mongodb-mcp-server 1.14.0-prerelease.0 → 1.14.0-prerelease.2

package/README.md

@@ -367,7 +367,7 @@ For more information about configuring OpenCode as an MCP client, including the
 - `atlas-get-performance-advisor` - Get MongoDB Atlas performance advisor recommendations and suggestions, which includes the operations: suggested indexes, drop index suggestions, schema suggestions, and a sample of the most recent (max 50) slow query logs
 - `atlas-inspect-access-list` - Inspect Ip/CIDR ranges with access to your MongoDB Atlas clusters.
 - `atlas-inspect-cluster` - Inspect metadata of a MongoDB Atlas cluster
-- `atlas-list-alerts` - List MongoDB Atlas alerts
+- `atlas-list-alerts` - List triggered alerts for a MongoDB Atlas project. These are alerts Atlas has raised, not the alert configurations that define them. Defaults to OPEN alerts; set status to TRACKING or CLOSED to see others.
 - `atlas-list-clusters` - List MongoDB Atlas clusters
 - `atlas-list-db-users` - List MongoDB Atlas database users
 - `atlas-list-orgs` - List MongoDB Atlas organizations
@@ -591,6 +591,44 @@ List of available preview features:
 
 - `mcpUI` - Enables an optional web-based UI for interacting with the MCP server.
 
+#### Monitoring Server (Health Check & Metrics)
+
+When running with `--transport http`, you can expose a separate monitoring HTTP server for health checks and metrics. This server is only started when both `monitoringServerHost` and `monitoringServerPort` are set, and it listens on its own host/port (independent from the main `httpHost`/`httpPort`).
+
+The features exposed are controlled by `monitoringServerFeatures` (default: `health-check`). Available features and their endpoints:
+
+| Feature        | Endpoint   | Description                                                                                 |
+| -------------- | ---------- | ------------------------------------------------------------------------------------------- |
+| `health-check` | `/health`  | Returns `200 OK` with a JSON body describing the server status. Useful for liveness probes. |
+| `metrics`      | `/metrics` | Returns server metrics in Prometheus text format.                                           |
+
+The `/health` response is sent with `Cache-Control: no-store` and has the following shape (`status` is always `"ok"` while the process is alive):
+
+```json
+{
+  "status": "ok",
+  "version": "1.13.0",
+  "uptimeSeconds": 42,
+  "timestamp": "2026-06-20T12:00:00.000Z"
+}
+```
+
+Example: start the server with the monitoring server enabled and call the health-check endpoint:
+
+```shell
+npx -y mongodb-mcp-server@latest --transport http --httpHost 0.0.0.0 --httpPort 3000 --monitoringServerHost 0.0.0.0 --monitoringServerPort 8080 &
+curl http://0.0.0.0:8080/health
+# => {"status":"ok","version":"1.13.0","uptimeSeconds":42,"timestamp":"2026-06-20T12:00:00.000Z"}
+```
+
+To expose both endpoints, pass the features explicitly:
+
+```shell
+npx -y mongodb-mcp-server@latest --transport http --monitoringServerHost 0.0.0.0 --monitoringServerPort 8080 --monitoringServerFeatures health-check,metrics
+```
+
+> **💡 Note:** `healthCheckHost` / `healthCheckPort` are deprecated aliases for `monitoringServerHost` / `monitoringServerPort` and continue to serve the same `/health` endpoint.
+
 ### Atlas API Access
 
 To use the Atlas API tools, you'll need to create a service account in MongoDB Atlas:

package/dist/cjs/common/atlas/roles.d.ts

@@ -1,5 +1,12 @@
 import type { UserConfig } from "../config/userConfig.js";
 import type { DatabaseUserRole } from "./openapi.js";
+/**
+ * The built-in Atlas database user roles, per the Atlas Admin API
+ * (DatabaseUserRole.roleName). Any value outside this set must be a
+ * project-scoped custom role.
+ * https://www.mongodb.com/docs/atlas/mongodb-users-roles-and-privileges/
+ */
+export declare const BUILT_IN_DB_USER_ROLES: readonly ["atlasAdmin", "backup", "clusterMonitor", "dbAdmin", "dbAdminAnyDatabase", "enableSharding", "read", "readAnyDatabase", "readWrite", "readWriteAnyDatabase"];
 /**
  * Get the default role name for the database user based on the Atlas Admin API
  * https://www.mongodb.com/docs/atlas/mongodb-users-roles-and-privileges/

package/dist/cjs/common/atlas/roles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"roles.d.ts","sourceRoot":"","sources":["../../../../src/common/atlas/roles.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAYrD;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,UAAU,GAAG,gBAAgB,CAe7E"}
+{"version":3,"file":"roles.d.ts","sourceRoot":"","sources":["../../../../src/common/atlas/roles.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAErD;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,wKAWzB,CAAC;AAYX;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,UAAU,GAAG,gBAAgB,CAe7E"}

package/dist/cjs/common/atlas/roles.js

@@ -1,6 +1,25 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.BUILT_IN_DB_USER_ROLES = void 0;
 exports.getDefaultRoleFromConfig = getDefaultRoleFromConfig;
+/**
+ * The built-in Atlas database user roles, per the Atlas Admin API
+ * (DatabaseUserRole.roleName). Any value outside this set must be a
+ * project-scoped custom role.
+ * https://www.mongodb.com/docs/atlas/mongodb-users-roles-and-privileges/
+ */
+exports.BUILT_IN_DB_USER_ROLES = [
+    "atlasAdmin",
+    "backup",
+    "clusterMonitor",
+    "dbAdmin",
+    "dbAdminAnyDatabase",
+    "enableSharding",
+    "read",
+    "readAnyDatabase",
+    "readWrite",
+    "readWriteAnyDatabase",
+];
 const readWriteRole = {
     roleName: "readWriteAnyDatabase",
     databaseName: "admin",

package/dist/cjs/common/atlas/roles.js.map

@@ -1 +1 @@
-{"version":3,"file":"roles.js","sourceRoot":"","sources":["../../../../src/common/atlas/roles.ts"],"names":[],"mappings":";;AAiBA,4DAeC;AA7BD,MAAM,aAAa,GAAqB;IACpC,QAAQ,EAAE,sBAAsB;IAChC,YAAY,EAAE,OAAO;CACxB,CAAC;AAEF,MAAM,YAAY,GAAqB;IACnC,QAAQ,EAAE,iBAAiB;IAC3B,YAAY,EAAE,OAAO;CACxB,CAAC;AAEF;;;GAGG;AACH,SAAgB,wBAAwB,CAAC,MAAkB;IACvD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,YAAY,CAAC;IACxB,CAAC;IAED,kEAAkE;IAClE,IACI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACxC,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACxC,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAC1C,CAAC;QACC,OAAO,aAAa,CAAC;IACzB,CAAC;IAED,OAAO,YAAY,CAAC;AACxB,CAAC"}
+{"version":3,"file":"roles.js","sourceRoot":"","sources":["../../../../src/common/atlas/roles.ts"],"names":[],"mappings":";;;AAoCA,4DAeC;AAhDD;;;;;GAKG;AACU,QAAA,sBAAsB,GAAG;IAClC,YAAY;IACZ,QAAQ;IACR,gBAAgB;IAChB,SAAS;IACT,oBAAoB;IACpB,gBAAgB;IAChB,MAAM;IACN,iBAAiB;IACjB,WAAW;IACX,sBAAsB;CAChB,CAAC;AAEX,MAAM,aAAa,GAAqB;IACpC,QAAQ,EAAE,sBAAsB;IAChC,YAAY,EAAE,OAAO;CACxB,CAAC;AAEF,MAAM,YAAY,GAAqB;IACnC,QAAQ,EAAE,iBAAiB;IAC3B,YAAY,EAAE,OAAO;CACxB,CAAC;AAEF;;;GAGG;AACH,SAAgB,wBAAwB,CAAC,MAAkB;IACvD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,YAAY,CAAC;IACxB,CAAC;IAED,kEAAkE;IAClE,IACI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACxC,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACxC,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAC1C,CAAC;QACC,OAAO,aAAa,CAAC;IACzB,CAAC;IAED,OAAO,YAAY,CAAC;AACxB,CAAC"}

package/dist/cjs/common/atlasLocal/connectionString.d.ts

@@ -0,0 +1,17 @@
+import type { Client } from "@mongodb-js/atlas-local";
+/** Keep well under the MCP client's default ~60s request timeout. */
+export declare const DEFAULT_MAX_ATTEMPTS = 60;
+export declare const DEFAULT_INTERVAL_MS = 500;
+export declare class AtlasLocalDeploymentNotReadyError extends Error {
+    readonly deploymentName: string;
+    constructor(deploymentName: string);
+}
+/**
+ * atlas-local-create-deployment can return before Docker publishes port bindings.
+ * Retry briefly so connect usually works without exceeding MCP request timeouts.
+ */
+export declare function waitForConnectionString(client: Client, deploymentName: string, { maxAttempts, intervalMs, }?: {
+    maxAttempts?: number;
+    intervalMs?: number;
+}): Promise<string>;
+//# sourceMappingURL=connectionString.d.ts.map

package/dist/cjs/common/atlasLocal/connectionString.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connectionString.d.ts","sourceRoot":"","sources":["../../../../src/common/atlasLocal/connectionString.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAGtD,qEAAqE;AACrE,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,eAAO,MAAM,mBAAmB,MAAM,CAAC;AAEvC,qBAAa,iCAAkC,SAAQ,KAAK;aAC5B,cAAc,EAAE,MAAM;gBAAtB,cAAc,EAAE,MAAM;CAIrD;AAOD;;;GAGG;AACH,wBAAsB,uBAAuB,CACzC,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,EACtB,EACI,WAAkC,EAClC,UAAgC,GACnC,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACtD,OAAO,CAAC,MAAM,CAAC,CAgBjB"}

package/dist/cjs/common/atlasLocal/connectionString.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AtlasLocalDeploymentNotReadyError = exports.DEFAULT_INTERVAL_MS = exports.DEFAULT_MAX_ATTEMPTS = void 0;
+exports.waitForConnectionString = waitForConnectionString;
+const managedTimeout_js_1 = require("../managedTimeout.js");
+/** Keep well under the MCP client's default ~60s request timeout. */
+exports.DEFAULT_MAX_ATTEMPTS = 60;
+exports.DEFAULT_INTERVAL_MS = 500;
+class AtlasLocalDeploymentNotReadyError extends Error {
+    constructor(deploymentName) {
+        super(`Atlas Local deployment "${deploymentName}" is still starting up`);
+        this.deploymentName = deploymentName;
+        this.name = "AtlasLocalDeploymentNotReadyError";
+    }
+}
+exports.AtlasLocalDeploymentNotReadyError = AtlasLocalDeploymentNotReadyError;
+function isMissingPortBindingError(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return message.includes("Missing port binding information");
+}
+/**
+ * atlas-local-create-deployment can return before Docker publishes port bindings.
+ * Retry briefly so connect usually works without exceeding MCP request timeouts.
+ */
+async function waitForConnectionString(client, deploymentName, { maxAttempts = exports.DEFAULT_MAX_ATTEMPTS, intervalMs = exports.DEFAULT_INTERVAL_MS, } = {}) {
+    for (let attempt = 0; attempt < maxAttempts; attempt++) {
+        try {
+            return await client.getConnectionString(deploymentName);
+        }
+        catch (error) {
+            if (!isMissingPortBindingError(error)) {
+                throw error;
+            }
+            if (attempt < maxAttempts - 1) {
+                await (0, managedTimeout_js_1.sleep)(intervalMs);
+            }
+        }
+    }
+    throw new AtlasLocalDeploymentNotReadyError(deploymentName);
+}
+//# sourceMappingURL=connectionString.js.map

package/dist/cjs/common/atlasLocal/connectionString.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connectionString.js","sourceRoot":"","sources":["../../../../src/common/atlasLocal/connectionString.ts"],"names":[],"mappings":";;;AAuBA,0DAuBC;AA7CD,4DAA6C;AAE7C,qEAAqE;AACxD,QAAA,oBAAoB,GAAG,EAAE,CAAC;AAC1B,QAAA,mBAAmB,GAAG,GAAG,CAAC;AAEvC,MAAa,iCAAkC,SAAQ,KAAK;IACxD,YAA4B,cAAsB;QAC9C,KAAK,CAAC,2BAA2B,cAAc,wBAAwB,CAAC,CAAC;QADjD,mBAAc,GAAd,cAAc,CAAQ;QAE9C,IAAI,CAAC,IAAI,GAAG,mCAAmC,CAAC;IACpD,CAAC;CACJ;AALD,8EAKC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAC7C,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,OAAO,CAAC,QAAQ,CAAC,kCAAkC,CAAC,CAAC;AAChE,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,uBAAuB,CACzC,MAAc,EACd,cAAsB,EACtB,EACI,WAAW,GAAG,4BAAoB,EAClC,UAAU,GAAG,2BAAmB,MACe,EAAE;IAErD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;QACrD,IAAI,CAAC;YACD,OAAO,MAAM,MAAM,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACtB,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpC,MAAM,KAAK,CAAC;YAChB,CAAC;YAED,IAAI,OAAO,GAAG,WAAW,GAAG,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAA,yBAAK,EAAC,UAAU,CAAC,CAAC;YAC5B,CAAC;QACL,CAAC;IACL,CAAC;IAED,MAAM,IAAI,iCAAiC,CAAC,cAAc,CAAC,CAAC;AAChE,CAAC"}

package/dist/cjs/common/logging/loggerBase.d.ts

@@ -3,7 +3,6 @@ import type { Keychain } from "../keychain.js";
 import type { DefaultEventMap, EventMap, LoggerType, LogLevel, LogPayload } from "./loggingTypes.js";
 export declare abstract class LoggerBase<T extends EventMap<T> = DefaultEventMap> extends EventEmitter<T> {
     private readonly keychain;
-    private readonly defaultUnredactedLogger;
     constructor(keychain: Keychain | undefined);
     log(level: LogLevel, payload: LogPayload): void;
     protected abstract readonly type?: LoggerType;

package/dist/cjs/common/logging/loggerBase.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loggerBase.d.ts","sourceRoot":"","sources":["../../../../src/common/logging/loggerBase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAErG,8BAAsB,UAAU,CAAC,CAAC,SAAS,QAAQ,CAAC,CAAC,CAAC,GAAG,eAAe,CAAE,SAAQ,YAAY,CAAC,CAAC,CAAC;IAGjF,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAFrC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAqB;gBAEhC,QAAQ,EAAE,QAAQ,GAAG,SAAS;IAIpD,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,GAAG,IAAI;IAWtD,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC;IAE9C,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,GAAG,IAAI;IAEtE,OAAO,CAAC,gBAAgB;IAcxB,OAAO,CAAC,iBAAiB;IA2BlB,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI;IAI/B,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI;IAGhC,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI;IAIhC,MAAM,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI;IAIjC,OAAO,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI;IAIlC,QAAQ,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI;IAInC,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI;IAIhC,SAAS,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI;IAI3C,SAAS,CAAC,oBAAoB,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO;CAmBjG"}
+{"version":3,"file":"loggerBase.d.ts","sourceRoot":"","sources":["../../../../src/common/logging/loggerBase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAErG,8BAAsB,UAAU,CAAC,CAAC,SAAS,QAAQ,CAAC,CAAC,CAAC,GAAG,eAAe,CAAE,SAAQ,YAAY,CAAC,CAAC,CAAC;IACjF,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,QAAQ,GAAG,SAAS;IAIpD,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,GAAG,IAAI;IActD,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC;IAE9C,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,GAAG,IAAI;IAEtE,OAAO,CAAC,gBAAgB;IAcxB,OAAO,CAAC,iBAAiB;IA2BlB,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI;IAI/B,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI;IAGhC,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI;IAIhC,MAAM,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI;IAIjC,OAAO,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI;IAIlC,QAAQ,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI;IAInC,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI;IAIhC,SAAS,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI;IAI3C,SAAS,CAAC,oBAAoB,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO;CAmBjG"}

package/dist/cjs/common/logging/loggerBase.js

@@ -7,11 +7,13 @@ class LoggerBase extends events_1.EventEmitter {
     constructor(keychain) {
         super();
         this.keychain = keychain;
-        this.defaultUnredactedLogger = "mcp";
     }
     log(level, payload) {
-        // If no explicit value is supplied for unredacted loggers, default to "mcp"
-        const noRedaction = payload.noRedaction !== undefined ? payload.noRedaction : this.defaultUnredactedLogger;
+        // Redact by default for every logger. Skipping redaction must be an explicit,
+        // per-call opt-out via `noRedaction` — never a default. This matters most for the
+        // MCP logger, whose messages are sent to the (untrusted) MCP client and downstream
+        // agent/LLM toolchain, so secrets must never be emitted there unless explicitly allowed.
+        const noRedaction = payload.noRedaction !== undefined ? payload.noRedaction : false;
         this.logCore(level, {
             ...payload,
             message: this.redactIfNecessary(payload.message, noRedaction),

package/dist/cjs/common/logging/loggerBase.js.map

@@ -1 +1 @@
-{"version":3,"file":"loggerBase.js","sourceRoot":"","sources":["../../../../src/common/logging/loggerBase.ts"],"names":[],"mappings":";;;AAAA,mCAAsC;AACtC,mDAAwC;AAIxC,MAAsB,UAAoD,SAAQ,qBAAe;IAG7F,YAA6B,QAA8B;QACvD,KAAK,EAAE,CAAC;QADiB,aAAQ,GAAR,QAAQ,CAAsB;QAF1C,4BAAuB,GAAe,KAAK,CAAC;IAI7D,CAAC;IAEM,GAAG,CAAC,KAAe,EAAE,OAAmB;QAC3C,4EAA4E;QAC5E,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC;QAE3G,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;YAChB,GAAG,OAAO;YACV,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC;YAC7D,UAAU,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC;SACrE,CAAC,CAAC;IACP,CAAC;IAMO,gBAAgB,CACpB,UAA8C,EAC9C,WAAsC;QAEtC,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,QAAQ,GAA2B,EAAE,CAAC;QAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACpD,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;IAEO,iBAAiB,CAAC,OAAe,EAAE,WAAsC;QAC7E,IAAI,OAAO,WAAW,KAAK,SAAS,IAAI,WAAW,EAAE,CAAC;YAClD,kFAAkF;YAClF,gCAAgC;YAChC,OAAO,OAAO,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/D,8EAA8E;YAC9E,6DAA6D;YAC7D,OAAO,OAAO,CAAC;QACnB,CAAC;QAED,IACI,OAAO,WAAW,KAAK,QAAQ;YAC/B,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;YAC1B,IAAI,CAAC,IAAI;YACT,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EACvC,CAAC;YACC,mFAAmF;YACnF,iCAAiC;YACjC,OAAO,OAAO,CAAC;QACnB,CAAC;QAED,OAAO,IAAA,uBAAM,EAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAEM,IAAI,CAAC,OAAmB;QAC3B,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,CAAC;IAEM,KAAK,CAAC,OAAmB;QAC5B,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IACM,KAAK,CAAC,OAAmB;QAC5B,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAEM,MAAM,CAAC,OAAmB;QAC7B,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;IAEM,OAAO,CAAC,OAAmB;QAC9B,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IAEM,QAAQ,CAAC,OAAmB;QAC/B,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAClC,CAAC;IAEM,KAAK,CAAC,OAAmB;QAC5B,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAEM,SAAS,CAAC,OAAmB;QAChC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC;IAES,oBAAoB,CAAC,KAAe;QAC1C,QAAQ,KAAK,EAAE,CAAC;YACZ,KAAK,MAAM;gBACP,OAAO,MAAM,CAAC;YAClB,KAAK,SAAS;gBACV,OAAO,MAAM,CAAC;YAClB,KAAK,OAAO;gBACR,OAAO,OAAO,CAAC;YACnB,KAAK,QAAQ,CAAC;YACd,KAAK,OAAO;gBACR,OAAO,OAAO,CAAC;YACnB,KAAK,UAAU,CAAC;YAChB,KAAK,OAAO,CAAC;YACb,KAAK,WAAW;gBACZ,OAAO,OAAO,CAAC;YACnB;gBACI,OAAO,MAAM,CAAC;QACtB,CAAC;IACL,CAAC;CACJ;AAjHD,gCAiHC"}
+{"version":3,"file":"loggerBase.js","sourceRoot":"","sources":["../../../../src/common/logging/loggerBase.ts"],"names":[],"mappings":";;;AAAA,mCAAsC;AACtC,mDAAwC;AAIxC,MAAsB,UAAoD,SAAQ,qBAAe;IAC7F,YAA6B,QAA8B;QACvD,KAAK,EAAE,CAAC;QADiB,aAAQ,GAAR,QAAQ,CAAsB;IAE3D,CAAC;IAEM,GAAG,CAAC,KAAe,EAAE,OAAmB;QAC3C,8EAA8E;QAC9E,kFAAkF;QAClF,mFAAmF;QACnF,yFAAyF;QACzF,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC;QAEpF,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;YAChB,GAAG,OAAO;YACV,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC;YAC7D,UAAU,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC;SACrE,CAAC,CAAC;IACP,CAAC;IAMO,gBAAgB,CACpB,UAA8C,EAC9C,WAAsC;QAEtC,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,QAAQ,GAA2B,EAAE,CAAC;QAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACpD,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;IAEO,iBAAiB,CAAC,OAAe,EAAE,WAAsC;QAC7E,IAAI,OAAO,WAAW,KAAK,SAAS,IAAI,WAAW,EAAE,CAAC;YAClD,kFAAkF;YAClF,gCAAgC;YAChC,OAAO,OAAO,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/D,8EAA8E;YAC9E,6DAA6D;YAC7D,OAAO,OAAO,CAAC;QACnB,CAAC;QAED,IACI,OAAO,WAAW,KAAK,QAAQ;YAC/B,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;YAC1B,IAAI,CAAC,IAAI;YACT,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EACvC,CAAC;YACC,mFAAmF;YACnF,iCAAiC;YACjC,OAAO,OAAO,CAAC;QACnB,CAAC;QAED,OAAO,IAAA,uBAAM,EAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAEM,IAAI,CAAC,OAAmB;QAC3B,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,CAAC;IAEM,KAAK,CAAC,OAAmB;QAC5B,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IACM,KAAK,CAAC,OAAmB;QAC5B,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAEM,MAAM,CAAC,OAAmB;QAC7B,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;IAEM,OAAO,CAAC,OAAmB;QAC9B,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IAEM,QAAQ,CAAC,OAAmB;QAC/B,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAClC,CAAC;IAEM,KAAK,CAAC,OAAmB;QAC5B,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAEM,SAAS,CAAC,OAAmB;QAChC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC;IAES,oBAAoB,CAAC,KAAe;QAC1C,QAAQ,KAAK,EAAE,CAAC;YACZ,KAAK,MAAM;gBACP,OAAO,MAAM,CAAC;YAClB,KAAK,SAAS;gBACV,OAAO,MAAM,CAAC;YAClB,KAAK,OAAO;gBACR,OAAO,OAAO,CAAC;YACnB,KAAK,QAAQ,CAAC;YACd,KAAK,OAAO;gBACR,OAAO,OAAO,CAAC;YACnB,KAAK,UAAU,CAAC;YAChB,KAAK,OAAO,CAAC;YACb,KAAK,WAAW;gBACZ,OAAO,OAAO,CAAC;YACnB;gBACI,OAAO,MAAM,CAAC;QACtB,CAAC;IACL,CAAC;CACJ;AAlHD,gCAkHC"}

package/dist/cjs/common/managedTimeout.d.ts

@@ -3,4 +3,5 @@ export interface ManagedTimeout {
     restart: () => void;
 }
 export declare function setManagedTimeout(callback: () => Promise<void> | void, timeoutMS: number): ManagedTimeout;
+export declare function sleep(ms: number): Promise<void>;
 //# sourceMappingURL=managedTimeout.d.ts.map

package/dist/cjs/common/managedTimeout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"managedTimeout.d.ts","sourceRoot":"","sources":["../../../src/common/managedTimeout.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC3B,MAAM,EAAE,MAAM,IAAI,CAAC;IACnB,OAAO,EAAE,MAAM,IAAI,CAAC;CACvB;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM,GAAG,cAAc,CAqBzG"}
+{"version":3,"file":"managedTimeout.d.ts","sourceRoot":"","sources":["../../../src/common/managedTimeout.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC3B,MAAM,EAAE,MAAM,IAAI,CAAC;IACnB,OAAO,EAAE,MAAM,IAAI,CAAC;CACvB;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM,GAAG,cAAc,CAqBzG;AAED,wBAAgB,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/C"}

package/dist/cjs/common/managedTimeout.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.setManagedTimeout = setManagedTimeout;
+exports.sleep = sleep;
 function setManagedTimeout(callback, timeoutMS) {
     let timeoutId = setTimeout(() => {
         void callback();
@@ -20,4 +21,7 @@ function setManagedTimeout(callback, timeoutMS) {
         restart,
     };
 }
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
 //# sourceMappingURL=managedTimeout.js.map

package/dist/cjs/common/managedTimeout.js.map

@@ -1 +1 @@
-{"version":3,"file":"managedTimeout.js","sourceRoot":"","sources":["../../../src/common/managedTimeout.ts"],"names":[],"mappings":";;AAKA,8CAqBC;AArBD,SAAgB,iBAAiB,CAAC,QAAoC,EAAE,SAAiB;IACrF,IAAI,SAAS,GAA+B,UAAU,CAAC,GAAG,EAAE;QACxD,KAAK,QAAQ,EAAE,CAAC;IACpB,CAAC,EAAE,SAAS,CAAC,CAAC;IAEd,SAAS,MAAM;QACX,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,SAAS,GAAG,SAAS,CAAC;IAC1B,CAAC;IAED,SAAS,OAAO;QACZ,MAAM,EAAE,CAAC;QACT,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YACxB,KAAK,QAAQ,EAAE,CAAC;QACpB,CAAC,EAAE,SAAS,CAAC,CAAC;IAClB,CAAC;IAED,OAAO;QACH,MAAM;QACN,OAAO;KACV,CAAC;AACN,CAAC"}
+{"version":3,"file":"managedTimeout.js","sourceRoot":"","sources":["../../../src/common/managedTimeout.ts"],"names":[],"mappings":";;AAKA,8CAqBC;AAED,sBAEC;AAzBD,SAAgB,iBAAiB,CAAC,QAAoC,EAAE,SAAiB;IACrF,IAAI,SAAS,GAA+B,UAAU,CAAC,GAAG,EAAE;QACxD,KAAK,QAAQ,EAAE,CAAC;IACpB,CAAC,EAAE,SAAS,CAAC,CAAC;IAEd,SAAS,MAAM;QACX,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,SAAS,GAAG,SAAS,CAAC;IAC1B,CAAC;IAED,SAAS,OAAO;QACZ,MAAM,EAAE,CAAC;QACT,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YACxB,KAAK,QAAQ,EAAE,CAAC;QACpB,CAAC,EAAE,SAAS,CAAC,CAAC;IAClB,CAAC;IAED,OAAO;QACH,MAAM;QACN,OAAO;KACV,CAAC;AACN,CAAC;AAED,SAAgB,KAAK,CAAC,EAAU;IAC5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC7D,CAAC"}

package/dist/cjs/common/packageInfo.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.packageInfo = void 0;
 // This file was generated by scripts/updatePackageVersion.ts - Do not edit it manually.
 exports.packageInfo = {
-    version: "1.14.0-prerelease.0",
+    version: "1.14.0-prerelease.2",
     mcpServerName: "MongoDB MCP Server",
     engines: {
         node: "^20.19.0 || ^22.13.0 || >= 24.0.0",

package/dist/cjs/common/sessionStore.d.ts

@@ -1,7 +1,20 @@
 import type { LoggerBase } from "./logging/index.js";
+import type { Session } from "./session.js";
 import type { Metrics, DefaultMetrics } from "@mongodb-js/mcp-metrics";
 import type { CloseableTransport, SessionCloseReason } from "@mongodb-js/mcp-types";
 export type { CloseableTransport, SessionCloseReason };
+/**
+ * Error that `ISessionStore` implementations can throw from `getSession` to
+ * reject a request (e.g. when identity validation against the request headers
+ * fails). Unlike returning `undefined`, which means the session does not exist
+ * and may trigger implicit session initialization, throwing this error fails
+ * the request without creating a session. To avoid leaking whether the
+ * session exists, the response is indistinguishable from "session not found";
+ * the error message is only logged server-side.
+ */
+export declare class SessionRejectedError extends Error {
+    constructor(message: string);
+}
 /**
  * Interface for managing MCP transport sessions.
  *
@@ -9,11 +22,35 @@ export type { CloseableTransport, SessionCloseReason };
  * management (e.g. database-based session storage).
  */
 export interface ISessionStore<T extends CloseableTransport = CloseableTransport> {
-    getSession(sessionId: string): Promise<T | undefined>;
+    /**
+     * Returns the transport for the given session id or `undefined` if the
+     * session does not exist.
+     *
+     * @param headers The headers of the incoming request. Implementations can
+     * use them to validate the caller's identity before returning the session.
+     * To reject a request for an existing session, throw a
+     * {@link SessionRejectedError} rather than returning `undefined` — the
+     * latter is treated as "session not found" and may trigger implicit
+     * session initialization.
+     */
+    getSession(sessionId: string, headers?: Record<string, unknown>): Promise<T | undefined>;
+    /**
+     * Stores a newly initialized session.
+     *
+     * @param params.session The server session, exposing session-level state
+     * (e.g. the logger or the connection manager) to implementations that
+     * need it.
+     * @param params.headers The headers of the request that initiated the
+     * session (e.g. for tracing the x-request-id in logs and downstream
+     * requests).
+     */
     addSession(params: {
         sessionId: string;
         transport: T;
+        /** TODO: Remove in v2 — redundant with `session.logger`. */
         logger: LoggerBase;
+        session: Session;
+        headers?: Record<string, unknown>;
     }): Promise<void>;
     closeSession(params: {
         sessionId: string;
@@ -35,13 +72,25 @@ export declare class SessionStore<T extends CloseableTransport = CloseableTransp
         logger: LoggerBase;
         metrics: Metrics<DefaultMetrics>;
     });
-    getSession(sessionId: string): Promise<T | undefined>;
+    getSession(sessionId: string, _headers?: Record<string, unknown>): Promise<T | undefined>;
+    /**
+     * Returns whether a session with the given id exists in this store.
+     *
+     * Unlike `getSession`, this does not reset the session's idle
+     * timeout, so it is safe to call when probing on behalf of requests that
+     * may not be served (e.g. authorization checks) without extending the
+     * session's lifetime.
+     */
+    hasSession(sessionId: string): boolean;
     private resetTimeout;
     private sendNotification;
     addSession(params: {
         sessionId: string;
         transport: T;
+        /** TODO: Remove in v2 — redundant with `session.logger`. */
         logger: LoggerBase;
+        session: Session;
+        headers?: Record<string, unknown>;
     }): Promise<void>;
     closeSession({ sessionId, reason, }: {
         sessionId: string;

package/dist/cjs/common/sessionStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sessionStore.d.ts","sourceRoot":"","sources":["../../../src/common/sessionStore.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAIrD,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEpF,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC,SAAS,kBAAkB,GAAG,kBAAkB;IAC5E,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IACtD,UAAU,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,CAAC,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3F,YAAY,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,kBAAkB,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxF,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAED,qBAAa,YAAY,CAAC,CAAC,SAAS,kBAAkB,GAAG,kBAAkB,CAAE,YAAW,aAAa,CAAC,CAAC,CAAC;IACpG,OAAO,CAAC,QAAQ,CAOT;IAEP,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAS;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;gBAEtC,MAAM,EAAE;QAChB,OAAO,EAAE;YAAE,aAAa,EAAE,MAAM,CAAC;YAAC,qBAAqB,EAAE,MAAM,CAAA;SAAE,CAAC;QAClE,MAAM,EAAE,UAAU,CAAC;QACnB,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;KACpC;IAkBK,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;IAK3D,OAAO,CAAC,YAAY;IAWpB,OAAO,CAAC,gBAAgB;IAiBlB,UAAU,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,CAAC,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IA+B1F,YAAY,CAAC,EACf,SAAS,EACT,MAAkB,GACrB,EAAE;QACC,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,kBAAkB,CAAC;KAC/B,GAAG,OAAO,CAAC,IAAI,CAAC;IA8BX,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;CAK1C;AAED;;GAEG;AACH,MAAM,MAAM,2BAA2B,CAAC,QAAQ,SAAS,cAAc,GAAG,cAAc,IAAI;IACxF,OAAO,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,qBAAqB,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC9B,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,oBAAoB,CAC5B,UAAU,SAAS,kBAAkB,GAAG,kBAAkB,EAC1D,QAAQ,SAAS,cAAc,GAAG,cAAc,IAChD,CAAC,IAAI,EAAE,2BAA2B,CAAC,QAAQ,CAAC,KAAK,aAAa,CAAC,UAAU,CAAC,CAAC;AAE/E;;GAEG;AACH,wBAAgB,yBAAyB,CACrC,UAAU,SAAS,kBAAkB,GAAG,kBAAkB,EAC1D,QAAQ,SAAS,cAAc,GAAG,cAAc,EAClD,MAAM,EAAE,2BAA2B,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,UAAU,CAAC,CAEzE"}
+{"version":3,"file":"sessionStore.d.ts","sourceRoot":"","sources":["../../../src/common/sessionStore.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAG5C,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEpF,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,CAAC;AAEvD;;;;;;;;GAQG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;gBAC/B,OAAO,EAAE,MAAM;CAI9B;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC,SAAS,kBAAkB,GAAG,kBAAkB;IAC5E;;;;;;;;;;OAUG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IACzF;;;;;;;;;OASG;IACH,UAAU,CAAC,MAAM,EAAE;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,CAAC,CAAC;QACb,4DAA4D;QAC5D,MAAM,EAAE,UAAU,CAAC;QACnB,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACrC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,YAAY,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,kBAAkB,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxF,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAED,qBAAa,YAAY,CAAC,CAAC,SAAS,kBAAkB,GAAG,kBAAkB,CAAE,YAAW,aAAa,CAAC,CAAC,CAAC;IACpG,OAAO,CAAC,QAAQ,CAOT;IAEP,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAS;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;gBAEtC,MAAM,EAAE;QAChB,OAAO,EAAE;YAAE,aAAa,EAAE,MAAM,CAAC;YAAC,qBAAqB,EAAE,MAAM,CAAA;SAAE,CAAC;QAClE,MAAM,EAAE,UAAU,CAAC;QACnB,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;KACpC;IAmBK,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;IAK/F;;;;;;;OAOG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAItC,OAAO,CAAC,YAAY;IAWpB,OAAO,CAAC,gBAAgB;IAiBlB,UAAU,CAAC,MAAM,EAAE;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,CAAC,CAAC;QACb,4DAA4D;QAC5D,MAAM,EAAE,UAAU,CAAC;QACnB,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACrC,GAAG,OAAO,CAAC,IAAI,CAAC;IA8BX,YAAY,CAAC,EACf,SAAS,EACT,MAAkB,GACrB,EAAE;QACC,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,kBAAkB,CAAC;KAC/B,GAAG,OAAO,CAAC,IAAI,CAAC;IA8BX,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;CAK1C;AAED;;GAEG;AACH,MAAM,MAAM,2BAA2B,CAAC,QAAQ,SAAS,cAAc,GAAG,cAAc,IAAI;IACxF,OAAO,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,qBAAqB,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC9B,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,oBAAoB,CAC5B,UAAU,SAAS,kBAAkB,GAAG,kBAAkB,EAC1D,QAAQ,SAAS,cAAc,GAAG,cAAc,IAChD,CAAC,IAAI,EAAE,2BAA2B,CAAC,QAAQ,CAAC,KAAK,aAAa,CAAC,UAAU,CAAC,CAAC;AAE/E;;GAEG;AACH,wBAAgB,yBAAyB,CACrC,UAAU,SAAS,kBAAkB,GAAG,kBAAkB,EAC1D,QAAQ,SAAS,cAAc,GAAG,cAAc,EAClD,MAAM,EAAE,2BAA2B,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,UAAU,CAAC,CAEzE"}

package/dist/cjs/common/sessionStore.js

@@ -1,9 +1,25 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SessionStore = void 0;
+exports.SessionStore = exports.SessionRejectedError = void 0;
 exports.createDefaultSessionStore = createDefaultSessionStore;
 const index_js_1 = require("./logging/index.js");
 const managedTimeout_js_1 = require("./managedTimeout.js");
+/**
+ * Error that `ISessionStore` implementations can throw from `getSession` to
+ * reject a request (e.g. when identity validation against the request headers
+ * fails). Unlike returning `undefined`, which means the session does not exist
+ * and may trigger implicit session initialization, throwing this error fails
+ * the request without creating a session. To avoid leaking whether the
+ * session exists, the response is indistinguishable from "session not found";
+ * the error message is only logged server-side.
+ */
+class SessionRejectedError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "SessionRejectedError";
+    }
+}
+exports.SessionRejectedError = SessionRejectedError;
 class SessionStore {
     constructor(params) {
         this.sessions = {};
@@ -22,10 +38,22 @@ class SessionStore {
             throw new Error("idleTimeoutMS must be greater than notificationTimeoutMS");
         }
     }
-    async getSession(sessionId) {
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    async getSession(sessionId, _headers) {
         this.resetTimeout(sessionId);
         return Promise.resolve(this.sessions[sessionId]?.transport);
     }
+    /**
+     * Returns whether a session with the given id exists in this store.
+     *
+     * Unlike `getSession`, this does not reset the session's idle
+     * timeout, so it is safe to call when probing on behalf of requests that
+     * may not be served (e.g. authorization checks) without extending the
+     * session's lifetime.
+     */
+    hasSession(sessionId) {
+        return this.sessions[sessionId] !== undefined;
+    }
     resetTimeout(sessionId) {
         const session = this.sessions[sessionId];
         if (!session) {
@@ -52,8 +80,7 @@ class SessionStore {
     }
     async addSession(params) {
         const { sessionId, transport, logger } = params;
-        const session = this.sessions[sessionId];
-        if (session) {
+        if (this.sessions[sessionId]) {
             throw new Error(`Session ${sessionId} already exists`);
         }
         const abortTimeout = (0, managedTimeout_js_1.setManagedTimeout)(async () => {

package/dist/cjs/common/sessionStore.js.map

@@ -1 +1 @@
-{"version":3,"file":"sessionStore.js","sourceRoot":"","sources":["../../../src/common/sessionStore.ts"],"names":[],"mappings":";;;AA2LA,8DAKC;AA/LD,iDAA2C;AAE3C,2DAAwD;AAmBxD,MAAa,YAAY;IAerB,YAAY,MAIX;QAlBO,aAAQ,GAOZ,EAAE,CAAC;QAYH,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC5C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC;QAC3D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,IAAI,IAAI,CAAC,aAAa,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,IAAI,CAAC,qBAAqB,IAAI,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAChF,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB;QAC9B,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAC7B,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;IAChE,CAAC;IAEO,YAAY,CAAC,SAAiB;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO;QACX,CAAC;QAED,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAE/B,OAAO,CAAC,mBAAmB,CAAC,OAAO,EAAE,CAAC;IAC1C,CAAC;IAEO,gBAAgB,CAAC,SAAiB;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;gBAChB,EAAE,EAAE,gBAAK,CAAC,sDAAsD;gBAChE,OAAO,EAAE,cAAc;gBACvB,OAAO,EAAE,WAAW,SAAS,uCAAuC;aACvE,CAAC,CAAC;YACH,OAAO;QACX,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;YAChB,EAAE,EAAE,gBAAK,CAAC,+CAA+C;YACzD,OAAO,EAAE,cAAc;YACvB,OAAO,EAAE,iDAAiD;SAC7D,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAA+D;QAC5E,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,OAAO,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,iBAAiB,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,YAAY,GAAG,IAAA,qCAAiB,EAAC,KAAK,IAAI,EAAE;YAC9C,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;oBACjC,EAAE,EAAE,gBAAK,CAAC,+CAA+C;oBACzD,OAAO,EAAE,cAAc;oBACvB,OAAO,EAAE,kCAAkC;iBAC9C,CAAC,CAAC;gBAEH,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;YACnE,CAAC;QACL,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACvB,MAAM,mBAAmB,GAAG,IAAA,qCAAiB,EACzC,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,EACtC,IAAI,CAAC,qBAAqB,CAC7B,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG;YACvB,SAAS;YACT,YAAY;YACZ,mBAAmB;YACnB,MAAM;SACT,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,GAAG,EAAE,CAAC;QACzC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EACf,SAAS,EACT,MAAM,GAAG,SAAS,GAIrB;QACG,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,YAAY,CAAC,CAAC;QACtD,CAAC;QAED,gEAAgE;QAChE,iEAAiE;QACjE,4DAA4D;QAC5D,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAEhC,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QAC9B,OAAO,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC;QAErC,IAAI,MAAM,KAAK,kBAAkB,EAAE,CAAC;YAChC,gEAAgE;YAChE,IAAI,CAAC;gBACD,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YACpC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;oBACd,EAAE,EAAE,gBAAK,CAAC,0CAA0C;oBACpD,OAAO,EAAE,yBAAyB;oBAClC,OAAO,EAAE,2BAA2B,SAAS,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;iBAC7G,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,gBAAgB;QAClB,MAAM,OAAO,CAAC,GAAG,CACb,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CACzG,CAAC;IACN,CAAC;CACJ;AA9ID,oCA8IC;AAoBD;;GAEG;AACH,SAAgB,yBAAyB,CAGvC,MAA6C;IAC3C,OAAO,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC"}
+{"version":3,"file":"sessionStore.js","sourceRoot":"","sources":["../../../src/common/sessionStore.ts"],"names":[],"mappings":";;;AA2PA,8DAKC;AA/PD,iDAA2C;AAG3C,2DAAwD;AAMxD;;;;;;;;GAQG;AACH,MAAa,oBAAqB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACvB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACvC,CAAC;CACJ;AALD,oDAKC;AA2CD,MAAa,YAAY;IAerB,YAAY,MAIX;QAlBO,aAAQ,GAOZ,EAAE,CAAC;QAYH,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC5C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC;QAC3D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,IAAI,IAAI,CAAC,aAAa,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,IAAI,CAAC,qBAAqB,IAAI,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAChF,CAAC;IACL,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,QAAkC;QAClE,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAC7B,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;IAChE,CAAC;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,SAAiB;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC;IAClD,CAAC;IAEO,YAAY,CAAC,SAAiB;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO;QACX,CAAC;QAED,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAE/B,OAAO,CAAC,mBAAmB,CAAC,OAAO,EAAE,CAAC;IAC1C,CAAC;IAEO,gBAAgB,CAAC,SAAiB;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;gBAChB,EAAE,EAAE,gBAAK,CAAC,sDAAsD;gBAChE,OAAO,EAAE,cAAc;gBACvB,OAAO,EAAE,WAAW,SAAS,uCAAuC;aACvE,CAAC,CAAC;YACH,OAAO;QACX,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;YAChB,EAAE,EAAE,gBAAK,CAAC,+CAA+C;YACzD,OAAO,EAAE,cAAc;YACvB,OAAO,EAAE,iDAAiD;SAC7D,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAOhB;QACG,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;QAChD,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,iBAAiB,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,YAAY,GAAG,IAAA,qCAAiB,EAAC,KAAK,IAAI,EAAE;YAC9C,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;oBACjC,EAAE,EAAE,gBAAK,CAAC,+CAA+C;oBACzD,OAAO,EAAE,cAAc;oBACvB,OAAO,EAAE,kCAAkC;iBAC9C,CAAC,CAAC;gBAEH,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;YACnE,CAAC;QACL,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACvB,MAAM,mBAAmB,GAAG,IAAA,qCAAiB,EACzC,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,EACtC,IAAI,CAAC,qBAAqB,CAC7B,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG;YACvB,SAAS;YACT,YAAY;YACZ,mBAAmB;YACnB,MAAM;SACT,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,GAAG,EAAE,CAAC;QACzC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EACf,SAAS,EACT,MAAM,GAAG,SAAS,GAIrB;QACG,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,YAAY,CAAC,CAAC;QACtD,CAAC;QAED,gEAAgE;QAChE,iEAAiE;QACjE,4DAA4D;QAC5D,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAEhC,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QAC9B,OAAO,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC;QAErC,IAAI,MAAM,KAAK,kBAAkB,EAAE,CAAC;YAChC,gEAAgE;YAChE,IAAI,CAAC;gBACD,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YACpC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;oBACd,EAAE,EAAE,gBAAK,CAAC,0CAA0C;oBACpD,OAAO,EAAE,yBAAyB;oBAClC,OAAO,EAAE,2BAA2B,SAAS,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;iBAC7G,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,gBAAgB;QAClB,MAAM,OAAO,CAAC,GAAG,CACb,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CACzG,CAAC;IACN,CAAC;CACJ;AAjKD,oCAiKC;AAoBD;;GAEG;AACH,SAAgB,yBAAyB,CAGvC,MAA6C;IAC3C,OAAO,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC"}

package/dist/cjs/helpers/bsonToJson.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Converts a BSON value into a JSON-safe object using Compass idiomatic Extended JSON.
+ *
+ * ObjectId becomes `{ "$oid": "..." }`, Long becomes `{ "$numberLong": "..." }`, etc.
+ */
+export declare function bsonToJson(value: Record<string, unknown>): Record<string, unknown>;
+export declare function bsonToJson(value: unknown[]): unknown[];
+export declare function bsonToJson(value: unknown): unknown;
+//# sourceMappingURL=bsonToJson.d.ts.map

package/dist/cjs/helpers/bsonToJson.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bsonToJson.d.ts","sourceRoot":"","sources":["../../../src/helpers/bsonToJson.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACpF,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;AACxD,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC"}

package/dist/cjs/helpers/bsonToJson.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.bsonToJson = bsonToJson;
+const hadron_document_1 = require("hadron-document");
+function bsonToJson(value) {
+    if (Array.isArray(value)) {
+        return value.map((item) => bsonToJson(item));
+    }
+    return JSON.parse((0, hadron_document_1.objectToIdiomaticEJSON)(value));
+}
+//# sourceMappingURL=bsonToJson.js.map

package/dist/cjs/helpers/bsonToJson.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bsonToJson.js","sourceRoot":"","sources":["../../../src/helpers/bsonToJson.ts"],"names":[],"mappings":";;AAUA,gCAKC;AAfD,qDAAyD;AAUzD,SAAgB,UAAU,CAAC,KAAc;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAA,wCAAsB,EAAC,KAAK,CAAC,CAAC,CAAC;AACrD,CAAC"}

package/dist/cjs/helpers/constants.d.ts

@@ -1,3 +1,4 @@
+import { z } from "zod";
 /**
  * A cap for the maxTimeMS used for FindCursor.countDocuments.
  *
@@ -12,6 +13,12 @@ export declare const QUERY_COUNT_MAX_TIME_MS_CAP: number;
  */
 export declare const AGG_COUNT_MAX_TIME_MS_CAP: number;
 export declare const ONE_MB: number;
+export declare const CURSOR_LIMIT_KEYS: z.ZodEnum<{
+    "config.maxDocumentsPerQuery": "config.maxDocumentsPerQuery";
+    "config.maxBytesPerQuery": "config.maxBytesPerQuery";
+    "tool.responseBytesLimit": "tool.responseBytesLimit";
+}>;
+export type CursorLimitKey = z.infer<typeof CURSOR_LIMIT_KEYS>;
 /**
  * A map of applied limit on cursors to a text that is supposed to be sent as
  * response to LLM

package/dist/cjs/helpers/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/helpers/constants.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,EAAE,MAAe,CAAC;AAE1D;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAE,MAAe,CAAC;AAExD,eAAO,MAAM,MAAM,EAAE,MAAwB,CAAC;AAE9C;;;GAGG;AACH,eAAO,MAAM,yBAAyB;;;;CAI5B,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/helpers/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,EAAE,MAAe,CAAC;AAE1D;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAE,MAAe,CAAC;AAExD,eAAO,MAAM,MAAM,EAAE,MAAwB,CAAC;AAE9C,eAAO,MAAM,iBAAiB;;;;EAI5B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE/D;;;GAGG;AACH,eAAO,MAAM,yBAAyB;;;;CAIa,CAAC"}

package/dist/cjs/helpers/constants.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CURSOR_LIMITS_TO_LLM_TEXT = exports.ONE_MB = exports.AGG_COUNT_MAX_TIME_MS_CAP = exports.QUERY_COUNT_MAX_TIME_MS_CAP = void 0;
+exports.CURSOR_LIMITS_TO_LLM_TEXT = exports.CURSOR_LIMIT_KEYS = exports.ONE_MB = exports.AGG_COUNT_MAX_TIME_MS_CAP = exports.QUERY_COUNT_MAX_TIME_MS_CAP = void 0;
+const zod_1 = require("zod");
 /**
  * A cap for the maxTimeMS used for FindCursor.countDocuments.
  *
@@ -15,6 +16,11 @@ exports.QUERY_COUNT_MAX_TIME_MS_CAP = 10000;
  */
 exports.AGG_COUNT_MAX_TIME_MS_CAP = 60000;
 exports.ONE_MB = 1 * 1024 * 1024;
+exports.CURSOR_LIMIT_KEYS = zod_1.z.enum([
+    "config.maxDocumentsPerQuery",
+    "config.maxBytesPerQuery",
+    "tool.responseBytesLimit",
+]);
 /**
  * A map of applied limit on cursors to a text that is supposed to be sent as
  * response to LLM

package/dist/cjs/helpers/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/helpers/constants.ts"],"names":[],"mappings":";;;AAAA;;;;;;GAMG;AACU,QAAA,2BAA2B,GAAW,KAAM,CAAC;AAE1D;;;GAGG;AACU,QAAA,yBAAyB,GAAW,KAAM,CAAC;AAE3C,QAAA,MAAM,GAAW,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAE9C;;;GAGG;AACU,QAAA,yBAAyB,GAAG;IACrC,6BAA6B,EAAE,4CAA4C;IAC3E,yBAAyB,EAAE,wCAAwC;IACnE,yBAAyB,EAAE,uCAAuC;CAC5D,CAAC"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/helpers/constants.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB;;;;;;GAMG;AACU,QAAA,2BAA2B,GAAW,KAAM,CAAC;AAE1D;;;GAGG;AACU,QAAA,yBAAyB,GAAW,KAAM,CAAC;AAE3C,QAAA,MAAM,GAAW,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjC,QAAA,iBAAiB,GAAG,OAAC,CAAC,IAAI,CAAC;IACpC,6BAA6B;IAC7B,yBAAyB;IACzB,yBAAyB;CAC5B,CAAC,CAAC;AAGH;;;GAGG;AACU,QAAA,yBAAyB,GAAG;IACrC,6BAA6B,EAAE,4CAA4C;IAC3E,yBAAyB,EAAE,wCAAwC;IACnE,yBAAyB,EAAE,uCAAuC;CACnB,CAAC"}

package/dist/cjs/helpers/escapeMarkdown.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Escapes markdown and HTML metacharacters in a string.
+ */
+export declare function escapeMarkdown(value: string): string;
+//# sourceMappingURL=escapeMarkdown.d.ts.map

package/dist/cjs/helpers/escapeMarkdown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"escapeMarkdown.d.ts","sourceRoot":"","sources":["../../../src/helpers/escapeMarkdown.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpD"}

package/dist/cjs/helpers/escapeMarkdown.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.escapeMarkdown = escapeMarkdown;
+/**
+ * Escapes markdown and HTML metacharacters in a string.
+ */
+function escapeMarkdown(value) {
+    return value.replace(/[\\`*_{}[\]()<>#+\-.!|]/g, "\\$&");
+}
+//# sourceMappingURL=escapeMarkdown.js.map

package/dist/cjs/helpers/escapeMarkdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"escapeMarkdown.js","sourceRoot":"","sources":["../../../src/helpers/escapeMarkdown.ts"],"names":[],"mappings":";;AAGA,wCAEC;AALD;;GAEG;AACH,SAAgB,cAAc,CAAC,KAAa;IACxC,OAAO,KAAK,CAAC,OAAO,CAAC,0BAA0B,EAAE,MAAM,CAAC,CAAC;AAC7D,CAAC"}

package/dist/cjs/helpers/requestIdAttr.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"requestIdAttr.d.ts","sourceRoot":"","sources":["../../../src/helpers/requestIdAttr.ts"],"names":[],"mappings":"AAAA,kIAAkI;AAClI,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAGlG"}
+{"version":3,"file":"requestIdAttr.d.ts","sourceRoot":"","sources":["../../../src/helpers/requestIdAttr.ts"],"names":[],"mappings":"AAAA,kIAAkI;AAClI,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOlG"}

package/dist/cjs/helpers/requestIdAttr.js

@@ -3,7 +3,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.requestIdAttr = requestIdAttr;
 /** Returns `{ "x-request-id": "..." }` when the headers carry one, else `{}`. Spread inside a LogPayload's `attributes` field. */
 function requestIdAttr(headers) {
-    const id = headers?.["x-request-id"];
+    if (!headers) {
+        return {};
+    }
+    const key = Object.keys(headers).find((k) => k.toLowerCase() === "x-request-id");
+    const id = key !== undefined ? headers[key] : undefined;
     return typeof id === "string" ? { "x-request-id": id } : {};
 }
 //# sourceMappingURL=requestIdAttr.js.map

package/dist/cjs/helpers/requestIdAttr.js.map

@@ -1 +1 @@
-{"version":3,"file":"requestIdAttr.js","sourceRoot":"","sources":["../../../src/helpers/requestIdAttr.ts"],"names":[],"mappings":";;AACA,sCAGC;AAJD,kIAAkI;AAClI,SAAgB,aAAa,CAAC,OAA4C;IACtE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC,cAAc,CAAC,CAAC;IACrC,OAAO,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAChE,CAAC"}
+{"version":3,"file":"requestIdAttr.js","sourceRoot":"","sources":["../../../src/helpers/requestIdAttr.ts"],"names":[],"mappings":";;AACA,sCAOC;AARD,kIAAkI;AAClI,SAAgB,aAAa,CAAC,OAA4C;IACtE,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,cAAc,CAAC,CAAC;IACjF,MAAM,EAAE,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxD,OAAO,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAChE,CAAC"}

package/dist/cjs/lib.d.ts

@@ -31,7 +31,7 @@ export { Keychain, registerGlobalSecretToRedact } from "./common/keychain.js";
 export type { Secret } from "./common/keychain.js";
 export { Elicitation } from "./elicitation.js";
 export { applyConfigOverrides, ConfigOverrideError } from "./common/config/configOverrides.js";
-export { SessionStore, createDefaultSessionStore, type ISessionStore, type CloseableTransport, type SessionCloseReason, type CreateSessionStoreFn, type SessionStoreConstructorArgs, } from "./common/sessionStore.js";
+export { SessionStore, SessionRejectedError, createDefaultSessionStore, type ISessionStore, type CloseableTransport, type SessionCloseReason, type CreateSessionStoreFn, type SessionStoreConstructorArgs, } from "./common/sessionStore.js";
 export { ExportsManager } from "./common/exportsManager.js";
 export { DeviceId } from "./helpers/deviceId.js";
 export type { MonitoringServerFeature } from "./common/schemas.js";