mcp-ts-template 3.0.3 → 3.0.5

package/README.md

@@ -7,7 +7,7 @@
 
 <div align="center">
 
-[![Version](https://img.shields.io/badge/Version-3.0.2-blue.svg?style=flat-square)](./CHANGELOG.md) [![MCP Spec](https://img.shields.io/badge/MCP%20Spec-2025--11--25-8A2BE2.svg?style=flat-square)](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/main/docs/specification/2025-11-25/changelog.mdx) [![MCP SDK](https://img.shields.io/badge/MCP%20SDK-^1.27.1-green.svg?style=flat-square)](https://modelcontextprotocol.io/) [![License](https://img.shields.io/badge/License-Apache%202.0-orange.svg?style=flat-square)](./LICENSE) 
+[![Version](https://img.shields.io/badge/Version-3.0.5-blue.svg?style=flat-square)](./CHANGELOG.md) [![MCP Spec](https://img.shields.io/badge/MCP%20Spec-2025--11--25-8A2BE2.svg?style=flat-square)](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/main/docs/specification/2025-11-25/changelog.mdx) [![MCP SDK](https://img.shields.io/badge/MCP%20SDK-^1.27.1-green.svg?style=flat-square)](https://modelcontextprotocol.io/) [![License](https://img.shields.io/badge/License-Apache%202.0-orange.svg?style=flat-square)](./LICENSE) 
 
 [![Status](https://img.shields.io/badge/Status-Stable-brightgreen.svg?style=flat-square)](https://github.com/cyanheads/mcp-ts-template/issues) [![TypeScript](https://img.shields.io/badge/TypeScript-^5.9.3-3178C6.svg?style=flat-square)](https://www.typescriptlang.org/) [![Bun](https://img.shields.io/badge/Bun-v1.3.2-blueviolet.svg?style=flat-square)](https://bun.sh/) [![Code Coverage](https://img.shields.io/badge/Coverage-86.30%25-brightgreen.svg?style=flat-square)](./coverage/index.html)
 

package/dist/index.js

@@ -15776,7 +15776,7 @@ var require_util = __commonJS((exports) => {
       }
       path2 = url2.path;
     }
-    var isAbsolute = exports.isAbsolute(path2);
+    var isAbsolute2 = exports.isAbsolute(path2);
     var parts = [];
     var start = 0;
     var i = 0;
@@ -15811,7 +15811,7 @@ var require_util = __commonJS((exports) => {
     }
     path2 = parts.join("/");
     if (path2 === "") {
-      path2 = isAbsolute ? "/" : ".";
+      path2 = isAbsolute2 ? "/" : ".";
     }
     if (url2) {
       url2.path = path2;
@@ -15820,7 +15820,7 @@ var require_util = __commonJS((exports) => {
     return path2;
   });
   exports.normalize = normalize;
-  function join(aRoot, aPath) {
+  function join2(aRoot, aPath) {
     if (aRoot === "") {
       aRoot = ".";
     }
@@ -15852,7 +15852,7 @@ var require_util = __commonJS((exports) => {
     }
     return joined;
   }
-  exports.join = join;
+  exports.join = join2;
   exports.isAbsolute = function(aPath) {
     return aPath.charAt(0) === "/" || urlRegexp.test(aPath);
   };
@@ -16066,7 +16066,7 @@ var require_util = __commonJS((exports) => {
           parsed.path = parsed.path.substring(0, index + 1);
         }
       }
-      sourceURL = join(urlGenerate(parsed), sourceURL);
+      sourceURL = join2(urlGenerate(parsed), sourceURL);
     }
     return normalize(sourceURL);
   }
@@ -17440,7 +17440,7 @@ var require_source_map = __commonJS((exports) => {
 // node_modules/postcss/lib/previous-map.js
 var require_previous_map = __commonJS((exports, module) => {
   var { existsSync, readFileSync } = __require("fs");
-  var { dirname, join } = __require("path");
+  var { dirname: dirname2, join: join2 } = __require("path");
   var { SourceMapConsumer, SourceMapGenerator } = require_source_map();
   function fromBase64(str2) {
     if (Buffer) {
@@ -17462,7 +17462,7 @@ var require_previous_map = __commonJS((exports, module) => {
         this.mapFile = opts.from;
       }
       if (this.mapFile)
-        this.root = dirname(this.mapFile);
+        this.root = dirname2(this.mapFile);
       if (text)
         this.text = text;
     }
@@ -17507,7 +17507,7 @@ var require_previous_map = __commonJS((exports, module) => {
       }
     }
     loadFile(path2) {
-      this.root = dirname(path2);
+      this.root = dirname2(path2);
       if (existsSync(path2)) {
         this.mapFile = path2;
         return readFileSync(path2, "utf-8").toString().trim();
@@ -17542,7 +17542,7 @@ var require_previous_map = __commonJS((exports, module) => {
       } else if (this.annotation) {
         let map2 = this.annotation;
         if (file2)
-          map2 = join(dirname(file2), map2);
+          map2 = join2(dirname2(file2), map2);
         return this.loadFile(map2);
       }
     }
@@ -17562,15 +17562,15 @@ var require_previous_map = __commonJS((exports, module) => {
 // node_modules/postcss/lib/input.js
 var require_input = __commonJS((exports, module) => {
   var { nanoid: nanoid3 } = require_non_secure();
-  var { isAbsolute, resolve } = __require("path");
+  var { isAbsolute: isAbsolute2, resolve } = __require("path");
   var { SourceMapConsumer, SourceMapGenerator } = require_source_map();
-  var { fileURLToPath, pathToFileURL } = __require("url");
+  var { fileURLToPath: fileURLToPath2, pathToFileURL } = __require("url");
   var CssSyntaxError = require_css_syntax_error();
   var PreviousMap = require_previous_map();
   var terminalHighlight = require_terminal_highlight();
   var lineToIndexCache = Symbol("lineToIndexCache");
   var sourceMapAvailable = Boolean(SourceMapConsumer && SourceMapGenerator);
-  var pathAvailable = Boolean(resolve && isAbsolute);
+  var pathAvailable = Boolean(resolve && isAbsolute2);
   function getLineToIndex(input) {
     if (input[lineToIndexCache])
       return input[lineToIndexCache];
@@ -17605,7 +17605,7 @@ var require_input = __commonJS((exports, module) => {
       if (opts.document)
         this.document = opts.document.toString();
       if (opts.from) {
-        if (!pathAvailable || /^\w+:\/\//.test(opts.from) || isAbsolute(opts.from)) {
+        if (!pathAvailable || /^\w+:\/\//.test(opts.from) || isAbsolute2(opts.from)) {
           this.file = opts.from;
         } else {
           this.file = resolve(opts.from);
@@ -17723,7 +17723,7 @@ var require_input = __commonJS((exports, module) => {
         to = consumer.originalPositionFor({ column: endColumn, line: endLine });
       }
       let fromUrl;
-      if (isAbsolute(from.source)) {
+      if (isAbsolute2(from.source)) {
         fromUrl = pathToFileURL(from.source);
       } else {
         fromUrl = new URL(from.source, this.map.consumer().sourceRoot || pathToFileURL(this.map.mapFile));
@@ -17736,8 +17736,8 @@ var require_input = __commonJS((exports, module) => {
         url: fromUrl.toString()
       };
       if (fromUrl.protocol === "file:") {
-        if (fileURLToPath) {
-          result.file = fileURLToPath(fromUrl);
+        if (fileURLToPath2) {
+          result.file = fileURLToPath2(fromUrl);
         } else {
           throw new Error(`file: protocol is not available in this PostCSS build`);
         }
@@ -17963,12 +17963,12 @@ var require_fromJSON = __commonJS((exports, module) => {
 
 // node_modules/postcss/lib/map-generator.js
 var require_map_generator = __commonJS((exports, module) => {
-  var { dirname, relative, resolve, sep } = __require("path");
+  var { dirname: dirname2, relative, resolve, sep } = __require("path");
   var { SourceMapConsumer, SourceMapGenerator } = require_source_map();
   var { pathToFileURL } = __require("url");
   var Input = require_input();
   var sourceMapAvailable = Boolean(SourceMapConsumer && SourceMapGenerator);
-  var pathAvailable = Boolean(dirname && resolve && relative && sep);
+  var pathAvailable = Boolean(dirname2 && resolve && relative && sep);
 
   class MapGenerator {
     constructor(stringify2, root, opts, cssString) {
@@ -18005,7 +18005,7 @@ var require_map_generator = __commonJS((exports, module) => {
     applyPrevMaps() {
       for (let prev of this.previous()) {
         let from = this.toUrl(this.path(prev.file));
-        let root = prev.root || dirname(prev.file);
+        let root = prev.root || dirname2(prev.file);
         let map2;
         if (this.mapOpts.sourcesContent === false) {
           map2 = new SourceMapConsumer(prev.text);
@@ -18202,9 +18202,9 @@ var require_map_generator = __commonJS((exports, module) => {
       let cached2 = this.memoizedPaths.get(file2);
       if (cached2)
         return cached2;
-      let from = this.opts.to ? dirname(this.opts.to) : ".";
+      let from = this.opts.to ? dirname2(this.opts.to) : ".";
       if (typeof this.mapOpts.annotation === "string") {
-        from = dirname(resolve(from, this.mapOpts.annotation));
+        from = dirname2(resolve(from, this.mapOpts.annotation));
       }
       let path2 = relative(from, file2);
       this.memoizedPaths.set(file2, path2);
@@ -46011,7 +46011,7 @@ var require_register = __commonJS((exports) => {
 var require_import_in_the_middle = __commonJS((exports, module) => {
   var path3 = __require("path");
   var moduleDetailsFromPath = require_module_details_from_path();
-  var { fileURLToPath } = __require("url");
+  var { fileURLToPath: fileURLToPath2 } = __require("url");
   var { MessageChannel } = __require("worker_threads");
   var { isBuiltin } = __require("module");
   if (!isBuiltin) {
@@ -46099,7 +46099,7 @@ var require_import_in_the_middle = __commonJS((exports, module) => {
         const stackTraceLimit = Error.stackTraceLimit;
         Error.stackTraceLimit = 0;
         try {
-          filePath = fileURLToPath(name2);
+          filePath = fileURLToPath2(name2);
           name2 = filePath;
         } catch (e) {}
         Error.stackTraceLimit = stackTraceLimit;
@@ -100810,12 +100810,12 @@ var require_fetch2 = __commonJS((exports, module) => {
 // node_modules/@protobufjs/path/index.js
 var require_path = __commonJS((exports) => {
   var path3 = exports;
-  var isAbsolute = path3.isAbsolute = function isAbsolute(path4) {
+  var isAbsolute2 = path3.isAbsolute = function isAbsolute(path4) {
     return /^(?:\/|\w+:)/.test(path4);
   };
   var normalize = path3.normalize = function normalize(path4) {
     path4 = path4.replace(/\\/g, "/").replace(/\/{2,}/g, "/");
-    var parts = path4.split("/"), absolute = isAbsolute(path4), prefix = "";
+    var parts = path4.split("/"), absolute = isAbsolute2(path4), prefix = "";
     if (absolute)
       prefix = parts.shift() + "/";
     for (var i2 = 0;i2 < parts.length; ) {
@@ -100836,7 +100836,7 @@ var require_path = __commonJS((exports) => {
   path3.resolve = function resolve(originPath, includePath, alreadyNormalized) {
     if (!alreadyNormalized)
       includePath = normalize(includePath);
-    if (isAbsolute(includePath))
+    if (isAbsolute2(includePath))
       return includePath;
     if (!alreadyNormalized)
       originPath = normalize(originPath);
@@ -131050,6 +131050,8 @@ if (shouldShowDeprecationWarning())
 
 // src/config/index.ts
 var import_dotenv = __toESM(require_main4(), 1);
+import { dirname, isAbsolute, join } from "node:path";
+import { fileURLToPath } from "node:url";
 
 // node_modules/zod/v4/classic/external.js
 var exports_external = {};
@@ -144586,7 +144588,7 @@ config(en_default());
 // package.json
 var package_default = {
   name: "mcp-ts-template",
-  version: "3.0.2",
+  version: "3.0.5",
   mcpName: "io.github.cyanheads/mcp-ts-template",
   description: "TypeScript template for MCP servers with declarative tools/resources, pluggable auth, multi-backend storage, OpenTelemetry observability, and Cloudflare Workers support.",
   main: "dist/index.js",
@@ -144648,12 +144650,12 @@ var package_default = {
     "publish-mcp": "bunx mcp-publisher publish"
   },
   resolutions: {
-    "@hono/node-server": "1.19.9",
+    "@hono/node-server": "1.19.11",
     "@isaacs/brace-expansion": "5.0.1",
     "chrono-node": "2.9.0",
     diff: "8.0.3",
     dotenv: "17.3.1",
-    hono: "4.12.3",
+    hono: "4.12.5",
     "markdown-it": "14.1.1",
     qs: "6.15.0",
     zod: "4.3.6",
@@ -144664,7 +144666,7 @@ var package_default = {
     rollup: "4.59.0"
   },
   devDependencies: {
-    "@cloudflare/workers-types": "^4.20260301.1",
+    "@cloudflare/workers-types": "^4.20260305.1",
     "@biomejs/biome": "2.4.5",
     "@hono/mcp": "^0.2.4",
     "@traversable/registry": "^0.0.49",
@@ -144742,7 +144744,7 @@ var package_default = {
     access: "public"
   },
   dependencies: {
-    "@hono/node-server": "^1.19.9",
+    "@hono/node-server": "^1.19.11",
     "@hono/otel": "^1.1.1",
     "@modelcontextprotocol/ext-apps": "^1.1.2",
     "@modelcontextprotocol/sdk": "^1.27.1",
@@ -144760,7 +144762,7 @@ var package_default = {
     "chrono-node": "^2.9.0",
     dotenv: "^17.3.1",
     "fast-xml-parser": "^5.4.2",
-    hono: "^4.12.3",
+    hono: "^4.12.5",
     jose: "^6.1.3",
     "js-yaml": "^4.1.1",
     "node-cron": "^4.2.1",
@@ -145144,12 +145146,12 @@ var parseConfig = () => {
     pkg: parsedPkg,
     logsPath: hasFileSystemAccess ? (() => {
       const depth = import.meta.url.includes("/dist/") ? ".." : "../..";
-      const p = new URL(depth, import.meta.url).pathname;
-      const root = p.endsWith("/") ? p.slice(0, -1) : p;
+      const thisFile = fileURLToPath(import.meta.url);
+      const root = join(dirname(thisFile), depth);
       const logsDir = rawConfig.logsPath ?? "logs";
-      if (logsDir.startsWith("/"))
+      if (isAbsolute(logsDir))
         return logsDir;
-      return `${root}/${logsDir}`;
+      return join(root, logsDir);
     })() : undefined,
     mcpServerName: env.MCP_SERVER_NAME ?? parsedPkg.name,
     mcpServerVersion: env.MCP_SERVER_VERSION ?? parsedPkg.version,
@@ -169587,7 +169589,7 @@ var APP_HTML = `<!DOCTYPE html>
   </div>
 
   <script type="module">
-    import { App } from "https://esm.sh/@modelcontextprotocol/ext-apps";
+    import { App } from "https://unpkg.com/@modelcontextprotocol/ext-apps@1/app-with-deps";
 
     const app = new App({ name: "Data Explorer", version: "1.0.0" });
 
@@ -169713,7 +169715,7 @@ var APP_HTML = `<!DOCTYPE html>
       const text = "User selected " + selectedRows.length + " row(s):\\n" +
         JSON.stringify(selectedRows, null, 2);
       try {
-        await app.sendMessage({ role: "user", content: { type: "text", text } });
+        await app.sendMessage({ role: "user", content: [{ type: "text", text }] });
       } catch (err) {
         console.error("Failed to send selection:", err);
       }
@@ -169773,7 +169775,16 @@ var dataExplorerUiResource = {
   }),
   logic: withResourceAuth(["resource:data-explorer-ui:read"], dataExplorerUiLogic),
   responseFormatter: (result, meta3) => [
-    { uri: meta3.uri.href, mimeType: meta3.mimeType, text: result }
+    {
+      uri: meta3.uri.href,
+      mimeType: meta3.mimeType,
+      text: result,
+      _meta: {
+        ui: {
+          csp: { resource_domains: ["https://unpkg.com"] }
+        }
+      }
+    }
   ]
 };
 
@@ -175155,6 +175166,11 @@ var SSEStreamingApi = class extends StreamingApi {
       return `data: ${line}`;
     }).join(`
 `);
+    for (const key of ["event", "id", "retry"]) {
+      if (message[key] && /[\r\n]/.test(message[key])) {
+        throw new Error(`${key} must not contain "\\r" or "\\n"`);
+      }
+    }
     const sseData = [
       message.event && `event: ${message.event}`,
       dataLines,
@@ -175942,15 +175958,14 @@ var Response2 = class _Response {
       this.#init = init;
     }
     if (typeof body === "string" || typeof body?.getReader !== "undefined" || body instanceof Blob || body instanceof Uint8Array) {
-      headers ||= init?.headers || { "content-type": "text/plain; charset=UTF-8" };
-      this[cacheKey] = [init?.status || 200, body, headers];
+      this[cacheKey] = [init?.status || 200, body, headers || init?.headers];
     }
   }
   get headers() {
     const cache = this[cacheKey];
     if (cache) {
       if (!(cache[2] instanceof Headers)) {
-        cache[2] = new Headers(cache[2]);
+        cache[2] = new Headers(cache[2] || { "content-type": "text/plain; charset=UTF-8" });
       }
       return cache[2];
     }
@@ -176074,15 +176089,32 @@ var flushHeaders = (outgoing) => {
 };
 var responseViaCache = async (res, outgoing) => {
   let [status, body, header] = res[cacheKey];
-  if (header instanceof Headers) {
+  let hasContentLength = false;
+  if (!header) {
+    header = { "content-type": "text/plain; charset=UTF-8" };
+  } else if (header instanceof Headers) {
+    hasContentLength = header.has("content-length");
     header = buildOutgoingHttpHeaders(header);
+  } else if (Array.isArray(header)) {
+    const headerObj = new Headers(header);
+    hasContentLength = headerObj.has("content-length");
+    header = buildOutgoingHttpHeaders(headerObj);
+  } else {
+    for (const key in header) {
+      if (key.length === 14 && key.toLowerCase() === "content-length") {
+        hasContentLength = true;
+        break;
+      }
+    }
   }
-  if (typeof body === "string") {
-    header["Content-Length"] = Buffer.byteLength(body);
-  } else if (body instanceof Uint8Array) {
-    header["Content-Length"] = body.byteLength;
-  } else if (body instanceof Blob) {
-    header["Content-Length"] = body.size;
+  if (!hasContentLength) {
+    if (typeof body === "string") {
+      header["Content-Length"] = Buffer.byteLength(body);
+    } else if (body instanceof Uint8Array) {
+      header["Content-Length"] = body.byteLength;
+    } else if (body instanceof Blob) {
+      header["Content-Length"] = body.size;
+    }
   }
   outgoing.writeHead(status, header);
   if (typeof body === "string" || body instanceof Uint8Array) {
@@ -178996,7 +179028,7 @@ var sdk = null;
 var isOtelInitialized = false;
 var initializationPromise = null;
 function canUseNodeSDK() {
-  return runtimeCaps.isNode && !runtimeCaps.isBun && typeof process?.versions?.node === "string" && typeof process.env === "object";
+  return runtimeCaps.isNode && typeof process?.versions?.node === "string" && typeof process.env === "object";
 }
 function detectCloudResource() {
   const attrs = {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-ts-template",
-  "version": "3.0.3",
+  "version": "3.0.5",
   "mcpName": "io.github.cyanheads/mcp-ts-template",
   "description": "TypeScript template for MCP servers with declarative tools/resources, pluggable auth, multi-backend storage, OpenTelemetry observability, and Cloudflare Workers support.",
   "main": "dist/index.js",
@@ -62,12 +62,12 @@
     "publish-mcp": "bunx mcp-publisher publish"
   },
   "resolutions": {
-    "@hono/node-server": "1.19.9",
+    "@hono/node-server": "1.19.11",
     "@isaacs/brace-expansion": "5.0.1",
     "chrono-node": "2.9.0",
     "diff": "8.0.3",
     "dotenv": "17.3.1",
-    "hono": "4.12.3",
+    "hono": "4.12.5",
     "markdown-it": "14.1.1",
     "qs": "6.15.0",
     "zod": "4.3.6",
@@ -78,7 +78,7 @@
     "rollup": "4.59.0"
   },
   "devDependencies": {
-    "@cloudflare/workers-types": "^4.20260301.1",
+    "@cloudflare/workers-types": "^4.20260305.1",
     "@biomejs/biome": "2.4.5",
     "@hono/mcp": "^0.2.4",
     "@traversable/registry": "^0.0.49",
@@ -156,7 +156,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@hono/node-server": "^1.19.9",
+    "@hono/node-server": "^1.19.11",
     "@hono/otel": "^1.1.1",
     "@modelcontextprotocol/ext-apps": "^1.1.2",
     "@modelcontextprotocol/sdk": "^1.27.1",
@@ -174,7 +174,7 @@
     "chrono-node": "^2.9.0",
     "dotenv": "^17.3.1",
     "fast-xml-parser": "^5.4.2",
-    "hono": "^4.12.3",
+    "hono": "^4.12.5",
     "jose": "^6.1.3",
     "js-yaml": "^4.1.1",
     "node-cron": "^4.2.1",