@mongodb-js/mcp-types 3.0.0-prerelease.2 → 3.0.0-prerelease.4

package/dist/connection.d.ts

@@ -1,15 +1,30 @@
 /**
  * Atlas cluster connection info containing details about the connected Atlas cluster.
  * When provided, indicates the connection is to an Atlas cluster.
+ *
+ * The cluster's projectId, name and id are required. A host that establishes the
+ * connection without minting a temporary database user — via its own credential
+ * issuance, X.509, a pre-provisioned user, a proxy — still knows which cluster it
+ * connected to and needs to be able to specify it: this field is what marks a
+ * connection as pointing at Atlas, and leaving it unset prevents cluster
+ * attribution on tool telemetry, the `atlas` host type, and the ability of
+ * `pause-resume-cluster` to find connections to the cluster it just paused.
+ * Hosts that only know the cluster name should resolve the id through the Atlas
+ * API before connecting.
  */
 export type AtlasClusterConnectionInfo = {
-    username: string;
+    /** Which Atlas cluster this connection points at. */
     projectId: string;
     clusterName: string;
-    instanceType: "FREE" | "FLEX" | "DEDICATED";
-    provider?: string;
-    region?: string;
-    expiryDate: Date;
+    clusterId: string;
+    /**
+     * The temporary database user backing the connection. Set only by
+     * `connect-cluster`, which also schedules its deletion; absent when the
+     * host supplied its own credentials.
+     */
+    username?: string;
+    /** The cluster's tier, set when the host resolved it. */
+    instanceType?: "FREE" | "FLEX" | "DEDICATED";
 };
 /**
  * Connection string info describing the auth and host type of a MongoDB connection.

package/dist/connection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connection.d.ts","sourceRoot":"","sources":["../src/connection.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,MAAM,0BAA0B,GAAG;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,WAAW,CAAC;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,IAAI,CAAC;CACpB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG;IAC/B,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,UAAU,GAAG,gBAAgB,GAAG,kBAAkB,GAAG,OAAO,GAAG,SAAS,CAAC;IACtG,QAAQ,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,aAAa,GAAG,OAAO,CAAC;CACrE,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,qBAAqB,CAAC,EAAE,0BAA0B,CAAC;CACtD,CAAC"}
+{"version":3,"file":"connection.d.ts","sourceRoot":"","sources":["../src/connection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,0BAA0B,GAAG;IACrC,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAElB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,WAAW,CAAC;CAChD,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG;IAC/B,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,UAAU,GAAG,gBAAgB,GAAG,kBAAkB,GAAG,OAAO,GAAG,SAAS,CAAC;IACtG,QAAQ,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,aAAa,GAAG,OAAO,CAAC;CACrE,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,qBAAqB,CAAC,EAAE,0BAA0B,CAAC;CACtD,CAAC"}

package/dist/elicitation.d.ts

@@ -1,4 +1,6 @@
-import type { ElicitRequestFormParams, ProgressToken, RequestId, ServerNotification } from "@modelcontextprotocol/sdk/types.js";
+import type { ElicitRequestFormParams, InputRequiredResult, InputResponses } from "@modelcontextprotocol/server";
+/** Values that can be read back from a retried request's `inputResponses`. */
+export type ElicitationInputResponses = InputResponses | Record<string, unknown> | undefined;
 export type ElicitedInputResult = {
     accepted: true;
     fields: Record<string, string>;
@@ -6,21 +8,83 @@ export type ElicitedInputResult = {
     accepted: false;
     fields?: undefined;
 };
-/** The schema accepted by {@link IElicitation.requestInput}. */
+/** The schema accepted by {@link IElicitation.inputRequired}. */
 export type ElicitRequestSchema = ElicitRequestFormParams["requestedSchema"];
-export type ElicitationOptions = {
-    /** The id of the in-flight client request this elicitation belongs to. */
-    relatedRequestId?: RequestId;
-    /** The progress token supplied by the client on the in-flight request. */
-    progressToken?: ProgressToken;
-    /** Sends a notification related to the in-flight request. */
-    sendNotification?: (notification: ServerNotification) => Promise<void>;
-    /** The abort signal of the in-flight request. */
-    signal?: AbortSignal;
+/** Parameters for {@link IElicitation.inputRequired}. */
+export type ElicitInputRequiredParams = {
+    /** The identifier the answers arrive under in `inputResponses`. */
+    key: string;
+    /** The message/title to display in the form. */
+    message: string;
+    /** A JSON Schema describing the fields to collect. */
+    schema: ElicitRequestSchema;
 };
+/**
+ * Elicitation service used by tools to request confirmation or structured
+ * input from the user.
+ *
+ * Protocol revision 2026-07-28 replaced push-style server→client requests
+ * with **multi-round-trip**: a handler that needs user input returns
+ * `inputRequired(...)` from the request handler and the client retries the
+ * original request carrying the answers (`inputResponses`). The MongoDB MCP
+ * server's handlers are written in that style once and serve both eras: on
+ * 2025-era connections the SDK's legacy shim turns the same `inputRequired`
+ * return into real server→client requests and re-enters the handler with the
+ * collected responses.
+ *
+ * Implementations therefore expose two complementary halves:
+ * - *builders* (`confirmationRequired`, `inputRequired`) that produce the
+ *   `InputRequiredResult` a handler returns when the required input has not
+ *   been provided yet;
+ * - *readers* (`readConfirmation`, `readInput`) that extract the answers from
+ *   a retried request's `inputResponses` (resent by the client verbatim on
+ *   re-entry, so they must be treated as untrusted input).
+ */
 export interface IElicitation {
+    /**
+     * Checks if the client supports elicitation capabilities.
+     * @returns True if the client supports elicitation, false otherwise.
+     */
     supportsElicitation(): boolean;
-    requestConfirmation(message: string, options?: ElicitationOptions): Promise<boolean>;
-    requestInput(message: string, schema: ElicitRequestSchema, options?: ElicitationOptions): Promise<ElicitedInputResult>;
+    /**
+     * Builds the `inputRequired` result asking the user to confirm an
+     * operation. The handler returns it on the first entry; on re-entry the
+     * answers are read back with {@link IElicitation.readConfirmation}.
+     *
+     * @param message - The message to display to the user.
+     * @returns The `InputRequiredResult` to return from the request handler.
+     */
+    confirmationRequired(message: string): InputRequiredResult;
+    /**
+     * Reads the user's answer to a {@link IElicitation.confirmationRequired}
+     * request from a retried request's `inputResponses`.
+     *
+     * @returns `true` when the user confirmed, `false` when they declined, and
+     * `undefined` when this round carries no answer yet (the handler should
+     * return {@link IElicitation.confirmationRequired} instead).
+     */
+    readConfirmation(inputResponses: ElicitationInputResponses): boolean | undefined;
+    /**
+     * Builds the `inputRequired` result asking the user for structured input
+     * via a form. The handler returns it on the first entry; on re-entry the
+     * answers are read back with {@link IElicitation.readInput}.
+     *
+     * @param params - The identifier the answers arrive under in `inputResponses`
+     * (`key`), the message/title to display in the form (`message`) and a JSON
+     * Schema describing the fields to collect (`schema`).
+     * @returns The `InputRequiredResult` to return from the request handler.
+     */
+    inputRequired(params: ElicitInputRequiredParams): InputRequiredResult;
+    /**
+     * Reads the accepted fields of a {@link IElicitation.inputRequired}
+     * request from a retried request's `inputResponses`.
+     *
+     * @returns `{ accepted: true, fields }` with the user-provided values keyed
+     * by field name, `{ accepted: false }` when the user declined or cancelled
+     * (or the client does not support elicitation), and `undefined` when this
+     * round carries no response for `key` yet (the handler should return
+     * {@link IElicitation.inputRequired} again).
+     */
+    readInput(inputResponses: ElicitationInputResponses, key: string): ElicitedInputResult | undefined;
 }
 //# sourceMappingURL=elicitation.d.ts.map

package/dist/elicitation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"elicitation.d.ts","sourceRoot":"","sources":["../src/elicitation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACR,uBAAuB,EACvB,aAAa,EACb,SAAS,EACT,kBAAkB,EACrB,MAAM,oCAAoC,CAAC;AAE5C,MAAM,MAAM,mBAAmB,GACzB;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAClD;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,MAAM,CAAC,EAAE,SAAS,CAAA;CAAE,CAAC;AAE9C,gEAAgE;AAChE,MAAM,MAAM,mBAAmB,GAAG,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;AAE7E,MAAM,MAAM,kBAAkB,GAAG;IAC7B,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,SAAS,CAAC;IAC7B,0EAA0E;IAC1E,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,6DAA6D;IAC7D,gBAAgB,CAAC,EAAE,CAAC,YAAY,EAAE,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,iDAAiD;IACjD,MAAM,CAAC,EAAE,WAAW,CAAC;CACxB,CAAC;AAEF,MAAM,WAAW,YAAY;IACzB,mBAAmB,IAAI,OAAO,CAAC;IAC/B,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrF,YAAY,CACR,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,mBAAmB,EAC3B,OAAO,CAAC,EAAE,kBAAkB,GAC7B,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACnC"}
+{"version":3,"file":"elicitation.d.ts","sourceRoot":"","sources":["../src/elicitation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEjH,8EAA8E;AAC9E,MAAM,MAAM,yBAAyB,GAAG,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;AAE7F,MAAM,MAAM,mBAAmB,GACzB;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAClD;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,MAAM,CAAC,EAAE,SAAS,CAAA;CAAE,CAAC;AAE9C,iEAAiE;AACjE,MAAM,MAAM,mBAAmB,GAAG,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;AAE7E,yDAAyD;AACzD,MAAM,MAAM,yBAAyB,GAAG;IACpC,mEAAmE;IACnE,GAAG,EAAE,MAAM,CAAC;IACZ,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,MAAM,EAAE,mBAAmB,CAAC;CAC/B,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,YAAY;IACzB;;;OAGG;IACH,mBAAmB,IAAI,OAAO,CAAC;IAE/B;;;;;;;OAOG;IACH,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,mBAAmB,CAAC;IAE3D;;;;;;;OAOG;IACH,gBAAgB,CAAC,cAAc,EAAE,yBAAyB,GAAG,OAAO,GAAG,SAAS,CAAC;IAEjF;;;;;;;;;OASG;IACH,aAAa,CAAC,MAAM,EAAE,yBAAyB,GAAG,mBAAmB,CAAC;IAEtE;;;;;;;;;OASG;IACH,SAAS,CAAC,cAAc,EAAE,yBAAyB,EAAE,GAAG,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAAC;CACtG"}

package/dist/index.d.ts

@@ -1,8 +1,6 @@
 export type * from "./config.js";
 export type { AtlasClusterConnectionInfo, ConnectionStringInfo, SupportedConnectionState } from "./connection.js";
 export type * from "./schemas.js";
-export type * from "./session.js";
-export type * from "./sessionStore.js";
 export type * from "./transports.js";
 export type * from "./keychain.js";
 export type * from "./elicitation.js";
@@ -17,4 +15,5 @@ export type * from "./telemetry.js";
 export { SHARED_TIER_METRIC_NAMES } from "./telemetry.js";
 export type * from "./helpers.js";
 export type * from "./server.js";
+export type * from "./sessionStore.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mBAAmB,aAAa,CAAC;AACjC,YAAY,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAClH,mBAAmB,cAAc,CAAC;AAClC,mBAAmB,cAAc,CAAC;AAClC,mBAAmB,mBAAmB,CAAC;AACvC,mBAAmB,iBAAiB,CAAC;AACrC,mBAAmB,eAAe,CAAC;AACnC,mBAAmB,kBAAkB,CAAC;AACtC,mBAAmB,cAAc,CAAC;AAClC,mBAAmB,WAAW,CAAC;AAC/B,mBAAmB,gBAAgB,CAAC;AACpC,mBAAmB,gBAAgB,CAAC;AACpC,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,wBAAwB,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACtG,mBAAmB,SAAS,CAAC;AAC7B,mBAAmB,gBAAgB,CAAC;AACpC,mBAAmB,gBAAgB,CAAC;AACpC,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,mBAAmB,cAAc,CAAC;AAClC,mBAAmB,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mBAAmB,aAAa,CAAC;AACjC,YAAY,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAClH,mBAAmB,cAAc,CAAC;AAClC,mBAAmB,iBAAiB,CAAC;AACrC,mBAAmB,eAAe,CAAC;AACnC,mBAAmB,kBAAkB,CAAC;AACtC,mBAAmB,cAAc,CAAC;AAClC,mBAAmB,WAAW,CAAC;AAC/B,mBAAmB,gBAAgB,CAAC;AACpC,mBAAmB,gBAAgB,CAAC;AACpC,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,wBAAwB,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACtG,mBAAmB,SAAS,CAAC;AAC7B,mBAAmB,gBAAgB,CAAC;AACpC,mBAAmB,gBAAgB,CAAC;AACpC,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,mBAAmB,cAAc,CAAC;AAClC,mBAAmB,aAAa,CAAC;AACjC,mBAAmB,mBAAmB,CAAC"}

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/keychain.d.ts

@@ -1,10 +1,23 @@
 import type { Secret } from "mongodb-redact";
-export interface IKeychain<TKey = Secret["value"], TKind = Secret["kind"]> {
-    register(value: unknown, kind: string): void;
+export type { Secret } from "mongodb-redact";
+/**
+ * The redaction half of a keychain, for consumers that need to scrub secrets out of a value but
+ * have no business registering or clearing them - loggers and tools. Kept separate so those
+ * consumers are not coupled to secret management just to reach {@link IRedactor.redact}.
+ */
+export interface IRedactor {
+    /**
+     * Redacts the registered secrets from the strings in `value`, returning a copy of the same
+     * shape. Arrays and own enumerable properties are visited recursively, and the prototype of
+     * any object descended into is preserved. Values that keep their contents behind an API
+     * rather than in own properties - `Map`, `Set` and the like - are returned untouched, as are
+     * non-string primitives, so not every string transitively reachable is guaranteed to be
+     * redacted. Never mutates `value`, and terminates on self-referencing input.
+     */
+    redact<T>(value: T): T;
+}
+export interface IKeychain extends IRedactor {
+    register(value: Secret["value"], kind: Secret["kind"]): void;
     clearAllSecrets(): void;
-    readonly allSecrets: {
-        value: TKey;
-        kind: TKind;
-    }[];
 }
 //# sourceMappingURL=keychain.d.ts.map

package/dist/keychain.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"keychain.d.ts","sourceRoot":"","sources":["../src/keychain.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAE7C,MAAM,WAAW,SAAS,CAAC,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;IACrE,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7C,eAAe,IAAI,IAAI,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE;QAAE,KAAK,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,KAAK,CAAA;KAAE,EAAE,CAAC;CACvD"}
+{"version":3,"file":"keychain.d.ts","sourceRoot":"","sources":["../src/keychain.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAE7C,YAAY,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAE7C;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACtB;;;;;;;OAOG;IACH,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,SAAU,SAAQ,SAAS;IACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IAC7D,eAAe,IAAI,IAAI,CAAC;CAC3B"}

package/dist/logging.d.ts

@@ -1,6 +1,6 @@
-import type { LoggingMessageNotification } from "@modelcontextprotocol/sdk/types.js";
-import type { IKeychain } from "./keychain.js";
-export type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { LoggingMessageNotification } from "@modelcontextprotocol/server";
+import type { IRedactor } from "./keychain.js";
+export type { McpServer } from "@modelcontextprotocol/server";
 export type LogLevel = LoggingMessageNotification["params"]["level"];
 export type LoggerType = "console" | "disk" | "mcp";
 export type EventMap<T> = Record<keyof T, any[]>;
@@ -33,7 +33,7 @@ export interface ILogger {
     flush(): Promise<PromiseSettledResult<void>[]>;
 }
 export type LoggerConfig = {
-    keychain: IKeychain;
+    keychain: IRedactor;
 };
 export interface ICompositeLogger extends ILogger {
     addLogger(logger: ILogger): void;

package/dist/logging.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logging.d.ts","sourceRoot":"","sources":["../src/logging.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AACrF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C,YAAY,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,MAAM,MAAM,QAAQ,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC;AAErE,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,MAAM,GAAG,KAAK,CAAC;AAGpD,MAAM,MAAM,QAAQ,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;AAEjD,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AAEtD,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAE5E,MAAM,MAAM,gBAAgB,GAAG,CAC3B,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,UAAU,EACd,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,OAAO,KACb,IAAI,CAAC;AAEV,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,EAAE,gBAAgB,CAAC,GAAG;IAChE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACrB,OAAO,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACrB,EAAE,EAAE,UAAU,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,OAAO,GAAG,UAAU,GAAG,UAAU,EAAE,CAAC;IAClD,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC,CAAC;AAEF,MAAM,WAAW,OAAO;IACpB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IAChC,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IACjC,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IACjC,MAAM,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IAClC,OAAO,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IACpC,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IACjC,SAAS,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IACrC,KAAK,IAAI,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;CAClD;AAED,MAAM,MAAM,YAAY,GAAG;IACvB,QAAQ,EAAE,SAAS,CAAC;CACvB,CAAC;AAEF,MAAM,WAAW,gBAAiB,SAAQ,OAAO;IAC7C,SAAS,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;IACjC,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAClD"}
+{"version":3,"file":"logging.d.ts","sourceRoot":"","sources":["../src/logging.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC/E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C,YAAY,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAE9D,MAAM,MAAM,QAAQ,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC;AAErE,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,MAAM,GAAG,KAAK,CAAC;AAGpD,MAAM,MAAM,QAAQ,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;AAEjD,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AAEtD,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAE5E,MAAM,MAAM,gBAAgB,GAAG,CAC3B,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,UAAU,EACd,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,OAAO,KACb,IAAI,CAAC;AAEV,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,EAAE,gBAAgB,CAAC,GAAG;IAChE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACrB,OAAO,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACrB,EAAE,EAAE,UAAU,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,OAAO,GAAG,UAAU,GAAG,UAAU,EAAE,CAAC;IAClD,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC,CAAC;AAEF,MAAM,WAAW,OAAO;IACpB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IAChC,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IACjC,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IACjC,MAAM,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IAClC,OAAO,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IACpC,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IACjC,SAAS,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IACrC,KAAK,IAAI,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;CAClD;AAED,MAAM,MAAM,YAAY,GAAG;IACvB,QAAQ,EAAE,SAAS,CAAC;CACvB,CAAC;AAEF,MAAM,WAAW,gBAAiB,SAAQ,OAAO;IAC7C,SAAS,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;IACjC,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAClD"}

package/dist/metrics.d.ts

@@ -28,15 +28,6 @@ export interface IGauge {
 /**
  * Default metric definitions for MCP servers.
  * These are the standard metrics used across the MCP packages.
- *
- * @example
- * ```typescript
- * // Usage with session store
- * const store = new SessionStore({
- *   metrics: myMetrics,
- *   ...
- * });
- * ```
  */
 export type DefaultMetricDefinitions = {
     /** Counter for tracking created sessions */

package/dist/metrics.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"metrics.d.ts","sourceRoot":"","sources":["../src/metrics.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;AAEpE;;;GAGG;AACH,MAAM,WAAW,WAAW;IACxB,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtD;AAED;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACrB,GAAG,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpD;AAED;;;GAGG;AACH,MAAM,WAAW,MAAM;IACnB,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,GAAG,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjD,GAAG,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpD;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACnC,4CAA4C;IAC5C,cAAc,EAAE,QAAQ,CAAC;IACzB,6DAA6D;IAC7D,aAAa,EAAE,QAAQ,CAAC;IACxB,gEAAgE;IAChE,qBAAqB,EAAE,WAAW,CAAC;IACnC,mDAAmD;IACnD,cAAc,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,QAAQ,CAAC,mBAAmB,SAAS,wBAAwB,GAAG,wBAAwB;IACrG,oCAAoC;IACpC,GAAG,CAAC,CAAC,SAAS,MAAM,mBAAmB,EAAE,GAAG,EAAE,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACzE,sEAAsE;IACtE,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CACjC"}
+{"version":3,"file":"metrics.d.ts","sourceRoot":"","sources":["../src/metrics.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;AAEpE;;;GAGG;AACH,MAAM,WAAW,WAAW;IACxB,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtD;AAED;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACrB,GAAG,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpD;AAED;;;GAGG;AACH,MAAM,WAAW,MAAM;IACnB,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,GAAG,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjD,GAAG,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpD;AAED;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACnC,4CAA4C;IAC5C,cAAc,EAAE,QAAQ,CAAC;IACzB,6DAA6D;IAC7D,aAAa,EAAE,QAAQ,CAAC;IACxB,gEAAgE;IAChE,qBAAqB,EAAE,WAAW,CAAC;IACnC,mDAAmD;IACnD,cAAc,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,QAAQ,CAAC,mBAAmB,SAAS,wBAAwB,GAAG,wBAAwB;IACrG,oCAAoC;IACpC,GAAG,CAAC,CAAC,SAAS,MAAM,mBAAmB,EAAE,GAAG,EAAE,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACzE,sEAAsE;IACtE,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CACjC"}

package/dist/resources.d.ts

@@ -1,18 +1,22 @@
-import type { ResourceMetadata, ReadResourceCallback } from "@modelcontextprotocol/sdk/server/mcp.js";
-import type { SessionEvents } from "./session.js";
+import type { ResourceMetadata, ReadResourceCallback } from "@modelcontextprotocol/server";
 import type { ITelemetry } from "./telemetry.js";
 import type { IToolConfig } from "./config.js";
 import type { ICompositeLogger } from "./logging.js";
+import type { IKeychain } from "./keychain.js";
+import type { TransportRequestContext } from "./transport.js";
 /**
- * The minimal session surface resources may rely on. The CLI's session is
- * deliberately stateless (connection state lives in the app-level registry),
- * so resources are not constrained to the full {@link ISession} shape.
+ * The minimal services resources read off the host server at construction,
+ * injected individually (no server-scoped "session" object exists). The server
+ * is deliberately stateless (connection state lives in the app-level registry),
+ * so resources read only the specific services they need from the server;
+ * host-specific extras (e.g. the connection registry) are read directly off
+ * the concrete server type by the resource implementation.
  */
-export interface IResourceSession {
+export type ResourceServices = {
     readonly config: IToolConfig;
     readonly logger: ICompositeLogger;
-    on(event: keyof SessionEvents, listener: (...args: unknown[]) => void): void;
-}
+    readonly keychain: IKeychain;
+};
 export interface IResource {
     register(server: unknown): void;
 }
@@ -23,32 +27,49 @@ export type ResourceConfiguration = {
     uri: string;
     config: ResourceMetadata;
 };
-export type ReactiveResourceOptions<Value, RelevantEvents extends readonly (keyof SessionEvents)[]> = {
+export type ReactiveResourceOptions<Value> = {
     initial: Value;
-    events: RelevantEvents;
 };
-/** The host server surface resources register against. */
+/**
+ * The host server surface resources register against and read services from.
+ * Resources are constructed with the server itself (`{ server }`) and derive
+ * the minimal services (config/logger/keychain) plus telemetry from it.
+ */
 export interface IResourceServer {
+    readonly config: ResourceServices["config"];
+    readonly logger: ResourceServices["logger"];
+    readonly keychain: ResourceServices["keychain"];
+    readonly telemetry: ITelemetry;
     mcpServer: {
         registerResource: (name: string, uri: string, config: ResourceMetadata, callback: ReadResourceCallback) => void;
     };
     sendResourceListChanged(): void;
     sendResourceUpdated(uri: string): void;
 }
+/**
+ * The construction argument every resource class receives: the host server plus
+ * the transport request that drove server creation (undefined for non-HTTP
+ * constructions such as stdio / dry-run).
+ */
+export type ResourceServerArg<TServer extends IResourceServer = IResourceServer> = {
+    server: TServer;
+    /** The transport request that drove server creation (undefined for stdio / dry-run). */
+    transportRequest?: TransportRequestContext;
+};
 /**
  * The type that all resource classes must conform to when implementing custom resources
  * for the MongoDB MCP Server.
  *
  * This type enforces that resource classes have a constructor accepting
- * `(session, telemetry)`, matching the construction pattern used by
+ * `({ server })`, matching the construction pattern used by
  * {@link CliServer} (see `registerResources`). The resolved user
- * configuration is read from `session.config`.
+ * configuration is read from `server.config`.
  */
-export type ResourceClass<TSession extends IResourceSession = IResourceSession> = {
-    new (session: TSession, telemetry: ITelemetry): {
+export type ResourceClass<TServer extends IResourceServer = IResourceServer> = {
+    new (arg: ResourceServerArg<TServer>): {
         register(server: IResourceServer): void;
     };
 };
-/** Resource constructor type for registries that may include session-specific resource implementations. */
+/** Resource constructor type for registries that may include resource-specific servers. */
 export type AnyResourceClass = ResourceClass<any>;
 //# sourceMappingURL=resources.d.ts.map

package/dist/resources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../src/resources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AACtG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAErD;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC7B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,EAAE,CAAC,KAAK,EAAE,MAAM,aAAa,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,IAAI,CAAC;CAChF;AAED,MAAM,WAAW,SAAS;IACtB,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,MAAM,UAAU,GAAG,SAAS,SAAS,EAAE,CAAC;AAE9C,qGAAqG;AACrG,MAAM,MAAM,qBAAqB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,gBAAgB,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,uBAAuB,CAAC,KAAK,EAAE,cAAc,SAAS,SAAS,CAAC,MAAM,aAAa,CAAC,EAAE,IAAI;IAClG,OAAO,EAAE,KAAK,CAAC;IACf,MAAM,EAAE,cAAc,CAAC;CAC1B,CAAC;AAEF,0DAA0D;AAC1D,MAAM,WAAW,eAAe;IAC5B,SAAS,EAAE;QACP,gBAAgB,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,oBAAoB,KAAK,IAAI,CAAC;KACnH,CAAC;IACF,uBAAuB,IAAI,IAAI,CAAC;IAChC,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1C;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,aAAa,CAAC,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB,IAAI;IAC9E,KAAK,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,GAAG;QAAE,QAAQ,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAAA;KAAE,CAAC;CAC/F,CAAC;AAEF,2GAA2G;AAE3G,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC"}
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../src/resources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAC3F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAE9D;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;CAChC,CAAC;AAEF,MAAM,WAAW,SAAS;IACtB,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,MAAM,UAAU,GAAG,SAAS,SAAS,EAAE,CAAC;AAE9C,qGAAqG;AACrG,MAAM,MAAM,qBAAqB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,gBAAgB,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,uBAAuB,CAAC,KAAK,IAAI;IACzC,OAAO,EAAE,KAAK,CAAC;CAClB,CAAC;AAEF;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC5B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,SAAS,EAAE;QACP,gBAAgB,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,oBAAoB,KAAK,IAAI,CAAC;KACnH,CAAC;IACF,uBAAuB,IAAI,IAAI,CAAC;IAChC,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1C;AAED;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,CAAC,OAAO,SAAS,eAAe,GAAG,eAAe,IAAI;IAC/E,MAAM,EAAE,OAAO,CAAC;IAChB,wFAAwF;IACxF,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;CAC9C,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,MAAM,aAAa,CAAC,OAAO,SAAS,eAAe,GAAG,eAAe,IAAI;IAC3E,KAAK,GAAG,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG;QAAE,QAAQ,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAAA;KAAE,CAAC;CACtF,CAAC;AAEF,2FAA2F;AAE3F,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC"}

package/dist/server.d.ts

@@ -1,35 +1,23 @@
-import type { Transport } from "@modelcontextprotocol/sdk/shared/transport";
-import type { ClientCapabilities, Implementation } from "@modelcontextprotocol/sdk/types.js";
-import type { ICompositeLogger } from "./logging.js";
+import type { McpServer } from "@modelcontextprotocol/server";
 /**
- * Minimum server interface required by MCPHttpServer.
- * Servers must have connect/close methods, a session with a logger (and a
- * `setMcpClient` hook) for HTTP transport functionality, and expose the
- * protocol-level MCP server so negotiated client state can be captured and
- * restored across implicit re-initializations.
+ * Minimum server interface required by MCPHttpServer and the stdio runner:
+ * a request-scoped server instance that has been configured with tools,
+ * resources, capabilities and lifecycle hooks, ready to be handed to the
+ * protocol serving entry.
+ *
+ * The server is deliberately stateless and request-scoped: app-level services
+ * (connections, exports, API clients, telemetry) live once per process and
+ * are referenced by, not owned by, each request's server instance.
  */
-export type SessionServer<TTransport extends Transport = Transport> = {
-    connect(transport: TTransport): Promise<void>;
-    close(): Promise<void>;
-    session: {
-        logger: ICompositeLogger;
-        /**
-         * Records the MCP client that negotiated this session's
-         * initialization. Required to restore negotiated client state on
-         * implicitly re-initialized sessions.
-         */
-        setMcpClient(mcpClient: unknown): void;
-    };
+export type BaseServer = {
     /**
-     * The protocol-level MCP server, required to capture/restore negotiated
-     * client state across implicit re-initializations.
+     * Registers resources, capabilities, tools, request handlers and lifecycle
+     * hooks on the underlying MCP server without connecting it to a transport.
+     * Required by the 2026-07-28 serving entries (`serveStdio`,
+     * `createMcpHandler`), which build/register instances through a factory.
      */
-    mcpServer: {
-        server: {
-            oninitialized?: (() => void) | undefined;
-            getClientCapabilities(): ClientCapabilities | undefined;
-            getClientVersion(): Implementation | undefined;
-        };
-    };
+    register(): Promise<void>;
+    /** The protocol-level MCP server handed to the serving entry. */
+    mcpServer: McpServer;
 };
 //# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4CAA4C,CAAC;AAC5E,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAC7F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAErD;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,CAAC,UAAU,SAAS,SAAS,GAAG,SAAS,IAAI;IAClE,OAAO,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,OAAO,EAAE;QACL,MAAM,EAAE,gBAAgB,CAAC;QACzB;;;;WAIG;QACH,YAAY,CAAC,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC;KAC1C,CAAC;IACF;;;OAGG;IACH,SAAS,EAAE;QACP,MAAM,EAAE;YACJ,aAAa,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAAC;YACzC,qBAAqB,IAAI,kBAAkB,GAAG,SAAS,CAAC;YACxD,gBAAgB,IAAI,cAAc,GAAG,SAAS,CAAC;SAClD,CAAC;KACL,CAAC;CACL,CAAC"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAE9D;;;;;;;;;GASG;AACH,MAAM,MAAM,UAAU,GAAG;IACrB;;;;;OAKG;IACH,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,iEAAiE;IACjE,SAAS,EAAE,SAAS,CAAC;CACxB,CAAC"}

package/dist/sessionStore.d.ts

@@ -1,9 +1,11 @@
-import type { ClientCapabilities, Implementation } from "@modelcontextprotocol/sdk/types.js";
+import type { ClientCapabilities, Implementation } from "@modelcontextprotocol/server";
 import type { ILogger, ICompositeLogger } from "./logging.js";
 import type { IMetrics, DefaultMetricDefinitions } from "./metrics.js";
+/** @deprecated The per-client session concept is being removed; the 2025-era legacy path is the only remaining consumer. */
 export type CloseableTransport = {
     close(): Promise<void>;
 };
+/** @deprecated The per-client session concept is being removed; the 2025-era legacy path is the only remaining consumer. */
 export type SessionCloseReason = "idle_timeout" | "transport_closed" | "server_stop" | "unknown" | "evicted";
 /**
  * The client state negotiated during MCP initialization. Stores that persist
@@ -11,11 +13,15 @@ export type SessionCloseReason = "idle_timeout" | "transport_closed" | "server_s
  * pod that never saw the client's `initialize` request) to retain the
  * client's capabilities -- e.g. whether it supports elicitation -- instead of
  * treating the restored client as capability-less.
+ *
+ * @deprecated The per-client session concept is being removed; the 2025-era
+ * legacy path is the only remaining consumer.
  */
 export type NegotiatedClientState = {
     clientCapabilities?: ClientCapabilities;
     clientInfo?: Implementation;
 };
+/** @deprecated The per-client session concept is being removed; the 2025-era legacy path is the only remaining consumer. */
 export interface ISessionStore<T extends CloseableTransport = CloseableTransport> {
     /**
      * Returns the transport for the given session id or `undefined` if the
@@ -48,6 +54,8 @@ export interface ISessionStore<T extends CloseableTransport = CloseableTransport
         };
         headers?: Record<string, unknown>;
     }): Promise<void>;
+    /** Returns whether a session exists, without resetting its idle timeout (unlike {@link getSession}). */
+    hasSession(sessionId: string): boolean;
     closeSession(params: {
         sessionId: string;
         reason?: SessionCloseReason;
@@ -67,6 +75,7 @@ export interface ISessionStore<T extends CloseableTransport = CloseableTransport
      */
     loadNegotiatedClientState(sessionId: string, headers?: Record<string, unknown>): Promise<NegotiatedClientState | undefined>;
 }
+/** @deprecated The per-client session concept is being removed; the 2025-era legacy path is the only remaining consumer. */
 export type SessionStoreConstructorArgs<TMetrics extends DefaultMetricDefinitions = DefaultMetricDefinitions> = {
     options: {
         idleTimeoutMS: number;

package/dist/sessionStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sessionStore.d.ts","sourceRoot":"","sources":["../src/sessionStore.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAC7F,OAAO,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,KAAK,EAAE,QAAQ,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAEvE,MAAM,MAAM,kBAAkB,GAAG;IAC7B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,cAAc,GAAG,kBAAkB,GAAG,aAAa,GAAG,SAAS,GAAG,SAAS,CAAC;AAE7G;;;;;;GAMG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAChC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,UAAU,CAAC,EAAE,cAAc,CAAC;CAC/B,CAAC;AAEF,MAAM,WAAW,aAAa,CAAC,CAAC,SAAS,kBAAkB,GAAG,kBAAkB;IAC5E;;;;;;;;;;OAUG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IACzF;;;;;;;;;OASG;IACH,UAAU,CAAC,MAAM,EAAE;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,CAAC,CAAC;QACb,MAAM,EAAE,OAAO,CAAC;QAChB,OAAO,CAAC,EAAE;YAAE,MAAM,EAAE,gBAAgB,CAAA;SAAE,CAAC;QACvC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACrC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,YAAY,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,kBAAkB,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxF,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC;;;;;;OAMG;IACH,yBAAyB,CACrB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,qBAAqB,EAC5B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAClC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB;;;OAGG;IACH,yBAAyB,CACrB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAClC,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;CACjD;AAED,MAAM,MAAM,2BAA2B,CAAC,QAAQ,SAAS,wBAAwB,GAAG,wBAAwB,IAAI;IAC5G,OAAO,EAAE;QACL,aAAa,EAAE,MAAM,CAAC;QACtB,qBAAqB,EAAE,MAAM,CAAC;QAC9B,WAAW,EAAE,MAAM,CAAC;QACpB;;;;;;;;WAQG;QACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;KAChC,CAAC;IACF,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;CAC/B,CAAC"}
+{"version":3,"file":"sessionStore.d.ts","sourceRoot":"","sources":["../src/sessionStore.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACvF,OAAO,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,KAAK,EAAE,QAAQ,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAEvE,4HAA4H;AAC5H,MAAM,MAAM,kBAAkB,GAAG;IAC7B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B,CAAC;AAEF,4HAA4H;AAC5H,MAAM,MAAM,kBAAkB,GAAG,cAAc,GAAG,kBAAkB,GAAG,aAAa,GAAG,SAAS,GAAG,SAAS,CAAC;AAE7G;;;;;;;;;GASG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAChC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,UAAU,CAAC,EAAE,cAAc,CAAC;CAC/B,CAAC;AAEF,4HAA4H;AAC5H,MAAM,WAAW,aAAa,CAAC,CAAC,SAAS,kBAAkB,GAAG,kBAAkB;IAC5E;;;;;;;;;;OAUG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IACzF;;;;;;;;;OASG;IACH,UAAU,CAAC,MAAM,EAAE;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,CAAC,CAAC;QACb,MAAM,EAAE,OAAO,CAAC;QAChB,OAAO,CAAC,EAAE;YAAE,MAAM,EAAE,gBAAgB,CAAA;SAAE,CAAC;QACvC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACrC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,wGAAwG;IACxG,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IACvC,YAAY,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,kBAAkB,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxF,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC;;;;;;OAMG;IACH,yBAAyB,CACrB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,qBAAqB,EAC5B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAClC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB;;;OAGG;IACH,yBAAyB,CACrB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAClC,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;CACjD;AAED,4HAA4H;AAC5H,MAAM,MAAM,2BAA2B,CAAC,QAAQ,SAAS,wBAAwB,GAAG,wBAAwB,IAAI;IAC5G,OAAO,EAAE;QACL,aAAa,EAAE,MAAM,CAAC;QACtB,qBAAqB,EAAE,MAAM,CAAC;QAC9B,WAAW,EAAE,MAAM,CAAC;QACpB;;;;;;;;WAQG;QACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;KAChC,CAAC;IACF,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;CAC/B,CAAC"}

package/dist/telemetry.d.ts

@@ -1,3 +1,4 @@
+import type { McpProtocol } from "./transport.js";
 export type TelemetryEvents = {
     "events-emitted": [];
     "events-send-failed": [];
@@ -26,9 +27,9 @@ export type TelemetryCommonProperties = {
     transport?: "stdio" | "http";
     config_atlas_auth?: TelemetryBoolSet;
     config_connection_string?: TelemetryBoolSet;
-    session_id?: string;
     hosting_mode?: string;
     has_docker?: TelemetryBoolSet;
+    protocol?: McpProtocol;
 } & TelemetryCommonStaticProperties;
 export type TelemetryEvent<T> = {
     timestamp: string;
@@ -57,6 +58,9 @@ export type SharedTierMetricName = (typeof SHARED_TIER_METRIC_NAMES)[number];
 export type ConnectionMetadata = AtlasMetadata & AtlasLocalToolMetadata & {
     connection_auth_type?: string;
     connection_host_type?: string;
+    /** Atlas cluster the connection points at, when it is an Atlas connection. */
+    cluster_name?: string;
+    cluster_id?: string;
     shared_tier_alerts_detected?: TelemetryBoolSet;
     shared_tier_tier?: SharedTierTier;
     shared_tier_alerts?: SharedTierMetricName[];

package/dist/telemetry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GAAG;IAC1B,gBAAgB,EAAE,EAAE,CAAC;IACrB,oBAAoB,EAAE,EAAE,CAAC;IACzB,gBAAgB,EAAE,EAAE,CAAC;CACxB,CAAC;AAEF,MAAM,WAAW,UAAU;IACvB,kBAAkB,IAAI,OAAO,CAAC;IAC9B,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACpC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,SAAS,CAAC;AAEpD,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,OAAO,CAAC;AAEhD,MAAM,MAAM,+BAA+B,GAAG;IAC1C,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC7B,iBAAiB,CAAC,EAAE,gBAAgB,CAAC;IACrC,wBAAwB,CAAC,EAAE,gBAAgB,CAAC;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,gBAAgB,CAAC;CACjC,GAAG,+BAA+B,CAAC;AAEpC,MAAM,MAAM,cAAc,CAAC,CAAC,IAAI;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,QAAQ,CAAC;IACjB,UAAU,EAAE,CAAC,GAAG;QACZ,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,eAAe,CAAC;QACxB,QAAQ,EAAE,MAAM,CAAC;KACpB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;CAClD,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,EAAE,CAAC;AAE1F,MAAM,MAAM,yBAAyB,GAAG;IACpC,CAAC,GAAG,EAAE,MAAM,GAAG,0BAA0B,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,yBAAyB,GAAG;IACpD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,yBAAyB,GAAG;IAC7D,yBAAyB,CAAC,EAAE,MAAM,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,CAAC;AAE7C,eAAO,MAAM,wBAAwB,sGAK3B,CAAC;AAEX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7E,MAAM,MAAM,kBAAkB,GAAG,aAAa,GAC1C,sBAAsB,GAAG;IACrB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,2BAA2B,CAAC,EAAE,gBAAgB,CAAC;IAC/C,gBAAgB,CAAC,EAAE,cAAc,CAAC;IAClC,kBAAkB,CAAC,EAAE,oBAAoB,EAAE,CAAC;CAC/C,CAAC;AAEN,MAAM,MAAM,uBAAuB,GAAG,aAAa,GAC/C,kBAAkB,GAAG;IACjB,UAAU,EAAE,MAAM,EAAE,CAAC;CACxB,CAAC;AAEN,MAAM,MAAM,mBAAmB,GAAG,aAAa,GAAG;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,kBAAkB,GAAG;IAC7C,UAAU,EAAE,SAAS,GAAG,cAAc,GAAG,QAAQ,CAAC;CACrD,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAC3B,aAAa,GACb,kBAAkB,GAClB,uBAAuB,GACvB,mBAAmB,GACnB,aAAa,CAAC;AAEpB,MAAM,MAAM,mBAAmB,GAAG;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB,GAAG,qBAAqB,CAAC;AAE1B,MAAM,MAAM,SAAS,GAAG,cAAc,CAAC,mBAAmB,CAAC,CAAC"}
+{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAElD,MAAM,MAAM,eAAe,GAAG;IAC1B,gBAAgB,EAAE,EAAE,CAAC;IACrB,oBAAoB,EAAE,EAAE,CAAC;IACzB,gBAAgB,EAAE,EAAE,CAAC;CACxB,CAAC;AAEF,MAAM,WAAW,UAAU;IACvB,kBAAkB,IAAI,OAAO,CAAC;IAC9B,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACpC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,SAAS,CAAC;AAEpD,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,OAAO,CAAC;AAEhD,MAAM,MAAM,+BAA+B,GAAG;IAC1C,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC7B,iBAAiB,CAAC,EAAE,gBAAgB,CAAC;IACrC,wBAAwB,CAAC,EAAE,gBAAgB,CAAC;IAC5C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,QAAQ,CAAC,EAAE,WAAW,CAAC;CAC1B,GAAG,+BAA+B,CAAC;AAEpC,MAAM,MAAM,cAAc,CAAC,CAAC,IAAI;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,QAAQ,CAAC;IACjB,UAAU,EAAE,CAAC,GAAG;QACZ,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,eAAe,CAAC;QACxB,QAAQ,EAAE,MAAM,CAAC;KACpB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;CAClD,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,EAAE,CAAC;AAE1F,MAAM,MAAM,yBAAyB,GAAG;IACpC,CAAC,GAAG,EAAE,MAAM,GAAG,0BAA0B,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,yBAAyB,GAAG;IACpD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,yBAAyB,GAAG;IAC7D,yBAAyB,CAAC,EAAE,MAAM,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,CAAC;AAE7C,eAAO,MAAM,wBAAwB,sGAK3B,CAAC;AAEX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7E,MAAM,MAAM,kBAAkB,GAAG,aAAa,GAC1C,sBAAsB,GAAG;IACrB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2BAA2B,CAAC,EAAE,gBAAgB,CAAC;IAC/C,gBAAgB,CAAC,EAAE,cAAc,CAAC;IAClC,kBAAkB,CAAC,EAAE,oBAAoB,EAAE,CAAC;CAC/C,CAAC;AAEN,MAAM,MAAM,uBAAuB,GAAG,aAAa,GAC/C,kBAAkB,GAAG;IACjB,UAAU,EAAE,MAAM,EAAE,CAAC;CACxB,CAAC;AAEN,MAAM,MAAM,mBAAmB,GAAG,aAAa,GAAG;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,kBAAkB,GAAG;IAC7C,UAAU,EAAE,SAAS,GAAG,cAAc,GAAG,QAAQ,CAAC;CACrD,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAC3B,aAAa,GACb,kBAAkB,GAClB,uBAAuB,GACvB,mBAAmB,GACnB,aAAa,CAAC;AAEpB,MAAM,MAAM,mBAAmB,GAAG;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB,GAAG,qBAAqB,CAAC;AAE1B,MAAM,MAAM,SAAS,GAAG,cAAc,CAAC,mBAAmB,CAAC,CAAC"}

package/dist/telemetry.js.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AAkEA,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACpC,qBAAqB;IACrB,0BAA0B;IAC1B,sBAAsB;IACtB,cAAc;CACR,CAAC"}
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AAoEA,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACpC,qBAAqB;IACrB,0BAA0B;IAC1B,sBAAsB;IACtB,cAAc;CACR,CAAC"}

package/dist/tool.d.ts

@@ -1,22 +1,67 @@
-import { type CallToolResult, type RequestMeta } from "@modelcontextprotocol/sdk/types.js";
+import type { CallToolResult, RequestMeta, ServerContext, McpServer } from "@modelcontextprotocol/server";
 export type { CallToolResult };
-import type { Secret } from "mongodb-redact";
 import type { IToolConfig } from "./config.js";
+import type { ElicitationInputResponses, IElicitation } from "./elicitation.js";
 import type { ICompositeLogger } from "./logging.js";
+import type { IKeychain } from "./keychain.js";
+import type { DefaultMetricDefinitions, IMetrics } from "./metrics.js";
+import type { IUIRegistry } from "./ui.js";
+import type { ITelemetry } from "./telemetry.js";
 /**
- * The minimal session surface tools rely on: config and logging. The CLI's
- * session is deliberately stateless (connection state lives in the app-level
- * registry and is addressed by connectionId), so tools are not constrained to
- * the full {@link ISession} shape.
+ * The services every tool receives at construction, injected individually
+ * (no server-scoped "session" object exists). The server is deliberately
+ * stateless: MongoDB connection state lives in the app-level registry and is
+ * addressed per request by `connectionId`, and per-client identity travels on
+ * the tool request (see `ToolExecutionContext.request.clientInfo`).
+ *
+ * Tool categories extend this type with the specific app-level services they
+ * need (e.g. the connection registry); `TConfig` narrows the configuration
+ * subset a category reads.
  */
-export interface IToolSession {
-    readonly config: IToolConfig;
+export type ToolServices<TConfig extends IToolConfig = IToolConfig> = {
+    /** Configuration for the server */
+    readonly config: TConfig;
+    /** Logger for the server */
     readonly logger: ICompositeLogger;
-    /** Secrets registered for redaction (used by ToolBase error handling). */
-    readonly keychain: {
-        readonly allSecrets: Secret[];
-    };
-}
+    /** Redacts registered secrets from a value (used by ToolBase error handling). */
+    readonly keychain: IKeychain;
+};
+/**
+ * The service surface a tool reads from its server. Tool constructors receive
+ * exactly one argument — the server — which carries the individually-injected
+ * services ({@link ToolServices}) plus the shared infrastructure every tool
+ * needs (telemetry, elicitation, metrics and the UI registry). Category
+ * services (e.g. the connection registry) travel in `TServices`, so a server
+ * is structurally assignable to the `ToolServer` of each tool category it
+ * hosts.
+ */
+/**
+ * The minimal surface of a registered tool that a host reads off `server.tools`.
+ * Kept structural (rather than referencing {@link AnyToolBase} from mcp-core) to
+ * avoid a circular dependency: `@mongodb-js/mcp-types` is a base package.
+ */
+export type ToolServerTool = {
+    readonly name: string;
+    readonly category: ToolCategory;
+    readonly operationType: OperationType;
+    isEnabled(): boolean;
+};
+export type ToolServer<TServices extends ToolServices = ToolServices, TMetricsDefinitions extends DefaultMetricDefinitions = DefaultMetricDefinitions> = TServices & {
+    /** Telemetry for tracking tool usage. */
+    readonly telemetry: ITelemetry;
+    /** Elicitation for requesting user confirmation / input. */
+    readonly elicitation: IElicitation;
+    /** Metrics for tracking tool execution. */
+    readonly metrics: IMetrics<TMetricsDefinitions>;
+    /** UI registry for tools that embed interactive widget content. */
+    readonly uiRegistry?: IUIRegistry;
+    /** The SDK McpServer this tool is registered against. */
+    readonly mcpServer: McpServer;
+    /** The tools registered on this server (used to detect the export tool / list available tools). */
+    readonly tools: readonly ToolServerTool[];
+    /** Reports whether a tool category is enabled on this server. */
+    isToolCategoryAvailable(name: ToolCategory): boolean;
+};
 /**
  * The type of operation the tool performs. This is used when evaluating if a tool is allowed to run based on
  * the config's `disabledTools` and `readOnly` settings.
@@ -42,24 +87,48 @@ export type OperationType = "metadata" | "read" | "create" | "delete" | "update"
  */
 export type ToolCategory = "mongodb" | "atlas" | "atlas-local" | "assistant" | "custom";
 /**
- * Context provided during tool execution.
+ * The request object passed to tool implementations: everything derived from
+ * the individual request being handled. It is built fresh for each tool call
+ * and deliberately lives nowhere else — the server holds no per-client or
+ * per-request state. The request-scoped server (and the effective,
+ * possibly request-overridden config it carries) is NOT on the request: tools
+ * read it off their construction-time `this.server` (the same instance). The
+ * per-request data (raw SDK request, signal, id, headers, client identity,
+ * ...) travels on the request itself (see `ToolExecutionContext.request`).
  */
-export type ToolExecutionContext = {
+export type ToolRequest<TConfig extends IToolConfig = IToolConfig> = {
+    /**
+     * The original request this request object was built around: the SDK's
+     * per-request `mcpReq` object the tool call handler received. Undefined
+     * when the tool is invoked directly in unit tests without a real SDK
+     * request. Prefer the normalized fields (`headers`, `id`, `clientInfo`,
+     * ...); reach for `raw` only when the typed surface does not cover what
+     * you need.
+     */
+    readonly raw?: ServerContext["mcpReq"];
     /** AbortSignal for cancellation support */
     signal: AbortSignal;
     /**
-     * Request context object available only when running atop
-     * StreamableHttpTransport.
+     * HTTP request headers, available only when running atop
+     * StreamableHttpTransport. Used for request correlation (e.g.
+     * `x-request-id`) and forwarded to outgoing Atlas API requests.
      */
-    requestInfo?: {
-        headers?: Record<string, unknown>;
-    };
+    headers?: Record<string, unknown>;
     /** Metadata from the original MCP request (e.g. the client's progress token). */
     _meta?: RequestMeta;
     /** The request id, when invoked through an MCP server. */
-    requestId?: string | number;
+    id?: string | number;
     /** Send an MCP server notification. */
     sendNotification?: (notification: unknown) => Promise<void>;
+    /**
+     * Responses to a previous `input_required` round (protocol revision
+     * 2026-07-28 multi-round-trip requests). Present only when this request
+     * is a client retry carrying the answers to elicitation/sampling/roots
+     * requests the handler returned as `inputRequired(...)`. Keyed by the
+     * server-assigned identifiers of the embedded requests. Values are
+     * untrusted client input.
+     */
+    inputResponses?: ElicitationInputResponses;
     /**
      * Total time spent waiting for the user to answer elicitation requests
      * raised while handling this call. Accumulated by
@@ -68,6 +137,30 @@ export type ToolExecutionContext = {
      * time the tool spent working.
      */
     elicitationDurationMs?: number;
+    /**
+     * Identity of the MCP client that issued this request, as negotiated
+     * during initialization (or as declared on the request envelope in the
+     * 2026-07-28 protocol). Carried on the request — it is deliberately not
+     * stored on any server-scoped object, so the server holds no per-client
+     * state.
+     */
+    clientInfo?: {
+        name?: string;
+        version?: string;
+        title?: string;
+    };
+};
+/**
+ * Request-scoped context provided during tool execution. The request object
+ * ({@link ToolRequest}) holds everything derived from the individual request
+ * — the request-scoped `server` (which carries the effective config), the
+ * original `raw` request, signal, request id, client identity, elicitation
+ * state — and is built fresh per call by `toToolExecutionContext`. Tools
+ * receive it as the `request` argument.
+ */
+export type ToolExecutionContext<TConfig extends IToolConfig = IToolConfig> = {
+    /** The request object this execution is built around. */
+    request: ToolRequest<TConfig>;
 };
 export type ToolClass<TParams extends unknown[] = unknown[]> = {
     new (params: TParams): {

package/dist/tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool.d.ts","sourceRoot":"","sources":["../src/tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,WAAW,EAAE,MAAM,oCAAoC,CAAC;AAC3F,YAAY,EAAE,cAAc,EAAE,CAAC;AAC/B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAErD;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IACzB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CACxD;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE7F;;;;;;;;;GASG;AACH,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,OAAO,GAAG,aAAa,GAAG,WAAW,GAAG,QAAQ,CAAC;AAExF;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG;IAC/B,2CAA2C;IAC3C,MAAM,EAAE,WAAW,CAAC;IACpB;;;OAGG;IACH,WAAW,CAAC,EAAE;QACV,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACrC,CAAC;IACF,iFAAiF;IACjF,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,uCAAuC;IACvC,gBAAgB,CAAC,EAAE,CAAC,YAAY,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,SAAS,CAAC,OAAO,SAAS,OAAO,EAAE,GAAG,OAAO,EAAE,IAAI;IAC3D,KAAK,MAAM,EAAE,OAAO,GAAG;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,YAAY,CAAC;QACvB,aAAa,EAAE,aAAa,CAAC;KAChC,CAAC;IACF,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,YAAY,CAAC;IACvB,aAAa,EAAE,aAAa,CAAC;CAChC,CAAC;AAGF,MAAM,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;AAE1C,MAAM,WAAW,cAAc;IAC3B,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC;CACtC"}
+{"version":3,"file":"tool.d.ts","sourceRoot":"","sources":["../src/tool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAE1G,YAAY,EAAE,cAAc,EAAE,CAAC;AAC/B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,yBAAyB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,KAAK,EAAE,wBAAwB,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEjD;;;;;;;;;;GAUG;AACH,MAAM,MAAM,YAAY,CAAC,OAAO,SAAS,WAAW,GAAG,WAAW,IAAI;IAClE,mCAAmC;IACnC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,4BAA4B;IAC5B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,iFAAiF;IACjF,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;CAChC,CAAC;AAEF;;;;;;;;GAQG;AACH;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,SAAS,IAAI,OAAO,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,UAAU,CAClB,SAAS,SAAS,YAAY,GAAG,YAAY,EAC7C,mBAAmB,SAAS,wBAAwB,GAAG,wBAAwB,IAC/E,SAAS,GAAG;IACZ,yCAAyC;IACzC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,4DAA4D;IAC5D,QAAQ,CAAC,WAAW,EAAE,YAAY,CAAC;IACnC,2CAA2C;IAC3C,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAChD,mEAAmE;IACnE,QAAQ,CAAC,UAAU,CAAC,EAAE,WAAW,CAAC;IAClC,yDAAyD;IACzD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,mGAAmG;IACnG,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;IAC1C,iEAAiE;IACjE,uBAAuB,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC;CACxD,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE7F;;;;;;;;;GASG;AACH,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,OAAO,GAAG,aAAa,GAAG,WAAW,GAAG,QAAQ,CAAC;AAExF;;;;;;;;;GASG;AAIH,MAAM,MAAM,WAAW,CAAC,OAAO,SAAS,WAAW,GAAG,WAAW,IAAI;IACjE;;;;;;;OAOG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;IACvC,2CAA2C;IAC3C,MAAM,EAAE,WAAW,CAAC;IACpB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,iFAAiF;IACjF,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,0DAA0D;IAC1D,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACrB,uCAAuC;IACvC,gBAAgB,CAAC,EAAE,CAAC,YAAY,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,yBAAyB,CAAC;IAC3C;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;OAMG;IACH,UAAU,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACpE,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,oBAAoB,CAAC,OAAO,SAAS,WAAW,GAAG,WAAW,IAAI;IAC1E,yDAAyD;IACzD,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,SAAS,CAAC,OAAO,SAAS,OAAO,EAAE,GAAG,OAAO,EAAE,IAAI;IAC3D,KAAK,MAAM,EAAE,OAAO,GAAG;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,YAAY,CAAC;QACvB,aAAa,EAAE,aAAa,CAAC;KAChC,CAAC;IACF,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,YAAY,CAAC;IACvB,aAAa,EAAE,aAAa,CAAC;CAChC,CAAC;AAGF,MAAM,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;AAE1C,MAAM,WAAW,cAAc;IAC3B,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC;CACtC"}

package/dist/transport.d.ts

@@ -1,6 +1,45 @@
+/**
+ * Verified identity of an authenticated HTTP client (mirrors the SDK's
+ * `AuthInfo`). Carried on the request context so per-request servers can scope
+ * shared state (e.g. connections) by verified identity rather than
+ * self-asserted headers.
+ */
+export type RequestAuthInfo = {
+    /** The access token. */
+    token: string;
+    /** The client id associated with this token. */
+    clientId: string;
+    /** Scopes associated with this token. */
+    scopes: string[];
+    /** When the token expires (in seconds since epoch). */
+    expiresAt?: number;
+};
+/**
+ * The explicit authentication state of a request. Every HTTP request carries
+ * one or the other — there is no "unknown" — so per-request servers always
+ * know whether they are serving an authenticated client, and scope shared
+ * state (e.g. connections) by the verified `clientId` when authenticated.
+ * Identity is injected by the host (e.g. `req.auth` via the node adapter's
+ * pass-through, or directly on the request context); the server never
+ * authenticates on its own.
+ */
+export type RequestAuthState = {
+    mode: "unauthenticated";
+} | {
+    mode: "authenticated";
+    state: RequestAuthInfo;
+};
+export type McpProtocol = "legacy" | "2026-07-28";
 export type TransportRequestContext = {
     headers?: Record<string, string | string[] | undefined>;
     query?: Record<string, string | string[] | undefined>;
+    /**
+     * The explicit auth state of this request. When authenticated, shared state
+     * (connections) is scoped by `state.clientId`; unauthenticated requests are
+     * isolated from authenticated clients.
+     */
+    authInfo?: RequestAuthState;
+    protocol?: McpProtocol;
 };
 export interface ITransportRunner {
     start(options: {

package/dist/transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,uBAAuB,GAAG;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;CACzD,CAAC;AAEF,MAAM,WAAW,gBAAgB;IAC7B,KAAK,CAAC,OAAO,EAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC3B,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACpD"}
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG;IAC1B,wBAAwB;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,yCAAyC;IACzC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,EAAE,iBAAiB,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,eAAe,CAAA;CAAE,CAAC;AAE/G,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,YAAY,CAAC;AAElD,MAAM,MAAM,uBAAuB,GAAG;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IACtD;;;;OAIG;IACH,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,QAAQ,CAAC,EAAE,WAAW,CAAC;CAC1B,CAAC;AAEF,MAAM,WAAW,gBAAgB;IAC7B,KAAK,CAAC,OAAO,EAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC3B,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACpD"}

package/dist/transports.d.ts

@@ -12,17 +12,19 @@ export type HttpServerOptions = {
     headers?: Record<string, string>;
     /** Response type: 'sse' for Server-Sent Events, 'json' for JSON responses */
     responseType?: "sse" | "json";
-};
-/**
- * Options for session management.
- */
-export type SessionManagementOptions = {
-    /** Idle timeout in milliseconds */
-    idleTimeoutMs: number;
-    /** Notification timeout in milliseconds */
-    notificationTimeoutMs: number;
-    /** Whether to allow externally managed sessions */
-    externallyManagedSessions: boolean;
+    /**
+     * The HTTP entry's auth mode (required — there is no implicit default so a
+     * deployment's posture is always explicit):
+     *
+     * - `"authenticated"`: every request must carry a verified identity (hosts
+     *   inject it via `req.auth`, which the node adapter forwards as the
+     *   handler's authInfo; the server never authenticates on its own).
+     *   Unauthenticated requests are rejected with 401 and the request
+     *   context's authInfo is always `{ mode: "authenticated", state }`.
+     * - `"unauthenticated"`: authInfo carries whatever the host provides,
+     *   defaulting to `{ mode: "unauthenticated" }`.
+     */
+    authMode: "authenticated" | "unauthenticated";
 };
 /**
  * Options for transport runners.

package/dist/transports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transports.d.ts","sourceRoot":"","sources":["../src/transports.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC5B,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0BAA0B;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,6EAA6E;IAC7E,YAAY,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;CACjC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACnC,mCAAmC;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,2CAA2C;IAC3C,qBAAqB,EAAE,MAAM,CAAC;IAC9B,mDAAmD;IACnD,yBAAyB,EAAE,OAAO,CAAC;CACtC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACjC,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAC;CACnB,CAAC"}
+{"version":3,"file":"transports.d.ts","sourceRoot":"","sources":["../src/transports.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC5B,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0BAA0B;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,6EAA6E;IAC7E,YAAY,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC9B;;;;;;;;;;;OAWG;IACH,QAAQ,EAAE,eAAe,GAAG,iBAAiB,CAAC;CACjD,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACjC,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAC;CACnB,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@mongodb-js/mcp-types",
   "description": "Shared TypeScript types and interfaces for MongoDB MCP server packages",
-  "version": "3.0.0-prerelease.2",
+  "version": "3.0.0-prerelease.4",
   "type": "module",
   "license": "Apache-2.0",
   "author": "MongoDB <info@mongodb.com>",
@@ -22,16 +22,18 @@
   "files": [
     "dist"
   ],
+  "dependencies": {
+    "@modelcontextprotocol/server": "^2.0.0",
+    "mongodb-redact": "^1.4.6"
+  },
   "devDependencies": {
-    "@modelcontextprotocol/sdk": "^1.29.0",
-    "mongodb-redact": "^1.4.6",
     "@types/node": "^25.6.0",
     "typescript": "^5.9.2",
-    "vitest": "^4.1.10"
+    "vitest": "^4.1.11"
   },
   "scripts": {
     "build": "tsc --build tsconfig.build.json",
     "test": "vitest --run",
-    "check": "tsc --build tsconfig.build.json --noEmit"
+    "check": "tsc --noEmit --project tsconfig.json"
   }
 }

package/dist/session.d.ts

@@ -1,44 +0,0 @@
-import type { ICompositeLogger } from "./logging.js";
-import type { IKeychain } from "./keychain.js";
-import type { IToolConfig } from "./config.js";
-export type SessionEvents = {
-    connect: [];
-    close: [];
-    disconnect: [];
-    "connection-error": [unknown];
-};
-export interface ISession<TConfig extends IToolConfig = IToolConfig> {
-    readonly sessionId: string;
-    logger: ICompositeLogger;
-    mcpClient?: {
-        name?: string;
-        version?: string;
-        title?: string;
-    };
-    /** TODO: Consider removing if possible */
-    setMcpClient(mcpClient: {
-        name?: string;
-        version?: string;
-        title?: string;
-    } | undefined): void;
-    disconnect(): Promise<void>;
-    close(): Promise<void>;
-    readonly isConnectedToMongoDB: boolean;
-    /** Event emitter method for reactive resources */
-    on(event: "connect" | "disconnect" | "close" | "connection-error", listener: (...args: unknown[]) => void): void;
-    /** Keychain for secret management */
-    readonly keychain: IKeychain;
-    /** Configuration for the session */
-    readonly config: TConfig;
-    /** Optional connection string info */
-    readonly connectionStringInfo?: {
-        authType?: string;
-        hostType?: string;
-    };
-    /** Optional connected Atlas cluster info */
-    readonly connectedAtlasCluster?: {
-        projectId?: string;
-        clusterName?: string;
-    };
-}
-//# sourceMappingURL=session.d.ts.map

package/dist/session.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,MAAM,MAAM,aAAa,GAAG;IACxB,OAAO,EAAE,EAAE,CAAC;IACZ,KAAK,EAAE,EAAE,CAAC;IACV,UAAU,EAAE,EAAE,CAAC;IACf,kBAAkB,EAAE,CAAC,OAAO,CAAC,CAAC;CACjC,CAAC;AAEF,MAAM,WAAW,QAAQ,CAAC,OAAO,SAAS,WAAW,GAAG,WAAW;IAC/D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,gBAAgB,CAAC;IACzB,SAAS,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAChE,0CAA0C;IAC1C,YAAY,CAAC,SAAS,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,GAAG,IAAI,CAAC;IAC/F,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,kDAAkD;IAClD,EAAE,CAAC,KAAK,EAAE,SAAS,GAAG,YAAY,GAAG,OAAO,GAAG,kBAAkB,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,IAAI,CAAC;IACjH,qCAAqC;IACrC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;IAC7B,oCAAoC;IACpC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,sCAAsC;IACtC,QAAQ,CAAC,oBAAoB,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACzE,4CAA4C;IAC5C,QAAQ,CAAC,qBAAqB,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACjF"}

package/dist/session.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=session.js.map

package/dist/session.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":""}