mcp-server-framework 1.0.0

package/build/server/session/session.d.ts

@@ -0,0 +1,132 @@
+/**
+ * Session Types
+ *
+ * The Session is the single source of truth for a connected MCP client.
+ * It composes transport, auth, and MCP session contexts into one unified entity.
+ *
+ * @module server/session/session
+ */
+import type { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
+import type { McpSession } from "./mcp-session.js";
+import type { TransportType, TransportContext } from "../transport/transport-context.js";
+import { type AuthContext } from "../auth/index.js";
+/**
+ * Session lifecycle state constants.
+ *
+ * Single source of truth — use these instead of raw string literals.
+ */
+export declare const SESSION_STATES: {
+    readonly CREATED: "created";
+    readonly ACTIVE: "active";
+    readonly CLOSING: "closing";
+    readonly CLOSED: "closed";
+};
+/**
+ * Session lifecycle states.
+ */
+export type SessionState = (typeof SESSION_STATES)[keyof typeof SESSION_STATES];
+/**
+ * Reason for session closure.
+ *
+ * Single source of truth — use `SESSION_CLOSE_REASONS.*` instead of raw string literals.
+ */
+export declare const SESSION_CLOSE_REASONS: {
+    readonly CLIENT_DISCONNECT: "client_disconnect";
+    readonly TIMEOUT: "timeout";
+    readonly HEARTBEAT_FAILURE: "heartbeat_failure";
+    readonly ERROR: "error";
+    readonly SHUTDOWN: "shutdown";
+    readonly REPLACED: "replaced";
+};
+/**
+ * Session close reason type (derived from const object).
+ */
+export type SessionCloseReason = (typeof SESSION_CLOSE_REASONS)[keyof typeof SESSION_CLOSE_REASONS];
+/**
+ * Information about the connected client.
+ *
+ * Captured from MCP initialize request and HTTP headers.
+ */
+export interface ClientInfo {
+    /** Client name from MCP initialization */
+    name?: string | undefined;
+    /** Client version from MCP initialization */
+    version?: string | undefined;
+    /** Remote IP address (for HTTP connections) */
+    remoteAddress?: string | undefined;
+    /** User agent header (for HTTP connections) */
+    userAgent?: string | undefined;
+}
+/**
+ * Session lifecycle and timing metadata.
+ *
+ * Grouped separately from core session identity for clean serialization
+ * and future Session Store support (Phase 4.3 — Redis-ready).
+ */
+export interface SessionMetadata {
+    /** When the session was created */
+    readonly createdAt: Date;
+    /** Last activity timestamp (updated on touch) */
+    lastActivityAt: Date;
+}
+/**
+ * A unified session representing a single connected MCP client.
+ *
+ * The Session is the **source of truth** for everything related to a client connection.
+ * It directly owns the MCP session (SDK bridge), transport context, and auth context.
+ *
+ * ## Composition
+ * ```
+ * Session
+ * ├── id            (unique identifier)
+ * ├── state         (lifecycle: created → active → closing → closed)
+ * ├── transport     → TransportContext (type, instance, heartbeat)
+ * ├── mcpSession    → McpSession (SDK server, request manager)
+ * ├── auth          → AuthContext (SDK AuthInfo + framework permissions)
+ * ├── clientInfo    → ClientInfo (name, version, remoteAddress)
+ * └── metadata      → SessionMetadata (createdAt, lastActivityAt)
+ * ```
+ */
+export interface Session {
+    /** Unique session identifier (from transport or generated) */
+    readonly id: string;
+    /** Current lifecycle state */
+    state: SessionState;
+    /** Transport-layer context */
+    readonly transport: TransportContext;
+    /** MCP session — SDK server wrapper with per-client request manager */
+    readonly mcpSession: McpSession;
+    /** Authentication context (immutable after creation) */
+    readonly auth: AuthContext;
+    /** Client information (populated after initialize) */
+    clientInfo: ClientInfo;
+    /** Session timing and lifecycle metadata */
+    readonly metadata: SessionMetadata;
+}
+/**
+ * Read-only view of a Session for external consumers.
+ * Used in forEach callbacks and other external-facing APIs.
+ */
+export type ReadonlySession = Readonly<Session>;
+/**
+ * Options for creating a new session.
+ */
+export interface CreateSessionOptions {
+    /** Session ID (if undefined, will be generated) */
+    id?: string;
+    /** Transport type */
+    transportType: TransportType;
+    /** MCP SDK transport instance */
+    transport: Transport;
+    /** Managed MCP session instance */
+    mcpSession: McpSession;
+    /** Initial auth context (defaults to anonymous) */
+    auth?: AuthContext;
+    /** Initial client info */
+    clientInfo?: Partial<ClientInfo>;
+}
+/**
+ * Factory function to create a composed session.
+ */
+export declare function createSession(options: CreateSessionOptions): Session;
+//# sourceMappingURL=session.d.ts.map

package/build/server/session/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../src/server/session/session.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAC;AAC/E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAEzF,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAMpE;;;;GAIG;AACH,eAAO,MAAM,cAAc;;;;;CAKjB,CAAC;AAEX;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,OAAO,cAAc,CAAC,CAAC;AAEhF;;;;GAIG;AACH,eAAO,MAAM,qBAAqB;;;;;;;CAOxB,CAAC;AAEX;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,OAAO,qBAAqB,CAAC,CAAC;AAMpG;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,0CAA0C;IAC1C,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE1B,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE7B,+CAA+C;IAC/C,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEnC,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAMD;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,mCAAmC;IACnC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IAEzB,iDAAiD;IACjD,cAAc,EAAE,IAAI,CAAC;CACtB;AAMD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,OAAO;IACtB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB,8BAA8B;IAC9B,KAAK,EAAE,YAAY,CAAC;IAEpB,8BAA8B;IAC9B,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IAErC,uEAAuE;IACvE,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAEhC,wDAAwD;IACxD,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAE3B,sDAAsD;IACtD,UAAU,EAAE,UAAU,CAAC;IAEvB,4CAA4C;IAC5C,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;CACpC;AAED;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;AAMhD;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,mDAAmD;IACnD,EAAE,CAAC,EAAE,MAAM,CAAC;IAEZ,qBAAqB;IACrB,aAAa,EAAE,aAAa,CAAC;IAE7B,iCAAiC;IACjC,SAAS,EAAE,SAAS,CAAC;IAErB,mCAAmC;IACnC,UAAU,EAAE,UAAU,CAAC;IAEvB,mDAAmD;IACnD,IAAI,CAAC,EAAE,WAAW,CAAC;IAEnB,0BAA0B;IAC1B,UAAU,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;CAClC;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAoBpE"}

package/build/server/session/session.js

@@ -0,0 +1,61 @@
+/**
+ * Session Types
+ *
+ * The Session is the single source of truth for a connected MCP client.
+ * It composes transport, auth, and MCP session contexts into one unified entity.
+ *
+ * @module server/session/session
+ */
+import { createTransportContext } from "../transport/transport-context.js";
+import { ANONYMOUS_AUTH } from "../auth/index.js";
+// ============================================================================
+// Session Lifecycle
+// ============================================================================
+/**
+ * Session lifecycle state constants.
+ *
+ * Single source of truth — use these instead of raw string literals.
+ */
+export const SESSION_STATES = {
+    CREATED: "created",
+    ACTIVE: "active",
+    CLOSING: "closing",
+    CLOSED: "closed",
+};
+/**
+ * Reason for session closure.
+ *
+ * Single source of truth — use `SESSION_CLOSE_REASONS.*` instead of raw string literals.
+ */
+export const SESSION_CLOSE_REASONS = {
+    CLIENT_DISCONNECT: "client_disconnect",
+    TIMEOUT: "timeout",
+    HEARTBEAT_FAILURE: "heartbeat_failure",
+    ERROR: "error",
+    SHUTDOWN: "shutdown",
+    REPLACED: "replaced",
+};
+/**
+ * Factory function to create a composed session.
+ */
+export function createSession(options) {
+    const now = new Date();
+    return {
+        id: options.id ?? crypto.randomUUID(),
+        state: SESSION_STATES.CREATED,
+        transport: createTransportContext(options.transportType, options.transport),
+        mcpSession: options.mcpSession,
+        auth: options.auth ?? ANONYMOUS_AUTH,
+        clientInfo: {
+            name: options.clientInfo?.name,
+            version: options.clientInfo?.version,
+            remoteAddress: options.clientInfo?.remoteAddress,
+            userAgent: options.clientInfo?.userAgent,
+        },
+        metadata: {
+            createdAt: now,
+            lastActivityAt: now,
+        },
+    };
+}
+//# sourceMappingURL=session.js.map

package/build/server/session/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../../src/server/session/session.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAoB,MAAM,kBAAkB,CAAC;AAEpE,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;CACR,CAAC;AAOX;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,iBAAiB,EAAE,mBAAmB;IACtC,OAAO,EAAE,SAAS;IAClB,iBAAiB,EAAE,mBAAmB;IACtC,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;CACZ,CAAC;AA8HX;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAA6B;IACzD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,MAAM,CAAC,UAAU,EAAE;QACrC,KAAK,EAAE,cAAc,CAAC,OAAO;QAC7B,SAAS,EAAE,sBAAsB,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC;QAC3E,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,cAAc;QACpC,UAAU,EAAE;YACV,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI;YAC9B,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO;YACpC,aAAa,EAAE,OAAO,CAAC,UAAU,EAAE,aAAa;YAChD,SAAS,EAAE,OAAO,CAAC,UAAU,EAAE,SAAS;SACzC;QACD,QAAQ,EAAE;YACR,SAAS,EAAE,GAAG;YACd,cAAc,EAAE,GAAG;SACpB;KACF,CAAC;AACJ,CAAC"}

package/build/server/transport/constants.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Transport Constants
+ *
+ * Central place for all transport-layer constants:
+ * log component names, route paths, MCP headers, query parameters, and SSE events.
+ *
+ * Eliminates magic strings across the transport module.
+ *
+ * @module server/transport/constants
+ */
+/**
+ * Logger component names for transport layer.
+ * Used for consistent log categorization.
+ */
+export declare const TRANSPORT_LOG_COMPONENTS: {
+    /** Main HTTP server */
+    readonly HTTP_SERVER: "HttpServer";
+    /** Streamable HTTP transport */
+    readonly STREAMABLE_HTTP: "StreamableHttp";
+    /** Legacy SSE transport */
+    readonly SSE: "Sse";
+    /** Rate limiting @public — available for consumer transport implementations */
+    readonly RATE_LIMIT: "RateLimit";
+    /** DNS rebinding protection @public — available for consumer transport implementations */
+    readonly DNS_PROTECTION: "DnsProtection";
+    /** Session management @public — available for consumer transport implementations */
+    readonly SESSION: "Session";
+    /** Health endpoints @public — available for consumer transport implementations */
+    readonly HEALTH: "Health";
+    /** Security (TLS, credentials) */
+    readonly SECURITY: "Security";
+    /** TLS certificate operations @public — available for consumer transport implementations */
+    readonly TLS: "Tls";
+};
+/**
+ * All route paths used in the transport layer.
+ */
+export declare const TRANSPORT_ROUTES: {
+    /** Primary MCP endpoint for Streamable HTTP transport */
+    readonly MCP: "/mcp";
+    /** SSE connection endpoint (legacy transport, deprecated 2024-11-05) */
+    readonly SSE: "/sse";
+    /** SSE message endpoint for connections via /sse */
+    readonly SSE_MESSAGE: "/sse/message";
+    /** SSE message endpoint for connections via /mcp */
+    readonly MCP_MESSAGE: "/mcp/message";
+    /** Health check endpoint */
+    readonly HEALTH: "/health";
+    /** Readiness check endpoint */
+    readonly READY: "/ready";
+    /** Prometheus metrics endpoint (available when OTEL is enabled) */
+    readonly METRICS: "/metrics";
+};
+/**
+ * HTTP header names defined by the MCP specification.
+ */
+export declare const MCP_HEADERS: {
+    /** Session identifier header (MCP 2025-03-26) */
+    readonly SESSION_ID: "mcp-session-id";
+    /** Protocol version header (MCP 2025-03-26) */
+    readonly PROTOCOL_VERSION: "mcp-protocol-version";
+};
+/**
+ * Query parameter name accepted as session ID fallback.
+ *
+ * For clients that cannot set custom HTTP headers (e.g. browser EventSource),
+ * the session ID can be provided via query parameter.
+ *
+ * Uses a single canonical name to minimize attack surface (DD-023).
+ */
+export declare const SESSION_ID_QUERY_PARAMS: readonly ["sessionId"];
+/**
+ * Server-Sent Event names used by the SSE transport.
+ */
+export declare const SSE_EVENTS: {
+    /** Connection handshake event (sends message endpoint URL) */
+    readonly ENDPOINT: "endpoint";
+    /** JSON-RPC message event */
+    readonly MESSAGE: "message";
+};
+/**
+ * Number of characters to display for shortened session IDs in logs.
+ */
+export declare const SESSION_ID_DISPLAY_LENGTH = 8;
+//# sourceMappingURL=constants.d.ts.map

package/build/server/transport/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/server/transport/constants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH;;;GAGG;AACH,eAAO,MAAM,wBAAwB;IACnC,uBAAuB;;IAEvB,gCAAgC;;IAEhC,2BAA2B;;IAE3B,+EAA+E;;IAE/E,0FAA0F;;IAE1F,oFAAoF;;IAEpF,kFAAkF;;IAElF,kCAAkC;;IAElC,4FAA4F;;CAEpF,CAAC;AAMX;;GAEG;AACH,eAAO,MAAM,gBAAgB;IAC3B,yDAAyD;;IAEzD,wEAAwE;;IAExE,oDAAoD;;IAEpD,oDAAoD;;IAEpD,4BAA4B;;IAE5B,+BAA+B;;IAE/B,mEAAmE;;CAE3D,CAAC;AAMX;;GAEG;AACH,eAAO,MAAM,WAAW;IACtB,iDAAiD;;IAEjD,+CAA+C;;CAEvC,CAAC;AAMX;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,wBAAyB,CAAC;AAM9D;;GAEG;AACH,eAAO,MAAM,UAAU;IACrB,8DAA8D;;IAE9D,6BAA6B;;CAErB,CAAC;AAMX;;GAEG;AACH,eAAO,MAAM,yBAAyB,IAAI,CAAC"}

package/build/server/transport/constants.js

@@ -0,0 +1,103 @@
+/**
+ * Transport Constants
+ *
+ * Central place for all transport-layer constants:
+ * log component names, route paths, MCP headers, query parameters, and SSE events.
+ *
+ * Eliminates magic strings across the transport module.
+ *
+ * @module server/transport/constants
+ */
+// ============================================================================
+// Log Components
+// ============================================================================
+/**
+ * Logger component names for transport layer.
+ * Used for consistent log categorization.
+ */
+export const TRANSPORT_LOG_COMPONENTS = {
+    /** Main HTTP server */
+    HTTP_SERVER: "HttpServer",
+    /** Streamable HTTP transport */
+    STREAMABLE_HTTP: "StreamableHttp",
+    /** Legacy SSE transport */
+    SSE: "Sse",
+    /** Rate limiting @public — available for consumer transport implementations */
+    RATE_LIMIT: "RateLimit",
+    /** DNS rebinding protection @public — available for consumer transport implementations */
+    DNS_PROTECTION: "DnsProtection",
+    /** Session management @public — available for consumer transport implementations */
+    SESSION: "Session",
+    /** Health endpoints @public — available for consumer transport implementations */
+    HEALTH: "Health",
+    /** Security (TLS, credentials) */
+    SECURITY: "Security",
+    /** TLS certificate operations @public — available for consumer transport implementations */
+    TLS: "Tls",
+};
+// ============================================================================
+// Route Paths
+// ============================================================================
+/**
+ * All route paths used in the transport layer.
+ */
+export const TRANSPORT_ROUTES = {
+    /** Primary MCP endpoint for Streamable HTTP transport */
+    MCP: "/mcp",
+    /** SSE connection endpoint (legacy transport, deprecated 2024-11-05) */
+    SSE: "/sse",
+    /** SSE message endpoint for connections via /sse */
+    SSE_MESSAGE: "/sse/message",
+    /** SSE message endpoint for connections via /mcp */
+    MCP_MESSAGE: "/mcp/message",
+    /** Health check endpoint */
+    HEALTH: "/health",
+    /** Readiness check endpoint */
+    READY: "/ready",
+    /** Prometheus metrics endpoint (available when OTEL is enabled) */
+    METRICS: "/metrics",
+};
+// ============================================================================
+// MCP Headers
+// ============================================================================
+/**
+ * HTTP header names defined by the MCP specification.
+ */
+export const MCP_HEADERS = {
+    /** Session identifier header (MCP 2025-03-26) */
+    SESSION_ID: "mcp-session-id",
+    /** Protocol version header (MCP 2025-03-26) */
+    PROTOCOL_VERSION: "mcp-protocol-version",
+};
+// ============================================================================
+// Query Parameters
+// ============================================================================
+/**
+ * Query parameter name accepted as session ID fallback.
+ *
+ * For clients that cannot set custom HTTP headers (e.g. browser EventSource),
+ * the session ID can be provided via query parameter.
+ *
+ * Uses a single canonical name to minimize attack surface (DD-023).
+ */
+export const SESSION_ID_QUERY_PARAMS = ["sessionId"];
+// ============================================================================
+// SSE Events
+// ============================================================================
+/**
+ * Server-Sent Event names used by the SSE transport.
+ */
+export const SSE_EVENTS = {
+    /** Connection handshake event (sends message endpoint URL) */
+    ENDPOINT: "endpoint",
+    /** JSON-RPC message event */
+    MESSAGE: "message",
+};
+// ============================================================================
+// Session Display
+// ============================================================================
+/**
+ * Number of characters to display for shortened session IDs in logs.
+ */
+export const SESSION_ID_DISPLAY_LENGTH = 8;
+//# sourceMappingURL=constants.js.map

package/build/server/transport/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/server/transport/constants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,uBAAuB;IACvB,WAAW,EAAE,YAAY;IACzB,gCAAgC;IAChC,eAAe,EAAE,gBAAgB;IACjC,2BAA2B;IAC3B,GAAG,EAAE,KAAK;IACV,+EAA+E;IAC/E,UAAU,EAAE,WAAW;IACvB,0FAA0F;IAC1F,cAAc,EAAE,eAAe;IAC/B,oFAAoF;IACpF,OAAO,EAAE,SAAS;IAClB,kFAAkF;IAClF,MAAM,EAAE,QAAQ;IAChB,kCAAkC;IAClC,QAAQ,EAAE,UAAU;IACpB,4FAA4F;IAC5F,GAAG,EAAE,KAAK;CACF,CAAC;AAEX,+EAA+E;AAC/E,cAAc;AACd,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,yDAAyD;IACzD,GAAG,EAAE,MAAM;IACX,wEAAwE;IACxE,GAAG,EAAE,MAAM;IACX,oDAAoD;IACpD,WAAW,EAAE,cAAc;IAC3B,oDAAoD;IACpD,WAAW,EAAE,cAAc;IAC3B,4BAA4B;IAC5B,MAAM,EAAE,SAAS;IACjB,+BAA+B;IAC/B,KAAK,EAAE,QAAQ;IACf,mEAAmE;IACnE,OAAO,EAAE,UAAU;CACX,CAAC;AAEX,+EAA+E;AAC/E,cAAc;AACd,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,iDAAiD;IACjD,UAAU,EAAE,gBAAgB;IAC5B,+CAA+C;IAC/C,gBAAgB,EAAE,sBAAsB;CAChC,CAAC;AAEX,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,WAAW,CAAU,CAAC;AAE9D,+EAA+E;AAC/E,aAAa;AACb,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,8DAA8D;IAC9D,QAAQ,EAAE,UAAU;IACpB,6BAA6B;IAC7B,OAAO,EAAE,SAAS;CACV,CAAC;AAEX,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC"}

package/build/server/transport/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Transport Layer — Public API
+ *
+ * MCP protocol transports: Stdio and Streamable HTTP (2025-03-26),
+ * with optional SSE backwards compatibility (2024-11-05).
+ *
+ * HTTP infrastructure (Express app, HTTP/S server) is in server/http/.
+ * Express routers are in server/routes/.
+ * Middleware is in server/middleware/.
+ *
+ * @see https://modelcontextprotocol.io/specification/2025-03-26/basic/transports
+ *
+ * @module server/transport
+ */
+export type { SessionFactory, TransportHandle, TransportInfo, TransportType, TransportState, HeartbeatCapableTransport, HeartbeatState, TransportContext, } from "./types.js";
+export { createTransportContext, isHeartbeatCapable } from "./types.js";
+export { startStdioTransport } from "./stdio-transport.js";
+export { StreamableHttpTransport } from "./streamable-http/index.js";
+export type { StreamableHttpTransportOptions } from "./streamable-http/index.js";
+export { MCP_HEADERS } from "./constants.js";
+//# sourceMappingURL=index.d.ts.map

package/build/server/transport/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/transport/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,YAAY,EACV,cAAc,EACd,eAAe,EACf,aAAa,EACb,aAAa,EACb,cAAc,EACd,yBAAyB,EACzB,cAAc,EACd,gBAAgB,GACjB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAMxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAM3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,YAAY,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AAMjF,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC"}

package/build/server/transport/index.js

@@ -0,0 +1,28 @@
+/**
+ * Transport Layer — Public API
+ *
+ * MCP protocol transports: Stdio and Streamable HTTP (2025-03-26),
+ * with optional SSE backwards compatibility (2024-11-05).
+ *
+ * HTTP infrastructure (Express app, HTTP/S server) is in server/http/.
+ * Express routers are in server/routes/.
+ * Middleware is in server/middleware/.
+ *
+ * @see https://modelcontextprotocol.io/specification/2025-03-26/basic/transports
+ *
+ * @module server/transport
+ */
+export { createTransportContext, isHeartbeatCapable } from "./types.js";
+// ============================================================================
+// Transport Functions
+// ============================================================================
+export { startStdioTransport } from "./stdio-transport.js";
+// ============================================================================
+// Streamable HTTP Transport
+// ============================================================================
+export { StreamableHttpTransport } from "./streamable-http/index.js";
+// ============================================================================
+// Constants (public)
+// ============================================================================
+export { MCP_HEADERS } from "./constants.js";
+//# sourceMappingURL=index.js.map

package/build/server/transport/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/transport/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAiBH,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAExE,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D,+EAA+E;AAC/E,4BAA4B;AAC5B,+EAA+E;AAE/E,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAGrE,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC"}

package/build/server/transport/sse/handler.d.ts

@@ -0,0 +1,46 @@
+/**
+ * SSE Request Handler
+ *
+ * Manages SSE session lifecycle — connection setup, message routing,
+ * and cleanup. Parallel to the StreamableHttpTransport's role for
+ * the modern Streamable HTTP transport.
+ *
+ * This handler encapsulates all session management so the SSE router
+ * remains a thin routing layer.
+ *
+ * @module server/transport/sse/handler
+ */
+import type { Request, Response } from "express";
+import type { SessionFactory } from "../types.js";
+import type { SessionManager } from "../../session/index.js";
+/**
+ * Handles SSE transport session lifecycle and message routing.
+ *
+ * Manages session creation, connection setup, and message dispatching
+ * for the legacy HTTP+SSE transport (deprecated protocol 2024-11-05).
+ */
+export declare class SseRequestHandler {
+    private readonly sessionFactory;
+    private readonly sessionManager;
+    constructor(sessionFactory: SessionFactory, sessionManager: SessionManager);
+    /**
+     * Handle an SSE connection (shared logic for /mcp and /sse endpoints).
+     *
+     * Creates an SSE stream and connects the MCP server to it.
+     * The messageEndpoint parameter determines where clients should POST messages to.
+     *
+     * Note: mcpServer.connect() automatically calls transport.start() internally,
+     * which sends the 'endpoint' SSE event with the message URL containing the sessionId.
+     *
+     * NOTE: This function requires real SSE connections for full test coverage.
+     */
+    handleConnection(req: Request, res: Response, messageEndpoint: string): Promise<void>;
+    /**
+     * Handle an incoming POST message for an SSE session.
+     *
+     * Looks up the session by query parameter, validates it, and delegates
+     * the message to the session's SseTransport.
+     */
+    handleMessage(req: Request, res: Response, endpoint: string): Promise<void>;
+}
+//# sourceMappingURL=handler.d.ts.map

package/build/server/transport/sse/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/server/transport/sse/handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAIjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAGlD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAyB7D;;;;;GAKG;AACH,qBAAa,iBAAiB;IAE1B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,cAAc;gBADd,cAAc,EAAE,cAAc,EAC9B,cAAc,EAAE,cAAc;IAOjD;;;;;;;;;;OAUG;IAEG,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiG3F;;;;;OAKG;IAEG,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CA4ClF"}