@contentrain/mcp 1.2.1 → 1.3.0

package/dist/server/http/index.mjs

@@ -0,0 +1,137 @@
+import "../../contracts-DfL0BfrD.mjs";
+import "../../ops-DjEWi5Wa.mjs";
+import "../../serialization-B1CEzR4H.mjs";
+import "../../fs-DLbVB-Ek.mjs";
+import "../../config-BIl5Ybj0.mjs";
+import "../../model-manager-BhLsUgaB.mjs";
+import "../../meta-manager-C900rEyG.mjs";
+import "../../context-J0OU9Nfp.mjs";
+import "../../id-CIO9s0x_.mjs";
+import "../../transaction-DgkNgWSI.mjs";
+import "../../local-DvP4Y4T-.mjs";
+import "../../detect-DL9mFmaS.mjs";
+import "../../branch-lifecycle-CFVpTpNT.mjs";
+import "../../annotations-Clhbw2lh.mjs";
+import { t as createServer } from "../../server-B1OJrUQ9.mjs";
+import "../../validator-B0nNRFeU.mjs";
+import "../../scan-config-jC6XmiqF.mjs";
+import "../../graph-builder-DXv2JEp-.mjs";
+import "../../scanner-DKMwc03k.mjs";
+import "../../tsx-parser-CQc6nr-o.mjs";
+import "../../apply-manager-D5ym5Jba.mjs";
+import "../../doctor-CgBoT6h1.mjs";
+import { randomUUID } from "node:crypto";
+import http from "node:http";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+//#region src/server/http/server.ts
+/**
+* Start an HTTP transport for the MCP server on top of the local project.
+*
+* Phase 5.2 scope: stateless, single-endpoint `POST /mcp`. The underlying
+* McpServer is the same one the stdio entry point uses, so every tool
+* registered for stdio is available over HTTP with no duplication. Only
+* the transport swaps out.
+*
+* Auth is a simple opaque Bearer token. When `authToken` is supplied, any
+* request without the exact `Authorization: Bearer <token>` header gets
+* a 401 before the MCP transport sees it. Multi-tenant auth (per-project
+* API keys, GitHub App scopes) is Studio's concern — MCP stays minimal.
+*
+* GitHubProvider HTTP routing will land in phase 5.3 together with the
+* tool-handler provider abstraction; today the HTTP server still drives
+* a LocalProvider under the hood.
+*/
+async function startHttpMcpServer(opts) {
+	return startHttpMcpServerInternal({
+		mcp: createServer(opts.projectRoot),
+		port: opts.port,
+		host: opts.host,
+		authToken: opts.authToken,
+		path: opts.path
+	});
+}
+/**
+* Variant of {@link startHttpMcpServer} that accepts a pre-built provider
+* (and an optional `projectRoot`). This is the phase-5.3 entry point that
+* lets HTTP-hosted MCP route tool calls to a non-Local provider — e.g. a
+* `GitHubProvider` shared across many projects. Read-only tools work out
+* of the box; write-path tools return `capability_required: localWorktree`
+* when no `projectRoot` is supplied.
+*/
+async function startHttpMcpServerWith(opts) {
+	return startHttpMcpServerInternal({
+		mcp: createServer({
+			provider: opts.provider,
+			projectRoot: opts.projectRoot
+		}),
+		port: opts.port,
+		host: opts.host,
+		authToken: opts.authToken,
+		path: opts.path
+	});
+}
+async function startHttpMcpServerInternal(input) {
+	const { mcp } = input;
+	const transport = new StreamableHTTPServerTransport({ sessionIdGenerator: () => randomUUID() });
+	await mcp.connect(transport);
+	const mountPath = input.path ?? "/mcp";
+	const host = input.host ?? "127.0.0.1";
+	const server = http.createServer((req, res) => {
+		handleRequest(req, res, {
+			transport,
+			mountPath,
+			authToken: input.authToken
+		});
+	});
+	await new Promise((resolve, reject) => {
+		server.once("error", reject);
+		server.listen(input.port, host, () => {
+			server.off("error", reject);
+			resolve();
+		});
+	});
+	return {
+		server,
+		mcp,
+		url: `http://${host}:${server.address().port}${mountPath}`,
+		close: async () => {
+			await new Promise((resolve, reject) => {
+				server.close((err) => err ? reject(err) : resolve());
+			});
+			await transport.close().catch(() => {});
+			await mcp.close().catch(() => {});
+		}
+	};
+}
+async function handleRequest(req, res, ctx) {
+	if (req.method !== "POST" && req.method !== "GET" && req.method !== "DELETE") {
+		writeJson(res, 405, { error: "Method Not Allowed" });
+		return;
+	}
+	if (!req.url || !req.url.startsWith(ctx.mountPath)) {
+		writeJson(res, 404, { error: "Not Found" });
+		return;
+	}
+	if (ctx.authToken) {
+		if (req.headers.authorization !== `Bearer ${ctx.authToken}`) {
+			writeJson(res, 401, { error: "Unauthorized" });
+			return;
+		}
+	}
+	try {
+		await ctx.transport.handleRequest(req, res);
+	} catch (error) {
+		if (!res.headersSent) writeJson(res, 500, {
+			error: "Internal Server Error",
+			message: error instanceof Error ? error.message : String(error)
+		});
+	}
+}
+function writeJson(res, status, body) {
+	res.writeHead(status, { "Content-Type": "application/json" });
+	res.end(JSON.stringify(body));
+}
+//#endregion
+export { startHttpMcpServer, startHttpMcpServerWith };
+
+//# sourceMappingURL=index.mjs.map

package/dist/server/http/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":["createMcpServer"],"sources":["../../../src/server/http/server.ts"],"sourcesContent":["import http from 'node:http'\nimport { randomUUID } from 'node:crypto'\nimport type { AddressInfo } from 'node:net'\nimport type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js'\nimport { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js'\nimport { createServer as createMcpServer, type ToolProvider } from '../../server.js'\n\nexport interface HttpMcpServerOptions {\n  /** Project root the MCP server operates against (LocalProvider path). */\n  projectRoot: string\n  /** Optional Bearer token — when set, requests must send `Authorization: Bearer <token>`. */\n  authToken?: string\n  /** Mount path for the MCP JSON-RPC endpoint. Defaults to `/mcp`. */\n  path?: string\n}\n\nexport interface HttpMcpServerProviderOptions {\n  /** Pre-built content provider (GitHubProvider, a mock, etc.). */\n  provider: ToolProvider\n  /** Local project root when the provider is a LocalProvider; optional otherwise. */\n  projectRoot?: string\n  /** Optional Bearer token — when set, requests must send `Authorization: Bearer <token>`. */\n  authToken?: string\n  /** Mount path for the MCP JSON-RPC endpoint. Defaults to `/mcp`. */\n  path?: string\n}\n\nexport interface HttpMcpServerHandle {\n  server: http.Server\n  mcp: McpServer\n  url: string\n  close: () => Promise<void>\n}\n\n/**\n * Start an HTTP transport for the MCP server on top of the local project.\n *\n * Phase 5.2 scope: stateless, single-endpoint `POST /mcp`. The underlying\n * McpServer is the same one the stdio entry point uses, so every tool\n * registered for stdio is available over HTTP with no duplication. Only\n * the transport swaps out.\n *\n * Auth is a simple opaque Bearer token. When `authToken` is supplied, any\n * request without the exact `Authorization: Bearer <token>` header gets\n * a 401 before the MCP transport sees it. Multi-tenant auth (per-project\n * API keys, GitHub App scopes) is Studio's concern — MCP stays minimal.\n *\n * GitHubProvider HTTP routing will land in phase 5.3 together with the\n * tool-handler provider abstraction; today the HTTP server still drives\n * a LocalProvider under the hood.\n */\nexport async function startHttpMcpServer(\n  opts: HttpMcpServerOptions & { port: number, host?: string },\n): Promise<HttpMcpServerHandle> {\n  return startHttpMcpServerInternal({\n    mcp: createMcpServer(opts.projectRoot),\n    port: opts.port,\n    host: opts.host,\n    authToken: opts.authToken,\n    path: opts.path,\n  })\n}\n\n/**\n * Variant of {@link startHttpMcpServer} that accepts a pre-built provider\n * (and an optional `projectRoot`). This is the phase-5.3 entry point that\n * lets HTTP-hosted MCP route tool calls to a non-Local provider — e.g. a\n * `GitHubProvider` shared across many projects. Read-only tools work out\n * of the box; write-path tools return `capability_required: localWorktree`\n * when no `projectRoot` is supplied.\n */\nexport async function startHttpMcpServerWith(\n  opts: HttpMcpServerProviderOptions & { port: number, host?: string },\n): Promise<HttpMcpServerHandle> {\n  return startHttpMcpServerInternal({\n    mcp: createMcpServer({ provider: opts.provider, projectRoot: opts.projectRoot }),\n    port: opts.port,\n    host: opts.host,\n    authToken: opts.authToken,\n    path: opts.path,\n  })\n}\n\nasync function startHttpMcpServerInternal(input: {\n  mcp: McpServer\n  port: number\n  host?: string\n  authToken?: string\n  path?: string\n}): Promise<HttpMcpServerHandle> {\n  const { mcp } = input\n  const transport = new StreamableHTTPServerTransport({\n    sessionIdGenerator: () => randomUUID(),\n  })\n  await mcp.connect(transport)\n\n  const mountPath = input.path ?? '/mcp'\n  const host = input.host ?? '127.0.0.1'\n\n  const server = http.createServer((req, res) => {\n    void handleRequest(req, res, { transport, mountPath, authToken: input.authToken })\n  })\n\n  await new Promise<void>((resolve, reject) => {\n    server.once('error', reject)\n    server.listen(input.port, host, () => {\n      server.off('error', reject)\n      resolve()\n    })\n  })\n\n  const address = server.address() as AddressInfo\n  const url = `http://${host}:${address.port}${mountPath}`\n\n  return {\n    server,\n    mcp,\n    url,\n    close: async () => {\n      await new Promise<void>((resolve, reject) => {\n        server.close(err => (err ? reject(err) : resolve()))\n      })\n      await transport.close().catch(() => { /* best-effort */ })\n      await mcp.close().catch(() => { /* best-effort */ })\n    },\n  }\n}\n\nasync function handleRequest(\n  req: http.IncomingMessage,\n  res: http.ServerResponse,\n  ctx: { transport: StreamableHTTPServerTransport, mountPath: string, authToken?: string },\n): Promise<void> {\n  if (req.method !== 'POST' && req.method !== 'GET' && req.method !== 'DELETE') {\n    writeJson(res, 405, { error: 'Method Not Allowed' })\n    return\n  }\n\n  if (!req.url || !req.url.startsWith(ctx.mountPath)) {\n    writeJson(res, 404, { error: 'Not Found' })\n    return\n  }\n\n  if (ctx.authToken) {\n    const header = req.headers.authorization\n    if (header !== `Bearer ${ctx.authToken}`) {\n      writeJson(res, 401, { error: 'Unauthorized' })\n      return\n    }\n  }\n\n  try {\n    await ctx.transport.handleRequest(req, res)\n  } catch (error) {\n    if (!res.headersSent) {\n      writeJson(res, 500, {\n        error: 'Internal Server Error',\n        message: error instanceof Error ? error.message : String(error),\n      })\n    }\n  }\n}\n\nfunction writeJson(res: http.ServerResponse, status: number, body: unknown): void {\n  res.writeHead(status, { 'Content-Type': 'application/json' })\n  res.end(JSON.stringify(body))\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmDA,eAAsB,mBACpB,MAC8B;AAC9B,QAAO,2BAA2B;EAChC,KAAKA,aAAgB,KAAK,YAAY;EACtC,MAAM,KAAK;EACX,MAAM,KAAK;EACX,WAAW,KAAK;EAChB,MAAM,KAAK;EACZ,CAAC;;;;;;;;;;AAWJ,eAAsB,uBACpB,MAC8B;AAC9B,QAAO,2BAA2B;EAChC,KAAKA,aAAgB;GAAE,UAAU,KAAK;GAAU,aAAa,KAAK;GAAa,CAAC;EAChF,MAAM,KAAK;EACX,MAAM,KAAK;EACX,WAAW,KAAK;EAChB,MAAM,KAAK;EACZ,CAAC;;AAGJ,eAAe,2BAA2B,OAMT;CAC/B,MAAM,EAAE,QAAQ;CAChB,MAAM,YAAY,IAAI,8BAA8B,EAClD,0BAA0B,YAAY,EACvC,CAAC;AACF,OAAM,IAAI,QAAQ,UAAU;CAE5B,MAAM,YAAY,MAAM,QAAQ;CAChC,MAAM,OAAO,MAAM,QAAQ;CAE3B,MAAM,SAAS,KAAK,cAAc,KAAK,QAAQ;AACxC,gBAAc,KAAK,KAAK;GAAE;GAAW;GAAW,WAAW,MAAM;GAAW,CAAC;GAClF;AAEF,OAAM,IAAI,SAAe,SAAS,WAAW;AAC3C,SAAO,KAAK,SAAS,OAAO;AAC5B,SAAO,OAAO,MAAM,MAAM,YAAY;AACpC,UAAO,IAAI,SAAS,OAAO;AAC3B,YAAS;IACT;GACF;AAKF,QAAO;EACL;EACA;EACA,KALU,UAAU,KAAK,GADX,OAAO,SAAS,CACM,OAAO;EAM3C,OAAO,YAAY;AACjB,SAAM,IAAI,SAAe,SAAS,WAAW;AAC3C,WAAO,OAAM,QAAQ,MAAM,OAAO,IAAI,GAAG,SAAS,CAAE;KACpD;AACF,SAAM,UAAU,OAAO,CAAC,YAAY,GAAsB;AAC1D,SAAM,IAAI,OAAO,CAAC,YAAY,GAAsB;;EAEvD;;AAGH,eAAe,cACb,KACA,KACA,KACe;AACf,KAAI,IAAI,WAAW,UAAU,IAAI,WAAW,SAAS,IAAI,WAAW,UAAU;AAC5E,YAAU,KAAK,KAAK,EAAE,OAAO,sBAAsB,CAAC;AACpD;;AAGF,KAAI,CAAC,IAAI,OAAO,CAAC,IAAI,IAAI,WAAW,IAAI,UAAU,EAAE;AAClD,YAAU,KAAK,KAAK,EAAE,OAAO,aAAa,CAAC;AAC3C;;AAGF,KAAI,IAAI;MACS,IAAI,QAAQ,kBACZ,UAAU,IAAI,aAAa;AACxC,aAAU,KAAK,KAAK,EAAE,OAAO,gBAAgB,CAAC;AAC9C;;;AAIJ,KAAI;AACF,QAAM,IAAI,UAAU,cAAc,KAAK,IAAI;UACpC,OAAO;AACd,MAAI,CAAC,IAAI,YACP,WAAU,KAAK,KAAK;GAClB,OAAO;GACP,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAChE,CAAC;;;AAKR,SAAS,UAAU,KAA0B,QAAgB,MAAqB;AAChF,KAAI,UAAU,QAAQ,EAAE,gBAAgB,oBAAoB,CAAC;AAC7D,KAAI,IAAI,KAAK,UAAU,KAAK,CAAC"}