Encapsulate session handling from protocol to new SessionManager

Author: chr-hertel

CHANGELOG.md

@@ -7,6 +7,7 @@ All notable changes to `mcp/sdk` will be documented in this file.
 
 * Rename `Mcp\Server\Session\Psr16StoreSession` to `Mcp\Server\Session\Psr16SessionStore`
 * Add missing handlers for resource subscribe/unsubscribe and persist subscriptions via session
+* Introduce `SessionManager` to encapsulate session handling (replaces `SessionFactory`) and move garbage collection logic from `Protocol`.
 
 0.3.0
 -----

src/Server/Builder.php

@@ -23,6 +23,7 @@
 use Mcp\Capability\Registry\Loader\LoaderInterface;
 use Mcp\Capability\Registry\ReferenceHandler;
 use Mcp\Capability\RegistryInterface;
+use Mcp\Exception\InvalidArgumentException;
 use Mcp\JsonRpc\MessageFactory;
 use Mcp\Schema\Annotations;
 use Mcp\Schema\Enum\ProtocolVersion;
@@ -36,8 +37,8 @@
 use Mcp\Server\Resource\SessionSubscriptionManager;
 use Mcp\Server\Resource\SubscriptionManagerInterface;
 use Mcp\Server\Session\InMemorySessionStore;
-use Mcp\Server\Session\SessionFactory;
-use Mcp\Server\Session\SessionFactoryInterface;
+use Mcp\Server\Session\SessionManager;
+use Mcp\Server\Session\SessionManagerInterface;
 use Mcp\Server\Session\SessionStoreInterface;
 use Psr\Container\ContainerInterface;
 use Psr\EventDispatcher\EventDispatcherInterface;
@@ -70,12 +71,10 @@ final class Builder
 
     private ?DiscovererInterface $discoverer = null;
 
-    private ?SessionFactoryInterface $sessionFactory = null;
+    private ?SessionManagerInterface $sessionManager = null;
 
     private ?SessionStoreInterface $sessionStore = null;
 
-    private int $sessionTtl = 3600;
-
     private int $paginationLimit = 50;
 
     private ?string $instructions = null;
@@ -321,13 +320,15 @@ public function setResourceSubscriptionManager(SubscriptionManagerInterface $sub
     }
 
     public function setSession(
-        SessionStoreInterface $sessionStore,
-        SessionFactoryInterface $sessionFactory = new SessionFactory(),
-        int $ttl = 3600,
+        ?SessionStoreInterface $sessionStore = null,
+        ?SessionManagerInterface $sessionManager = null,
     ): self {
-        $this->sessionFactory = $sessionFactory;
         $this->sessionStore = $sessionStore;
-        $this->sessionTtl = $ttl;
+        $this->sessionManager = $sessionManager;
+
+        if (null !== $sessionManager && null !== $sessionStore) {
+            throw new InvalidArgumentException('Cannot set both SessionStore and SessionManager. Set only one or the other.');
+        }
 
         return $this;
     }
@@ -506,9 +507,10 @@ public function build(): Server
             new ArrayLoader($this->tools, $this->resources, $this->resourceTemplates, $this->prompts, $logger, $this->schemaGenerator),
         ];
 
-        $sessionTtl = $this->sessionTtl ?? 3600;
-        $sessionFactory = $this->sessionFactory ?? new SessionFactory();
-        $sessionStore = $this->sessionStore ?? new InMemorySessionStore($sessionTtl);
+        $sessionManager = $this->sessionManager ?? new SessionManager(
+            $this->sessionStore ?? new InMemorySessionStore(),
+            $logger,
+        );
 
         if (null !== $this->discoveryBasePath) {
             $discoverer = $this->discoverer ?? $this->createDiscoverer($logger);
@@ -561,8 +563,7 @@ public function build(): Server
             requestHandlers: $requestHandlers,
             notificationHandlers: $notificationHandlers,
             messageFactory: $messageFactory,
-            sessionFactory: $sessionFactory,
-            sessionStore: $sessionStore,
+            sessionManager: $sessionManager,
             logger: $logger,
         );
 

src/Server/Protocol.php

@@ -21,9 +21,8 @@
 use Mcp\Schema\Request\InitializeRequest;
 use Mcp\Server\Handler\Notification\NotificationHandlerInterface;
 use Mcp\Server\Handler\Request\RequestHandlerInterface;
-use Mcp\Server\Session\SessionFactoryInterface;
 use Mcp\Server\Session\SessionInterface;
-use Mcp\Server\Session\SessionStoreInterface;
+use Mcp\Server\Session\SessionManagerInterface;
 use Mcp\Server\Transport\TransportInterface;
 use Psr\Log\LoggerInterface;
 use Psr\Log\NullLogger;
@@ -65,8 +64,7 @@ public function __construct(
         private readonly array $requestHandlers,
         private readonly array $notificationHandlers,
         private readonly MessageFactory $messageFactory,
-        private readonly SessionFactoryInterface $sessionFactory,
-        private readonly SessionStoreInterface $sessionStore,
+        private readonly SessionManagerInterface $sessionManager,
         private readonly LoggerInterface $logger = new NullLogger(),
     ) {
     }
@@ -106,7 +104,7 @@ public function processInput(TransportInterface $transport, string $input, ?Uuid
     {
         $this->logger->info('Received message to process.', ['message' => $input]);
 
-        $this->gcSessions();
+        $this->sessionManager->gc();
 
         try {
             $messages = $this->messageFactory->create($input);
@@ -367,7 +365,7 @@ private function queueOutgoing(Request|Notification|Response|Error $message, arr
      */
     public function consumeOutgoingMessages(Uuid $sessionId): array
     {
-        $session = $this->sessionFactory->createWithId($sessionId, $this->sessionStore);
+        $session = $this->sessionManager->createWithId($sessionId);
         $queue = $session->get(self::SESSION_OUTGOING_QUEUE, []);
         $session->set(self::SESSION_OUTGOING_QUEUE, []);
         $session->save();
@@ -386,7 +384,7 @@ public function consumeOutgoingMessages(Uuid $sessionId): array
      */
     public function checkResponse(int $requestId, Uuid $sessionId): Response|Error|null
     {
-        $session = $this->sessionFactory->createWithId($sessionId, $this->sessionStore);
+        $session = $this->sessionManager->createWithId($sessionId);
         $responseData = $session->get(self::SESSION_RESPONSES.".{$requestId}");
 
         if (null === $responseData) {
@@ -428,7 +426,7 @@ public function checkResponse(int $requestId, Uuid $sessionId): Response|Error|n
      */
     public function getPendingRequests(Uuid $sessionId): array
     {
-        $session = $this->sessionFactory->createWithId($sessionId, $this->sessionStore);
+        $session = $this->sessionManager->createWithId($sessionId);
 
         return $session->get(self::SESSION_PENDING_REQUESTS, []);
     }
@@ -455,7 +453,7 @@ public function handleFiberYield(mixed $yieldedValue, ?Uuid $sessionId): void
             return;
         }
 
-        $session = $this->sessionFactory->createWithId($sessionId, $this->sessionStore);
+        $session = $this->sessionManager->createWithId($sessionId);
 
         $payloadSessionId = $yieldedValue['session_id'] ?? null;
         if (\is_string($payloadSessionId) && $payloadSessionId !== $sessionId->toRfc4122()) {
@@ -539,7 +537,7 @@ private function resolveSession(TransportInterface $transport, ?Uuid $sessionId,
                 return null;
             }
 
-            $session = $this->sessionFactory->create($this->sessionStore);
+            $session = $this->sessionManager->create();
             $this->logger->debug('Created new session for initialize', [
                 'session_id' => $session->getId()->toRfc4122(),
             ]);
@@ -556,41 +554,22 @@ private function resolveSession(TransportInterface $transport, ?Uuid $sessionId,
             return null;
         }
 
-        if (!$this->sessionStore->exists($sessionId)) {
+        if (!$this->sessionManager->exists($sessionId)) {
             $error = Error::forInvalidRequest('Session not found or has expired.');
             $this->sendResponse($transport, $error, null, ['status_code' => 404]);
 
             return null;
         }
 
-        return $this->sessionFactory->createWithId($sessionId, $this->sessionStore);
-    }
-
-    /**
-     * Run garbage collection on expired sessions.
-     * Uses the session store's internal TTL configuration.
-     */
-    private function gcSessions(): void
-    {
-        if (random_int(0, 100) > 1) {
-            return;
-        }
-
-        $deletedSessions = $this->sessionStore->gc();
-        if (!empty($deletedSessions)) {
-            $this->logger->debug('Garbage collected expired sessions.', [
-                'count' => \count($deletedSessions),
-                'session_ids' => array_map(static fn (Uuid $id) => $id->toRfc4122(), $deletedSessions),
-            ]);
-        }
+        return $this->sessionManager->createWithId($sessionId);
     }
 
     /**
      * Destroy a specific session.
      */
     public function destroySession(Uuid $sessionId): void
     {
-        $this->sessionStore->destroy($sessionId);
+        $this->sessionManager->destroy($sessionId);
         $this->logger->info('Session destroyed.', ['session_id' => $sessionId->toRfc4122()]);
     }
 }

src/Server/Session/Session.php

@@ -44,11 +44,6 @@ public function getId(): Uuid
         return $this->id;
     }
 
-    public function getStore(): SessionStoreInterface
-    {
-        return $this->store;
-    }
-
     public function save(): bool
     {
         return $this->store->write($this->id, json_encode($this->data, \JSON_THROW_ON_ERROR));

src/Server/Session/SessionFactory.php

@@ -77,9 +77,4 @@ public function all(): array;
      * @param array<string, mixed> $attributes
      */
     public function hydrate(array $attributes): void;
-
-    /**
-     * Get the session store instance.
-     */
-    public function getStore(): SessionStoreInterface;
 }

src/Server/Session/SessionInterface.php

@@ -0,0 +1,69 @@
+<?php
+
+/*
+ * This file is part of the official PHP MCP SDK.
+ *
+ * A collaboration between Symfony and the PHP Foundation.
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Mcp\Server\Session;
+
+use Psr\Log\LoggerInterface;
+use Psr\Log\NullLogger;
+use Symfony\Component\Uid\Uuid;
+
+/**
+ * Default implementation of SessionManagerInterface.
+ *
+ * @author Kyrian Obikwelu <koshnawaza@gmail.com>
+ */
+class SessionManager implements SessionManagerInterface
+{
+    public function __construct(
+        private readonly SessionStoreInterface $store,
+        private readonly LoggerInterface $logger = new NullLogger(),
+    ) {
+    }
+
+    public function create(): SessionInterface
+    {
+        return new Session($this->store, Uuid::v4());
+    }
+
+    public function createWithId(Uuid $id): SessionInterface
+    {
+        return new Session($this->store, $id);
+    }
+
+    public function exists(Uuid $id): bool
+    {
+        return $this->store->exists($id);
+    }
+
+    public function destroy(Uuid $id): bool
+    {
+        return $this->store->destroy($id);
+    }
+
+    /**
+     * Run garbage collection on expired sessions.
+     * Uses the session store's internal TTL configuration.
+     */
+    public function gc(): void
+    {
+        if (random_int(0, 100) > 1) {
+            return;
+        }
+
+        $deletedSessions = $this->store->gc();
+        if (!empty($deletedSessions)) {
+            $this->logger->debug('Garbage collected expired sessions.', [
+                'count' => \count($deletedSessions),
+                'session_ids' => array_map(static fn (Uuid $id) => $id->toRfc4122(), $deletedSessions),
+            ]);
+        }
+    }
+}

src/Server/Session/SessionManager.php

@@ -19,17 +19,29 @@
  *
  * @author Kyrian Obikwelu <koshnawaza@gmail.com>
  */
-interface SessionFactoryInterface
+interface SessionManagerInterface
 {
     /**
      * Creates a new session with an auto-generated UUID.
      * This is the standard factory method for creating sessions.
      */
-    public function create(SessionStoreInterface $store): SessionInterface;
+    public function create(): SessionInterface;
 
     /**
      * Creates a session with a specific UUID.
      * Use this when you need to reconstruct a session with a known ID.
      */
-    public function createWithId(Uuid $id, SessionStoreInterface $store): SessionInterface;
+    public function createWithId(Uuid $id): SessionInterface;
+
+    /**
+     * Checks if a session with the given UUID exists.
+     */
+    public function exists(Uuid $id): bool;
+
+    /**
+     * Destroys the session with the given UUID.
+     */
+    public function destroy(Uuid $id): bool;
+
+    public function gc(): void;
 }