@orkestrel/mcp 0.0.36 → 0.0.38

package/dist/src/server/index.cjs

@@ -372,8 +372,8 @@ function inferHeaderTarget(request) {
 * {@link import('@orkestrel/mcp').decodeSentinel} before the comparison, so a peer that had
 * to encode its value still matches; a sentinel whose payload is invalid decodes to nothing
 * and therefore mismatches, which is how an invalid header value is refused. A legacy request
-* body requires a protocol header after initialization. Messages name the expected value but
-* never echo the client-supplied one.
+* body requires a protocol header except for `initialize` and an id-bearing legacy `ping`.
+* Messages name the expected value but never echo the client-supplied one.
 *
 * The expectation a live session supplies is a different rule over a different input, so it
 * is {@link inferSessionHeaderIssue} rather than a second arm of this one.
@@ -391,7 +391,7 @@ function inferHeaderTarget(request) {
 function inferHeaderIssue(request, invocation) {
 	const protocol = request.headers.get(_src_core.MCP_PROTOCOL_VERSION_HEADER);
 	if (!(0, _src_core.isModernRequest)(invocation)) {
-		if ((0, _src_core.isInitializeRequest)(invocation) || protocol !== null) return void 0;
+		if ((0, _src_core.isInitializeRequest)(invocation) || (0, _src_core.isPingRequest)(invocation) || protocol !== null) return void 0;
 		return {
 			header: "MCP-Protocol-Version",
 			reason: "missing",
@@ -719,8 +719,8 @@ var HTTPDisconnect = class {
 * comparison; a missing, mismatched, or invalidly encoded value returns HTTP `400` + `-32020`.
 * A protocol header naming a modern revision holds the request to that revision whatever shape
 * its body arrived in, so a body with no parsable modern `_meta` returns HTTP `400` + `-32602`.
-* Headerless `initialize` is accepted, while every other headerless request needs a live legacy
-* session to supply its pinned version. A legacy-shaped request carrying a protocol header is
+* Headerless `initialize` and id-bearing legacy `ping` are accepted; other headerless requests
+* need a live legacy session to supply its pinned version. A legacy-shaped request carrying a protocol header is
 * otherwise admitted only for a legacy revision; a revision this server does not implement
 * returns HTTP `400` + `-32022` whose `supported` names the legacy revisions this door accepts.
 * A present origin must occur in `origin.origins` unless validation is
@@ -1979,7 +1979,9 @@ function createStdioServer(mcp, options) {
 *   readSessionHeader}: a valid id touches the entry and sets `context.state.session`; an
 *   absent / unknown id whose (guarded) body parses to an `initialize` request ({@link
 *   isInitializeRequest}) mints a fresh {@link MCPSession} (`crypto.randomUUID()`, the `session`
-*   options group) and sets `context.state.session`; neither → {@link rejectUnknownSession}
+*   options group) and sets `context.state.session`. An id-bearing legacy `ping` with no
+*   session header passes through without session state, a supplied protocol header, or a
+*   response stamp. Other unresolved requests → {@link rejectUnknownSession}
 *   (`404`). The
 *   minted entry pins the negotiated legacy revision, which is supplied to a later headerless
 *   live-session request. It then
@@ -2108,7 +2110,13 @@ function createMCPSession(options) {
 					version: inferLegacyVersion(parsed)
 				};
 				entry = created;
-			} else return rejectUnknownSession();
+			} else if (id === void 0 && (0, _src_core.isPingRequest)(parsed)) return next(new Request(context.url, {
+				method: "POST",
+				headers: request.headers,
+				body: text,
+				signal: request.signal
+			}));
+			else return rejectUnknownSession();
 		}
 		if (!Reflect.set(context.state, "session", entry.session)) throw new Error("MCP session state is not writable");
 		const headers = new Headers(request.headers);