cq-mcp-server 0.3.0 → 0.3.1

package/dist/index.js

@@ -331,41 +331,54 @@ if (MCP_TRANSPORT === "http") {
     // session_id → transport 映射，支持多用户并发
     const sessions = new Map();
     const httpServer = createServer(async (req, res) => {
+        // 允许跨域（Dify 可能从不同域访问）
+        res.setHeader("Access-Control-Allow-Origin", "*");
+        res.setHeader("Access-Control-Allow-Methods", "GET, POST, DELETE, OPTIONS");
+        res.setHeader("Access-Control-Allow-Headers", "Content-Type, mcp-session-id");
+        res.setHeader("Access-Control-Expose-Headers", "mcp-session-id");
+        if (req.method === "OPTIONS") {
+            res.writeHead(204).end();
+            return;
+        }
         if (!req.url?.startsWith("/mcp")) {
             res.writeHead(404).end("Not Found");
             return;
         }
-        // 每个新 session（首次 initialize 请求）创建独立的 server + transport
         const sessionId = req.headers["mcp-session-id"];
-        if (!sessionId) {
-            // 新 session：为该用户创建独立实例
-            const transport = new StreamableHTTPServerTransport({
-                sessionIdGenerator: () => randomUUID(),
-            });
-            const server = createMcpServer();
-            await server.connect(transport);
-            transport.onclose = () => {
-                const sid = transport.sessionId;
-                if (sid) {
-                    sessions.delete(sid);
-                    log.info(`Session 关闭: ${sid}，当前活跃: ${sessions.size}`);
-                }
-            };
-            await transport.handleRequest(req, res);
-            // handleRequest 后 sessionId 已生成，存入 map
-            if (transport.sessionId) {
-                sessions.set(transport.sessionId, transport);
-                log.info(`新 Session: ${transport.sessionId}，当前活跃: ${sessions.size}`);
-            }
-        }
-        else {
-            // 已有 session：路由到对应 transport
+        if (sessionId) {
+            // 已有 session：路由到对应 transport（GET/POST/DELETE 均转发）
             const transport = sessions.get(sessionId);
             if (!transport) {
                 res.writeHead(404).end("Session not found");
                 return;
             }
             await transport.handleRequest(req, res);
+            return;
+        }
+        // 无 session ID：只允许 POST initialize 创建新 session
+        if (req.method !== "POST") {
+            res.writeHead(400).end("Missing mcp-session-id");
+            return;
+        }
+        // 新 session：为该用户创建独立实例
+        const transport = new StreamableHTTPServerTransport({
+            sessionIdGenerator: () => randomUUID(),
+        });
+        const mcpServer = createMcpServer();
+        await mcpServer.connect(transport);
+        transport.onclose = () => {
+            const sid = transport.sessionId;
+            if (sid) {
+                sessions.delete(sid);
+                log.info(`Session 关闭: ${sid}，当前活跃: ${sessions.size}`);
+            }
+        };
+        // handleRequest 前先存入 map，防止 GET 请求在 POST 完成前到来
+        // sessionId 在 handleRequest 内部生成后会写入 response header
+        await transport.handleRequest(req, res);
+        if (transport.sessionId) {
+            sessions.set(transport.sessionId, transport);
+            log.info(`新 Session: ${transport.sessionId}，当前活跃: ${sessions.size}`);
         }
     });
     httpServer.listen(MCP_PORT, () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cq-mcp-server",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "MCP Server for CloudQuery platform — list databases, list tables, inspect columns, and execute SQL via MCP tools.",
   "type": "module",
   "main": "dist/index.js",