@mcp-ts/sdk 2.4.2 → 2.4.3

package/dist/server/index.mjs

@@ -1666,12 +1666,12 @@ async function createStorage() {
   }
   if (type === "supabase") {
     const url = process.env.SUPABASE_URL;
-    const key = process.env.SUPABASE_SERVICE_ROLE_KEY || process.env.SUPABASE_ANON_KEY;
+    const key = process.env.SUPABASE_SECRET_KEY || process.env.SUPABASE_ANON_KEY;
     if (!url || !key) {
-      console.warn('[mcp-ts][Storage] Explicit selection "supabase" requires SUPABASE_URL and SUPABASE_SERVICE_ROLE_KEY.');
+      console.warn('[mcp-ts][Storage] Explicit selection "supabase" requires SUPABASE_URL and SUPABASE_SECRET_KEY.');
     } else {
-      if (!process.env.SUPABASE_SERVICE_ROLE_KEY) {
-        console.warn('[mcp-ts][Storage] \u26A0\uFE0F  Warning: Using "SUPABASE_ANON_KEY" for server-side storage. You may encounter RLS policy violations. "SUPABASE_SERVICE_ROLE_KEY" is recommended.');
+      if (!process.env.SUPABASE_SECRET_KEY) {
+        console.warn('[mcp-ts][Storage] \u26A0\uFE0F  Warning: Using "SUPABASE_ANON_KEY" for server-side storage. You may encounter RLS policy violations. "SUPABASE_SECRET_KEY" is recommended.');
       }
       try {
         const { createClient } = await import('@supabase/supabase-js');
@@ -1726,13 +1726,13 @@ async function createStorage() {
     console.log(`[mcp-ts][Storage] Auto-detection: "sqlite" (${process.env.MCP_TS_STORAGE_SQLITE_PATH})`);
     return await initializeStorage(new SqliteStorage({ path: process.env.MCP_TS_STORAGE_SQLITE_PATH }));
   }
-  if (process.env.SUPABASE_URL && (process.env.SUPABASE_SERVICE_ROLE_KEY || process.env.SUPABASE_ANON_KEY)) {
+  if (process.env.SUPABASE_URL && (process.env.SUPABASE_SECRET_KEY || process.env.SUPABASE_ANON_KEY)) {
     try {
       const { createClient } = await import('@supabase/supabase-js');
       const url = process.env.SUPABASE_URL;
-      const key = process.env.SUPABASE_SERVICE_ROLE_KEY || process.env.SUPABASE_ANON_KEY;
-      if (!process.env.SUPABASE_SERVICE_ROLE_KEY) {
-        console.warn('[mcp-ts][Storage] \u26A0\uFE0F Warning: Using "SUPABASE_ANON_KEY" for server-side storage. You may encounter RLS policy violations. "SUPABASE_SERVICE_ROLE_KEY" is recommended.');
+      const key = process.env.SUPABASE_SECRET_KEY || process.env.SUPABASE_ANON_KEY;
+      if (!process.env.SUPABASE_SECRET_KEY) {
+        console.warn('[mcp-ts][Storage] \u26A0\uFE0F Warning: Using "SUPABASE_ANON_KEY" for server-side storage. You may encounter RLS policy violations. "SUPABASE_SECRET_KEY" is recommended.');
       }
       const client = createClient(url, key);
       console.log('[mcp-ts][Storage] Auto-detection: "supabase" (via SUPABASE_URL)');
@@ -2230,7 +2230,6 @@ var MCPClient = class {
           const response = await fetch(url, { ...init, signal });
           const hasSessionHeader = init?.headers && new Headers(init.headers).has("mcp-session-id");
           if (response.status === 404 && hasSessionHeader) {
-            this.client = null;
             throw new Error("MCP_SESSION_EXPIRED: Downstream session was not found on the server.");
           }
           return response;
@@ -2611,7 +2610,9 @@ var MCPClient = class {
         method: "tools/list",
         params: {}
       };
-      const result = await this.client.request(request, ListToolsResultSchema);
+      const result = await this.withRetry(
+        () => this.client.request(request, ListToolsResultSchema)
+      );
       if (this.serverId) {
         this._onConnectionEvent.fire({
           type: "tools_discovered",
@@ -2651,7 +2652,9 @@ var MCPClient = class {
       }
     };
     try {
-      const result = await this.client.request(request, CallToolResultSchema);
+      const result = await this.withRetry(
+        () => this.client.request(request, CallToolResultSchema)
+      );
       this._onObservabilityEvent.fire({
         type: "mcp:client:tool_call",
         level: "info",
@@ -2703,7 +2706,9 @@ var MCPClient = class {
         method: "prompts/list",
         params: {}
       };
-      const result = await this.client.request(request, ListPromptsResultSchema);
+      const result = await this.withRetry(
+        () => this.client.request(request, ListPromptsResultSchema)
+      );
       this.emitStateChange("READY");
       this.emitProgress(`Discovered ${result.prompts.length} prompts`);
       return result;
@@ -2732,7 +2737,9 @@ var MCPClient = class {
         arguments: args
       }
     };
-    return await this.client.request(request, GetPromptResultSchema);
+    return await this.withRetry(
+      () => this.client.request(request, GetPromptResultSchema)
+    );
   }
   /**
    * Lists all available resources from the connected MCP server
@@ -2749,7 +2756,9 @@ var MCPClient = class {
         method: "resources/list",
         params: {}
       };
-      const result = await this.client.request(request, ListResourcesResultSchema);
+      const result = await this.withRetry(
+        () => this.client.request(request, ListResourcesResultSchema)
+      );
       this.emitStateChange("READY");
       this.emitProgress(`Discovered ${result.resources.length} resources`);
       return result;
@@ -2776,7 +2785,36 @@ var MCPClient = class {
         uri
       }
     };
-    return await this.client.request(request, ReadResourceResultSchema);
+    return await this.withRetry(
+      () => this.client.request(request, ReadResourceResultSchema)
+    );
+  }
+  /**
+   * Wraps an MCP request with automatic transport-session recovery.
+   *
+   * When the downstream MCP server rejects the request with a 404 indicating
+   * the transport session has expired, this method tears down the stale SDK
+   * client and transport, calls {@link reconnect} to negotiate a fresh session,
+   * and retries the request once.
+   *
+   * Non-transient errors (network failures, auth errors, etc.) propagate as-is.
+   */
+  async withRetry(fn) {
+    try {
+      return await fn();
+    } catch (error) {
+      if (!(error instanceof Error && error.message.includes("MCP_SESSION_EXPIRED"))) throw error;
+      if (this.client) {
+        try {
+          await this.client.close();
+        } catch {
+        }
+        this.transport = null;
+        this.client = null;
+      }
+      await this.reconnect();
+      return await fn();
+    }
   }
   /**
    * Reconnects to MCP server using existing OAuth provider from Redis
@@ -2789,6 +2827,12 @@ var MCPClient = class {
     if (!this.oauthProvider) {
       throw new Error("OAuth provider not initialized");
     }
+    if (this.client) {
+      try {
+        await this.client.close();
+      } catch {
+      }
+    }
     this.client = new Client(
       {
         name: MCP_CLIENT_NAME,
@@ -2984,6 +3028,18 @@ var MultiSessionClient = class {
   getClients() {
     return this.clients;
   }
+  /**
+   * Removes and disconnects a single session by ID.
+   *
+   * @returns `true` if the session was found and removed, `false` if not found.
+   */
+  async removeSession(sessionId) {
+    const idx = this.clients.findIndex((c) => c.getSessionId() === sessionId);
+    if (idx === -1) return false;
+    const [client] = this.clients.splice(idx, 1);
+    await client.disconnect();
+    return true;
+  }
   /**
    * Gracefully disconnects all active MCP clients and clears the internal list.
    *