fastmcp 4.23.8 → 4.23.9

package/dist/chunk-OKKFL2M4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/strictInputSchema.ts"],"sourcesContent":["import type { JsonSchema } from \"xsschema\";\n\nimport { z } from \"zod\";\n\n/**\n * Gives a tool's input or output schema the `type: \"object\"` MCP requires at\n * its root, unless it states a type of its own. A union of objects converts to\n * a bare `anyOf` or `oneOf`, and the SDK client rejects a whole `tools/list`\n * that contains one, so a single such tool would hide every other. Arguments\n * and structured content are always objects, so this only rules out values a\n * tool can never be sent or return.\n */\nexport function objectRootSchema(schema: JsonSchema): JsonSchema {\n  return schema.type === undefined ? { ...schema, type: \"object\" } : schema;\n}\n\n/**\n * Closes tool input objects to undeclared keys, like xsschema's\n * `strictJsonSchema`, except for objects made only of additional properties.\n * Closing one of those advertises an object that accepts nothing but `{}`,\n * while the tool's own validation still takes any key, so it keeps whatever\n * `additionalProperties` it declared — or none:\n *\n * - a dictionary, whose `additionalProperties` is a schema (`z.record()`, an\n *   OpenAPI map), keeps its value schema;\n * - a free-form object, which declares `additionalProperties: true`, or, as an\n *   argument, is a bare `{ type: \"object\" }` (OpenAPI's usual spelling), stays\n *   open.\n *\n * A plain object that declares an empty `properties`, or a bare one at the\n * top of the input, is still closed: that is how a schema says \"no keys\" —\n * `z.object({})`, or a tool without arguments. Root schemas with `allOf`,\n * `anyOf`, `oneOf`, or `$ref` are left as declared, even with their own\n * `properties`: `additionalProperties` only sees adjacent properties, so\n * adding it would reject keys declared by a branch or reference target.\n *\n * The root is given an object type (see `objectRootSchema`).\n *\n * Shared by both runtimes, so a tool's advertised input schema does not depend\n * on whether it is served by `FastMCP` or `EdgeFastMCP`.\n */\nexport function strictInputSchema(\n  schema: JsonSchema,\n  nested = false,\n): JsonSchema {\n  const { $ref, additionalProperties, allOf, anyOf, oneOf, properties } =\n    schema;\n\n  if (!nested && ($ref || allOf || anyOf || oneOf)) {\n    return objectRootSchema(schema);\n  }\n\n  const keepsAdditionalProperties =\n    Object.keys(properties ?? {}).length === 0 &&\n    (typeof additionalProperties === \"object\" ||\n      additionalProperties === true ||\n      (nested && additionalProperties === undefined && !properties));\n\n  const strict = {\n    ...schema,\n    ...(keepsAdditionalProperties ? {} : { additionalProperties: false }),\n    ...(properties && {\n      properties: Object.fromEntries(\n        Object.entries(properties).map(([key, value]) => [\n          key,\n          typeof value === \"object\" && value.type === \"object\"\n            ? strictInputSchema(value, true)\n            : value,\n        ]),\n      ),\n    }),\n  };\n\n  return nested ? strict : objectRootSchema(strict);\n}\n\n/**\n * Converts Zod 4 tool parameters by what a call may send (`io: \"input\"`), so a\n * transformed field advertises the type it parses and a defaulted one is\n * optional. Input-side conversion leaves a plain `z.object()` open, since it\n * strips undeclared keys rather than rejecting them; this closes it, as\n * output-side conversion did, at any depth — including inside arrays, unions\n * and record values, which `strictInputSchema` does not reach. Explicit\n * catchalls (`z.looseObject()`, `.catchall()`) keep what they declare.\n */\nexport function zodInputSchema(\n  schema: z.ZodType,\n  target?: \"draft-7\",\n): JsonSchema {\n  return z.toJSONSchema(schema, {\n    io: \"input\",\n    override: ({ jsonSchema, zodSchema }) => {\n      const def = zodSchema._zod.def;\n      if (\n        def.type === \"object\" &&\n        !def.catchall &&\n        jsonSchema.additionalProperties === undefined\n      ) {\n        jsonSchema.additionalProperties = false;\n      }\n    },\n    target,\n  }) as JsonSchema;\n}\n"],"mappings":";AAEA,SAAS,SAAS;AAUX,SAAS,iBAAiB,QAAgC;AAC/D,SAAO,OAAO,SAAS,SAAY,EAAE,GAAG,QAAQ,MAAM,SAAS,IAAI;AACrE;AA2BO,SAAS,kBACd,QACA,SAAS,OACG;AACZ,QAAM,EAAE,MAAM,sBAAsB,OAAO,OAAO,OAAO,WAAW,IAClE;AAEF,MAAI,CAAC,WAAW,QAAQ,SAAS,SAAS,QAAQ;AAChD,WAAO,iBAAiB,MAAM;AAAA,EAChC;AAEA,QAAM,4BACJ,OAAO,KAAK,cAAc,CAAC,CAAC,EAAE,WAAW,MACxC,OAAO,yBAAyB,YAC/B,yBAAyB,QACxB,UAAU,yBAAyB,UAAa,CAAC;AAEtD,QAAM,SAAS;AAAA,IACb,GAAG;AAAA,IACH,GAAI,4BAA4B,CAAC,IAAI,EAAE,sBAAsB,MAAM;AAAA,IACnE,GAAI,cAAc;AAAA,MAChB,YAAY,OAAO;AAAA,QACjB,OAAO,QAAQ,UAAU,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM;AAAA,UAC/C;AAAA,UACA,OAAO,UAAU,YAAY,MAAM,SAAS,WACxC,kBAAkB,OAAO,IAAI,IAC7B;AAAA,QACN,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,SAAO,SAAS,SAAS,iBAAiB,MAAM;AAClD;AAWO,SAAS,eACd,QACA,QACY;AACZ,SAAO,EAAE,aAAa,QAAQ;AAAA,IAC5B,IAAI;AAAA,IACJ,UAAU,CAAC,EAAE,YAAY,UAAU,MAAM;AACvC,YAAM,MAAM,UAAU,KAAK;AAC3B,UACE,IAAI,SAAS,YACb,CAAC,IAAI,YACL,WAAW,yBAAyB,QACpC;AACA,mBAAW,uBAAuB;AAAA,MACpC;AAAA,IACF;AAAA,IACA;AAAA,EACF,CAAC;AACH;","names":[]}

package/dist/{chunk-XEP3OP7Q.cjs → chunk-PV5VLW7R.cjs}

@@ -1,11 +1,11 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } async function _asyncNullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return await rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
-var _chunkAJRXMUZRcjs = require('./chunk-AJRXMUZR.cjs');
+var _chunk4OWHPJELcjs = require('./chunk-4OWHPJEL.cjs');
 
 
 
 
-var _chunkT2F3RYH2cjs = require('./chunk-T2F3RYH2.cjs');
+var _chunk6TDYSPLCcjs = require('./chunk-6TDYSPLC.cjs');
 
 // src/FastMCP.ts
 var _indexjs = require('@modelcontextprotocol/sdk/server/index.js');
@@ -141,7 +141,7 @@ var DiscoveryDocumentCache = class {
       throw error;
     }
     if (!res.ok) {
-      await _chunkAJRXMUZRcjs.cancelResponseBody.call(void 0, res);
+      await _chunk4OWHPJELcjs.cancelResponseBody.call(void 0, res);
       throw new Error(
         `Failed to fetch discovery document from ${url}: ${res.status} ${res.statusText}`
       );
@@ -189,9 +189,16 @@ function jsonSchemaAdapter(schema) {
 async function compileSchema(schema) {
   const dialect = _optionalChain([schema, 'access', _2 => _2.$schema, 'optionalAccess', _3 => _3.replace, 'call', _4 => _4(/^http:\/\//, "https://"), 'access', _5 => _5.replace, 'call', _6 => _6(/#$/, "")]);
   const isDraft2020 = dialect === "https://json-schema.org/draft/2020-12/schema";
+  const isDraft2019 = dialect === "https://json-schema.org/draft/2019-09/schema";
   let ajvModule;
   try {
-    ajvModule = isDraft2020 ? await Promise.resolve().then(() => _interopRequireWildcard(require("ajv/dist/2020.js"))) : await Promise.resolve().then(() => _interopRequireWildcard(require("ajv")));
+    if (isDraft2020) {
+      ajvModule = await Promise.resolve().then(() => _interopRequireWildcard(require("ajv/dist/2020.js")));
+    } else if (isDraft2019) {
+      ajvModule = await Promise.resolve().then(() => _interopRequireWildcard(require("ajv/dist/2019.js")));
+    } else {
+      ajvModule = await Promise.resolve().then(() => _interopRequireWildcard(require("ajv")));
+    }
   } catch (e2) {
     throw new Error(
       'The "ajv" package is required to validate JSON Schema tool parameters. Install it with: npm install ajv'
@@ -207,7 +214,9 @@ async function compileSchema(schema) {
     addFormats(ajv);
   } catch (e3) {
   }
-  return ajv.compile(isDraft2020 ? { ...schema, $schema: dialect } : schema);
+  return ajv.compile(
+    isDraft2020 || isDraft2019 ? { ...schema, $schema: dialect } : schema
+  );
 }
 function toIssue(error) {
   const path = error.instancePath.split("/").slice(1).map((segment) => segment.replaceAll("~1", "/").replaceAll("~0", "~")).map((segment) => {
@@ -249,7 +258,7 @@ var imageContent = async (input) => {
           signal: AbortSignal.timeout(timeoutMs)
         });
         if (!response.ok) {
-          await _chunkAJRXMUZRcjs.cancelResponseBody.call(void 0, response);
+          await _chunk4OWHPJELcjs.cancelResponseBody.call(void 0, response);
           throw new Error(
             `Server responded with status: ${response.status} - ${response.statusText}`
           );
@@ -331,7 +340,7 @@ var audioContent = async (input) => {
           signal: AbortSignal.timeout(timeoutMs)
         });
         if (!response.ok) {
-          await _chunkAJRXMUZRcjs.cancelResponseBody.call(void 0, response);
+          await _chunk4OWHPJELcjs.cancelResponseBody.call(void 0, response);
           throw new Error(
             `Server responded with status: ${response.status} - ${response.statusText}`
           );
@@ -490,6 +499,28 @@ var ServerState = /* @__PURE__ */ ((ServerState2) => {
 })(ServerState || {});
 var FastMCPSessionEventEmitter = class extends FastMCPSessionEventEmitterBase {
 };
+var lazyRequestBody = (req) => {
+  let iterator;
+  return new ReadableStream(
+    {
+      async cancel(reason) {
+        await _optionalChain([iterator, 'optionalAccess', _23 => _23.return, 'optionalCall', _24 => _24(reason)]);
+      },
+      async pull(controller) {
+        iterator ??= req[Symbol.asyncIterator]();
+        const { done, value } = await iterator.next();
+        if (done) {
+          controller.close();
+          return;
+        }
+        controller.enqueue(
+          typeof value === "string" ? Buffer.from(value) : new Uint8Array(value)
+        );
+      }
+    },
+    { highWaterMark: 0 }
+  );
+};
 var FastMCPSession = class extends FastMCPSessionEventEmitter {
   get clientCapabilities() {
     return _nullishCoalesce(this.#clientCapabilities, () => ( null));
@@ -522,7 +553,7 @@ var FastMCPSession = class extends FastMCPSessionEventEmitter {
    */
   get sessionId() {
     if (this.#sessionId === void 0) {
-      const transportSessionId = _optionalChain([this, 'access', _23 => _23.#server, 'access', _24 => _24.transport, 'optionalAccess', _25 => _25.sessionId]);
+      const transportSessionId = _optionalChain([this, 'access', _25 => _25.#server, 'access', _26 => _26.transport, 'optionalAccess', _27 => _27.sessionId]);
       if (typeof transportSessionId === "string") {
         this.#sessionId = transportSessionId;
       }
@@ -913,7 +944,7 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
       },
       elicit: this.#createElicit(requestId),
       log: this.#createLog(sendNotification),
-      requestId: typeof _optionalChain([meta, 'optionalAccess', _26 => _26.requestId]) === "string" ? meta.requestId : void 0,
+      requestId: typeof _optionalChain([meta, 'optionalAccess', _28 => _28.requestId]) === "string" ? meta.requestId : void 0,
       session: this.#auth,
       sessionId: this.sessionId
     };
@@ -935,8 +966,12 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
     };
   }
   #formatSchemaIssues(issues) {
-    return _optionalChain([this, 'access', _27 => _27.#utils, 'optionalAccess', _28 => _28.formatInvalidParamsErrorMessage]) ? this.#utils.formatInvalidParamsErrorMessage(issues) : issues.map((issue) => {
-      const path = _optionalChain([issue, 'access', _29 => _29.path, 'optionalAccess', _30 => _30.join, 'call', _31 => _31(".")]) || "root";
+    return _optionalChain([this, 'access', _29 => _29.#utils, 'optionalAccess', _30 => _30.formatInvalidParamsErrorMessage]) ? this.#utils.formatInvalidParamsErrorMessage(issues) : issues.map((issue) => {
+      const path = _optionalChain([issue, 'access', _31 => _31.path, 'optionalAccess', _32 => _32.map, 'call', _33 => _33(
+        (segment) => String(
+          typeof segment === "object" && segment !== null ? segment.key : segment
+        )
+      ), 'access', _34 => _34.join, 'call', _35 => _35(".")]) || "root";
       return `${path}: ${issue.message}`;
     }).join(", ");
   }
@@ -958,7 +993,7 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
    * is bounded and retried, and the result is announced with `rootsChanged`.
    */
   async #loadRoots(streamableHttp) {
-    if (_optionalChain([this, 'access', _32 => _32.#rootsConfig, 'optionalAccess', _33 => _33.enabled]) === false || !_optionalChain([this, 'access', _34 => _34.#clientCapabilities, 'optionalAccess', _35 => _35.roots, 'optionalAccess', _36 => _36.listChanged]) || typeof this.#server.listRoots !== "function") {
+    if (_optionalChain([this, 'access', _36 => _36.#rootsConfig, 'optionalAccess', _37 => _37.enabled]) === false || !_optionalChain([this, 'access', _38 => _38.#clientCapabilities, 'optionalAccess', _39 => _39.roots, 'optionalAccess', _40 => _40.listChanged]) || typeof this.#server.listRoots !== "function") {
       return;
     }
     const maxAttempts = streamableHttp ? 5 : 1;
@@ -968,7 +1003,7 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
           void 0,
           streamableHttp ? { timeout: 1e3 } : void 0
         );
-        this.#roots = _optionalChain([roots, 'optionalAccess', _37 => _37.roots]) || [];
+        this.#roots = _optionalChain([roots, 'optionalAccess', _41 => _41.roots]) || [];
         if (streamableHttp) {
           this.emit("rootsChanged", { roots: this.#roots });
         }
@@ -1106,7 +1141,7 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
    */
   #startStreamKeepalive(extra, toolName) {
     const config = this.#streamKeepaliveConfig;
-    if (!_optionalChain([config, 'optionalAccess', _38 => _38.enabled])) {
+    if (!_optionalChain([config, 'optionalAccess', _42 => _42.enabled]) || _optionalChain([extra, 'access', _43 => _43.signal, 'optionalAccess', _44 => _44.aborted])) {
       return () => {
       };
     }
@@ -1126,9 +1161,12 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
         );
       });
     }, intervalMs);
-    _optionalChain([timer, 'access', _39 => _39.unref, 'optionalCall', _40 => _40()]);
-    const stop = () => clearInterval(timer);
-    _optionalChain([extra, 'access', _41 => _41.signal, 'optionalAccess', _42 => _42.addEventListener, 'call', _43 => _43("abort", stop, { once: true })]);
+    _optionalChain([timer, 'access', _45 => _45.unref, 'optionalCall', _46 => _46()]);
+    const stop = () => {
+      clearInterval(timer);
+      _optionalChain([extra, 'access', _47 => _47.signal, 'optionalAccess', _48 => _48.removeEventListener, 'call', _49 => _49("abort", stop)]);
+    };
+    _optionalChain([extra, 'access', _50 => _50.signal, 'optionalAccess', _51 => _51.addEventListener, 'call', _52 => _52("abort", stop, { once: true })]);
     return stop;
   }
   async #validateStructuredContent(tool, value, toolName) {
@@ -1348,7 +1386,7 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
             _nullishCoalesce(args, () => ( {})),
             this.#auth,
             this.#createLoadContext(
-              _optionalChain([request, 'access', _44 => _44.params, 'optionalAccess', _45 => _45._meta]),
+              _optionalChain([request, 'access', _53 => _53.params, 'optionalAccess', _54 => _54._meta]),
               extra.sendNotification,
               extra.requestId
             )
@@ -1418,7 +1456,7 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
                 match,
                 this.#auth,
                 this.#createLoadContext(
-                  _optionalChain([request, 'access', _46 => _46.params, 'optionalAccess', _47 => _47._meta]),
+                  _optionalChain([request, 'access', _55 => _55.params, 'optionalAccess', _56 => _56._meta]),
                   extra.sendNotification,
                   extra.requestId
                 )
@@ -1448,7 +1486,7 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
             maybeArrayResult = await resource.load(
               this.#auth,
               this.#createLoadContext(
-                _optionalChain([request, 'access', _48 => _48.params, 'optionalAccess', _49 => _49._meta]),
+                _optionalChain([request, 'access', _57 => _57.params, 'optionalAccess', _58 => _58._meta]),
                 extra.sendNotification,
                 extra.requestId
               )
@@ -1514,7 +1552,7 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
     );
   }
   setupRootsHandlers() {
-    if (_optionalChain([this, 'access', _50 => _50.#rootsConfig, 'optionalAccess', _51 => _51.enabled]) === false) {
+    if (_optionalChain([this, 'access', _59 => _59.#rootsConfig, 'optionalAccess', _60 => _60.enabled]) === false) {
       this.#logger.debug(
         "[FastMCP debug] roots capability explicitly disabled via config"
       );
@@ -1565,8 +1603,8 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
           return {
             annotations: tool.annotations,
             description: tool.description,
-            inputSchema: tool.parameters ? _chunkT2F3RYH2cjs.strictInputSchema.call(void 0, 
-              tool.parameters["~standard"].vendor === "zod" && "_zod" in tool.parameters ? _chunkT2F3RYH2cjs.zodInputSchema.call(void 0, tool.parameters, "draft-7") : await _xsschema.toJsonSchema.call(void 0, tool.parameters)
+            inputSchema: tool.parameters ? _chunk6TDYSPLCcjs.strictInputSchema.call(void 0, 
+              tool.parameters["~standard"].vendor === "zod" && "_zod" in tool.parameters ? _chunk6TDYSPLCcjs.zodInputSchema.call(void 0, tool.parameters, "draft-7") : await _xsschema.toJsonSchema.call(void 0, tool.parameters)
             ) : {
               additionalProperties: false,
               properties: {},
@@ -1574,7 +1612,7 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
             },
             name: tool.name,
             ...tool.outputSchema && {
-              outputSchema: _chunkT2F3RYH2cjs.objectRootSchema.call(void 0, 
+              outputSchema: _chunk6TDYSPLCcjs.objectRootSchema.call(void 0, 
                 await _xsschema.toJsonSchema.call(void 0, tool.outputSchema)
               )
             },
@@ -1611,15 +1649,35 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
           }
           args = parsed.value;
         }
-        const progressToken = _optionalChain([request, 'access', _52 => _52.params, 'optionalAccess', _53 => _53._meta, 'optionalAccess', _54 => _54.progressToken]);
+        const progressToken = _optionalChain([request, 'access', _61 => _61.params, 'optionalAccess', _62 => _62._meta, 'optionalAccess', _63 => _63.progressToken]);
         let result;
+        const timeoutAbort = new AbortController();
+        const signal = AbortSignal.any([
+          timeoutAbort.signal,
+          this.#abortController.signal,
+          // Only ever aborted for an explicit `notifications/cancelled`; the
+          // session signal above is what covers a client that simply left.
+          ...extra.signal ? [extra.signal] : []
+        ]);
+        const sendNotification = async (notification) => {
+          if (signal.aborted) {
+            return;
+          }
+          try {
+            await extra.sendNotification(notification);
+          } catch (error) {
+            if (!signal.aborted) {
+              throw error;
+            }
+          }
+        };
         try {
           const reportProgress = async (progress) => {
             if (progressToken === void 0) {
               return;
             }
             try {
-              await extra.sendNotification({
+              await sendNotification({
                 method: "notifications/progress",
                 params: {
                   ...progress,
@@ -1636,11 +1694,11 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
               );
             }
           };
-          const log = this.#createLog(extra.sendNotification);
+          const log = this.#createLog(sendNotification);
           const streamContent = async (content) => {
             const contentArray = Array.isArray(content) ? content : [content];
             try {
-              await extra.sendNotification({
+              await sendNotification({
                 method: "notifications/tool/streamContent",
                 params: {
                   content: contentArray,
@@ -1663,14 +1721,6 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
               toolName: request.params.name
             });
           }
-          const timeoutAbort = new AbortController();
-          const signal = AbortSignal.any([
-            timeoutAbort.signal,
-            this.#abortController.signal,
-            // Only ever aborted for an explicit `notifications/cancelled`; the
-            // session signal above is what covers a client that simply left.
-            ...extra.signal ? [extra.signal] : []
-          ]);
           const executeToolPromise = Promise.resolve(
             tool.execute(args, {
               client: {
@@ -1679,7 +1729,7 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
               elicit: this.#createElicit(extra.requestId),
               log,
               reportProgress,
-              requestId: typeof _optionalChain([request, 'access', _55 => _55.params, 'optionalAccess', _56 => _56._meta, 'optionalAccess', _57 => _57.requestId]) === "string" ? request.params._meta.requestId : void 0,
+              requestId: typeof _optionalChain([request, 'access', _64 => _64.params, 'optionalAccess', _65 => _65._meta, 'optionalAccess', _66 => _66.requestId]) === "string" ? request.params._meta.requestId : void 0,
               session: this.#auth,
               sessionId: this.sessionId,
               signal,
@@ -1687,25 +1737,37 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
             })
           );
           const stopStreamKeepalive = this.#startStreamKeepalive(
-            extra,
+            { sendNotification, signal },
             request.params.name
           );
-          const maybeStringResult = await (tool.timeoutMs ? Promise.race([
-            executeToolPromise,
-            new Promise((_, reject) => {
-              const timeoutId = setTimeout(() => {
-                const timedOut = new UserError(
+          let timeoutId;
+          let stopWaitingForAbort = () => {
+          };
+          const aborted = new Promise((_, reject) => {
+            const onAbort = () => reject(signal.reason);
+            stopWaitingForAbort = () => signal.removeEventListener("abort", onAbort);
+            signal.addEventListener("abort", onAbort, { once: true });
+            if (signal.aborted) {
+              onAbort();
+            }
+          });
+          if (tool.timeoutMs && !signal.aborted) {
+            timeoutId = setTimeout(() => {
+              timeoutAbort.abort(
+                new UserError(
                   `Tool '${request.params.name}' timed out after ${tool.timeoutMs}ms. Consider increasing timeoutMs or optimizing the tool implementation.`
-                );
-                timeoutAbort.abort(timedOut);
-                reject(timedOut);
-              }, tool.timeoutMs);
-              executeToolPromise.then(
-                () => clearTimeout(timeoutId),
-                () => clearTimeout(timeoutId)
+                )
               );
-            })
-          ]) : executeToolPromise).finally(stopStreamKeepalive);
+            }, tool.timeoutMs);
+          }
+          const maybeStringResult = await Promise.race([
+            executeToolPromise,
+            aborted
+          ]).finally(() => {
+            clearTimeout(timeoutId);
+            stopWaitingForAbort();
+            stopStreamKeepalive();
+          });
           await _promises3.setTimeout.call(void 0, 1);
           if (maybeStringResult === void 0 || maybeStringResult === null) {
             result = ContentResultZodSchema.parse({
@@ -1746,6 +1808,11 @@ ${error instanceof Error ? error.stack : JSON.stringify(error)}`
           } else {
             result = ContentResultZodSchema.parse(maybeStringResult);
           }
+          if (tool.outputSchema && result.structuredContent === void 0 && !result.isError) {
+            throw new UserError(
+              `Tool '${request.params.name}' returned no structured content. Please return a value that matches the tool's outputSchema.`
+            );
+          }
         } catch (error) {
           if (error instanceof UserError) {
             let structuredContent = error.extras;
@@ -1833,7 +1900,7 @@ function normalizePath(path) {
   return path.startsWith("/") ? path : `/${path}`;
 }
 function parseBasicAuthHeader(authHeader) {
-  const basicMatch = _optionalChain([authHeader, 'optionalAccess', _58 => _58.match, 'call', _59 => _59(/^Basic\s+(.+)$/)]);
+  const basicMatch = _optionalChain([authHeader, 'optionalAccess', _67 => _67.match, 'call', _68 => _68(/^Basic\s+(.+)$/)]);
   if (!basicMatch) return null;
   try {
     const credentials = Buffer.from(basicMatch[1], "base64").toString("utf-8");
@@ -2017,13 +2084,12 @@ var FastMCP = class extends FastMCPEventEmitter {
    * Adds resource templates to the server.
    */
   addResourceTemplates(resources) {
-    const newResourceTemplateNames = new Set(
-      resources.map((resource) => resource.name)
-    );
-    this.#resourcesTemplates = this.#resourcesTemplates.filter(
-      (t) => !newResourceTemplateNames.has(t.name)
-    );
-    this.#resourcesTemplates.push(...resources);
+    for (const resource of resources) {
+      this.#resourcesTemplates = this.#resourcesTemplates.filter(
+        (template) => template.name !== resource.name
+      );
+      this.#resourcesTemplates.push(resource);
+    }
     if (this.#serverState === "running" /* Running */) {
       this.#resourceTemplatesListChanged(this.#resourcesTemplates);
     }
@@ -2280,6 +2346,13 @@ var FastMCP = class extends FastMCPEventEmitter {
   async start(options) {
     const config = this.#parseRuntimeConfig(options);
     if (config.transportType === "stdio") {
+      const logger = _nullishCoalesce(this.#options.logger, () => ( {
+        debug: (...args) => console.error(...args),
+        error: (...args) => console.error(...args),
+        info: (...args) => console.error(...args),
+        log: (...args) => console.error(...args),
+        warn: (...args) => console.warn(...args)
+      }));
       const transport = new (0, _stdiojs.StdioServerTransport)();
       let auth;
       const authRequired = this.#authenticate !== void 0;
@@ -2306,7 +2379,7 @@ var FastMCP = class extends FastMCPEventEmitter {
         hasTools: this.#tools.length > 0,
         icons: this.#options.icons,
         instructions: this.#options.instructions,
-        logger: this.#logger,
+        logger,
         name: this.#options.name,
         onToolCall: this.#options.onToolCall,
         ping: this.#options.ping,
@@ -2497,9 +2570,9 @@ var FastMCP = class extends FastMCPEventEmitter {
     const originalOnClose = transport.onclose;
     transport.onclose = () => {
       closed = true;
-      _optionalChain([onClose, 'optionalCall', _60 => _60()]);
+      _optionalChain([onClose, 'optionalCall', _69 => _69()]);
       this.#removeSession(session);
-      _optionalChain([originalOnClose, 'optionalCall', _61 => _61()]);
+      _optionalChain([originalOnClose, 'optionalCall', _70 => _70()]);
     };
     await session.connect(transport);
     if (closed) {
@@ -2564,7 +2637,7 @@ var FastMCP = class extends FastMCPEventEmitter {
    */
   #createUnauthorizedResponse(message) {
     const oauth = this.#options.oauth;
-    const resource = _optionalChain([oauth, 'optionalAccess', _62 => _62.enabled]) ? _optionalChain([oauth, 'access', _63 => _63.protectedResource, 'optionalAccess', _64 => _64.resource]) : void 0;
+    const resource = _optionalChain([oauth, 'optionalAccess', _71 => _71.enabled]) ? _optionalChain([oauth, 'access', _72 => _72.protectedResource, 'optionalAccess', _73 => _73.resource]) : void 0;
     const wwwAuthenticateParts = [
       'error="invalid_token"',
       `error_description="${message.replace(/"/g, '\\"')}"`
@@ -2703,7 +2776,7 @@ var FastMCP = class extends FastMCPEventEmitter {
       }
     }
     const oauthConfig = this.#options.oauth;
-    if (_optionalChain([oauthConfig, 'optionalAccess', _65 => _65.enabled]) && req.method === "GET") {
+    if (_optionalChain([oauthConfig, 'optionalAccess', _74 => _74.enabled]) && req.method === "GET") {
       const url2 = new URL(req.url || "", `http://${host}`);
       const authorizationServerMetadataPath = joinPaths(
         "",
@@ -2737,8 +2810,8 @@ var FastMCP = class extends FastMCPEventEmitter {
         }
       }
     }
-    const oauthProxy = _optionalChain([oauthConfig, 'optionalAccess', _66 => _66.proxy]);
-    if (oauthProxy && _optionalChain([oauthConfig, 'optionalAccess', _67 => _67.enabled])) {
+    const oauthProxy = _optionalChain([oauthConfig, 'optionalAccess', _75 => _75.proxy]);
+    if (oauthProxy && _optionalChain([oauthConfig, 'optionalAccess', _76 => _76.enabled])) {
       const url2 = new URL(req.url || "", `http://${host}`);
       const oauthPath = basePathRelativePath;
       try {
@@ -2791,7 +2864,7 @@ var FastMCP = class extends FastMCPEventEmitter {
                 const statusCode = error.statusCode || 400;
                 res.writeHead(statusCode, OAUTH_CREDENTIAL_RESPONSE_HEADERS).end(
                   JSON.stringify(
-                    _optionalChain([error, 'access', _68 => _68.toJSON, 'optionalCall', _69 => _69()]) || {
+                    _optionalChain([error, 'access', _77 => _77.toJSON, 'optionalCall', _78 => _78()]) || {
                       error: "invalid_request"
                     }
                   )
@@ -2818,7 +2891,7 @@ var FastMCP = class extends FastMCPEventEmitter {
           } catch (error) {
             res.writeHead(400, { "Content-Type": "application/json" }).end(
               JSON.stringify(
-                _optionalChain([error, 'access', _70 => _70.toJSON, 'optionalCall', _71 => _71()]) || {
+                _optionalChain([error, 'access', _79 => _79.toJSON, 'optionalCall', _80 => _80()]) || {
                   error: "invalid_request"
                 }
               )
@@ -2840,7 +2913,7 @@ var FastMCP = class extends FastMCPEventEmitter {
           } catch (error) {
             res.writeHead(400, { "Content-Type": "application/json" }).end(
               JSON.stringify(
-                _optionalChain([error, 'access', _72 => _72.toJSON, 'optionalCall', _73 => _73()]) || {
+                _optionalChain([error, 'access', _81 => _81.toJSON, 'optionalCall', _82 => _82()]) || {
                   error: "server_error"
                 }
               )
@@ -2909,7 +2982,7 @@ var FastMCP = class extends FastMCPEventEmitter {
               } catch (error) {
                 res.writeHead(400, { "Content-Type": "application/json" }).end(
                   JSON.stringify(
-                    _optionalChain([error, 'access', _74 => _74.toJSON, 'optionalCall', _75 => _75()]) || {
+                    _optionalChain([error, 'access', _83 => _83.toJSON, 'optionalCall', _84 => _84()]) || {
                       error: "server_error"
                     }
                   )
@@ -2967,8 +3040,8 @@ var FastMCP = class extends FastMCPEventEmitter {
                 const basicAuth = parseBasicAuthHeader(
                   req.headers.authorization
                 );
-                const clientId = _optionalChain([basicAuth, 'optionalAccess', _76 => _76.clientId]) || params.get("client_id") || "";
-                const clientSecret = _nullishCoalesce(_nullishCoalesce(_optionalChain([basicAuth, 'optionalAccess', _77 => _77.clientSecret]), () => ( params.get("client_secret"))), () => ( void 0));
+                const clientId = _optionalChain([basicAuth, 'optionalAccess', _85 => _85.clientId]) || params.get("client_id") || "";
+                const clientSecret = _nullishCoalesce(_nullishCoalesce(_optionalChain([basicAuth, 'optionalAccess', _86 => _86.clientSecret]), () => ( params.get("client_secret"))), () => ( void 0));
                 let response;
                 if (grantType === "authorization_code") {
                   response = await oauthProxy.exchangeAuthorizationCode({
@@ -2998,7 +3071,7 @@ var FastMCP = class extends FastMCPEventEmitter {
                 const statusCode = error.statusCode || 400;
                 res.writeHead(statusCode, OAUTH_CREDENTIAL_RESPONSE_HEADERS).end(
                   JSON.stringify(
-                    _optionalChain([error, 'access', _78 => _78.toJSON, 'optionalCall', _79 => _79()]) || {
+                    _optionalChain([error, 'access', _87 => _87.toJSON, 'optionalCall', _88 => _88()]) || {
                       error: "invalid_request"
                     }
                   )
@@ -3024,7 +3097,7 @@ var FastMCP = class extends FastMCPEventEmitter {
    * regardless (RFC 7235), so no config is needed just to get the header.
    */
   #httpStreamOAuthConfig() {
-    const resource = _optionalChain([this, 'access', _80 => _80.#options, 'access', _81 => _81.oauth, 'optionalAccess', _82 => _82.enabled]) ? _optionalChain([this, 'access', _83 => _83.#options, 'access', _84 => _84.oauth, 'access', _85 => _85.protectedResource, 'optionalAccess', _86 => _86.resource]) : void 0;
+    const resource = _optionalChain([this, 'access', _89 => _89.#options, 'access', _90 => _90.oauth, 'optionalAccess', _91 => _91.enabled]) ? _optionalChain([this, 'access', _92 => _92.#options, 'access', _93 => _93.oauth, 'access', _94 => _94.protectedResource, 'optionalAccess', _95 => _95.resource]) : void 0;
     if (!resource) {
       return {};
     }
@@ -3090,9 +3163,7 @@ var FastMCP = class extends FastMCPEventEmitter {
     const hasBody = method !== "GET" && method !== "HEAD";
     if (hasBody) {
       return new Request(url.toString(), {
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        body: req,
-        // Node.js IncomingMessage is readable stream
+        body: lazyRequestBody(req),
         duplex: "half",
         // Required for streaming bodies
         headers,
@@ -3132,24 +3203,24 @@ var FastMCP = class extends FastMCPEventEmitter {
     const envBasePath = process.env.FASTMCP_BASE_PATH;
     const envStateless = process.env.FASTMCP_STATELESS;
     const envHost = process.env.FASTMCP_HOST;
-    const transportType = _optionalChain([overrides, 'optionalAccess', _87 => _87.transportType]) || parseTransportSetting(transportArg, "--transport") || parseTransportSetting(envTransport, "FASTMCP_TRANSPORT") || "stdio";
+    const transportType = _optionalChain([overrides, 'optionalAccess', _96 => _96.transportType]) || parseTransportSetting(transportArg, "--transport") || parseTransportSetting(envTransport, "FASTMCP_TRANSPORT") || "stdio";
     if (transportType === "httpStream") {
       const port = parseInt(
-        _optionalChain([overrides, 'optionalAccess', _88 => _88.httpStream, 'optionalAccess', _89 => _89.port, 'optionalAccess', _90 => _90.toString, 'call', _91 => _91()]) || portArg || envPort || "8080"
+        _optionalChain([overrides, 'optionalAccess', _97 => _97.httpStream, 'optionalAccess', _98 => _98.port, 'optionalAccess', _99 => _99.toString, 'call', _100 => _100()]) || portArg || envPort || "8080"
       );
-      const host = _optionalChain([overrides, 'optionalAccess', _92 => _92.httpStream, 'optionalAccess', _93 => _93.host]) || hostArg || envHost || "localhost";
-      const endpoint = _optionalChain([overrides, 'optionalAccess', _94 => _94.httpStream, 'optionalAccess', _95 => _95.endpoint]) || endpointArg || envEndpoint || "/mcp";
+      const host = _optionalChain([overrides, 'optionalAccess', _101 => _101.httpStream, 'optionalAccess', _102 => _102.host]) || hostArg || envHost || "localhost";
+      const endpoint = _optionalChain([overrides, 'optionalAccess', _103 => _103.httpStream, 'optionalAccess', _104 => _104.endpoint]) || endpointArg || envEndpoint || "/mcp";
       const basePath = normalizeBasePath(
-        _optionalChain([overrides, 'optionalAccess', _96 => _96.httpStream, 'optionalAccess', _97 => _97.basePath]) || basePathArg || envBasePath
+        _optionalChain([overrides, 'optionalAccess', _105 => _105.httpStream, 'optionalAccess', _106 => _106.basePath]) || basePathArg || envBasePath
       );
-      const enableJsonResponse = _optionalChain([overrides, 'optionalAccess', _98 => _98.httpStream, 'optionalAccess', _99 => _99.enableJsonResponse]) || false;
-      const stateless = _nullishCoalesce(_nullishCoalesce(_nullishCoalesce(_optionalChain([overrides, 'optionalAccess', _100 => _100.httpStream, 'optionalAccess', _101 => _101.stateless]), () => ( // A bare `--stateless` means `--stateless true`.
+      const enableJsonResponse = _optionalChain([overrides, 'optionalAccess', _107 => _107.httpStream, 'optionalAccess', _108 => _108.enableJsonResponse]) || false;
+      const stateless = _nullishCoalesce(_nullishCoalesce(_nullishCoalesce(_optionalChain([overrides, 'optionalAccess', _109 => _109.httpStream, 'optionalAccess', _110 => _110.stateless]), () => ( // A bare `--stateless` means `--stateless true`.
       (statelessArg === "" ? true : parseBooleanSetting(statelessArg, "--stateless")))), () => ( parseBooleanSetting(envStateless, "FASTMCP_STATELESS"))), () => ( false));
-      const cors = _optionalChain([overrides, 'optionalAccess', _102 => _102.httpStream, 'optionalAccess', _103 => _103.cors]);
-      const eventStore = _optionalChain([overrides, 'optionalAccess', _104 => _104.httpStream, 'optionalAccess', _105 => _105.eventStore]);
-      const sslCa = _optionalChain([overrides, 'optionalAccess', _106 => _106.httpStream, 'optionalAccess', _107 => _107.sslCa]);
-      const sslCert = _optionalChain([overrides, 'optionalAccess', _108 => _108.httpStream, 'optionalAccess', _109 => _109.sslCert]);
-      const sslKey = _optionalChain([overrides, 'optionalAccess', _110 => _110.httpStream, 'optionalAccess', _111 => _111.sslKey]);
+      const cors = _optionalChain([overrides, 'optionalAccess', _111 => _111.httpStream, 'optionalAccess', _112 => _112.cors]);
+      const eventStore = _optionalChain([overrides, 'optionalAccess', _113 => _113.httpStream, 'optionalAccess', _114 => _114.eventStore]);
+      const sslCa = _optionalChain([overrides, 'optionalAccess', _115 => _115.httpStream, 'optionalAccess', _116 => _116.sslCa]);
+      const sslCert = _optionalChain([overrides, 'optionalAccess', _117 => _117.httpStream, 'optionalAccess', _118 => _118.sslCert]);
+      const sslKey = _optionalChain([overrides, 'optionalAccess', _119 => _119.httpStream, 'optionalAccess', _120 => _120.sslKey]);
       return {
         httpStream: {
           basePath,
@@ -3241,7 +3312,7 @@ var FastMCP = class extends FastMCPEventEmitter {
    */
   #useEndpointAsResource(endpoint) {
     const oauth = this.#options.oauth;
-    if (this.#providerResourceBase === void 0 || !_optionalChain([oauth, 'optionalAccess', _112 => _112.protectedResource]))
+    if (this.#providerResourceBase === void 0 || !_optionalChain([oauth, 'optionalAccess', _121 => _121.protectedResource]))
       return;
     this.#options = {
       ...this.#options,
@@ -3270,4 +3341,4 @@ var FastMCP = class extends FastMCPEventEmitter {
 
 
 exports.DiscoveryDocumentCache = DiscoveryDocumentCache; exports.jsonSchemaAdapter = jsonSchemaAdapter; exports.MEDIA_FETCH_TIMEOUT_MS = MEDIA_FETCH_TIMEOUT_MS; exports.imageContent = imageContent; exports.audioContent = audioContent; exports.FastMCPError = FastMCPError; exports.SessionError = SessionError; exports.UnexpectedStateError = UnexpectedStateError; exports.UserError = UserError; exports.ServerState = ServerState; exports.FastMCPSession = FastMCPSession; exports.FastMCP = FastMCP;
-//# sourceMappingURL=chunk-XEP3OP7Q.cjs.map
+//# sourceMappingURL=chunk-PV5VLW7R.cjs.map