@j0hanz/superfetch 2.1.4 → 2.1.5

package/dist/http/mcp-session-transport-init.js

@@ -1,41 +0,0 @@
-import { randomUUID } from 'node:crypto';
-import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
-import { config } from '../config/index.js';
-import { logWarn } from '../services/logger.js';
-import { getErrorMessage } from '../utils/error-details.js';
-function startSessionInitTimeout({ transport, tracker, clearInitTimeout, timeoutMs, }) {
-    if (timeoutMs <= 0)
-        return null;
-    const timeout = setTimeout(() => {
-        clearInitTimeout();
-        if (tracker.isInitialized())
-            return;
-        tracker.releaseSlot();
-        void transport.close().catch((error) => {
-            logWarn('Failed to close stalled session', {
-                error: getErrorMessage(error),
-            });
-        });
-        logWarn('Session initialization timed out', { timeoutMs });
-    }, timeoutMs);
-    timeout.unref();
-    return timeout;
-}
-export function createSessionTransport({ tracker, timeoutController, }) {
-    const transport = new StreamableHTTPServerTransport({
-        sessionIdGenerator: () => randomUUID(),
-    });
-    transport.onclose = () => {
-        timeoutController.clear();
-        if (!tracker.isInitialized()) {
-            tracker.releaseSlot();
-        }
-    };
-    timeoutController.set(startSessionInitTimeout({
-        transport,
-        tracker,
-        clearInitTimeout: timeoutController.clear,
-        timeoutMs: config.server.sessionInitTimeoutMs,
-    }));
-    return transport;
-}

package/dist/http/mcp-session-transport.d.ts

@@ -1,7 +0,0 @@
-import type { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
-import type { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';
-export declare function createTimeoutController(): {
-    clear: () => void;
-    set: (timeout: NodeJS.Timeout | null) => void;
-};
-export declare function createTransportAdapter(transport: StreamableHTTPServerTransport): Transport;

package/dist/http/mcp-session-transport.js

@@ -1,57 +0,0 @@
-export function createTimeoutController() {
-    let initTimeout = null;
-    return {
-        clear: () => {
-            if (!initTimeout)
-                return;
-            clearTimeout(initTimeout);
-            initTimeout = null;
-        },
-        set: (timeout) => {
-            initTimeout = timeout;
-        },
-    };
-}
-export function createTransportAdapter(transport) {
-    const adapter = buildTransportAdapter(transport);
-    attachTransportAccessors(adapter, transport);
-    return adapter;
-}
-function buildTransportAdapter(transport) {
-    return {
-        start: () => transport.start(),
-        send: (message, options) => transport.send(message, options),
-        close: () => transport.close(),
-    };
-}
-function createAccessorDescriptor(getter, setter) {
-    return {
-        get: getter,
-        ...(setter ? { set: setter } : {}),
-        enumerable: true,
-        configurable: true,
-    };
-}
-function createOnCloseDescriptor(transport) {
-    return createAccessorDescriptor(() => transport.onclose, (handler) => {
-        transport.onclose = handler;
-    });
-}
-function createOnErrorDescriptor(transport) {
-    return createAccessorDescriptor(() => transport.onerror, (handler) => {
-        transport.onerror = handler;
-    });
-}
-function createOnMessageDescriptor(transport) {
-    return createAccessorDescriptor(() => transport.onmessage, (handler) => {
-        transport.onmessage = handler;
-    });
-}
-function attachTransportAccessors(adapter, transport) {
-    Object.defineProperties(adapter, {
-        onclose: createOnCloseDescriptor(transport),
-        onerror: createOnErrorDescriptor(transport),
-        onmessage: createOnMessageDescriptor(transport),
-        sessionId: createAccessorDescriptor(() => transport.sessionId),
-    });
-}

package/dist/http/mcp-session-types.d.ts

@@ -1,5 +0,0 @@
-import type { SessionStore } from './sessions.js';
-export interface McpSessionOptions {
-    readonly sessionStore: SessionStore;
-    readonly maxSessions: number;
-}

package/dist/http/mcp-session-types.js

@@ -1 +0,0 @@
-export {};

package/dist/http/mcp-session.d.ts

@@ -1,10 +0,0 @@
-import type { Response } from 'express';
-import type { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
-import type { McpRequestBody } from '../config/types/runtime.js';
-import type { McpSessionOptions } from './mcp-session-types.js';
-export declare function resolveTransportForPost({ res, body, sessionId, options, }: {
-    res: Response;
-    body: McpRequestBody;
-    sessionId: string | undefined;
-    options: McpSessionOptions;
-}): Promise<StreamableHTTPServerTransport | null>;

package/dist/http/mcp-session.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-session.d.ts","sourceRoot":"","sources":["../../src/http/mcp-session.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEjD,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAInG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAejE,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AA2KD,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,cAAc,EACpB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,6BAA6B,GAAG,IAAI,CAAC,CAa/C;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAUhE"}

package/dist/http/mcp-session.js

@@ -1,23 +0,0 @@
-import { isInitializeRequest } from '@modelcontextprotocol/sdk/types.js';
-import { sendJsonRpcError } from './jsonrpc-http.js';
-import { evictExpiredSessions } from './mcp-session-eviction.js';
-import { createAndConnectTransport } from './mcp-session-init.js';
-import { respondBadRequest } from './mcp-session-slots.js';
-export async function resolveTransportForPost({ res, body, sessionId, options, }) {
-    if (sessionId) {
-        const existingSession = options.sessionStore.get(sessionId);
-        if (existingSession) {
-            options.sessionStore.touch(sessionId);
-            return existingSession.transport;
-        }
-        // Client supplied a session id but it doesn't exist; Streamable HTTP: invalid session IDs => 404.
-        sendJsonRpcError(res, -32600, 'Session not found', 404);
-        return null;
-    }
-    if (!isInitializeRequest(body)) {
-        respondBadRequest(res);
-        return null;
-    }
-    evictExpiredSessions(options.sessionStore);
-    return createAndConnectTransport({ options, res });
-}

package/dist/http/mcp-session.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-session.js","sourceRoot":"","sources":["../../src/http/mcp-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAEzE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAG5C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAEnE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,GAElB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAqB,MAAM,eAAe,CAAC;AAOlD,SAAS,uBAAuB,CAC9B,SAAwC,EACxC,OAAoB,EACpB,gBAA4B,EAC5B,SAAiB;IAEjB,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEhC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;QAC9B,gBAAgB,EAAE,CAAC;QACnB,IAAI,OAAO,CAAC,aAAa,EAAE;YAAE,OAAO;QAEpC,OAAO,CAAC,WAAW,EAAE,CAAC;QACtB,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC9C,OAAO,CAAC,iCAAiC,EAAE;gBACzC,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC;aAC9B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,kCAAkC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7D,CAAC,EAAE,SAAS,CAAC,CAAC;IAEd,OAAO,CAAC,KAAK,EAAE,CAAC;IAChB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,wBAAwB,CAC/B,EAAU,EACV,SAAwC,EACxC,OAA0B,EAC1B,OAAoB,EACpB,gBAA4B;IAE5B,gBAAgB,EAAE,CAAC;IACnB,OAAO,CAAC,eAAe,EAAE,CAAC;IAC1B,OAAO,CAAC,WAAW,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE;QAC3B,SAAS;QACT,SAAS,EAAE,GAAG;QACd,QAAQ,EAAE,GAAG;KACd,CAAC,CAAC;IACH,OAAO,CAAC,qBAAqB,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,mBAAmB,CAAC,EAAU,EAAE,OAA0B;IACjE,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAChC,OAAO,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,oBAAoB,CAC3B,SAAwC,EACxC,OAA0B,EAC1B,OAAoB,EACpB,gBAA4B;IAE5B,gBAAgB,EAAE,CAAC;IACnB,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;QAC7B,OAAO,CAAC,WAAW,EAAE,CAAC;IACxB,CAAC;IACD,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;QACxB,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CAAC,OAA0B;IAK9D,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IACpC,IAAI,WAAW,GAA0B,IAAI,CAAC;IAC9C,MAAM,gBAAgB,GAAG,GAAS,EAAE;QAClC,IAAI,CAAC,WAAW;YAAE,OAAO;QACzB,YAAY,CAAC,WAAW,CAAC,CAAC;QAC1B,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;QAClD,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;QACtC,oBAAoB,EAAE,CAAC,EAAE,EAAE,EAAE;YAC3B,wBAAwB,CACtB,EAAE,EACF,SAAS,EACT,OAAO,EACP,OAAO,EACP,gBAAgB,CACjB,CAAC;QACJ,CAAC;QACD,eAAe,EAAE,CAAC,EAAE,EAAE,EAAE;YACtB,mBAAmB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACnC,CAAC;KACF,CAAC,CAAC;IAEH,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;QACvB,oBAAoB,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;IACtE,CAAC,CAAC;IAEF,WAAW,GAAG,uBAAuB,CACnC,SAAS,EACT,OAAO,EACP,gBAAgB,EAChB,MAAM,CAAC,MAAM,CAAC,oBAAoB,CACnC,CAAC;IAEF,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,gBAAgB,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,qBAAqB,CAC5B,SAA6B,EAC7B,OAA0B;IAE1B,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC5D,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtC,OAAO,eAAe,CAAC,SAAS,CAAC;AACnC,CAAC;AAED,SAAS,uBAAuB,CAC9B,SAA6B,EAC7B,IAAoB;IAEpB,OAAO,CAAC,SAAS,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,OAA0B,EAC1B,GAAa;IAEb,IACE,CAAC,qBAAqB,CACpB,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,WAAW,EACnB,GAAG,EACH,kBAAkB,CACnB,EACD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACnE,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB,EAAE,GAChD,4BAA4B,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC;IAEpC,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,gBAAgB,EAAE,CAAC;QACnB,WAAW,EAAE,CAAC;QACd,QAAQ,CACN,kCAAkC,EAClC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC3C,CAAC;QACF,MAAM,KAAK,CAAC;IACd,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAa,EACb,GAAa,EACb,IAAoB,EACpB,SAA6B,EAC7B,OAA0B;IAE1B,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACpE,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,IAAI,CAAC,uBAAuB,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC;QAC9C,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,oBAAoB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC3C,OAAO,yBAAyB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAmB;IACtD,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;IACrC,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;QAC9B,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACtD,OAAO,CAAC,iCAAiC,EAAE;gBACzC,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC;aAC9B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC;AACxB,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAmB;IAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QACtD,OAAO,CAAC,iCAAiC,EAAE;YACzC,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/http/mcp-sessions.d.ts

@@ -1,41 +0,0 @@
-import type { Request, Response } from 'express';
-import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
-import type { McpRequestBody, SessionEntry } from '../config/types/runtime.js';
-export interface SessionStore {
-    get: (sessionId: string) => SessionEntry | undefined;
-    touch: (sessionId: string) => void;
-    set: (sessionId: string, entry: SessionEntry) => void;
-    remove: (sessionId: string) => SessionEntry | undefined;
-    size: () => number;
-    clear: () => SessionEntry[];
-    evictExpired: () => SessionEntry[];
-    evictOldest: () => SessionEntry | undefined;
-}
-export interface McpSessionOptions {
-    readonly sessionStore: SessionStore;
-    readonly maxSessions: number;
-}
-export declare function sendJsonRpcError(res: Response, code: number, message: string, status?: number, id?: string | number | null): void;
-export declare function getSessionId(req: Request): string | undefined;
-export declare function createSessionStore(sessionTtlMs: number): SessionStore;
-export declare function reserveSessionSlot(store: SessionStore, maxSessions: number): boolean;
-interface SlotTracker {
-    readonly releaseSlot: () => void;
-    readonly markInitialized: () => void;
-    readonly isInitialized: () => boolean;
-}
-export declare function createSlotTracker(): SlotTracker;
-export declare function ensureSessionCapacity({ store, maxSessions, res, evictOldest, }: {
-    store: SessionStore;
-    maxSessions: number;
-    res: Response;
-    evictOldest: (store: SessionStore) => boolean;
-}): boolean;
-export declare function resolveTransportForPost({ res, body, sessionId, options, }: {
-    res: Response;
-    body: Pick<McpRequestBody, 'method' | 'id'>;
-    sessionId: string | undefined;
-    options: McpSessionOptions;
-}): Promise<StreamableHTTPServerTransport | null>;
-export declare function startSessionCleanupLoop(store: SessionStore, sessionTtlMs: number): AbortController;
-export {};

package/dist/http/mcp-sessions.js

@@ -1,392 +0,0 @@
-import { randomUUID } from 'node:crypto';
-import { setInterval as setIntervalPromise } from 'node:timers/promises';
-import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
-import { isInitializeRequest } from '@modelcontextprotocol/sdk/types.js';
-import { config } from '../config/index.js';
-import { logError, logInfo, logWarn } from '../services/logger.js';
-import { getErrorMessage } from '../utils/error-details.js';
-import { createMcpServer } from '../server.js';
-export function sendJsonRpcError(res, code, message, status = 400, id = null) {
-    res.status(status).json({
-        jsonrpc: '2.0',
-        error: {
-            code,
-            message,
-        },
-        id,
-    });
-}
-export function getSessionId(req) {
-    const header = req.headers['mcp-session-id'];
-    return Array.isArray(header) ? header[0] : header;
-}
-export function createSessionStore(sessionTtlMs) {
-    const sessions = new Map();
-    return {
-        get: (sessionId) => sessions.get(sessionId),
-        touch: (sessionId) => {
-            touchSession(sessions, sessionId);
-        },
-        set: (sessionId, entry) => {
-            sessions.set(sessionId, entry);
-        },
-        remove: (sessionId) => removeSession(sessions, sessionId),
-        size: () => sessions.size,
-        clear: () => clearSessions(sessions),
-        evictExpired: () => evictExpiredSessions(sessions, sessionTtlMs),
-        evictOldest: () => evictOldestSession(sessions),
-    };
-}
-function touchSession(sessions, sessionId) {
-    const session = sessions.get(sessionId);
-    if (session) {
-        session.lastSeen = Date.now();
-    }
-}
-function removeSession(sessions, sessionId) {
-    const session = sessions.get(sessionId);
-    sessions.delete(sessionId);
-    return session;
-}
-function clearSessions(sessions) {
-    const entries = Array.from(sessions.values());
-    sessions.clear();
-    return entries;
-}
-function evictExpiredSessions(sessions, sessionTtlMs) {
-    const now = Date.now();
-    const evicted = [];
-    for (const [id, session] of sessions.entries()) {
-        if (now - session.lastSeen > sessionTtlMs) {
-            sessions.delete(id);
-            evicted.push(session);
-        }
-    }
-    return evicted;
-}
-function evictOldestSession(sessions) {
-    let oldestId;
-    let oldestSeen = Number.POSITIVE_INFINITY;
-    for (const [id, session] of sessions.entries()) {
-        if (session.lastSeen < oldestSeen) {
-            oldestSeen = session.lastSeen;
-            oldestId = id;
-        }
-    }
-    if (!oldestId)
-        return undefined;
-    const session = sessions.get(oldestId);
-    sessions.delete(oldestId);
-    return session;
-}
-let inFlightSessions = 0;
-export function reserveSessionSlot(store, maxSessions) {
-    if (store.size() + inFlightSessions >= maxSessions) {
-        return false;
-    }
-    inFlightSessions += 1;
-    return true;
-}
-function releaseSessionSlot() {
-    if (inFlightSessions > 0) {
-        inFlightSessions -= 1;
-    }
-}
-export function createSlotTracker() {
-    let slotReleased = false;
-    let initialized = false;
-    return {
-        releaseSlot: () => {
-            if (slotReleased)
-                return;
-            slotReleased = true;
-            releaseSessionSlot();
-        },
-        markInitialized: () => {
-            initialized = true;
-        },
-        isInitialized: () => initialized,
-    };
-}
-function isServerAtCapacity(store, maxSessions) {
-    return store.size() + inFlightSessions >= maxSessions;
-}
-function tryEvictSlot(store, maxSessions, evictOldest) {
-    const currentSize = store.size();
-    const canFreeSlot = currentSize >= maxSessions &&
-        currentSize - 1 + inFlightSessions < maxSessions;
-    return canFreeSlot && evictOldest(store);
-}
-export function ensureSessionCapacity({ store, maxSessions, res, evictOldest, }) {
-    if (!isServerAtCapacity(store, maxSessions)) {
-        return true;
-    }
-    if (tryEvictSlot(store, maxSessions, evictOldest)) {
-        return !isServerAtCapacity(store, maxSessions);
-    }
-    respondServerBusy(res);
-    return false;
-}
-function respondServerBusy(res) {
-    sendJsonRpcError(res, -32000, 'Server busy: maximum sessions reached', 503, null);
-}
-function respondBadRequest(res, id) {
-    sendJsonRpcError(res, -32000, 'Bad Request: Missing session ID or not an initialize request', 400, id);
-}
-function createTimeoutController() {
-    let initTimeout = null;
-    return {
-        clear: () => {
-            if (!initTimeout)
-                return;
-            clearTimeout(initTimeout);
-            initTimeout = null;
-        },
-        set: (timeout) => {
-            initTimeout = timeout;
-        },
-    };
-}
-function createTransportAdapter(transport) {
-    const adapter = buildTransportAdapter(transport);
-    attachTransportAccessors(adapter, transport);
-    return adapter;
-}
-function buildTransportAdapter(transport) {
-    return {
-        start: () => transport.start(),
-        send: (message, options) => transport.send(message, options),
-        close: () => transport.close(),
-    };
-}
-function createAccessorDescriptor(getter, setter) {
-    return {
-        get: getter,
-        ...(setter ? { set: setter } : {}),
-        enumerable: true,
-        configurable: true,
-    };
-}
-function createOnCloseDescriptor(transport) {
-    return createAccessorDescriptor(() => transport.onclose, (handler) => {
-        transport.onclose = handler;
-    });
-}
-function createOnErrorDescriptor(transport) {
-    return createAccessorDescriptor(() => transport.onerror, (handler) => {
-        transport.onerror = handler;
-    });
-}
-function createOnMessageDescriptor(transport) {
-    return createAccessorDescriptor(() => transport.onmessage, (handler) => {
-        transport.onmessage = handler;
-    });
-}
-function attachTransportAccessors(adapter, transport) {
-    Object.defineProperties(adapter, {
-        onclose: createOnCloseDescriptor(transport),
-        onerror: createOnErrorDescriptor(transport),
-        onmessage: createOnMessageDescriptor(transport),
-        sessionId: createAccessorDescriptor(() => transport.sessionId),
-    });
-}
-function startSessionInitTimeout({ transport, tracker, clearInitTimeout, timeoutMs, }) {
-    if (timeoutMs <= 0)
-        return null;
-    const timeout = setTimeout(() => {
-        clearInitTimeout();
-        if (tracker.isInitialized())
-            return;
-        tracker.releaseSlot();
-        void transport.close().catch((error) => {
-            logWarn('Failed to close stalled session', {
-                error: getErrorMessage(error),
-            });
-        });
-        logWarn('Session initialization timed out', { timeoutMs });
-    }, timeoutMs);
-    timeout.unref();
-    return timeout;
-}
-function createSessionTransport({ tracker, timeoutController, }) {
-    const transport = new StreamableHTTPServerTransport({
-        sessionIdGenerator: () => randomUUID(),
-    });
-    transport.onclose = () => {
-        timeoutController.clear();
-        if (!tracker.isInitialized()) {
-            tracker.releaseSlot();
-        }
-    };
-    timeoutController.set(startSessionInitTimeout({
-        transport,
-        tracker,
-        clearInitTimeout: timeoutController.clear,
-        timeoutMs: config.server.sessionInitTimeoutMs,
-    }));
-    return transport;
-}
-async function connectTransportOrThrow({ transport, clearInitTimeout, releaseSlot, }) {
-    const mcpServer = createMcpServer();
-    const transportAdapter = createTransportAdapter(transport);
-    try {
-        await mcpServer.connect(transportAdapter);
-    }
-    catch (error) {
-        clearInitTimeout();
-        releaseSlot();
-        void transport.close().catch((closeError) => {
-            logWarn('Failed to close transport after connect error', {
-                error: getErrorMessage(closeError),
-            });
-        });
-        logError('Failed to initialize MCP session', error instanceof Error ? error : undefined);
-        throw error;
-    }
-}
-function evictExpiredSessionsWithClose(store) {
-    const evicted = store.evictExpired();
-    for (const session of evicted) {
-        void session.transport.close().catch((error) => {
-            logWarn('Failed to close expired session', {
-                error: getErrorMessage(error),
-            });
-        });
-    }
-    return evicted.length;
-}
-function evictOldestSessionWithClose(store) {
-    const session = store.evictOldest();
-    if (!session)
-        return false;
-    void session.transport.close().catch((error) => {
-        logWarn('Failed to close evicted session', {
-            error: getErrorMessage(error),
-        });
-    });
-    return true;
-}
-function reserveSessionIfPossible({ options, res, }) {
-    if (!ensureSessionCapacity({
-        store: options.sessionStore,
-        maxSessions: options.maxSessions,
-        res,
-        evictOldest: evictOldestSessionWithClose,
-    })) {
-        return false;
-    }
-    if (!reserveSessionSlot(options.sessionStore, options.maxSessions)) {
-        respondServerBusy(res);
-        return false;
-    }
-    return true;
-}
-function resolveSessionId({ transport, res, tracker, clearInitTimeout, }) {
-    const { sessionId } = transport;
-    if (typeof sessionId !== 'string') {
-        clearInitTimeout();
-        tracker.releaseSlot();
-        respondBadRequest(res, null);
-        return null;
-    }
-    return sessionId;
-}
-function finalizeSession({ store, transport, sessionId, tracker, clearInitTimeout, }) {
-    clearInitTimeout();
-    tracker.markInitialized();
-    tracker.releaseSlot();
-    const now = Date.now();
-    store.set(sessionId, {
-        transport,
-        createdAt: now,
-        lastSeen: now,
-    });
-    transport.onclose = () => {
-        store.remove(sessionId);
-        logInfo('Session closed');
-    };
-    logInfo('Session initialized');
-}
-async function createAndConnectTransport({ options, res, }) {
-    if (!reserveSessionIfPossible({ options, res }))
-        return null;
-    const tracker = createSlotTracker();
-    const timeoutController = createTimeoutController();
-    const transport = createSessionTransport({ tracker, timeoutController });
-    await connectTransportOrThrow({
-        transport,
-        clearInitTimeout: timeoutController.clear,
-        releaseSlot: tracker.releaseSlot,
-    });
-    const sessionId = resolveSessionId({
-        transport,
-        res,
-        tracker,
-        clearInitTimeout: timeoutController.clear,
-    });
-    if (!sessionId)
-        return null;
-    finalizeSession({
-        store: options.sessionStore,
-        transport,
-        sessionId,
-        tracker,
-        clearInitTimeout: timeoutController.clear,
-    });
-    return transport;
-}
-export async function resolveTransportForPost({ res, body, sessionId, options, }) {
-    if (sessionId) {
-        const existingSession = options.sessionStore.get(sessionId);
-        if (existingSession) {
-            options.sessionStore.touch(sessionId);
-            return existingSession.transport;
-        }
-        // Client supplied a session id but it doesn't exist; Streamable HTTP: invalid session IDs => 404.
-        sendJsonRpcError(res, -32600, 'Session not found', 404, body.id ?? null);
-        return null;
-    }
-    if (!isInitializeRequest(body)) {
-        respondBadRequest(res, body.id ?? null);
-        return null;
-    }
-    evictExpiredSessionsWithClose(options.sessionStore);
-    return createAndConnectTransport({ options, res });
-}
-export function startSessionCleanupLoop(store, sessionTtlMs) {
-    const controller = new AbortController();
-    void runSessionCleanupLoop(store, sessionTtlMs, controller.signal).catch(handleSessionCleanupError);
-    return controller;
-}
-async function runSessionCleanupLoop(store, sessionTtlMs, signal) {
-    const intervalMs = getCleanupIntervalMs(sessionTtlMs);
-    for await (const getNow of setIntervalPromise(intervalMs, Date.now, {
-        signal,
-        ref: false,
-    })) {
-        handleSessionEvictions(store, getNow());
-    }
-}
-function getCleanupIntervalMs(sessionTtlMs) {
-    return Math.min(Math.max(Math.floor(sessionTtlMs / 2), 10000), 60000);
-}
-function isAbortError(error) {
-    return error instanceof Error && error.name === 'AbortError';
-}
-function handleSessionEvictions(store, now) {
-    const evicted = evictExpiredSessionsWithClose(store);
-    if (evicted > 0) {
-        logInfo('Expired sessions evicted', {
-            evicted,
-            timestamp: new Date(now).toISOString(),
-        });
-    }
-}
-function handleSessionCleanupError(error) {
-    if (isAbortError(error)) {
-        return;
-    }
-    logWarn('Session cleanup loop failed', {
-        error: error instanceof Error ? error.message : 'Unknown error',
-    });
-}

package/dist/http/mcp-validation.d.ts

@@ -1,3 +0,0 @@
-import type { McpRequestBody } from '../config/types/runtime.js';
-export declare function isJsonRpcBatchRequest(body: unknown): boolean;
-export declare function isMcpRequestBody(body: unknown): body is McpRequestBody;

package/dist/http/mcp-validation.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-validation.d.ts","sourceRoot":"","sources":["../../src/http/mcp-validation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAMjE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,cAAc,CAWtE"}

package/dist/http/mcp-validation.js

@@ -1,14 +0,0 @@
-import { z } from 'zod';
-const paramsSchema = z.looseObject({});
-const mcpRequestSchema = z.looseObject({
-    jsonrpc: z.literal('2.0'),
-    method: z.string().min(1),
-    id: z.union([z.string(), z.number()]).optional(),
-    params: paramsSchema.optional(),
-});
-export function isJsonRpcBatchRequest(body) {
-    return Array.isArray(body);
-}
-export function isMcpRequestBody(body) {
-    return mcpRequestSchema.safeParse(body).success;
-}

package/dist/http/mcp-validation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-validation.js","sourceRoot":"","sources":["../../src/http/mcp-validation.ts"],"names":[],"mappings":"AAEA,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAa;IAC5C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAElC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC7C,MAAM,WAAW,GAAG,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC;IACvE,MAAM,OAAO,GACX,EAAE,KAAK,SAAS,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,CAAC;IACvE,MAAM,YAAY,GAAG,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,CAAC;IAChE,MAAM,WAAW,GAAG,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC;IAEvE,OAAO,WAAW,IAAI,OAAO,IAAI,YAAY,IAAI,WAAW,CAAC;AAC/D,CAAC"}

package/dist/http/protocol-policy.d.ts

@@ -1,2 +0,0 @@
-import type { Request, Response } from 'express';
-export declare function ensureMcpProtocolVersionHeader(req: Request, res: Response): boolean;

package/dist/http/protocol-policy.js

@@ -1,31 +0,0 @@
-import { sendJsonRpcError } from './jsonrpc-http.js';
-const MCP_PROTOCOL_VERSION_HEADER = 'mcp-protocol-version';
-const MCP_PROTOCOL_VERSIONS = {
-    defaultVersion: '2025-03-26',
-    supported: new Set(['2025-03-26', '2025-11-25']),
-};
-function getHeaderValue(req, headerNameLower) {
-    const value = req.headers[headerNameLower];
-    if (typeof value === 'string')
-        return value;
-    if (Array.isArray(value))
-        return value[0] ?? null;
-    return null;
-}
-function setHeaderValue(req, headerNameLower, value) {
-    // Express exposes req.headers as a plain object, but the type is readonly-ish.
-    req.headers[headerNameLower] = value;
-}
-export function ensureMcpProtocolVersionHeader(req, res) {
-    const raw = getHeaderValue(req, MCP_PROTOCOL_VERSION_HEADER);
-    const version = raw?.trim();
-    if (!version) {
-        setHeaderValue(req, MCP_PROTOCOL_VERSION_HEADER, MCP_PROTOCOL_VERSIONS.defaultVersion);
-        return true;
-    }
-    if (!MCP_PROTOCOL_VERSIONS.supported.has(version)) {
-        sendJsonRpcError(res, -32600, `Unsupported MCP-Protocol-Version: ${version}`, 400);
-        return false;
-    }
-    return true;
-}

package/dist/http/rate-limit.d.ts

@@ -1,12 +0,0 @@
-import type { NextFunction, Request, Response } from 'express';
-import type { RateLimitEntry, RateLimiterOptions } from '../config/types/runtime.js';
-interface RateLimitConfig extends RateLimiterOptions {
-    enabled: boolean;
-}
-interface RateLimitMiddlewareResult {
-    middleware: (req: Request, res: Response, next: NextFunction) => void;
-    stop: () => void;
-    store: Map<string, RateLimitEntry>;
-}
-export declare function createRateLimitMiddleware(options: RateLimitConfig): RateLimitMiddlewareResult;
-export {};