@sodiumhq/mcp-pm 0.1.0-beta.4441 → 0.1.0-beta.4448

package/README.md

@@ -62,6 +62,7 @@ Only enable write mode with an AI client you trust — it hands the client the a
 - **`get_practice_dashboard`** — one-call "state of the practice right now": overdue/blocked/due-soon work, what clients are sitting on, unassigned steps, unbilled time, open proposal pipeline. *"Give me my morning briefing."*
 - **`get_practice_details`** — consolidated practice overview (counts, connections, settings)
 - **`whoami`** — show the authenticated user (name, email, code), tenant (name, code, status), and practice name. Useful for verifying which account is connected.
+- **`list_practices`** — list the practices you belong to. *"Which practices can I access?"* If you belong to more than one, tools take an optional `practice` code to say which one a request is about; with a single practice it is selected automatically.
 
 **Clients**
 - **`list_clients`** — list and filter clients by search, status, type, assignee, services, saved filters

package/dist/http.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { t as buildServer } from "./src-CTHTAM7g.mjs";
+import { t as buildServer } from "./src-DEbTNFXg.mjs";
 import { createRequire } from "node:module";
-import { createHash, randomUUID } from "node:crypto";
+import { createHash } from "node:crypto";
 import { createServer } from "node:http";
 import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
 import { isInitializeRequest } from "@modelcontextprotocol/sdk/types.js";
@@ -140,26 +140,6 @@ const WRITES_ENABLED = writesRaw === "true" || writesRaw === "1";
 const AUTH = loadAuthConfig();
 const OBO = AUTH ? loadOboConfig(AUTH.issuer) : null;
 const ENDPOINT_PATH = AUTH ? new URL(AUTH.resourceUrl).pathname : process.env.MCP_ENDPOINT_PATH ?? "/mcp";
-const sessions = /* @__PURE__ */ new Map();
-const SESSION_IDLE_MS = Number(process.env.MCP_SESSION_IDLE_MS ?? 30 * 6e4);
-const SWEEP_INTERVAL_MS = 6e4;
-function touch(sessionId) {
-	const session = sessions.get(sessionId);
-	if (session) session.lastActivity = Date.now();
-}
-async function sweepIdleSessions() {
-	const cutoff = Date.now() - SESSION_IDLE_MS;
-	for (const [sessionId, session] of sessions) {
-		if (session.lastActivity > cutoff) continue;
-		sessions.delete(sessionId);
-		console.error(`[sodium-pm-mcp-http] session ${sessionId} swept (idle)`);
-		try {
-			await session.transport.close();
-		} catch (error) {
-			console.error(`[sodium-pm-mcp-http] error closing swept session: ${String(error)}`);
-		}
-	}
-}
 const MAX_BODY_BYTES = 4 * 1024 * 1024;
 async function readJsonBody(req) {
 	const chunks = [];
@@ -182,7 +162,7 @@ function sendJsonError(res, status, message) {
 		id: null
 	}));
 }
-async function createSession(req) {
+async function handleMcpPost(req, res, body) {
 	const authHeader = req.headers.authorization;
 	if (!authHeader?.startsWith("Bearer ")) throw new HttpError(401, "Authorization: Bearer <token> header is required.");
 	const bearerToken = authHeader.slice(7).trim();
@@ -195,7 +175,7 @@ async function createSession(req) {
 	}
 	const tenantHeader = req.headers["x-sodium-tenant"];
 	const tenant = (Array.isArray(tenantHeader) ? tenantHeader[0] : tenantHeader) ?? process.env.SODIUM_TENANT;
-	if (!tenant) throw new HttpError(400, "x-sodium-tenant header is required (or set SODIUM_TENANT).");
+	const isInit = isInitializeRequest(body);
 	const server = await buildServer({
 		context: {
 			bearerToken: apiToken,
@@ -204,26 +184,17 @@ async function createSession(req) {
 			writesEnabled: writesAllowed
 		},
 		serverName: "Sodium Practice Management",
-		serverVersion: VERSION
+		serverVersion: VERSION,
+		includeStartupContext: isInit
 	});
-	const transport = new StreamableHTTPServerTransport({
-		sessionIdGenerator: () => randomUUID(),
-		onsessioninitialized: (sessionId) => {
-			sessions.set(sessionId, {
-				transport,
-				lastActivity: Date.now()
-			});
-			console.error(`[sodium-pm-mcp-http] session ${sessionId} started (tenant: ${tenant}, live: ${sessions.size})`);
-		}
+	const transport = new StreamableHTTPServerTransport({ sessionIdGenerator: void 0 });
+	res.on("close", () => {
+		transport.close();
+		server.close();
 	});
-	transport.onclose = () => {
-		if (transport.sessionId) {
-			sessions.delete(transport.sessionId);
-			console.error(`[sodium-pm-mcp-http] session ${transport.sessionId} closed`);
-		}
-	};
+	if (isInit) console.error(`[sodium-pm-mcp-http] initialize (tenant: ${tenant || "per-call"}, writes: ${writesAllowed})`);
 	await server.connect(transport);
-	return transport;
+	await transport.handleRequest(req, res, body);
 }
 var HttpError = class extends Error {
 	constructor(status, message) {
@@ -236,8 +207,7 @@ async function handle(req, res) {
 	if (req.method === "GET" && url.pathname === "/health") {
 		res.writeHead(200, { "Content-Type": "application/json" }).end(JSON.stringify({
 			status: "ok",
-			version: VERSION,
-			sessions: sessions.size
+			version: VERSION
 		}));
 		return;
 	}
@@ -249,25 +219,14 @@ async function handle(req, res) {
 		sendJsonError(res, 404, `Not found. MCP endpoint is ${ENDPOINT_PATH}.`);
 		return;
 	}
-	const sessionId = req.headers["mcp-session-id"];
-	const existing = typeof sessionId === "string" ? sessions.get(sessionId) : void 0;
-	if (existing && typeof sessionId === "string") {
-		touch(sessionId);
-		await existing.transport.handleRequest(req, res);
-		return;
-	}
 	if (req.method !== "POST") {
-		sendJsonError(res, 400, "No valid MCP session. Send an initialize request first.");
+		res.setHeader("Allow", "POST");
+		sendJsonError(res, 405, "Stateless MCP endpoint. Send requests as POST.");
 		return;
 	}
-	const body = await readJsonBody(req);
-	if (!isInitializeRequest(body)) {
-		sendJsonError(res, 400, "No valid MCP session. Send an initialize request first.");
-		return;
-	}
-	await (await createSession(req)).handleRequest(req, res, body);
+	await handleMcpPost(req, res, await readJsonBody(req));
 }
-const httpServer = createServer((req, res) => {
+createServer((req, res) => {
 	handle(req, res).catch((error) => {
 		const message = error instanceof Error ? error.message : String(error);
 		console.error(`[sodium-pm-mcp-http] ${req.method} ${req.url} failed: ${message}`);
@@ -281,11 +240,7 @@ const httpServer = createServer((req, res) => {
 		if (AUTH && error instanceof HttpError && error.status === 401) res.setHeader("WWW-Authenticate", buildChallenge(AUTH));
 		sendJsonError(res, error instanceof HttpError ? error.status : 500, message);
 	});
-});
-setInterval(() => {
-	sweepIdleSessions();
-}, SWEEP_INTERVAL_MS).unref();
-httpServer.listen(PORT, HOST, () => {
+}).listen(PORT, HOST, () => {
 	console.error(`[sodium-pm-mcp-http] v${VERSION} listening on http://${HOST}:${PORT}${ENDPOINT_PATH} (api: ${BASE_URL}, writes: ${WRITES_ENABLED ? "enabled" : "disabled"})`);
 });
 //#endregion

package/dist/index.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as buildServer } from "./src-CTHTAM7g.mjs";
+import { t as buildServer } from "./src-DEbTNFXg.mjs";
 import { createRequire } from "node:module";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { parseArgs } from "node:util";