mcp-proxy 6.5.0 → 6.5.2

package/dist/bin/mcp-proxy.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { D as __toESM, E as __commonJSMin, a as startHTTPServer, i as Client, n as serializeMessage, o as proxyServer, r as Server, t as ReadBuffer, w as InMemoryEventStore } from "../stdio-BGZrO8Rz.mjs";
+import { D as __toESM, E as __commonJSMin, a as startHTTPServer, i as Client, n as serializeMessage, o as proxyServer, r as Server, t as ReadBuffer, w as InMemoryEventStore } from "../stdio-DLwYts_5.mjs";
 import { createRequire } from "node:module";
 import { basename, dirname, extname, join, normalize, relative, resolve } from "path";
 import { format, inspect } from "util";

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { C as NEVER, S as _coercedNumber, T as AuthenticationMiddleware, _ as looseObject, a as startHTTPServer, b as string, c as LATEST_PROTOCOL_VERSION, d as isJSONRPCResultResponse, f as ZodNumber, g as literal, h as boolean, i as Client, l as isInitializedNotification, m as array, n as serializeMessage, o as proxyServer, p as any, r as Server, s as JSONRPCMessageSchema, t as ReadBuffer, u as isJSONRPCRequest, v as number$1, w as InMemoryEventStore, x as url, y as object } from "./stdio-BGZrO8Rz.mjs";
+import { C as NEVER, S as _coercedNumber, T as AuthenticationMiddleware, _ as looseObject, a as startHTTPServer, b as string, c as LATEST_PROTOCOL_VERSION, d as isJSONRPCResultResponse, f as ZodNumber, g as literal, h as boolean, i as Client, l as isInitializedNotification, m as array, n as serializeMessage, o as proxyServer, p as any, r as Server, s as JSONRPCMessageSchema, t as ReadBuffer, u as isJSONRPCRequest, v as number$1, w as InMemoryEventStore, x as url, y as object } from "./stdio-DLwYts_5.mjs";
 import process from "node:process";
 
 //#region node_modules/.pnpm/zod@3.25.76/node_modules/zod/v4/classic/compat.js

package/dist/{stdio-BGZrO8Rz.mjs → stdio-DLwYts_5.mjs}

@@ -16140,6 +16140,10 @@ const handleStreamRequest = async ({ activeTransports, authenticate, authMiddlew
 		const sessionId = req.headers["mcp-session-id"];
 		const activeTransport = sessionId ? activeTransports[sessionId] : void 0;
 		if (!sessionId) {
+			if (stateless) {
+				res.writeHead(405, { Allow: "POST" }).end("Method Not Allowed");
+				return true;
+			}
 			res.writeHead(400).end("No sessionId");
 			return true;
 		}
@@ -16253,7 +16257,13 @@ const startHTTPServer = async ({ apiKey, authenticate, cors, createServer, enabl
 			res.writeHead(200).end("pong");
 			return;
 		}
-		const requestUrl = new URL(req.url || "", "http://localhost");
+		let requestUrl;
+		try {
+			requestUrl = new URL(req.url || "", "http://localhost");
+		} catch {
+			res.writeHead(400).end("Bad Request");
+			return;
+		}
 		const isMcpEndpoint = sseEndpoint && requestUrl.pathname === sseEndpoint || streamEndpoint && requestUrl.pathname === streamEndpoint;
 		if (onUnhandledRequest && !isMcpEndpoint) {
 			await onUnhandledRequest(req, res);
@@ -24811,4 +24821,4 @@ function serializeMessage(message) {
 
 //#endregion
 export { NEVER as C, __toESM as D, __commonJSMin as E, _coercedNumber as S, AuthenticationMiddleware as T, looseObject as _, startHTTPServer as a, string as b, LATEST_PROTOCOL_VERSION as c, isJSONRPCResultResponse as d, ZodNumber as f, literal as g, boolean as h, Client as i, isInitializedNotification as l, array as m, serializeMessage as n, proxyServer as o, any as p, Server as r, JSONRPCMessageSchema as s, ReadBuffer as t, isJSONRPCRequest as u, number as v, InMemoryEventStore as w, url as x, object as y };
-//# sourceMappingURL=stdio-BGZrO8Rz.mjs.map
+//# sourceMappingURL=stdio-DLwYts_5.mjs.map