drizzle-cube 0.6.1 → 0.6.3

package/dist/adapters/nextjs/index.js

@@ -1,11 +1,12 @@
-import { a as e, d as t, f as n, i as r, l as i, m as a, o, p as s, r as c, u as l } from "../utils-BPWZsX7k.js";
-import { i as u, n as d, r as f, t as p } from "../locale-DDvZDFVn.js";
-import { C as m, S as h, _ as g, a as _, b as v, c as y, g as b, h as x, i as S, l as C, m as w, o as T, r as E, u as D, v as O, x as k, y as A } from "../mcp-transport-Dfuj4j4q.js";
-import { NextResponse as j } from "next/server";
+import { d as e, f as t, i as n, m as r, p as i } from "../utils-BPWZsX7k.js";
+import { t as a } from "../compiler-LKTN9PTt.js";
+import { _ as o, b as s, c, u as l } from "../mcp-transport-Bw_zqky2.js";
+import { a as u, i as d, o as f, r as p, t as m } from "../core-Bbchr0ui.js";
+import { NextResponse as h } from "next/server";
 //#region src/adapters/nextjs/mcp-handler.ts
-function M(e, t) {
-	let n = new TextEncoder(), r = g(), i = new ReadableStream({ start(e) {
-		e.enqueue(n.encode(v({
+function g(e, t) {
+	let n = new TextEncoder(), r = o(), i = new ReadableStream({ start(e) {
+		e.enqueue(n.encode(s({
 			jsonrpc: "2.0",
 			method: "mcp/ready",
 			params: { protocol: "streamable-http" }
@@ -15,89 +16,103 @@ function M(e, t) {
 		"Cache-Control": "no-cache",
 		Connection: "keep-alive"
 	});
-	return t(e, a), new j(i, {
+	return t(e, a), new h(i, {
 		status: 200,
 		headers: a
 	});
 }
-async function N(e, t) {
-	let n = h(e.headers.get("origin"), t.allowedOrigins ? { allowedOrigins: t.allowedOrigins } : {});
-	if (!n.valid) return { response: j.json(S(null, -32600, n.reason), { status: 403 }) };
-	let r = e.headers.get("accept");
-	if (!k(r)) return { response: j.json(S(null, -32600, "Accept header must include both application/json and text/event-stream"), { status: 400 }) };
-	let i = x(Object.fromEntries(e.headers.entries()));
-	if (!i.ok) return { response: j.json({
-		error: "Unsupported MCP protocol version",
-		supported: i.supported
-	}, { status: 426 }) };
-	let a;
-	try {
-		a = await e.json();
-	} catch {
-		a = null;
-	}
-	let o = b(a);
-	return o ? {
-		rpcRequest: o,
-		acceptHeader: r
-	} : { response: j.json(S(null, -32600, "Invalid JSON-RPC 2.0 request"), { status: 400 }) };
-}
-function P(e, t, n, r = {}) {
-	let i = new TextEncoder(), a = g(), o = new ReadableStream({ start(e) {
-		e.enqueue(i.encode(`id: ${a}\n\n`)), e.enqueue(i.encode(v(t, a))), e.close();
-	} }), s = new Headers({
-		"Content-Type": "text/event-stream",
-		"Cache-Control": "no-cache",
-		Connection: "keep-alive",
-		...r
-	});
-	return n(e, s), new j(o, {
-		status: 200,
-		headers: s
-	});
-}
-function F(e, t, n) {
-	let r = e && t && typeof t == "object" && "sessionId" in t ? t.sessionId : void 0;
-	return r ? { [n]: r } : {};
-}
-function I(e, t) {
-	let n = e?.code ?? -32603, r = e?.data, i = e.message || "MCP request failed";
-	return S(t ?? null, n, i, r);
-}
 //#endregion
 //#region src/adapters/nextjs/index.ts
-function L(e) {
-	let { cubes: t, drizzle: n, schema: r, engineType: i, cache: a, rlsSetup: o } = e;
+function _(e) {
+	let { cubes: t, drizzle: n, schema: r, engineType: i, cache: o, rlsSetup: s } = e;
 	if (!t || t.length === 0) throw Error("At least one cube must be provided in the cubes array");
-	let s = new u({
+	let c = new a({
 		drizzle: n,
 		schema: r,
 		engineType: i,
-		cache: a,
-		rlsSetup: o
+		cache: o,
+		rlsSetup: s
 	});
 	return t.forEach((e) => {
-		s.registerCube(e);
-	}), s;
+		c.registerCube(e);
+	}), c;
 }
-function R(e) {
+function v(e) {
 	return {
-		extractSecurityContext: async (t, n) => f(await e.extractSecurityContext(t, n), d((e) => t.headers.get(e))),
+		extractSecurityContext: async (t, n) => f(await e.extractSecurityContext(t, n), u((e) => t.headers.get(e))),
 		cors: e.cors ? {
 			...e.cors,
-			allowedHeaders: p(e.cors.allowedHeaders)
+			allowedHeaders: d(e.cors.allowedHeaders)
 		} : void 0
 	};
 }
-function z(e, t) {
+function y(e, t) {
 	let n = e.headers.get("origin"), r = {};
 	return t.origin && (typeof t.origin == "string" ? r["Access-Control-Allow-Origin"] = t.origin : Array.isArray(t.origin) ? n && t.origin.includes(n) && (r["Access-Control-Allow-Origin"] = n) : typeof t.origin == "function" && n && t.origin(n) && (r["Access-Control-Allow-Origin"] = n)), t.methods && (r["Access-Control-Allow-Methods"] = t.methods.join(", ")), t.allowedHeaders && (r["Access-Control-Allow-Headers"] = t.allowedHeaders.join(", ")), t.credentials && (r["Access-Control-Allow-Credentials"] = "true"), r;
 }
-function B(e) {
+function b(e) {
+	let t = m({
+		semanticLayer: _(e),
+		onError: (e) => {
+			process.env.NODE_ENV !== "test" && console.error("Next.js handler error:", e);
+		},
+		mcp: e.mcp
+	}), n = e.cors ? {
+		...e.cors,
+		allowedHeaders: d(e.cors.allowedHeaders)
+	} : void 0;
+	return {
+		httpHandler: t,
+		corsHeaders: (e) => n ? y(e, n) : {},
+		baseContext: (t, n) => () => e.extractSecurityContext(t, n)
+	};
+}
+function x(e, t) {
+	let n = {};
+	return {
+		getHeader: (t) => e.headers.get(t) ?? void 0,
+		getBody: async () => {
+			try {
+				return await e.json();
+			} catch {
+				return null;
+			}
+		},
+		getQueryParam: (t) => e.nextUrl.searchParams.get(t) ?? void 0,
+		send: (e, r) => h.json(r, {
+			status: e,
+			headers: {
+				...t,
+				...n
+			}
+		}),
+		setHeader: (e, t) => {
+			n[e] = t;
+		},
+		sendEmpty: (e) => new h(null, {
+			status: e,
+			headers: {
+				...t,
+				...n
+			}
+		}),
+		sendSse: (e, r) => new h(r, {
+			status: e,
+			headers: {
+				"Content-Type": "text/event-stream",
+				"Cache-Control": "no-cache",
+				Connection: "keep-alive",
+				...t,
+				...n
+			}
+		})
+	};
+}
+function S(e) {
 	return async function(t) {
-		let n = z(t, {
+		let n = y(t, {
 			...e,
-			allowedHeaders: p(e.allowedHeaders)
+			allowedHeaders: d(e.allowedHeaders)
 		});
 		return new Response(null, {
 			status: 200,
@@ -105,306 +120,184 @@ function B(e) {
 		});
 	};
 }
-function V(e) {
-	let { extractSecurityContext: t, cors: n } = R(e), i = L(e);
+function C(e) {
+	let { httpHandler: t, corsHeaders: r, baseContext: i } = b(e);
 	return async function(e, a) {
-		try {
-			let o;
-			if (e.method === "POST") {
-				let t = await e.json();
-				o = t.query || t;
-			} else if (e.method === "GET") {
-				let t = e.nextUrl.searchParams.get("query");
-				if (!t) return j.json(r("Query parameter is required", 400), { status: 400 });
-				try {
-					o = JSON.parse(t);
-				} catch {
-					return j.json(r("Invalid JSON in query parameter", 400), { status: 400 });
-				}
-			} else return j.json(r("Method not allowed", 405), { status: 405 });
-			let s = await t(e, a), l = i.validateQuery(o);
-			if (!l.isValid) return j.json(r(`Query validation failed: ${l.errors.join(", ")}`, 400), { status: 400 });
-			let u = e.headers.get("x-cache-control") === "no-cache", d = await i.executeMultiCubeQuery(o, s, { skipCache: u }), f = c(o, d, i);
-			return j.json(f, { headers: n ? z(e, n) : {} });
-		} catch (e) {
-			return process.env.NODE_ENV !== "test" && console.error("Next.js load handler error:", e), j.json(r(e instanceof Error ? e.message : "Query execution failed", 500), { status: 500 });
-		}
+		let o = x(e, r(e));
+		return e.method === "POST" ? t.handleLoadPost(o, i(e, a)) : e.method === "GET" ? t.handleLoadGet(o, i(e, a)) : h.json(n("Method not allowed", 405), { status: 405 });
 	};
 }
-function H(t) {
-	let { cors: n } = R(t), i = L(t);
-	return async function(t, a) {
-		try {
-			let r = e(i.getMetadata());
-			return j.json(r, { headers: n ? z(t, n) : {} });
-		} catch (e) {
-			return process.env.NODE_ENV !== "test" && console.error("Next.js meta handler error:", e), j.json(r(e instanceof Error ? e.message : "Failed to fetch metadata", 500), { status: 500 });
-		}
+function w(e) {
+	let { httpHandler: t, corsHeaders: n } = b(e);
+	return async function(e, r) {
+		return t.handleMetaGet(x(e, n(e)));
 	};
 }
-function U(e) {
-	let { extractSecurityContext: t, cors: n } = R(e), i = L(e);
+function T(e) {
+	let { httpHandler: t, corsHeaders: r, baseContext: i } = b(e);
 	return async function(e, a) {
-		try {
-			let s;
-			if (e.method === "POST") {
-				let t = await e.json();
-				s = t.query || t;
-			} else if (e.method === "GET") {
-				let t = e.nextUrl.searchParams.get("query");
-				if (!t) return j.json(r("Query parameter is required", 400), { status: 400 });
-				try {
-					s = JSON.parse(t);
-				} catch {
-					return j.json(r("Invalid JSON in query parameter", 400), { status: 400 });
-				}
-			} else return j.json(r("Method not allowed", 405), { status: 405 });
-			let c = await t(e, a), l = i.validateQuery(s);
-			if (!l.isValid) return j.json(r(`Query validation failed: ${l.errors.join(", ")}`, 400), { status: 400 });
-			let u = s.measures?.[0] || s.dimensions?.[0];
-			if (!u) return j.json(r("No measures or dimensions specified", 400), { status: 400 });
-			let d = u.split(".")[0], f = await i.generateSQL(d, s, c), p = o(s, f);
-			return j.json(p, { headers: n ? z(e, n) : {} });
-		} catch (e) {
-			return process.env.NODE_ENV !== "test" && console.error("Next.js SQL handler error:", e), j.json(r(e instanceof Error ? e.message : "SQL generation failed", 500), { status: 500 });
-		}
+		let o = x(e, r(e));
+		return e.method === "POST" ? t.handleSqlPost(o, i(e, a)) : e.method === "GET" ? t.handleSqlGet(o, i(e, a)) : h.json(n("Method not allowed", 405), { status: 405 });
 	};
 }
-function W(e) {
-	let { extractSecurityContext: t, cors: n } = R(e), r = L(e);
+function E(e) {
+	let { httpHandler: t, corsHeaders: n, baseContext: r } = b(e);
 	return async function(e, i) {
-		try {
-			let a;
-			if (e.method === "POST") {
-				let t = await e.json();
-				a = t.query || t;
-			} else if (e.method === "GET") {
-				let t = e.nextUrl.searchParams.get("query");
-				if (!t) return j.json({
-					error: "Query parameter is required",
-					valid: !1
-				}, { status: 400 });
-				try {
-					a = JSON.parse(t);
-				} catch {
-					return j.json({
-						error: "Invalid JSON in query parameter",
-						valid: !1
-					}, { status: 400 });
-				}
-			} else return j.json({
-				error: "Method not allowed",
-				valid: !1
-			}, { status: 405 });
-			let o = await t(e, i), s = await l(a, o, r);
-			return j.json(s, { headers: n ? z(e, n) : {} });
-		} catch (e) {
-			return process.env.NODE_ENV !== "test" && console.error("Next.js dry-run handler error:", e), j.json({
-				error: e instanceof Error ? e.message : "Dry-run validation failed",
-				valid: !1
-			}, { status: 400 });
-		}
+		let a = x(e, n(e));
+		return e.method === "POST" ? t.handleDryRunPost(a, r(e, i)) : e.method === "GET" ? t.handleDryRunGet(a, r(e, i)) : h.json({
+			error: "Method not allowed",
+			valid: !1
+		}, { status: 405 });
 	};
 }
-function G(e) {
-	let { extractSecurityContext: t, cors: n } = R(e), a = L(e);
-	return async function(e, o) {
-		try {
-			if (e.method !== "POST") return j.json(r("Method not allowed - use POST", 405), { status: 405 });
-			let { queries: s } = await e.json();
-			if (!s || !Array.isArray(s)) return j.json(r("Request body must contain a \"queries\" array", 400), { status: 400 });
-			if (s.length === 0) return j.json(r("Queries array cannot be empty", 400), { status: 400 });
-			let c = await i(s, await t(e, o), a, { skipCache: e.headers.get("x-cache-control") === "no-cache" });
-			return j.json(c, { headers: n ? z(e, n) : {} });
-		} catch (e) {
-			return process.env.NODE_ENV !== "test" && console.error("Next.js batch handler error:", e), j.json(r(e instanceof Error ? e.message : "Batch execution failed", 500), { status: 500 });
-		}
+function D(e) {
+	let { httpHandler: t, corsHeaders: r, baseContext: i } = b(e);
+	return async function(e, a) {
+		return e.method === "POST" ? t.handleBatchPost(x(e, r(e)), i(e, a)) : h.json(n("Method not allowed - use POST", 405), { status: 405 });
 	};
 }
-function K(e) {
-	let { extractSecurityContext: t, cors: n } = R(e), r = L(e);
+function O(e) {
+	let { httpHandler: t, corsHeaders: n, baseContext: r } = b(e);
 	return async function(e, i) {
-		try {
-			if (e.method !== "POST") return j.json({ error: "Method not allowed" }, { status: 405 });
-			let a = await e.json(), o = a.query || a, s = a.options || {}, c = await t(e, i), l = r.validateQuery(o);
-			if (!l.isValid) return j.json({ error: `Query validation failed: ${l.errors.join(", ")}` }, { status: 400 });
-			let u = await r.explainQuery(o, c, s);
-			return j.json(u, { headers: n ? z(e, n) : {} });
-		} catch (e) {
-			return process.env.NODE_ENV !== "test" && console.error("Next.js explain handler error:", e), j.json({ error: e instanceof Error ? e.message : "Explain query failed" }, { status: 500 });
-		}
+		return e.method === "POST" ? t.handleExplainPost(x(e, n(e)), r(e, i)) : h.json({ error: "Method not allowed" }, { status: 405 });
 	};
 }
-function q(e) {
-	let { cors: t } = R(e), n = L(e);
-	return async function(e, i) {
+function k(e) {
+	let { cors: t } = v(e), r = _(e);
+	return async function(e, a) {
 		try {
-			if (e.method !== "POST") return j.json(r("Method not allowed - use POST", 405), { status: 405 });
-			let i = await s(n, await e.json());
-			return j.json(i, { headers: t ? z(e, t) : {} });
+			if (e.method !== "POST") return h.json(n("Method not allowed - use POST", 405), { status: 405 });
+			let a = await i(r, await e.json());
+			return h.json(a, { headers: t ? y(e, t) : {} });
 		} catch (e) {
-			return process.env.NODE_ENV !== "test" && console.error("Next.js discover handler error:", e), j.json(r(e instanceof Error ? e.message : "Discovery failed", 500), { status: 500 });
+			return process.env.NODE_ENV !== "test" && console.error("Next.js discover handler error:", e), h.json(n(e instanceof Error ? e.message : "Discovery failed", 500), { status: 500 });
 		}
 	};
 }
-function J(e) {
-	let { cors: n } = R(e), i = L(e);
-	return async function(e, a) {
+function A(t) {
+	let { cors: r } = v(t), i = _(t);
+	return async function(t, a) {
 		try {
-			if (e.method !== "POST") return j.json(r("Method not allowed - use POST", 405), { status: 405 });
-			let a = await e.json();
-			if (!a.naturalLanguage) return j.json(r("naturalLanguage field is required", 400), { status: 400 });
-			let o = await t(i, a);
-			return j.json(o, { headers: n ? z(e, n) : {} });
+			if (t.method !== "POST") return h.json(n("Method not allowed - use POST", 405), { status: 405 });
+			let a = await t.json();
+			if (!a.naturalLanguage) return h.json(n("naturalLanguage field is required", 400), { status: 400 });
+			let o = await e(i, a);
+			return h.json(o, { headers: r ? y(t, r) : {} });
 		} catch (e) {
-			return process.env.NODE_ENV !== "test" && console.error("Next.js suggest handler error:", e), j.json(r(e instanceof Error ? e.message : "Query suggestion failed", 500), { status: 500 });
+			return process.env.NODE_ENV !== "test" && console.error("Next.js suggest handler error:", e), h.json(n(e instanceof Error ? e.message : "Query suggestion failed", 500), { status: 500 });
 		}
 	};
 }
-function Y(e) {
-	let { cors: t } = R(e), i = L(e);
+function j(e) {
+	let { cors: r } = v(e), i = _(e);
 	return async function(e, a) {
 		try {
-			if (e.method !== "POST") return j.json(r("Method not allowed - use POST", 405), { status: 405 });
+			if (e.method !== "POST") return h.json(n("Method not allowed - use POST", 405), { status: 405 });
 			let a = await e.json();
-			if (!a.query) return j.json(r("query field is required", 400), { status: 400 });
-			let o = await n(i, a);
-			return j.json(o, { headers: t ? z(e, t) : {} });
+			if (!a.query) return h.json(n("query field is required", 400), { status: 400 });
+			let o = await t(i, a);
+			return h.json(o, { headers: r ? y(e, r) : {} });
 		} catch (e) {
-			return process.env.NODE_ENV !== "test" && console.error("Next.js validate handler error:", e), j.json(r(e instanceof Error ? e.message : "Query validation failed", 500), { status: 500 });
+			return process.env.NODE_ENV !== "test" && console.error("Next.js validate handler error:", e), h.json(n(e instanceof Error ? e.message : "Query validation failed", 500), { status: 500 });
 		}
 	};
 }
-function X(e) {
-	let { extractSecurityContext: t, cors: n } = R(e), i = L(e);
+function M(e) {
+	let { extractSecurityContext: t, cors: i } = v(e), a = _(e);
 	return async function(e, o) {
 		try {
-			if (e.method !== "POST") return j.json(r("Method not allowed - use POST", 405), { status: 405 });
+			if (e.method !== "POST") return h.json(n("Method not allowed - use POST", 405), { status: 405 });
 			let s = await e.json();
-			if (!s.query) return j.json(r("query field is required", 400), { status: 400 });
-			let c = await a(i, await t(e, o), s);
-			return j.json(c, { headers: n ? z(e, n) : {} });
+			if (!s.query) return h.json(n("query field is required", 400), { status: 400 });
+			let c = await r(a, await t(e, o), s);
+			return h.json(c, { headers: i ? y(e, i) : {} });
 		} catch (e) {
-			return process.env.NODE_ENV !== "test" && console.error("Next.js MCP load handler error:", e), j.json(r(e instanceof Error ? e.message : "Query execution failed", 500), { status: 500 });
+			return process.env.NODE_ENV !== "test" && console.error("Next.js MCP load handler error:", e), h.json(n(e instanceof Error ? e.message : "Query execution failed", 500), { status: 500 });
 		}
 	};
 }
-function Z(e) {
-	let { extractSecurityContext: t, cors: n } = R(e), { mcp: i = { enabled: !0 } } = e, a = L(e), o = T(a, i.resources), s = A(i.prompts), c = O(i.instructions), l = (e, t) => {
-		if (!n) return;
-		let r = z(e, n);
-		Object.entries(r).forEach(([e, n]) => t.set(e, n));
-	}, u = async (e) => {
-		let r = await N(e, i);
-		if (r.response) return r.response;
-		let u = r.rpcRequest, d = m(r.acceptHeader), f = u.method === "initialize", p = (t, r = 200, i = {}) => j.json(t, {
-			status: r,
-			headers: {
-				...n ? z(e, n) : {},
-				...i
-			}
-		});
-		try {
-			let n = await C(u.method, u.params, {
-				semanticLayer: a,
-				extractSecurityContext: (e) => t(e),
-				rawRequest: e,
-				rawResponse: null,
-				resources: o,
-				prompts: s,
-				instructions: c,
-				appEnabled: !!i.app,
-				appConfig: typeof i.app == "object" ? i.app : void 0,
-				serverName: i.serverName
-			});
-			if (w(u)) return new j(null, { status: 202 });
-			let r = F(f, n, E), m = _(u.id ?? null, n);
-			return d ? P(e, m, l, r) : p(m, 200, r);
-		} catch (t) {
-			if (w(u)) return process.env.NODE_ENV !== "test" && console.error("Next.js MCP notification processing error:", t), new j(null, { status: 202 });
-			process.env.NODE_ENV !== "test" && console.error("Next.js MCP RPC handler error:", t);
-			let n = I(t, u.id);
-			return d ? P(e, n, l) : p(n, 200);
-		}
+function N(e) {
+	let { httpHandler: t, corsHeaders: r, baseContext: i } = b(e), { mcp: a = { enabled: !0 } } = e, o = (e, t) => {
+		Object.entries(r(e)).forEach(([e, n]) => t.set(e, n));
 	};
-	return async function(e) {
-		return i.resourceMetadataUrl && !D(e.headers.get("authorization")) ? j.json({ error: "Bearer token required" }, {
+	return async function(e, s) {
+		return a.resourceMetadataUrl && !l(e.headers.get("authorization")) ? h.json({ error: "Bearer token required" }, {
 			status: 401,
-			headers: { "WWW-Authenticate": y(i.resourceMetadataUrl) }
-		}) : e.method === "DELETE" ? j.json({ error: "Session termination not supported" }, { status: 405 }) : e.method === "GET" ? M(e, l) : e.method === "POST" ? u(e) : j.json(r("Method not allowed - use POST", 405), { status: 405 });
+			headers: { "WWW-Authenticate": c(a.resourceMetadataUrl) }
+		}) : e.method === "DELETE" ? h.json({ error: "Session termination not supported" }, { status: 405 }) : e.method === "GET" ? g(e, o) : e.method === "POST" ? t.handleMcpPost(x(e, r(e)), i(e, s)) : h.json(n("Method not allowed - use POST", 405), { status: 405 });
 	};
 }
-function Q(e) {
-	let { extractSecurityContext: t, cors: n } = R(e), { agent: r } = e;
-	if (!r) throw Error("agent config is required for createAgentChatHandler");
-	let i = L(e);
-	return async function(e, a) {
+function P(e) {
+	let { cors: t } = v(e), { agent: n } = e;
+	if (!n) throw Error("agent config is required for createAgentChatHandler");
+	let r = _(e);
+	return async function(i, a) {
 		try {
-			if (e.method !== "POST") return j.json({ error: "Method not allowed - use POST" }, { status: 405 });
-			let { handleAgentChat: o } = await import("../handler-CfgE0JSL.js"), { message: s, sessionId: c, history: l } = await e.json();
-			if (!s || typeof s != "string") return j.json({ error: "message is required and must be a string" }, { status: 400 });
-			let u = (r.apiKey || "").trim();
-			if (r.allowClientApiKey) {
-				let t = e.headers.get("x-agent-api-key");
-				t && (u = t.trim());
+			if (i.method !== "POST") return h.json({ error: "Method not allowed - use POST" }, { status: 405 });
+			let { handleAgentChat: o } = await import("../handler-u8FyzPBT.js"), { message: s, sessionId: c, history: l } = await i.json();
+			if (!s || typeof s != "string") return h.json({ error: "message is required and must be a string" }, { status: 400 });
+			let u = (n.apiKey || "").trim();
+			if (n.allowClientApiKey) {
+				let e = i.headers.get("x-agent-api-key");
+				e && (u = e.trim());
 			}
-			if (!u) return j.json({ error: "No API key configured. Set agent.apiKey in server config or send X-Agent-Api-Key header." }, { status: 401 });
-			let d = r.allowClientApiKey && e.headers.get("x-agent-provider") || void 0, f = r.allowClientApiKey && e.headers.get("x-agent-model") || void 0, p = r.allowClientApiKey && e.headers.get("x-agent-provider-endpoint") || void 0, m = await t(e, a), h = r.buildSystemContext?.(m), g = new TextEncoder(), _ = new ReadableStream({ async start(e) {
+			if (!u) return h.json({ error: "No API key configured. Set agent.apiKey in server config or send X-Agent-Api-Key header." }, { status: 401 });
+			let d = n.allowClientApiKey && i.headers.get("x-agent-provider") || void 0, f = n.allowClientApiKey && i.headers.get("x-agent-model") || void 0, m = n.allowClientApiKey && i.headers.get("x-agent-provider-endpoint") || void 0, g = p(await e.extractSecurityContext(i, a), (e) => i.headers.get(e) ?? void 0), _ = n.buildSystemContext?.(g), v = new TextEncoder(), b = new ReadableStream({ async start(e) {
 				try {
 					let t = o({
 						message: s,
 						sessionId: c,
 						history: l,
-						semanticLayer: i,
-						securityContext: m,
-						agentConfig: r,
+						semanticLayer: r,
+						securityContext: g,
+						agentConfig: n,
 						apiKey: u,
-						systemContext: h,
+						systemContext: _,
 						providerOverride: d,
 						modelOverride: f,
-						baseURLOverride: p
+						baseURLOverride: m
 					});
 					for await (let n of t) {
 						let t = `data: ${JSON.stringify(n)}\n\n`;
-						e.enqueue(g.encode(t));
+						e.enqueue(v.encode(t));
 					}
 				} catch (t) {
 					let n = {
 						type: "error",
 						data: { message: t instanceof Error ? t.message : "Stream failed" }
 					};
-					e.enqueue(g.encode(`data: ${JSON.stringify(n)}\n\n`));
+					e.enqueue(v.encode(`data: ${JSON.stringify(n)}\n\n`));
 				} finally {
 					e.close();
 				}
-			} }), v = new Headers({
+			} }), x = new Headers({
 				"Content-Type": "text/event-stream",
 				"Cache-Control": "no-cache",
 				Connection: "keep-alive"
 			});
-			if (n) {
-				let t = z(e, n);
-				Object.entries(t).forEach(([e, t]) => v.set(e, t));
+			if (t) {
+				let e = y(i, t);
+				Object.entries(e).forEach(([e, t]) => x.set(e, t));
 			}
-			return new Response(_, {
+			return new Response(b, {
 				status: 200,
-				headers: v
+				headers: x
 			});
 		} catch (e) {
-			return process.env.NODE_ENV !== "test" && console.error("Next.js agent chat handler error:", e), j.json({ error: e instanceof Error ? e.message : "Agent chat failed" }, { status: 500 });
+			return process.env.NODE_ENV !== "test" && console.error("Next.js agent chat handler error:", e), h.json({ error: e instanceof Error ? e.message : "Agent chat failed" }, { status: 500 });
 		}
 	};
 }
-function $(e) {
+function F(e) {
 	let { mcp: t = { enabled: !0 } } = e, n = {
-		load: V(e),
-		meta: H(e),
-		sql: U(e),
-		dryRun: W(e),
-		batch: G(e),
-		explain: K(e)
+		load: C(e),
+		meta: w(e),
+		sql: T(e),
+		dryRun: E(e),
+		batch: D(e),
+		explain: O(e)
 	};
-	return t.enabled !== !1 && (n.mcpRpc = Z(e)), e.agent && (n.agentChat = Q(e)), n;
+	return t.enabled !== !1 && (n.mcpRpc = N(e)), e.agent && (n.agentChat = P(e)), n;
 }
 //#endregion
-export { Q as createAgentChatHandler, G as createBatchHandler, $ as createCubeHandlers, q as createDiscoverHandler, W as createDryRunHandler, K as createExplainHandler, V as createLoadHandler, X as createMcpLoadHandler, Z as createMcpRpcHandler, H as createMetaHandler, B as createOptionsHandler, U as createSqlHandler, J as createSuggestHandler, Y as createValidateHandler };
+export { P as createAgentChatHandler, D as createBatchHandler, F as createCubeHandlers, k as createDiscoverHandler, E as createDryRunHandler, O as createExplainHandler, C as createLoadHandler, M as createMcpLoadHandler, N as createMcpRpcHandler, w as createMetaHandler, S as createOptionsHandler, T as createSqlHandler, A as createSuggestHandler, j as createValidateHandler };

package/dist/adapters/nextjs/mcp-handler.d.ts

@@ -1,36 +1,8 @@
 import { NextRequest, NextResponse } from 'next/server';
-import { JsonRpcRequest } from '../mcp-transport.js';
-/** MCP endpoint config fields the Next.js handler helpers depend on. */
-export interface NextMcpHandlerConfig {
-    allowedOrigins?: string[];
-}
 /** Applies adapter CORS headers to an outgoing header set (no-op when CORS is disabled). */
 export type ApplyCors = (request: NextRequest, headers: Headers) => void;
-/** Builds the adapter CORS header record for JSON responses (empty when disabled). */
-export type CorsHeaders = (request: NextRequest) => Record<string, string>;
 /**
  * Build the SSE `Response` for a GET (streaming connection open) request,
  * emitting the initial `mcp/ready` event.
  */
 export declare function buildMcpGetResponse(request: NextRequest, applyCors: ApplyCors): NextResponse;
-/**
- * Result of the POST pre-dispatch validation gauntlet. When `response` is set
- * the caller must return it immediately; otherwise `rpcRequest` and
- * `acceptHeader` are populated for dispatch.
- */
-export interface NextMcpRequestPrep {
-    response?: NextResponse;
-    rpcRequest?: JsonRpcRequest;
-    acceptHeader?: string | null;
-}
-/**
- * Run the POST validation sequence (origin, Accept, protocol, body). Returns a
- * short-circuit `response` on the first failure, or the parsed request on success.
- */
-export declare function prepareMcpPostRequest(request: NextRequest, mcp: NextMcpHandlerConfig): Promise<NextMcpRequestPrep>;
-/** Build a single-event SSE `NextResponse` carrying one JSON-RPC payload, with CORS + extra headers. */
-export declare function buildMcpSseResponse(request: NextRequest, payload: unknown, applyCors: ApplyCors, extraHeaders?: Record<string, string>): NextResponse;
-/** Extract the MCP-Session-Id header value from an `initialize` result, if present. */
-export declare function extractMcpSessionHeaders(isInitialize: boolean, result: unknown, headerName: string): Record<string, string>;
-/** Build a JSON-RPC error response from a thrown error (preserving code/data). */
-export declare function buildMcpErrorPayload(error: unknown, id: JsonRpcRequest['id']): import('../mcp-transport.js').JsonRpcResponse;