yt-transcript-strapi-plugin 0.1.0 → 0.1.2

package/dist/server/index.js

@@ -975,6 +975,26 @@ const controller = ({ strapi }) => ({
     ctx.body = { data: transcript2 };
   }
 });
+const SESSION_TIMEOUT_MS = 4 * 60 * 60 * 1e3;
+function isSessionExpired(session) {
+  return Date.now() - session.createdAt > SESSION_TIMEOUT_MS;
+}
+function cleanupExpiredSessions(plugin, strapi) {
+  let cleaned = 0;
+  for (const [sessionId, session] of plugin.sessions.entries()) {
+    if (isSessionExpired(session)) {
+      try {
+        session.server.close();
+      } catch {
+      }
+      plugin.sessions.delete(sessionId);
+      cleaned++;
+    }
+  }
+  if (cleaned > 0) {
+    strapi.log.debug(`[yt-transcript-mcp] Cleaned up ${cleaned} expired sessions`);
+  }
+}
 const mcpController = ({ strapi }) => ({
   /**
    * Handle MCP requests (POST, GET, DELETE)
@@ -991,17 +1011,41 @@ const mcpController = ({ strapi }) => ({
       };
       return;
     }
-    const strapiToken = ctx.state.strapiToken;
+    if (Math.random() < 0.01) {
+      cleanupExpiredSessions(plugin, strapi);
+    }
     try {
-      const sessionId = ctx.request.headers["mcp-session-id"] || node_crypto.randomUUID();
-      let session = plugin.sessions.get(sessionId);
+      const requestedSessionId = ctx.request.headers["mcp-session-id"];
+      let session = requestedSessionId ? plugin.sessions.get(requestedSessionId) : null;
+      if (session && isSessionExpired(session)) {
+        strapi.log.debug(`[yt-transcript-mcp] Session expired, removing: ${requestedSessionId}`);
+        try {
+          session.server.close();
+        } catch {
+        }
+        plugin.sessions.delete(requestedSessionId);
+        session = null;
+      }
+      if (requestedSessionId && !session) {
+        ctx.status = 400;
+        ctx.body = {
+          jsonrpc: "2.0",
+          error: {
+            code: -32e3,
+            message: "Session expired or invalid. Please reinitialize the connection."
+          },
+          id: null
+        };
+        return;
+      }
       if (!session) {
+        const sessionId = node_crypto.randomUUID();
         const server = plugin.createMcpServer();
         const transport = new streamableHttp_js.StreamableHTTPServerTransport({
           sessionIdGenerator: () => sessionId
         });
         await server.connect(transport);
-        session = { server, transport, createdAt: Date.now(), strapiToken };
+        session = { server, transport, createdAt: Date.now(), strapiToken: ctx.state.strapiToken };
         plugin.sessions.set(sessionId, session);
         strapi.log.debug(`[yt-transcript-mcp] New session created: ${sessionId} (auth: ${ctx.state.authMethod})`);
       }

package/dist/server/index.mjs

@@ -974,6 +974,26 @@ const controller = ({ strapi }) => ({
     ctx.body = { data: transcript2 };
   }
 });
+const SESSION_TIMEOUT_MS = 4 * 60 * 60 * 1e3;
+function isSessionExpired(session) {
+  return Date.now() - session.createdAt > SESSION_TIMEOUT_MS;
+}
+function cleanupExpiredSessions(plugin, strapi) {
+  let cleaned = 0;
+  for (const [sessionId, session] of plugin.sessions.entries()) {
+    if (isSessionExpired(session)) {
+      try {
+        session.server.close();
+      } catch {
+      }
+      plugin.sessions.delete(sessionId);
+      cleaned++;
+    }
+  }
+  if (cleaned > 0) {
+    strapi.log.debug(`[yt-transcript-mcp] Cleaned up ${cleaned} expired sessions`);
+  }
+}
 const mcpController = ({ strapi }) => ({
   /**
    * Handle MCP requests (POST, GET, DELETE)
@@ -990,17 +1010,41 @@ const mcpController = ({ strapi }) => ({
       };
       return;
     }
-    const strapiToken = ctx.state.strapiToken;
+    if (Math.random() < 0.01) {
+      cleanupExpiredSessions(plugin, strapi);
+    }
     try {
-      const sessionId = ctx.request.headers["mcp-session-id"] || randomUUID();
-      let session = plugin.sessions.get(sessionId);
+      const requestedSessionId = ctx.request.headers["mcp-session-id"];
+      let session = requestedSessionId ? plugin.sessions.get(requestedSessionId) : null;
+      if (session && isSessionExpired(session)) {
+        strapi.log.debug(`[yt-transcript-mcp] Session expired, removing: ${requestedSessionId}`);
+        try {
+          session.server.close();
+        } catch {
+        }
+        plugin.sessions.delete(requestedSessionId);
+        session = null;
+      }
+      if (requestedSessionId && !session) {
+        ctx.status = 400;
+        ctx.body = {
+          jsonrpc: "2.0",
+          error: {
+            code: -32e3,
+            message: "Session expired or invalid. Please reinitialize the connection."
+          },
+          id: null
+        };
+        return;
+      }
       if (!session) {
+        const sessionId = randomUUID();
         const server = plugin.createMcpServer();
         const transport = new StreamableHTTPServerTransport({
           sessionIdGenerator: () => sessionId
         });
         await server.connect(transport);
-        session = { server, transport, createdAt: Date.now(), strapiToken };
+        session = { server, transport, createdAt: Date.now(), strapiToken: ctx.state.strapiToken };
         plugin.sessions.set(sessionId, session);
         strapi.log.debug(`[yt-transcript-mcp] New session created: ${sessionId} (auth: ${ctx.state.authMethod})`);
       }

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.0",
+  "version": "0.1.2",
   "keywords": [
     "yt-transcript-strapi-plugin",
     "youtube",