drizzle-cube 0.5.8 → 0.6.1

package/dist/adapters/nextjs/index.js

@@ -1,9 +1,72 @@
-import { a as e, d as t, f as n, h as r, i, m as a, o, p as s, r as c, u as l } from "../utils-D9JPLmfl.js";
-import { i as u, n as d, r as f, t as p } from "../locale-BPB7flIG.js";
-import { C as m, S as h, _ as g, a as _, b as v, c as y, g as b, h as x, i as S, l as C, m as w, o as T, r as E, u as D, v as O, x as k, y as A } from "../mcp-transport-D0B3S1tB.js";
+import { a as e, d as t, f as n, i as r, l as i, m as a, o, p as s, r as c, u as l } from "../utils-BPWZsX7k.js";
+import { i as u, n as d, r as f, t as p } from "../locale-DDvZDFVn.js";
+import { C as m, S as h, _ as g, a as _, b as v, c as y, g as b, h as x, i as S, l as C, m as w, o as T, r as E, u as D, v as O, x as k, y as A } from "../mcp-transport-Dfuj4j4q.js";
 import { NextResponse as j } from "next/server";
+//#region src/adapters/nextjs/mcp-handler.ts
+function M(e, t) {
+	let n = new TextEncoder(), r = g(), i = new ReadableStream({ start(e) {
+		e.enqueue(n.encode(v({
+			jsonrpc: "2.0",
+			method: "mcp/ready",
+			params: { protocol: "streamable-http" }
+		}, r, 15e3)));
+	} }), a = new Headers({
+		"Content-Type": "text/event-stream",
+		"Cache-Control": "no-cache",
+		Connection: "keep-alive"
+	});
+	return t(e, a), new j(i, {
+		status: 200,
+		headers: a
+	});
+}
+async function N(e, t) {
+	let n = h(e.headers.get("origin"), t.allowedOrigins ? { allowedOrigins: t.allowedOrigins } : {});
+	if (!n.valid) return { response: j.json(S(null, -32600, n.reason), { status: 403 }) };
+	let r = e.headers.get("accept");
+	if (!k(r)) return { response: j.json(S(null, -32600, "Accept header must include both application/json and text/event-stream"), { status: 400 }) };
+	let i = x(Object.fromEntries(e.headers.entries()));
+	if (!i.ok) return { response: j.json({
+		error: "Unsupported MCP protocol version",
+		supported: i.supported
+	}, { status: 426 }) };
+	let a;
+	try {
+		a = await e.json();
+	} catch {
+		a = null;
+	}
+	let o = b(a);
+	return o ? {
+		rpcRequest: o,
+		acceptHeader: r
+	} : { response: j.json(S(null, -32600, "Invalid JSON-RPC 2.0 request"), { status: 400 }) };
+}
+function P(e, t, n, r = {}) {
+	let i = new TextEncoder(), a = g(), o = new ReadableStream({ start(e) {
+		e.enqueue(i.encode(`id: ${a}\n\n`)), e.enqueue(i.encode(v(t, a))), e.close();
+	} }), s = new Headers({
+		"Content-Type": "text/event-stream",
+		"Cache-Control": "no-cache",
+		Connection: "keep-alive",
+		...r
+	});
+	return n(e, s), new j(o, {
+		status: 200,
+		headers: s
+	});
+}
+function F(e, t, n) {
+	let r = e && t && typeof t == "object" && "sessionId" in t ? t.sessionId : void 0;
+	return r ? { [n]: r } : {};
+}
+function I(e, t) {
+	let n = e?.code ?? -32603, r = e?.data, i = e.message || "MCP request failed";
+	return S(t ?? null, n, i, r);
+}
+//#endregion
 //#region src/adapters/nextjs/index.ts
-function M(e) {
+function L(e) {
 	let { cubes: t, drizzle: n, schema: r, engineType: i, cache: a, rlsSetup: o } = e;
 	if (!t || t.length === 0) throw Error("At least one cube must be provided in the cubes array");
 	let s = new u({
@@ -17,7 +80,7 @@ function M(e) {
 		s.registerCube(e);
 	}), s;
 }
-function N(e) {
+function R(e) {
 	return {
 		extractSecurityContext: async (t, n) => f(await e.extractSecurityContext(t, n), d((e) => t.headers.get(e))),
 		cors: e.cors ? {
@@ -26,13 +89,13 @@ function N(e) {
 		} : void 0
 	};
 }
-function P(e, t) {
+function z(e, t) {
 	let n = e.headers.get("origin"), r = {};
 	return t.origin && (typeof t.origin == "string" ? r["Access-Control-Allow-Origin"] = t.origin : Array.isArray(t.origin) ? n && t.origin.includes(n) && (r["Access-Control-Allow-Origin"] = n) : typeof t.origin == "function" && n && t.origin(n) && (r["Access-Control-Allow-Origin"] = n)), t.methods && (r["Access-Control-Allow-Methods"] = t.methods.join(", ")), t.allowedHeaders && (r["Access-Control-Allow-Headers"] = t.allowedHeaders.join(", ")), t.credentials && (r["Access-Control-Allow-Credentials"] = "true"), r;
 }
-function F(e) {
+function B(e) {
 	return async function(t) {
-		let n = P(t, {
+		let n = z(t, {
 			...e,
 			allowedHeaders: p(e.allowedHeaders)
 		});
@@ -42,8 +105,8 @@ function F(e) {
 		});
 	};
 }
-function I(e) {
-	let { extractSecurityContext: t, cors: n } = N(e), r = M(e);
+function V(e) {
+	let { extractSecurityContext: t, cors: n } = R(e), i = L(e);
 	return async function(e, a) {
 		try {
 			let o;
@@ -52,35 +115,35 @@ function I(e) {
 				o = t.query || t;
 			} else if (e.method === "GET") {
 				let t = e.nextUrl.searchParams.get("query");
-				if (!t) return j.json(i("Query parameter is required", 400), { status: 400 });
+				if (!t) return j.json(r("Query parameter is required", 400), { status: 400 });
 				try {
 					o = JSON.parse(t);
 				} catch {
-					return j.json(i("Invalid JSON in query parameter", 400), { status: 400 });
+					return j.json(r("Invalid JSON in query parameter", 400), { status: 400 });
 				}
-			} else return j.json(i("Method not allowed", 405), { status: 405 });
-			let s = await t(e, a), l = r.validateQuery(o);
-			if (!l.isValid) return j.json(i(`Query validation failed: ${l.errors.join(", ")}`, 400), { status: 400 });
-			let u = e.headers.get("x-cache-control") === "no-cache", d = await r.executeMultiCubeQuery(o, s, { skipCache: u }), f = c(o, d, r);
-			return j.json(f, { headers: n ? P(e, n) : {} });
+			} else return j.json(r("Method not allowed", 405), { status: 405 });
+			let s = await t(e, a), l = i.validateQuery(o);
+			if (!l.isValid) return j.json(r(`Query validation failed: ${l.errors.join(", ")}`, 400), { status: 400 });
+			let u = e.headers.get("x-cache-control") === "no-cache", d = await i.executeMultiCubeQuery(o, s, { skipCache: u }), f = c(o, d, i);
+			return j.json(f, { headers: n ? z(e, n) : {} });
 		} catch (e) {
-			return process.env.NODE_ENV !== "test" && console.error("Next.js load handler error:", e), j.json(i(e instanceof Error ? e.message : "Query execution failed", 500), { status: 500 });
+			return process.env.NODE_ENV !== "test" && console.error("Next.js load handler error:", e), j.json(r(e instanceof Error ? e.message : "Query execution failed", 500), { status: 500 });
 		}
 	};
 }
-function L(t) {
-	let { cors: n } = N(t), r = M(t);
+function H(t) {
+	let { cors: n } = R(t), i = L(t);
 	return async function(t, a) {
 		try {
-			let i = e(r.getMetadata());
-			return j.json(i, { headers: n ? P(t, n) : {} });
+			let r = e(i.getMetadata());
+			return j.json(r, { headers: n ? z(t, n) : {} });
 		} catch (e) {
-			return process.env.NODE_ENV !== "test" && console.error("Next.js meta handler error:", e), j.json(i(e instanceof Error ? e.message : "Failed to fetch metadata", 500), { status: 500 });
+			return process.env.NODE_ENV !== "test" && console.error("Next.js meta handler error:", e), j.json(r(e instanceof Error ? e.message : "Failed to fetch metadata", 500), { status: 500 });
 		}
 	};
 }
-function R(e) {
-	let { extractSecurityContext: t, cors: n } = N(e), r = M(e);
+function U(e) {
+	let { extractSecurityContext: t, cors: n } = R(e), i = L(e);
 	return async function(e, a) {
 		try {
 			let s;
@@ -89,32 +152,32 @@ function R(e) {
 				s = t.query || t;
 			} else if (e.method === "GET") {
 				let t = e.nextUrl.searchParams.get("query");
-				if (!t) return j.json(i("Query parameter is required", 400), { status: 400 });
+				if (!t) return j.json(r("Query parameter is required", 400), { status: 400 });
 				try {
 					s = JSON.parse(t);
 				} catch {
-					return j.json(i("Invalid JSON in query parameter", 400), { status: 400 });
+					return j.json(r("Invalid JSON in query parameter", 400), { status: 400 });
 				}
-			} else return j.json(i("Method not allowed", 405), { status: 405 });
-			let c = await t(e, a), l = r.validateQuery(s);
-			if (!l.isValid) return j.json(i(`Query validation failed: ${l.errors.join(", ")}`, 400), { status: 400 });
+			} else return j.json(r("Method not allowed", 405), { status: 405 });
+			let c = await t(e, a), l = i.validateQuery(s);
+			if (!l.isValid) return j.json(r(`Query validation failed: ${l.errors.join(", ")}`, 400), { status: 400 });
 			let u = s.measures?.[0] || s.dimensions?.[0];
-			if (!u) return j.json(i("No measures or dimensions specified", 400), { status: 400 });
-			let d = u.split(".")[0], f = await r.generateSQL(d, s, c), p = o(s, f);
-			return j.json(p, { headers: n ? P(e, n) : {} });
+			if (!u) return j.json(r("No measures or dimensions specified", 400), { status: 400 });
+			let d = u.split(".")[0], f = await i.generateSQL(d, s, c), p = o(s, f);
+			return j.json(p, { headers: n ? z(e, n) : {} });
 		} catch (e) {
-			return process.env.NODE_ENV !== "test" && console.error("Next.js SQL handler error:", e), j.json(i(e instanceof Error ? e.message : "SQL generation failed", 500), { status: 500 });
+			return process.env.NODE_ENV !== "test" && console.error("Next.js SQL handler error:", e), j.json(r(e instanceof Error ? e.message : "SQL generation failed", 500), { status: 500 });
 		}
 	};
 }
-function z(e) {
-	let { extractSecurityContext: t, cors: r } = N(e), i = M(e);
-	return async function(e, a) {
+function W(e) {
+	let { extractSecurityContext: t, cors: n } = R(e), r = L(e);
+	return async function(e, i) {
 		try {
-			let o;
+			let a;
 			if (e.method === "POST") {
 				let t = await e.json();
-				o = t.query || t;
+				a = t.query || t;
 			} else if (e.method === "GET") {
 				let t = e.nextUrl.searchParams.get("query");
 				if (!t) return j.json({
@@ -122,7 +185,7 @@ function z(e) {
 					valid: !1
 				}, { status: 400 });
 				try {
-					o = JSON.parse(t);
+					a = JSON.parse(t);
 				} catch {
 					return j.json({
 						error: "Invalid JSON in query parameter",
@@ -133,8 +196,8 @@ function z(e) {
 				error: "Method not allowed",
 				valid: !1
 			}, { status: 405 });
-			let s = await t(e, a), c = await n(o, s, i);
-			return j.json(c, { headers: r ? P(e, r) : {} });
+			let o = await t(e, i), s = await l(a, o, r);
+			return j.json(s, { headers: n ? z(e, n) : {} });
 		} catch (e) {
 			return process.env.NODE_ENV !== "test" && console.error("Next.js dry-run handler error:", e), j.json({
 				error: e instanceof Error ? e.message : "Dry-run validation failed",
@@ -143,145 +206,106 @@ function z(e) {
 		}
 	};
 }
-function B(e) {
-	let { extractSecurityContext: t, cors: n } = N(e), r = M(e);
-	return async function(e, a) {
+function G(e) {
+	let { extractSecurityContext: t, cors: n } = R(e), a = L(e);
+	return async function(e, o) {
 		try {
-			if (e.method !== "POST") return j.json(i("Method not allowed - use POST", 405), { status: 405 });
-			let { queries: o } = await e.json();
-			if (!o || !Array.isArray(o)) return j.json(i("Request body must contain a \"queries\" array", 400), { status: 400 });
-			if (o.length === 0) return j.json(i("Queries array cannot be empty", 400), { status: 400 });
-			let s = await l(o, await t(e, a), r, { skipCache: e.headers.get("x-cache-control") === "no-cache" });
-			return j.json(s, { headers: n ? P(e, n) : {} });
+			if (e.method !== "POST") return j.json(r("Method not allowed - use POST", 405), { status: 405 });
+			let { queries: s } = await e.json();
+			if (!s || !Array.isArray(s)) return j.json(r("Request body must contain a \"queries\" array", 400), { status: 400 });
+			if (s.length === 0) return j.json(r("Queries array cannot be empty", 400), { status: 400 });
+			let c = await i(s, await t(e, o), a, { skipCache: e.headers.get("x-cache-control") === "no-cache" });
+			return j.json(c, { headers: n ? z(e, n) : {} });
 		} catch (e) {
-			return process.env.NODE_ENV !== "test" && console.error("Next.js batch handler error:", e), j.json(i(e instanceof Error ? e.message : "Batch execution failed", 500), { status: 500 });
+			return process.env.NODE_ENV !== "test" && console.error("Next.js batch handler error:", e), j.json(r(e instanceof Error ? e.message : "Batch execution failed", 500), { status: 500 });
 		}
 	};
 }
-function V(e) {
-	let { extractSecurityContext: t, cors: n } = N(e), r = M(e);
+function K(e) {
+	let { extractSecurityContext: t, cors: n } = R(e), r = L(e);
 	return async function(e, i) {
 		try {
 			if (e.method !== "POST") return j.json({ error: "Method not allowed" }, { status: 405 });
 			let a = await e.json(), o = a.query || a, s = a.options || {}, c = await t(e, i), l = r.validateQuery(o);
 			if (!l.isValid) return j.json({ error: `Query validation failed: ${l.errors.join(", ")}` }, { status: 400 });
 			let u = await r.explainQuery(o, c, s);
-			return j.json(u, { headers: n ? P(e, n) : {} });
+			return j.json(u, { headers: n ? z(e, n) : {} });
 		} catch (e) {
 			return process.env.NODE_ENV !== "test" && console.error("Next.js explain handler error:", e), j.json({ error: e instanceof Error ? e.message : "Explain query failed" }, { status: 500 });
 		}
 	};
 }
-function H(e) {
-	let { cors: n } = N(e), r = M(e);
-	return async function(e, a) {
+function q(e) {
+	let { cors: t } = R(e), n = L(e);
+	return async function(e, i) {
 		try {
-			if (e.method !== "POST") return j.json(i("Method not allowed - use POST", 405), { status: 405 });
-			let a = await t(r, await e.json());
-			return j.json(a, { headers: n ? P(e, n) : {} });
+			if (e.method !== "POST") return j.json(r("Method not allowed - use POST", 405), { status: 405 });
+			let i = await s(n, await e.json());
+			return j.json(i, { headers: t ? z(e, t) : {} });
 		} catch (e) {
-			return process.env.NODE_ENV !== "test" && console.error("Next.js discover handler error:", e), j.json(i(e instanceof Error ? e.message : "Discovery failed", 500), { status: 500 });
+			return process.env.NODE_ENV !== "test" && console.error("Next.js discover handler error:", e), j.json(r(e instanceof Error ? e.message : "Discovery failed", 500), { status: 500 });
 		}
 	};
 }
-function U(e) {
-	let { cors: t } = N(e), n = M(e);
-	return async function(e, r) {
+function J(e) {
+	let { cors: n } = R(e), i = L(e);
+	return async function(e, a) {
 		try {
-			if (e.method !== "POST") return j.json(i("Method not allowed - use POST", 405), { status: 405 });
-			let r = await e.json();
-			if (!r.naturalLanguage) return j.json(i("naturalLanguage field is required", 400), { status: 400 });
-			let o = await a(n, r);
-			return j.json(o, { headers: t ? P(e, t) : {} });
+			if (e.method !== "POST") return j.json(r("Method not allowed - use POST", 405), { status: 405 });
+			let a = await e.json();
+			if (!a.naturalLanguage) return j.json(r("naturalLanguage field is required", 400), { status: 400 });
+			let o = await t(i, a);
+			return j.json(o, { headers: n ? z(e, n) : {} });
 		} catch (e) {
-			return process.env.NODE_ENV !== "test" && console.error("Next.js suggest handler error:", e), j.json(i(e instanceof Error ? e.message : "Query suggestion failed", 500), { status: 500 });
+			return process.env.NODE_ENV !== "test" && console.error("Next.js suggest handler error:", e), j.json(r(e instanceof Error ? e.message : "Query suggestion failed", 500), { status: 500 });
 		}
 	};
 }
-function W(e) {
-	let { cors: t } = N(e), n = M(e);
+function Y(e) {
+	let { cors: t } = R(e), i = L(e);
 	return async function(e, a) {
 		try {
-			if (e.method !== "POST") return j.json(i("Method not allowed - use POST", 405), { status: 405 });
+			if (e.method !== "POST") return j.json(r("Method not allowed - use POST", 405), { status: 405 });
 			let a = await e.json();
-			if (!a.query) return j.json(i("query field is required", 400), { status: 400 });
-			let o = await r(n, a);
-			return j.json(o, { headers: t ? P(e, t) : {} });
+			if (!a.query) return j.json(r("query field is required", 400), { status: 400 });
+			let o = await n(i, a);
+			return j.json(o, { headers: t ? z(e, t) : {} });
 		} catch (e) {
-			return process.env.NODE_ENV !== "test" && console.error("Next.js validate handler error:", e), j.json(i(e instanceof Error ? e.message : "Query validation failed", 500), { status: 500 });
+			return process.env.NODE_ENV !== "test" && console.error("Next.js validate handler error:", e), j.json(r(e instanceof Error ? e.message : "Query validation failed", 500), { status: 500 });
 		}
 	};
 }
-function G(e) {
-	let { extractSecurityContext: t, cors: n } = N(e), r = M(e);
-	return async function(e, a) {
+function X(e) {
+	let { extractSecurityContext: t, cors: n } = R(e), i = L(e);
+	return async function(e, o) {
 		try {
-			if (e.method !== "POST") return j.json(i("Method not allowed - use POST", 405), { status: 405 });
-			let o = await e.json();
-			if (!o.query) return j.json(i("query field is required", 400), { status: 400 });
-			let c = await s(r, await t(e, a), o);
-			return j.json(c, { headers: n ? P(e, n) : {} });
+			if (e.method !== "POST") return j.json(r("Method not allowed - use POST", 405), { status: 405 });
+			let s = await e.json();
+			if (!s.query) return j.json(r("query field is required", 400), { status: 400 });
+			let c = await a(i, await t(e, o), s);
+			return j.json(c, { headers: n ? z(e, n) : {} });
 		} catch (e) {
-			return process.env.NODE_ENV !== "test" && console.error("Next.js MCP load handler error:", e), j.json(i(e instanceof Error ? e.message : "Query execution failed", 500), { status: 500 });
+			return process.env.NODE_ENV !== "test" && console.error("Next.js MCP load handler error:", e), j.json(r(e instanceof Error ? e.message : "Query execution failed", 500), { status: 500 });
 		}
 	};
 }
-function K(e) {
-	let { extractSecurityContext: t, cors: n } = N(e), { mcp: r = { enabled: !0 } } = e, a = M(e), o = T(a, r.resources), s = A(r.prompts), c = O(r.instructions);
-	return async function(e) {
-		if (r.resourceMetadataUrl && !D(e.headers.get("authorization"))) return j.json({ error: "Bearer token required" }, {
-			status: 401,
-			headers: { "WWW-Authenticate": y(r.resourceMetadataUrl) }
-		});
-		if (e.method === "DELETE") return j.json({ error: "Session termination not supported" }, { status: 405 });
-		if (e.method === "GET") {
-			let t = new TextEncoder(), r = g(), i = new ReadableStream({ start(e) {
-				e.enqueue(t.encode(v({
-					jsonrpc: "2.0",
-					method: "mcp/ready",
-					params: { protocol: "streamable-http" }
-				}, r, 15e3)));
-			} }), a = new Headers({
-				"Content-Type": "text/event-stream",
-				"Cache-Control": "no-cache",
-				Connection: "keep-alive"
-			});
-			if (n) {
-				let t = P(e, n);
-				Object.entries(t).forEach(([e, t]) => a.set(e, t));
-			}
-			return new j(i, {
-				status: 200,
-				headers: a
-			});
-		}
-		if (e.method !== "POST") return j.json(i("Method not allowed - use POST", 405), { status: 405 });
-		let l = h(e.headers.get("origin"), r.allowedOrigins ? { allowedOrigins: r.allowedOrigins } : {});
-		if (!l.valid) return j.json(S(null, -32600, l.reason), { status: 403 });
-		let u = e.headers.get("accept");
-		if (!k(u)) return j.json(S(null, -32600, "Accept header must include both application/json and text/event-stream"), { status: 400 });
-		let d = x(Object.fromEntries(e.headers.entries()));
-		if (!d.ok) return j.json({
-			error: "Unsupported MCP protocol version",
-			supported: d.supported
-		}, { status: 426 });
-		let f;
-		try {
-			f = await e.json();
-		} catch {
-			f = null;
-		}
-		let p = b(f);
-		if (!p) return j.json(S(null, -32600, "Invalid JSON-RPC 2.0 request"), { status: 400 });
-		let T = m(u), O = p.method === "initialize", A = (t, r = 200, i = {}) => j.json(t, {
+function Z(e) {
+	let { extractSecurityContext: t, cors: n } = R(e), { mcp: i = { enabled: !0 } } = e, a = L(e), o = T(a, i.resources), s = A(i.prompts), c = O(i.instructions), l = (e, t) => {
+		if (!n) return;
+		let r = z(e, n);
+		Object.entries(r).forEach(([e, n]) => t.set(e, n));
+	}, u = async (e) => {
+		let r = await N(e, i);
+		if (r.response) return r.response;
+		let u = r.rpcRequest, d = m(r.acceptHeader), f = u.method === "initialize", p = (t, r = 200, i = {}) => j.json(t, {
 			status: r,
 			headers: {
-				...n ? P(e, n) : {},
+				...n ? z(e, n) : {},
 				...i
 			}
 		});
 		try {
-			let i = await C(p.method, p.params, {
+			let n = await C(u.method, u.params, {
 				semanticLayer: a,
 				extractSecurityContext: (e) => t(e),
 				rawRequest: e,
@@ -289,66 +313,35 @@ function K(e) {
 				resources: o,
 				prompts: s,
 				instructions: c,
-				appEnabled: !!r.app,
-				appConfig: typeof r.app == "object" ? r.app : void 0,
-				serverName: r.serverName
+				appEnabled: !!i.app,
+				appConfig: typeof i.app == "object" ? i.app : void 0,
+				serverName: i.serverName
 			});
-			if (w(p)) return new j(null, { status: 202 });
-			let l = O && i && typeof i == "object" && "sessionId" in i ? i.sessionId : void 0, u = {};
-			l && (u[E] = l);
-			let d = _(p.id ?? null, i);
-			if (T) {
-				let t = new TextEncoder(), r = g(), i = new ReadableStream({ start(e) {
-					e.enqueue(t.encode(`id: ${r}\n\n`)), e.enqueue(t.encode(v(d, r))), e.close();
-				} }), a = new Headers({
-					"Content-Type": "text/event-stream",
-					"Cache-Control": "no-cache",
-					Connection: "keep-alive",
-					...u
-				});
-				if (n) {
-					let t = P(e, n);
-					Object.entries(t).forEach(([e, t]) => a.set(e, t));
-				}
-				return new j(i, {
-					status: 200,
-					headers: a
-				});
-			}
-			return A(d, 200, u);
+			if (w(u)) return new j(null, { status: 202 });
+			let r = F(f, n, E), m = _(u.id ?? null, n);
+			return d ? P(e, m, l, r) : p(m, 200, r);
 		} catch (t) {
-			if (w(p)) return process.env.NODE_ENV !== "test" && console.error("Next.js MCP notification processing error:", t), new j(null, { status: 202 });
+			if (w(u)) return process.env.NODE_ENV !== "test" && console.error("Next.js MCP notification processing error:", t), new j(null, { status: 202 });
 			process.env.NODE_ENV !== "test" && console.error("Next.js MCP RPC handler error:", t);
-			let r = t?.code ?? -32603, i = t?.data, a = t.message || "MCP request failed", o = S(p.id ?? null, r, a, i);
-			if (T) {
-				let t = new TextEncoder(), r = g(), i = new ReadableStream({ start(e) {
-					e.enqueue(t.encode(`id: ${r}\n\n`)), e.enqueue(t.encode(v(o, r))), e.close();
-				} }), a = new Headers({
-					"Content-Type": "text/event-stream",
-					"Cache-Control": "no-cache",
-					Connection: "keep-alive"
-				});
-				if (n) {
-					let t = P(e, n);
-					Object.entries(t).forEach(([e, t]) => a.set(e, t));
-				}
-				return new j(i, {
-					status: 200,
-					headers: a
-				});
-			}
-			return A(o, 200);
+			let n = I(t, u.id);
+			return d ? P(e, n, l) : p(n, 200);
 		}
 	};
+	return async function(e) {
+		return i.resourceMetadataUrl && !D(e.headers.get("authorization")) ? j.json({ error: "Bearer token required" }, {
+			status: 401,
+			headers: { "WWW-Authenticate": y(i.resourceMetadataUrl) }
+		}) : e.method === "DELETE" ? j.json({ error: "Session termination not supported" }, { status: 405 }) : e.method === "GET" ? M(e, l) : e.method === "POST" ? u(e) : j.json(r("Method not allowed - use POST", 405), { status: 405 });
+	};
 }
-function q(e) {
-	let { extractSecurityContext: t, cors: n } = N(e), { agent: r } = e;
+function Q(e) {
+	let { extractSecurityContext: t, cors: n } = R(e), { agent: r } = e;
 	if (!r) throw Error("agent config is required for createAgentChatHandler");
-	let i = M(e);
+	let i = L(e);
 	return async function(e, a) {
 		try {
 			if (e.method !== "POST") return j.json({ error: "Method not allowed - use POST" }, { status: 405 });
-			let { handleAgentChat: o } = await import("../handler-Cx8QYLk6.js"), { message: s, sessionId: c, history: l } = await e.json();
+			let { handleAgentChat: o } = await import("../handler-CfgE0JSL.js"), { message: s, sessionId: c, history: l } = await e.json();
 			if (!s || typeof s != "string") return j.json({ error: "message is required and must be a string" }, { status: 400 });
 			let u = (r.apiKey || "").trim();
 			if (r.allowClientApiKey) {
@@ -390,7 +383,7 @@ function q(e) {
 				Connection: "keep-alive"
 			});
 			if (n) {
-				let t = P(e, n);
+				let t = z(e, n);
 				Object.entries(t).forEach(([e, t]) => v.set(e, t));
 			}
 			return new Response(_, {
@@ -402,16 +395,16 @@ function q(e) {
 		}
 	};
 }
-function J(e) {
+function $(e) {
 	let { mcp: t = { enabled: !0 } } = e, n = {
-		load: I(e),
-		meta: L(e),
-		sql: R(e),
-		dryRun: z(e),
-		batch: B(e),
-		explain: V(e)
+		load: V(e),
+		meta: H(e),
+		sql: U(e),
+		dryRun: W(e),
+		batch: G(e),
+		explain: K(e)
 	};
-	return t.enabled !== !1 && (n.mcpRpc = K(e)), e.agent && (n.agentChat = q(e)), n;
+	return t.enabled !== !1 && (n.mcpRpc = Z(e)), e.agent && (n.agentChat = Q(e)), n;
 }
 //#endregion
-export { q as createAgentChatHandler, B as createBatchHandler, J as createCubeHandlers, H as createDiscoverHandler, z as createDryRunHandler, V as createExplainHandler, I as createLoadHandler, G as createMcpLoadHandler, K as createMcpRpcHandler, L as createMetaHandler, F as createOptionsHandler, R as createSqlHandler, U as createSuggestHandler, W as createValidateHandler };
+export { Q as createAgentChatHandler, G as createBatchHandler, $ as createCubeHandlers, q as createDiscoverHandler, W as createDryRunHandler, K as createExplainHandler, V as createLoadHandler, X as createMcpLoadHandler, Z as createMcpRpcHandler, H as createMetaHandler, B as createOptionsHandler, U as createSqlHandler, J as createSuggestHandler, Y as createValidateHandler };

package/dist/adapters/nextjs/mcp-handler.d.ts

@@ -0,0 +1,36 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { JsonRpcRequest } from '../mcp-transport.js';
+/** MCP endpoint config fields the Next.js handler helpers depend on. */
+export interface NextMcpHandlerConfig {
+    allowedOrigins?: string[];
+}
+/** Applies adapter CORS headers to an outgoing header set (no-op when CORS is disabled). */
+export type ApplyCors = (request: NextRequest, headers: Headers) => void;
+/** Builds the adapter CORS header record for JSON responses (empty when disabled). */
+export type CorsHeaders = (request: NextRequest) => Record<string, string>;
+/**
+ * Build the SSE `Response` for a GET (streaming connection open) request,
+ * emitting the initial `mcp/ready` event.
+ */
+export declare function buildMcpGetResponse(request: NextRequest, applyCors: ApplyCors): NextResponse;
+/**
+ * Result of the POST pre-dispatch validation gauntlet. When `response` is set
+ * the caller must return it immediately; otherwise `rpcRequest` and
+ * `acceptHeader` are populated for dispatch.
+ */
+export interface NextMcpRequestPrep {
+    response?: NextResponse;
+    rpcRequest?: JsonRpcRequest;
+    acceptHeader?: string | null;
+}
+/**
+ * Run the POST validation sequence (origin, Accept, protocol, body). Returns a
+ * short-circuit `response` on the first failure, or the parsed request on success.
+ */
+export declare function prepareMcpPostRequest(request: NextRequest, mcp: NextMcpHandlerConfig): Promise<NextMcpRequestPrep>;
+/** Build a single-event SSE `NextResponse` carrying one JSON-RPC payload, with CORS + extra headers. */
+export declare function buildMcpSseResponse(request: NextRequest, payload: unknown, applyCors: ApplyCors, extraHeaders?: Record<string, string>): NextResponse;
+/** Extract the MCP-Session-Id header value from an `initialize` result, if present. */
+export declare function extractMcpSessionHeaders(isInitialize: boolean, result: unknown, headerName: string): Record<string, string>;
+/** Build a JSON-RPC error response from a thrown error (preserving code/data). */
+export declare function buildMcpErrorPayload(error: unknown, id: JsonRpcRequest['id']): import('../mcp-transport.js').JsonRpcResponse;