiedOAuthAuthInfo(workerCtx)\n        : undefined;\n      const explicitAuthInfo = requestOptions?.authInfo;\n      if (\n        verified &&\n        explicitAuthInfo &&\n        explicitAuthInfo.clientId !== verified.authInfo.clientId\n      ) {\n        throw new TypeError(\"Conflicting verified OAuth client identity\");\n      }\n\n      const authInfo: AuthInfo | undefined =\n        explicitAuthInfo ?? verified?.authInfo;\n      const resolvedAuthContext =\n        authContext ??\n        (verified\n          ? { props: verified.props }\n          : workerCtx?.props && Object.keys(workerCtx.props).length > 0\n            ? { props: workerCtx.props as Record<string, unknown> }\n            : undefined);\n      const upstreamOptions: McpHandlerRequestOptions | undefined =\n        requestOptions || authInfo\n          ? { ...requestOptions, ...(authInfo && { authInfo }) }\n          : undefined;\n      const invoke = async () => {\n        if (legacyRequest && legacyCompatibilityHandler) {\n          return legacyCompatibilityHandler.fetch(request, upstreamOptions);\n        }\n        return sdkHandler.fetch(request, upstreamOptions);\n      };\n      const response = resolvedAuthContext\n        ? await runWithAuthContext(resolvedAuthContext, invoke)\n        : await invoke();\n      return withCors(\n        wrapResponseBodyWithAuthContext(response, resolvedAuthContext),\n        corsOptions\n      );\n    } catch (error) {\n      reportHandlerError(sdkOptions.onerror, error);\n      return withCors(internalErrorResponse(), corsOptions);\n    }\n  };\n\n  const callable = (request: Request, _env: unknown, ctx: ExecutionContext) =>\n    serve(request, undefined, ctx);\n  const fetch = (request: Request, requestOptions?: McpHandlerRequestOptions) =>\n    serve(request, requestOptions);\n\n  return Object.assign(callable, {\n    fetch,\n    notify: sdkHandler.notify\n  }) as StatelessMcpHandler;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAkBA,MAAa,wBAAwB;;AAGrC,MAAa,kBAAkB;;;;;AAM/B,SAAgB,eACd,QACA,SACgC;CAChC,MAAM,SAAS,kBAAkB;EAC/B,OACG,MAAM,QAAQ,OAAO,eAAe,CAAC,CAAC,CACtC,YAAY,cAAc,MAAM,CAAC;CACtC,GAAG,qBAAqB;CACxB,OAAO;AACT;;;AClCA,MAAM,yBAAyB,OAAO,IACpC,uDACF;AAgBA,MAAM,qBAAqB,IAAI,kBAAkC;AAEjE,SAAgB,oBAAgD;CAC9D,OAAO,mBAAmB,SAAS;AACrC;AAEA,SAAgB,mBAAsB,SAAyB,IAAgB;CAC7E,OAAO,mBAAmB,IAAI,SAAS,EAAE;AAC3C;AAEA,SAAS,cAAc,OAAkD;CACvE,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GACpE,OAAO;CAET,MAAM,YAAY,OAAO,eAAe,KAAK;CAC7C,OAAO,cAAc,OAAO,aAAa,cAAc;AACzD;AAEA,SAAS,yBAAgC;CACvC,MAAM,IAAI,UAAU,wCAAwC;AAC9D;AAEA,SAAgB,yBACd,KACoE;CACpE,MAAM,gBAAgB;CACtB,IAAI,EAAE,0BAA0B,gBAAgB,OAAO,KAAA;CAEvD,MAAM,QAAQ,cAAc;CAC5B,IAAI,CAAC,cAAc,KAAK,KAAK,MAAM,YAAY,GAAG,uBAAuB;CAGzE,MAAM,EAAE,OAAO,UAAU,QAAQ,WAAW,UAAU,UAAUA;CAChE,IACE,OAAO,UAAU,YACjB,MAAM,WAAW,KACjB,OAAO,aAAa,YACpB,SAAS,WAAW,KACpB,CAAC,MAAM,QAAQ,MAAM,KACrB,CAAC,OAAO,OAAO,UAAU,OAAO,UAAU,QAAQ,KAClD,CAAC,cAAc,KAAK,GAEpB,uBAAuB;CAGzB,IACE,cAAc,KAAA,MACb,OAAO,cAAc,YACpB,CAAC,OAAO,SAAS,SAAS,KAC1B,aAAa,IAEf,uBAAuB;CAGzB,IAAI;CACJ,IAAI,aAAa,KAAA,GAAW;EAC1B,IAAI,OAAO,aAAa,UAAU,uBAAuB;EACzD,IAAI;GACF,cAAc,IAAI,IAAI,QAAQ;EAChC,QAAQ;GACN,uBAAuB;EACzB;EACA,IAAI,YAAY,aAAa,WAAW,YAAY,aAAa,UAC/D,uBAAuB;CAE3B;CAEA,IAAI,IAAI,UAAU,OAAO,uBAAuB;CAEhD,OAAO;EACL;EACA,UAAU;GACR;GACA;GACA,QAAQ,CAAC,GAAG,MAAM;GAClB,GAAI,cAAc,KAAA,KAAa,EAAE,UAAU;GAC3C,GAAI,gBAAgB,KAAA,KAAa,EAAE,UAAU,YAAY;GACzD,OAAO,EAAE,MAAM;EACjB;CACF;AACF;;;ACrGA,SAAgB,sBACd,KAA6B,MACnB;CACV,OAAO,SAAS,KACd;EACE,SAAS;EACT,OAAO;GAAE,MAAM;GAAQ,SAAS;EAAwB;EACxD;CACF,GACA,EAAE,QAAQ,IAAI,CAChB;AACF;AAEA,SAAgB,wBAAwB,MAAuC;CAC7E,IACE,OAAO,SAAS,YAChB,SAAS,QACT,MAAM,QAAQ,IAAI,KAClB,EAAE,YAAY,SACd,OAAO,KAAK,WAAW,YACvB,EAAE,QAAQ,OAEV,OAAO;CAET,OAAO,OAAO,KAAK,OAAO,YAAY,OAAO,KAAK,OAAO,WACrD,KAAK,KACL;AACN;AAEA,SAAgB,mBACd,SACA,OACM;CACN,IAAI;EACF,UAAU,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;CACrE,QAAQ,CAER;AACF;;;;;;;;;;;;;;ACZA,SAAgB,wCACd,SACA,SACA;CACA,MAAM,QAAQ,OACZ,SACA,YACsB;EAItB,IAAI,QAAQ,OAAO,YAAY,MAAM,QACnC,OAAO,SAAS,KACd;GACE,SAAS;GACT,OAAO;IAAE,MAAM;IAAQ,SAAS;GAAsB;GACtD,IAAI;EACN,GACA,EAAE,QAAQ,IAAI,CAChB;EAGF,IAAI,QAAQ,OAAO,SACjB,OAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;EAG3C,IAAI;EACJ,IAAI;EACJ,IAAI,+BAA+B,CAAC;EACpC,IAAI;EACJ,MAAM,iBACH,qBAAqB,YAAY;GAChC,uBAAuB;GACvB,MAAM,QAAQ,IAAI,CAChB,WAAW,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,GACjC,SAAS,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CACjC,CAAC;EACH,EAAA,CAAG;EACL,MAAM,gBAAgB,KAAK,SAAS;EAEpC,IAAI;GACF,UAAU,MAAM,QAAQ;IACtB,KAAK;IACL,GAAI,SAAS,aAAa,KAAA,KAAa,EAAE,UAAU,QAAQ,SAAS;IACpE,aAAa;GACf,CAAC;GACD,YAAY,IAAI,yCAAyC,EACvD,oBAAoB,KAAA,EACtB,CAAC;GAED,MAAM,OAAO,UAAU,KAAK,KAAK,SAAS;GAC1C,UAAU,OAAO,OAAO,SAAS,gBAAgB;IAC/C,IAAI,iBAAiB,OAAO,GAAG;KAC7B,WAAW,YAAY;MACrB,SAAS;MACT,IAAI,QAAQ;MACZ,OAAO;OACL,MAAM;OACN,SACE;MAGJ;KACF,CAAC;KACD;IACF;IACA,MAAM,KAAK,SAAS,WAAW;GACjC;GAEA,MAAM,QAAQ,QAAQ,SAAS;GAC/B,IAAI,QAAQ,OAAO,SAAS;IAC1B,MAAM,SAAS;IACf,OAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;GAC3C;GACA,QAAQ,OAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;GAChE,MAAM,WAAW,MAAM,UAAU,cAAc,SAAS;IACtD,GAAI,SAAS,aAAa,KAAA,KAAa,EACrC,UAAU,QAAQ,SACpB;IACA,GAAI,SAAS,eAAe,KAAA,KAAa,EACvC,YAAY,QAAQ,WACtB;GACF,CAAC;GAED,IACE,SAAS,SAAS,QAClB,CAAC,SAAS,QAAQ,IAAI,cAAc,CAAC,EAAE,SAAS,mBAAmB,GACnE;IACA,QAAQ,OAAO,oBAAoB,SAAS,OAAO;IACnD,MAAM,SAAS;IACf,OAAO;GACT;GAEA,MAAM,SAAS,SAAS,KAAK,UAAU;GACvC,MAAM,UAAU,IAAI,YAAY;GAChC,IAAI;GACJ,MAAM,uBAAuB;IAC3B,IAAI,cAAc,KAAA,GAAW;KAC3B,cAAc,SAAS;KACvB,YAAY,KAAA;IACd;GACF;GACA,yBAAyB;GAEzB,MAAM,OAAO,IAAI,eAA2B;IAC1C,MAAM,YAAY;KAChB,IAAI,iBAAiB;KACrB,YAAY,kBAAkB;MAC5B,IAAI;OACF,WAAW,QAAQ,QAAQ,OAAO,eAAe,CAAC;MACpD,QAAQ;OACN,eAAe;MACjB;KACF,GAAG,qBAAqB;IAC1B;IACA,MAAM,KAAK,YAAY;KACrB,IAAI;MACF,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;MAC1C,IAAI,MAAM;OACR,eAAe;OACf,QAAQ,OAAO,oBAAoB,SAAS,OAAO;OACnD,MAAM,SAAS;OACf,WAAW,MAAM;MACnB,OAAO,IAAI,UAAU,KAAA,GACnB,WAAW,QAAQ,KAAK;KAE5B,SAAS,OAAO;MACd,eAAe;MACf,QAAQ,OAAO,oBAAoB,SAAS,OAAO;MACnD,MAAM,SAAS;MACf,WAAW,MAAM,KAAK;KACxB;IACF;IACA,MAAM,OAAO,QAAQ;KACnB,eAAe;KACf,QAAQ,OAAO,oBAAoB,SAAS,OAAO;KACnD,MAAM,OAAO,OAAO,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;KAC1C,MAAM,SAAS;IACjB;GACF,CAAC;GACD,OAAO,IAAI,SAAS,MAAM;IACxB,QAAQ,SAAS;IACjB,YAAY,SAAS;IACrB,SAAS,SAAS;GACpB,CAAC;EACH,SAAS,OAAO;GACd,QAAQ,OAAO,oBAAoB,SAAS,OAAO;GACnD,MAAM,SAAS;GACf,mBAAmB,SAAS,KAAK;GACjC,OAAO,sBACL,wBAAwB,SAAS,UAAU,CAC7C;EACF;CACF;CAEA,OAAO,EAAE,MAAM;AACjB;;;AC3HA,MAAM,uBAA8C;CAClD,QAAQ;CACR,SACE;CACF,SAAS;CACT,eAAe;CACf,QAAQ;AACV;AAEA,SAAS,YAAY,UAAuB,CAAC,GAAY;CACvD,MAAM,SAAS;EAAE,GAAG;EAAsB,GAAG;CAAQ;CACrD,OAAO,IAAI,QAAQ;EACjB,gCAAgC,OAAO;EACvC,gCAAgC,OAAO;EACvC,+BAA+B,OAAO;EACtC,iCAAiC,OAAO;EACxC,0BAA0B,OAAO,OAAO,MAAM;CAChD,CAAC;AACH;AAEA,SAAS,SAAS,UAAoB,SAAwC;CAC5E,MAAM,UAAU,IAAI,QAAQ,SAAS,OAAO;CAC5C,IAAI,YAAY;OACT,MAAM,QAAQ,MAAM,KAAK,QAAQ,KAAK,CAAC,GAC1C,IAAI,KAAK,YAAY,CAAC,CAAC,WAAW,iBAAiB,GACjD,QAAQ,OAAO,IAAI;CAAA,OAIvB,KAAK,MAAM,CAAC,MAAM,UAAU,YAAY,OAAO,GAC7C,QAAQ,IAAI,MAAM,KAAK;CAG3B,OAAO,IAAI,SAAS,SAAS,MAAM;EACjC,QAAQ,SAAS;EACjB,YAAY,SAAS;EACrB;CACF,CAAC;AACH;AAEA,SAAS,gCACP,UACA,aACU;CACV,IAAI,CAAC,eAAe,CAAC,SAAS,MAAM,OAAO;CAE3C,MAAM,SAAS,SAAS,KAAK,UAAU;CACvC,MAAM,OAAO,IAAI,eAA2B;EAC1C,KAAK,YAAY;GACf,OAAO,mBAAmB,aAAa,YAAY;IACjD,IAAI;KACF,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;KAC1C,IAAI,MACF,WAAW,MAAM;UAEjB,WAAW,QAAQ,KAAK;IAE5B,SAAS,OAAO;KACd,WAAW,MAAM,KAAK;IACxB;GACF,CAAC;EACH;EACA,OAAO,QAAQ;GACb,OAAO,mBAAmB,mBAAmB,OAAO,OAAO,MAAM,CAAC;EACpE;CACF,CAAC;CAED,OAAO,IAAI,SAAS,MAAM;EACxB,QAAQ,SAAS;EACjB,YAAY,SAAS;EACrB,SAAS,SAAS;CACpB,CAAC;AACH;AAEA,SAAgB,0BACd,SACA,UAA4C,CAAC,GACxB;CACrB,MAAM,eAAe;CACrB,IAAI,aAAa,QAAQ,KAAA,GACvB,MAAM,IAAI,UACR,mEACF;CAEF,MAAM,mBAAmB;EACvB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAC,CAAC,MAAM,QAAQ,aAAa,SAAS,KAAA,CAAS;CAC/C,IAAI,kBACF,MAAM,IAAI,UACR,4BAA4B,iBAAiB,mJAC/C;CAGF,MAAM,EACJ,QAAQ,QACR,cAAc,CAAC,GACf,kBACA,wBACA,aACA,SAAS,aACT,GAAG,eACD;CAEJ,MAAM,aAAaC,iBAAoB,SAAS;EAC9C,GAAG;EACH,QAAQ;CACV,CAAC;CACD,MAAM,6BACJ,WAAW,cACP,wCAAwC,SAAS,WAAW,OAAO,IACnE,KAAA;CAEN,MAAM,QAAQ,OACZ,SACA,gBACA,cACsB;EACtB,MAAM,aAAa,IAAI,IAAI,QAAQ,GAAG;EACtC,IAAI,WAAW,aAAa,OAC1B,OAAO,SAAS,IAAI,SAAS,aAAa,EAAE,QAAQ,IAAI,CAAC,GAAG,WAAW;EAQzE,MAAM,gBAAgB,0BAA0B,CAAC,CAAC,SAChD,WAAW,QACb;EACA,MAAM,qBAAqB,WAAW,SAAS,SAAS,cAAc;EACtE,MAAM,oBACJ,qBACC,gBACG,0BAA0B,IAC1B,qBACE,CAAC,WAAW,QAAQ,IACpB,KAAA;EACR,MAAM,gBAAgB,oBAClB,6BAA6B,SAAS,iBAAiB,IACvD,KAAA;EACJ,IAAI,eACF,OAAO,SAAS,eAAe,WAAW;EAE5C,IAAI,2BAA2B,KAAK;GAClC,IAAI,0BAA0B;GAC9B,IAAI,4BAA4B,KAAA,GAAW;IACzC,MAAM,WAAW,IAAI,IAAI,wBAAwB,CAAC;IAClD,IAAI,oBAAoB,SAAS,IAAI,WAAW,QAAQ;IACxD,IAAI,gBAAgB,SAAS,YAAY,WAAW,KAAA,GAClD,IAAI;KACF,MAAM,mBAAmB,IAAI,IAAI,YAAY,MAAM;KACnD,KACG,iBAAiB,aAAa,WAC7B,iBAAiB,aAAa,aAChC,iBAAiB,UAEjB,SAAS,IAAI,iBAAiB,QAAQ;IAE1C,QAAQ,CAER;IAEF,0BAA0B,CAAC,GAAG,QAAQ;GACxC;GACA,MAAM,kBAAkB,yBACtB,SACA,2BAA2B,CAAC,CAC9B;GACA,IAAI,iBACF,OAAO,SAAS,iBAAiB,WAAW;EAEhD;EAEA,IAAI,QAAQ,WAAW,aAAa,gBAAgB,OAClD,OAAO,IAAI,SAAS,MAAM,EAAE,SAAS,YAAY,WAAW,EAAE,CAAC;EAGjE,MAAM,gBACJ,+BAA+B,KAAA,KAC9B,MAAM,gBAAgB,SAAS,gBAAgB,UAAU;EAE5D,IAAI;GACF,MAAM,WAAW,YACb,yBAAyB,SAAS,IAClC,KAAA;GACJ,MAAM,mBAAmB,gBAAgB;GACzC,IACE,YACA,oBACA,iBAAiB,aAAa,SAAS,SAAS,UAEhD,MAAM,IAAI,UAAU,4CAA4C;GAGlE,MAAM,WACJ,oBAAoB,UAAU;GAChC,MAAM,sBACJ,gBACC,WACG,EAAE,OAAO,SAAS,MAAM,IACxB,WAAW,SAAS,OAAO,KAAK,UAAU,KAAK,CAAC,CAAC,SAAS,IACxD,EAAE,OAAO,UAAU,MAAiC,IACpD,KAAA;GACR,MAAM,kBACJ,kBAAkB,WACd;IAAE,GAAG;IAAgB,GAAI,YAAY,EAAE,SAAS;GAAG,IACnD,KAAA;GACN,MAAM,SAAS,YAAY;IACzB,IAAI,iBAAiB,4BACnB,OAAO,2BAA2B,MAAM,SAAS,eAAe;IAElE,OAAO,WAAW,MAAM,SAAS,eAAe;GAClD;GAIA,OAAO,SACL,gCAJe,sBACb,MAAM,mBAAmB,qBAAqB,MAAM,IACpD,MAAM,OAAO,GAE2B,mBAAmB,GAC7D,WACF;EACF,SAAS,OAAO;GACd,mBAAmB,WAAW,SAAS,KAAK;GAC5C,OAAO,SAAS,sBAAsB,GAAG,WAAW;EACtD;CACF;CAEA,MAAM,YAAY,SAAkB,MAAe,QACjD,MAAM,SAAS,KAAA,GAAW,GAAG;CAC/B,MAAM,SAAS,SAAkB,mBAC/B,MAAM,SAAS,cAAc;CAE/B,OAAO,OAAO,OAAO,UAAU;EAC7B;EACA,QAAQ,WAAW;CACrB,CAAC;AACH"}

package/dist/handler-stateless-C_bo-Ytq.d.ts

@@ -0,0 +1,107 @@
+import { ClientOptions } from "@modelcontextprotocol/client";
+import {
+  CreateMcpHandlerOptions,
+  McpHandlerRequestOptions,
+  McpServerFactory,
+  ServerNotifier
+} from "@modelcontextprotocol/server";
+
+//#region src/mcp/types.d.ts
+type MaybePromise<T> = T | Promise<T>;
+type HttpTransportType = "sse" | "streamable-http";
+type BaseTransportType = HttpTransportType | "rpc";
+type TransportType = BaseTransportType | "auto";
+/**
+ * Agents-owned MCP client configuration. Only these SDK behaviours are part of
+ * the supported interface; new beta SDK fields are not persisted or exposed
+ * accidentally.
+ */
+interface McpClientOptions {
+  capabilities?: ClientOptions["capabilities"];
+  jsonSchemaValidator?: ClientOptions["jsonSchemaValidator"];
+  versionNegotiation?: ClientOptions["versionNegotiation"];
+  inputRequired?: ClientOptions["inputRequired"];
+  listChanged?: ClientOptions["listChanged"];
+  supportedProtocolVersions?: ClientOptions["supportedProtocolVersions"];
+  enforceStrictCapabilities?: ClientOptions["enforceStrictCapabilities"];
+  debouncedNotificationMethods?: ClientOptions["debouncedNotificationMethods"];
+  listMaxPages?: ClientOptions["listMaxPages"];
+  responseCacheStore?: ClientOptions["responseCacheStore"];
+  cachePartition?: ClientOptions["cachePartition"];
+  defaultCacheTtlMs?: ClientOptions["defaultCacheTtlMs"];
+}
+interface CORSOptions {
+  origin?: string;
+  methods?: string;
+  headers?: string;
+  maxAge?: number;
+  exposeHeaders?: string;
+}
+interface ServeOptions {
+  binding?: string;
+  corsOptions?: CORSOptions;
+  transport?: TransportType;
+  jurisdiction?: DurableObjectJurisdiction;
+}
+//#endregion
+//#region src/mcp/auth-context.d.ts
+interface McpAuthContext {
+  props: Record<string, unknown>;
+}
+declare function getMcpAuthContext(): McpAuthContext | undefined;
+//#endregion
+//#region src/mcp/handler-stateless.d.ts
+interface CreateStatelessMcpHandlerOptions extends Omit<
+  CreateMcpHandlerOptions,
+  "bus"
+> {
+  /** Exact pathname handled by this Worker wrapper. @default "/mcp" */
+  route?: string;
+  /** CORS headers applied by the Worker wrapper. Pass `false` to disable. */
+  corsOptions?: CORSOptions | false;
+  /**
+   * Restrict `Host` headers to these hostnames. Localhost and `workers.dev`
+   * endpoints receive matching defaults; custom domains rely on Cloudflare
+   * routing unless this option is set.
+   */
+  allowedHostnames?: string[];
+  /**
+   * Restrict present browser `Origin` headers to these hostnames. Requests
+   * without an Origin (including non-browser MCP clients) remain valid. The
+   * default includes localhost-class Origins, the endpoint's `workers.dev`
+   * hostname, and a concrete `corsOptions.origin` hostname. Pass `"*"` only
+   * when equivalent Origin validation runs in trusted middleware upstream.
+   */
+  allowedOriginHostnames?: string[] | "*";
+  /** Application props exposed through {@link getMcpAuthContext}. */
+  authContext?: McpAuthContext;
+}
+type StatelessMcpHandler = {
+  (request: Request, env: unknown, ctx: ExecutionContext): Promise<Response>;
+  fetch(
+    request: Request,
+    options?: McpHandlerRequestOptions
+  ): Promise<Response>;
+  notify: ServerNotifier;
+};
+type StatelessMcpServerInput = McpServerFactory;
+declare function createStatelessMcpHandler(
+  factory: StatelessMcpServerInput,
+  options?: CreateStatelessMcpHandlerOptions
+): StatelessMcpHandler;
+//#endregion
+export {
+  McpAuthContext as a,
+  CORSOptions as c,
+  ServeOptions as d,
+  TransportType as f,
+  createStatelessMcpHandler as i,
+  MaybePromise as l,
+  StatelessMcpHandler as n,
+  getMcpAuthContext as o,
+  StatelessMcpServerInput as r,
+  BaseTransportType as s,
+  CreateStatelessMcpHandlerOptions as t,
+  McpClientOptions as u
+};
+//# sourceMappingURL=handler-stateless-C_bo-Ytq.d.ts.map

package/dist/index.d.ts

@@ -3,12 +3,12 @@ import { r as __DO_NOT_USE_WILL_BREAK__agentContext } from "./internal_context-D
 import {
   $ as RoutingRetryOptions,
   A as AgentGetOptions,
-  At as MCP_SERVER_ID_MAX_LENGTH,
   B as EmailSendBinding,
   C as DetachedRunAgentToolResult,
   D as AddRpcMcpServerOptions,
   E as AddMcpServerOptions,
   F as Connection,
+  Ft as normalizeServerId,
   G as FiberStatus,
   H as FiberInspection,
   I as ConnectionContext,
@@ -16,8 +16,8 @@ import {
   K as ListFibersOptions,
   L as DEFAULT_AGENT_STATIC_OPTIONS,
   M as AgentOptions,
+  Mt as MCP_SERVER_ID_MAX_LENGTH,
   N as AgentStaticOptions,
-  Nt as normalizeServerId,
   O as Agent,
   P as CallableMetadata,
   Q as RPCResponse,
@@ -31,15 +31,15 @@ import {
   Y as MCPServersState,
   Z as RPCRequest,
   _ as AgentToolRunState,
-  _t as MCPAITool,
   a as AgentToolEvent,
-  an as SUB_PREFIX,
   at as StartFiberResult,
   b as AgentToolTerminalStatus,
+  bt as MCPAIToolSet,
   c as AgentToolFailure,
-  cn as parseSubAgentPath,
+  cn as SubAgentPathMatch,
   ct as SubAgentClass,
   d as AgentToolMilestone,
+  dn as routeSubAgentRequest,
   dt as callable,
   et as Schedule,
   f as AgentToolProgress,
@@ -49,19 +49,17 @@ import {
   h as AgentToolRunInspection,
   ht as routeAgentRequest,
   i as AgentToolDisplayMetadata,
-  in as TransportType,
   it as StartFiberOptions,
   j as AgentNamespace,
   k as AgentContext,
   l as AgentToolInterruptedReason,
-  ln as routeSubAgentRequest,
+  ln as getSubAgentByName,
   lt as SubAgentStub,
   m as AgentToolRunInfo,
   mt as routeAgentEmail,
   n as AGENT_TOOL_PROGRESS_PART,
   nt as SendEmailOptions,
   o as AgentToolEventMessage,
-  on as SubAgentPathMatch,
   ot as StateUpdateMessage,
   p as AgentToolProgressSnapshot,
   pt as getCurrentAgent,
@@ -69,19 +67,20 @@ import {
   r as AgentToolChildAdapter,
   rt as SqlError,
   s as AgentToolEventState,
-  sn as getSubAgentByName,
+  sn as SUB_PREFIX,
   st as StreamingResponse,
   t as AGENT_TOOL_MILESTONE_PART,
   tt as ScheduleCriteria,
   u as AgentToolLifecycleResult,
+  un as parseSubAgentPath,
   ut as WSMessage,
   v as AgentToolRunStatus,
-  vt as MCPAIToolSet,
   w as RunAgentToolOptions,
   x as ChatCapableAgentClass,
   y as AgentToolStoredChunk,
+  yt as MCPAITool,
   z as EmailRoutingOptions
-} from "./agent-tool-types-BNUGGBzQ.js";
+} from "./agent-tool-types-Btk9ETS-.js";
 import { n as camelCaseToKebabCase } from "./utils-CGtGDSgA.js";
 import {
   i as isDurableObjectStorageReset,
@@ -94,7 +93,8 @@ import {
   n as AgentsOAuthProvider,
   r as DurableObjectOAuthClientProvider,
   t as AgentMcpOAuthProvider
-} from "./do-oauth-client-provider-D4ZwyBDu.js";
+} from "./do-oauth-client-provider-VTZj2VtM.js";
+import { f as TransportType } from "./handler-stateless-C_bo-Ytq.js";
 import { t as MessageType } from "./types-6Zo2zfoO.js";
 import { l as createHeaderBasedEmailResolver } from "./email-CL27preh.js";
 export {

package/dist/index.js

@@ -6,7 +6,7 @@ import { createHeaderBasedEmailResolver, signAgentHeaders } from "./email.js";
 import { i as _classPrivateFieldInitSpec, n as _classPrivateFieldSet2, t as _classPrivateFieldGet2 } from "./classPrivateFieldGet2-DZBYAB34.js";
 import { SUB_PREFIX, getSubAgentByName, parseSubAgentPath, routeSubAgentRequest } from "./sub-routing.js";
 import { isDurableObjectCodeUpdateReset, isDurableObjectMemoryLimitReset, isDurableObjectStorageReset, isErrorRetryable, isPlatformTransientError, tryN, validateRetryOptions } from "./retries.js";
-import { a as MCPConnectionState, c as RPC_DO_PREFIX, i as normalizeServerId, l as DisposableStore, n as MCP_SERVER_ID_MAX_LENGTH, t as MCPClientManager } from "./client-CcjiFpTf.js";
+import { a as MCPConnectionState, c as RPC_DO_PREFIX, i as normalizeServerId, l as DisposableStore, n as MCP_SERVER_ID_MAX_LENGTH, t as MCPClientManager } from "./client-zqKcsyFa.js";
 import { DurableObjectOAuthClientProvider } from "./mcp/do-oauth-client-provider.js";
 import { genericObservability } from "./observability/index.js";
 import { n as writeSpanAttributes, t as tracer } from "./cloudflare-BldFV0Pa.js";
@@ -6895,7 +6895,8 @@ var Agent = class Agent extends Server {
 			transport: {
 				...headerTransportOpts,
 				authProvider,
-				type: transportType
+				type: transportType,
+				skipIssuerMetadataValidation: resolvedOptions?.transport?.skipIssuerMetadataValidation
 			},
 			retry: resolvedOptions?.retry
 		});