mcp-proxy 6.3.0 → 6.4.1

package/dist/bin/mcp-proxy.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { D as __toESM, E as __commonJSMin, a as startHTTPServer, i as Client, n as serializeMessage, o as proxyServer, r as Server, t as ReadBuffer, w as InMemoryEventStore } from "../stdio-BArgKxoc.mjs";
+import { D as __toESM, E as __commonJSMin, a as startHTTPServer, i as Client, n as serializeMessage, o as proxyServer, r as Server, t as ReadBuffer, w as InMemoryEventStore } from "../stdio-vt8L9uwX.mjs";
 import { createRequire } from "node:module";
 import { basename, dirname, extname, join, normalize, relative, resolve } from "path";
 import { format, inspect } from "util";

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { C as NEVER, S as _coercedNumber, T as AuthenticationMiddleware, _ as looseObject, a as startHTTPServer, b as string, c as LATEST_PROTOCOL_VERSION, d as isJSONRPCResponse, f as ZodNumber, g as literal, h as boolean, i as Client, l as isInitializedNotification, m as array, n as serializeMessage, o as proxyServer, p as any, r as Server, s as JSONRPCMessageSchema, t as ReadBuffer, u as isJSONRPCRequest, v as number$1, w as InMemoryEventStore, x as url, y as object } from "./stdio-BArgKxoc.mjs";
+import { C as NEVER, S as _coercedNumber, T as AuthenticationMiddleware, _ as looseObject, a as startHTTPServer, b as string, c as LATEST_PROTOCOL_VERSION, d as isJSONRPCResponse, f as ZodNumber, g as literal, h as boolean, i as Client, l as isInitializedNotification, m as array, n as serializeMessage, o as proxyServer, p as any, r as Server, s as JSONRPCMessageSchema, t as ReadBuffer, u as isJSONRPCRequest, v as number$1, w as InMemoryEventStore, x as url, y as object } from "./stdio-vt8L9uwX.mjs";
 import process from "node:process";
 
 //#region node_modules/.pnpm/zod@3.25.76/node_modules/zod/v4/classic/compat.js

package/dist/{stdio-BArgKxoc.mjs → stdio-vt8L9uwX.mjs}

@@ -15271,7 +15271,7 @@ const cleanupServer = async (server, onClose) => {
 const applyCorsHeaders = (req, res, corsOptions) => {
 	if (!req.headers.origin) return;
 	const defaultCorsOptions = {
-		allowedHeaders: "Content-Type, Authorization, Accept, Mcp-Session-Id, Last-Event-Id",
+		allowedHeaders: "Content-Type, Authorization, Accept, Mcp-Session-Id, Mcp-Protocol-Version, Last-Event-Id",
 		credentials: true,
 		exposedHeaders: ["Mcp-Session-Id"],
 		methods: [
@@ -15313,12 +15313,13 @@ const handleStreamRequest = async ({ activeTransports, authenticate, authMiddlew
 	if (req.method === "POST" && new URL(req.url, "http://localhost").pathname === endpoint) {
 		let body;
 		try {
-			const sessionId = Array.isArray(req.headers["mcp-session-id"]) ? req.headers["mcp-session-id"][0] : req.headers["mcp-session-id"];
+			const sessionId = stateless ? void 0 : Array.isArray(req.headers["mcp-session-id"]) ? req.headers["mcp-session-id"][0] : req.headers["mcp-session-id"];
 			let transport;
 			let server;
 			body = await getBody(req);
-			if (stateless && authenticate) try {
-				const authResult = await authenticate(req);
+			let authResult;
+			if (authenticate) try {
+				authResult = await authenticate(req);
 				if (!authResult || typeof authResult === "object" && "authenticated" in authResult && !authResult.authenticated) {
 					const errorMessage = authResult && typeof authResult === "object" && "error" in authResult && typeof authResult.error === "string" ? authResult.error : "Unauthorized: Authentication failed";
 					res.setHeader("Content-Type", "application/json");
@@ -15366,6 +15367,7 @@ const handleStreamRequest = async ({ activeTransports, authenticate, authMiddlew
 				}
 				transport = activeTransport.transport;
 				server = activeTransport.server;
+				if (authResult && typeof server === "object" && server !== null && "updateAuth" in server && typeof server.updateAuth === "function") server.updateAuth(authResult);
 			} else if (!sessionId && isInitializeRequest(body)) {
 				transport = new StreamableHTTPServerTransport({
 					enableJsonResponse,
@@ -23997,4 +23999,4 @@ function serializeMessage(message) {
 
 //#endregion
 export { NEVER as C, __toESM as D, __commonJSMin as E, _coercedNumber as S, AuthenticationMiddleware as T, looseObject as _, startHTTPServer as a, string as b, LATEST_PROTOCOL_VERSION as c, isJSONRPCResponse as d, ZodNumber as f, literal as g, boolean as h, Client as i, isInitializedNotification as l, array as m, serializeMessage as n, proxyServer as o, any as p, Server as r, JSONRPCMessageSchema as s, ReadBuffer as t, isJSONRPCRequest as u, number as v, InMemoryEventStore as w, url as x, object as y };
-//# sourceMappingURL=stdio-BArgKxoc.mjs.map
+//# sourceMappingURL=stdio-vt8L9uwX.mjs.map