@ateam-ai/mcp 0.3.16 → 0.3.18

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ateam-ai/mcp",
-  "version": "0.3.16",
+  "version": "0.3.18",
   "mcpName": "io.github.ariekogan/ateam-mcp",
   "description": "A-Team MCP Server — build, validate, and deploy multi-agent solutions from any AI environment",
   "type": "module",

package/src/http.js

@@ -205,11 +205,16 @@ export function startHttpServer(port = 3100) {
         // Reuse existing session — seed credentials if Bearer token present
         transport = transports[sessionId];
         seedCredentials(req, sessionId);
-      } else if (isInitializeRequest(req.body)) {
-        // New session (or stale session after server restart) — create fresh session.
-        // Accept initialize requests even if they carry a stale mcp-session-id.
-        if (sessionId) {
-          console.log(`[HTTP] Stale session ${sessionId} — creating new session (server was restarted)`);
+      } else if (isInitializeRequest(req.body) || (sessionId && !transports[sessionId])) {
+        // New session, OR stale session with any request type (server restart recovery).
+        // Many MCP clients (Claude mobile, Claude Code) cache the session ID and fail to
+        // re-initialize on 400. To survive container restarts transparently, we synthesize
+        // a fresh initialize under the hood whenever we see a stale session.
+        const isStaleRecovery = sessionId && !transports[sessionId] && !isInitializeRequest(req.body);
+        if (sessionId && isInitializeRequest(req.body)) {
+          console.log(`[HTTP] Stale session ${sessionId} — client re-initialized`);
+        } else if (isStaleRecovery) {
+          console.log(`[HTTP] Stale session ${sessionId} — auto-reinitializing transparently (${req.body?.method || "unknown"})`);
         }
 
         const newSessionId = randomUUID();
@@ -235,18 +240,27 @@ export function startHttpServer(port = 3100) {
 
         const server = createServer(newSessionId);
         await server.connect(transport);
+
+        if (isStaleRecovery) {
+          // Force the underlying web-standard transport into "initialized" state without
+          // requiring a real initialize handshake. This bypasses the SDK's built-in check
+          // (`Bad Request: Server not initialized`) so the non-initialize request dispatches.
+          const inner = transport._webStandardTransport;
+          if (inner) {
+            inner.sessionId = newSessionId;
+            inner._initialized = true;
+          }
+          transports[newSessionId] = transport;
+          // Rewrite the request's session-id header so SDK session validation passes.
+          req.headers["mcp-session-id"] = newSessionId;
+          // Tell the client about the new session id so future requests use it.
+          res.setHeader("mcp-session-id", newSessionId);
+          await transport.handleRequest(req, res, req.body);
+          return;
+        }
+
         await transport.handleRequest(req, res, req.body);
         return;
-      } else if (sessionId && !transports[sessionId]) {
-        // Stale session (non-initialize request) — tell client to re-initialize.
-        // This happens after server restarts when the client still has the old session ID.
-        console.log(`[HTTP] Stale session ${sessionId} — returning 400 to trigger re-init`);
-        res.status(400).json({
-          jsonrpc: "2.0",
-          error: { code: -32600, message: "Session expired. Please re-initialize." },
-          id: req.body?.id || null,
-        });
-        return;
       } else {
         res.status(400).json({
           jsonrpc: "2.0",