upgrade to latest agents

kentcdodds · kentcdodds · commit 4fffe492fa87 · 2025-09-10T17:49:22.000-06:00
diff --git a/exercises/01.discovery/01.problem.cors/package.json b/exercises/01.discovery/01.problem.cors/package.json
@@ -16,7 +16,7 @@
     "@epic-web/epicme-db-client": "*",
     "@epic-web/invariant": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
-    "agents": "^0.0.113",
+    "agents": "^0.1.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
diff --git a/exercises/01.discovery/01.solution.cors/package.json b/exercises/01.discovery/01.solution.cors/package.json
@@ -16,7 +16,7 @@
     "@epic-web/epicme-db-client": "*",
     "@epic-web/invariant": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
-    "agents": "^0.0.113",
+    "agents": "^0.1.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
diff --git a/exercises/01.discovery/02.problem.as/package.json b/exercises/01.discovery/02.problem.as/package.json
@@ -16,7 +16,7 @@
     "@epic-web/epicme-db-client": "*",
     "@epic-web/invariant": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
-    "agents": "^0.0.113",
+    "agents": "^0.1.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
diff --git a/exercises/01.discovery/02.solution.as/package.json b/exercises/01.discovery/02.solution.as/package.json
@@ -16,7 +16,7 @@
     "@epic-web/epicme-db-client": "*",
     "@epic-web/invariant": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
-    "agents": "^0.0.113",
+    "agents": "^0.1.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
diff --git a/exercises/01.discovery/03.problem.pr/package.json b/exercises/01.discovery/03.problem.pr/package.json
@@ -16,7 +16,7 @@
     "@epic-web/epicme-db-client": "*",
     "@epic-web/invariant": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
-    "agents": "^0.0.113",
+    "agents": "^0.1.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
diff --git a/exercises/01.discovery/03.solution.pr/package.json b/exercises/01.discovery/03.solution.pr/package.json
@@ -16,7 +16,7 @@
     "@epic-web/epicme-db-client": "*",
     "@epic-web/invariant": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
-    "agents": "^0.0.113",
+    "agents": "^0.1.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
diff --git a/exercises/02.init/01.problem.authenticate/package.json b/exercises/02.init/01.problem.authenticate/package.json
@@ -16,7 +16,7 @@
     "@epic-web/epicme-db-client": "*",
     "@epic-web/invariant": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
-    "agents": "^0.0.113",
+    "agents": "^0.1.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
diff --git a/exercises/02.init/01.solution.authenticate/package.json b/exercises/02.init/01.solution.authenticate/package.json
@@ -16,7 +16,7 @@
     "@epic-web/epicme-db-client": "*",
     "@epic-web/invariant": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
-    "agents": "^0.0.113",
+    "agents": "^0.1.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
diff --git a/exercises/02.init/02.problem.params/package.json b/exercises/02.init/02.problem.params/package.json
@@ -16,7 +16,7 @@
     "@epic-web/epicme-db-client": "*",
     "@epic-web/invariant": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
-    "agents": "^0.0.113",
+    "agents": "^0.1.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
diff --git a/exercises/02.init/02.solution.params/package.json b/exercises/02.init/02.solution.params/package.json
@@ -16,7 +16,7 @@
     "@epic-web/epicme-db-client": "*",
     "@epic-web/invariant": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
-    "agents": "^0.0.113",
+    "agents": "^0.1.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
diff --git a/exercises/03.auth-info/01.problem.introspect/package.json b/exercises/03.auth-info/01.problem.introspect/package.json
@@ -16,7 +16,7 @@
     "@epic-web/epicme-db-client": "*",
     "@epic-web/invariant": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
-    "agents": "^0.0.113",
+    "agents": "^0.1.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
diff --git a/exercises/03.auth-info/01.solution.introspect/package.json b/exercises/03.auth-info/01.solution.introspect/package.json
@@ -16,7 +16,7 @@
     "@epic-web/epicme-db-client": "*",
     "@epic-web/invariant": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
-    "agents": "^0.0.113",
+    "agents": "^0.1.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
diff --git a/exercises/03.auth-info/02.problem.error/package.json b/exercises/03.auth-info/02.problem.error/package.json
@@ -16,7 +16,7 @@
     "@epic-web/epicme-db-client": "*",
     "@epic-web/invariant": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
-    "agents": "^0.0.113",
+    "agents": "^0.1.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
diff --git a/exercises/03.auth-info/02.solution.error/package.json b/exercises/03.auth-info/02.solution.error/package.json
@@ -16,7 +16,7 @@
     "@epic-web/epicme-db-client": "*",
     "@epic-web/invariant": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
-    "agents": "^0.0.113",
+    "agents": "^0.1.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
diff --git a/exercises/03.auth-info/03.problem.active/package.json b/exercises/03.auth-info/03.problem.active/package.json
@@ -16,7 +16,7 @@
     "@epic-web/epicme-db-client": "*",
     "@epic-web/invariant": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
-    "agents": "^0.0.113",
+    "agents": "^0.1.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
diff --git a/exercises/03.auth-info/03.solution.active/package.json b/exercises/03.auth-info/03.solution.active/package.json
@@ -16,7 +16,7 @@
     "@epic-web/epicme-db-client": "*",
     "@epic-web/invariant": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
-    "agents": "^0.0.113",
+    "agents": "^0.1.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
diff --git a/exercises/03.auth-info/README.mdx b/exercises/03.auth-info/README.mdx
@@ -1 +1,77 @@
 # Auth Info
+
+Authentication is the backbone of secure applications. In this exercise, you'll learn how to introspect tokens, handle invalid tokens, and determine if a token is active—all essential for building robust, user-friendly authentication flows in MCP servers.
+
+Why does this matter? Without proper token introspection and error handling, your app can't reliably know who the user is or what they're allowed to do. This can lead to security holes or a poor user experience.
+
+## What you'll learn
+
+- How to introspect an access token and extract useful information
+- How to handle invalid or expired tokens gracefully
+- How to check if a token is active and what that means for your app
+
+<callout-info>
+	Token introspection is a standard way for APIs to validate and extract claims
+	from access tokens. It helps you answer: Who is this user? What can they do?
+	Is their session still valid?
+</callout-info>
+
+### Example: Introspecting a Token
+
+```ts
+const result = await client.auth.introspect({
+	token: 'eyJhbGciOi...',
+})
+if (!result.active) {
+	throw new Error('Token is not active!')
+}
+console.log(result.sub) // user id
+```
+
+<callout-success>
+	Always check the `active` property in the introspection response. If it's
+	false, the token is invalid, expired, or revoked.
+</callout-success>
+
+### Error Handling
+
+If a token is invalid, your server should return a clear error response. This helps clients know when to prompt users to log in again.
+
+```json filename="response.json"
+{
+	"error": "invalid_token",
+	"error_description": "The access token is invalid or expired."
+}
+```
+
+<callout-warning>
+	Never leak sensitive details about why a token is invalid. Stick to generic
+	error messages for security.
+</callout-warning>
+
+### Sequence Diagram
+
+```mermaid
+sequenceDiagram
+  participant Client
+  participant Server
+  participant DB
+  Client->>Server: /auth/introspect (token)
+  Server->>DB: Validate token
+  alt Token valid
+    DB-->>Server: Token info (active)
+    Server-->>Client: Token details (active: true)
+  else Token invalid
+    DB-->>Server: Not found/expired
+    Server-->>Client: Error (active: false)
+  end
+```
+
+## Recommended Practices
+
+- Always validate tokens before trusting any claims.
+- Handle invalid tokens gracefully—never crash or expose stack traces.
+- Use introspection to power user-specific features and permissions.
+
+- 📜 [OAuth 2.0 Token Introspection Spec](https://datatracker.ietf.org/doc/html/rfc7662)
+- 📜 [MCP Auth Spec](https://modelcontextprotocol.io/specification/2025-06-18/client/auth)
diff --git a/exercises/04.user/01.problem.token/package.json b/exercises/04.user/01.problem.token/package.json
@@ -16,7 +16,7 @@
     "@epic-web/epicme-db-client": "*",
     "@epic-web/invariant": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
-    "agents": "^0.0.113",
+    "agents": "^0.1.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
diff --git a/exercises/04.user/01.solution.token/package.json b/exercises/04.user/01.solution.token/package.json
@@ -16,7 +16,7 @@
     "@epic-web/epicme-db-client": "*",
     "@epic-web/invariant": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
-    "agents": "^0.0.113",
+    "agents": "^0.1.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
diff --git a/exercises/04.user/02.problem.user/package.json b/exercises/04.user/02.problem.user/package.json
@@ -16,7 +16,7 @@
     "@epic-web/epicme-db-client": "*",
     "@epic-web/invariant": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
-    "agents": "^0.0.113",
+    "agents": "^0.1.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
diff --git a/exercises/04.user/02.solution.user/package.json b/exercises/04.user/02.solution.user/package.json
@@ -16,7 +16,7 @@
     "@epic-web/epicme-db-client": "*",
     "@epic-web/invariant": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
-    "agents": "^0.0.113",
+    "agents": "^0.1.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
diff --git a/exercises/05.scopes/01.problem.check-scopes/package.json b/exercises/05.scopes/01.problem.check-scopes/package.json
@@ -16,7 +16,7 @@
     "@epic-web/epicme-db-client": "*",
     "@epic-web/invariant": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
-    "agents": "^0.0.113",
+    "agents": "^0.1.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
diff --git a/exercises/05.scopes/01.problem.check-scopes/src/tools.ts b/exercises/05.scopes/01.problem.check-scopes/src/tools.ts
@@ -35,8 +35,6 @@ export async function initializeTools(agent: EpicMeMCP) {
 			const user = await agent.requireUser()
 			const structuredContent = {
 				user,
-				// When this is released, switch to authInfo
-				// https://github.com/cloudflare/agents/pull/426
 				scopes: agent.props.authInfo.scopes,
 			}
 			return {
diff --git a/exercises/05.scopes/01.solution.check-scopes/package.json b/exercises/05.scopes/01.solution.check-scopes/package.json
@@ -16,7 +16,7 @@
     "@epic-web/epicme-db-client": "*",
     "@epic-web/invariant": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
-    "agents": "^0.0.113",
+    "agents": "^0.1.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
diff --git a/exercises/05.scopes/01.solution.check-scopes/src/tools.ts b/exercises/05.scopes/01.solution.check-scopes/src/tools.ts
@@ -35,8 +35,6 @@ export async function initializeTools(agent: EpicMeMCP) {
 			const user = await agent.requireUser()
 			const structuredContent = {
 				user,
-				// When this is released, switch to authInfo
-				// https://github.com/cloudflare/agents/pull/426
 				scopes: agent.props.authInfo.scopes,
 			}
 			return {
diff --git a/exercises/05.scopes/02.problem.validate-sufficient-scope/package.json b/exercises/05.scopes/02.problem.validate-sufficient-scope/package.json
@@ -16,7 +16,7 @@
     "@epic-web/epicme-db-client": "*",
     "@epic-web/invariant": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
-    "agents": "^0.0.113",
+    "agents": "^0.1.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
diff --git a/exercises/05.scopes/02.problem.validate-sufficient-scope/src/tools.ts b/exercises/05.scopes/02.problem.validate-sufficient-scope/src/tools.ts
@@ -36,8 +36,6 @@ export async function initializeTools(agent: EpicMeMCP) {
 				const user = await agent.requireUser()
 				const structuredContent = {
 					user,
-					// When this is released, switch to authInfo
-					// https://github.com/cloudflare/agents/pull/426
 					scopes: agent.props.authInfo.scopes,
 				}
 				return {
diff --git a/exercises/05.scopes/02.solution.validate-sufficient-scope/package.json b/exercises/05.scopes/02.solution.validate-sufficient-scope/package.json
@@ -16,7 +16,7 @@
     "@epic-web/epicme-db-client": "*",
     "@epic-web/invariant": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
-    "agents": "^0.0.113",
+    "agents": "^0.1.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
diff --git a/exercises/05.scopes/02.solution.validate-sufficient-scope/src/tools.ts b/exercises/05.scopes/02.solution.validate-sufficient-scope/src/tools.ts
@@ -36,8 +36,6 @@ export async function initializeTools(agent: EpicMeMCP) {
 				const user = await agent.requireUser()
 				const structuredContent = {
 					user,
-					// When this is released, switch to authInfo
-					// https://github.com/cloudflare/agents/pull/426
 					scopes: agent.props.authInfo.scopes,
 				}
 				return {
diff --git a/exercises/05.scopes/03.problem.scope-hints/package.json b/exercises/05.scopes/03.problem.scope-hints/package.json
@@ -16,7 +16,7 @@
     "@epic-web/epicme-db-client": "*",
     "@epic-web/invariant": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
-    "agents": "^0.0.113",
+    "agents": "^0.1.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
diff --git a/exercises/05.scopes/03.problem.scope-hints/src/tools.ts b/exercises/05.scopes/03.problem.scope-hints/src/tools.ts
@@ -36,8 +36,6 @@ export async function initializeTools(agent: EpicMeMCP) {
 				const user = await agent.requireUser()
 				const structuredContent = {
 					user,
-					// When this is released, switch to authInfo
-					// https://github.com/cloudflare/agents/pull/426
 					scopes: agent.props.authInfo.scopes,
 				}
 				return {
diff --git a/exercises/05.scopes/03.solution.scope-hints/package.json b/exercises/05.scopes/03.solution.scope-hints/package.json
@@ -16,7 +16,7 @@
     "@epic-web/epicme-db-client": "*",
     "@epic-web/invariant": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.17.5",
-    "agents": "^0.0.113",
+    "agents": "^0.1.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
diff --git a/exercises/05.scopes/03.solution.scope-hints/src/tools.ts b/exercises/05.scopes/03.solution.scope-hints/src/tools.ts
@@ -36,8 +36,6 @@ export async function initializeTools(agent: EpicMeMCP) {
 				const user = await agent.requireUser()
 				const structuredContent = {
 					user,
-					// When this is released, switch to authInfo
-					// https://github.com/cloudflare/agents/pull/426
 					scopes: agent.props.authInfo.scopes,
 				}
 				return {
diff --git a/package-lock.json b/package-lock.json
