upgrade everything-server to zod v4, latest MCP sdk

src/everything/package.json

@@ -30,20 +30,19 @@
     "test": "vitest run --coverage"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.26.0",
+    "@modelcontextprotocol/sdk": "^1.29.0",
     "cors": "^2.8.5",
     "express": "^5.2.1",
     "jszip": "^3.10.1",
-    "zod": "^3.25.0",
-    "zod-to-json-schema": "^3.23.5"
+    "zod": "^4.0.0"
   },
   "devDependencies": {
     "@types/cors": "^2.8.19",
     "@types/express": "^5.0.6",
     "@vitest/coverage-v8": "^2.1.8",
+    "prettier": "^2.8.8",
     "shx": "^0.3.4",
     "typescript": "^5.6.2",
-    "prettier": "^2.8.8",
     "vitest": "^2.1.8"
   }
 }

src/everything/tools/gzip-file-as-resource.ts

@@ -27,7 +27,6 @@ const GZIP_ALLOWED_DOMAINS = (process.env.GZIP_ALLOWED_DOMAINS ?? "")
 const GZipFileAsResourceSchema = z.object({
   name: z.string().describe("Name of the output file").default("README.md.gz"),
   data: z
-    .string()
     .url()
     .describe("URL or data URI of the file content to compress")
     .default(

src/everything/tools/trigger-elicitation-request-async.ts

@@ -155,12 +155,10 @@ export const registerTriggerElicitationRequestAsyncTool = (
               method: "tasks/get",
               params: { taskId },
             },
-            z
-              .object({
-                status: z.string(),
-                statusMessage: z.string().optional(),
-              })
-              .passthrough()
+            z.looseObject({
+              status: z.string(),
+              statusMessage: z.string().optional(),
+            })
           );
 
           taskStatus = pollResult.status;

src/everything/tools/trigger-sampling-request-async.ts

@@ -159,12 +159,10 @@ export const registerTriggerSamplingRequestAsyncTool = (server: McpServer) => {
               method: "tasks/get",
               params: { taskId },
             },
-            z
-              .object({
-                status: z.string(),
-                statusMessage: z.string().optional(),
-              })
-              .passthrough()
+            z.looseObject({
+              status: z.string(),
+              statusMessage: z.string().optional(),
+            })
           );
 
           taskStatus = pollResult.status;