@mongodb-js/mcp-http-runners 3.0.0-prerelease.2 → 3.0.0-prerelease.4

package/dist/index.d.ts

@@ -1,6 +1,8 @@
 export type { StreamableHttpRunnerOptions } from "./streamableHttpRunner.js";
 export { StreamableHttpRunner } from "./streamableHttpRunner.js";
 export { MCPHttpServer, type MCPHttpServerOptions } from "./mcpHttpServer.js";
+export { LegacyMcpHttpHandler, type LegacyMcpHttpHandlerOptions, type LegacySessionOptions, } from "./legacyMcpHttpHandler.js";
+export { SessionStore, SessionLimitExceededError, SessionRejectedError, createDefaultSessionStore, type ISessionStore, type SessionStoreConstructorArgs, type CreateSessionStoreFn, } from "@mongodb-js/mcp-core";
 export { MonitoringServer, type MonitoringServerOptions } from "./monitoringServer.js";
 export { ExpressBasedHttpServer, type ExpressBasedHttpServerOptions } from "./expressBasedHttpServer.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAG7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAGjE,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,KAAK,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAGvF,OAAO,EAAE,sBAAsB,EAAE,KAAK,6BAA6B,EAAE,MAAM,6BAA6B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAG7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAGjE,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EACH,oBAAoB,EACpB,KAAK,2BAA2B,EAChC,KAAK,oBAAoB,GAC5B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACH,YAAY,EACZ,yBAAyB,EACzB,oBAAoB,EACpB,yBAAyB,EACzB,KAAK,aAAa,EAClB,KAAK,2BAA2B,EAChC,KAAK,oBAAoB,GAC5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,KAAK,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAGvF,OAAO,EAAE,sBAAsB,EAAE,KAAK,6BAA6B,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/index.js

@@ -2,6 +2,9 @@
 export { StreamableHttpRunner } from "./streamableHttpRunner.js";
 // HTTP Servers
 export { MCPHttpServer } from "./mcpHttpServer.js";
+export { LegacyMcpHttpHandler, } from "./legacyMcpHttpHandler.js";
+// Session lifecycle primitives live in @mongodb-js/mcp-core; re-export for convenience.
+export { SessionStore, SessionLimitExceededError, SessionRejectedError, createDefaultSessionStore, } from "@mongodb-js/mcp-core";
 export { MonitoringServer } from "./monitoringServer.js";
 // Express HTTP Server base
 export { ExpressBasedHttpServer } from "./expressBasedHttpServer.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,qCAAqC;AACrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,eAAe;AACf,OAAO,EAAE,aAAa,EAA6B,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAgC,MAAM,uBAAuB,CAAC;AAEvF,2BAA2B;AAC3B,OAAO,EAAE,sBAAsB,EAAsC,MAAM,6BAA6B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,qCAAqC;AACrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,eAAe;AACf,OAAO,EAAE,aAAa,EAA6B,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EACH,oBAAoB,GAGvB,MAAM,2BAA2B,CAAC;AACnC,wFAAwF;AACxF,OAAO,EACH,YAAY,EACZ,yBAAyB,EACzB,oBAAoB,EACpB,yBAAyB,GAI5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAgC,MAAM,uBAAuB,CAAC;AAEvF,2BAA2B;AAC3B,OAAO,EAAE,sBAAsB,EAAsC,MAAM,6BAA6B,CAAC"}

package/dist/legacyMcpHttpHandler.d.ts

@@ -0,0 +1,124 @@
+import { NodeStreamableHTTPServerTransport } from "@modelcontextprotocol/node";
+import type express from "express";
+import type { ILogger, TransportRequestContext, HttpServerOptions, BaseServer } from "@mongodb-js/mcp-types";
+import { type ISessionStore } from "@mongodb-js/mcp-core";
+/** Builds a fresh request-scoped server for a legacy request. */
+export type LegacyServerFactory = (request: TransportRequestContext) => Promise<BaseServer>;
+/** Tunables forwarded to the {@link SessionStore}. */
+export type LegacySessionOptions = {
+    maxSessions?: number;
+    idleTimeoutMS?: number;
+    notificationTimeoutMS?: number;
+    evictionIdleGraceMS?: number;
+    /**
+     * When true, the legacy (2025-era) HTTP transport accepts a client-supplied
+     * `mcp-session-id` header on `initialize` instead of rejecting it, and
+     * reuses that id for the session. When no session is found for a supplied
+     * id, the handler attempts an implicit re-initialization and restores the
+     * client's previously negotiated capabilities from the session store (see
+     * {@link ISessionStore.saveNegotiatedClientState}); a store without durable
+     * storage restores nothing. Defaults to `false`.
+     */
+    externallyManagedSessions?: boolean;
+};
+export type LegacyMcpHttpHandlerOptions = {
+    /** Builds a fresh request-scoped server for the legacy session. */
+    createServer: LegacyServerFactory;
+    logger: ILogger;
+    http: HttpServerOptions;
+    /** Session store backing the legacy sessionful path (auth-aware or durable). */
+    sessionStore: ISessionStore<NodeStreamableHTTPServerTransport>;
+    /**
+     * When true, accept a client-supplied `mcp-session-id` on `initialize` and
+     * restore negotiated client state for implicitly re-initialized sessions.
+     * Defaults to `false`.
+     */
+    externallyManagedSessions?: boolean;
+};
+/**
+ * The contract {@link MCPHttpServer.createLegacyHandler} returns for 2025-era
+ * serving. It is deliberately transport-shaped so alternative implementations
+ * (a different transport, a distributed session store, ...) can be returned by
+ * overriding `createLegacyHandler`.
+ */
+export interface LegacyMcpHandler {
+    /** Serves one 2025-era HTTP request (POST/GET/DELETE) to `/mcp`. */
+    handle(req: express.Request, res: express.Response): Promise<void>;
+    /** Releases any held resources (e.g. live sessions) on shutdown. */
+    close(): Promise<void>;
+}
+/**
+ * Serves 2025-era (legacy) MCP requests over streamable HTTP **sessionfully**.
+ *
+ * The 2026-07-28 protocol is stateless and carries client identity per request
+ * in the `_meta` envelope. The 2025 protocol is not: it declares the client's
+ * negotiated capabilities (incl. `elicitation`) in the `initialize` handshake
+ * and delivers elicitation as real server→client requests. Both need a live,
+ * correlated transport, which is exactly what the SDK's legacy elicitation
+ * shim relies on. The SDK's `legacy: 'stateless'` mode cannot do that (each
+ * request gets a fresh instance: no capabilities, no return channel).
+ *
+ * This handler owns that sessionful lifecycle: an `initialize` POST creates a
+ * session (a connected transport/server pair), later requests and the SSE idle
+ * stream reuse the session's transport (the shim's return channel), and a
+ * DELETE closes it. Sessions are bounded by the injected `sessionStore`.
+ * Keeping it isolated from {@link MCPHttpServer} leaves the modern stateless
+ * path clean.
+ */
+export declare class LegacyMcpHttpHandler implements LegacyMcpHandler {
+    private readonly createServer;
+    private readonly logger;
+    private readonly http;
+    private readonly sessions;
+    private readonly externallyManagedSessions;
+    /** Serializes concurrent initialization of the same session id (see {@link createSession}). */
+    private readonly pendingInitializations;
+    constructor({ createServer, logger, http, sessionStore, externallyManagedSessions, }: LegacyMcpHttpHandlerOptions);
+    /** Closes every live session (e.g. on server shutdown). */
+    close(): Promise<void>;
+    private buildTransportContext;
+    /** Reports a session error the way main did: same codes, messages, and statuses. */
+    private reportSessionError;
+    /**
+     * Keeps the session's SSE idle stream alive through proxies and reaps dead
+     * clients: pings every 30s and closes the transport after 3 consecutive
+     * failures. Not started in JSON response mode, where connections are
+     * short-lived and pings aren't needed.
+     */
+    private startKeepAliveLoop;
+    /**
+     * Creates a fresh session (or returns the existing / in-flight one for an
+     * externally managed id). Concurrent initializations of the same session id
+     * are serialized so they don't race on `addSession` (see
+     * {@link createSessionInstance}).
+     */
+    private createSession;
+    /** Builds the server/transport pair and registers it in the session store. */
+    private createSessionInstance;
+    /**
+     * Serves a 2025-era request. POSTs that carry no session begin a new session
+     * (the `initialize` handshake); POSTs/GETs/DELETEs that carry a session id
+     * are routed to the stored transport, preserving the client's negotiated
+     * state and providing the SSE return channel for server→client requests.
+     */
+    handle(req: express.Request, res: express.Response): Promise<void>;
+    /** Routes a session-carrying request to its live transport; reports a session error when missing. */
+    private handleSessionRequest;
+    /**
+     * Restores the client state negotiated during the session's original
+     * `initialize` onto an implicitly re-initialized server. The session's
+     * server on this pod never saw the client's `initialize` request, so
+     * without this it would treat the client as capability-less — e.g.
+     * skipping confirmation elicitation for destructive tools. No-op when the
+     * session store does not persist negotiated client state.
+     */
+    private restoreNegotiatedClientState;
+    /**
+     * Arranges for the client state negotiated by a real `initialize` exchange
+     * to be persisted through the session store, so implicit re-initializations
+     * of this session can restore it. Wraps the `oninitialized` callback
+     * installed by `server.connect`, hence must run after it.
+     */
+    private captureNegotiatedClientStateOnInitialize;
+}
+//# sourceMappingURL=legacyMcpHttpHandler.d.ts.map

package/dist/legacyMcpHttpHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacyMcpHttpHandler.d.ts","sourceRoot":"","sources":["../src/legacyMcpHttpHandler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iCAAiC,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,EACR,OAAO,EACP,uBAAuB,EAEvB,iBAAiB,EACjB,UAAU,EAEb,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAA6B,KAAK,aAAa,EAAE,MAAM,sBAAsB,CAAC;AA2BrF,iEAAiE;AACjE,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,EAAE,uBAAuB,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;AAE5F,sDAAsD;AACtD,MAAM,MAAM,oBAAoB,GAAG;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;;;OAQG;IACH,yBAAyB,CAAC,EAAE,OAAO,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACtC,mEAAmE;IACnE,YAAY,EAAE,mBAAmB,CAAC;IAClC,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,iBAAiB,CAAC;IACxB,gFAAgF;IAChF,YAAY,EAAE,aAAa,CAAC,iCAAiC,CAAC,CAAC;IAC/D;;;;OAIG;IACH,yBAAyB,CAAC,EAAE,OAAO,CAAC;CACvC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC7B,oEAAoE;IACpE,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,oEAAoE;IACpE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,oBAAqB,YAAW,gBAAgB;IACzD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IACnD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAU;IACjC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoB;IACzC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmD;IAC5E,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAU;IACpD,+FAA+F;IAC/F,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAiE;gBAE5F,EACR,YAAY,EACZ,MAAM,EACN,IAAI,EACJ,YAAY,EACZ,yBAAiC,GACpC,EAAE,2BAA2B;IAQ9B,2DAA2D;IAC9C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAInC,OAAO,CAAC,qBAAqB;IAc7B,oFAAoF;IACpF,OAAO,CAAC,kBAAkB;IAsC1B;;;;;OAKG;YACW,kBAAkB;IAgDhC;;;;;OAKG;YACW,aAAa;IAyC3B,8EAA8E;YAChE,qBAAqB;IA0FnC;;;;;OAKG;IACU,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IA8E/E,qGAAqG;YACvF,oBAAoB;IA0ClC;;;;;;;OAOG;YACW,4BAA4B;IAkC1C;;;;;OAKG;IACH,OAAO,CAAC,wCAAwC;CAwBnD"}

package/dist/legacyMcpHttpHandler.js

@@ -0,0 +1,437 @@
+import { isInitializeRequest } from "@modelcontextprotocol/server";
+import { NodeStreamableHTTPServerTransport } from "@modelcontextprotocol/node";
+import { LogId, getRandomUUID, requestIdAttr } from "@mongodb-js/mcp-core";
+import { SessionLimitExceededError } from "@mongodb-js/mcp-core";
+import { sleep } from "./utils.js";
+/**
+ * Session error codes as they were served to 2025-era clients on main; the
+ * shared constants were removed from mcp-core with the session surface, so
+ * the legacy path keeps its wire contract locally.
+ */
+const JSON_RPC_ERROR_CODE_SESSION_ID_REQUIRED = -32001;
+const JSON_RPC_ERROR_CODE_SESSION_ID_INVALID = -32002;
+const JSON_RPC_ERROR_CODE_SESSION_NOT_FOUND = -32003;
+const JSON_RPC_ERROR_CODE_INVALID_REQUEST = -32004;
+const JSON_RPC_ERROR_CODE_DISALLOWED_EXTERNAL_SESSION = -32005;
+const JSON_RPC_ERROR_CODE_SESSION_LIMIT_EXCEEDED = -32006;
+/** Guards against oversized `mcp-session-id` headers (e.g. an abusive client). */
+const MAX_SESSION_ID_LENGTH = 512;
+/**
+ * Serves 2025-era (legacy) MCP requests over streamable HTTP **sessionfully**.
+ *
+ * The 2026-07-28 protocol is stateless and carries client identity per request
+ * in the `_meta` envelope. The 2025 protocol is not: it declares the client's
+ * negotiated capabilities (incl. `elicitation`) in the `initialize` handshake
+ * and delivers elicitation as real server→client requests. Both need a live,
+ * correlated transport, which is exactly what the SDK's legacy elicitation
+ * shim relies on. The SDK's `legacy: 'stateless'` mode cannot do that (each
+ * request gets a fresh instance: no capabilities, no return channel).
+ *
+ * This handler owns that sessionful lifecycle: an `initialize` POST creates a
+ * session (a connected transport/server pair), later requests and the SSE idle
+ * stream reuse the session's transport (the shim's return channel), and a
+ * DELETE closes it. Sessions are bounded by the injected `sessionStore`.
+ * Keeping it isolated from {@link MCPHttpServer} leaves the modern stateless
+ * path clean.
+ */
+export class LegacyMcpHttpHandler {
+    constructor({ createServer, logger, http, sessionStore, externallyManagedSessions = false, }) {
+        /** Serializes concurrent initialization of the same session id (see {@link createSession}). */
+        this.pendingInitializations = new Map();
+        this.createServer = createServer;
+        this.logger = logger;
+        this.http = http;
+        this.sessions = sessionStore;
+        this.externallyManagedSessions = externallyManagedSessions;
+    }
+    /** Closes every live session (e.g. on server shutdown). */
+    async close() {
+        await this.sessions.closeAllSessions();
+    }
+    buildTransportContext(req) {
+        return {
+            headers: req.headers,
+            query: req.query,
+            // The explicit auth state of this request. Legacy serving does not
+            // normalize authInfo itself; hosts supply it via `req.auth` when
+            // using authenticated mode.
+            authInfo: req.auth
+                ? { mode: "authenticated", state: req.auth }
+                : { mode: "unauthenticated" },
+            protocol: "legacy",
+        };
+    }
+    /** Reports a session error the way main did: same codes, messages, and statuses. */
+    reportSessionError(res, errorCode) {
+        let message;
+        let statusCode = 400;
+        switch (errorCode) {
+            case JSON_RPC_ERROR_CODE_SESSION_ID_REQUIRED:
+                message = "session id is required";
+                break;
+            case JSON_RPC_ERROR_CODE_SESSION_ID_INVALID:
+                message = "session id is invalid";
+                break;
+            case JSON_RPC_ERROR_CODE_INVALID_REQUEST:
+                message = "invalid request";
+                break;
+            case JSON_RPC_ERROR_CODE_SESSION_NOT_FOUND:
+                message = "session not found";
+                statusCode = 404;
+                break;
+            case JSON_RPC_ERROR_CODE_DISALLOWED_EXTERNAL_SESSION:
+                message = "cannot provide sessionId when externally managed sessions are disabled";
+                break;
+            case JSON_RPC_ERROR_CODE_SESSION_LIMIT_EXCEEDED:
+                message = "server has reached the maximum number of concurrent sessions, try again later";
+                statusCode = 503;
+                break;
+            default:
+                message = "unknown error";
+                statusCode = 500;
+        }
+        res.status(statusCode).json({
+            jsonrpc: "2.0",
+            error: {
+                code: errorCode,
+                message,
+            },
+        });
+    }
+    /**
+     * Keeps the session's SSE idle stream alive through proxies and reaps dead
+     * clients: pings every 30s and closes the transport after 3 consecutive
+     * failures. Not started in JSON response mode, where connections are
+     * short-lived and pings aren't needed.
+     */
+    async startKeepAliveLoop({ transport, signal, }) {
+        if (this.http.responseType === "json") {
+            return;
+        }
+        let failedPings = 0;
+        while (!signal.aborted) {
+            try {
+                this.logger.debug({
+                    id: LogId.streamableHttpTransportKeepAlive,
+                    context: "streamableHttpTransport",
+                    message: "Sending ping",
+                });
+                await transport.send({
+                    jsonrpc: "2.0",
+                    method: "ping",
+                });
+                failedPings = 0;
+            }
+            catch (err) {
+                try {
+                    failedPings++;
+                    this.logger.warning({
+                        id: LogId.streamableHttpTransportKeepAliveFailure,
+                        context: "streamableHttpTransport",
+                        message: `Error sending ping (attempt #${failedPings}): ${err instanceof Error ? err.message : String(err)}`,
+                    });
+                    if (failedPings > 3) {
+                        await transport.close();
+                        return;
+                    }
+                }
+                catch {
+                    // Ignore the error of the transport close
+                }
+            }
+            await sleep(30000, { signal });
+        }
+    }
+    /**
+     * Creates a fresh session (or returns the existing / in-flight one for an
+     * externally managed id). Concurrent initializations of the same session id
+     * are serialized so they don't race on `addSession` (see
+     * {@link createSessionInstance}).
+     */
+    async createSession(req, providedSessionId, isImplicitInitialization = false) {
+        const sessionId = providedSessionId ?? getRandomUUID();
+        // An externally managed session may already exist in the store (e.g. a
+        // client re-sends `initialize` for the same id). Reuse it rather than
+        // creating a duplicate, which would throw "Session already exists".
+        const existingTransport = await this.sessions.getSession(sessionId, req.headers);
+        if (existingTransport) {
+            return existingTransport;
+        }
+        // Another request is already initializing this id; wait for it and reuse
+        // its transport instead of racing it.
+        const pendingInit = this.pendingInitializations.get(sessionId);
+        if (pendingInit) {
+            this.logger.debug({
+                id: LogId.streamableHttpTransportSessionNotFound,
+                context: "streamableHttpTransport",
+                message: `Session with ID ${sessionId} is already being initialized, waiting`,
+                attributes: { ...requestIdAttr(req.headers) },
+            });
+            try {
+                return await pendingInit;
+            }
+            catch {
+                // The initializer handles its own error; fall through to retry.
+            }
+        }
+        const initPromise = this.createSessionInstance(req, sessionId, isImplicitInitialization);
+        this.pendingInitializations.set(sessionId, initPromise);
+        try {
+            return await initPromise;
+        }
+        finally {
+            this.pendingInitializations.delete(sessionId);
+        }
+    }
+    /** Builds the server/transport pair and registers it in the session store. */
+    async createSessionInstance(req, sessionId, isImplicitInitialization) {
+        const transport = new NodeStreamableHTTPServerTransport({
+            sessionIdGenerator: () => sessionId,
+            enableJsonResponse: this.http.responseType === "json",
+        });
+        // HACK: When we're implicitly re-initializing an externally managed
+        // session, mark the transport as already initialized so the SDK does
+        // not reject follow-up requests with "transport not initialized".
+        // Guard the internal field: if the SDK's transport shape changes, the
+        // session degrades gracefully rather than throwing before the request
+        // can be answered.
+        if (isImplicitInitialization) {
+            const internalTransport = transport._webStandardTransport;
+            if (internalTransport) {
+                internalTransport._initialized = true;
+                internalTransport.sessionId = sessionId;
+            }
+        }
+        const server = (await this.createServer(this.buildTransportContext(req)));
+        // Admit (check cap, evict LRU idle victim). A rejection admits nothing.
+        try {
+            await this.sessions.addSession({ sessionId, transport, logger: this.logger, headers: req.headers });
+        }
+        catch (error) {
+            // Dispose the un-connected server we built for a rejected session.
+            await server.close().catch(() => undefined);
+            throw error;
+        }
+        const keepAliveController = new AbortController();
+        void this.startKeepAliveLoop({ transport, signal: keepAliveController.signal });
+        // When the transport closes (client disconnect or store-initiated
+        // eviction/timeout), tear down the server and remove the session.
+        transport.onclose = () => {
+            keepAliveController.abort();
+            void server
+                .close()
+                .catch((error) => {
+                this.logger.error({
+                    id: LogId.streamableHttpTransportCloseFailure,
+                    context: "streamableHttpTransport",
+                    message: `Error closing legacy session ${sessionId}: ${error instanceof Error ? error.message : String(error)}`,
+                });
+            })
+                .finally(() => {
+                // The store removes the session before it closes the
+                // transport, so on store-initiated closes (eviction, idle
+                // timeout) the session is already gone — nothing to do.
+                if (!this.sessions.hasSession(sessionId)) {
+                    return;
+                }
+                this.sessions.closeSession({ sessionId, reason: "transport_closed" }).catch((error) => {
+                    this.logger.error({
+                        id: LogId.streamableHttpTransportCloseFailure,
+                        context: "streamableHttpTransport",
+                        message: `Error removing legacy session ${sessionId}: ${error instanceof Error ? error.message : String(error)}`,
+                    });
+                });
+            });
+        };
+        try {
+            await server.connect(transport);
+        }
+        catch (error) {
+            // Don't leave a never-connected session registered; closing the
+            // transport triggers the onclose teardown above.
+            await this.sessions.closeSession({ sessionId, reason: "unknown" }).catch(() => undefined);
+            await server.close().catch(() => undefined);
+            throw error;
+        }
+        if (isImplicitInitialization) {
+            await this.restoreNegotiatedClientState(server, sessionId, req.headers);
+        }
+        else {
+            this.captureNegotiatedClientStateOnInitialize(server, sessionId, req.headers);
+        }
+        return transport;
+    }
+    /**
+     * Serves a 2025-era request. POSTs that carry no session begin a new session
+     * (the `initialize` handshake); POSTs/GETs/DELETEs that carry a session id
+     * are routed to the stored transport, preserving the client's negotiated
+     * state and providing the SSE return channel for server→client requests.
+     */
+    async handle(req, res) {
+        const sessionId = req.headers["mcp-session-id"];
+        if (req.method === "GET") {
+            // The SSE idle stream only exists in SSE response mode.
+            if (this.http.responseType === "json") {
+                res.status(405).set("Allow", ["POST", "DELETE"]).send("Method Not Allowed");
+                return;
+            }
+            await this.handleSessionRequest(req, res, sessionId);
+            return;
+        }
+        if (req.method === "DELETE") {
+            await this.handleSessionRequest(req, res, sessionId);
+            return;
+        }
+        // POST /mcp.
+        if (sessionId && typeof sessionId !== "string") {
+            this.reportSessionError(res, JSON_RPC_ERROR_CODE_SESSION_ID_INVALID);
+            return;
+        }
+        if (typeof sessionId === "string" && sessionId.length > MAX_SESSION_ID_LENGTH) {
+            this.logger.debug({
+                id: LogId.streamableHttpTransportSessionNotFound,
+                context: "streamableHttpTransport",
+                message: `Session ID exceeds maximum length ${MAX_SESSION_ID_LENGTH}`,
+                attributes: { ...requestIdAttr(req.headers) },
+            });
+            this.reportSessionError(res, JSON_RPC_ERROR_CODE_SESSION_ID_INVALID);
+            return;
+        }
+        if (isInitializeRequest(req.body)) {
+            const resolvedSessionId = typeof sessionId === "string" && this.externallyManagedSessions ? sessionId : undefined;
+            if (sessionId && !resolvedSessionId) {
+                // A client-supplied session id is only honored when externally
+                // managed sessions are enabled; otherwise it is rejected.
+                this.logger.debug({
+                    id: LogId.streamableHttpTransportDisallowedExternalSessionError,
+                    context: "streamableHttpTransport",
+                    message: `Client provided session ID ${sessionId}, but externallyManagedSessions is disabled`,
+                    attributes: { ...requestIdAttr(req.headers) },
+                });
+                this.reportSessionError(res, JSON_RPC_ERROR_CODE_DISALLOWED_EXTERNAL_SESSION);
+                return;
+            }
+            let transport;
+            try {
+                transport = await this.createSession(req, resolvedSessionId);
+            }
+            catch (error) {
+                if (error instanceof SessionLimitExceededError) {
+                    this.logger.warning({
+                        id: LogId.streamableHttpTransportRequestFailure,
+                        context: "streamableHttpTransport",
+                        message: `Rejecting legacy session startup: ${error.message}`,
+                        attributes: { ...requestIdAttr(req.headers) },
+                    });
+                    this.reportSessionError(res, JSON_RPC_ERROR_CODE_SESSION_LIMIT_EXCEEDED);
+                    return;
+                }
+                throw error;
+            }
+            await transport.handleRequest(req, res, req.body);
+            return;
+        }
+        if (!sessionId) {
+            this.reportSessionError(res, JSON_RPC_ERROR_CODE_INVALID_REQUEST);
+            return;
+        }
+        await this.handleSessionRequest(req, res, sessionId);
+    }
+    /** Routes a session-carrying request to its live transport; reports a session error when missing. */
+    async handleSessionRequest(req, res, sessionId) {
+        if (!sessionId) {
+            this.reportSessionError(res, JSON_RPC_ERROR_CODE_SESSION_ID_REQUIRED);
+            return;
+        }
+        if (typeof sessionId !== "string") {
+            this.reportSessionError(res, JSON_RPC_ERROR_CODE_SESSION_ID_INVALID);
+            return;
+        }
+        let transport = await this.sessions.getSession(sessionId, req.headers);
+        if (!transport) {
+            if (!this.externallyManagedSessions) {
+                this.logger.debug({
+                    id: LogId.streamableHttpTransportSessionNotFound,
+                    context: "streamableHttpTransport",
+                    message: `Session with ID ${sessionId} not found`,
+                    attributes: { ...requestIdAttr(req.headers) },
+                });
+                this.reportSessionError(res, JSON_RPC_ERROR_CODE_SESSION_NOT_FOUND);
+                return;
+            }
+            // Externally managed sessions may be implicitly re-initialized: a
+            // session held externally can arrive at this pod without being in
+            // the store. Build a fresh session under the supplied id and
+            // restore the client's previously negotiated capabilities (if the
+            // store persists them) instead of rejecting the request.
+            this.logger.debug({
+                id: LogId.streamableHttpTransportSessionNotFound,
+                context: "streamableHttpTransport",
+                message: `Session with ID ${sessionId} not found, implicitly re-initializing`,
+                attributes: { ...requestIdAttr(req.headers) },
+            });
+            transport = await this.createSession(req, sessionId, true);
+        }
+        await transport.handleRequest(req, res, req.body);
+    }
+    /**
+     * Restores the client state negotiated during the session's original
+     * `initialize` onto an implicitly re-initialized server. The session's
+     * server on this pod never saw the client's `initialize` request, so
+     * without this it would treat the client as capability-less — e.g.
+     * skipping confirmation elicitation for destructive tools. No-op when the
+     * session store does not persist negotiated client state.
+     */
+    async restoreNegotiatedClientState(server, sessionId, headers) {
+        let state;
+        try {
+            state = await this.sessions.loadNegotiatedClientState(sessionId, headers);
+        }
+        catch (error) {
+            // The restored session stays usable; it just behaves as if the
+            // client had no optional capabilities.
+            this.logger.warning({
+                id: LogId.streamableHttpTransportClientStateRestoreFailure,
+                context: "streamableHttpTransport",
+                message: `Failed to restore negotiated client state for session ${sessionId}: ${error instanceof Error ? error.message : String(error)}`,
+                attributes: { ...requestIdAttr(headers) },
+            });
+            return;
+        }
+        if (!state) {
+            return;
+        }
+        // HACK: the SDK offers no supported way to seed a Server with a
+        // previously negotiated initialization, so we write the private fields
+        // the initialize handler would have populated.
+        const protocolServer = server.mcpServer.server;
+        protocolServer._clientCapabilities = state.clientCapabilities;
+        protocolServer._clientVersion = state.clientInfo;
+    }
+    /**
+     * Arranges for the client state negotiated by a real `initialize` exchange
+     * to be persisted through the session store, so implicit re-initializations
+     * of this session can restore it. Wraps the `oninitialized` callback
+     * installed by `server.connect`, hence must run after it.
+     */
+    captureNegotiatedClientStateOnInitialize(server, sessionId, headers) {
+        const protocolServer = server.mcpServer.server;
+        const originalOnInitialized = protocolServer.oninitialized;
+        protocolServer.oninitialized = () => {
+            originalOnInitialized?.();
+            const state = {
+                clientCapabilities: protocolServer.getClientCapabilities(),
+                clientInfo: protocolServer.getClientVersion(),
+            };
+            this.sessions.saveNegotiatedClientState(sessionId, state, headers).catch((error) => {
+                this.logger.warning({
+                    id: LogId.streamableHttpTransportClientStateSaveFailure,
+                    context: "streamableHttpTransport",
+                    message: `Failed to save negotiated client state for session ${sessionId}: ${error instanceof Error ? error.message : String(error)}`,
+                    attributes: { ...requestIdAttr(headers) },
+                });
+            });
+        };
+    }
+}
+//# sourceMappingURL=legacyMcpHttpHandler.js.map

package/dist/legacyMcpHttpHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacyMcpHttpHandler.js","sourceRoot":"","sources":["../src/legacyMcpHttpHandler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAgD,MAAM,8BAA8B,CAAC;AACjH,OAAO,EAAE,iCAAiC,EAAE,MAAM,4BAA4B,CAAC;AAU/E,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,yBAAyB,EAAsB,MAAM,sBAAsB,CAAC;AACrF,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC;;;;GAIG;AACH,MAAM,uCAAuC,GAAG,CAAC,KAAK,CAAC;AACvD,MAAM,sCAAsC,GAAG,CAAC,KAAK,CAAC;AACtD,MAAM,qCAAqC,GAAG,CAAC,KAAK,CAAC;AACrD,MAAM,mCAAmC,GAAG,CAAC,KAAK,CAAC;AACnD,MAAM,+CAA+C,GAAG,CAAC,KAAK,CAAC;AAC/D,MAAM,0CAA0C,GAAG,CAAC,KAAK,CAAC;AAE1D,kFAAkF;AAClF,MAAM,qBAAqB,GAAG,GAAG,CAAC;AA4DlC;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,oBAAoB;IAS7B,YAAY,EACR,YAAY,EACZ,MAAM,EACN,IAAI,EACJ,YAAY,EACZ,yBAAyB,GAAG,KAAK,GACP;QAT9B,+FAA+F;QAC9E,2BAAsB,GAAG,IAAI,GAAG,EAAsD,CAAC;QASpG,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,YAAY,CAAC;QAC7B,IAAI,CAAC,yBAAyB,GAAG,yBAAyB,CAAC;IAC/D,CAAC;IAED,2DAA2D;IACpD,KAAK,CAAC,KAAK;QACd,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC;IAEO,qBAAqB,CAAC,GAAoB;QAC9C,OAAO;YACH,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,KAAK,EAAE,GAAG,CAAC,KAAsD;YACjE,mEAAmE;YACnE,iEAAiE;YACjE,4BAA4B;YAC5B,QAAQ,EAAG,GAAoD,CAAC,IAAI;gBAChE,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAG,GAAmD,CAAC,IAAI,EAAE;gBAC7F,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE;YACjC,QAAQ,EAAE,QAAQ;SACrB,CAAC;IACN,CAAC;IAED,oFAAoF;IAC5E,kBAAkB,CAAC,GAAqB,EAAE,SAAiB;QAC/D,IAAI,OAAe,CAAC;QACpB,IAAI,UAAU,GAAG,GAAG,CAAC;QAErB,QAAQ,SAAS,EAAE,CAAC;YAChB,KAAK,uCAAuC;gBACxC,OAAO,GAAG,wBAAwB,CAAC;gBACnC,MAAM;YACV,KAAK,sCAAsC;gBACvC,OAAO,GAAG,uBAAuB,CAAC;gBAClC,MAAM;YACV,KAAK,mCAAmC;gBACpC,OAAO,GAAG,iBAAiB,CAAC;gBAC5B,MAAM;YACV,KAAK,qCAAqC;gBACtC,OAAO,GAAG,mBAAmB,CAAC;gBAC9B,UAAU,GAAG,GAAG,CAAC;gBACjB,MAAM;YACV,KAAK,+CAA+C;gBAChD,OAAO,GAAG,wEAAwE,CAAC;gBACnF,MAAM;YACV,KAAK,0CAA0C;gBAC3C,OAAO,GAAG,+EAA+E,CAAC;gBAC1F,UAAU,GAAG,GAAG,CAAC;gBACjB,MAAM;YACV;gBACI,OAAO,GAAG,eAAe,CAAC;gBAC1B,UAAU,GAAG,GAAG,CAAC;QACzB,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACH,IAAI,EAAE,SAAS;gBACf,OAAO;aACV;SACJ,CAAC,CAAC;IACP,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,kBAAkB,CAAC,EAC7B,SAAS,EACT,MAAM,GAIT;QACG,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;YACpC,OAAO;QACX,CAAC;QAED,IAAI,WAAW,GAAG,CAAC,CAAC;QAEpB,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;oBACd,EAAE,EAAE,KAAK,CAAC,gCAAgC;oBAC1C,OAAO,EAAE,yBAAyB;oBAClC,OAAO,EAAE,cAAc;iBAC1B,CAAC,CAAC;gBAEH,MAAM,SAAS,CAAC,IAAI,CAAC;oBACjB,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,MAAM;iBACjB,CAAC,CAAC;gBACH,WAAW,GAAG,CAAC,CAAC;YACpB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACX,IAAI,CAAC;oBACD,WAAW,EAAE,CAAC;oBACd,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;wBAChB,EAAE,EAAE,KAAK,CAAC,uCAAuC;wBACjD,OAAO,EAAE,yBAAyB;wBAClC,OAAO,EAAE,gCAAgC,WAAW,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;qBAC/G,CAAC,CAAC;oBAEH,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;wBAClB,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;wBACxB,OAAO;oBACX,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACL,0CAA0C;gBAC9C,CAAC;YACL,CAAC;YAED,MAAM,KAAK,CAAC,KAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACpC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,aAAa,CACvB,GAAoB,EACpB,iBAA0B,EAC1B,wBAAwB,GAAG,KAAK;QAEhC,MAAM,SAAS,GAAG,iBAAiB,IAAI,aAAa,EAAE,CAAC;QAEvD,uEAAuE;QACvE,sEAAsE;QACtE,oEAAoE;QACpE,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACjF,IAAI,iBAAiB,EAAE,CAAC;YACpB,OAAO,iBAAiB,CAAC;QAC7B,CAAC;QAED,yEAAyE;QACzE,sCAAsC;QACtC,MAAM,WAAW,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/D,IAAI,WAAW,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gBACd,EAAE,EAAE,KAAK,CAAC,sCAAsC;gBAChD,OAAO,EAAE,yBAAyB;gBAClC,OAAO,EAAE,mBAAmB,SAAS,wCAAwC;gBAC7E,UAAU,EAAE,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;aAChD,CAAC,CAAC;YACH,IAAI,CAAC;gBACD,OAAO,MAAM,WAAW,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACL,gEAAgE;YACpE,CAAC;QACL,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,EAAE,SAAS,EAAE,wBAAwB,CAAC,CAAC;QACzF,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACxD,IAAI,CAAC;YACD,OAAO,MAAM,WAAW,CAAC;QAC7B,CAAC;gBAAS,CAAC;YACP,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClD,CAAC;IACL,CAAC;IAED,8EAA8E;IACtE,KAAK,CAAC,qBAAqB,CAC/B,GAAoB,EACpB,SAAiB,EACjB,wBAAiC;QAEjC,MAAM,SAAS,GAAG,IAAI,iCAAiC,CAAC;YACpD,kBAAkB,EAAE,GAAW,EAAE,CAAC,SAAS;YAC3C,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,KAAK,MAAM;SACxD,CAAC,CAAC;QAEH,oEAAoE;QACpE,qEAAqE;QACrE,kEAAkE;QAClE,sEAAsE;QACtE,sEAAsE;QACtE,mBAAmB;QACnB,IAAI,wBAAwB,EAAE,CAAC;YAC3B,MAAM,iBAAiB,GACnB,SAGH,CAAC,qBAAqB,CAAC;YACxB,IAAI,iBAAiB,EAAE,CAAC;gBACpB,iBAAiB,CAAC,YAAY,GAAG,IAAI,CAAC;gBACtC,iBAAiB,CAAC,SAAS,GAAG,SAAS,CAAC;YAC5C,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAgC,CAAC;QAEzG,wEAAwE;QACxE,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACxG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,mEAAmE;YACnE,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC5C,MAAM,KAAK,CAAC;QAChB,CAAC;QAED,MAAM,mBAAmB,GAAG,IAAI,eAAe,EAAE,CAAC;QAClD,KAAK,IAAI,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC;QAChF,kEAAkE;QAClE,kEAAkE;QAClE,SAAS,CAAC,OAAO,GAAG,GAAS,EAAE;YAC3B,mBAAmB,CAAC,KAAK,EAAE,CAAC;YAC5B,KAAK,MAAM;iBACN,KAAK,EAAE;iBACP,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;oBACd,EAAE,EAAE,KAAK,CAAC,mCAAmC;oBAC7C,OAAO,EAAE,yBAAyB;oBAClC,OAAO,EAAE,gCAAgC,SAAS,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;iBAClH,CAAC,CAAC;YACP,CAAC,CAAC;iBACD,OAAO,CAAC,GAAG,EAAE;gBACV,qDAAqD;gBACrD,0DAA0D;gBAC1D,wDAAwD;gBACxD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;oBACvC,OAAO;gBACX,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;oBAC3F,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;wBACd,EAAE,EAAE,KAAK,CAAC,mCAAmC;wBAC7C,OAAO,EAAE,yBAAyB;wBAClC,OAAO,EAAE,iCAAiC,SAAS,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;qBACnH,CAAC,CAAC;gBACP,CAAC,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;QACX,CAAC,CAAC;QAEF,IAAI,CAAC;YACD,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,gEAAgE;YAChE,iDAAiD;YACjD,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1F,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC5C,MAAM,KAAK,CAAC;QAChB,CAAC;QAED,IAAI,wBAAwB,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,4BAA4B,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5E,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,wCAAwC,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAClF,CAAC;QAED,OAAO,SAAS,CAAC;IACrB,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,MAAM,CAAC,GAAoB,EAAE,GAAqB;QAC3D,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAEhD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACvB,wDAAwD;YACxD,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBACpC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;gBAC5E,OAAO;YACX,CAAC;YACD,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YACrD,OAAO;QACX,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YACrD,OAAO;QACX,CAAC;QAED,aAAa;QACb,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC7C,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;YACrE,OAAO;QACX,CAAC;QACD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;YAC5E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gBACd,EAAE,EAAE,KAAK,CAAC,sCAAsC;gBAChD,OAAO,EAAE,yBAAyB;gBAClC,OAAO,EAAE,qCAAqC,qBAAqB,EAAE;gBACrE,UAAU,EAAE,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;aAChD,CAAC,CAAC;YACH,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;YACrE,OAAO;QACX,CAAC;QAED,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,MAAM,iBAAiB,GACnB,OAAO,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,IAAI,SAAS,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBAClC,+DAA+D;gBAC/D,0DAA0D;gBAC1D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;oBACd,EAAE,EAAE,KAAK,CAAC,qDAAqD;oBAC/D,OAAO,EAAE,yBAAyB;oBAClC,OAAO,EAAE,8BAA8B,SAAS,6CAA6C;oBAC7F,UAAU,EAAE,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;iBAChD,CAAC,CAAC;gBACH,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,+CAA+C,CAAC,CAAC;gBAC9E,OAAO;YACX,CAAC;YAED,IAAI,SAA4C,CAAC;YACjD,IAAI,CAAC;gBACD,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;YACjE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,KAAK,YAAY,yBAAyB,EAAE,CAAC;oBAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;wBAChB,EAAE,EAAE,KAAK,CAAC,qCAAqC;wBAC/C,OAAO,EAAE,yBAAyB;wBAClC,OAAO,EAAE,qCAAqC,KAAK,CAAC,OAAO,EAAE;wBAC7D,UAAU,EAAE,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;qBAChD,CAAC,CAAC;oBACH,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAC;oBACzE,OAAO;gBACX,CAAC;gBACD,MAAM,KAAK,CAAC;YAChB,CAAC;YACD,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO;QACX,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAC;YAClE,OAAO;QACX,CAAC;QAED,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;IACzD,CAAC;IAED,qGAAqG;IAC7F,KAAK,CAAC,oBAAoB,CAC9B,GAAoB,EACpB,GAAqB,EACrB,SAAwC;QAExC,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAC;YACtE,OAAO;QACX,CAAC;QACD,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;YACrE,OAAO;QACX,CAAC;QACD,IAAI,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACvE,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC;gBAClC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;oBACd,EAAE,EAAE,KAAK,CAAC,sCAAsC;oBAChD,OAAO,EAAE,yBAAyB;oBAClC,OAAO,EAAE,mBAAmB,SAAS,YAAY;oBACjD,UAAU,EAAE,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;iBAChD,CAAC,CAAC;gBACH,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,qCAAqC,CAAC,CAAC;gBACpE,OAAO;YACX,CAAC;YAED,kEAAkE;YAClE,kEAAkE;YAClE,6DAA6D;YAC7D,kEAAkE;YAClE,yDAAyD;YACzD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gBACd,EAAE,EAAE,KAAK,CAAC,sCAAsC;gBAChD,OAAO,EAAE,yBAAyB;gBAClC,OAAO,EAAE,mBAAmB,SAAS,wCAAwC;gBAC7E,UAAU,EAAE,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;aAChD,CAAC,CAAC;YACH,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,4BAA4B,CACtC,MAAwB,EACxB,SAAiB,EACjB,OAAgC;QAEhC,IAAI,KAAwC,CAAC;QAC7C,IAAI,CAAC;YACD,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,yBAAyB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC9E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,+DAA+D;YAC/D,uCAAuC;YACvC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;gBAChB,EAAE,EAAE,KAAK,CAAC,gDAAgD;gBAC1D,OAAO,EAAE,yBAAyB;gBAClC,OAAO,EAAE,yDAAyD,SAAS,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;gBACxI,UAAU,EAAE,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,EAAE;aAC5C,CAAC,CAAC;YACH,OAAO;QACX,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO;QACX,CAAC;QAED,gEAAgE;QAChE,uEAAuE;QACvE,+CAA+C;QAC/C,MAAM,cAAc,GAAG,MAAM,CAAC,SAAS,CAAC,MAGvC,CAAC;QACF,cAAc,CAAC,mBAAmB,GAAG,KAAK,CAAC,kBAAkB,CAAC;QAC9D,cAAc,CAAC,cAAc,GAAG,KAAK,CAAC,UAAU,CAAC;IACrD,CAAC;IAED;;;;;OAKG;IACK,wCAAwC,CAC5C,MAAwB,EACxB,SAAiB,EACjB,OAAgC;QAEhC,MAAM,cAAc,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;QAC/C,MAAM,qBAAqB,GAAG,cAAc,CAAC,aAAa,CAAC;QAC3D,cAAc,CAAC,aAAa,GAAG,GAAS,EAAE;YACtC,qBAAqB,EAAE,EAAE,CAAC;YAE1B,MAAM,KAAK,GAA0B;gBACjC,kBAAkB,EAAE,cAAc,CAAC,qBAAqB,EAAE;gBAC1D,UAAU,EAAE,cAAc,CAAC,gBAAgB,EAAE;aAChD,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,yBAAyB,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACxF,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;oBAChB,EAAE,EAAE,KAAK,CAAC,6CAA6C;oBACvD,OAAO,EAAE,yBAAyB;oBAClC,OAAO,EAAE,sDAAsD,SAAS,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;oBACrI,UAAU,EAAE,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,EAAE;iBAC5C,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;QACP,CAAC,CAAC;IACN,CAAC;CACJ"}