@arii/boomtick-mcp 0.5.0 → 0.6.0

package/src/mcp/http.ts

@@ -0,0 +1,118 @@
+import http from "node:http";
+import crypto from "node:crypto";
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { SSEServerTransport } from "@modelcontextprotocol/sdk/server/sse.js";
+
+export interface HttpServerOptions {
+  port?: number;
+  bearerToken?: string;
+  mcpServer: Server;
+}
+
+export function createMcpHttpServer(options: HttpServerOptions) {
+  const {
+    port = 3000,
+    bearerToken = process.env.BOOMTICK_MCP_BEARER_TOKEN || process.env.MCP_BEARER_TOKEN || process.env.AUTH_TOKEN,
+    mcpServer,
+  } = options;
+
+  const transports = new Map<string, SSEServerTransport>();
+
+  const server = http.createServer(async (req, res) => {
+    // CORS Headers
+    res.setHeader("Access-Control-Allow-Origin", "*");
+    res.setHeader("Access-Control-Allow-Methods", "GET, POST, OPTIONS");
+    res.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization");
+
+    if (req.method === "OPTIONS") {
+      res.writeHead(204);
+      res.end();
+      return;
+    }
+
+    const url = new URL(req.url || "/", `http://${req.headers.host || "localhost"}`);
+
+    // Endpoint 1: OAuth Protected Resource metadata
+    if (url.pathname === "/.well-known/oauth-protected-resource" && req.method === "GET") {
+      res.writeHead(200, { "Content-Type": "application/json" });
+      res.end(
+        JSON.stringify({
+          resource: "mcp://boomtick-mcp",
+          "authorization_servers": [
+            process.env.MCP_OAUTH_AUTH_SERVER || "https://auth.boomtick.dev",
+          ],
+          scopes_supported: ["mcp:read", "mcp:write"],
+        })
+      );
+      return;
+    }
+
+    // Bearer Token Validation for SSE & Messages endpoints
+    if (url.pathname === "/sse" || url.pathname === "/messages") {
+      if (!bearerToken) {
+        res.writeHead(500, { "Content-Type": "application/json" });
+        res.end(JSON.stringify({ error: "Server misconfiguration: bearerToken is required for HTTP transport" }));
+        return;
+      }
+
+      const authHeader = req.headers.authorization;
+      const expectedAuth = `Bearer ${bearerToken}`;
+      const authBuffer = Buffer.from(authHeader || "");
+      const expectedBuffer = Buffer.from(expectedAuth);
+      const isMatch =
+        Boolean(authHeader) &&
+        authBuffer.length === expectedBuffer.length &&
+        crypto.timingSafeEqual(authBuffer, expectedBuffer);
+
+      if (!isMatch) {
+        res.writeHead(401, {
+          "Content-Type": "application/json",
+          "WWW-Authenticate": 'Bearer realm="boomtick-mcp", error="invalid_token"',
+        });
+        res.end(JSON.stringify({ error: "unauthorized", message: "Invalid or missing Bearer token" }));
+        return;
+      }
+    }
+
+    // Endpoint 2: SSE stream setup
+    if (url.pathname === "/sse" && req.method === "GET") {
+      const transport = new SSEServerTransport("/messages", res);
+      transports.set(transport.sessionId, transport);
+      transport.onclose = () => {
+        transports.delete(transport.sessionId);
+      };
+      await mcpServer.connect(transport);
+      return;
+    }
+
+    // Endpoint 3: POST messages
+    if (url.pathname === "/messages" && req.method === "POST") {
+      const sessionId = url.searchParams.get("sessionId");
+      const transport = sessionId ? transports.get(sessionId) : null;
+      if (transport) {
+        await transport.handlePostMessage(req, res);
+      } else {
+        res.writeHead(400, { "Content-Type": "application/json" });
+        res.end(JSON.stringify({ error: "Session not found or expired" }));
+      }
+      return;
+    }
+
+    res.writeHead(404, { "Content-Type": "application/json" });
+    res.end(JSON.stringify({ error: "Not found" }));
+  });
+
+  return {
+    server,
+    listen: (customPort?: number) =>
+      new Promise<number>((resolve) => {
+        const p = customPort ?? port;
+        server.listen(p, () => {
+          const addr = server.address();
+          const actualPort = typeof addr === "object" && addr ? addr.port : p;
+          console.error(`Boomtick MCP Server running on HTTP port ${actualPort}`);
+          resolve(actualPort);
+        });
+      }),
+  };
+}

package/src/mcp/server.test.ts

@@ -104,9 +104,32 @@ describe("BoomtickMCPServer", () => {
       expect(result.resources).toBeDefined();
       expect(Array.isArray(result.resources)).toBe(true);
     });
+
+    it("should return resource templates list", async () => {
+      const handler = requestHandlers.get("resources/templates/list");
+      expect(handler).toBeDefined();
+      const result = await handler!({ method: "resources/templates/list" });
+      expect(result.resourceTemplates).toBeDefined();
+      expect(Array.isArray(result.resourceTemplates)).toBe(true);
+    });
   });
 
   describe("ReadResource", () => {
+    it("should handle mcp://workspace/agent-contract", async () => {
+      const handler = requestHandlers.get("resources/read");
+      vi.mocked(fs.readFile).mockResolvedValue("# Agent Contract\nRule 1");
+
+      const result = await handler!({
+        method: "resources/read",
+        params: { uri: "mcp://workspace/agent-contract" },
+      });
+
+      expect(fs.readFile).toHaveBeenCalledWith("/mock/repo/.agents/AGENT_CONTRACT.md", "utf-8");
+      expect(result).toEqual({
+        contents: [{ uri: "mcp://workspace/agent-contract", mimeType: "text/markdown", text: "# Agent Contract\nRule 1" }],
+      });
+    });
+
     it("should handle repo://package-json", async () => {
       const handler = requestHandlers.get("resources/read");
       vi.mocked(fs.readFile).mockResolvedValue('{"name": "test"}');
@@ -196,6 +219,7 @@ describe("BoomtickMCPServer", () => {
 
       expect(result).toEqual({
         content: [{ type: "text", text: JSON.stringify({ status: "ok" }, null, 2) }],
+        structuredContent: { status: "ok" },
       });
     });
 

package/src/mcp/server.ts

@@ -4,13 +4,14 @@ import {
   CallToolRequestSchema,
   ListToolsRequestSchema,
   ListResourcesRequestSchema,
+  ListResourceTemplatesRequestSchema,
   ReadResourceRequestSchema,
   ListPromptsRequestSchema,
   GetPromptRequestSchema,
 } from "@modelcontextprotocol/sdk/types.js";
 import { config } from "../config.js";
 import { createSuccessResult, createErrorResult } from "../lib/result.js";
-import { MCP_TOOLS, MCP_PROMPTS, MCP_RESOURCES } from "./definitions.js";
+import { MCP_TOOLS, MCP_PROMPTS, MCP_RESOURCES, MCP_RESOURCE_TEMPLATES } from "./definitions.js";
 import { normalizeArguments } from "../lib/param_utils.js";
 import { healthHandler, HealthCheckInputSchema } from "./tools.js";
 import { searchOpenPrsHandler, SearchOpenPrsInputSchema } from "../tools/github.search_open_prs.js";
@@ -52,6 +53,7 @@ import path from "path";
 
 import { spawnSync } from "child_process";
 import { fileURLToPath } from "url";
+import { createMcpHttpServer } from "./http.js";
 
 export class BoomtickMCPServer {
   private server: Server;
@@ -117,29 +119,55 @@ export class BoomtickMCPServer {
       };
     });
 
+    this.server.setRequestHandler(ListResourceTemplatesRequestSchema, async () => {
+      return {
+        resourceTemplates: MCP_RESOURCE_TEMPLATES,
+      };
+    });
+
     this.server.setRequestHandler(ReadResourceRequestSchema, async (request) => {
       const uri = request.params.uri;
-      if (uri === "repo://package-json") {
+      if (
+        uri === "mcp://workspace/agent-contract" ||
+        uri === "mcp://workspace/agent_contract" ||
+        uri === "repo://agent-contract"
+      ) {
+        const contractPath = path.join(config.repoPath, ".agents", "AGENT_CONTRACT.md");
+        const content = await fs.readFile(contractPath, "utf-8");
+        return {
+          contents: [{ uri, mimeType: "text/markdown", text: content }],
+        };
+      }
+      if (
+        uri === "mcp://git/changed-files" ||
+        uri === "repo://changed-files"
+      ) {
+        const changedFiles = await getChangedFilesHandler(GetChangedFilesInputSchema.parse({}));
+        return {
+          contents: [{ uri, mimeType: "application/json", text: JSON.stringify(changedFiles, null, 2) }],
+        };
+      }
+      if (uri === "repo://package-json" || uri === "mcp://workspace/package-json") {
         const content = await fs.readFile(path.join(config.repoPath, "package.json"), "utf-8");
         return {
           contents: [{ uri, mimeType: "application/json", text: content }],
         };
       }
-      if (uri === "repo://design-tokens") {
+      if (uri === "repo://design-tokens" || uri === "mcp://workspace/design-tokens") {
         const tokensPath = path.join(config.repoPath, "src/styles/design-tokens.ts");
         const content = await fs.readFile(tokensPath, "utf-8");
         return {
           contents: [{ uri, mimeType: "text/typescript", text: content }],
         };
       }
-      if (uri.startsWith("repo://diff/")) {
+      if (uri.startsWith("mcp://git/diff/") || uri.startsWith("repo://diff/")) {
         const prNumber = parseInt(uri.split("/").pop() || "");
         const diff = await getPrDiffHandler({ prNumber });
         return {
           contents: [{ uri, mimeType: "text/plain", text: diff.diffText }],
         };
       }
-      if (uri.startsWith("repo://ci/")) {
+      if (uri.startsWith("mcp://ci/logs/") || uri.startsWith("repo://ci/")) {
         const prNumber = parseInt(uri.split("/").pop() || "");
         const logs = await readCiLogsHandler({ prNumber });
         return {
@@ -263,7 +291,7 @@ export class BoomtickMCPServer {
       }
     });
   }
-  async run() {
+  private prepareEnvironmentAndPreflight() {
     const projectRoot = config.repoPath || process.cwd();
     const homeDir = process.env.HOME || "";
     const extraPaths = [];
@@ -315,9 +343,9 @@ export class BoomtickMCPServer {
     // 3. SAFE REPOSITORY RESOLUTION
     const repoPath = config.repoPath || projectRoot;
 
-    // 4. SECURE, UNIX-ONLY PRE-FLIGHT CHECK FOR TD-CLI
+    // 4. SECURE, UNIX-ONLY PRE-FLIGHT CHECK FOR TD
     try {
-      const result = spawnSync("td-cli", ["doctor"], { 
+      const result = spawnSync("td", ["doctor"], { 
         encoding: "utf-8", 
         cwd: repoPath,
         shell: false // Explicitly disabled to clear Semgrep rules
@@ -331,16 +359,39 @@ export class BoomtickMCPServer {
         console.error("status:", result.status);
         console.error("stdout:", result.stdout);
         console.error("stderr:", result.stderr);
-        throw new Error(`td-cli doctor returned exit code: ${result.status}`);
+        throw new Error(`td doctor returned exit code: ${result.status}`);
       }
 
-      console.error("✅ td-cli verified on PATH securely");
+      console.error("✅ td verified on PATH securely");
     } catch (error) {
-      console.error("❌ Fatal: td-cli is not resolvable on PATH. MCP tools will fail.");
+      console.error("❌ Fatal: td is not resolvable on PATH. MCP tools will fail.");
       console.error("Please ensure the project is installed: pip install -e .");
-      console.error("❌ Fatal: td-cli pre-flight check failed:", error instanceof Error ? error.message : String(error));
+      console.error("❌ Fatal: td pre-flight check failed:", error instanceof Error ? error.message : String(error));
       process.exit(1);
     }
+  }
+
+  async startHttp(port = parseInt(process.env.PORT || process.env.HTTP_PORT || "3000", 10), bearerToken?: string) {
+    this.prepareEnvironmentAndPreflight();
+    const mcpHttp = createMcpHttpServer({ port, bearerToken, mcpServer: this.server });
+    return await mcpHttp.listen(port);
+  }
+
+  async run() {
+    this.prepareEnvironmentAndPreflight();
+
+    const isHttp =
+      process.env.MCP_TRANSPORT === "http" ||
+      process.argv.includes("--http") ||
+      (process.env.PORT !== undefined && !process.argv.includes("--stdio")) ||
+      (process.env.HTTP_PORT !== undefined && !process.argv.includes("--stdio"));
+
+    if (isHttp) {
+      const port = parseInt(process.env.PORT || process.env.HTTP_PORT || "3000", 10);
+      const mcpHttp = createMcpHttpServer({ port, mcpServer: this.server });
+      await mcpHttp.listen(port);
+      return;
+    }
 
     const transport = new StdioServerTransport();
     await this.server.connect(transport);

package/src/tools/contract.ts

@@ -847,6 +847,30 @@ export const CodeReviewResultJsonSchema = {
           "default": null,
           "title": "Line"
         },
+        "startLine": {
+          "anyOf": [
+            {
+              "type": "integer"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Startline"
+        },
+        "endLine": {
+          "anyOf": [
+            {
+              "type": "integer"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Endline"
+        },
         "snippet": {
           "anyOf": [
             {
@@ -882,6 +906,18 @@ export const CodeReviewResultJsonSchema = {
           ],
           "default": null,
           "title": "Counterexample"
+        },
+        "suggestion": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Suggestion"
         }
       },
       "required": [
@@ -1077,6 +1113,30 @@ export const CodeReviewStateJsonSchema = {
           "default": null,
           "title": "Line"
         },
+        "startLine": {
+          "anyOf": [
+            {
+              "type": "integer"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Startline"
+        },
+        "endLine": {
+          "anyOf": [
+            {
+              "type": "integer"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Endline"
+        },
         "snippet": {
           "anyOf": [
             {
@@ -1112,6 +1172,18 @@ export const CodeReviewStateJsonSchema = {
           ],
           "default": null,
           "title": "Counterexample"
+        },
+        "suggestion": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "title": "Suggestion"
         }
       },
       "required": [
@@ -2760,7 +2832,7 @@ export const ReviewCommentJsonSchema = {
   "type": "object"
 } as const;
 
-export const ReviewFindingSchema = z.object({ "id": z.string(), "file": z.string(), "issue": z.string(), "status": z.enum(["open","resolved"]), "confidence": z.enum(["high","medium","low"]), "severity": z.union([z.enum(["HIGH","MEDIUM","LOW"]), z.null()]).default(null), "line": z.union([z.number().int(), z.null()]).default(null), "snippet": z.union([z.string(), z.null()]).default(null), "fixSummary": z.union([z.string(), z.null()]).default(null), "counterexample": z.union([z.string(), z.null()]).default(null) });
+export const ReviewFindingSchema = z.object({ "id": z.string(), "file": z.string(), "issue": z.string(), "status": z.enum(["open","resolved"]), "confidence": z.enum(["high","medium","low"]), "severity": z.union([z.enum(["HIGH","MEDIUM","LOW"]), z.null()]).default(null), "line": z.union([z.number().int(), z.null()]).default(null), "startLine": z.union([z.number().int(), z.null()]).default(null), "endLine": z.union([z.number().int(), z.null()]).default(null), "snippet": z.union([z.string(), z.null()]).default(null), "fixSummary": z.union([z.string(), z.null()]).default(null), "counterexample": z.union([z.string(), z.null()]).default(null), "suggestion": z.union([z.string(), z.null()]).default(null) });
 
 export type ReviewFinding = z.infer<typeof ReviewFindingSchema>;
 
@@ -2824,6 +2896,30 @@ export const ReviewFindingJsonSchema = {
       "default": null,
       "title": "Line"
     },
+    "startLine": {
+      "anyOf": [
+        {
+          "type": "integer"
+        },
+        {
+          "type": "null"
+        }
+      ],
+      "default": null,
+      "title": "Startline"
+    },
+    "endLine": {
+      "anyOf": [
+        {
+          "type": "integer"
+        },
+        {
+          "type": "null"
+        }
+      ],
+      "default": null,
+      "title": "Endline"
+    },
     "snippet": {
       "anyOf": [
         {
@@ -2859,6 +2955,18 @@ export const ReviewFindingJsonSchema = {
       ],
       "default": null,
       "title": "Counterexample"
+    },
+    "suggestion": {
+      "anyOf": [
+        {
+          "type": "string"
+        },
+        {
+          "type": "null"
+        }
+      ],
+      "default": null,
+      "title": "Suggestion"
     }
   },
   "required": [

package/src/tools/github.checkout_branch.ts

@@ -7,7 +7,7 @@ export const CheckoutBranchInputSchema = z.object({
 });
 
 export async function checkoutBranchHandler(args: z.infer<typeof CheckoutBranchInputSchema>) {
-  const result = await runCommand("td-cli", ["gh", "checkout", args.branch], { cwd: args.worktreePath });
+  const result = await runCommand("td", ["gh", "checkout", args.branch], { cwd: args.worktreePath });
 
   if (result.exitCode !== 0) {
     throw new Error(`Failed to checkout branch ${args.branch}: ${result.stderr}`);

package/src/tools/github.comment_triage_summary.ts

@@ -7,7 +7,7 @@ export const CommentTriageSummaryInputSchema = z.object({
 });
 
 export async function commentTriageSummaryHandler(args: z.infer<typeof CommentTriageSummaryInputSchema>) {
-  const result = await runCommand("td-cli", [
+  const result = await runCommand("td", [
     "gh",
     "post-comment",
     "--pr", args.prNumber.toString(),

package/src/tools/github.create_issue.test.ts

@@ -23,11 +23,11 @@ describe("github.create_issue", () => {
       stderr: "",
       exitCode: 0,
       durationMs: 10,
-      command: "td-cli gh create-issue --title 'Test Issue' --body 'Test Body'"
+      command: "td gh create-issue --title 'Test Issue' --body 'Test Body'"
     });
 
     const result = await createIssueHandler({ title: "Test Issue", body: "Test Body", file: null, repo: null });
-    expect(shell.runCommand).toHaveBeenCalledWith("td-cli", [
+    expect(shell.runCommand).toHaveBeenCalledWith("td", [
       "gh",
       "create-issue",
       "--title",
@@ -58,7 +58,7 @@ describe("github.create_issue", () => {
       stderr: "",
       exitCode: 0,
       durationMs: 10,
-      command: "td-cli gh create-issue --title 'Cross Repo Issue' --body 'Body' --repo 'org/other-repo'"
+      command: "td gh create-issue --title 'Cross Repo Issue' --body 'Body' --repo 'org/other-repo'"
     });
 
     const result = await createIssueHandler({
@@ -68,7 +68,7 @@ describe("github.create_issue", () => {
       repo: "org/other-repo"
     });
 
-    expect(shell.runCommand).toHaveBeenCalledWith("td-cli", [
+    expect(shell.runCommand).toHaveBeenCalledWith("td", [
       "gh",
       "create-issue",
       "--title",
@@ -88,7 +88,7 @@ describe("github.create_issue", () => {
       stderr: "Auth failed",
       exitCode: 1,
       durationMs: 10,
-      command: "td-cli gh create-issue"
+      command: "td gh create-issue"
     });
 
     await expect(createIssueHandler({ title: "Test Issue", body: "Test Body", file: null, repo: null })).rejects.toThrow("Failed to create issue: Auth failed");
@@ -105,7 +105,7 @@ describe("github.create_issue", () => {
       stderr: "",
       exitCode: 0,
       durationMs: 10,
-      command: "td-cli gh create-issue"
+      command: "td gh create-issue"
     });
 
     await expect(createIssueHandler({ title: "Test Issue", body: "Test Body", file: null, repo: null })).rejects.toThrow("Failed to create issue: Repo not found");

package/src/tools/github.create_issue.ts

@@ -15,7 +15,7 @@ export async function createIssueHandler(args: z.input<typeof CreateIssueInputSc
   if (params.file) cmdArgs.push("--file", params.file);
   cmdArgs.push("--repo", targetRepo);
 
-  const result = await runCommand("td-cli", cmdArgs);
+  const result = await runCommand("td", cmdArgs);
 
   if (result.exitCode !== 0) {
     throw new Error(`Failed to create issue: ${sanitizeError(result.stderr)}`);

package/src/tools/github.create_pull_request.test.ts

@@ -21,7 +21,7 @@ describe("github.create_pull_request", () => {
       stderr: "",
       exitCode: 0,
       durationMs: 10,
-      command: "td-cli gh create-pr --title 'PR' --body 'Body' --head 'feature' --base 'main'"
+      command: "td gh create-pr --title 'PR' --body 'Body' --head 'feature' --base 'main'"
     });
 
     const result = await createPullRequestHandler({
@@ -50,7 +50,7 @@ describe("github.create_pull_request", () => {
       stderr: "",
       exitCode: 0,
       durationMs: 10,
-      command: "td-cli gh create-pr --title 'PR' --body 'Body' --head 'feature' --base 'main' --repo 'org/other-repo'"
+      command: "td gh create-pr --title 'PR' --body 'Body' --head 'feature' --base 'main' --repo 'org/other-repo'"
     });
 
     const result = await createPullRequestHandler({
@@ -62,7 +62,7 @@ describe("github.create_pull_request", () => {
       repo: "org/other-repo"
     });
 
-    expect(shell.runCommand).toHaveBeenCalledWith("td-cli", [
+    expect(shell.runCommand).toHaveBeenCalledWith("td", [
       "gh",
       "create-pr",
       "--title",
@@ -91,7 +91,7 @@ describe("github.create_pull_request", () => {
       stderr: "",
       exitCode: 0,
       durationMs: 10,
-      command: "td-cli gh create-pr"
+      command: "td gh create-pr"
     });
 
     await expect(createPullRequestHandler({

package/src/tools/github.create_pull_request.ts

@@ -23,7 +23,7 @@ export async function createPullRequestHandler(args: z.input<typeof CreatePullRe
     tdArgs.push("--draft");
   }
 
-  const result = await runCommand("td-cli", tdArgs);
+  const result = await runCommand("td", tdArgs);
 
   if (result.exitCode !== 0) {
     // Attempt to parse stdout as JSON to see if there's a structured error message

package/src/tools/github.get_pr.ts

@@ -12,7 +12,7 @@ export async function getPrHandler(args: z.infer<typeof GetPrInputSchema>) {
   const params = GetPrInputSchema.parse(args);
   const targetRepo = resolveRepo(params.repo);
 
-  const result = await runCommand("td-cli", ["gh", "view", params.prNumber.toString(), "--repo", targetRepo]);
+  const result = await runCommand("td", ["gh", "view", params.prNumber.toString(), "--repo", targetRepo]);
 
   if (result.exitCode !== 0) {
     throw new Error(`Failed to get PR details: ${sanitizeError(result.stderr)}`);

package/src/tools/github.get_pr_commits.ts

@@ -12,7 +12,7 @@ export async function getPrCommitsHandler(args: z.infer<typeof GetPrCommitsInput
   const params = GetPrCommitsInputSchema.parse(args);
   const targetRepo = resolveRepo(params.repo);
 
-  const result = await runCommand("td-cli", ["gh", "list-pr-commits", "--pr-number", params.prNumber.toString(), "--repo", targetRepo]);
+  const result = await runCommand("td", ["gh", "list-pr-commits", "--pr-number", params.prNumber.toString(), "--repo", targetRepo]);
 
   if (result.exitCode !== 0) {
     throw new Error(`Failed to list PR commits: ${sanitizeError(result.stderr)}`);

package/src/tools/github.get_pr_diff.ts

@@ -11,7 +11,7 @@ export async function getPrDiffHandler(args: z.infer<typeof GetPrDiffInputSchema
   const params = GetPrDiffInputSchema.parse(args);
   const targetRepo = resolveRepo(params.repo);
 
-  const result = await runCommand("td-cli", [
+  const result = await runCommand("td", [
     "gh", "pr-diff", params.prNumber.toString(), "--repo", targetRepo
   ]);