fastmcp 4.21.1 → 4.21.2

package/dist/{chunk-JNP6BG5L.js → chunk-QMRS4ZLD.js}

@@ -1,6 +1,9 @@
 import {
   cancelResponseBody
 } from "./chunk-AR3LVWUF.js";
+import {
+  strictInputSchema
+} from "./chunk-UMDUIBFW.js";
 
 // src/FastMCP.ts
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
@@ -376,21 +379,6 @@ function assertToolSchemas(tool) {
     assertStandardSchema(tool.name, "outputSchema", tool.outputSchema);
   }
 }
-function strictInputSchema(schema) {
-  const isDictionary = typeof schema.additionalProperties === "object" && Object.keys(schema.properties ?? {}).length === 0;
-  return {
-    ...schema,
-    additionalProperties: isDictionary ? schema.additionalProperties : false,
-    ...schema.properties && {
-      properties: Object.fromEntries(
-        Object.entries(schema.properties).map(([key, value]) => [
-          key,
-          typeof value === "object" && value.type === "object" ? strictInputSchema(value) : value
-        ])
-      )
-    }
-  };
-}
 var STREAM_KEEPALIVE_LOGGER = "fastmcp-keepalive";
 var STREAM_KEEPALIVE_DEFAULT_INTERVAL_MS = 2e4;
 var TextContentZodSchema = z.object({
@@ -537,6 +525,7 @@ var FastMCPSession = class extends FastMCPSessionEventEmitter {
    */
   #abortController = new AbortController();
   #auth;
+  #authRequired;
   #capabilities = {};
   #clientCapabilities;
   #connectionState = "connecting";
@@ -575,6 +564,7 @@ var FastMCPSession = class extends FastMCPSessionEventEmitter {
   #utils;
   constructor({
     auth,
+    authRequired = false,
     hasTools,
     icons,
     instructions,
@@ -598,6 +588,7 @@ var FastMCPSession = class extends FastMCPSessionEventEmitter {
   }) {
     super();
     this.#auth = auth;
+    this.#authRequired = authRequired;
     this.#logger = logger;
     this.#onToolCall = onToolCall;
     this.#pingConfig = ping;
@@ -804,7 +795,9 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
     }
   }
   toolsListChanged(tools) {
-    this.setupToolHandlers(toolsVisibleTo(tools, this.#auth));
+    this.setupToolHandlers(
+      toolsVisibleTo(tools, this.#auth, this.#authRequired)
+    );
     this.triggerListChangedNotification("notifications/tools/list_changed");
   }
   async triggerListChangedNotification(method) {
@@ -1067,9 +1060,10 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
         const ref = request.params.ref;
         const prompt = "name" in ref && this.#prompts.get(ref.name);
         if (!prompt) {
-          throw new UnexpectedStateError("Unknown prompt", {
-            request
-          });
+          throw new McpError(
+            ErrorCode.InvalidParams,
+            `Unknown prompt: ${ref.name}`
+          );
         }
         if (!prompt.complete) {
           throw new UnexpectedStateError("Prompt does not support completion", {
@@ -1095,9 +1089,10 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
           (resource2) => resource2.uriTemplate === ref.uri
         );
         if (!resource) {
-          throw new UnexpectedStateError("Unknown resource", {
-            request
-          });
+          throw new McpError(
+            ErrorCode.InvalidParams,
+            `Unknown resource template: ${ref.uri}`
+          );
         }
         if (!("uriTemplate" in resource)) {
           throw new UnexpectedStateError("Unexpected resource");
@@ -1645,8 +1640,13 @@ function stripBasePath(path, basePath) {
   }
   return null;
 }
-function toolsVisibleTo(tools, auth) {
-  return auth ? tools.filter((tool) => tool.canAccess ? tool.canAccess(auth) : true) : tools;
+function toolsVisibleTo(tools, auth, authRequired) {
+  if (auth) {
+    return tools.filter(
+      (tool) => tool.canAccess ? tool.canAccess(auth) : true
+    );
+  }
+  return authRequired ? tools.filter((tool) => !tool.canAccess) : tools;
 }
 var FastMCPEventEmitterBase = EventEmitter;
 var FastMCPEventEmitter = class extends FastMCPEventEmitterBase {
@@ -2027,6 +2027,7 @@ var FastMCP = class extends FastMCPEventEmitter {
     if (config.transportType === "stdio") {
       const transport = new StdioServerTransport();
       let auth;
+      const authRequired = this.#authenticate !== void 0;
       if (this.#authenticate) {
         try {
           auth = await this.#authenticate(
@@ -2038,9 +2039,15 @@ var FastMCP = class extends FastMCPEventEmitter {
             error instanceof Error ? error.message : String(error)
           );
         }
+        if (!auth && this.#tools.some((tool) => tool.canAccess)) {
+          this.#logger.warn(
+            "[FastMCP warning] The stdio session has no auth, so tools gated by canAccess are hidden from it."
+          );
+        }
       }
       const session = new FastMCPSession({
         auth,
+        authRequired,
         hasTools: this.#tools.length > 0,
         icons: this.#options.icons,
         instructions: this.#options.instructions,
@@ -2054,7 +2061,7 @@ var FastMCP = class extends FastMCPEventEmitter {
         roots: this.#options.roots,
         streamKeepalive: this.#options.streamKeepalive,
         title: this.#options.title,
-        tools: toolsVisibleTo(this.#tools, auth),
+        tools: toolsVisibleTo(this.#tools, auth, authRequired),
         transportType: "stdio",
         utils: this.#options.utils,
         version: this.#options.version,
@@ -2224,8 +2231,10 @@ var FastMCP = class extends FastMCPEventEmitter {
       const errorMessage = "error" in auth && typeof auth.error === "string" ? auth.error : "Authentication failed";
       throw this.#createUnauthorizedResponse(errorMessage);
     }
+    const authRequired = this.#authenticate !== void 0;
     return new FastMCPSession({
       auth,
+      authRequired,
       hasTools: this.#tools.length > 0,
       icons: this.#options.icons,
       instructions: this.#options.instructions,
@@ -2241,7 +2250,7 @@ var FastMCP = class extends FastMCPEventEmitter {
       stateless,
       streamKeepalive: this.#options.streamKeepalive,
       title: this.#options.title,
-      tools: toolsVisibleTo(this.#tools, auth),
+      tools: toolsVisibleTo(this.#tools, auth, authRequired),
       transportType: "httpStream",
       utils: this.#options.utils,
       version: this.#options.version,
@@ -2937,4 +2946,4 @@ export {
   FastMCPSession,
   FastMCP
 };
-//# sourceMappingURL=chunk-JNP6BG5L.js.map
+//# sourceMappingURL=chunk-QMRS4ZLD.js.map