fastmcp 4.23.6 → 4.23.8

package/dist/{chunk-2PXF6JQB.cjs → chunk-XEP3OP7Q.cjs}

@@ -1,9 +1,11 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } async function _asyncNullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return await rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
-var _chunkC7TBI7A5cjs = require('./chunk-C7TBI7A5.cjs');
+var _chunkAJRXMUZRcjs = require('./chunk-AJRXMUZR.cjs');
 
 
-var _chunkO22SYZMCcjs = require('./chunk-O22SYZMC.cjs');
+
+
+var _chunkT2F3RYH2cjs = require('./chunk-T2F3RYH2.cjs');
 
 // src/FastMCP.ts
 var _indexjs = require('@modelcontextprotocol/sdk/server/index.js');
@@ -139,7 +141,7 @@ var DiscoveryDocumentCache = class {
       throw error;
     }
     if (!res.ok) {
-      await _chunkC7TBI7A5cjs.cancelResponseBody.call(void 0, res);
+      await _chunkAJRXMUZRcjs.cancelResponseBody.call(void 0, res);
       throw new Error(
         `Failed to fetch discovery document from ${url}: ${res.status} ${res.statusText}`
       );
@@ -185,9 +187,11 @@ function jsonSchemaAdapter(schema) {
   };
 }
 async function compileSchema(schema) {
+  const dialect = _optionalChain([schema, 'access', _2 => _2.$schema, 'optionalAccess', _3 => _3.replace, 'call', _4 => _4(/^http:\/\//, "https://"), 'access', _5 => _5.replace, 'call', _6 => _6(/#$/, "")]);
+  const isDraft2020 = dialect === "https://json-schema.org/draft/2020-12/schema";
   let ajvModule;
   try {
-    ajvModule = await Promise.resolve().then(() => _interopRequireWildcard(require("ajv")));
+    ajvModule = isDraft2020 ? await Promise.resolve().then(() => _interopRequireWildcard(require("ajv/dist/2020.js"))) : await Promise.resolve().then(() => _interopRequireWildcard(require("ajv")));
   } catch (e2) {
     throw new Error(
       'The "ajv" package is required to validate JSON Schema tool parameters. Install it with: npm install ajv'
@@ -203,14 +207,14 @@ async function compileSchema(schema) {
     addFormats(ajv);
   } catch (e3) {
   }
-  return ajv.compile(schema);
+  return ajv.compile(isDraft2020 ? { ...schema, $schema: dialect } : schema);
 }
 function toIssue(error) {
   const path = error.instancePath.split("/").slice(1).map((segment) => segment.replaceAll("~1", "/").replaceAll("~0", "~")).map((segment) => {
     const index = Number(segment);
     return /^(?:0|[1-9]\d*)$/.test(segment) && Number.isSafeInteger(index) ? index : segment;
   });
-  const missingProperty = _optionalChain([error, 'access', _2 => _2.params, 'optionalAccess', _3 => _3.missingProperty]);
+  const missingProperty = _optionalChain([error, 'access', _7 => _7.params, 'optionalAccess', _8 => _8.missingProperty]);
   if (error.keyword === "required" && typeof missingProperty === "string") {
     path.push(missingProperty);
   }
@@ -245,7 +249,7 @@ var imageContent = async (input) => {
           signal: AbortSignal.timeout(timeoutMs)
         });
         if (!response.ok) {
-          await _chunkC7TBI7A5cjs.cancelResponseBody.call(void 0, response);
+          await _chunkAJRXMUZRcjs.cancelResponseBody.call(void 0, response);
           throw new Error(
             `Server responded with status: ${response.status} - ${response.statusText}`
           );
@@ -278,7 +282,7 @@ var imageContent = async (input) => {
     }
     const { fileTypeFromBuffer } = await Promise.resolve().then(() => _interopRequireWildcard(require("file-type")));
     const fileType = await fileTypeFromBuffer(rawData);
-    const mimeType = (!fileType || fileType.mime === "application/xml") && isSvg(rawData) ? "image/svg+xml" : _optionalChain([fileType, 'optionalAccess', _4 => _4.mime]);
+    const mimeType = (!fileType || fileType.mime === "application/xml") && isSvg(rawData) ? "image/svg+xml" : _optionalChain([fileType, 'optionalAccess', _9 => _9.mime]);
     if (!mimeType || !mimeType.startsWith("image/")) {
       console.warn(
         `Warning: Content may not be a valid image. Detected MIME: ${mimeType || "unknown"}`
@@ -307,11 +311,11 @@ var AUDIO_CONTAINER_TYPES = /* @__PURE__ */ new Map([
   ["video/webm", "audio/webm"]
 ]);
 var resolveAudioMimeType = (detected, declared) => {
-  if (_optionalChain([detected, 'optionalAccess', _5 => _5.startsWith, 'call', _6 => _6("audio/")])) {
+  if (_optionalChain([detected, 'optionalAccess', _10 => _10.startsWith, 'call', _11 => _11("audio/")])) {
     return detected;
   }
-  const declaredMime = _optionalChain([declared, 'optionalAccess', _7 => _7.split, 'call', _8 => _8(";", 1), 'access', _9 => _9[0], 'access', _10 => _10.trim, 'call', _11 => _11(), 'access', _12 => _12.toLowerCase, 'call', _13 => _13()]);
-  if (_optionalChain([declaredMime, 'optionalAccess', _14 => _14.startsWith, 'call', _15 => _15("audio/")])) {
+  const declaredMime = _optionalChain([declared, 'optionalAccess', _12 => _12.split, 'call', _13 => _13(";", 1), 'access', _14 => _14[0], 'access', _15 => _15.trim, 'call', _16 => _16(), 'access', _17 => _17.toLowerCase, 'call', _18 => _18()]);
+  if (_optionalChain([declaredMime, 'optionalAccess', _19 => _19.startsWith, 'call', _20 => _20("audio/")])) {
     return declaredMime;
   }
   return _nullishCoalesce((detected && AUDIO_CONTAINER_TYPES.get(detected)), () => ( detected));
@@ -327,7 +331,7 @@ var audioContent = async (input) => {
           signal: AbortSignal.timeout(timeoutMs)
         });
         if (!response.ok) {
-          await _chunkC7TBI7A5cjs.cancelResponseBody.call(void 0, response);
+          await _chunkAJRXMUZRcjs.cancelResponseBody.call(void 0, response);
           throw new Error(
             `Server responded with status: ${response.status} - ${response.statusText}`
           );
@@ -361,7 +365,7 @@ var audioContent = async (input) => {
     }
     const { fileTypeFromBuffer } = await Promise.resolve().then(() => _interopRequireWildcard(require("file-type")));
     const detected = await fileTypeFromBuffer(rawData);
-    const mimeType = resolveAudioMimeType(_optionalChain([detected, 'optionalAccess', _16 => _16.mime]), declaredMimeType);
+    const mimeType = resolveAudioMimeType(_optionalChain([detected, 'optionalAccess', _21 => _21.mime]), declaredMimeType);
     if (!mimeType || !mimeType.startsWith("audio/")) {
       console.warn(
         `Warning: Content may not be a valid audio file. Detected MIME: ${mimeType || "unknown"}`
@@ -401,7 +405,7 @@ var UserError = class extends UnexpectedStateError {
 };
 function assertStandardSchema(toolName, schemaName, schema) {
   const standard = schema["~standard"];
-  if (typeof _optionalChain([standard, 'optionalAccess', _17 => _17.validate]) === "function") {
+  if (typeof _optionalChain([standard, 'optionalAccess', _22 => _22.validate]) === "function") {
     return;
   }
   throw new UserError(
@@ -518,7 +522,7 @@ var FastMCPSession = class extends FastMCPSessionEventEmitter {
    */
   get sessionId() {
     if (this.#sessionId === void 0) {
-      const transportSessionId = _optionalChain([this, 'access', _18 => _18.#server, 'access', _19 => _19.transport, 'optionalAccess', _20 => _20.sessionId]);
+      const transportSessionId = _optionalChain([this, 'access', _23 => _23.#server, 'access', _24 => _24.transport, 'optionalAccess', _25 => _25.sessionId]);
       if (typeof transportSessionId === "string") {
         this.#sessionId = transportSessionId;
       }
@@ -542,6 +546,8 @@ var FastMCPSession = class extends FastMCPSessionEventEmitter {
   #capabilities = {};
   #clientCapabilities;
   #connectionState = "connecting";
+  // Caller-supplied transports leave the response mode unspecified.
+  #enableJsonResponse;
   #logger;
   /**
    * The minimum level the client asked for with `logging/setLevel`, or
@@ -590,6 +596,7 @@ var FastMCPSession = class extends FastMCPSessionEventEmitter {
   constructor({
     auth,
     authRequired = false,
+    enableJsonResponse,
     hasTools,
     icons,
     instructions,
@@ -614,6 +621,7 @@ var FastMCPSession = class extends FastMCPSessionEventEmitter {
     super();
     this.#auth = auth;
     this.#authRequired = authRequired;
+    this.#enableJsonResponse = enableJsonResponse;
     this.#logger = logger;
     this.#onToolCall = onToolCall;
     this.#pingConfig = ping;
@@ -875,6 +883,19 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
     }
     return false;
   }
+  /**
+   * When `start()` streams responses, an elicitation goes out on its request's
+   * own SSE stream, as the SDK's `extra.sendRequest` does, so it reaches a
+   * client that never opened the optional standalone GET stream. A JSON
+   * response cannot carry it, and a transport passed to `connect()` does not
+   * say which mode it uses, so those keep the session's standalone stream.
+   */
+  #createElicit(requestId) {
+    return (params, options) => this.#server.elicitInput(
+      params,
+      this.#enableJsonResponse === false ? { ...options, relatedRequestId: requestId } : options
+    );
+  }
   /**
    * Builds the context object passed as the third argument to
    * `resource.load` / `resourceTemplate.load` / `prompt.load`.
@@ -885,14 +906,14 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
    * are tied to a tool call's progress token / streaming notification,
    * which resource and prompt reads do not have.
    */
-  #createLoadContext(meta, sendNotification) {
+  #createLoadContext(meta, sendNotification, requestId) {
     return {
       client: {
         version: this.#server.getClientVersion()
       },
-      elicit: (params, options) => this.#server.elicitInput(params, options),
+      elicit: this.#createElicit(requestId),
       log: this.#createLog(sendNotification),
-      requestId: typeof _optionalChain([meta, 'optionalAccess', _21 => _21.requestId]) === "string" ? meta.requestId : void 0,
+      requestId: typeof _optionalChain([meta, 'optionalAccess', _26 => _26.requestId]) === "string" ? meta.requestId : void 0,
       session: this.#auth,
       sessionId: this.sessionId
     };
@@ -914,8 +935,8 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
     };
   }
   #formatSchemaIssues(issues) {
-    return _optionalChain([this, 'access', _22 => _22.#utils, 'optionalAccess', _23 => _23.formatInvalidParamsErrorMessage]) ? this.#utils.formatInvalidParamsErrorMessage(issues) : issues.map((issue) => {
-      const path = _optionalChain([issue, 'access', _24 => _24.path, 'optionalAccess', _25 => _25.join, 'call', _26 => _26(".")]) || "root";
+    return _optionalChain([this, 'access', _27 => _27.#utils, 'optionalAccess', _28 => _28.formatInvalidParamsErrorMessage]) ? this.#utils.formatInvalidParamsErrorMessage(issues) : issues.map((issue) => {
+      const path = _optionalChain([issue, 'access', _29 => _29.path, 'optionalAccess', _30 => _30.join, 'call', _31 => _31(".")]) || "root";
       return `${path}: ${issue.message}`;
     }).join(", ");
   }
@@ -937,7 +958,7 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
    * is bounded and retried, and the result is announced with `rootsChanged`.
    */
   async #loadRoots(streamableHttp) {
-    if (_optionalChain([this, 'access', _27 => _27.#rootsConfig, 'optionalAccess', _28 => _28.enabled]) === false || !_optionalChain([this, 'access', _29 => _29.#clientCapabilities, 'optionalAccess', _30 => _30.roots, 'optionalAccess', _31 => _31.listChanged]) || typeof this.#server.listRoots !== "function") {
+    if (_optionalChain([this, 'access', _32 => _32.#rootsConfig, 'optionalAccess', _33 => _33.enabled]) === false || !_optionalChain([this, 'access', _34 => _34.#clientCapabilities, 'optionalAccess', _35 => _35.roots, 'optionalAccess', _36 => _36.listChanged]) || typeof this.#server.listRoots !== "function") {
       return;
     }
     const maxAttempts = streamableHttp ? 5 : 1;
@@ -947,7 +968,7 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
           void 0,
           streamableHttp ? { timeout: 1e3 } : void 0
         );
-        this.#roots = _optionalChain([roots, 'optionalAccess', _32 => _32.roots]) || [];
+        this.#roots = _optionalChain([roots, 'optionalAccess', _37 => _37.roots]) || [];
         if (streamableHttp) {
           this.emit("rootsChanged", { roots: this.#roots });
         }
@@ -1085,7 +1106,7 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
    */
   #startStreamKeepalive(extra, toolName) {
     const config = this.#streamKeepaliveConfig;
-    if (!_optionalChain([config, 'optionalAccess', _33 => _33.enabled])) {
+    if (!_optionalChain([config, 'optionalAccess', _38 => _38.enabled])) {
       return () => {
       };
     }
@@ -1105,9 +1126,9 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
         );
       });
     }, intervalMs);
-    _optionalChain([timer, 'access', _34 => _34.unref, 'optionalCall', _35 => _35()]);
+    _optionalChain([timer, 'access', _39 => _39.unref, 'optionalCall', _40 => _40()]);
     const stop = () => clearInterval(timer);
-    _optionalChain([extra, 'access', _36 => _36.signal, 'optionalAccess', _37 => _37.addEventListener, 'call', _38 => _38("abort", stop, { once: true })]);
+    _optionalChain([extra, 'access', _41 => _41.signal, 'optionalAccess', _42 => _42.addEventListener, 'call', _43 => _43("abort", stop, { once: true })]);
     return stop;
   }
   async #validateStructuredContent(tool, value, toolName) {
@@ -1327,8 +1348,9 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
             _nullishCoalesce(args, () => ( {})),
             this.#auth,
             this.#createLoadContext(
-              _optionalChain([request, 'access', _39 => _39.params, 'optionalAccess', _40 => _40._meta]),
-              extra.sendNotification
+              _optionalChain([request, 'access', _44 => _44.params, 'optionalAccess', _45 => _45._meta]),
+              extra.sendNotification,
+              extra.requestId
             )
           );
         } catch (error) {
@@ -1396,8 +1418,9 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
                 match,
                 this.#auth,
                 this.#createLoadContext(
-                  _optionalChain([request, 'access', _41 => _41.params, 'optionalAccess', _42 => _42._meta]),
-                  extra.sendNotification
+                  _optionalChain([request, 'access', _46 => _46.params, 'optionalAccess', _47 => _47._meta]),
+                  extra.sendNotification,
+                  extra.requestId
                 )
               );
               const resources = Array.isArray(result) ? result : [result];
@@ -1425,8 +1448,9 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
             maybeArrayResult = await resource.load(
               this.#auth,
               this.#createLoadContext(
-                _optionalChain([request, 'access', _43 => _43.params, 'optionalAccess', _44 => _44._meta]),
-                extra.sendNotification
+                _optionalChain([request, 'access', _48 => _48.params, 'optionalAccess', _49 => _49._meta]),
+                extra.sendNotification,
+                extra.requestId
               )
             );
           } catch (error) {
@@ -1490,7 +1514,7 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
     );
   }
   setupRootsHandlers() {
-    if (_optionalChain([this, 'access', _45 => _45.#rootsConfig, 'optionalAccess', _46 => _46.enabled]) === false) {
+    if (_optionalChain([this, 'access', _50 => _50.#rootsConfig, 'optionalAccess', _51 => _51.enabled]) === false) {
       this.#logger.debug(
         "[FastMCP debug] roots capability explicitly disabled via config"
       );
@@ -1541,15 +1565,17 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
           return {
             annotations: tool.annotations,
             description: tool.description,
-            inputSchema: tool.parameters ? _chunkO22SYZMCcjs.strictInputSchema.call(void 0, await _xsschema.toJsonSchema.call(void 0, tool.parameters)) : {
+            inputSchema: tool.parameters ? _chunkT2F3RYH2cjs.strictInputSchema.call(void 0, 
+              tool.parameters["~standard"].vendor === "zod" && "_zod" in tool.parameters ? _chunkT2F3RYH2cjs.zodInputSchema.call(void 0, tool.parameters, "draft-7") : await _xsschema.toJsonSchema.call(void 0, tool.parameters)
+            ) : {
               additionalProperties: false,
               properties: {},
               type: "object"
             },
             name: tool.name,
             ...tool.outputSchema && {
-              outputSchema: await _xsschema.toJsonSchema.call(void 0, 
-                tool.outputSchema
+              outputSchema: _chunkT2F3RYH2cjs.objectRootSchema.call(void 0, 
+                await _xsschema.toJsonSchema.call(void 0, tool.outputSchema)
               )
             },
             // Pass through _meta for MCP ext-apps UI support (issue #229)
@@ -1585,7 +1611,7 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
           }
           args = parsed.value;
         }
-        const progressToken = _optionalChain([request, 'access', _47 => _47.params, 'optionalAccess', _48 => _48._meta, 'optionalAccess', _49 => _49.progressToken]);
+        const progressToken = _optionalChain([request, 'access', _52 => _52.params, 'optionalAccess', _53 => _53._meta, 'optionalAccess', _54 => _54.progressToken]);
         let result;
         try {
           const reportProgress = async (progress) => {
@@ -1650,10 +1676,10 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
               client: {
                 version: this.#server.getClientVersion()
               },
-              elicit: (params, options) => this.#server.elicitInput(params, options),
+              elicit: this.#createElicit(extra.requestId),
               log,
               reportProgress,
-              requestId: typeof _optionalChain([request, 'access', _50 => _50.params, 'optionalAccess', _51 => _51._meta, 'optionalAccess', _52 => _52.requestId]) === "string" ? request.params._meta.requestId : void 0,
+              requestId: typeof _optionalChain([request, 'access', _55 => _55.params, 'optionalAccess', _56 => _56._meta, 'optionalAccess', _57 => _57.requestId]) === "string" ? request.params._meta.requestId : void 0,
               session: this.#auth,
               sessionId: this.sessionId,
               signal,
@@ -1722,10 +1748,22 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
           }
         } catch (error) {
           if (error instanceof UserError) {
+            let structuredContent = error.extras;
+            if (structuredContent && tool.outputSchema) {
+              try {
+                structuredContent = await this.#validateStructuredContent(
+                  tool,
+                  structuredContent,
+                  request.params.name
+                );
+              } catch (e5) {
+                structuredContent = void 0;
+              }
+            }
             return {
               content: [{ text: error.message, type: "text" }],
               isError: true,
-              ...error.extras ? { structuredContent: error.extras } : {}
+              ...structuredContent ? { structuredContent } : {}
             };
           }
           const errorMessage = error instanceof Error ? error.message : String(error);
@@ -1795,14 +1833,14 @@ function normalizePath(path) {
   return path.startsWith("/") ? path : `/${path}`;
 }
 function parseBasicAuthHeader(authHeader) {
-  const basicMatch = _optionalChain([authHeader, 'optionalAccess', _53 => _53.match, 'call', _54 => _54(/^Basic\s+(.+)$/)]);
+  const basicMatch = _optionalChain([authHeader, 'optionalAccess', _58 => _58.match, 'call', _59 => _59(/^Basic\s+(.+)$/)]);
   if (!basicMatch) return null;
   try {
     const credentials = Buffer.from(basicMatch[1], "base64").toString("utf-8");
     const credMatch = credentials.match(/^([^:]+):(.*)$/);
     if (!credMatch) return null;
     return { clientId: credMatch[1], clientSecret: credMatch[2] };
-  } catch (e5) {
+  } catch (e6) {
     return null;
   }
 }
@@ -1839,7 +1877,7 @@ function protectedResourceMetadataUrl(resource) {
   let url;
   try {
     url = new URL(resource);
-  } catch (e6) {
+  } catch (e7) {
     return `${resource}/.well-known/oauth-protected-resource`;
   }
   const path = url.pathname === "/" ? "" : url.pathname;
@@ -1941,7 +1979,9 @@ var FastMCP = class extends FastMCPEventEmitter {
    * Adds a resource to the server.
    */
   addResource(resource) {
-    this.#resources = this.#resources.filter((r) => r.name !== resource.name);
+    this.#resources = this.#resources.filter(
+      (r) => r.name !== resource.name && r.uri !== resource.uri
+    );
     this.#resources.push(resource);
     if (this.#serverState === "running" /* Running */) {
       this.#resourcesListChanged(this.#resources);
@@ -1951,13 +1991,12 @@ var FastMCP = class extends FastMCPEventEmitter {
    * Adds resources to the server.
    */
   addResources(resources) {
-    const newResourceNames = new Set(
-      resources.map((resource) => resource.name)
-    );
-    this.#resources = this.#resources.filter(
-      (r) => !newResourceNames.has(r.name)
-    );
-    this.#resources.push(...resources);
+    for (const resource of resources) {
+      this.#resources = this.#resources.filter(
+        (r) => r.name !== resource.name && r.uri !== resource.uri
+      );
+      this.#resources.push(resource);
+    }
     if (this.#serverState === "running" /* Running */) {
       this.#resourcesListChanged(this.#resources);
     }
@@ -2005,9 +2044,12 @@ var FastMCP = class extends FastMCPEventEmitter {
    */
   addTools(tools) {
     tools.forEach(assertToolSchemas);
-    const newToolNames = new Set(tools.map((tool) => tool.name));
-    this.#tools = this.#tools.filter((t) => !newToolNames.has(t.name));
-    this.#tools.push(...tools);
+    const toolsByName = new Map(this.#tools.map((tool) => [tool.name, tool]));
+    for (const tool of tools) {
+      toolsByName.delete(tool.name);
+      toolsByName.set(tool.name, tool);
+    }
+    this.#tools = Array.from(toolsByName.values());
     if (this.#serverState === "running" /* Running */) {
       this.#toolsListChanged(this.#tools);
     }
@@ -2309,6 +2351,9 @@ var FastMCP = class extends FastMCPEventEmitter {
         this.#serverState = "running" /* Running */;
       }
     } else if (config.transportType === "httpStream") {
+      if (this.#httpStreamServer) {
+        throw new Error("HTTP server is already running");
+      }
       const httpConfig = config.httpStream;
       const protocol = httpConfig.sslCert || httpConfig.sslKey ? "https" : "http";
       const streamEndpoint = joinPaths(
@@ -2330,7 +2375,12 @@ var FastMCP = class extends FastMCPEventEmitter {
               auth = this.#requireAuthenticated(await authenticate(request));
             }
             const sessionId = Array.isArray(request.headers["mcp-session-id"]) ? request.headers["mcp-session-id"][0] : request.headers["mcp-session-id"];
-            return this.#createSession(auth, sessionId, true);
+            return this.#createSession(
+              auth,
+              sessionId,
+              true,
+              httpConfig.enableJsonResponse
+            );
           },
           enableJsonResponse: httpConfig.enableJsonResponse,
           eventStore: httpConfig.eventStore,
@@ -2372,7 +2422,12 @@ var FastMCP = class extends FastMCPEventEmitter {
               auth = this.#requireAuthenticated(await authenticate(request));
             }
             const sessionId = Array.isArray(request.headers["mcp-session-id"]) ? request.headers["mcp-session-id"][0] : request.headers["mcp-session-id"];
-            return this.#createSession(auth, sessionId);
+            return this.#createSession(
+              auth,
+              sessionId,
+              false,
+              httpConfig.enableJsonResponse
+            );
           },
           enableJsonResponse: httpConfig.enableJsonResponse,
           eventStore: httpConfig.eventStore,
@@ -2428,6 +2483,7 @@ var FastMCP = class extends FastMCPEventEmitter {
     );
     if (this.#httpStreamServer) {
       await this.#httpStreamServer.close();
+      this.#httpStreamServer = null;
     }
     this.#serverState = "stopped" /* Stopped */;
   }
@@ -2441,9 +2497,9 @@ var FastMCP = class extends FastMCPEventEmitter {
     const originalOnClose = transport.onclose;
     transport.onclose = () => {
       closed = true;
-      _optionalChain([onClose, 'optionalCall', _55 => _55()]);
+      _optionalChain([onClose, 'optionalCall', _60 => _60()]);
       this.#removeSession(session);
-      _optionalChain([originalOnClose, 'optionalCall', _56 => _56()]);
+      _optionalChain([originalOnClose, 'optionalCall', _61 => _61()]);
     };
     await session.connect(transport);
     if (closed) {
@@ -2461,7 +2517,7 @@ var FastMCP = class extends FastMCPEventEmitter {
    * Creates a new FastMCPSession instance with the current configuration.
    * Used both for regular sessions and stateless requests.
    */
-  #createSession(auth, sessionId, stateless = false) {
+  #createSession(auth, sessionId, stateless = false, enableJsonResponse) {
     if (auth && typeof auth === "object" && "authenticated" in auth && !auth.authenticated) {
       const errorMessage = "error" in auth && typeof auth.error === "string" ? auth.error : "Authentication failed";
       throw this.#createUnauthorizedResponse(errorMessage);
@@ -2470,6 +2526,7 @@ var FastMCP = class extends FastMCPEventEmitter {
     return new FastMCPSession({
       auth,
       authRequired,
+      enableJsonResponse,
       hasTools: this.#tools.length > 0,
       icons: this.#options.icons,
       instructions: this.#options.instructions,
@@ -2507,7 +2564,7 @@ var FastMCP = class extends FastMCPEventEmitter {
    */
   #createUnauthorizedResponse(message) {
     const oauth = this.#options.oauth;
-    const resource = _optionalChain([oauth, 'optionalAccess', _57 => _57.enabled]) ? _optionalChain([oauth, 'access', _58 => _58.protectedResource, 'optionalAccess', _59 => _59.resource]) : void 0;
+    const resource = _optionalChain([oauth, 'optionalAccess', _62 => _62.enabled]) ? _optionalChain([oauth, 'access', _63 => _63.protectedResource, 'optionalAccess', _64 => _64.resource]) : void 0;
     const wwwAuthenticateParts = [
       'error="invalid_token"',
       `error_description="${message.replace(/"/g, '\\"')}"`
@@ -2646,7 +2703,7 @@ var FastMCP = class extends FastMCPEventEmitter {
       }
     }
     const oauthConfig = this.#options.oauth;
-    if (_optionalChain([oauthConfig, 'optionalAccess', _60 => _60.enabled]) && req.method === "GET") {
+    if (_optionalChain([oauthConfig, 'optionalAccess', _65 => _65.enabled]) && req.method === "GET") {
       const url2 = new URL(req.url || "", `http://${host}`);
       const authorizationServerMetadataPath = joinPaths(
         "",
@@ -2680,8 +2737,8 @@ var FastMCP = class extends FastMCPEventEmitter {
         }
       }
     }
-    const oauthProxy = _optionalChain([oauthConfig, 'optionalAccess', _61 => _61.proxy]);
-    if (oauthProxy && _optionalChain([oauthConfig, 'optionalAccess', _62 => _62.enabled])) {
+    const oauthProxy = _optionalChain([oauthConfig, 'optionalAccess', _66 => _66.proxy]);
+    if (oauthProxy && _optionalChain([oauthConfig, 'optionalAccess', _67 => _67.enabled])) {
       const url2 = new URL(req.url || "", `http://${host}`);
       const oauthPath = basePathRelativePath;
       try {
@@ -2734,7 +2791,7 @@ var FastMCP = class extends FastMCPEventEmitter {
                 const statusCode = error.statusCode || 400;
                 res.writeHead(statusCode, OAUTH_CREDENTIAL_RESPONSE_HEADERS).end(
                   JSON.stringify(
-                    _optionalChain([error, 'access', _63 => _63.toJSON, 'optionalCall', _64 => _64()]) || {
+                    _optionalChain([error, 'access', _68 => _68.toJSON, 'optionalCall', _69 => _69()]) || {
                       error: "invalid_request"
                     }
                   )
@@ -2761,7 +2818,7 @@ var FastMCP = class extends FastMCPEventEmitter {
           } catch (error) {
             res.writeHead(400, { "Content-Type": "application/json" }).end(
               JSON.stringify(
-                _optionalChain([error, 'access', _65 => _65.toJSON, 'optionalCall', _66 => _66()]) || {
+                _optionalChain([error, 'access', _70 => _70.toJSON, 'optionalCall', _71 => _71()]) || {
                   error: "invalid_request"
                 }
               )
@@ -2783,7 +2840,7 @@ var FastMCP = class extends FastMCPEventEmitter {
           } catch (error) {
             res.writeHead(400, { "Content-Type": "application/json" }).end(
               JSON.stringify(
-                _optionalChain([error, 'access', _67 => _67.toJSON, 'optionalCall', _68 => _68()]) || {
+                _optionalChain([error, 'access', _72 => _72.toJSON, 'optionalCall', _73 => _73()]) || {
                   error: "server_error"
                 }
               )
@@ -2852,7 +2909,7 @@ var FastMCP = class extends FastMCPEventEmitter {
               } catch (error) {
                 res.writeHead(400, { "Content-Type": "application/json" }).end(
                   JSON.stringify(
-                    _optionalChain([error, 'access', _69 => _69.toJSON, 'optionalCall', _70 => _70()]) || {
+                    _optionalChain([error, 'access', _74 => _74.toJSON, 'optionalCall', _75 => _75()]) || {
                       error: "server_error"
                     }
                   )
@@ -2910,8 +2967,8 @@ var FastMCP = class extends FastMCPEventEmitter {
                 const basicAuth = parseBasicAuthHeader(
                   req.headers.authorization
                 );
-                const clientId = _optionalChain([basicAuth, 'optionalAccess', _71 => _71.clientId]) || params.get("client_id") || "";
-                const clientSecret = _nullishCoalesce(_nullishCoalesce(_optionalChain([basicAuth, 'optionalAccess', _72 => _72.clientSecret]), () => ( params.get("client_secret"))), () => ( void 0));
+                const clientId = _optionalChain([basicAuth, 'optionalAccess', _76 => _76.clientId]) || params.get("client_id") || "";
+                const clientSecret = _nullishCoalesce(_nullishCoalesce(_optionalChain([basicAuth, 'optionalAccess', _77 => _77.clientSecret]), () => ( params.get("client_secret"))), () => ( void 0));
                 let response;
                 if (grantType === "authorization_code") {
                   response = await oauthProxy.exchangeAuthorizationCode({
@@ -2941,7 +2998,7 @@ var FastMCP = class extends FastMCPEventEmitter {
                 const statusCode = error.statusCode || 400;
                 res.writeHead(statusCode, OAUTH_CREDENTIAL_RESPONSE_HEADERS).end(
                   JSON.stringify(
-                    _optionalChain([error, 'access', _73 => _73.toJSON, 'optionalCall', _74 => _74()]) || {
+                    _optionalChain([error, 'access', _78 => _78.toJSON, 'optionalCall', _79 => _79()]) || {
                       error: "invalid_request"
                     }
                   )
@@ -2967,7 +3024,7 @@ var FastMCP = class extends FastMCPEventEmitter {
    * regardless (RFC 7235), so no config is needed just to get the header.
    */
   #httpStreamOAuthConfig() {
-    const resource = _optionalChain([this, 'access', _75 => _75.#options, 'access', _76 => _76.oauth, 'optionalAccess', _77 => _77.enabled]) ? _optionalChain([this, 'access', _78 => _78.#options, 'access', _79 => _79.oauth, 'access', _80 => _80.protectedResource, 'optionalAccess', _81 => _81.resource]) : void 0;
+    const resource = _optionalChain([this, 'access', _80 => _80.#options, 'access', _81 => _81.oauth, 'optionalAccess', _82 => _82.enabled]) ? _optionalChain([this, 'access', _83 => _83.#options, 'access', _84 => _84.oauth, 'access', _85 => _85.protectedResource, 'optionalAccess', _86 => _86.resource]) : void 0;
     if (!resource) {
       return {};
     }
@@ -3075,24 +3132,24 @@ var FastMCP = class extends FastMCPEventEmitter {
     const envBasePath = process.env.FASTMCP_BASE_PATH;
     const envStateless = process.env.FASTMCP_STATELESS;
     const envHost = process.env.FASTMCP_HOST;
-    const transportType = _optionalChain([overrides, 'optionalAccess', _82 => _82.transportType]) || parseTransportSetting(transportArg, "--transport") || parseTransportSetting(envTransport, "FASTMCP_TRANSPORT") || "stdio";
+    const transportType = _optionalChain([overrides, 'optionalAccess', _87 => _87.transportType]) || parseTransportSetting(transportArg, "--transport") || parseTransportSetting(envTransport, "FASTMCP_TRANSPORT") || "stdio";
     if (transportType === "httpStream") {
       const port = parseInt(
-        _optionalChain([overrides, 'optionalAccess', _83 => _83.httpStream, 'optionalAccess', _84 => _84.port, 'optionalAccess', _85 => _85.toString, 'call', _86 => _86()]) || portArg || envPort || "8080"
+        _optionalChain([overrides, 'optionalAccess', _88 => _88.httpStream, 'optionalAccess', _89 => _89.port, 'optionalAccess', _90 => _90.toString, 'call', _91 => _91()]) || portArg || envPort || "8080"
       );
-      const host = _optionalChain([overrides, 'optionalAccess', _87 => _87.httpStream, 'optionalAccess', _88 => _88.host]) || hostArg || envHost || "localhost";
-      const endpoint = _optionalChain([overrides, 'optionalAccess', _89 => _89.httpStream, 'optionalAccess', _90 => _90.endpoint]) || endpointArg || envEndpoint || "/mcp";
+      const host = _optionalChain([overrides, 'optionalAccess', _92 => _92.httpStream, 'optionalAccess', _93 => _93.host]) || hostArg || envHost || "localhost";
+      const endpoint = _optionalChain([overrides, 'optionalAccess', _94 => _94.httpStream, 'optionalAccess', _95 => _95.endpoint]) || endpointArg || envEndpoint || "/mcp";
       const basePath = normalizeBasePath(
-        _optionalChain([overrides, 'optionalAccess', _91 => _91.httpStream, 'optionalAccess', _92 => _92.basePath]) || basePathArg || envBasePath
+        _optionalChain([overrides, 'optionalAccess', _96 => _96.httpStream, 'optionalAccess', _97 => _97.basePath]) || basePathArg || envBasePath
       );
-      const enableJsonResponse = _optionalChain([overrides, 'optionalAccess', _93 => _93.httpStream, 'optionalAccess', _94 => _94.enableJsonResponse]) || false;
-      const stateless = _nullishCoalesce(_nullishCoalesce(_nullishCoalesce(_optionalChain([overrides, 'optionalAccess', _95 => _95.httpStream, 'optionalAccess', _96 => _96.stateless]), () => ( // A bare `--stateless` means `--stateless true`.
+      const enableJsonResponse = _optionalChain([overrides, 'optionalAccess', _98 => _98.httpStream, 'optionalAccess', _99 => _99.enableJsonResponse]) || false;
+      const stateless = _nullishCoalesce(_nullishCoalesce(_nullishCoalesce(_optionalChain([overrides, 'optionalAccess', _100 => _100.httpStream, 'optionalAccess', _101 => _101.stateless]), () => ( // A bare `--stateless` means `--stateless true`.
       (statelessArg === "" ? true : parseBooleanSetting(statelessArg, "--stateless")))), () => ( parseBooleanSetting(envStateless, "FASTMCP_STATELESS"))), () => ( false));
-      const cors = _optionalChain([overrides, 'optionalAccess', _97 => _97.httpStream, 'optionalAccess', _98 => _98.cors]);
-      const eventStore = _optionalChain([overrides, 'optionalAccess', _99 => _99.httpStream, 'optionalAccess', _100 => _100.eventStore]);
-      const sslCa = _optionalChain([overrides, 'optionalAccess', _101 => _101.httpStream, 'optionalAccess', _102 => _102.sslCa]);
-      const sslCert = _optionalChain([overrides, 'optionalAccess', _103 => _103.httpStream, 'optionalAccess', _104 => _104.sslCert]);
-      const sslKey = _optionalChain([overrides, 'optionalAccess', _105 => _105.httpStream, 'optionalAccess', _106 => _106.sslKey]);
+      const cors = _optionalChain([overrides, 'optionalAccess', _102 => _102.httpStream, 'optionalAccess', _103 => _103.cors]);
+      const eventStore = _optionalChain([overrides, 'optionalAccess', _104 => _104.httpStream, 'optionalAccess', _105 => _105.eventStore]);
+      const sslCa = _optionalChain([overrides, 'optionalAccess', _106 => _106.httpStream, 'optionalAccess', _107 => _107.sslCa]);
+      const sslCert = _optionalChain([overrides, 'optionalAccess', _108 => _108.httpStream, 'optionalAccess', _109 => _109.sslCert]);
+      const sslKey = _optionalChain([overrides, 'optionalAccess', _110 => _110.httpStream, 'optionalAccess', _111 => _111.sslKey]);
       return {
         httpStream: {
           basePath,
@@ -3184,7 +3241,7 @@ var FastMCP = class extends FastMCPEventEmitter {
    */
   #useEndpointAsResource(endpoint) {
     const oauth = this.#options.oauth;
-    if (this.#providerResourceBase === void 0 || !_optionalChain([oauth, 'optionalAccess', _107 => _107.protectedResource]))
+    if (this.#providerResourceBase === void 0 || !_optionalChain([oauth, 'optionalAccess', _112 => _112.protectedResource]))
       return;
     this.#options = {
       ...this.#options,
@@ -3213,4 +3270,4 @@ var FastMCP = class extends FastMCPEventEmitter {
 
 
 exports.DiscoveryDocumentCache = DiscoveryDocumentCache; exports.jsonSchemaAdapter = jsonSchemaAdapter; exports.MEDIA_FETCH_TIMEOUT_MS = MEDIA_FETCH_TIMEOUT_MS; exports.imageContent = imageContent; exports.audioContent = audioContent; exports.FastMCPError = FastMCPError; exports.SessionError = SessionError; exports.UnexpectedStateError = UnexpectedStateError; exports.UserError = UserError; exports.ServerState = ServerState; exports.FastMCPSession = FastMCPSession; exports.FastMCP = FastMCP;
-//# sourceMappingURL=chunk-2PXF6JQB.cjs.map
+//# sourceMappingURL=chunk-XEP3OP7Q.cjs.map