This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+5 more
Affected surfaces
Summary
AI summarySession pool errors now return a spec‑compliant 404 with recovery handling for stale session IDs.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Extends default session idle timeout from 30 minutes to 24 hours. Extends default session idle timeout from 30 minutes to 24 hours. Source: llm_adapter@2026-05-25 Confidence: high |
— |
| Bugfix | Medium |
Returns 404 with LLM‑actionable message for stale session IDs instead of 400. Returns 404 with LLM‑actionable message for stale session IDs instead of 400. Source: llm_adapter@2026-05-25 Confidence: high |
— |
| Refactor | Low |
Relaxes MCP Streamable HTTP §3.2 to auto‑recover initialization on stale session ID. Relaxes MCP Streamable HTTP §3.2 to auto‑recover initialization on stale session ID. Source: granite4.1:30b@2026-05-25-audit Confidence: high |
— |
Full changelog
Fixed
- Session pool 400 on stale session ID. When a client reuses a session ID
that was evicted by idle timeout or lost across server restart, the server
now returns a spec-compliant 404 (error code-32002) with an
LLM-actionable message instead of the previous 400 "Server not initialized".
Initialize requests with a stale session ID auto-recover (strip old ID,
treat as fresh handshake) — an intentional relaxation of MCP Streamable
HTTP §3.2 for clients that don't retry with a fresh handshake on error.
Changed
- Session idle timeout default extended from 30 minutes to 24 hours,
reducing the chance of session eviction during normal interactive use.
Configurable viaSESSION_IDLE_TIMEOUT_MSenv var. - Session idle timeout test tightened to assert exact 404 status and
error code, plus a new sub-test for init auto-recovery path.
Install
# Run directly (Streamable HTTP on :3000)
npx prts-mcp-ts
# Or install globally
npm install -g [email protected]
MCP endpoint: http://localhost:3000/mcp
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About 3aKHP/prts-mcp
MCP Server for Arknights, querying the PRTS Wiki API and serving auto-synced operator archives and voice lines from game data. Designed for fan-creation (同人創作) AI agents. Python (stdio/Docker) and TypeScript (Streamable HTTP) implementations.
Related context
Related tools
Earlier breaking changes
- vts/v1.0.0 Public tool surface frozen; 9 MCP tool names, parameters, and response formats locked.
Beta — feedback welcome: [email protected]