@cachly-dev/mcp-server 0.10.47 → 0.10.48

package/src/index.ts

@@ -2780,6 +2780,29 @@ if (!process.env.CACHLY_NO_UPDATE_CHECK) {
 
 const httpPort = process.env.PORT ? parseInt(process.env.PORT, 10) : undefined;
 
+// ── Per-request MCP Server factory (HTTP / Smithery stateless mode) ──────────
+// SDK ≥1.9 forbids reusing a stateless transport across requests.
+// Solution: create a fresh Server+Transport per /mcp request.
+// The module-level `server` below is used for stdio mode only.
+function createHttpMcpServer(): Server {
+  const srv = new Server(
+    { name: 'cachly-mcp', version: CURRENT_VERSION },
+    { capabilities: { tools: {} } }
+  );
+  srv.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: TOOLS }));
+  srv.setRequestHandler(CallToolRequestSchema, async (request) => {
+    const { name, arguments: args } = request.params;
+    try {
+      const text = await handleTool(name, (args ?? {}) as Record<string, unknown>);
+      return { content: [{ type: 'text', text }] };
+    } catch (err) {
+      if (err instanceof McpError) throw err;
+      throw new McpError(ErrorCode.InternalError, (err as Error).message);
+    }
+  });
+  return srv;
+}
+
 if (httpPort) {
   // ── HTTP mode (Streamable HTTP transport) ───────────────────────────────
   // Used for Smithery URL deployment: PORT=3000 node dist/index.js
@@ -2788,15 +2811,19 @@ if (httpPort) {
   //   2. Smithery config: ?config=base64url({CACHLY_JWT, CACHLY_BRAIN_INSTANCE_ID, ...})
   // Falls back to module-level env-derived values when neither is provided.
   const { createServer } = await import('node:http');
-  const transport = new StreamableHTTPServerTransport({ sessionIdGenerator: undefined });
-  await server.connect(transport);
 
   function extractReqCtx(req: import('node:http').IncomingMessage, url: URL): ReqCtx {
     let jwtVal = '';
     let instId = '';
     const auth = req.headers['authorization'];
-    if (typeof auth === 'string' && auth.toLowerCase().startsWith('bearer ')) {
-      jwtVal = auth.slice(7).trim();
+    if (typeof auth === 'string' && auth.trim()) {
+      const a = auth.trim();
+      jwtVal = a.toLowerCase().startsWith('bearer ') ? a.slice(7).trim() : a;
+    }
+    // Fallback: raw JWT in custom header (Smithery "header" transport without Bearer prefix)
+    if (!jwtVal) {
+      const rawJwt = req.headers['cachly_jwt'] ?? req.headers['cachly-jwt'] ?? req.headers['x-cachly-jwt'] ?? req.headers['x-api-key'];
+      if (typeof rawJwt === 'string') jwtVal = rawJwt.trim();
     }
     const hdrInst = req.headers['x-cachly-instance-id'];
     if (typeof hdrInst === 'string') instId = hdrInst.trim();
@@ -2811,6 +2838,15 @@ if (httpPort) {
         if (!instId && typeof json.CACHLY_BRAIN_INSTANCE_ID === 'string') instId = json.CACHLY_BRAIN_INSTANCE_ID;
       } catch { /* malformed config — ignore, fall back to globals */ }
     }
+    // Direct query params (Smithery "query" transport, manual clients, etc.)
+    if (!jwtVal) {
+      const q = url.searchParams.get('CACHLY_JWT') ?? url.searchParams.get('cachly_jwt') ?? url.searchParams.get('api_key');
+      if (q) jwtVal = q.trim();
+    }
+    if (!instId) {
+      const q = url.searchParams.get('CACHLY_BRAIN_INSTANCE_ID') ?? url.searchParams.get('cachly_brain_instance_id') ?? url.searchParams.get('instance_id');
+      if (q) instId = q.trim();
+    }
     return { jwt: jwtVal, instanceId: instId };
   }
 
@@ -2830,16 +2866,51 @@ if (httpPort) {
       }));
       return;
     }
+    // Static server card — lets Smithery skip live scanning (avoids auth complexity).
+    if (url.pathname === '/.well-known/mcp/server-card.json') {
+      const card = {
+        name: 'cachly AI Brain',
+        version: CURRENT_VERSION,
+        description: 'Persistent AI memory for Claude Code, Cursor, Copilot, Windsurf & friends. Remembers every lesson, fix, and architecture decision forever.',
+        transport: { type: 'streamable-http', url: 'https://mcp.cachly.dev/mcp' },
+        capabilities: { tools: {} },
+      };
+      res.writeHead(200, { 'Content-Type': 'application/json', 'Access-Control-Allow-Origin': '*' });
+      res.end(JSON.stringify(card));
+      return;
+    }
     if (url.pathname === '/mcp' || url.pathname === '/') {
+      // Handle CORS preflight
+      if (req.method === 'OPTIONS') {
+        res.writeHead(204, {
+          'Access-Control-Allow-Origin': '*',
+          'Access-Control-Allow-Methods': 'GET, POST, DELETE, OPTIONS',
+          'Access-Control-Allow-Headers': 'Authorization, Content-Type, Mcp-Session-Id, X-Cachly-Instance-Id, cachly_jwt, cachly-jwt, x-cachly-jwt, x-api-key',
+        });
+        res.end();
+        return;
+      }
       const ctx = extractReqCtx(req, url);
-      reqCtx.run(ctx, () => {
-        transport.handleRequest(req, res).catch((err) => {
-          process.stderr.write(`cachly-mcp HTTP handler error: ${(err as Error).message}\n`);
-          if (!res.headersSent) {
-            res.writeHead(500, { 'Content-Type': 'application/json' });
-            res.end(JSON.stringify({ error: 'internal_error' }));
-          }
+      // Create a fresh Server+Transport for each request (stateless multi-tenant mode).
+      // SDK ≥1.9 throws if a stateless transport is reused across requests.
+      const reqServer = createHttpMcpServer();
+      const reqTransport = new StreamableHTTPServerTransport({ sessionIdGenerator: undefined });
+      reqServer.connect(reqTransport).then(() => {
+        reqCtx.run(ctx, () => {
+          reqTransport.handleRequest(req, res).catch((err) => {
+            process.stderr.write(`cachly-mcp HTTP handler error: ${(err as Error).message}\n`);
+            if (!res.headersSent) {
+              res.writeHead(500, { 'Content-Type': 'application/json' });
+              res.end(JSON.stringify({ error: 'internal_error' }));
+            }
+          });
         });
+      }).catch((err) => {
+        process.stderr.write(`cachly-mcp connect error: ${(err as Error).message}\n`);
+        if (!res.headersSent) {
+          res.writeHead(500, { 'Content-Type': 'application/json' });
+          res.end(JSON.stringify({ error: 'internal_error' }));
+        }
       });
       return;
     }

package/src/search.ts

@@ -384,7 +384,7 @@ function hindiLightStem(word: string): string {
  *  настройки → настройк  (genitive plural)
  */
 function russianLightStem(word: string): string {
-  let w = word;
+  const w = word;
   // Longest first to avoid partial stripping
   // Verb infinitives / gerunds
   if (w.endsWith('ывание') && w.length > 7) return w.slice(0, -6);
@@ -427,7 +427,7 @@ function russianLightStem(word: string): string {
  *  yüklemek → yükle  (-mek/-mak infinitive)
  */
 function turkishLightStem(word: string): string {
-  let w = word;
+  const w = word;
   // Suffixes longest-first
   if (w.endsWith('lardaki') && w.length > 7) return w.slice(0, -7);
   if (w.endsWith('lerdeki') && w.length > 7) return w.slice(0, -7);
@@ -475,7 +475,7 @@ function turkishLightStem(word: string): string {
  *  সমস্যাটি → সমস্যা  (-টি singular marker)
  */
 function bengaliLightStem(word: string): string {
-  let w = word;
+  const w = word;
   // Plural / collective markers (longest first)
   if (w.endsWith('\u0997\u09c1\u09b2\u09cb') && w.length > 5) return w.slice(0, -4); // গুলো (-gulo plural)
   if (w.endsWith('\u0997\u09c1\u09b2\u09bf') && w.length > 5) return w.slice(0, -4); // গুলি (-guli plural)