mcp-server-framework 1.0.0

package/build/server/session/session-manager.d.ts

@@ -0,0 +1,227 @@
+/**
+ * Session Manager
+ *
+ * Facade over SessionStore (CRUD) and SessionHousekeeper (timers).
+ * Provides the unified SessionManager interface to consumers.
+ *
+ * The SessionManager interface is the public contract — consumers
+ * never interact with Store or Housekeeper directly.
+ *
+ * @module server/session/session-manager
+ */
+import type { TransportType } from "../transport/transport-context.js";
+import type { Session, ReadonlySession, SessionCloseReason, CreateSessionOptions } from "./session.js";
+import type { SessionStore, SessionStats } from "./session-store.js";
+/**
+ * Configuration for session management.
+ */
+export interface SessionConfig {
+    /** Session timeout in milliseconds (default: 30 minutes) */
+    readonly timeoutMs: number;
+    /** Cleanup interval in milliseconds (default: 60 seconds) */
+    readonly cleanupIntervalMs: number;
+    /** Keep-alive interval in milliseconds (default: 30 seconds) */
+    readonly keepAliveIntervalMs: number;
+    /** Max missed heartbeats before disconnect (default: 3) */
+    readonly maxMissedHeartbeats: number;
+    /** Maximum total concurrent sessions across all transports (default: 200) */
+    readonly maxSessions: number;
+    /** Maximum concurrent Streamable HTTP sessions (default: 100) */
+    readonly maxStreamableHttpSessions: number;
+    /** Maximum concurrent SSE sessions (default: 50) */
+    readonly maxSseSessions: number;
+}
+/**
+ * Partial config for user overrides.
+ */
+export type SessionConfigInput = Partial<SessionConfig> & {
+    /** Optional lifecycle hooks for client connect/disconnect events */
+    readonly lifecycle?: SessionLifecycleHooks | undefined;
+    /**
+     * Custom session store implementation.
+     *
+     * When provided, replaces the built-in {@link InMemorySessionStore}.
+     * Useful for horizontal scaling with Redis, PostgreSQL, or another
+     * shared backend.
+     *
+     * The store must implement the {@link SessionStore} interface.
+     */
+    readonly store?: SessionStore | undefined;
+};
+/**
+ * Lifecycle hooks for session-level events.
+ *
+ * These hooks are called by the SessionManager when sessions are
+ * created or closed, enabling connection tracking in consumer code.
+ */
+export interface SessionLifecycleHooks {
+    /** Called after a new session is successfully created */
+    readonly onClientConnected?: ((sessionId: string) => void | Promise<void>) | undefined;
+    /** Called after a session is closed and cleaned up */
+    readonly onClientDisconnected?: ((sessionId: string) => void | Promise<void>) | undefined;
+}
+export type { SessionStats } from "./session-store.js";
+/**
+ * Interface for managing sessions.
+ *
+ * Provides unified session lifecycle management for all transport types.
+ * Supports heartbeat monitoring, automatic cleanup, and broadcasting.
+ */
+export interface SessionManager {
+    /** Number of active sessions */
+    readonly size: number;
+    /** Current statistics */
+    readonly stats: SessionStats;
+    /**
+     * Creates and registers a new session.
+     *
+     * @param options - Session creation options
+     * @returns The created session, or undefined if at capacity
+     */
+    create(options: CreateSessionOptions): Session | undefined;
+    /**
+     * Gets a session by ID.
+     * Does NOT update activity time (use touch() for that).
+     *
+     * @param sessionId - Session identifier
+     * @returns The session if found and active
+     */
+    get(sessionId: string): Session | undefined;
+    /**
+     * Checks if a session exists and is active.
+     *
+     * @param sessionId - Session identifier
+     */
+    has(sessionId: string): boolean;
+    /**
+     * Updates the last activity time for a session.
+     * Also resets missed heartbeat count.
+     *
+     * @param sessionId - Session identifier
+     * @returns true if session was touched
+     */
+    touch(sessionId: string): boolean;
+    /**
+     * Checks if there's capacity for new sessions.
+     */
+    hasCapacity(): boolean;
+    /**
+     * Checks if there's capacity for a specific transport type.
+     * Enforces per-transport limits (e.g., maxStreamableHttpSessions, maxSseSessions).
+     *
+     * @param transportType - The transport type to check capacity for
+     */
+    hasCapacityForTransport(transportType: TransportType): boolean;
+    /**
+     * Closes and removes a specific session.
+     *
+     * @param sessionId - Session identifier
+     * @param reason - Reason for closure
+     */
+    close(sessionId: string, reason: SessionCloseReason): Promise<void>;
+    /**
+     * Closes all sessions during shutdown.
+     */
+    closeAll(): Promise<void>;
+    /**
+     * Broadcasts tool list changed notification to all sessions.
+     * Called when dynamic tools are added/removed.
+     */
+    broadcastToolListChanged(): void;
+    /**
+     * Broadcasts resource list changed notification to all sessions.
+     * Called when dynamic resources are added/removed.
+     */
+    broadcastResourceListChanged(): void;
+    /**
+     * Broadcasts prompt list changed notification to all sessions.
+     * Called when dynamic prompts are added/removed.
+     */
+    broadcastPromptListChanged(): void;
+    /**
+     * Sends a resource updated notification to sessions subscribed to the given URI.
+     *
+     * Only sessions that have called `resources/subscribe` for this URI receive
+     * the `notifications/resources/updated` notification.
+     */
+    broadcastResourceUpdated(uri: string): void;
+    /**
+     * Iterates over all active sessions.
+     *
+     * @param callback - Function to call for each session
+     */
+    forEach(callback: (session: ReadonlySession, sessionId: string) => void): void;
+    /**
+     * Finds sessions matching a predicate.
+     *
+     * @param predicate - Filter function
+     * @returns Array of matching sessions
+     */
+    filter(predicate: (session: ReadonlySession) => boolean): ReadonlySession[];
+    /**
+     * Gets all sessions of a specific transport type.
+     *
+     * @param type - Transport type to filter by
+     */
+    getByTransportType(type: TransportType): ReadonlySession[];
+    /**
+     * Disposes of the manager and stops background tasks.
+     */
+    dispose(): void;
+}
+/**
+ * Facade implementation of SessionManager.
+ *
+ * Delegates to:
+ * - {@link SessionStore} for CRUD operations, queries, and broadcasting
+ * - {@link SessionHousekeeper} for background cleanup and heartbeat monitoring
+ *
+ * @example
+ * ```typescript
+ * // HTTP mode — full background tasks
+ * const manager = new SessionManagerImpl();
+ *
+ * // Stdio mode — no background tasks
+ * const manager = new SessionManagerImpl({
+ *   cleanupIntervalMs: 0,
+ *   keepAliveIntervalMs: 0,
+ *   maxSessions: 1,
+ * });
+ * ```
+ */
+export declare class SessionManagerImpl implements SessionManager {
+    private readonly store;
+    private readonly housekeeper;
+    private readonly config;
+    private readonly lifecycle?;
+    constructor(config?: SessionConfigInput);
+    get size(): number;
+    get stats(): SessionStats;
+    create(options: CreateSessionOptions): Session | undefined;
+    get(sessionId: string): Session | undefined;
+    has(sessionId: string): boolean;
+    touch(sessionId: string): boolean;
+    hasCapacity(): boolean;
+    /**
+     * Checks if there's capacity for a specific transport type.
+     * Enforces per-transport limits from config.
+     */
+    hasCapacityForTransport(transportType: TransportType): boolean;
+    close(sessionId: string, reason: SessionCloseReason): Promise<void>;
+    closeAll(): Promise<void>;
+    dispose(): void;
+    forEach(callback: (session: ReadonlySession, sessionId: string) => void): void;
+    filter(predicate: (session: ReadonlySession) => boolean): ReadonlySession[];
+    getByTransportType(type: TransportType): ReadonlySession[];
+    broadcastToolListChanged(): void;
+    broadcastResourceListChanged(): void;
+    broadcastPromptListChanged(): void;
+    broadcastResourceUpdated(uri: string): void;
+    /**
+     * Invokes a lifecycle hook with error logging.
+     * Hook errors are logged as warnings but never propagated.
+     * Async hooks are awaited so shutdown waits for consumer cleanup.
+     */
+    private invokeLifecycleHook;
+}
+//# sourceMappingURL=session-manager.d.ts.map

package/build/server/session/session-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-manager.d.ts","sourceRoot":"","sources":["../../../src/server/session/session-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAGvG,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAQrE;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,6DAA6D;IAC7D,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IAEnC,gEAAgE;IAChE,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IAErC,2DAA2D;IAC3D,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IAErC,6EAA6E;IAC7E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,iEAAiE;IACjE,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAE3C,oDAAoD;IACpD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG;IACxD,oEAAoE;IACpE,QAAQ,CAAC,SAAS,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAC;IAEvD;;;;;;;;OAQG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;CAC3C,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,yDAAyD;IACzD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;IACvF,sDAAsD;IACtD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;CAC3F;AAOD,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,gCAAgC;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,yBAAyB;IACzB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAE7B;;;;;OAKG;IACH,MAAM,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,GAAG,SAAS,CAAC;IAE3D;;;;;;OAMG;IACH,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;IAE5C;;;;OAIG;IACH,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IAEhC;;;;;;OAMG;IACH,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IAElC;;OAEG;IACH,WAAW,IAAI,OAAO,CAAC;IAEvB;;;;;OAKG;IACH,uBAAuB,CAAC,aAAa,EAAE,aAAa,GAAG,OAAO,CAAC;IAE/D;;;;;OAKG;IACH,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpE;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAE1B;;;OAGG;IACH,wBAAwB,IAAI,IAAI,CAAC;IAEjC;;;OAGG;IACH,4BAA4B,IAAI,IAAI,CAAC;IAErC;;;OAGG;IACH,0BAA0B,IAAI,IAAI,CAAC;IAEnC;;;;;OAKG;IACH,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAE5C;;;;OAIG;IACH,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;IAE/E;;;;;OAKG;IACH,MAAM,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,GAAG,eAAe,EAAE,CAAC;IAE5E;;;;OAIG;IACH,kBAAkB,CAAC,IAAI,EAAE,aAAa,GAAG,eAAe,EAAE,CAAC;IAE3D;;OAEG;IACH,OAAO,IAAI,IAAI,CAAC;CACjB;AAqED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,kBAAmB,YAAW,cAAc;IACvD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IACrC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqB;IACjD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAoC;gBAEnD,MAAM,CAAC,EAAE,kBAAkB;IA8BvC,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,IAAI,KAAK,IAAI,YAAY,CAExB;IAMD,MAAM,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,GAAG,SAAS;IAoB1D,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS;IAI3C,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAI/B,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAIjC,WAAW,IAAI,OAAO;IAItB;;;OAGG;IACH,uBAAuB,CAAC,aAAa,EAAE,aAAa,GAAG,OAAO;IA2BxD,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IA4BnE,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IA8B/B,OAAO,IAAI,IAAI;IAUf,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI;IAI9E,MAAM,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,GAAG,eAAe,EAAE;IAI3E,kBAAkB,CAAC,IAAI,EAAE,aAAa,GAAG,eAAe,EAAE;IAQ1D,wBAAwB,IAAI,IAAI;IAKhC,4BAA4B,IAAI,IAAI;IAKpC,0BAA0B,IAAI,IAAI;IAKlC,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAQ3C;;;;OAIG;YACW,mBAAmB;CAQlC"}

package/build/server/session/session-manager.js

@@ -0,0 +1,282 @@
+/**
+ * Session Manager
+ *
+ * Facade over SessionStore (CRUD) and SessionHousekeeper (timers).
+ * Provides the unified SessionManager interface to consumers.
+ *
+ * The SessionManager interface is the public contract — consumers
+ * never interact with Store or Housekeeper directly.
+ *
+ * @module server/session/session-manager
+ */
+import { getFrameworkConfig } from "../../config/index.js";
+import { logger as baseLogger, mcpLogger } from "../../logger/index.js";
+import { getServerMetrics } from "../../telemetry/index.js";
+import { InMemorySessionStore } from "./in-memory-store.js";
+import { SessionHousekeeper } from "./session-housekeeper.js";
+import { SESSION_STATES } from "./session.js";
+// ============================================================================
+// Constants
+// ============================================================================
+const LOG_COMPONENT = "session-manager";
+const LogMessages = {
+    MANAGER_STARTED: "Session manager started (timeout=%dmin, cleanup=%ds, heartbeat=%ds)",
+    SESSION_CREATED: "Session created: id=%s, transport=%s",
+    SESSION_CAPACITY_FULL: "Session capacity reached — rejecting new session (%d/%d)",
+    SESSION_CLOSED: "Session closed: id=%s, reason=%s",
+    CLOSING_ALL: "Closing all sessions (%d active)",
+    MANAGER_DISPOSED: "Session manager disposed",
+    BROADCAST_TOOL_LIST: "Broadcasting tool list changed to %d session(s)",
+    BROADCAST_RESOURCE_LIST: "Broadcasting resource list changed to %d session(s)",
+    BROADCAST_PROMPT_LIST: "Broadcasting prompt list changed to %d session(s)",
+    TRANSPORT_CLOSE_ERROR: "Error closing transport for session %s",
+    SESSION_DISPOSE_ERROR: "Error disposing MCP session %s",
+    LIFECYCLE_HOOK_ERROR: "Lifecycle hook %s failed for session %s: %s",
+    CLOSE_ALL_COMPLETE: "All sessions closed (%d sessions torn down)",
+    SESSION_TRANSPORT_LIMIT: "Session limit reached for transport %s: %d/%d",
+};
+const logger = baseLogger.child({ component: LOG_COMPONENT });
+// ============================================================================
+// Default Configuration
+// ============================================================================
+/**
+ * Default session timing values.
+ *
+ * These are hardcoded defaults — session timing is only configurable
+ * via the programmatic API (`SessionConfigOptions`), not via
+ * environment variables or config files.
+ */
+const SESSION_TIMING_DEFAULTS = {
+    TIMEOUT_MS: 1_800_000, // 30 minutes
+    CLEANUP_INTERVAL_MS: 60_000, // 1 minute
+    KEEP_ALIVE_INTERVAL_MS: 30_000, // 30 seconds
+    MAX_MISSED_HEARTBEATS: 3,
+};
+/**
+ * Creates the default session configuration.
+ *
+ * Timing values use hardcoded defaults (configurable only programmatically).
+ * Session limits are read from `getFrameworkConfig()` which respects all
+ * config sources: Zod defaults → .env → env vars → config file → overrides.
+ */
+function createDefaultConfig() {
+    const config = getFrameworkConfig();
+    return {
+        timeoutMs: SESSION_TIMING_DEFAULTS.TIMEOUT_MS,
+        cleanupIntervalMs: SESSION_TIMING_DEFAULTS.CLEANUP_INTERVAL_MS,
+        keepAliveIntervalMs: SESSION_TIMING_DEFAULTS.KEEP_ALIVE_INTERVAL_MS,
+        maxMissedHeartbeats: SESSION_TIMING_DEFAULTS.MAX_MISSED_HEARTBEATS,
+        maxSessions: config.MCP_MAX_SESSIONS,
+        maxStreamableHttpSessions: config.MCP_MAX_STREAMABLE_HTTP_SESSIONS,
+        maxSseSessions: config.MCP_MAX_SSE_SESSIONS,
+    };
+}
+// ============================================================================
+// Implementation (Facade)
+// ============================================================================
+/**
+ * Facade implementation of SessionManager.
+ *
+ * Delegates to:
+ * - {@link SessionStore} for CRUD operations, queries, and broadcasting
+ * - {@link SessionHousekeeper} for background cleanup and heartbeat monitoring
+ *
+ * @example
+ * ```typescript
+ * // HTTP mode — full background tasks
+ * const manager = new SessionManagerImpl();
+ *
+ * // Stdio mode — no background tasks
+ * const manager = new SessionManagerImpl({
+ *   cleanupIntervalMs: 0,
+ *   keepAliveIntervalMs: 0,
+ *   maxSessions: 1,
+ * });
+ * ```
+ */
+export class SessionManagerImpl {
+    store;
+    housekeeper;
+    config;
+    lifecycle;
+    constructor(config) {
+        const { lifecycle, store, ...configOverrides } = config ?? {};
+        const defaults = createDefaultConfig();
+        this.config = { ...defaults, ...configOverrides };
+        this.lifecycle = lifecycle;
+        this.store = store ?? new InMemorySessionStore(this.config.maxSessions);
+        this.housekeeper = new SessionHousekeeper(this.store, {
+            timeoutMs: this.config.timeoutMs,
+            cleanupIntervalMs: this.config.cleanupIntervalMs,
+            keepAliveIntervalMs: this.config.keepAliveIntervalMs,
+            maxMissedHeartbeats: this.config.maxMissedHeartbeats,
+        }, (sessionId, reason) => this.close(sessionId, reason));
+        logger.trace(LogMessages.MANAGER_STARTED, Math.round(this.config.timeoutMs / 60000), Math.round(this.config.cleanupIntervalMs / 1000), Math.round(this.config.keepAliveIntervalMs / 1000));
+    }
+    // ==========================================================================
+    // Delegated Properties
+    // ==========================================================================
+    get size() {
+        return this.store.size;
+    }
+    get stats() {
+        return this.store.stats;
+    }
+    // ==========================================================================
+    // Delegated CRUD
+    // ==========================================================================
+    create(options) {
+        // Check per-transport limits before delegating to store
+        if (!this.hasCapacityForTransport(options.transportType)) {
+            return undefined;
+        }
+        const session = this.store.create(options);
+        if (session) {
+            mcpLogger.addHandler(session.mcpSession);
+            getServerMetrics().recordSessionChange(session.transport.type, 1);
+            logger.debug(LogMessages.SESSION_CREATED, session.id, session.transport.type);
+            void this.invokeLifecycleHook("onClientConnected", session.id, () => this.lifecycle?.onClientConnected?.(session.id));
+        }
+        else {
+            logger.info(LogMessages.SESSION_CAPACITY_FULL, this.store.size, this.config.maxSessions);
+        }
+        return session;
+    }
+    get(sessionId) {
+        return this.store.get(sessionId);
+    }
+    has(sessionId) {
+        return this.store.has(sessionId);
+    }
+    touch(sessionId) {
+        return this.store.touch(sessionId);
+    }
+    hasCapacity() {
+        return this.store.hasCapacity();
+    }
+    /**
+     * Checks if there's capacity for a specific transport type.
+     * Enforces per-transport limits from config.
+     */
+    hasCapacityForTransport(transportType) {
+        if (transportType === "http" || transportType === "https") {
+            const count = this.store.getByTransportType("http").length + this.store.getByTransportType("https").length;
+            if (count >= this.config.maxStreamableHttpSessions) {
+                logger.warn(LogMessages.SESSION_TRANSPORT_LIMIT, "streamable-http", count, this.config.maxStreamableHttpSessions);
+                return false;
+            }
+        }
+        else if (transportType === "sse") {
+            const count = this.store.getByTransportType("sse").length;
+            if (count >= this.config.maxSseSessions) {
+                logger.warn(LogMessages.SESSION_TRANSPORT_LIMIT, "sse", count, this.config.maxSseSessions);
+                return false;
+            }
+        }
+        // stdio has no per-transport limit
+        return true;
+    }
+    // ==========================================================================
+    // Lifecycle (Manager owns I/O teardown)
+    // ==========================================================================
+    async close(sessionId, reason) {
+        const session = this.store.remove(sessionId, reason);
+        if (!session) {
+            return;
+        }
+        getServerMetrics().recordSessionChange(session.transport.type, -1);
+        mcpLogger.removeHandler(session.mcpSession);
+        logger.debug(LogMessages.SESSION_CLOSED, sessionId, reason);
+        try {
+            await session.transport.instance.close();
+        }
+        catch (error) {
+            logger.warn(LogMessages.TRANSPORT_CLOSE_ERROR, sessionId, { error });
+        }
+        try {
+            await session.mcpSession.dispose();
+        }
+        catch (error) {
+            logger.warn(LogMessages.SESSION_DISPOSE_ERROR, sessionId, { error });
+        }
+        session.state = SESSION_STATES.CLOSED;
+        await this.invokeLifecycleHook("onClientDisconnected", sessionId, () => this.lifecycle?.onClientDisconnected?.(sessionId));
+    }
+    async closeAll() {
+        const sessions = this.store.removeAll();
+        logger.info(LogMessages.CLOSING_ALL, sessions.length);
+        const teardownPromises = sessions.map(async (session) => {
+            getServerMetrics().recordSessionChange(session.transport.type, -1);
+            mcpLogger.removeHandler(session.mcpSession);
+            try {
+                await session.transport.instance.close();
+            }
+            catch (error) {
+                logger.warn(LogMessages.TRANSPORT_CLOSE_ERROR, session.id, { error });
+            }
+            try {
+                await session.mcpSession.dispose();
+            }
+            catch (error) {
+                logger.warn(LogMessages.SESSION_DISPOSE_ERROR, session.id, { error });
+            }
+            session.state = SESSION_STATES.CLOSED;
+            await this.invokeLifecycleHook("onClientDisconnected", session.id, () => this.lifecycle?.onClientDisconnected?.(session.id));
+        });
+        await Promise.allSettled(teardownPromises);
+        logger.debug(LogMessages.CLOSE_ALL_COMPLETE, sessions.length);
+    }
+    dispose() {
+        this.housekeeper.dispose();
+        this.store.markShuttingDown();
+        logger.debug(LogMessages.MANAGER_DISPOSED);
+    }
+    // ==========================================================================
+    // Delegated Queries
+    // ==========================================================================
+    forEach(callback) {
+        this.store.forEach(callback);
+    }
+    filter(predicate) {
+        return this.store.filter(predicate);
+    }
+    getByTransportType(type) {
+        return this.store.getByTransportType(type);
+    }
+    // ==========================================================================
+    // Delegated Broadcasting
+    // ==========================================================================
+    broadcastToolListChanged() {
+        logger.trace(LogMessages.BROADCAST_TOOL_LIST, this.store.size);
+        this.store.broadcastToolListChanged();
+    }
+    broadcastResourceListChanged() {
+        logger.trace(LogMessages.BROADCAST_RESOURCE_LIST, this.store.size);
+        this.store.broadcastResourceListChanged();
+    }
+    broadcastPromptListChanged() {
+        logger.trace(LogMessages.BROADCAST_PROMPT_LIST, this.store.size);
+        this.store.broadcastPromptListChanged();
+    }
+    broadcastResourceUpdated(uri) {
+        this.store.broadcastResourceUpdated(uri);
+    }
+    // ==========================================================================
+    // Internal Helpers
+    // ==========================================================================
+    /**
+     * Invokes a lifecycle hook with error logging.
+     * Hook errors are logged as warnings but never propagated.
+     * Async hooks are awaited so shutdown waits for consumer cleanup.
+     */
+    async invokeLifecycleHook(name, sessionId, fn) {
+        try {
+            await fn();
+        }
+        catch (error) {
+            const msg = error instanceof Error ? error.message : String(error);
+            logger.warn(LogMessages.LIFECYCLE_HOOK_ERROR, name, sessionId, msg);
+        }
+    }
+}
+//# sourceMappingURL=session-manager.js.map

package/build/server/session/session-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-manager.js","sourceRoot":"","sources":["../../../src/server/session/session-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,MAAM,IAAI,UAAU,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAIxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAqM9C,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAExC,MAAM,WAAW,GAAG;IAClB,eAAe,EAAE,qEAAqE;IACtF,eAAe,EAAE,sCAAsC;IACvD,qBAAqB,EAAE,0DAA0D;IACjF,cAAc,EAAE,kCAAkC;IAClD,WAAW,EAAE,kCAAkC;IAC/C,gBAAgB,EAAE,0BAA0B;IAC5C,mBAAmB,EAAE,iDAAiD;IACtE,uBAAuB,EAAE,qDAAqD;IAC9E,qBAAqB,EAAE,mDAAmD;IAC1E,qBAAqB,EAAE,wCAAwC;IAC/D,qBAAqB,EAAE,gCAAgC;IACvD,oBAAoB,EAAE,6CAA6C;IACnE,kBAAkB,EAAE,6CAA6C;IACjE,uBAAuB,EAAE,+CAA+C;CAChE,CAAC;AAEX,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;AAE9D,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,uBAAuB,GAAG;IAC9B,UAAU,EAAE,SAAS,EAAE,aAAa;IACpC,mBAAmB,EAAE,MAAM,EAAE,WAAW;IACxC,sBAAsB,EAAE,MAAM,EAAE,aAAa;IAC7C,qBAAqB,EAAE,CAAC;CAChB,CAAC;AAEX;;;;;;GAMG;AACH,SAAS,mBAAmB;IAC1B,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IACpC,OAAO;QACL,SAAS,EAAE,uBAAuB,CAAC,UAAU;QAC7C,iBAAiB,EAAE,uBAAuB,CAAC,mBAAmB;QAC9D,mBAAmB,EAAE,uBAAuB,CAAC,sBAAsB;QACnE,mBAAmB,EAAE,uBAAuB,CAAC,qBAAqB;QAClE,WAAW,EAAE,MAAM,CAAC,gBAAgB;QACpC,yBAAyB,EAAE,MAAM,CAAC,gCAAgC;QAClE,cAAc,EAAE,MAAM,CAAC,oBAAoB;KAC5C,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,kBAAkB;IACZ,KAAK,CAAe;IACpB,WAAW,CAAqB;IAChC,MAAM,CAAgB;IACtB,SAAS,CAAqC;IAE/D,YAAY,MAA2B;QACrC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,eAAe,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QAC9D,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,eAAe,EAAE,CAAC;QAClD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAE3B,IAAI,CAAC,KAAK,GAAG,KAAK,IAAI,IAAI,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACxE,IAAI,CAAC,WAAW,GAAG,IAAI,kBAAkB,CACvC,IAAI,CAAC,KAAK,EACV;YACE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAChC,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;YAChD,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB;YACpD,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB;SACrD,EACD,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CACrD,CAAC;QAEF,MAAM,CAAC,KAAK,CACV,WAAW,CAAC,eAAe,EAC3B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,EACzC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC,EAChD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,GAAG,IAAI,CAAC,CACnD,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,uBAAuB;IACvB,6EAA6E;IAE7E,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;IAC1B,CAAC;IAED,6EAA6E;IAC7E,iBAAiB;IACjB,6EAA6E;IAE7E,MAAM,CAAC,OAA6B;QAClC,wDAAwD;QACxD,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YACzD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,OAAO,EAAE,CAAC;YACZ,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACzC,gBAAgB,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAClE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,eAAe,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC9E,KAAK,IAAI,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,CAClE,IAAI,CAAC,SAAS,EAAE,iBAAiB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAChD,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,qBAAqB,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3F,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,GAAG,CAAC,SAAiB;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAED,GAAG,CAAC,SAAiB;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,SAAiB;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,uBAAuB,CAAC,aAA4B;QAClD,IAAI,aAAa,KAAK,MAAM,IAAI,aAAa,KAAK,OAAO,EAAE,CAAC;YAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;YAC3G,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,yBAAyB,EAAE,CAAC;gBACnD,MAAM,CAAC,IAAI,CACT,WAAW,CAAC,uBAAuB,EACnC,iBAAiB,EACjB,KAAK,EACL,IAAI,CAAC,MAAM,CAAC,yBAAyB,CACtC,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;aAAM,IAAI,aAAa,KAAK,KAAK,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;YAC1D,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,uBAAuB,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBAC3F,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,mCAAmC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6EAA6E;IAC7E,wCAAwC;IACxC,6EAA6E;IAE7E,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,MAA0B;QACvD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,gBAAgB,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACnE,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAE5D,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,qBAAqB,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,qBAAqB,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,CAAC,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC;QACtC,MAAM,IAAI,CAAC,mBAAmB,CAAC,sBAAsB,EAAE,SAAS,EAAE,GAAG,EAAE,CACrE,IAAI,CAAC,SAAS,EAAE,oBAAoB,EAAE,CAAC,SAAS,CAAC,CAClD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAEtD,MAAM,gBAAgB,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACtD,gBAAgB,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACnE,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAE5C,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YAC3C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,qBAAqB,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACrC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,qBAAqB,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACxE,CAAC;YAED,OAAO,CAAC,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC;YACtC,MAAM,IAAI,CAAC,mBAAmB,CAAC,sBAAsB,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,CACtE,IAAI,CAAC,SAAS,EAAE,oBAAoB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CACnD,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChE,CAAC;IAED,OAAO;QACL,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAC7C,CAAC;IAED,6EAA6E;IAC7E,oBAAoB;IACpB,6EAA6E;IAE7E,OAAO,CAAC,QAA+D;QACrE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,CAAC,SAAgD;QACrD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED,kBAAkB,CAAC,IAAmB;QACpC,OAAO,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,6EAA6E;IAC7E,yBAAyB;IACzB,6EAA6E;IAE7E,wBAAwB;QACtB,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,mBAAmB,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK,CAAC,wBAAwB,EAAE,CAAC;IACxC,CAAC;IAED,4BAA4B;QAC1B,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,uBAAuB,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnE,IAAI,CAAC,KAAK,CAAC,4BAA4B,EAAE,CAAC;IAC5C,CAAC;IAED,0BAA0B;QACxB,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,qBAAqB,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK,CAAC,0BAA0B,EAAE,CAAC;IAC1C,CAAC;IAED,wBAAwB,CAAC,GAAW;QAClC,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC;IAED,6EAA6E;IAC7E,mBAAmB;IACnB,6EAA6E;IAE7E;;;;OAIG;IACK,KAAK,CAAC,mBAAmB,CAAC,IAAY,EAAE,SAAiB,EAAE,EAA8B;QAC/F,IAAI,CAAC;YACH,MAAM,EAAE,EAAE,CAAC;QACb,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,oBAAoB,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;CACF"}

package/build/server/session/session-store.d.ts

@@ -0,0 +1,95 @@
+/**
+ * Session Store
+ *
+ * Interface definition for session CRUD storage and lifecycle management.
+ *
+ * Contains NO implementation — the built-in in-memory implementation is in
+ * `in-memory-store.ts`. Consumers can implement this interface with Redis,
+ * PostgreSQL, or another shared backend for horizontal scaling.
+ *
+ * @module server/session/session-store
+ */
+import type { TransportType } from "../transport/transport-context.js";
+import type { Session, ReadonlySession, SessionCloseReason, CreateSessionOptions } from "./session.js";
+/**
+ * Statistics about session store state.
+ */
+export interface SessionStats {
+    /** Currently active sessions */
+    readonly activeCount: number;
+    /** Maximum allowed sessions */
+    readonly maxSessions: number;
+    /** Total sessions created since startup */
+    readonly totalCreated: number;
+    /** Peak concurrent sessions */
+    readonly peakConcurrent: number;
+    /** Sessions closed due to timeout */
+    readonly timeoutCount: number;
+    /** Sessions closed due to heartbeat failure */
+    readonly heartbeatFailureCount: number;
+    /** Breakdown by transport type */
+    readonly byTransportType: Readonly<Record<TransportType, number>>;
+}
+/**
+ * Interface for session CRUD storage and lifecycle management.
+ *
+ * The built-in {@link InMemorySessionStore} uses a `Map` and is
+ * suitable for single-instance deployments.
+ *
+ * For horizontal scaling across multiple server instances, implement
+ * this interface with a shared backend (e.g., Redis, PostgreSQL).
+ *
+ * @example Custom implementation
+ * ```typescript
+ * class RedisSessionStore implements SessionStore {
+ *   // ... implement all methods with Redis as the backend
+ * }
+ *
+ * const manager = new SessionManagerImpl({
+ *   store: new RedisSessionStore(redisClient),
+ * });
+ * ```
+ */
+export interface SessionStore {
+    /** Number of active sessions */
+    readonly size: number;
+    /** Current statistics */
+    readonly stats: SessionStats;
+    /** Creates and registers a new session */
+    create(options: CreateSessionOptions): Session | undefined;
+    /** Gets an active session by ID (does NOT update activity time) */
+    get(sessionId: string): Session | undefined;
+    /** Checks if a session exists and is active */
+    has(sessionId: string): boolean;
+    /** Updates the last activity time for a session */
+    touch(sessionId: string): boolean;
+    /** Checks if there's capacity for new sessions */
+    hasCapacity(): boolean;
+    /** Removes a session from the store and updates statistics */
+    remove(sessionId: string, reason: SessionCloseReason): Session | undefined;
+    /** Removes all sessions during shutdown */
+    removeAll(): Session[];
+    /** Marks the store as shutting down (rejects new sessions) */
+    markShuttingDown(): void;
+    /** Iterates over all active sessions */
+    forEach(callback: (session: ReadonlySession, sessionId: string) => void): void;
+    /** Finds sessions matching a predicate */
+    filter(predicate: (session: ReadonlySession) => boolean): ReadonlySession[];
+    /** Gets all sessions of a specific transport type */
+    getByTransportType(type: TransportType): ReadonlySession[];
+    /** Broadcasts tool list changed notification to all active sessions */
+    broadcastToolListChanged(): void;
+    /** Broadcasts resource list changed notification to all active sessions */
+    broadcastResourceListChanged(): void;
+    /** Broadcasts prompt list changed notification to all active sessions */
+    broadcastPromptListChanged(): void;
+    /**
+     * Sends a resource updated notification to sessions subscribed to the given URI.
+     *
+     * Unlike list-changed broadcasts (sent to all sessions), this only notifies
+     * sessions that have subscribed to the specific resource URI via
+     * `resources/subscribe`.
+     */
+    broadcastResourceUpdated(uri: string): void;
+}
+//# sourceMappingURL=session-store.d.ts.map

package/build/server/session/session-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store.d.ts","sourceRoot":"","sources":["../../../src/server/session/session-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAMvG;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,gCAAgC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,+BAA+B;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,2CAA2C;IAC3C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAE9B,+BAA+B;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAEhC,qCAAqC;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAE9B,+CAA+C;IAC/C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IAEvC,kCAAkC;IAClC,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;CACnE;AAMD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,YAAY;IAC3B,gCAAgC;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,yBAAyB;IACzB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAE7B,0CAA0C;IAC1C,MAAM,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,GAAG,SAAS,CAAC;IAE3D,mEAAmE;IACnE,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;IAE5C,+CAA+C;IAC/C,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IAEhC,mDAAmD;IACnD,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IAElC,kDAAkD;IAClD,WAAW,IAAI,OAAO,CAAC;IAEvB,8DAA8D;IAC9D,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,GAAG,SAAS,CAAC;IAE3E,2CAA2C;IAC3C,SAAS,IAAI,OAAO,EAAE,CAAC;IAEvB,8DAA8D;IAC9D,gBAAgB,IAAI,IAAI,CAAC;IAEzB,wCAAwC;IACxC,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;IAE/E,0CAA0C;IAC1C,MAAM,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,GAAG,eAAe,EAAE,CAAC;IAE5E,qDAAqD;IACrD,kBAAkB,CAAC,IAAI,EAAE,aAAa,GAAG,eAAe,EAAE,CAAC;IAE3D,uEAAuE;IACvE,wBAAwB,IAAI,IAAI,CAAC;IAEjC,2EAA2E;IAC3E,4BAA4B,IAAI,IAAI,CAAC;IAErC,yEAAyE;IACzE,0BAA0B,IAAI,IAAI,CAAC;IAEnC;;;;;;OAMG;IACH,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7C"}

package/build/server/session/session-store.js

@@ -0,0 +1,13 @@
+/**
+ * Session Store
+ *
+ * Interface definition for session CRUD storage and lifecycle management.
+ *
+ * Contains NO implementation — the built-in in-memory implementation is in
+ * `in-memory-store.ts`. Consumers can implement this interface with Redis,
+ * PostgreSQL, or another shared backend for horizontal scaling.
+ *
+ * @module server/session/session-store
+ */
+export {};
+//# sourceMappingURL=session-store.js.map

package/build/server/session/session-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store.js","sourceRoot":"","sources":["../../../src/server/session/session-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}