@mongodb-js/mcp-http-runners 3.0.0-prerelease.1

package/dist/expressBasedHttpServer.d.ts

@@ -0,0 +1,28 @@
+import express from "express";
+import type http from "http";
+import type { ILogger, HttpServerOptions } from "@mongodb-js/mcp-types";
+export type ExpressBasedHttpServerOptions = {
+    logContext: string;
+    http: HttpServerOptions;
+};
+/**
+ * Base class for Express-based HTTP servers.
+ * Provides common functionality for starting and stopping HTTP servers.
+ */
+export declare abstract class ExpressBasedHttpServer {
+    protected httpServer: http.Server | undefined;
+    protected app: express.Express;
+    protected readonly logger: ILogger;
+    protected readonly logContext: string;
+    protected readonly httpOptions: HttpServerOptions;
+    constructor({ options, logger }: {
+        options: ExpressBasedHttpServerOptions;
+        logger: ILogger;
+    });
+    private checkHttpHost;
+    get serverAddress(): string;
+    protected abstract setupRoutes(): Promise<void>;
+    start(): Promise<void>;
+    stop(): Promise<void>;
+}
+//# sourceMappingURL=expressBasedHttpServer.d.ts.map

package/dist/expressBasedHttpServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"expressBasedHttpServer.d.ts","sourceRoot":"","sources":["../src/expressBasedHttpServer.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAGxE,MAAM,MAAM,6BAA6B,GAAG;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,iBAAiB,CAAC;CAC3B,CAAC;AAEF;;;GAGG;AACH,8BAAsB,sBAAsB;IACxC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;IAC9C,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC;IAE/B,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACnC,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IACtC,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;gBAEtC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QAAE,OAAO,EAAE,6BAA6B,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE;IAQ5F,OAAO,CAAC,aAAa;IAerB,IAAW,aAAa,IAAI,MAAM,CASjC;IAED,SAAS,CAAC,QAAQ,CAAC,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAElC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAyBtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAgCrC"}

package/dist/expressBasedHttpServer.js

@@ -0,0 +1,92 @@
+import express from "express";
+import { LogId } from "@mongodb-js/mcp-core";
+/**
+ * Base class for Express-based HTTP servers.
+ * Provides common functionality for starting and stopping HTTP servers.
+ */
+export class ExpressBasedHttpServer {
+    constructor({ options, logger }) {
+        this.app = express();
+        this.app.enable("trust proxy"); // needed for reverse proxy support
+        this.httpOptions = options.http;
+        this.logger = logger;
+        this.logContext = options.logContext;
+    }
+    checkHttpHost() {
+        const host = this.httpOptions.host.trim();
+        const safeHosts = new Set(["127.0.0.1", "localhost", "::1"]);
+        const shouldWarn = !safeHosts.has(host) && host !== "";
+        if (shouldWarn) {
+            this.logger.warning({
+                id: LogId.streamableHttpTransportHttpHostWarning,
+                context: this.logContext,
+                message: `Binding to ${this.httpOptions.host} can expose the MCP Server to the entire local network, which allows other devices on the same network to potentially access the MCP Server. This is a security risk and could allow unauthorized access to your database context.`,
+                noRedaction: true,
+            });
+        }
+    }
+    get serverAddress() {
+        const result = this.httpServer?.address();
+        if (typeof result === "string") {
+            return result;
+        }
+        if (typeof result === "object" && result) {
+            return `http://${result.address}:${result.port}`;
+        }
+        throw new Error("Server is not started yet");
+    }
+    async start() {
+        this.checkHttpHost();
+        await this.setupRoutes();
+        const { port, host } = this.httpOptions;
+        this.httpServer = await new Promise((resolve, reject) => {
+            const result = this.app.listen(port, host, (err) => {
+                if (err) {
+                    reject(err);
+                }
+                else {
+                    resolve(result);
+                }
+            });
+        });
+        this.logger.info({
+            message: `Http server started on address: ${this.serverAddress}`,
+            context: this.logContext,
+            noRedaction: true,
+            id: LogId.httpServerStarted,
+        });
+    }
+    async stop() {
+        if (this.httpServer) {
+            this.logger.info({
+                message: "Stopping server...",
+                context: this.logContext,
+                id: LogId.httpServerStopping,
+            });
+            const server = this.httpServer;
+            await new Promise((resolve, reject) => {
+                server.close((err) => {
+                    if (err) {
+                        reject(err);
+                    }
+                    else {
+                        resolve(undefined);
+                    }
+                });
+            });
+            this.logger.info({
+                message: "Server stopped",
+                context: this.logContext,
+                id: LogId.httpServerStopped,
+            });
+        }
+        else {
+            this.logger.info({
+                message: "Server is not running",
+                context: this.logContext,
+                id: LogId.httpServerStopped,
+            });
+        }
+    }
+}
+//# sourceMappingURL=expressBasedHttpServer.js.map

package/dist/expressBasedHttpServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expressBasedHttpServer.js","sourceRoot":"","sources":["../src/expressBasedHttpServer.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAG9B,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAO7C;;;GAGG;AACH,MAAM,OAAgB,sBAAsB;IAQxC,YAAY,EAAE,OAAO,EAAE,MAAM,EAA+D;QACxF,IAAI,CAAC,GAAG,GAAG,OAAO,EAAE,CAAC;QACrB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,mCAAmC;QACnE,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACzC,CAAC;IAEO,aAAa;QACjB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC;QAEvD,IAAI,UAAU,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;gBAChB,EAAE,EAAE,KAAK,CAAC,sCAAsC;gBAChD,OAAO,EAAE,IAAI,CAAC,UAAU;gBACxB,OAAO,EAAE,cAAc,IAAI,CAAC,WAAW,CAAC,IAAI,oOAAoO;gBAChR,WAAW,EAAE,IAAI;aACpB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,IAAW,aAAa;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC;QAC1C,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,MAAM,CAAC;QAClB,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,EAAE,CAAC;YACvC,OAAO,UAAU,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QACrD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACjD,CAAC;IAIM,KAAK,CAAC,KAAK;QACd,IAAI,CAAC,aAAa,EAAE,CAAC;QAErB,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAEzB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC;QAExC,IAAI,CAAC,UAAU,GAAG,MAAM,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACjE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE;gBACvD,IAAI,GAAG,EAAE,CAAC;oBACN,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChB,CAAC;qBAAM,CAAC;oBACJ,OAAO,CAAC,MAAM,CAAC,CAAC;gBACpB,CAAC;YACL,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACb,OAAO,EAAE,mCAAmC,IAAI,CAAC,aAAa,EAAE;YAChE,OAAO,EAAE,IAAI,CAAC,UAAU;YACxB,WAAW,EAAE,IAAI;YACjB,EAAE,EAAE,KAAK,CAAC,iBAAiB;SAC9B,CAAC,CAAC;IACP,CAAC;IAEM,KAAK,CAAC,IAAI;QACb,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACb,OAAO,EAAE,oBAAoB;gBAC7B,OAAO,EAAE,IAAI,CAAC,UAAU;gBACxB,EAAE,EAAE,KAAK,CAAC,kBAAkB;aAC/B,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;YAE/B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAClC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAW,EAAE,EAAE;oBACzB,IAAI,GAAG,EAAE,CAAC;wBACN,MAAM,CAAC,GAAG,CAAC,CAAC;oBAChB,CAAC;yBAAM,CAAC;wBACJ,OAAO,CAAC,SAAS,CAAC,CAAC;oBACvB,CAAC;gBACL,CAAC,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACb,OAAO,EAAE,gBAAgB;gBACzB,OAAO,EAAE,IAAI,CAAC,UAAU;gBACxB,EAAE,EAAE,KAAK,CAAC,iBAAiB;aAC9B,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACb,OAAO,EAAE,uBAAuB;gBAChC,OAAO,EAAE,IAAI,CAAC,UAAU;gBACxB,EAAE,EAAE,KAAK,CAAC,iBAAiB;aAC9B,CAAC,CAAC;QACP,CAAC;IACL,CAAC;CACJ"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export type { StreamableHttpRunnerOptions } from "./streamableHttpRunner.js";
+export { StreamableHttpRunner } from "./streamableHttpRunner.js";
+export { MCPHttpServer, type MCPHttpServerOptions } from "./mcpHttpServer.js";
+export { MonitoringServer, type MonitoringServerOptions } from "./monitoringServer.js";
+export { ExpressBasedHttpServer, type ExpressBasedHttpServerOptions } from "./expressBasedHttpServer.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAG7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAGjE,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,KAAK,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAGvF,OAAO,EAAE,sBAAsB,EAAE,KAAK,6BAA6B,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/index.js

@@ -0,0 +1,8 @@
+// Node.js-specific transport runners
+export { StreamableHttpRunner } from "./streamableHttpRunner.js";
+// HTTP Servers
+export { MCPHttpServer } from "./mcpHttpServer.js";
+export { MonitoringServer } from "./monitoringServer.js";
+// Express HTTP Server base
+export { ExpressBasedHttpServer } from "./expressBasedHttpServer.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,qCAAqC;AACrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,eAAe;AACf,OAAO,EAAE,aAAa,EAA6B,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAgC,MAAM,uBAAuB,CAAC;AAEvF,2BAA2B;AAC3B,OAAO,EAAE,sBAAsB,EAAsC,MAAM,6BAA6B,CAAC"}

package/dist/mcpHttpServer.d.ts

@@ -0,0 +1,87 @@
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import type { ICompositeLogger, IMetrics, DefaultMetricDefinitions, TransportRequestContext, ISessionStore, HttpServerOptions, SessionManagementOptions, SessionServer } from "@mongodb-js/mcp-types";
+import { ExpressBasedHttpServer } from "./expressBasedHttpServer.js";
+/**
+ * Options for creating an MCPHttpServer instance.
+ */
+export type MCPHttpServerOptions<TMetrics extends DefaultMetricDefinitions = DefaultMetricDefinitions> = {
+    options: {
+        /** HTTP server options */
+        http: HttpServerOptions;
+        /** Session management options */
+        session: SessionManagementOptions;
+    };
+    /** Logger for the server */
+    logger: ICompositeLogger;
+    /** Metrics instance */
+    metrics: IMetrics<TMetrics>;
+    /** Session store for managing transports */
+    sessionStore: ISessionStore<StreamableHTTPServerTransport>;
+};
+/**
+ * HTTP server that handles MCP requests over HTTP using the Streamable HTTP transport.
+ *
+ *
+ * @example
+ * ```typescript
+ * class MyMCPHttpServer extends MCPHttpServer {
+ *   protected override async createServerForRequest(request: TransportRequestContext): Promise<MyServer> {
+ *     return new MyServer({ ... });
+ *   }
+ * }
+ * ```
+ */
+export declare abstract class MCPHttpServer<TServer extends SessionServer = SessionServer, TMetrics extends DefaultMetricDefinitions = DefaultMetricDefinitions> extends ExpressBasedHttpServer {
+    private readonly sessionStore;
+    readonly sessionOptions: SessionManagementOptions;
+    protected readonly metrics: IMetrics<TMetrics>;
+    private readonly pendingInitializations;
+    constructor({ options, logger, metrics, sessionStore }: MCPHttpServerOptions<TMetrics>);
+    stop(): Promise<void>;
+    /**
+     * Creates a server instance for a specific request. Override this method
+     * in subclasses to customize per-request server creation.
+     */
+    protected abstract createServerForRequest(request: TransportRequestContext): Promise<TServer>;
+    private reportSessionError;
+    private startKeepAliveLoop;
+    /**
+     * Ensures the session for the given sessionId is initialized, serializing
+     * concurrent initialization attempts so only one runs at a time.
+     *
+     * If a session already exists in the store, this is a no-op.
+     * If another request is already initializing this session, this call waits
+     * for that initialization to complete.
+     * Otherwise, this call performs the initialization.
+     *
+     * After this method resolves, the caller should look up the transport from
+     * the session store via `sessionStore.getSession()`.
+     *
+     * When `isImplicitInitialization` is true, the transport is pre-configured as
+     * initialized (bypassing the MCP initialize handshake) so that it can handle
+     * non-initialize requests immediately. When false, the transport is left in
+     * its default state so it can process the initialize request normally.
+     */
+    private ensureSessionInitialized;
+    /**
+     * Restores the client state negotiated during the session's original
+     * initialization onto an implicitly re-initialized server. The server on
+     * this pod never saw the client's `initialize` request, so without this
+     * it would treat the client as capability-less — e.g. skipping
+     * confirmation elicitation for destructive tools. No-op when the session
+     * store does not persist negotiated client state.
+     */
+    private restoreNegotiatedClientState;
+    /**
+     * Arranges for the client state negotiated by a real `initialize`
+     * exchange to be persisted through the session store, so implicit
+     * re-initializations of this session can restore it. Wraps the
+     * `oninitialized` callback installed by `server.connect`, hence must run
+     * after it.
+     */
+    private captureNegotiatedClientStateOnInitialize;
+    protected setupMiddlewares(): void;
+    protected setupRoutes(): Promise<void>;
+    private withErrorHandling;
+}
+//# sourceMappingURL=mcpHttpServer.d.ts.map

package/dist/mcpHttpServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpHttpServer.d.ts","sourceRoot":"","sources":["../src/mcpHttpServer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAGnG,OAAO,KAAK,EACR,gBAAgB,EAEhB,QAAQ,EACR,wBAAwB,EACxB,uBAAuB,EACvB,aAAa,EACb,iBAAiB,EACjB,wBAAwB,EACxB,aAAa,EAEhB,MAAM,uBAAuB,CAAC;AAgB/B,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAGrE;;GAEG;AACH,MAAM,MAAM,oBAAoB,CAAC,QAAQ,SAAS,wBAAwB,GAAG,wBAAwB,IAAI;IACrG,OAAO,EAAE;QACL,0BAA0B;QAC1B,IAAI,EAAE,iBAAiB,CAAC;QACxB,iCAAiC;QACjC,OAAO,EAAE,wBAAwB,CAAC;KACrC,CAAC;IACF,4BAA4B;IAC5B,MAAM,EAAE,gBAAgB,CAAC;IACzB,uBAAuB;IACvB,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5B,4CAA4C;IAC5C,YAAY,EAAE,aAAa,CAAC,6BAA6B,CAAC,CAAC;CAC9D,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,8BAAsB,aAAa,CAC/B,OAAO,SAAS,aAAa,GAAG,aAAa,EAC7C,QAAQ,SAAS,wBAAwB,GAAG,wBAAwB,CACtE,SAAQ,sBAAsB;IAC5B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA+C;IAC5E,SAAgB,cAAc,EAAE,wBAAwB,CAAC;IACzD,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAoC;gBAE/D,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,oBAAoB,CAAC,QAAQ,CAAC;IAazE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAIlC;;;OAGG;IACH,SAAS,CAAC,QAAQ,CAAC,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC;IAE7F,OAAO,CAAC,kBAAkB;YAsCZ,kBAAkB;IAmDhC;;;;;;;;;;;;;;;;OAgBG;YACW,wBAAwB;IA+ItC;;;;;;;OAOG;YACW,4BAA4B;IAqC1C;;;;;;OAMG;IACH,OAAO,CAAC,wCAAwC;IAyBhD,SAAS,CAAC,gBAAgB,IAAI,IAAI;cAmBT,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IA+FrD,OAAO,CAAC,iBAAiB;CAqC5B"}

package/dist/mcpHttpServer.js

@@ -0,0 +1,440 @@
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { isInitializeRequest } from "@modelcontextprotocol/sdk/types.js";
+import express from "express";
+import { LogId, JSON_RPC_ERROR_CODE_SESSION_ID_REQUIRED, JSON_RPC_ERROR_CODE_SESSION_ID_INVALID, JSON_RPC_ERROR_CODE_INVALID_REQUEST, JSON_RPC_ERROR_CODE_SESSION_NOT_FOUND, JSON_RPC_ERROR_CODE_DISALLOWED_EXTERNAL_SESSION, JSON_RPC_ERROR_CODE_PROCESSING_REQUEST_FAILED, JSON_RPC_ERROR_CODE_SESSION_LIMIT_EXCEEDED, UserFacingError, getRandomUUID, SessionRejectedError, SessionLimitExceededError, requestIdAttr, } from "@mongodb-js/mcp-core";
+import { ExpressBasedHttpServer } from "./expressBasedHttpServer.js";
+import { sleep } from "./utils.js";
+/**
+ * HTTP server that handles MCP requests over HTTP using the Streamable HTTP transport.
+ *
+ *
+ * @example
+ * ```typescript
+ * class MyMCPHttpServer extends MCPHttpServer {
+ *   protected override async createServerForRequest(request: TransportRequestContext): Promise<MyServer> {
+ *     return new MyServer({ ... });
+ *   }
+ * }
+ * ```
+ */
+export class MCPHttpServer extends ExpressBasedHttpServer {
+    constructor({ options, logger, metrics, sessionStore }) {
+        super({
+            options: {
+                logContext: "mcpHttpServer",
+                http: options.http,
+            },
+            logger,
+        });
+        this.pendingInitializations = new Map();
+        this.sessionOptions = options.session;
+        this.metrics = metrics;
+        this.sessionStore = sessionStore;
+    }
+    async stop() {
+        await Promise.all([this.sessionStore.closeAllSessions(), super.stop()]);
+    }
+    reportSessionError(res, errorCode) {
+        let message;
+        let statusCode = 400;
+        switch (errorCode) {
+            case JSON_RPC_ERROR_CODE_SESSION_ID_REQUIRED:
+                message = "session id is required";
+                break;
+            case JSON_RPC_ERROR_CODE_SESSION_ID_INVALID:
+                message = "session id is invalid";
+                break;
+            case JSON_RPC_ERROR_CODE_INVALID_REQUEST:
+                message = "invalid request";
+                break;
+            case JSON_RPC_ERROR_CODE_SESSION_NOT_FOUND:
+                message = "session not found";
+                statusCode = 404;
+                break;
+            case JSON_RPC_ERROR_CODE_DISALLOWED_EXTERNAL_SESSION:
+                message = "cannot provide sessionId when externally managed sessions are disabled";
+                break;
+            case JSON_RPC_ERROR_CODE_SESSION_LIMIT_EXCEEDED:
+                message = "server has reached the maximum number of concurrent sessions, try again later";
+                statusCode = 503;
+                break;
+            default:
+                message = "unknown error";
+                statusCode = 500;
+        }
+        res.status(statusCode).json({
+            jsonrpc: "2.0",
+            error: {
+                code: errorCode,
+                message,
+            },
+        });
+    }
+    async startKeepAliveLoop({ transport, logger, signal, }) {
+        if (this.httpOptions.responseType === "json") {
+            // Don't start the ping loop for JSON response type since the connection is short-lived and pings aren't needed
+            return;
+        }
+        let failedPings = 0;
+        while (!signal.aborted) {
+            try {
+                logger.debug({
+                    id: LogId.streamableHttpTransportKeepAlive,
+                    context: "streamableHttpTransport",
+                    message: "Sending ping",
+                });
+                await transport.send({
+                    jsonrpc: "2.0",
+                    method: "ping",
+                });
+                failedPings = 0;
+            }
+            catch (err) {
+                try {
+                    failedPings++;
+                    logger.warning({
+                        id: LogId.streamableHttpTransportKeepAliveFailure,
+                        context: "streamableHttpTransport",
+                        message: `Error sending ping (attempt #${failedPings}): ${err instanceof Error ? err.message : String(err)}`,
+                    });
+                    if (failedPings > 3) {
+                        await transport.close();
+                        return;
+                    }
+                }
+                catch {
+                    // Ignore the error of the transport close
+                }
+            }
+            await sleep(30000, { signal });
+        }
+    }
+    /**
+     * Ensures the session for the given sessionId is initialized, serializing
+     * concurrent initialization attempts so only one runs at a time.
+     *
+     * If a session already exists in the store, this is a no-op.
+     * If another request is already initializing this session, this call waits
+     * for that initialization to complete.
+     * Otherwise, this call performs the initialization.
+     *
+     * After this method resolves, the caller should look up the transport from
+     * the session store via `sessionStore.getSession()`.
+     *
+     * When `isImplicitInitialization` is true, the transport is pre-configured as
+     * initialized (bypassing the MCP initialize handshake) so that it can handle
+     * non-initialize requests immediately. When false, the transport is left in
+     * its default state so it can process the initialize request normally.
+     */
+    async ensureSessionInitialized({ req, sessionId: providedSessionId, isImplicitInitialization, }) {
+        const sessionId = providedSessionId ?? getRandomUUID();
+        const requestIdAttrs = requestIdAttr(req.headers);
+        // Check if session already exists
+        if (await this.sessionStore.getSession(sessionId, req.headers)) {
+            return sessionId;
+        }
+        // Serialize initializations: if another request is initializing, wait for it
+        const pendingInit = this.pendingInitializations.get(sessionId);
+        if (pendingInit) {
+            this.logger.debug({
+                id: LogId.streamableHttpTransportSessionNotFound,
+                context: "streamableHttpTransport",
+                message: `Session with ID ${sessionId} is already being initialized, waiting`,
+                attributes: { ...requestIdAttrs },
+            });
+            try {
+                await pendingInit;
+            }
+            catch {
+                // The initializer handles its own error
+            }
+            return sessionId;
+        }
+        this.logger.debug({
+            id: LogId.streamableHttpTransportSessionNotFound,
+            context: "streamableHttpTransport",
+            message: `Session with ID ${sessionId} not found, initializing new session`,
+            attributes: {
+                ...requestIdAttrs,
+            },
+        });
+        const initPromise = (async () => {
+            const request = {
+                headers: req.headers,
+                query: req.query,
+            };
+            const server = await this.createServerForRequest(request);
+            const transport = new StreamableHTTPServerTransport({
+                sessionIdGenerator: () => sessionId,
+                enableJsonResponse: this.httpOptions.responseType === "json",
+                onsessionclosed: async (sessionId) => {
+                    try {
+                        await this.sessionStore.closeSession({ sessionId, reason: "transport_closed" });
+                    }
+                    catch (error) {
+                        this.logger.error({
+                            id: LogId.sessionCloseFailure,
+                            context: "streamableHttpTransport",
+                            message: `Error closing session ${sessionId}: ${error instanceof Error ? error.message : String(error)}`,
+                        });
+                    }
+                },
+            });
+            // HACK: When we're implicitly initializing the session, we want to configure the session id and _initialized flag on the transport
+            // so that it believes it actually went through the initialization flow. Without it, we'd get errors like "transport not initialized"
+            // when we try to use it without initialize request
+            if (isImplicitInitialization) {
+                const internalTransport = transport["_webStandardTransport"];
+                internalTransport._initialized = true;
+                internalTransport.sessionId = sessionId;
+            }
+            server.session?.logger.setAttribute("sessionId", sessionId);
+            const keepAliveController = new AbortController();
+            void this.startKeepAliveLoop({
+                transport,
+                logger: server.session?.logger ?? this.logger,
+                signal: keepAliveController.signal,
+            });
+            transport.onclose = () => {
+                keepAliveController.abort();
+                server.close().catch((error) => {
+                    this.logger.error({
+                        id: LogId.streamableHttpTransportCloseFailure,
+                        context: "streamableHttpTransport",
+                        message: `Error closing server: ${error instanceof Error ? error.message : String(error)}`,
+                    });
+                });
+            };
+            await server.connect(transport);
+            if (isImplicitInitialization) {
+                await this.restoreNegotiatedClientState(server, sessionId, req.headers);
+            }
+            else {
+                this.captureNegotiatedClientStateOnInitialize(server, sessionId, req.headers);
+            }
+            await this.sessionStore.addSession({
+                sessionId,
+                transport,
+                logger: server.session?.logger ?? this.logger,
+                session: server.session,
+                // Pass the incoming request headers to the session store so
+                // that we can trace the x-request-id and other headers in the
+                // resulting logs and downstream requests.
+                headers: req.headers,
+            });
+        })();
+        this.pendingInitializations.set(sessionId, initPromise);
+        try {
+            await initPromise;
+        }
+        catch (error) {
+            this.logger.error({
+                id: LogId.streamableHttpTransportRequestFailure,
+                context: "streamableHttpTransport",
+                message: `Failed to initialize session ${sessionId}: ${error instanceof Error ? error.message : String(error)}`,
+                attributes: { ...requestIdAttrs },
+            });
+            // Remove the partially initialized session on failure so that
+            // subsequent requests don't see a broken session and can retry
+            try {
+                await this.sessionStore.closeSession({ sessionId, reason: "unknown" });
+            }
+            catch {
+                // Session might not be in the store, that's fine
+            }
+            throw error;
+        }
+        finally {
+            this.pendingInitializations.delete(sessionId);
+        }
+        return sessionId;
+    }
+    /**
+     * Restores the client state negotiated during the session's original
+     * initialization onto an implicitly re-initialized server. The server on
+     * this pod never saw the client's `initialize` request, so without this
+     * it would treat the client as capability-less — e.g. skipping
+     * confirmation elicitation for destructive tools. No-op when the session
+     * store does not persist negotiated client state.
+     */
+    async restoreNegotiatedClientState(server, sessionId, headers) {
+        let state;
+        try {
+            state = await this.sessionStore.loadNegotiatedClientState(sessionId, headers);
+        }
+        catch (error) {
+            // The restored session stays usable; it just behaves as if the
+            // client had no optional capabilities.
+            this.logger.warning({
+                id: LogId.streamableHttpTransportClientStateRestoreFailure,
+                context: "streamableHttpTransport",
+                message: `Failed to restore negotiated client state for session ${sessionId}: ${error instanceof Error ? error.message : String(error)}`,
+                attributes: { ...requestIdAttr(headers) },
+            });
+            return;
+        }
+        if (!state) {
+            return;
+        }
+        // HACK: like the transport `_initialized` flag above, the SDK offers
+        // no supported way to seed a Server with a previously negotiated
+        // initialization, so we write the private fields the initialize
+        // handler would have populated.
+        const mcpServer = server.mcpServer;
+        const protocolServer = mcpServer.server;
+        protocolServer._clientCapabilities = state.clientCapabilities;
+        protocolServer._clientVersion = state.clientInfo;
+        server.session.setMcpClient(state.clientInfo);
+    }
+    /**
+     * Arranges for the client state negotiated by a real `initialize`
+     * exchange to be persisted through the session store, so implicit
+     * re-initializations of this session can restore it. Wraps the
+     * `oninitialized` callback installed by `server.connect`, hence must run
+     * after it.
+     */
+    captureNegotiatedClientStateOnInitialize(server, sessionId, headers) {
+        const protocolServer = server.mcpServer.server;
+        const originalOnInitialized = protocolServer.oninitialized;
+        protocolServer.oninitialized = () => {
+            originalOnInitialized?.();
+            const state = {
+                clientCapabilities: protocolServer.getClientCapabilities(),
+                clientInfo: protocolServer.getClientVersion(),
+            };
+            this.sessionStore.saveNegotiatedClientState(sessionId, state, headers).catch((error) => {
+                this.logger.warning({
+                    id: LogId.streamableHttpTransportClientStateSaveFailure,
+                    context: "streamableHttpTransport",
+                    message: `Failed to save negotiated client state for session ${sessionId}: ${error instanceof Error ? error.message : String(error)}`,
+                    attributes: { ...requestIdAttr(headers) },
+                });
+            });
+        };
+    }
+    setupMiddlewares() {
+        this.app.use(express.json({ limit: this.httpOptions.bodyLimit ?? 1024 * 1024 }));
+        const headers = this.httpOptions.headers;
+        if (headers && Object.keys(headers).length > 0) {
+            this.app.use((req, res, next) => {
+                for (const [key, value] of Object.entries(headers)) {
+                    const header = req.headers[key.toLowerCase()];
+                    if (!header || header !== value) {
+                        res.status(403).json({ error: `Invalid value for header "${key}"` });
+                        return;
+                    }
+                }
+                next();
+            });
+        }
+    }
+    // eslint-disable-next-line @typescript-eslint/require-await -- Required for override signature
+    async setupRoutes() {
+        this.setupMiddlewares();
+        const handleSessionRequest = async (req, res) => {
+            const sessionId = req.headers["mcp-session-id"];
+            if (!sessionId) {
+                return this.reportSessionError(res, JSON_RPC_ERROR_CODE_SESSION_ID_REQUIRED);
+            }
+            if (typeof sessionId !== "string") {
+                return this.reportSessionError(res, JSON_RPC_ERROR_CODE_SESSION_ID_INVALID);
+            }
+            const requestIdAttrs = requestIdAttr(req.headers);
+            let transport = await this.sessionStore.getSession(sessionId, req.headers);
+            if (!transport) {
+                if (!this.sessionOptions.externallyManagedSessions) {
+                    this.logger.debug({
+                        id: LogId.streamableHttpTransportSessionNotFound,
+                        context: "streamableHttpTransport",
+                        message: `Session with ID ${sessionId} not found`,
+                        attributes: { ...requestIdAttrs },
+                    });
+                    return this.reportSessionError(res, JSON_RPC_ERROR_CODE_SESSION_NOT_FOUND);
+                }
+                const resolvedSessionId = await this.ensureSessionInitialized({
+                    req,
+                    sessionId,
+                    isImplicitInitialization: true,
+                });
+                transport = await this.sessionStore.getSession(resolvedSessionId, req.headers);
+                if (!transport) {
+                    return this.reportSessionError(res, JSON_RPC_ERROR_CODE_SESSION_NOT_FOUND);
+                }
+            }
+            await transport.handleRequest(req, res, req.body);
+        };
+        this.app.post("/mcp", this.withErrorHandling(async (req, res) => {
+            const sessionId = req.headers["mcp-session-id"];
+            if (sessionId && typeof sessionId !== "string") {
+                return this.reportSessionError(res, JSON_RPC_ERROR_CODE_SESSION_ID_INVALID);
+            }
+            if (isInitializeRequest(req.body)) {
+                if (sessionId && !this.sessionOptions.externallyManagedSessions) {
+                    this.logger.debug({
+                        id: LogId.streamableHttpTransportDisallowedExternalSessionError,
+                        context: "streamableHttpTransport",
+                        message: `Client provided session ID ${sessionId}, but externallyManagedSessions is disabled`,
+                        attributes: requestIdAttr(req.headers),
+                    });
+                    return this.reportSessionError(res, JSON_RPC_ERROR_CODE_DISALLOWED_EXTERNAL_SESSION);
+                }
+                const resolvedSessionId = await this.ensureSessionInitialized({
+                    req,
+                    sessionId,
+                    isImplicitInitialization: false,
+                });
+                const transport = await this.sessionStore.getSession(resolvedSessionId, req.headers);
+                if (!transport) {
+                    return this.reportSessionError(res, JSON_RPC_ERROR_CODE_SESSION_NOT_FOUND);
+                }
+                await transport.handleRequest(req, res, req.body);
+                return;
+            }
+            if (sessionId) {
+                return await handleSessionRequest(req, res);
+            }
+            return this.reportSessionError(res, JSON_RPC_ERROR_CODE_INVALID_REQUEST);
+        }));
+        this.app.get("/mcp", this.withErrorHandling(async (req, res) => {
+            if (this.httpOptions.responseType === "sse") {
+                await handleSessionRequest(req, res);
+            }
+            else {
+                res.status(405).set("Allow", ["POST", "DELETE"]).send("Method Not Allowed");
+            }
+        }));
+        this.app.delete("/mcp", this.withErrorHandling(handleSessionRequest));
+    }
+    withErrorHandling(fn) {
+        return (req, res, next) => {
+            fn(req, res, next).catch((error) => {
+                const errorMessage = error instanceof Error ? error.message : String(error);
+                this.logger.error({
+                    id: LogId.streamableHttpTransportRequestFailure,
+                    context: "streamableHttpTransport",
+                    message: `Error handling request: ${errorMessage}`,
+                    attributes: requestIdAttr(req.headers),
+                });
+                if (error instanceof SessionRejectedError) {
+                    // Respond exactly as if the session doesn't exist so that
+                    // callers can't probe whether a session id is valid; the
+                    // rejection reason is only visible in the log above.
+                    return this.reportSessionError(res, JSON_RPC_ERROR_CODE_SESSION_NOT_FOUND);
+                }
+                if (error instanceof SessionLimitExceededError) {
+                    return this.reportSessionError(res, JSON_RPC_ERROR_CODE_SESSION_LIMIT_EXCEEDED);
+                }
+                // Only propagate error messages for user-facing errors
+                const message = error instanceof UserFacingError ? error.message : `failed to handle request`;
+                res.status(400).json({
+                    jsonrpc: "2.0",
+                    error: {
+                        code: JSON_RPC_ERROR_CODE_PROCESSING_REQUEST_FAILED,
+                        message,
+                    },
+                });
+            });
+        };
+    }
+}
+//# sourceMappingURL=mcpHttpServer.js.map

package/dist/mcpHttpServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpHttpServer.js","sourceRoot":"","sources":["../src/mcpHttpServer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAgD,MAAM,oCAAoC,CAAC;AACvH,OAAO,OAAO,MAAM,SAAS,CAAC;AAa9B,OAAO,EACH,KAAK,EACL,uCAAuC,EACvC,sCAAsC,EACtC,mCAAmC,EACnC,qCAAqC,EACrC,+CAA+C,EAC/C,6CAA6C,EAC7C,0CAA0C,EAC1C,eAAe,EACf,aAAa,EACb,oBAAoB,EACpB,yBAAyB,EACzB,aAAa,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAoBnC;;;;;;;;;;;;GAYG;AACH,MAAM,OAAgB,aAGpB,SAAQ,sBAAsB;IAM5B,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAkC;QAClF,KAAK,CAAC;YACF,OAAO,EAAE;gBACL,UAAU,EAAE,eAAe;gBAC3B,IAAI,EAAE,OAAO,CAAC,IAAI;aACrB;YACD,MAAM;SACT,CAAC,CAAC;QATU,2BAAsB,GAAG,IAAI,GAAG,EAAyB,CAAC;QAUvE,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;QACtC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACrC,CAAC;IAEM,KAAK,CAAC,IAAI;QACb,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC;IAQO,kBAAkB,CAAC,GAAqB,EAAE,SAAiB;QAC/D,IAAI,OAAe,CAAC;QACpB,IAAI,UAAU,GAAG,GAAG,CAAC;QAErB,QAAQ,SAAS,EAAE,CAAC;YAChB,KAAK,uCAAuC;gBACxC,OAAO,GAAG,wBAAwB,CAAC;gBACnC,MAAM;YACV,KAAK,sCAAsC;gBACvC,OAAO,GAAG,uBAAuB,CAAC;gBAClC,MAAM;YACV,KAAK,mCAAmC;gBACpC,OAAO,GAAG,iBAAiB,CAAC;gBAC5B,MAAM;YACV,KAAK,qCAAqC;gBACtC,OAAO,GAAG,mBAAmB,CAAC;gBAC9B,UAAU,GAAG,GAAG,CAAC;gBACjB,MAAM;YACV,KAAK,+CAA+C;gBAChD,OAAO,GAAG,wEAAwE,CAAC;gBACnF,MAAM;YACV,KAAK,0CAA0C;gBAC3C,OAAO,GAAG,+EAA+E,CAAC;gBAC1F,UAAU,GAAG,GAAG,CAAC;gBACjB,MAAM;YACV;gBACI,OAAO,GAAG,eAAe,CAAC;gBAC1B,UAAU,GAAG,GAAG,CAAC;QACzB,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACH,IAAI,EAAE,SAAS;gBACf,OAAO;aACV;SACJ,CAAC,CAAC;IACP,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,EAC7B,SAAS,EACT,MAAM,EACN,MAAM,GAKT;QACG,IAAI,IAAI,CAAC,WAAW,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;YAC3C,+GAA+G;YAC/G,OAAO;QACX,CAAC;QAED,IAAI,WAAW,GAAG,CAAC,CAAC;QAEpB,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC;oBACT,EAAE,EAAE,KAAK,CAAC,gCAAgC;oBAC1C,OAAO,EAAE,yBAAyB;oBAClC,OAAO,EAAE,cAAc;iBAC1B,CAAC,CAAC;gBAEH,MAAM,SAAS,CAAC,IAAI,CAAC;oBACjB,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,MAAM;iBACjB,CAAC,CAAC;gBACH,WAAW,GAAG,CAAC,CAAC;YACpB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACX,IAAI,CAAC;oBACD,WAAW,EAAE,CAAC;oBACd,MAAM,CAAC,OAAO,CAAC;wBACX,EAAE,EAAE,KAAK,CAAC,uCAAuC;wBACjD,OAAO,EAAE,yBAAyB;wBAClC,OAAO,EAAE,gCAAgC,WAAW,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;qBAC/G,CAAC,CAAC;oBAEH,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;wBAClB,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;wBACxB,OAAO;oBACX,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACL,0CAA0C;gBAC9C,CAAC;YACL,CAAC;YAED,MAAM,KAAK,CAAC,KAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACpC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACK,KAAK,CAAC,wBAAwB,CAAC,EACnC,GAAG,EACH,SAAS,EAAE,iBAAiB,EAC5B,wBAAwB,GAK3B;QACG,MAAM,SAAS,GAAG,iBAAiB,IAAI,aAAa,EAAE,CAAC;QACvD,MAAM,cAAc,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAElD,kCAAkC;QAClC,IAAI,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7D,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,6EAA6E;QAC7E,MAAM,WAAW,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/D,IAAI,WAAW,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gBACd,EAAE,EAAE,KAAK,CAAC,sCAAsC;gBAChD,OAAO,EAAE,yBAAyB;gBAClC,OAAO,EAAE,mBAAmB,SAAS,wCAAwC;gBAC7E,UAAU,EAAE,EAAE,GAAG,cAAc,EAAE;aACpC,CAAC,CAAC;YACH,IAAI,CAAC;gBACD,MAAM,WAAW,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACL,wCAAwC;YAC5C,CAAC;YACD,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YACd,EAAE,EAAE,KAAK,CAAC,sCAAsC;YAChD,OAAO,EAAE,yBAAyB;YAClC,OAAO,EAAE,mBAAmB,SAAS,sCAAsC;YAC3E,UAAU,EAAE;gBACR,GAAG,cAAc;aACpB;SACJ,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,CAAC,KAAK,IAAmB,EAAE;YAC3C,MAAM,OAAO,GAA4B;gBACrC,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,KAAK,EAAE,GAAG,CAAC,KAAsD;aACpE,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;YAE1D,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;gBAChD,kBAAkB,EAAE,GAAW,EAAE,CAAC,SAAS;gBAC3C,kBAAkB,EAAE,IAAI,CAAC,WAAW,CAAC,YAAY,KAAK,MAAM;gBAC5D,eAAe,EAAE,KAAK,EAAE,SAAS,EAAiB,EAAE;oBAChD,IAAI,CAAC;wBACD,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBACpF,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;4BACd,EAAE,EAAE,KAAK,CAAC,mBAAmB;4BAC7B,OAAO,EAAE,yBAAyB;4BAClC,OAAO,EAAE,yBAAyB,SAAS,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;yBAC3G,CAAC,CAAC;oBACP,CAAC;gBACL,CAAC;aACJ,CAAC,CAAC;YAEH,mIAAmI;YACnI,qIAAqI;YACrI,mDAAmD;YACnD,IAAI,wBAAwB,EAAE,CAAC;gBAC3B,MAAM,iBAAiB,GAAG,SAAS,CAAC,uBAAuB,CAG1D,CAAC;gBACF,iBAAiB,CAAC,YAAY,GAAG,IAAI,CAAC;gBACtC,iBAAiB,CAAC,SAAS,GAAG,SAAS,CAAC;YAC5C,CAAC;YAED,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAE5D,MAAM,mBAAmB,GAAG,IAAI,eAAe,EAAE,CAAC;YAClD,KAAK,IAAI,CAAC,kBAAkB,CAAC;gBACzB,SAAS;gBACT,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM;gBAC7C,MAAM,EAAE,mBAAmB,CAAC,MAAM;aACrC,CAAC,CAAC;YACH,SAAS,CAAC,OAAO,GAAG,GAAS,EAAE;gBAC3B,mBAAmB,CAAC,KAAK,EAAE,CAAC;gBAE5B,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;oBACpC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;wBACd,EAAE,EAAE,KAAK,CAAC,mCAAmC;wBAC7C,OAAO,EAAE,yBAAyB;wBAClC,OAAO,EAAE,yBAAyB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;qBAC7F,CAAC,CAAC;gBACP,CAAC,CAAC,CAAC;YACP,CAAC,CAAC;YAEF,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAEhC,IAAI,wBAAwB,EAAE,CAAC;gBAC3B,MAAM,IAAI,CAAC,4BAA4B,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC5E,CAAC;iBAAM,CAAC;gBACJ,IAAI,CAAC,wCAAwC,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAClF,CAAC;YAED,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;gBAC/B,SAAS;gBACT,SAAS;gBACT,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM;gBAC7C,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,4DAA4D;gBAC5D,8DAA8D;gBAC9D,0CAA0C;gBAC1C,OAAO,EAAE,GAAG,CAAC,OAAO;aACvB,CAAC,CAAC;QACP,CAAC,CAAC,EAAE,CAAC;QAEL,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACxD,IAAI,CAAC;YACD,MAAM,WAAW,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gBACd,EAAE,EAAE,KAAK,CAAC,qCAAqC;gBAC/C,OAAO,EAAE,yBAAyB;gBAClC,OAAO,EAAE,gCAAgC,SAAS,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;gBAC/G,UAAU,EAAE,EAAE,GAAG,cAAc,EAAE;aACpC,CAAC,CAAC;YACH,8DAA8D;YAC9D,+DAA+D;YAC/D,IAAI,CAAC;gBACD,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAC3E,CAAC;YAAC,MAAM,CAAC;gBACL,iDAAiD;YACrD,CAAC;YACD,MAAM,KAAK,CAAC;QAChB,CAAC;gBAAS,CAAC;YACP,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,4BAA4B,CACtC,MAAe,EACf,SAAiB,EACjB,OAAgC;QAEhC,IAAI,KAAwC,CAAC;QAC7C,IAAI,CAAC;YACD,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAClF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,+DAA+D;YAC/D,uCAAuC;YACvC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;gBAChB,EAAE,EAAE,KAAK,CAAC,gDAAgD;gBAC1D,OAAO,EAAE,yBAAyB;gBAClC,OAAO,EAAE,yDAAyD,SAAS,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;gBACxI,UAAU,EAAE,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,EAAE;aAC5C,CAAC,CAAC;YACH,OAAO;QACX,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO;QACX,CAAC;QAED,qEAAqE;QACrE,iEAAiE;QACjE,gEAAgE;QAChE,gCAAgC;QAChC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QACnC,MAAM,cAAc,GAAG,SAAS,CAAC,MAGhC,CAAC;QACF,cAAc,CAAC,mBAAmB,GAAG,KAAK,CAAC,kBAAkB,CAAC;QAC9D,cAAc,CAAC,cAAc,GAAG,KAAK,CAAC,UAAU,CAAC;QACjD,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClD,CAAC;IAED;;;;;;OAMG;IACK,wCAAwC,CAC5C,MAAe,EACf,SAAiB,EACjB,OAAgC;QAEhC,MAAM,cAAc,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;QAC/C,MAAM,qBAAqB,GAAG,cAAc,CAAC,aAAa,CAAC;QAC3D,cAAc,CAAC,aAAa,GAAG,GAAS,EAAE;YACtC,qBAAqB,EAAE,EAAE,CAAC;YAE1B,MAAM,KAAK,GAA0B;gBACjC,kBAAkB,EAAE,cAAc,CAAC,qBAAqB,EAAE;gBAC1D,UAAU,EAAE,cAAc,CAAC,gBAAgB,EAAE;aAChD,CAAC;YACF,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBAC5F,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;oBAChB,EAAE,EAAE,KAAK,CAAC,6CAA6C;oBACvD,OAAO,EAAE,yBAAyB;oBAClC,OAAO,EAAE,sDAAsD,SAAS,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;oBACrI,UAAU,EAAE,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,EAAE;iBAC5C,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;QACP,CAAC,CAAC;IACN,CAAC;IAES,gBAAgB;QACtB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,SAAS,IAAI,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;QAEjF,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;QACzC,IAAI,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;gBAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBACjD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;oBAC9C,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;wBAC9B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,GAAG,GAAG,EAAE,CAAC,CAAC;wBACrE,OAAO;oBACX,CAAC;gBACL,CAAC;gBACD,IAAI,EAAE,CAAC;YACX,CAAC,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,+FAA+F;IAC5E,KAAK,CAAC,WAAW;QAChC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,MAAM,oBAAoB,GAAG,KAAK,EAAE,GAAoB,EAAE,GAAqB,EAAiB,EAAE;YAC9F,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAChD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAC;YACjF,CAAC;YAED,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAChC,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;YAChF,CAAC;YAED,MAAM,cAAc,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAElD,IAAI,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC3E,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,yBAAyB,EAAE,CAAC;oBACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;wBACd,EAAE,EAAE,KAAK,CAAC,sCAAsC;wBAChD,OAAO,EAAE,yBAAyB;wBAClC,OAAO,EAAE,mBAAmB,SAAS,YAAY;wBACjD,UAAU,EAAE,EAAE,GAAG,cAAc,EAAE;qBACpC,CAAC,CAAC;oBACH,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,qCAAqC,CAAC,CAAC;gBAC/E,CAAC;gBAED,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC;oBAC1D,GAAG;oBACH,SAAS;oBACT,wBAAwB,EAAE,IAAI;iBACjC,CAAC,CAAC;gBACH,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,iBAAiB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC/E,IAAI,CAAC,SAAS,EAAE,CAAC;oBACb,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,qCAAqC,CAAC,CAAC;gBAC/E,CAAC;YACL,CAAC;YAED,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC,CAAC;QAEF,IAAI,CAAC,GAAG,CAAC,IAAI,CACT,MAAM,EACN,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,GAAoB,EAAE,GAAqB,EAAE,EAAE;YACzE,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAChD,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAC7C,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;YAChF,CAAC;YAED,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,IAAI,SAAS,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,yBAAyB,EAAE,CAAC;oBAC9D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;wBACd,EAAE,EAAE,KAAK,CAAC,qDAAqD;wBAC/D,OAAO,EAAE,yBAAyB;wBAClC,OAAO,EAAE,8BAA8B,SAAS,6CAA6C;wBAC7F,UAAU,EAAE,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC;qBACzC,CAAC,CAAC;oBACH,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,+CAA+C,CAAC,CAAC;gBACzF,CAAC;gBAED,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC;oBAC1D,GAAG;oBACH,SAAS;oBACT,wBAAwB,EAAE,KAAK;iBAClC,CAAC,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,iBAAiB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;gBACrF,IAAI,CAAC,SAAS,EAAE,CAAC;oBACb,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,qCAAqC,CAAC,CAAC;gBAC/E,CAAC;gBACD,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBAClD,OAAO;YACX,CAAC;YAED,IAAI,SAAS,EAAE,CAAC;gBACZ,OAAO,MAAM,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC;YAED,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAC;QAC7E,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,CAAC,GAAG,CAAC,GAAG,CACR,MAAM,EACN,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAiB,EAAE;YACrD,IAAI,IAAI,CAAC,WAAW,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;gBAC1C,MAAM,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACzC,CAAC;iBAAM,CAAC;gBACJ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YAChF,CAAC;QACL,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAC1E,CAAC;IAEO,iBAAiB,CACrB,EAA8F;QAE9F,OAAO,CAAC,GAAoB,EAAE,GAAqB,EAAE,IAA0B,EAAQ,EAAE;YACrF,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBAC/B,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC5E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;oBACd,EAAE,EAAE,KAAK,CAAC,qCAAqC;oBAC/C,OAAO,EAAE,yBAAyB;oBAClC,OAAO,EAAE,2BAA2B,YAAY,EAAE;oBAClD,UAAU,EAAE,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC;iBACzC,CAAC,CAAC;gBAEH,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;oBACxC,0DAA0D;oBAC1D,yDAAyD;oBACzD,qDAAqD;oBACrD,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,qCAAqC,CAAC,CAAC;gBAC/E,CAAC;gBAED,IAAI,KAAK,YAAY,yBAAyB,EAAE,CAAC;oBAC7C,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAC;gBACpF,CAAC;gBAED,uDAAuD;gBACvD,MAAM,OAAO,GAAG,KAAK,YAAY,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC;gBAE9F,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACjB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACH,IAAI,EAAE,6CAA6C;wBACnD,OAAO;qBACV;iBACJ,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;QACP,CAAC,CAAC;IACN,CAAC;CACJ"}

package/dist/monitoringServer.d.ts

@@ -0,0 +1,53 @@
+import type { DefaultMetricDefinitions, ILogger, IMetrics } from "@mongodb-js/mcp-types";
+import { ExpressBasedHttpServer } from "./expressBasedHttpServer.js";
+/**
+ * HTTP server that provides monitoring endpoints like health checks and metrics.
+ *
+ * To customize behavior, extend this class and override methods:
+ *
+ * @example
+ * ```typescript
+ * class MyMonitoringServer extends MonitoringServer {
+ *   protected override async setupRoutes(): Promise<void> {
+ *     // Add custom routes
+ *     this.app.get("/custom", (req, res) => res.json({ custom: true }));
+ *     await super.setupRoutes();
+ *   }
+ * }
+ * ```
+ */
+export declare class MonitoringServer<TMetrics extends DefaultMetricDefinitions = DefaultMetricDefinitions> extends ExpressBasedHttpServer {
+    protected readonly features: MonitoringServerFeature[];
+    protected readonly metrics: IMetrics<TMetrics>;
+    protected readonly version: string;
+    constructor({ options, logger, metrics }: MonitoringServerOptions<TMetrics>);
+    protected setupRoutes(): Promise<void>;
+}
+/**
+ * Complete constructor params for creating a MonitoringServer instance.
+ */
+export type MonitoringServerOptions<TMetrics extends DefaultMetricDefinitions = DefaultMetricDefinitions> = {
+    /** Options for configuring the monitoring server */
+    options: {
+        /** HTTP configuration */
+        http: {
+            /** Host to bind the monitoring server to */
+            host: string;
+            /** Port to bind the monitoring server to */
+            port: number;
+        };
+        /** Features to enable on the monitoring server */
+        features: MonitoringServerFeature[];
+        /**
+         * Version to expose in the health endpoint.
+         * Defaults to the package version.
+         */
+        version?: string;
+    };
+    /** Logger for the server */
+    logger: ILogger;
+    /** Metrics instance */
+    metrics: IMetrics<TMetrics>;
+};
+export type MonitoringServerFeature = "health-check" | "metrics";
+//# sourceMappingURL=monitoringServer.d.ts.map

package/dist/monitoringServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"monitoringServer.d.ts","sourceRoot":"","sources":["../src/monitoringServer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,wBAAwB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEzF,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAGrE;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,gBAAgB,CACzB,QAAQ,SAAS,wBAAwB,GAAG,wBAAwB,CACtE,SAAQ,sBAAsB;IAC5B,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,EAAE,CAAC;IACvD,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/C,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;gBAEvB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,uBAAuB,CAAC,QAAQ,CAAC;cAaxD,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;CAkClD;AAED;;GAEG;AACH,MAAM,MAAM,uBAAuB,CAAC,QAAQ,SAAS,wBAAwB,GAAG,wBAAwB,IAAI;IACxG,oDAAoD;IACpD,OAAO,EAAE;QACL,yBAAyB;QACzB,IAAI,EAAE;YACF,4CAA4C;YAC5C,IAAI,EAAE,MAAM,CAAC;YACb,4CAA4C;YAC5C,IAAI,EAAE,MAAM,CAAC;SAChB,CAAC;QACF,kDAAkD;QAClD,QAAQ,EAAE,uBAAuB,EAAE,CAAC;QACpC;;;WAGG;QACH,OAAO,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,4BAA4B;IAC5B,MAAM,EAAE,OAAO,CAAC;IAChB,uBAAuB;IACvB,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,cAAc,GAAG,SAAS,CAAC"}

package/dist/monitoringServer.js

@@ -0,0 +1,67 @@
+import { LogId } from "@mongodb-js/mcp-core";
+import { ExpressBasedHttpServer } from "./expressBasedHttpServer.js";
+import packageJson from "../package.json" with { type: "json" };
+/**
+ * HTTP server that provides monitoring endpoints like health checks and metrics.
+ *
+ * To customize behavior, extend this class and override methods:
+ *
+ * @example
+ * ```typescript
+ * class MyMonitoringServer extends MonitoringServer {
+ *   protected override async setupRoutes(): Promise<void> {
+ *     // Add custom routes
+ *     this.app.get("/custom", (req, res) => res.json({ custom: true }));
+ *     await super.setupRoutes();
+ *   }
+ * }
+ * ```
+ */
+export class MonitoringServer extends ExpressBasedHttpServer {
+    constructor({ options, logger, metrics }) {
+        super({
+            options: {
+                logContext: "monitoringServer",
+                http: { port: options.http.port, host: options.http.host },
+            },
+            logger,
+        });
+        this.features = options.features;
+        this.metrics = metrics;
+        this.version = options.version ?? packageJson.version;
+    }
+    setupRoutes() {
+        if (this.features.includes("health-check")) {
+            this.app.get("/health", (_req, res) => {
+                // Health responses should never be cached by proxies or load balancers.
+                res.set("Cache-Control", "no-store");
+                res.json({
+                    status: "ok",
+                    version: this.version,
+                    uptimeSeconds: Math.floor(process.uptime()),
+                    timestamp: new Date().toISOString(),
+                });
+            });
+        }
+        if (this.features.includes("metrics") && this.metrics?.getMetrics) {
+            const getMetrics = this.metrics.getMetrics.bind(this.metrics);
+            this.app.get("/metrics", async (_req, res) => {
+                try {
+                    const output = await getMetrics();
+                    res.set("Content-Type", "text/plain");
+                    res.send(output);
+                }
+                catch (error) {
+                    this.logger.error({
+                        id: LogId.monitoringServerMetricsFailure,
+                        context: "monitoringServer",
+                        message: `Failed to retrieve metrics: ${String(error)}`,
+                    });
+                    res.status(500).json({ error: "Failed to retrieve metrics" });
+                }
+            });
+        }
+        return Promise.resolve();
+    }
+}
+//# sourceMappingURL=monitoringServer.js.map

package/dist/monitoringServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"monitoringServer.js","sourceRoot":"","sources":["../src/monitoringServer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,WAAW,MAAM,iBAAiB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAEhE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,gBAEX,SAAQ,sBAAsB;IAK5B,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAqC;QACvE,KAAK,CAAC;YACF,OAAO,EAAE;gBACL,UAAU,EAAE,kBAAkB;gBAC9B,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE;aAC7D;YACD,MAAM;SACT,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC;IAC1D,CAAC;IAEkB,WAAW;QAC1B,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAqB,EAAE,GAAqB,EAAE,EAAE;gBACrE,wEAAwE;gBACxE,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;gBACrC,GAAG,CAAC,IAAI,CAAC;oBACL,MAAM,EAAE,IAAI;oBACZ,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;oBAC3C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACtC,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;QACP,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;YAChE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9D,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,IAAqB,EAAE,GAAqB,EAAE,EAAE;gBAC5E,IAAI,CAAC;oBACD,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;oBAClC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;oBACtC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACrB,CAAC;gBAAC,OAAO,KAAc,EAAE,CAAC;oBACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;wBACd,EAAE,EAAE,KAAK,CAAC,8BAA8B;wBACxC,OAAO,EAAE,kBAAkB;wBAC3B,OAAO,EAAE,+BAA+B,MAAM,CAAC,KAAK,CAAC,EAAE;qBAC1D,CAAC,CAAC;oBACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;gBAClE,CAAC;YACL,CAAC,CAAC,CAAC;QACP,CAAC;QAED,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;CACJ"}

package/dist/streamableHttpRunner.d.ts

@@ -0,0 +1,36 @@
+import type { DefaultMetricDefinitions, ITransportRunner } from "@mongodb-js/mcp-types";
+import type { CompositeLogger } from "@mongodb-js/mcp-core";
+import type { MCPHttpServer } from "./mcpHttpServer.js";
+import type { SessionServer } from "@mongodb-js/mcp-types";
+import type { MonitoringServer } from "./monitoringServer.js";
+/**
+ * Options for StreamableHttpRunner.
+ */
+export type StreamableHttpRunnerOptions<TServer extends SessionServer = SessionServer, TMetrics extends DefaultMetricDefinitions = DefaultMetricDefinitions> = {
+    /** Logger instance */
+    logger: CompositeLogger;
+    mcpHttpServer: MCPHttpServer<TServer, TMetrics>;
+    monitoringServer?: MonitoringServer<TMetrics>;
+};
+/**
+ * Transport runner for HTTP transport with streamable responses.
+ * Supports both SSE and JSON response types.
+ *
+ * Server creation is handled by the `MCPHttpServer` instance passed to the constructor.
+ * To customize per-request server creation, extend `MCPHttpServer` and override
+ * the `createServerForRequest()` method.
+ */
+export declare class StreamableHttpRunner<TServer extends SessionServer = SessionServer, TMetrics extends DefaultMetricDefinitions = DefaultMetricDefinitions> implements ITransportRunner {
+    protected readonly mcpHttpServer: MCPHttpServer<TServer, TMetrics>;
+    protected readonly monitoringServer: MonitoringServer<TMetrics> | undefined;
+    protected readonly logger: CompositeLogger;
+    constructor({ logger, mcpHttpServer, monitoringServer }: StreamableHttpRunnerOptions<TServer, TMetrics>);
+    /** Starts the transport runner. */
+    start(): Promise<void>;
+    /**
+     * Stops the HTTP transport runner.
+     * This stops the MCP HTTP server and monitoring server.
+     */
+    close(): Promise<void>;
+}
+//# sourceMappingURL=streamableHttpRunner.d.ts.map

package/dist/streamableHttpRunner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"streamableHttpRunner.d.ts","sourceRoot":"","sources":["../src/streamableHttpRunner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACxF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9D;;GAEG;AACH,MAAM,MAAM,2BAA2B,CACnC,OAAO,SAAS,aAAa,GAAG,aAAa,EAC7C,QAAQ,SAAS,wBAAwB,GAAG,wBAAwB,IACpE;IACA,sBAAsB;IACtB,MAAM,EAAE,eAAe,CAAC;IACxB,aAAa,EAAE,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAChD,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;CACjD,CAAC;AAEF;;;;;;;GAOG;AACH,qBAAa,oBAAoB,CAC7B,OAAO,SAAS,aAAa,GAAG,aAAa,EAC7C,QAAQ,SAAS,wBAAwB,GAAG,wBAAwB,CACtE,YAAW,gBAAgB;IACzB,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnE,SAAS,CAAC,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC;IAC5E,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;gBAE/B,EAAE,MAAM,EAAE,aAAa,EAAE,gBAAgB,EAAE,EAAE,2BAA2B,CAAC,OAAO,EAAE,QAAQ,CAAC;IAMvG,mCAAmC;IAC7B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAa5B;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAG/B"}

package/dist/streamableHttpRunner.js

@@ -0,0 +1,35 @@
+import { LogId } from "@mongodb-js/mcp-core";
+/**
+ * Transport runner for HTTP transport with streamable responses.
+ * Supports both SSE and JSON response types.
+ *
+ * Server creation is handled by the `MCPHttpServer` instance passed to the constructor.
+ * To customize per-request server creation, extend `MCPHttpServer` and override
+ * the `createServerForRequest()` method.
+ */
+export class StreamableHttpRunner {
+    constructor({ logger, mcpHttpServer, monitoringServer }) {
+        this.logger = logger;
+        this.mcpHttpServer = mcpHttpServer;
+        this.monitoringServer = monitoringServer;
+    }
+    /** Starts the transport runner. */
+    async start() {
+        await this.mcpHttpServer.start();
+        // Start the monitoring server if one exists
+        await this.monitoringServer?.start();
+        this.logger.info({
+            message: "Streamable HTTP Transport started",
+            context: "streamableHttpTransport",
+            id: LogId.streamableHttpTransportStarted,
+        });
+    }
+    /**
+     * Stops the HTTP transport runner.
+     * This stops the MCP HTTP server and monitoring server.
+     */
+    async close() {
+        await Promise.allSettled([this.mcpHttpServer.stop(), this.monitoringServer?.stop()]);
+    }
+}
+//# sourceMappingURL=streamableHttpRunner.js.map

package/dist/streamableHttpRunner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"streamableHttpRunner.js","sourceRoot":"","sources":["../src/streamableHttpRunner.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAkB7C;;;;;;;GAOG;AACH,MAAM,OAAO,oBAAoB;IAQ7B,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,gBAAgB,EAAkD;QACnG,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC7C,CAAC;IAED,mCAAmC;IACnC,KAAK,CAAC,KAAK;QACP,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAEjC,4CAA4C;QAC5C,MAAM,IAAI,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC;QAErC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACb,OAAO,EAAE,mCAAmC;YAC5C,OAAO,EAAE,yBAAyB;YAClC,EAAE,EAAE,KAAK,CAAC,8BAA8B;SAC3C,CAAC,CAAC;IACP,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK;QACP,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACzF,CAAC;CACJ"}

package/dist/utils.d.ts

@@ -0,0 +1,4 @@
+export declare function sleep(ms: number, { signal }: {
+    signal: AbortSignal;
+}): Promise<void>;
+//# sourceMappingURL=utils.d.ts.map

package/dist/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA,wBAAsB,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB1F"}

package/dist/utils.js

@@ -0,0 +1,17 @@
+export async function sleep(ms, { signal }) {
+    return new Promise((resolve) => {
+        let listener = undefined;
+        const timeout = setTimeout(() => {
+            if (listener) {
+                signal.removeEventListener("abort", listener);
+            }
+            resolve();
+        }, ms);
+        listener = () => {
+            clearTimeout(timeout);
+            resolve();
+        };
+        signal.addEventListener("abort", listener, { once: true });
+    });
+}
+//# sourceMappingURL=utils.js.map

package/dist/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,EAAU,EAAE,EAAE,MAAM,EAA2B;IACvE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,IAAI,QAAQ,GAA6B,SAAS,CAAC;QACnD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,QAAQ,EAAE,CAAC;gBACX,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAClD,CAAC;YACD,OAAO,EAAE,CAAC;QACd,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,QAAQ,GAAG,GAAS,EAAE;YAClB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO,EAAE,CAAC;QACd,CAAC,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACP,CAAC"}

package/package.json

@@ -0,0 +1,44 @@
+{
+  "name": "@mongodb-js/mcp-http-runners",
+  "description": "HTTP transport runners and servers for MongoDB MCP servers",
+  "version": "3.0.0-prerelease.1",
+  "type": "module",
+  "license": "Apache-2.0",
+  "author": "MongoDB <info@mongodb.com>",
+  "repository": {
+    "url": "https://github.com/mongodb-js/mongodb-mcp-server.git",
+    "directory": "packages/http-runners"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc --build tsconfig.build.json",
+    "test": "vitest --run",
+    "check": "tsc --build tsconfig.build.json --noEmit"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "@mongodb-js/mcp-core": "workspace:*",
+    "express": "^5.2.1"
+  },
+  "devDependencies": {
+    "@mongodb-js/mcp-types": "workspace:*",
+    "@mongodb-js/mcp-metrics": "workspace:*",
+    "@types/express": "^5.0.3",
+    "@types/node": "^25.6.0",
+    "typescript": "^5.9.2",
+    "vitest": "^4.1.4"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}