Version Packages (#385)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Author: github-actions[bot]

.changeset/bump-workers-oauth-provider.md

@@ -1,5 +1,46 @@
 # cloudflare-ai-gateway-mcp-server
 
+## 0.2.0
+
+### Minor Changes
+
+- f625075: Centralize Cloudflare account resolution and remove the account-management tools.
+
+  The `accounts_list` and `set_active_account` tools are removed. Account scoping is now
+  resolved automatically by an `AccountManager` (via the new `server.accountTool()`
+  registration), in priority order:
+
+  1. **Auth-pinned account** — an account-scoped API token's account, or an OAuth token with a
+     single account, is used automatically (no `account_id` parameter is exposed).
+  2. **`cf-account-id` request header** — for tokens that can access multiple accounts, set this
+     header in your MCP client config to pick an account.
+  3. **`account_id` tool argument** — for multi-account tokens, account-scoped tools expose an
+     optional `account_id` parameter; when omitted (and no header is set) the tool returns an
+     error listing the accounts you can use. Multi-account credentials also list their accounts
+     in the server's `initialize` instructions.
+
+  All tool error responses now set `isError: true` so clients can distinguish failures.
+
+### Patch Changes
+
+- a358e69: Upgrade `@cloudflare/workers-oauth-provider` 0.4.0 → 0.7.0.
+
+  No tool or behavior changes. The only API change affecting this repo is that
+  `TokenExchangeCallbackOptions` now carries a required `grantId` field, which only
+  touched a test fixture (the provider supplies it at runtime).
+
+- f625075: Upgrade core dependencies: `agents` 0.2.19 → 0.13.3, `@modelcontextprotocol/sdk` 1.20.2 →
+  1.29.0, `zod` 3 → 4, and `ai` 4 → 6.
+
+  No user-facing tool or behavior changes. Internal adjustments for the new versions:
+
+  - `zod` 4: `z.record(...)` now takes an explicit key schema; `z.string().ip()` replaced with
+    `z.ipv4()`/`z.ipv6()` validation; dropped the removed `objectOutputType` helper.
+  - `agents` 0.13: `McpAgent` env generic is constrained to `Cloudflare.Env`.
+  - MCP SDK 1.29: tool `annotations` hints must be flat (`{ title, readOnlyHint, ... }`) — fixes a
+    latent bug where nested hints were silently ignored.
+  - `ai` 6: eval tooling updated (`LanguageModel`, `inputSchema`, `stopWhen`/`stepCountIs`, tool-call `input`).
+
 ## 0.1.12
 
 ### Patch Changes

.changeset/centralize-account-id-resolution.md

@@ -1,6 +1,6 @@
 {
 	"name": "cloudflare-ai-gateway-mcp-server",
-	"version": "0.1.12",
+	"version": "0.2.0",
 	"private": true,
 	"scripts": {
 		"check:lint": "run-eslint-workers",

.changeset/upgrade-agents-mcp-sdk-zod-ai.md

@@ -1,5 +1,46 @@
 # auditlogs
 
+## 0.2.0
+
+### Minor Changes
+
+- f625075: Centralize Cloudflare account resolution and remove the account-management tools.
+
+  The `accounts_list` and `set_active_account` tools are removed. Account scoping is now
+  resolved automatically by an `AccountManager` (via the new `server.accountTool()`
+  registration), in priority order:
+
+  1. **Auth-pinned account** — an account-scoped API token's account, or an OAuth token with a
+     single account, is used automatically (no `account_id` parameter is exposed).
+  2. **`cf-account-id` request header** — for tokens that can access multiple accounts, set this
+     header in your MCP client config to pick an account.
+  3. **`account_id` tool argument** — for multi-account tokens, account-scoped tools expose an
+     optional `account_id` parameter; when omitted (and no header is set) the tool returns an
+     error listing the accounts you can use. Multi-account credentials also list their accounts
+     in the server's `initialize` instructions.
+
+  All tool error responses now set `isError: true` so clients can distinguish failures.
+
+### Patch Changes
+
+- a358e69: Upgrade `@cloudflare/workers-oauth-provider` 0.4.0 → 0.7.0.
+
+  No tool or behavior changes. The only API change affecting this repo is that
+  `TokenExchangeCallbackOptions` now carries a required `grantId` field, which only
+  touched a test fixture (the provider supplies it at runtime).
+
+- f625075: Upgrade core dependencies: `agents` 0.2.19 → 0.13.3, `@modelcontextprotocol/sdk` 1.20.2 →
+  1.29.0, `zod` 3 → 4, and `ai` 4 → 6.
+
+  No user-facing tool or behavior changes. Internal adjustments for the new versions:
+
+  - `zod` 4: `z.record(...)` now takes an explicit key schema; `z.string().ip()` replaced with
+    `z.ipv4()`/`z.ipv6()` validation; dropped the removed `objectOutputType` helper.
+  - `agents` 0.13: `McpAgent` env generic is constrained to `Cloudflare.Env`.
+  - MCP SDK 1.29: tool `annotations` hints must be flat (`{ title, readOnlyHint, ... }`) — fixes a
+    latent bug where nested hints were silently ignored.
+  - `ai` 6: eval tooling updated (`LanguageModel`, `inputSchema`, `stopWhen`/`stepCountIs`, tool-call `input`).
+
 ## 0.1.13
 
 ### Patch Changes

apps/ai-gateway/CHANGELOG.md

@@ -1,6 +1,6 @@
 {
 	"name": "auditlogs",
-	"version": "0.1.13",
+	"version": "0.2.0",
 	"private": true,
 	"scripts": {
 		"check:lint": "run-eslint-workers",

apps/ai-gateway/package.json

@@ -1,5 +1,46 @@
 # cloudflare-autorag-mcp-server
 
+## 0.2.0
+
+### Minor Changes
+
+- f625075: Centralize Cloudflare account resolution and remove the account-management tools.
+
+  The `accounts_list` and `set_active_account` tools are removed. Account scoping is now
+  resolved automatically by an `AccountManager` (via the new `server.accountTool()`
+  registration), in priority order:
+
+  1. **Auth-pinned account** — an account-scoped API token's account, or an OAuth token with a
+     single account, is used automatically (no `account_id` parameter is exposed).
+  2. **`cf-account-id` request header** — for tokens that can access multiple accounts, set this
+     header in your MCP client config to pick an account.
+  3. **`account_id` tool argument** — for multi-account tokens, account-scoped tools expose an
+     optional `account_id` parameter; when omitted (and no header is set) the tool returns an
+     error listing the accounts you can use. Multi-account credentials also list their accounts
+     in the server's `initialize` instructions.
+
+  All tool error responses now set `isError: true` so clients can distinguish failures.
+
+### Patch Changes
+
+- a358e69: Upgrade `@cloudflare/workers-oauth-provider` 0.4.0 → 0.7.0.
+
+  No tool or behavior changes. The only API change affecting this repo is that
+  `TokenExchangeCallbackOptions` now carries a required `grantId` field, which only
+  touched a test fixture (the provider supplies it at runtime).
+
+- f625075: Upgrade core dependencies: `agents` 0.2.19 → 0.13.3, `@modelcontextprotocol/sdk` 1.20.2 →
+  1.29.0, `zod` 3 → 4, and `ai` 4 → 6.
+
+  No user-facing tool or behavior changes. Internal adjustments for the new versions:
+
+  - `zod` 4: `z.record(...)` now takes an explicit key schema; `z.string().ip()` replaced with
+    `z.ipv4()`/`z.ipv6()` validation; dropped the removed `objectOutputType` helper.
+  - `agents` 0.13: `McpAgent` env generic is constrained to `Cloudflare.Env`.
+  - MCP SDK 1.29: tool `annotations` hints must be flat (`{ title, readOnlyHint, ... }`) — fixes a
+    latent bug where nested hints were silently ignored.
+  - `ai` 6: eval tooling updated (`LanguageModel`, `inputSchema`, `stopWhen`/`stepCountIs`, tool-call `input`).
+
 ## 0.1.12
 
 ### Patch Changes

apps/auditlogs/CHANGELOG.md

@@ -1,6 +1,6 @@
 {
 	"name": "cloudflare-autorag-mcp-server",
-	"version": "0.1.12",
+	"version": "0.2.0",
 	"private": true,
 	"scripts": {
 		"check:lint": "run-eslint-workers",

apps/auditlogs/package.json

@@ -1,5 +1,46 @@
 # cloudflare-browser-mcp-server
 
+## 0.2.0
+
+### Minor Changes
+
+- f625075: Centralize Cloudflare account resolution and remove the account-management tools.
+
+  The `accounts_list` and `set_active_account` tools are removed. Account scoping is now
+  resolved automatically by an `AccountManager` (via the new `server.accountTool()`
+  registration), in priority order:
+
+  1. **Auth-pinned account** — an account-scoped API token's account, or an OAuth token with a
+     single account, is used automatically (no `account_id` parameter is exposed).
+  2. **`cf-account-id` request header** — for tokens that can access multiple accounts, set this
+     header in your MCP client config to pick an account.
+  3. **`account_id` tool argument** — for multi-account tokens, account-scoped tools expose an
+     optional `account_id` parameter; when omitted (and no header is set) the tool returns an
+     error listing the accounts you can use. Multi-account credentials also list their accounts
+     in the server's `initialize` instructions.
+
+  All tool error responses now set `isError: true` so clients can distinguish failures.
+
+### Patch Changes
+
+- a358e69: Upgrade `@cloudflare/workers-oauth-provider` 0.4.0 → 0.7.0.
+
+  No tool or behavior changes. The only API change affecting this repo is that
+  `TokenExchangeCallbackOptions` now carries a required `grantId` field, which only
+  touched a test fixture (the provider supplies it at runtime).
+
+- f625075: Upgrade core dependencies: `agents` 0.2.19 → 0.13.3, `@modelcontextprotocol/sdk` 1.20.2 →
+  1.29.0, `zod` 3 → 4, and `ai` 4 → 6.
+
+  No user-facing tool or behavior changes. Internal adjustments for the new versions:
+
+  - `zod` 4: `z.record(...)` now takes an explicit key schema; `z.string().ip()` replaced with
+    `z.ipv4()`/`z.ipv6()` validation; dropped the removed `objectOutputType` helper.
+  - `agents` 0.13: `McpAgent` env generic is constrained to `Cloudflare.Env`.
+  - MCP SDK 1.29: tool `annotations` hints must be flat (`{ title, readOnlyHint, ... }`) — fixes a
+    latent bug where nested hints were silently ignored.
+  - `ai` 6: eval tooling updated (`LanguageModel`, `inputSchema`, `stopWhen`/`stepCountIs`, tool-call `input`).
+
 ## 0.1.12
 
 ### Patch Changes