fastmcp 4.21.0 → 4.21.2

package/dist/{chunk-J5E7VICR.cjs → chunk-C5VOVQPC.cjs}

@@ -2,6 +2,9 @@
 
 var _chunkGTPK7A57cjs = require('./chunk-GTPK7A57.cjs');
 
+
+var _chunkO22SYZMCcjs = require('./chunk-O22SYZMC.cjs');
+
 // src/FastMCP.ts
 var _indexjs = require('@modelcontextprotocol/sdk/server/index.js');
 var _stdiojs = require('@modelcontextprotocol/sdk/server/stdio.js');
@@ -376,21 +379,6 @@ function assertToolSchemas(tool) {
     assertStandardSchema(tool.name, "outputSchema", tool.outputSchema);
   }
 }
-function strictInputSchema(schema) {
-  const isDictionary = typeof schema.additionalProperties === "object" && Object.keys(_nullishCoalesce(schema.properties, () => ( {}))).length === 0;
-  return {
-    ...schema,
-    additionalProperties: isDictionary ? schema.additionalProperties : false,
-    ...schema.properties && {
-      properties: Object.fromEntries(
-        Object.entries(schema.properties).map(([key, value]) => [
-          key,
-          typeof value === "object" && value.type === "object" ? strictInputSchema(value) : value
-        ])
-      )
-    }
-  };
-}
 var STREAM_KEEPALIVE_LOGGER = "fastmcp-keepalive";
 var STREAM_KEEPALIVE_DEFAULT_INTERVAL_MS = 2e4;
 var TextContentZodSchema = _zod.z.object({
@@ -537,6 +525,7 @@ var FastMCPSession = class extends FastMCPSessionEventEmitter {
    */
   #abortController = new AbortController();
   #auth;
+  #authRequired;
   #capabilities = {};
   #clientCapabilities;
   #connectionState = "connecting";
@@ -575,6 +564,7 @@ var FastMCPSession = class extends FastMCPSessionEventEmitter {
   #utils;
   constructor({
     auth,
+    authRequired = false,
     hasTools,
     icons,
     instructions,
@@ -598,6 +588,7 @@ var FastMCPSession = class extends FastMCPSessionEventEmitter {
   }) {
     super();
     this.#auth = auth;
+    this.#authRequired = authRequired;
     this.#logger = logger;
     this.#onToolCall = onToolCall;
     this.#pingConfig = ping;
@@ -804,10 +795,9 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
     }
   }
   toolsListChanged(tools) {
-    const allowedTools = this.#auth ? tools.filter(
-      (tool) => tool.canAccess ? tool.canAccess(this.#auth) : true
-    ) : tools;
-    this.setupToolHandlers(allowedTools);
+    this.setupToolHandlers(
+      toolsVisibleTo(tools, this.#auth, this.#authRequired)
+    );
     this.triggerListChangedNotification("notifications/tools/list_changed");
   }
   async triggerListChangedNotification(method) {
@@ -1070,9 +1060,10 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
         const ref = request.params.ref;
         const prompt = "name" in ref && this.#prompts.get(ref.name);
         if (!prompt) {
-          throw new UnexpectedStateError("Unknown prompt", {
-            request
-          });
+          throw new (0, _typesjs.McpError)(
+            _typesjs.ErrorCode.InvalidParams,
+            `Unknown prompt: ${ref.name}`
+          );
         }
         if (!prompt.complete) {
           throw new UnexpectedStateError("Prompt does not support completion", {
@@ -1098,9 +1089,10 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
           (resource2) => resource2.uriTemplate === ref.uri
         );
         if (!resource) {
-          throw new UnexpectedStateError("Unknown resource", {
-            request
-          });
+          throw new (0, _typesjs.McpError)(
+            _typesjs.ErrorCode.InvalidParams,
+            `Unknown resource template: ${ref.uri}`
+          );
         }
         if (!("uriTemplate" in resource)) {
           throw new UnexpectedStateError("Unexpected resource");
@@ -1169,7 +1161,7 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
       const prompt = this.#prompts.get(request.params.name);
       if (!prompt) {
         throw new (0, _typesjs.McpError)(
-          _typesjs.ErrorCode.MethodNotFound,
+          _typesjs.ErrorCode.InvalidParams,
           `Unknown prompt: ${request.params.name}`
         );
       }
@@ -1390,7 +1382,7 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
           return {
             annotations: tool.annotations,
             description: tool.description,
-            inputSchema: tool.parameters ? strictInputSchema(await _xsschema.toJsonSchema.call(void 0, tool.parameters)) : {
+            inputSchema: tool.parameters ? _chunkO22SYZMCcjs.strictInputSchema.call(void 0, await _xsschema.toJsonSchema.call(void 0, tool.parameters)) : {
               additionalProperties: false,
               properties: {},
               type: "object"
@@ -1648,6 +1640,14 @@ function stripBasePath(path, basePath) {
   }
   return null;
 }
+function toolsVisibleTo(tools, auth, authRequired) {
+  if (auth) {
+    return tools.filter(
+      (tool) => tool.canAccess ? tool.canAccess(auth) : true
+    );
+  }
+  return authRequired ? tools.filter((tool) => !tool.canAccess) : tools;
+}
 var FastMCPEventEmitterBase = _events.EventEmitter;
 var FastMCPEventEmitter = class extends FastMCPEventEmitterBase {
 };
@@ -2027,6 +2027,7 @@ var FastMCP = class extends FastMCPEventEmitter {
     if (config.transportType === "stdio") {
       const transport = new (0, _stdiojs.StdioServerTransport)();
       let auth;
+      const authRequired = this.#authenticate !== void 0;
       if (this.#authenticate) {
         try {
           auth = await _asyncNullishCoalesce(await this.#authenticate(
@@ -2038,9 +2039,16 @@ var FastMCP = class extends FastMCPEventEmitter {
             error instanceof Error ? error.message : String(error)
           );
         }
+        if (!auth && this.#tools.some((tool) => tool.canAccess)) {
+          this.#logger.warn(
+            "[FastMCP warning] The stdio session has no auth, so tools gated by canAccess are hidden from it."
+          );
+        }
       }
       const session = new FastMCPSession({
         auth,
+        authRequired,
+        hasTools: this.#tools.length > 0,
         icons: this.#options.icons,
         instructions: this.#options.instructions,
         logger: this.#logger,
@@ -2053,7 +2061,7 @@ var FastMCP = class extends FastMCPEventEmitter {
         roots: this.#options.roots,
         streamKeepalive: this.#options.streamKeepalive,
         title: this.#options.title,
-        tools: this.#tools,
+        tools: toolsVisibleTo(this.#tools, auth, authRequired),
         transportType: "stdio",
         utils: this.#options.utils,
         version: this.#options.version,
@@ -2223,11 +2231,10 @@ var FastMCP = class extends FastMCPEventEmitter {
       const errorMessage = "error" in auth && typeof auth.error === "string" ? auth.error : "Authentication failed";
       throw this.#createUnauthorizedResponse(errorMessage);
     }
-    const allowedTools = auth ? this.#tools.filter(
-      (tool) => tool.canAccess ? tool.canAccess(auth) : true
-    ) : this.#tools;
+    const authRequired = this.#authenticate !== void 0;
     return new FastMCPSession({
       auth,
+      authRequired,
       hasTools: this.#tools.length > 0,
       icons: this.#options.icons,
       instructions: this.#options.instructions,
@@ -2243,7 +2250,7 @@ var FastMCP = class extends FastMCPEventEmitter {
       stateless,
       streamKeepalive: this.#options.streamKeepalive,
       title: this.#options.title,
-      tools: allowedTools,
+      tools: toolsVisibleTo(this.#tools, auth, authRequired),
       transportType: "httpStream",
       utils: this.#options.utils,
       version: this.#options.version,
@@ -2939,4 +2946,4 @@ var FastMCP = class extends FastMCPEventEmitter {
 
 
 exports.DiscoveryDocumentCache = DiscoveryDocumentCache; exports.jsonSchemaAdapter = jsonSchemaAdapter; exports.MEDIA_FETCH_TIMEOUT_MS = MEDIA_FETCH_TIMEOUT_MS; exports.imageContent = imageContent; exports.audioContent = audioContent; exports.FastMCPError = FastMCPError; exports.SessionError = SessionError; exports.UnexpectedStateError = UnexpectedStateError; exports.UserError = UserError; exports.ServerState = ServerState; exports.FastMCPSession = FastMCPSession; exports.FastMCP = FastMCP;
-//# sourceMappingURL=chunk-J5E7VICR.cjs.map
+//# sourceMappingURL=chunk-C5VOVQPC.cjs.map