@pmoses-s1/s1-secops-mcp 1.3.0

package/deploy/caddy/Caddyfile.example

@@ -0,0 +1,110 @@
+# Caddyfile for s1-secops-mcp behind TLS on a private network.
+#
+# Two adjustments before using:
+#   1. Replace mcp.s1.internal with your DNS name (or Tailscale hostname).
+#   2. Decide on a TLS strategy:
+#        tls internal      Caddy's built-in CA (good for private networks;
+#                          distribute the root cert to clients).
+#        tls <email>       Let's Encrypt over HTTP-01 (needs public DNS + port 80).
+#        tls /path/to/cert.pem /path/to/key.pem
+#                          Bring your own cert from an internal PKI.
+#
+# AWS users: Let's Encrypt refuses to issue for *.amazonaws.com hostnames by
+# policy. When you use the `tls <email>` shorthand, Caddy automatically falls
+# back to ZeroSSL (also free, also publicly trusted, no policy block). The
+# end-state cert should have `issuer=ZeroSSL ECC DV SSL CA 2`. Port 80 must
+# be open in the SG for HTTP-01 to complete.
+#
+# DO NOT mix `tls <email>` with an `issuer acme { ... }` block: Caddy errors
+# with "cannot mix issuer subdirective with other issuer-specific subdirectives".
+# Pick one form: the email shorthand on its own line, OR a full `tls { ... }`
+# block with the email moved inside the `issuer acme` stanza. Not both.
+#
+# Why Caddy and not nginx? Caddy auto-renews certs, has zero config for SSE
+# streaming (flush_interval handled), and is one binary with no system Python
+# or Lua dependency. Equally valid alternative: nginx with the snippet at the
+# bottom of this file.
+
+mcp.s1.internal {
+    tls internal
+
+    # Strict bearer-token enforcement. The MCP server also enforces tokens
+    # when MCP_BEARER_TOKENS_FILE is set, but checking here too means we never
+    # forward unauthenticated traffic to the backend.
+    #
+    # To bypass Caddy auth (and rely solely on the MCP server's enforcement),
+    # delete the @authorized matcher and the handle blocks below, leaving only
+    # the reverse_proxy.
+    @anyAuth header_regexp Authorization "^Bearer\s+\S+$"
+
+    handle @anyAuth {
+        reverse_proxy 127.0.0.1:8765 {
+            # MCP responses are streamed; flush immediately so partial replies
+            # reach the client without sitting in a buffer.
+            flush_interval -1
+
+            # Reasonable timeouts for long-running PowerQueries (LRQ can take
+            # ~30s on heavy queries). Increase if you see 504s on big queries.
+            transport http {
+                read_timeout 90s
+                write_timeout 90s
+                response_header_timeout 30s
+            }
+        }
+    }
+
+    handle {
+        respond "unauthorized" 401 {
+            close
+        }
+    }
+
+    # Standard security headers.
+    header {
+        Strict-Transport-Security "max-age=31536000; includeSubDomains"
+        X-Content-Type-Options "nosniff"
+        Referrer-Policy "no-referrer"
+        -Server
+    }
+
+    # Healthcheck pass-through (no auth needed on /healthz).
+    @health path /healthz /health
+    handle @health {
+        reverse_proxy 127.0.0.1:8765
+    }
+
+    # Access log to journald via systemd-journald, structured JSON.
+    log {
+        output stdout
+        format json
+        level INFO
+    }
+}
+
+# ─── nginx equivalent (commented; copy if you prefer nginx) ──────────────────
+# upstream mcp_backend {
+#     server 127.0.0.1:8765;
+#     keepalive 16;
+# }
+# server {
+#     listen 443 ssl http2;
+#     server_name mcp.s1.internal;
+#     ssl_certificate     /etc/ssl/certs/mcp.s1.internal.crt;
+#     ssl_certificate_key /etc/ssl/private/mcp.s1.internal.key;
+#
+#     location = /healthz {
+#         proxy_pass http://mcp_backend;
+#     }
+#
+#     location / {
+#         if ($http_authorization !~ "^Bearer\s+\S+$") {
+#             return 401;
+#         }
+#         proxy_pass http://mcp_backend;
+#         proxy_http_version 1.1;
+#         proxy_set_header Connection "";
+#         proxy_buffering off;
+#         proxy_read_timeout 90s;
+#         proxy_send_timeout 90s;
+#     }
+# }

package/deploy/install.sh

@@ -0,0 +1,280 @@
+#!/usr/bin/env bash
+#
+# s1-secops-mcp installer for macOS and Linux.
+#
+# Modes:
+#   --user      (default) Install for the current user only.
+#                Writes credentials to ~/.config/sentinelone/credentials.json,
+#                installs the npm package globally via the current Node toolchain.
+#
+#   --server    Linux VM deployment. Creates a system `mcp` user, installs the
+#                npm package globally, writes credentials and bearer tokens to
+#                /etc/s1-secops-mcp/, drops the systemd unit, enables and
+#                starts the service.
+#
+# Idempotent: rerunning is safe; it skips steps already completed.
+#
+# Exit codes: 0 ok, 1 generic failure, 2 unsupported platform, 3 missing prereq.
+
+set -euo pipefail
+
+# Token and credential files must never be world-readable, even for the
+# instant between creation and the explicit chmod 600 below.
+umask 077
+
+# ─── helpers ─────────────────────────────────────────────────────────────────
+
+c_red() { printf '\033[31m%s\033[0m\n' "$*"; }
+c_green() { printf '\033[32m%s\033[0m\n' "$*"; }
+c_yellow() { printf '\033[33m%s\033[0m\n' "$*"; }
+c_bold() { printf '\033[1m%s\033[0m\n' "$*"; }
+
+step() { c_bold ">> $*"; }
+ok() { c_green "   ok: $*"; }
+warn() { c_yellow "   warn: $*"; }
+die() {
+  c_red "   error: $*"
+  exit 1
+}
+
+PKG="@pmoses-s1/s1-secops-mcp"
+MODE="user"
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --user)
+      MODE="user"
+      shift
+      ;;
+    --server)
+      MODE="server"
+      shift
+      ;;
+    -h | --help)
+      cat <<EOF
+Usage: $0 [--user|--server]
+
+  --user      Install for current user (default).
+              Default install path on macOS: ~/.config/sentinelone/
+              Default install path on Linux: ~/.config/sentinelone/
+
+  --server    Install on a Linux VM as a shared service.
+              System path: /etc/s1-secops-mcp/
+              systemd unit: s1-secops-mcp.service
+              Requires sudo.
+
+EOF
+      exit 0
+      ;;
+    *) die "Unknown flag: $1 (try --help)" ;;
+  esac
+done
+
+OS="$(uname -s)"
+case "$OS" in
+  Darwin) PLATFORM="mac" ;;
+  Linux) PLATFORM="linux" ;;
+  *)
+    c_red "Unsupported platform: $OS"
+    exit 2
+    ;;
+esac
+
+if [[ "$MODE" == "server" && "$PLATFORM" != "linux" ]]; then
+  die "--server mode is Linux only (got $PLATFORM)"
+fi
+
+# ─── prereqs ─────────────────────────────────────────────────────────────────
+
+step "Checking prerequisites"
+
+if ! command -v node >/dev/null 2>&1; then
+  c_red "Node.js is required but not found on PATH."
+  c_red "Install Node 18+:"
+  c_red "  macOS:  brew install node@20"
+  c_red "  Linux:  curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -E bash - && sudo apt install -y nodejs"
+  exit 3
+fi
+NODE_MAJOR="$(node --version | sed 's/^v\([0-9]*\).*/\1/')"
+if [[ "$NODE_MAJOR" -lt 18 ]]; then
+  die "Node $(node --version) is too old. Need Node 18+."
+fi
+ok "node $(node --version)"
+
+if ! command -v npm >/dev/null 2>&1; then
+  die "npm not found alongside node; please install Node 18+ from nodejs.org or your package manager."
+fi
+ok "npm $(npm --version)"
+
+if [[ "$MODE" == "server" ]]; then
+  if [[ "$EUID" -ne 0 ]]; then
+    die "--server mode must be run with sudo (need to create /etc/s1-secops-mcp/, system user, and systemd unit)."
+  fi
+  command -v systemctl >/dev/null 2>&1 || die "systemctl not found; this script targets systemd-based Linux."
+  ok "running as root, systemd present"
+fi
+
+# ─── install package ─────────────────────────────────────────────────────────
+
+step "Installing $PKG globally"
+if [[ "$MODE" == "server" ]]; then
+  npm install -g "$PKG" >/dev/null
+else
+  # Avoid sudo on Mac/personal Linux: use a per-user npm prefix if not already.
+  if ! npm config get prefix --location=user 2>/dev/null | grep -qE '^/'; then
+    npm config set prefix "$HOME/.npm-global"
+    case ":$PATH:" in
+      *":$HOME/.npm-global/bin:"*) ;;
+      *) warn "Add $HOME/.npm-global/bin to your PATH (currently missing)." ;;
+    esac
+  fi
+  npm install -g "$PKG" >/dev/null
+fi
+ok "$(npm ls -g --depth=0 "$PKG" 2>/dev/null | grep "$PKG" | head -1 | sed 's/.*-> //' || echo installed)"
+
+# ─── credentials skeleton ────────────────────────────────────────────────────
+
+if [[ "$MODE" == "server" ]]; then
+  CONF_DIR="/etc/s1-secops-mcp"
+  CRED_PATH="$CONF_DIR/credentials.json"
+  TOKEN_PATH="$CONF_DIR/bearer-tokens.json"
+  ENV_PATH="$CONF_DIR/server.env"
+  OWNER="mcp"
+else
+  CONF_DIR="$HOME/.config/sentinelone"
+  CRED_PATH="$CONF_DIR/credentials.json"
+  TOKEN_PATH=""
+  ENV_PATH=""
+  OWNER="$USER"
+fi
+
+step "Setting up $CONF_DIR"
+mkdir -p "$CONF_DIR"
+if [[ ! -f "$CRED_PATH" ]]; then
+  cat >"$CRED_PATH" <<'EOF'
+{
+  "S1_CONSOLE_URL":       "https://usea1-acme.sentinelone.net",
+  "S1_CONSOLE_API_TOKEN": "REPLACE_WITH_API_TOKEN",
+  "S1_HEC_INGEST_URL":    "https://ingest.us1.sentinelone.net"
+}
+EOF
+  chmod 600 "$CRED_PATH"
+  ok "wrote $CRED_PATH (placeholder, edit before starting)"
+else
+  ok "$CRED_PATH already exists, leaving untouched"
+fi
+
+if [[ "$MODE" == "server" ]]; then
+  if ! id "$OWNER" >/dev/null 2>&1; then
+    step "Creating system user '$OWNER'"
+    useradd --system --no-create-home --shell /usr/sbin/nologin "$OWNER"
+    ok "created"
+  else
+    ok "user '$OWNER' already exists"
+  fi
+  chown -R "$OWNER":"$OWNER" "$CONF_DIR"
+  chmod 600 "$CRED_PATH"
+
+  if [[ ! -f "$TOKEN_PATH" ]]; then
+    step "Generating initial bearer token"
+    if command -v openssl >/dev/null 2>&1; then
+      TOKEN_ADMIN="$(openssl rand -hex 32)"
+    else
+      TOKEN_ADMIN="$(node -e 'console.log(require("crypto").randomBytes(32).toString("hex"))')"
+    fi
+    cat >"$TOKEN_PATH" <<EOF
+{
+  "admin": "$TOKEN_ADMIN"
+}
+EOF
+    chmod 600 "$TOKEN_PATH"
+    chown "$OWNER":"$OWNER" "$TOKEN_PATH"
+    ok "wrote $TOKEN_PATH (one initial admin token)"
+    c_yellow "   INITIAL ADMIN BEARER TOKEN:"
+    c_yellow "   $TOKEN_ADMIN"
+    c_yellow "   Save this value now; it is also stored in $TOKEN_PATH."
+  else
+    ok "$TOKEN_PATH already exists"
+  fi
+
+  if [[ ! -f "$ENV_PATH" ]]; then
+    cat >"$ENV_PATH" <<EOF
+# Environment file for s1-secops-mcp.service.
+# Adjust LOG_LEVEL or override anything here; apply with: systemctl restart s1-secops-mcp
+# (systemd only re-reads EnvironmentFile on restart; reload/SIGHUP re-reads bearer tokens only.)
+EOF
+    chmod 600 "$ENV_PATH"
+    chown "$OWNER":"$OWNER" "$ENV_PATH"
+    ok "wrote $ENV_PATH"
+  else
+    ok "$ENV_PATH already exists"
+  fi
+
+  step "Installing systemd unit"
+  SVC_PATH="/etc/systemd/system/s1-secops-mcp.service"
+  GLOBAL_NODE_MODULES="$(npm root -g)"
+  SCRIPT_DIR="$GLOBAL_NODE_MODULES/$PKG"
+  # Rewrite the ExecStart path to point at the resolved global install,
+  # since the bundled unit uses %h which assumes per-user install.
+  sed "s|%h/.npm-global/lib/node_modules/@pmoses-s1/s1-secops-mcp|$SCRIPT_DIR|g" \
+    "$SCRIPT_DIR/deploy/systemd/s1-secops-mcp.service" >"$SVC_PATH"
+  systemctl daemon-reload
+  systemctl enable s1-secops-mcp >/dev/null 2>&1
+  ok "wrote $SVC_PATH and enabled the service"
+
+  step "Starting the service"
+  if systemctl is-active s1-secops-mcp >/dev/null 2>&1; then
+    systemctl restart s1-secops-mcp
+    ok "restarted"
+  else
+    systemctl start s1-secops-mcp
+    ok "started"
+  fi
+  sleep 1
+  if systemctl is-active --quiet s1-secops-mcp; then
+    ok "service is active"
+  else
+    c_red "service failed to start. Recent log lines:"
+    journalctl -u s1-secops-mcp -n 30 --no-pager | sed 's/^/   /'
+    exit 1
+  fi
+fi
+
+# ─── final notes ─────────────────────────────────────────────────────────────
+
+step "Next steps"
+if [[ "$MODE" == "user" ]]; then
+  cat <<EOF
+
+   1. Edit $CRED_PATH with your real SentinelOne values.
+   2. Try the server:
+        s1-secops-mcp --version
+        s1-secops-mcp --help
+   3. Wire it into Claude Cowork / Claude Desktop / Claude Code via stdio
+      (no HTTP needed for single-user local). See deploy/README.md for the
+      exact config block.
+
+EOF
+elif [[ "$MODE" == "server" ]]; then
+  cat <<EOF
+
+   1. Edit $CRED_PATH with your real SentinelOne values, then restart:
+        sudo systemctl restart s1-secops-mcp
+      (credentials.json is read once at startup; reload/SIGHUP only re-reads
+       bearer tokens, so credential changes need a full restart.)
+   2. Verify the server is up:
+        curl -s http://127.0.0.1:8765/healthz
+   3. Put TLS in front (Caddy template at $SCRIPT_DIR/deploy/caddy/Caddyfile.example).
+   4. Add team members by editing $TOKEN_PATH and reloading:
+        echo '{"admin":"...", "alice":"...", "bob":"..."}' > $TOKEN_PATH
+        sudo systemctl reload s1-secops-mcp
+      (Reload sends SIGHUP; no connection drops.)
+   5. Tail the audit log:
+        sudo journalctl -u s1-secops-mcp -f | grep '\[audit\]'
+
+   See deploy/README.md for the full Linux VM walkthrough.
+
+EOF
+fi
+
+c_green "Done."

package/deploy/systemd/s1-secops-mcp.service

@@ -0,0 +1,59 @@
+[Unit]
+Description=SentinelOne MCP server (Streamable HTTP, team-shared)
+Documentation=https://github.com/pmoses-s1/claude-skills/tree/main/s1-secops-mcp
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=mcp
+Group=mcp
+
+# Server credentials (the S1 service-user token + SDL keys) and bearer tokens.
+# Both are written by deploy/install.sh. Bearer tokens rotate via
+# `systemctl reload` (SIGHUP, no dropped connections). credentials.json is
+# read once at startup, so changes to it require `systemctl restart`.
+EnvironmentFile=/etc/s1-secops-mcp/server.env
+Environment=MCP_BEARER_TOKENS_FILE=/etc/s1-secops-mcp/bearer-tokens.json
+Environment=S1_CREDS_FILE=/etc/s1-secops-mcp/credentials.json
+
+ExecStart=/usr/bin/env node %h/.npm-global/lib/node_modules/@pmoses-s1/s1-secops-mcp/index.js \
+  --transport http \
+  --host 127.0.0.1 \
+  --port 8765 \
+  --path /mcp
+
+# SIGHUP reloads the bearer token file without restart.
+ExecReload=/bin/kill -HUP $MAINPID
+
+Restart=on-failure
+RestartSec=5
+
+# Hardening
+# NOTE: MemoryDenyWriteExecute=true and LockPersonality=true are incompatible
+# with Node.js V8 JIT (W+X mappings). Including them causes a silent SIGTRAP
+# at startup with no useful log output. Leave them off for Node services.
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectSystem=strict
+ProtectHome=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectControlGroups=true
+RestrictNamespaces=true
+RestrictRealtime=true
+RestrictSUIDSGID=true
+SystemCallArchitectures=native
+ReadWritePaths=
+
+# Resource limits
+LimitNOFILE=4096
+TasksMax=64
+
+# Logging
+StandardOutput=journal
+StandardError=journal
+SyslogIdentifier=s1-secops-mcp
+
+[Install]
+WantedBy=multi-user.target

package/index.js

@@ -0,0 +1,171 @@
+#!/usr/bin/env node
+/**
+ * SentinelOne MCP Server
+ *
+ * Implements the Model Context Protocol over either stdio (default) or
+ * Streamable HTTP, using raw JSON-RPC 2.0 throughout. No external runtime
+ * dependencies. Pure Node.js 18+.
+ *
+ * Exposes 26 tools across PowerQuery, Mgmt Console REST, UAM, SDL API,
+ * Hyperautomation, and UAM Ingest; plus 2 resources and 2 prompts.
+ *
+ * Quick start:
+ *   stdio (default, used by Claude Desktop / Claude Code / Cowork):
+ *     node index.js
+ *
+ *   Streamable HTTP, bound to localhost, no auth (single-user local):
+ *     node index.js --transport http
+ *
+ *   Streamable HTTP, bound to 0.0.0.0 with team bearer tokens:
+ *     MCP_BEARER_TOKENS_FILE=/etc/s1-secops-mcp/bearer-tokens.json \
+ *       node index.js --transport http --host 0.0.0.0 --port 8765
+ *
+ * Full configuration reference: README.md and deploy/README.md.
+ */
+
+import { dispatch, SERVER_INFO, ALL_TOOLS } from './lib/server-core.js';
+import { getCreds, hasS1Creds, hasSdlCreds } from './lib/credentials.js';
+import { hasHecCreds } from './lib/uam-ingest.js';
+import { loadTokens, installSighupReload } from './lib/auth.js';
+
+function log(...args) {
+  process.stderr.write('[s1-secops-mcp] ' + args.join(' ') + '\n');
+}
+
+// ─── CLI flag parser ──────────────────────────────────────────────────────────
+
+function parseArgs(argv) {
+  const out = {
+    transport: process.env.MCP_TRANSPORT || 'stdio',
+    host:      process.env.MCP_HTTP_HOST || '127.0.0.1',
+    port:      Number(process.env.MCP_HTTP_PORT) || 8765,
+    path:      process.env.MCP_HTTP_PATH || '/mcp',
+    help:      false,
+    version:   false,
+  };
+
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    const next = () => argv[++i];
+    switch (a) {
+      case '-h': case '--help':    out.help = true; break;
+      case '-v': case '--version': out.version = true; break;
+      case '--transport':          out.transport = next(); break;
+      case '--host':               out.host = next(); break;
+      case '--port':               out.port = Number(next()); break;
+      case '--path':               out.path = next(); break;
+      default:
+        if (a.startsWith('--')) {
+          process.stderr.write(`Unknown flag: ${a}\nRun with --help for usage.\n`);
+          process.exit(2);
+        }
+    }
+  }
+
+  if (!['stdio', 'http'].includes(out.transport)) {
+    process.stderr.write(`Invalid --transport: ${out.transport} (expected: stdio, http)\n`);
+    process.exit(2);
+  }
+  if (out.transport === 'http' && (!out.port || out.port <= 0 || out.port > 65535)) {
+    process.stderr.write(`Invalid --port: ${out.port}\n`);
+    process.exit(2);
+  }
+  if (!out.path.startsWith('/')) {
+    process.stderr.write(`Invalid --path: ${out.path} (must start with /)\n`);
+    process.exit(2);
+  }
+
+  return out;
+}
+
+function printHelp() {
+  process.stdout.write(`\
+s1-secops-mcp ${SERVER_INFO.version}
+
+USAGE
+  s1-secops-mcp [options]
+
+OPTIONS
+  --transport <stdio|http>    Transport to use. Default: stdio.
+  --host <host>               HTTP bind address. Default: 127.0.0.1.
+  --port <port>               HTTP port. Default: 8765.
+  --path <path>               HTTP MCP endpoint path. Default: /mcp.
+  -h, --help                  Show this help.
+  -v, --version               Show server version.
+
+ENVIRONMENT
+  MCP_TRANSPORT               Same as --transport.
+  MCP_HTTP_HOST               Same as --host.
+  MCP_HTTP_PORT               Same as --port.
+  MCP_HTTP_PATH               Same as --path.
+
+  MCP_BEARER_TOKENS_FILE      Path to a JSON file mapping {name: token} for
+                              per-user authenticated HTTP access. Recommended
+                              for teams. SIGHUP reloads without restart.
+  MCP_BEARER_TOKENS           Comma-separated raw tokens (no per-user names).
+                              Fallback when MCP_BEARER_TOKENS_FILE is not set.
+
+  S1_CONSOLE_URL              Console URL, e.g. https://usea1-acme.sentinelone.net
+  S1_CONSOLE_API_TOKEN        Mgmt Console API token. Required for most tools.
+  S1_HEC_INGEST_URL           HEC ingest host. Required for uam_ingest_alert,
+                              uam_post_indicators, uam_post_alert.
+  S1_CREDS_FILE               Explicit path to a credentials.json file.
+                              Highest priority for credential resolution.
+  S1_CLAUDE_MD_PATH           Absolute path to CLAUDE.md for the soc_analyst
+                              prompt and sentinelone://soc-context resource.
+
+EXAMPLES
+  Run as a local MCP server for Claude Desktop / Cowork:
+    s1-secops-mcp
+
+  Run as an HTTP service for personal use:
+    s1-secops-mcp --transport http
+    # then: curl -s http://127.0.0.1:8765/healthz
+
+  Run as a shared team service with token auth:
+    MCP_BEARER_TOKENS_FILE=/etc/s1-secops-mcp/bearer-tokens.json \\
+      s1-secops-mcp --transport http --host 0.0.0.0 --port 8765
+    # See deploy/README.md for the full Linux VM walkthrough.
+`);
+}
+
+// ─── Main ────────────────────────────────────────────────────────────────────
+
+async function main() {
+  const opts = parseArgs(process.argv.slice(2));
+
+  if (opts.help)    { printHelp(); process.exit(0); }
+  if (opts.version) { process.stdout.write(`${SERVER_INFO.version}\n`); process.exit(0); }
+
+  log(`Starting ${SERVER_INFO.name} v${SERVER_INFO.version} (node ${process.version})`);
+
+  const creds = getCreds();
+  log(`S1 Mgmt API:  ${hasS1Creds() ? 'configured (' + creds.S1_CONSOLE_URL + ')' : 'NOT configured'}`);
+  log(`SDL API:      ${hasSdlCreds() ? 'configured (' + creds.S1_CONSOLE_URL + '/sdl)' : 'NOT configured'}`);
+  log(`UAM Ingest:   ${hasHecCreds() ? 'configured (' + creds.S1_HEC_INGEST_URL + ')' : 'NOT configured (add S1_HEC_INGEST_URL)'}`);
+  log(`Tools:        ${ALL_TOOLS.length} registered`);
+
+  if (opts.transport === 'http') {
+    try {
+      loadTokens();
+    } catch (e) {
+      process.stderr.write(`[auth] FATAL: ${e.message}\n`);
+      process.exit(1);
+    }
+    installSighupReload();
+
+    const { startHttp } = await import('./lib/http-transport.js');
+    await startHttp(dispatch, { port: opts.port, host: opts.host, path: opts.path });
+    log('HTTP transport ready. Press Ctrl+C to stop.');
+    return;
+  }
+
+  // Default: stdio
+  const { startStdio } = await import('./lib/stdio-transport.js');
+  await startStdio(dispatch);
+}
+
+main().catch(e => {
+  process.stderr.write(`Fatal: ${e.message}\n${e.stack}\n`);
+  process.exit(1);
+});