@himanshusinghs/mongodb-mcp-server 1.7.7 → 1.8.0

package/dist/cjs/transports/streamableHttp/httpServers/expressBasedHttpServer.js

@@ -0,0 +1,81 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExpressBasedHttpServer = void 0;
+const express_1 = __importDefault(require("express"));
+const index_js_1 = require("../../../common/logging/index.js");
+class ExpressBasedHttpServer {
+    constructor(config) {
+        this.app = (0, express_1.default)();
+        this.app.enable("trust proxy"); // needed for reverse proxy support
+        this.expressConfig = { port: config.port, hostname: config.hostname };
+        this.logger = config.logger;
+        this.logContext = config.logContext;
+    }
+    get serverAddress() {
+        const result = this.httpServer?.address();
+        if (typeof result === "string") {
+            return result;
+        }
+        if (typeof result === "object" && result) {
+            return `http://${result.address}:${result.port}`;
+        }
+        throw new Error("Server is not started yet");
+    }
+    async start() {
+        await this.setupRoutes();
+        const { port, hostname } = this.expressConfig;
+        this.httpServer = await new Promise((resolve, reject) => {
+            const result = this.app.listen(port, hostname, (err) => {
+                if (err) {
+                    reject(err);
+                }
+                else {
+                    resolve(result);
+                }
+            });
+        });
+        this.logger.info({
+            message: `Http server started on address: ${this.serverAddress}`,
+            context: this.logContext,
+            noRedaction: true,
+            id: index_js_1.LogId.httpServerStarted,
+        });
+    }
+    async stop() {
+        if (this.httpServer) {
+            this.logger.info({
+                message: "Stopping server...",
+                context: this.logContext,
+                id: index_js_1.LogId.httpServerStopping,
+            });
+            const server = this.httpServer;
+            await new Promise((resolve, reject) => {
+                server.close((err) => {
+                    if (err) {
+                        reject(err);
+                    }
+                    else {
+                        resolve(undefined);
+                    }
+                });
+            });
+            this.logger.info({
+                message: "Server stopped",
+                context: this.logContext,
+                id: index_js_1.LogId.httpServerStopped,
+            });
+        }
+        else {
+            this.logger.info({
+                message: "Server is not running",
+                context: this.logContext,
+                id: index_js_1.LogId.httpServerStopped,
+            });
+        }
+    }
+}
+exports.ExpressBasedHttpServer = ExpressBasedHttpServer;
+//# sourceMappingURL=expressBasedHttpServer.js.map

package/dist/cjs/transports/streamableHttp/httpServers/expressBasedHttpServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expressBasedHttpServer.js","sourceRoot":"","sources":["../../../../../src/transports/streamableHttp/httpServers/expressBasedHttpServer.ts"],"names":[],"mappings":";;;;;;AAAA,sDAA8B;AAE9B,+DAA0E;AAO1E,MAAsB,sBAAsB;IASxC,YAAY,MAAkE;QAC1E,IAAI,CAAC,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAC;QACrB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,mCAAmC;QACnE,IAAI,CAAC,aAAa,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QAEtE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACxC,CAAC;IAED,IAAW,aAAa;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC;QAC1C,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,MAAM,CAAC;QAClB,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,EAAE,CAAC;YACvC,OAAO,UAAU,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QACrD,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACjD,CAAC;IAIM,KAAK,CAAC,KAAK;QACd,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAEzB,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC;QAE9C,IAAI,CAAC,UAAU,GAAG,MAAM,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACjE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,GAAW,EAAE,EAAE;gBAC3D,IAAI,GAAG,EAAE,CAAC;oBACN,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChB,CAAC;qBAAM,CAAC;oBACJ,OAAO,CAAC,MAAM,CAAC,CAAC;gBACpB,CAAC;YACL,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACb,OAAO,EAAE,mCAAmC,IAAI,CAAC,aAAa,EAAE;YAChE,OAAO,EAAE,IAAI,CAAC,UAAU;YACxB,WAAW,EAAE,IAAI;YACjB,EAAE,EAAE,gBAAK,CAAC,iBAAiB;SAC9B,CAAC,CAAC;IACP,CAAC;IAEM,KAAK,CAAC,IAAI;QACb,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACb,OAAO,EAAE,oBAAoB;gBAC7B,OAAO,EAAE,IAAI,CAAC,UAAU;gBACxB,EAAE,EAAE,gBAAK,CAAC,kBAAkB;aAC/B,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;YAE/B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAClC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAW,EAAE,EAAE;oBACzB,IAAI,GAAG,EAAE,CAAC;wBACN,MAAM,CAAC,GAAG,CAAC,CAAC;oBAChB,CAAC;yBAAM,CAAC;wBACJ,OAAO,CAAC,SAAS,CAAC,CAAC;oBACvB,CAAC;gBACL,CAAC,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACb,OAAO,EAAE,gBAAgB;gBACzB,OAAO,EAAE,IAAI,CAAC,UAAU;gBACxB,EAAE,EAAE,gBAAK,CAAC,iBAAiB;aAC9B,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACb,OAAO,EAAE,uBAAuB;gBAChC,OAAO,EAAE,IAAI,CAAC,UAAU;gBACxB,EAAE,EAAE,gBAAK,CAAC,iBAAiB;aAC9B,CAAC,CAAC;QACP,CAAC;IACL,CAAC;CACJ;AAvFD,wDAuFC"}

package/dist/cjs/transports/streamableHttp/httpServers/healthCheckServer.d.ts

@@ -0,0 +1,7 @@
+import { ExpressBasedHttpServer } from "./expressBasedHttpServer.js";
+import { type LoggerBase } from "../../../common/logging/index.js";
+export declare class HealthCheckServer extends ExpressBasedHttpServer {
+    constructor(healthCheckHost: string, healthCheckPort: number, logger: LoggerBase);
+    protected setupRoutes(): Promise<void>;
+}
+//# sourceMappingURL=healthCheckServer.d.ts.map

package/dist/cjs/transports/streamableHttp/httpServers/healthCheckServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"healthCheckServer.d.ts","sourceRoot":"","sources":["../../../../../src/transports/streamableHttp/httpServers/healthCheckServer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAEnE,qBAAa,iBAAkB,SAAQ,sBAAsB;gBAC7C,eAAe,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU;cAS7D,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;CASlD"}

package/dist/cjs/transports/streamableHttp/httpServers/healthCheckServer.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HealthCheckServer = void 0;
+const expressBasedHttpServer_js_1 = require("./expressBasedHttpServer.js");
+class HealthCheckServer extends expressBasedHttpServer_js_1.ExpressBasedHttpServer {
+    constructor(healthCheckHost, healthCheckPort, logger) {
+        super({
+            port: healthCheckPort,
+            hostname: healthCheckHost,
+            logger,
+            logContext: "healthCheckServer",
+        });
+    }
+    setupRoutes() {
+        this.app.get("/health", (_req, res) => {
+            res.json({
+                status: "ok",
+            });
+        });
+        return Promise.resolve();
+    }
+}
+exports.HealthCheckServer = HealthCheckServer;
+//# sourceMappingURL=healthCheckServer.js.map

package/dist/cjs/transports/streamableHttp/httpServers/healthCheckServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"healthCheckServer.js","sourceRoot":"","sources":["../../../../../src/transports/streamableHttp/httpServers/healthCheckServer.ts"],"names":[],"mappings":";;;AACA,2EAAqE;AAGrE,MAAa,iBAAkB,SAAQ,kDAAsB;IACzD,YAAY,eAAuB,EAAE,eAAuB,EAAE,MAAkB;QAC5E,KAAK,CAAC;YACF,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,eAAe;YACzB,MAAM;YACN,UAAU,EAAE,mBAAmB;SAClC,CAAC,CAAC;IACP,CAAC;IAEkB,WAAW;QAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAqB,EAAE,GAAqB,EAAE,EAAE;YACrE,GAAG,CAAC,IAAI,CAAC;gBACL,MAAM,EAAE,IAAI;aACf,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;CACJ;AAnBD,8CAmBC"}

package/dist/cjs/transports/streamableHttp/httpServers/mcpHttpServer.d.ts

@@ -0,0 +1,37 @@
+import type { Server } from "../../../server.js";
+import { type ISessionStore } from "../../../common/sessionStore.js";
+import { ExpressBasedHttpServer } from "./expressBasedHttpServer.js";
+import type { UserConfig } from "../../../common/config/userConfig.js";
+import { type LoggerBase } from "../../../common/logging/index.js";
+import type { CustomizableServerOptions, CustomizableSessionOptions, RequestContext } from "../../base.js";
+export declare class MCPHttpServer<TUserConfig extends UserConfig = UserConfig, TContext = unknown> extends ExpressBasedHttpServer {
+    private sessionStore;
+    private serverOptions?;
+    private sessionOptions?;
+    private userConfig;
+    private createServerForRequest;
+    constructor({ userConfig, createServerForRequest, serverOptions, sessionOptions, logger, sessionStore, }: {
+        userConfig: TUserConfig;
+        createServerForRequest: (createParams: {
+            request: RequestContext;
+            serverOptions?: CustomizableServerOptions<TUserConfig, TContext>;
+            sessionOptions?: CustomizableSessionOptions<TUserConfig>;
+        }) => Promise<Server<TUserConfig, TContext>>;
+        logger: LoggerBase;
+        serverOptions?: CustomizableServerOptions<TUserConfig, TContext>;
+        sessionOptions?: CustomizableSessionOptions<TUserConfig>;
+        sessionStore?: ISessionStore;
+    });
+    stop(): Promise<void>;
+    protected setupRoutes(): Promise<void>;
+    private reportSessionError;
+    private handleSessionRequest;
+    /**
+     * Initializes a new server and session. This can be done either explicitly via an initialize request
+     * or implicitly when externally managed sessions are enabled and a request is received for a session
+     * that does not exist.
+     */
+    private initializeServer;
+    private withErrorHandling;
+}
+//# sourceMappingURL=mcpHttpServer.d.ts.map

package/dist/cjs/transports/streamableHttp/httpServers/mcpHttpServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpHttpServer.d.ts","sourceRoot":"","sources":["../../../../../src/transports/streamableHttp/httpServers/mcpHttpServer.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAgB,KAAK,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAEnF,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sCAAsC,CAAC;AACvE,OAAO,EAAE,KAAK,UAAU,EAAS,MAAM,kCAAkC,CAAC;AAC1E,OAAO,KAAK,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAS3G,qBAAa,aAAa,CACtB,WAAW,SAAS,UAAU,GAAG,UAAU,EAC3C,QAAQ,GAAG,OAAO,CACpB,SAAQ,sBAAsB;IAC5B,OAAO,CAAC,YAAY,CAAgB;IACpC,OAAO,CAAC,aAAa,CAAC,CAAmD;IACzE,OAAO,CAAC,cAAc,CAAC,CAA0C;IACjE,OAAO,CAAC,UAAU,CAAa;IAE/B,OAAO,CAAC,sBAAsB,CAIe;gBAEjC,EACR,UAAU,EACV,sBAAsB,EACtB,aAAa,EACb,cAAc,EACd,MAAM,EACN,YAAY,GACf,EAAE;QACC,UAAU,EAAE,WAAW,CAAC;QACxB,sBAAsB,EAAE,CAAC,YAAY,EAAE;YACnC,OAAO,EAAE,cAAc,CAAC;YACxB,aAAa,CAAC,EAAE,yBAAyB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YACjE,cAAc,CAAC,EAAE,0BAA0B,CAAC,WAAW,CAAC,CAAC;SAC5D,KAAK,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC7C,MAAM,EAAE,UAAU,CAAC;QACnB,aAAa,CAAC,EAAE,yBAAyB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACjE,cAAc,CAAC,EAAE,0BAA0B,CAAC,WAAW,CAAC,CAAC;QACzD,YAAY,CAAC,EAAE,aAAa,CAAC;KAChC;IAgBY,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;cAKT,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAgDrD,OAAO,CAAC,kBAAkB;YAkCZ,oBAAoB;IAkClC;;;;OAIG;YACW,gBAAgB;IAmH9B,OAAO,CAAC,iBAAiB;CAqB5B"}

package/dist/cjs/transports/streamableHttp/httpServers/mcpHttpServer.js

@@ -0,0 +1,288 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MCPHttpServer = void 0;
+const express_1 = __importDefault(require("express"));
+const types_js_1 = require("@modelcontextprotocol/sdk/types.js");
+const sessionStore_js_1 = require("../../../common/sessionStore.js");
+const getRandomUUID_js_1 = require("../../../helpers/getRandomUUID.js");
+const expressBasedHttpServer_js_1 = require("./expressBasedHttpServer.js");
+const index_js_1 = require("../../../common/logging/index.js");
+const JSON_RPC_ERROR_CODE_PROCESSING_REQUEST_FAILED = -32000;
+const JSON_RPC_ERROR_CODE_SESSION_ID_REQUIRED = -32001;
+const JSON_RPC_ERROR_CODE_SESSION_ID_INVALID = -32002;
+const JSON_RPC_ERROR_CODE_SESSION_NOT_FOUND = -32003;
+const JSON_RPC_ERROR_CODE_INVALID_REQUEST = -32004;
+const JSON_RPC_ERROR_CODE_DISALLOWED_EXTERNAL_SESSION = -32005;
+class MCPHttpServer extends expressBasedHttpServer_js_1.ExpressBasedHttpServer {
+    constructor({ userConfig, createServerForRequest, serverOptions, sessionOptions, logger, sessionStore, }) {
+        super({
+            port: userConfig.httpPort,
+            hostname: userConfig.httpHost,
+            logger,
+            logContext: "mcpHttpServer",
+        });
+        this.serverOptions = serverOptions;
+        this.sessionOptions = sessionOptions;
+        this.createServerForRequest = createServerForRequest;
+        this.userConfig = userConfig;
+        this.sessionStore =
+            sessionStore ??
+                new sessionStore_js_1.SessionStore(this.userConfig.idleTimeoutMs, this.userConfig.notificationTimeoutMs, logger);
+    }
+    async stop() {
+        await Promise.all([this.sessionStore.closeAllSessions(), super.stop()]);
+    }
+    // eslint-disable-next-line @typescript-eslint/require-await
+    async setupRoutes() {
+        this.app.use(express_1.default.json({ limit: this.userConfig.httpBodyLimit }));
+        this.app.use((req, res, next) => {
+            for (const [key, value] of Object.entries(this.userConfig.httpHeaders)) {
+                const header = req.headers[key.toLowerCase()];
+                if (!header || header !== value) {
+                    res.status(403).json({ error: `Invalid value for header "${key}"` });
+                    return;
+                }
+            }
+            next();
+        });
+        this.app.post("/mcp", this.withErrorHandling(async (req, res) => {
+            const sessionId = req.headers["mcp-session-id"];
+            if (sessionId && typeof sessionId !== "string") {
+                return this.reportSessionError(res, JSON_RPC_ERROR_CODE_SESSION_ID_INVALID);
+            }
+            if ((0, types_js_1.isInitializeRequest)(req.body)) {
+                if (sessionId && !this.userConfig.externallyManagedSessions) {
+                    this.logger.debug({
+                        id: index_js_1.LogId.streamableHttpTransportDisallowedExternalSessionError,
+                        context: "streamableHttpTransport",
+                        message: `Client provided session ID ${sessionId}, but externallyManagedSessions is disabled`,
+                    });
+                    return this.reportSessionError(res, JSON_RPC_ERROR_CODE_DISALLOWED_EXTERNAL_SESSION);
+                }
+                return await this.initializeServer(req, res, { sessionId });
+            }
+            if (sessionId) {
+                return await this.handleSessionRequest(req, res);
+            }
+            return this.reportSessionError(res, JSON_RPC_ERROR_CODE_INVALID_REQUEST);
+        }));
+        this.app.get("/mcp", this.withErrorHandling(this.handleSessionRequest.bind(this)));
+        this.app.delete("/mcp", this.withErrorHandling(this.handleSessionRequest.bind(this)));
+    }
+    reportSessionError(res, errorCode) {
+        let message;
+        let statusCode = 400;
+        switch (errorCode) {
+            case JSON_RPC_ERROR_CODE_SESSION_ID_REQUIRED:
+                message = "session id is required";
+                break;
+            case JSON_RPC_ERROR_CODE_SESSION_ID_INVALID:
+                message = "session id is invalid";
+                break;
+            case JSON_RPC_ERROR_CODE_INVALID_REQUEST:
+                message = "invalid request";
+                break;
+            case JSON_RPC_ERROR_CODE_SESSION_NOT_FOUND:
+                message = "session not found";
+                statusCode = 404;
+                break;
+            case JSON_RPC_ERROR_CODE_DISALLOWED_EXTERNAL_SESSION:
+                message = "cannot provide sessionId when externally managed sessions are disabled";
+                break;
+            default:
+                message = "unknown error";
+                statusCode = 500;
+        }
+        res.status(statusCode).json({
+            jsonrpc: "2.0",
+            error: {
+                code: errorCode,
+                message,
+            },
+        });
+    }
+    async handleSessionRequest(req, res) {
+        const sessionId = req.headers["mcp-session-id"];
+        if (!sessionId) {
+            return this.reportSessionError(res, JSON_RPC_ERROR_CODE_SESSION_ID_REQUIRED);
+        }
+        if (typeof sessionId !== "string") {
+            return this.reportSessionError(res, JSON_RPC_ERROR_CODE_SESSION_ID_INVALID);
+        }
+        const transport = await this.sessionStore.getSession(sessionId);
+        if (!transport) {
+            if (this.userConfig.externallyManagedSessions) {
+                this.logger.debug({
+                    id: index_js_1.LogId.streamableHttpTransportSessionNotFound,
+                    context: "streamableHttpTransport",
+                    message: `Session with ID ${sessionId} not found, initializing new session`,
+                });
+                return await this.initializeServer(req, res, { sessionId, isImplicitInitialization: true });
+            }
+            this.logger.debug({
+                id: index_js_1.LogId.streamableHttpTransportSessionNotFound,
+                context: "streamableHttpTransport",
+                message: `Session with ID ${sessionId} not found`,
+            });
+            return this.reportSessionError(res, JSON_RPC_ERROR_CODE_SESSION_NOT_FOUND);
+        }
+        await transport.handleRequest(req, res, req.body);
+    }
+    /**
+     * Initializes a new server and session. This can be done either explicitly via an initialize request
+     * or implicitly when externally managed sessions are enabled and a request is received for a session
+     * that does not exist.
+     */
+    async initializeServer(req, res, { sessionId, isImplicitInitialization, }) {
+        const { StreamableHTTPServerTransport } = await Promise.resolve().then(() => __importStar(require("@modelcontextprotocol/sdk/server/streamableHttp.js")));
+        if (isImplicitInitialization && !sessionId) {
+            throw new Error("Implicit initialization requires externally-passed sessionId");
+        }
+        const request = {
+            headers: req.headers,
+            query: req.query,
+        };
+        const server = await this.createServerForRequest({
+            request,
+            serverOptions: this.serverOptions,
+            sessionOptions: this.sessionOptions,
+        });
+        const options = {
+            enableJsonResponse: this.userConfig.httpResponseType === "json",
+        };
+        const sessionInitialized = async (sessionId) => {
+            server.session.logger.setAttribute("sessionId", sessionId);
+            await this.sessionStore.setSession(sessionId, {
+                server,
+                transport,
+                logger: server.session.logger,
+            });
+        };
+        // When we're implicitly initializing a session, the client is not going through the initialization
+        // flow. This means that it won't do proper session lifecycle management, so we should not add hooks for
+        // onsessioninitialized and onsessionclosed.
+        if (!isImplicitInitialization) {
+            options.sessionIdGenerator = () => sessionId ?? (0, getRandomUUID_js_1.getRandomUUID)();
+            options.onsessioninitialized = sessionInitialized.bind(this);
+            options.onsessionclosed = async (sessionId) => {
+                try {
+                    await this.sessionStore.closeSession(sessionId, false);
+                }
+                catch (error) {
+                    this.logger.error({
+                        id: index_js_1.LogId.streamableHttpTransportSessionCloseFailure,
+                        context: "streamableHttpTransport",
+                        message: `Error closing session ${sessionId}: ${error instanceof Error ? error.message : String(error)}`,
+                    });
+                }
+            };
+        }
+        const transport = new StreamableHTTPServerTransport(options);
+        let failedPings = 0;
+        // eslint-disable-next-line @typescript-eslint/no-misused-promises
+        const keepAliveLoop = setInterval(async () => {
+            try {
+                server.session.logger.debug({
+                    id: index_js_1.LogId.streamableHttpTransportKeepAlive,
+                    context: "streamableHttpTransport",
+                    message: "Sending ping",
+                });
+                await transport.send({
+                    jsonrpc: "2.0",
+                    method: "ping",
+                });
+                failedPings = 0;
+            }
+            catch (err) {
+                try {
+                    failedPings++;
+                    server.session.logger.warning({
+                        id: index_js_1.LogId.streamableHttpTransportKeepAliveFailure,
+                        context: "streamableHttpTransport",
+                        message: `Error sending ping (attempt #${failedPings}): ${err instanceof Error ? err.message : String(err)}`,
+                    });
+                    if (failedPings > 3) {
+                        clearInterval(keepAliveLoop);
+                        await transport.close();
+                    }
+                }
+                catch {
+                    // Ignore the error of the transport close as there's nothing else
+                    // we can do at this point.
+                }
+            }
+        }, 30000);
+        transport.onclose = () => {
+            clearInterval(keepAliveLoop);
+            server.close().catch((error) => {
+                this.logger.error({
+                    id: index_js_1.LogId.streamableHttpTransportCloseFailure,
+                    context: "streamableHttpTransport",
+                    message: `Error closing server: ${error instanceof Error ? error.message : String(error)}`,
+                });
+            });
+        };
+        await server.connect(transport);
+        if (isImplicitInitialization) {
+            await sessionInitialized(sessionId);
+        }
+        await transport.handleRequest(req, res, req.body);
+    }
+    withErrorHandling(fn) {
+        return (req, res, next) => {
+            fn(req, res, next).catch((error) => {
+                this.logger.error({
+                    id: index_js_1.LogId.streamableHttpTransportRequestFailure,
+                    context: "streamableHttpTransport",
+                    message: `Error handling request: ${error instanceof Error ? error.message : String(error)}`,
+                });
+                res.status(400).json({
+                    jsonrpc: "2.0",
+                    error: {
+                        code: JSON_RPC_ERROR_CODE_PROCESSING_REQUEST_FAILED,
+                        message: `failed to handle request`,
+                        data: error instanceof Error ? error.message : String(error),
+                    },
+                });
+            });
+        };
+    }
+}
+exports.MCPHttpServer = MCPHttpServer;
+//# sourceMappingURL=mcpHttpServer.js.map

package/dist/cjs/transports/streamableHttp/httpServers/mcpHttpServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpHttpServer.js","sourceRoot":"","sources":["../../../../../src/transports/streamableHttp/httpServers/mcpHttpServer.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,sDAA8B;AAC9B,iEAAyE;AAIzE,qEAAmF;AACnF,wEAAkE;AAClE,2EAAqE;AAErE,+DAA0E;AAG1E,MAAM,6CAA6C,GAAG,CAAC,KAAK,CAAC;AAC7D,MAAM,uCAAuC,GAAG,CAAC,KAAK,CAAC;AACvD,MAAM,sCAAsC,GAAG,CAAC,KAAK,CAAC;AACtD,MAAM,qCAAqC,GAAG,CAAC,KAAK,CAAC;AACrD,MAAM,mCAAmC,GAAG,CAAC,KAAK,CAAC;AACnD,MAAM,+CAA+C,GAAG,CAAC,KAAK,CAAC;AAE/D,MAAa,aAGX,SAAQ,kDAAsB;IAY5B,YAAY,EACR,UAAU,EACV,sBAAsB,EACtB,aAAa,EACb,cAAc,EACd,MAAM,EACN,YAAY,GAYf;QACG,KAAK,CAAC;YACF,IAAI,EAAE,UAAU,CAAC,QAAQ;YACzB,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,MAAM;YACN,UAAU,EAAE,eAAe;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,CAAC;QACrD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,YAAY;YACb,YAAY;gBACZ,IAAI,8BAAY,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IACvG,CAAC;IAEM,KAAK,CAAC,IAAI;QACb,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,4DAA4D;IACzC,KAAK,CAAC,WAAW;QAChC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBACrE,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;gBAC9C,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;oBAC9B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,GAAG,GAAG,EAAE,CAAC,CAAC;oBACrE,OAAO;gBACX,CAAC;YACL,CAAC;YAED,IAAI,EAAE,CAAC;QACX,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,IAAI,CACT,MAAM,EACN,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,GAAoB,EAAE,GAAqB,EAAE,EAAE;YACzE,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAChD,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAC7C,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;YAChF,CAAC;YAED,IAAI,IAAA,8BAAmB,EAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,IAAI,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,yBAAyB,EAAE,CAAC;oBAC1D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;wBACd,EAAE,EAAE,gBAAK,CAAC,qDAAqD;wBAC/D,OAAO,EAAE,yBAAyB;wBAClC,OAAO,EAAE,8BAA8B,SAAS,6CAA6C;qBAChG,CAAC,CAAC;oBAEH,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,+CAA+C,CAAC,CAAC;gBACzF,CAAC;gBAED,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YAChE,CAAC;YAED,IAAI,SAAS,EAAE,CAAC;gBACZ,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;YAED,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAC;QAC7E,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnF,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1F,CAAC;IAEO,kBAAkB,CAAC,GAAqB,EAAE,SAAiB;QAC/D,IAAI,OAAe,CAAC;QACpB,IAAI,UAAU,GAAG,GAAG,CAAC;QAErB,QAAQ,SAAS,EAAE,CAAC;YAChB,KAAK,uCAAuC;gBACxC,OAAO,GAAG,wBAAwB,CAAC;gBACnC,MAAM;YACV,KAAK,sCAAsC;gBACvC,OAAO,GAAG,uBAAuB,CAAC;gBAClC,MAAM;YACV,KAAK,mCAAmC;gBACpC,OAAO,GAAG,iBAAiB,CAAC;gBAC5B,MAAM;YACV,KAAK,qCAAqC;gBACtC,OAAO,GAAG,mBAAmB,CAAC;gBAC9B,UAAU,GAAG,GAAG,CAAC;gBACjB,MAAM;YACV,KAAK,+CAA+C;gBAChD,OAAO,GAAG,wEAAwE,CAAC;gBACnF,MAAM;YACV;gBACI,OAAO,GAAG,eAAe,CAAC;gBAC1B,UAAU,GAAG,GAAG,CAAC;QACzB,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACH,IAAI,EAAE,SAAS;gBACf,OAAO;aACV;SACJ,CAAC,CAAC;IACP,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,GAAoB,EAAE,GAAqB;QAC1E,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAC;QACjF,CAAC;QAED,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAChE,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,UAAU,CAAC,yBAAyB,EAAE,CAAC;gBAC5C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;oBACd,EAAE,EAAE,gBAAK,CAAC,sCAAsC;oBAChD,OAAO,EAAE,yBAAyB;oBAClC,OAAO,EAAE,mBAAmB,SAAS,sCAAsC;iBAC9E,CAAC,CAAC;gBAEH,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAC,CAAC;YAChG,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gBACd,EAAE,EAAE,gBAAK,CAAC,sCAAsC;gBAChD,OAAO,EAAE,yBAAyB;gBAClC,OAAO,EAAE,mBAAmB,SAAS,YAAY;aACpD,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,qCAAqC,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,gBAAgB,CAC1B,GAAoB,EACpB,GAAqB,EACrB,EACI,SAAS,EACT,wBAAwB,GAG+B;QAE3D,MAAM,EAAE,6BAA6B,EAAE,GAAG,wDAAa,oDAAoD,GAAC,CAAC;QAC7G,IAAI,wBAAwB,IAAI,CAAC,SAAS,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QACpF,CAAC;QAED,MAAM,OAAO,GAAmB;YAC5B,OAAO,EAAE,GAAG,CAAC,OAAwD;YACrE,KAAK,EAAE,GAAG,CAAC,KAAsD;SACpE,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC;YAC7C,OAAO;YACP,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,cAAc,EAAE,IAAI,CAAC,cAAc;SACtC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAoD;YAC7D,kBAAkB,EAAE,IAAI,CAAC,UAAU,CAAC,gBAAgB,KAAK,MAAM;SAClE,CAAC;QAEF,MAAM,kBAAkB,GAAG,KAAK,EAAE,SAAiB,EAAiB,EAAE;YAClE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAC3D,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,EAAE;gBAC1C,MAAM;gBACN,SAAS;gBACT,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;aAChC,CAAC,CAAC;QACP,CAAC,CAAC;QAEF,mGAAmG;QACnG,wGAAwG;QACxG,4CAA4C;QAC5C,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAC5B,OAAO,CAAC,kBAAkB,GAAG,GAAW,EAAE,CAAC,SAAS,IAAI,IAAA,gCAAa,GAAE,CAAC;YACxE,OAAO,CAAC,oBAAoB,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7D,OAAO,CAAC,eAAe,GAAG,KAAK,EAAE,SAAS,EAAiB,EAAE;gBACzD,IAAI,CAAC;oBACD,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;gBAC3D,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;wBACd,EAAE,EAAE,gBAAK,CAAC,0CAA0C;wBACpD,OAAO,EAAE,yBAAyB;wBAClC,OAAO,EAAE,yBAAyB,SAAS,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;qBAC3G,CAAC,CAAC;gBACP,CAAC;YACL,CAAC,CAAC;QACN,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC,OAAO,CAAC,CAAC;QAE7D,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,kEAAkE;QAClE,MAAM,aAAa,GAAmB,WAAW,CAAC,KAAK,IAAI,EAAE;YACzD,IAAI,CAAC;gBACD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;oBACxB,EAAE,EAAE,gBAAK,CAAC,gCAAgC;oBAC1C,OAAO,EAAE,yBAAyB;oBAClC,OAAO,EAAE,cAAc;iBAC1B,CAAC,CAAC;gBAEH,MAAM,SAAS,CAAC,IAAI,CAAC;oBACjB,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,MAAM;iBACjB,CAAC,CAAC;gBACH,WAAW,GAAG,CAAC,CAAC;YACpB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACX,IAAI,CAAC;oBACD,WAAW,EAAE,CAAC;oBACd,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;wBAC1B,EAAE,EAAE,gBAAK,CAAC,uCAAuC;wBACjD,OAAO,EAAE,yBAAyB;wBAClC,OAAO,EAAE,gCAAgC,WAAW,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;qBAC/G,CAAC,CAAC;oBAEH,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;wBAClB,aAAa,CAAC,aAAa,CAAC,CAAC;wBAC7B,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;oBAC5B,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACL,kEAAkE;oBAClE,2BAA2B;gBAC/B,CAAC;YACL,CAAC;QACL,CAAC,EAAE,KAAM,CAAC,CAAC;QAEX,SAAS,CAAC,OAAO,GAAG,GAAS,EAAE;YAC3B,aAAa,CAAC,aAAa,CAAC,CAAC;YAE7B,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBAC3B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;oBACd,EAAE,EAAE,gBAAK,CAAC,mCAAmC;oBAC7C,OAAO,EAAE,yBAAyB;oBAClC,OAAO,EAAE,yBAAyB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;iBAC7F,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;QACP,CAAC,CAAC;QAEF,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAEhC,IAAI,wBAAwB,EAAE,CAAC;YAC3B,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;IAEO,iBAAiB,CACrB,EAA8F;QAE9F,OAAO,CAAC,GAAoB,EAAE,GAAqB,EAAE,IAA0B,EAAQ,EAAE;YACrF,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;oBACd,EAAE,EAAE,gBAAK,CAAC,qCAAqC;oBAC/C,OAAO,EAAE,yBAAyB;oBAClC,OAAO,EAAE,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;iBAC/F,CAAC,CAAC;gBACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACjB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACH,IAAI,EAAE,6CAA6C;wBACnD,OAAO,EAAE,0BAA0B;wBACnC,IAAI,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC/D;iBACJ,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;QACP,CAAC,CAAC;IACN,CAAC;CACJ;AAvTD,sCAuTC"}

package/dist/cjs/transports/streamableHttp/streamableHttpRunner.d.ts

@@ -0,0 +1,32 @@
+import { TransportRunnerBase, type TransportRunnerConfig, type RequestContext, type CustomizableSessionOptions } from "../base.js";
+import type { CustomizableServerOptions, ISessionStore, Server, UserConfig } from "../../lib.js";
+export declare class StreamableHttpRunner<TUserConfig extends UserConfig = UserConfig, TContext = unknown> extends TransportRunnerBase<TUserConfig, TContext> {
+    private mcpServer;
+    private healthCheckServer;
+    constructor(config: TransportRunnerConfig<TUserConfig>);
+    /** Starts the transport runner. */
+    start({ serverOptions, sessionOptions, sessionStore, }?: {
+        /** Server options to use when creating the server. */
+        serverOptions?: CustomizableServerOptions<TUserConfig, TContext>;
+        /** Session options to use when creating the session. */
+        sessionOptions?: CustomizableSessionOptions<TUserConfig>;
+        /** Session Store implementation to use when storing sessionId to transport mappings. */
+        sessionStore?: ISessionStore;
+    }): Promise<void>;
+    closeTransport(): Promise<void>;
+    private shouldWarnAboutHttpHost;
+    /**
+     * Creates a new MCP server instance for a given request.
+     */
+    protected createServerForRequest({ request, serverOptions, sessionOptions, }: {
+        request: RequestContext;
+        /** Upstream `serverOptions` passed from running `runner.start({ serverOptions })` method */
+        serverOptions?: CustomizableServerOptions<TUserConfig, TContext>;
+        /** Upstream `sessionOptions` passed from running `runner.start({ sessionOptions })` method */
+        sessionOptions?: CustomizableSessionOptions<TUserConfig>;
+    }): Promise<Server<TUserConfig, TContext>>;
+    private startMCPServer;
+    private startHealthCheckServer;
+    private validateConfig;
+}
+//# sourceMappingURL=streamableHttpRunner.d.ts.map

package/dist/cjs/transports/streamableHttp/streamableHttpRunner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"streamableHttpRunner.d.ts","sourceRoot":"","sources":["../../../../src/transports/streamableHttp/streamableHttpRunner.ts"],"names":[],"mappings":"AACA,OAAO,EACH,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,0BAA0B,EAClC,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,yBAAyB,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAKjG,qBAAa,oBAAoB,CAC7B,WAAW,SAAS,UAAU,GAAG,UAAU,EAC3C,QAAQ,GAAG,OAAO,CACpB,SAAQ,mBAAmB,CAAC,WAAW,EAAE,QAAQ,CAAC;IAChD,OAAO,CAAC,SAAS,CAAmD;IACpE,OAAO,CAAC,iBAAiB,CAAgC;gBAE7C,MAAM,EAAE,qBAAqB,CAAC,WAAW,CAAC;IAItD,mCAAmC;IAC7B,KAAK,CAAC,EACR,aAAa,EACb,cAAc,EACd,YAAY,GACf,GAAE;QACC,sDAAsD;QACtD,aAAa,CAAC,EAAE,yBAAyB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACjE,wDAAwD;QACxD,cAAc,CAAC,EAAE,0BAA0B,CAAC,WAAW,CAAC,CAAC;QACzD,wFAAwF;QACxF,YAAY,CAAC,EAAE,aAAa,CAAC;KAC3B,GAAG,OAAO,CAAC,IAAI,CAAC;IAahB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAIrC,OAAO,CAAC,uBAAuB;IAM/B;;OAEG;cACa,sBAAsB,CAAC,EACnC,OAAO,EACP,aAAa,EACb,cAAc,GACjB,EAAE;QACC,OAAO,EAAE,cAAc,CAAC;QACxB,4FAA4F;QAC5F,aAAa,CAAC,EAAE,yBAAyB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACjE,8FAA8F;QAC9F,cAAc,CAAC,EAAE,0BAA0B,CAAC,WAAW,CAAC,CAAC;KAC5D,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YAgD5B,cAAc;YA6Bd,sBAAsB;IASpC,OAAO,CAAC,cAAc;CAoBzB"}

package/dist/cjs/transports/streamableHttp/streamableHttpRunner.js

@@ -0,0 +1,117 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StreamableHttpRunner = void 0;
+const index_js_1 = require("../../common/logging/index.js");
+const base_js_1 = require("../base.js");
+const configOverrides_js_1 = require("../../common/config/configOverrides.js");
+const healthCheckServer_js_1 = require("./httpServers/healthCheckServer.js");
+const mcpHttpServer_js_1 = require("./httpServers/mcpHttpServer.js");
+class StreamableHttpRunner extends base_js_1.TransportRunnerBase {
+    constructor(config) {
+        super(config);
+    }
+    /** Starts the transport runner. */
+    async start({ serverOptions, sessionOptions, sessionStore, } = {}) {
+        this.validateConfig();
+        await this.startMCPServer({ serverOptions, sessionOptions, sessionStore });
+        await this.startHealthCheckServer();
+        this.logger.info({
+            message: "Streamable HTTP Transport started",
+            context: "streamableHttpTransport",
+            id: index_js_1.LogId.streamableHttpTransportStarted,
+        });
+    }
+    async closeTransport() {
+        await Promise.all([this.mcpServer?.stop(), this.healthCheckServer?.stop()]);
+    }
+    shouldWarnAboutHttpHost(httpHost) {
+        const host = httpHost.trim();
+        const safeHosts = new Set(["127.0.0.1", "localhost", "::1"]);
+        return host === "0.0.0.0" || host === "::" || (!safeHosts.has(host) && host !== "");
+    }
+    /**
+     * Creates a new MCP server instance for a given request.
+     */
+    async createServerForRequest({ request, serverOptions, sessionOptions, }) {
+        let userConfig = sessionOptions?.userConfig ?? this.userConfig;
+        if (this.createSessionConfig) {
+            userConfig = await this.createSessionConfig({ userConfig, request });
+        }
+        else {
+            userConfig = (0, configOverrides_js_1.applyConfigOverrides)({ baseConfig: userConfig, request });
+        }
+        const logger = new index_js_1.CompositeLogger(this.logger);
+        return this.createServer({
+            userConfig,
+            logger,
+            serverOptions: {
+                tools: this.tools,
+                ...serverOptions,
+            },
+            sessionOptions: {
+                ...sessionOptions,
+                connectionErrorHandler: sessionOptions?.connectionErrorHandler ?? this.connectionErrorHandler,
+                connectionManager: sessionOptions?.connectionManager ??
+                    (await this.createConnectionManager({
+                        logger,
+                        deviceId: this.deviceId,
+                        userConfig,
+                    })),
+                atlasLocalClient: sessionOptions?.atlasLocalClient ?? (await this.createAtlasLocalClient({ logger })),
+                apiClient: sessionOptions?.apiClient ??
+                    (userConfig.apiClientId && userConfig.apiClientSecret
+                        ? this.createApiClient({
+                            baseUrl: userConfig.apiBaseUrl,
+                            credentials: {
+                                clientId: userConfig.apiClientId,
+                                clientSecret: userConfig.apiClientSecret,
+                            },
+                            requestContext: request,
+                        }, logger)
+                        : undefined),
+            },
+        });
+    }
+    async startMCPServer({ serverOptions, sessionOptions, sessionStore, }) {
+        this.mcpServer = new mcpHttpServer_js_1.MCPHttpServer({
+            userConfig: this.userConfig,
+            serverOptions,
+            sessionOptions,
+            sessionStore,
+            createServerForRequest: ({ request, serverOptions: requestServerOptions, sessionOptions: requestSessionOptions, }) => this.createServerForRequest({
+                request,
+                serverOptions: requestServerOptions,
+                sessionOptions: requestSessionOptions,
+            }),
+            logger: this.logger,
+        });
+        await this.mcpServer.start();
+    }
+    async startHealthCheckServer() {
+        const { healthCheckHost, healthCheckPort } = this.userConfig;
+        if (healthCheckHost && healthCheckPort !== undefined) {
+            this.healthCheckServer = new healthCheckServer_js_1.HealthCheckServer(healthCheckHost, healthCheckPort, this.logger);
+            await this.healthCheckServer.start();
+        }
+    }
+    validateConfig() {
+        if ((this.userConfig.healthCheckHost === undefined) !== (this.userConfig.healthCheckPort === undefined)) {
+            throw new Error("Both healthCheckHost and healthCheckPort must be defined to enable health checks.");
+        }
+        if (this.userConfig.healthCheckHost !== undefined && this.userConfig.healthCheckPort !== undefined) {
+            if (this.userConfig.healthCheckPort === this.userConfig.httpPort && this.userConfig.healthCheckPort !== 0) {
+                throw new Error("healthCheckPort cannot be the same as httpPort.");
+            }
+        }
+        if (this.shouldWarnAboutHttpHost(this.userConfig.httpHost)) {
+            this.logger.warning({
+                id: index_js_1.LogId.streamableHttpTransportHttpHostWarning,
+                context: "streamableHttpTransport",
+                message: `Binding to ${this.userConfig.httpHost} can expose the MCP Server to the entire local network, which allows other devices on the same network to potentially access the MCP Server. This is a security risk and could allow unauthorized access to your database context.`,
+                noRedaction: true,
+            });
+        }
+    }
+}
+exports.StreamableHttpRunner = StreamableHttpRunner;
+//# sourceMappingURL=streamableHttpRunner.js.map

package/dist/cjs/transports/streamableHttp/streamableHttpRunner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"streamableHttpRunner.js","sourceRoot":"","sources":["../../../../src/transports/streamableHttp/streamableHttpRunner.ts"],"names":[],"mappings":";;;AAAA,4DAAuE;AACvE,wCAKoB;AAEpB,+EAA8E;AAC9E,6EAAuE;AACvE,qEAA+D;AAE/D,MAAa,oBAGX,SAAQ,6BAA0C;IAIhD,YAAY,MAA0C;QAClD,KAAK,CAAC,MAAM,CAAC,CAAC;IAClB,CAAC;IAED,mCAAmC;IACnC,KAAK,CAAC,KAAK,CAAC,EACR,aAAa,EACb,cAAc,EACd,YAAY,MAQZ,EAAE;QACF,IAAI,CAAC,cAAc,EAAE,CAAC;QAEtB,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;QAC3E,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAEpC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACb,OAAO,EAAE,mCAAmC;YAC5C,OAAO,EAAE,yBAAyB;YAClC,EAAE,EAAE,gBAAK,CAAC,8BAA8B;SAC3C,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,cAAc;QAChB,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAChF,CAAC;IAEO,uBAAuB,CAAC,QAAgB;QAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7D,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;IACxF,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,sBAAsB,CAAC,EACnC,OAAO,EACP,aAAa,EACb,cAAc,GAOjB;QACG,IAAI,UAAU,GAAgB,cAAc,EAAE,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC;QAE5E,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC3B,UAAU,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QACzE,CAAC;aAAM,CAAC;YACJ,UAAU,GAAG,IAAA,yCAAoB,EAAC,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,0BAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEhD,OAAO,IAAI,CAAC,YAAY,CAAC;YACrB,UAAU;YACV,MAAM;YACN,aAAa,EAAE;gBACX,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,GAAG,aAAa;aACnB;YACD,cAAc,EAAE;gBACZ,GAAG,cAAc;gBACjB,sBAAsB,EAAE,cAAc,EAAE,sBAAsB,IAAI,IAAI,CAAC,sBAAsB;gBAC7F,iBAAiB,EACb,cAAc,EAAE,iBAAiB;oBACjC,CAAC,MAAM,IAAI,CAAC,uBAAuB,CAAC;wBAChC,MAAM;wBACN,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,UAAU;qBACb,CAAC,CAAC;gBACP,gBAAgB,EAAE,cAAc,EAAE,gBAAgB,IAAI,CAAC,MAAM,IAAI,CAAC,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;gBACrG,SAAS,EACL,cAAc,EAAE,SAAS;oBACzB,CAAC,UAAU,CAAC,WAAW,IAAI,UAAU,CAAC,eAAe;wBACjD,CAAC,CAAC,IAAI,CAAC,eAAe,CAChB;4BACI,OAAO,EAAE,UAAU,CAAC,UAAU;4BAC9B,WAAW,EAAE;gCACT,QAAQ,EAAE,UAAU,CAAC,WAAW;gCAChC,YAAY,EAAE,UAAU,CAAC,eAAe;6BAC3C;4BACD,cAAc,EAAE,OAAO;yBAC1B,EACD,MAAM,CACT;wBACH,CAAC,CAAC,SAAS,CAAC;aACvB;SACJ,CAAC,CAAC;IACP,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,EACzB,aAAa,EACb,cAAc,EACd,YAAY,GAKf;QACG,IAAI,CAAC,SAAS,GAAG,IAAI,gCAAa,CAAwB;YACtD,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,aAAa;YACb,cAAc;YACd,YAAY;YACZ,sBAAsB,EAAE,CAAC,EACrB,OAAO,EACP,aAAa,EAAE,oBAAoB,EACnC,cAAc,EAAE,qBAAqB,GACxC,EAA0C,EAAE,CACzC,IAAI,CAAC,sBAAsB,CAAC;gBACxB,OAAO;gBACP,aAAa,EAAE,oBAAoB;gBACnC,cAAc,EAAE,qBAAqB;aACxC,CAAC;YACN,MAAM,EAAE,IAAI,CAAC,MAAM;SACtB,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,sBAAsB;QAChC,MAAM,EAAE,eAAe,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC;QAC7D,IAAI,eAAe,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YACnD,IAAI,CAAC,iBAAiB,GAAG,IAAI,wCAAiB,CAAC,eAAe,EAAE,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAE9F,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;QACzC,CAAC;IACL,CAAC;IAEO,cAAc;QAClB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,KAAK,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,KAAK,SAAS,CAAC,EAAE,CAAC;YACtG,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;QACzG,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACjG,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,KAAK,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,KAAK,CAAC,EAAE,CAAC;gBACxG,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACvE,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;gBAChB,EAAE,EAAE,gBAAK,CAAC,sCAAsC;gBAChD,OAAO,EAAE,yBAAyB;gBAClC,OAAO,EAAE,cAAc,IAAI,CAAC,UAAU,CAAC,QAAQ,oOAAoO;gBACnR,WAAW,EAAE,IAAI;aACpB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;CACJ;AArKD,oDAqKC"}