@reproapp/mcp 0.0.1

package/README.md

@@ -0,0 +1,183 @@
+# @reproapp/mcp
+
+Repro MCP server for AI-assisted debugging and privacy policy workflows.
+
+`@reproapp/mcp` runs over stdio for local AI clients and forwards MCP tool calls to Repro services. It can also run as an HTTP MCP server in a container when `PORT` is set or `REPRO_MCP_TRANSPORT=http`.
+
+## AI Client Setup
+
+Default hosted Repro setup:
+
+```json
+{
+  "mcpServers": {
+    "repro": {
+      "command": "npx",
+      "args": ["-y", "@reproapp/mcp@latest"]
+    }
+  }
+}
+```
+
+Custom Repro deployment:
+
+```json
+{
+  "mcpServers": {
+    "repro": {
+      "command": "npx",
+      "args": ["-y", "@reproapp/mcp@latest"],
+      "env": {
+        "REPRO_AI_BASE_URL": "https://your-repro-ai-url/",
+        "REPRO_API_BASE_URL": "https://your-repro-api-url/api/",
+        "REPRO_WEB_BASE_URL": "https://your-repro-web-url/"
+      }
+    }
+  }
+}
+```
+
+The installed binary is `repro-mcp`.
+
+## Configuration
+
+Built-in defaults:
+
+- `REPRO_AI_BASE_URL=http://10.116.0.4`
+- `REPRO_API_BASE_URL=http://10.116.0.5/api`
+- `REPRO_WEB_BASE_URL=https://getrepro.io`
+
+Optional:
+
+- `REPRO_MCP_TRANSPORT` (`stdio` or `http`; default `http` when `PORT` is set, otherwise `stdio`)
+- `REPRO_MCP_HTTP_HOST`
+- `REPRO_MCP_HTTP_PORT`
+- `REPRO_MCP_HTTP_PATH`
+- `REPRO_MCP_CORS_ORIGIN`
+- `REPRO_API_BASE_URL`
+- `REPRO_API_PUBLIC_BASE_URL`
+- `REPRO_WEB_BASE_URL`
+- `REPRO_AI_TOKEN`
+- `REPRO_API_TOKEN`
+- `REPRO_DEFAULT_TENANT_ID`
+- `REPRO_APP_ID`
+- `REPRO_REQUEST_TIMEOUT_MS`
+- `REPRO_INVESTIGATE_TIMEOUT_MS`
+- `REPRO_MCP_ENV_FILE`
+- `REPRO_MCP_AUTH_FILE`
+- `REPRO_MCP_AUTH_TIMEOUT_MS`
+- `REPRO_MCP_AUTO_AUTH`
+- `REPRO_MCP_AUTH_MODE` (`wait` or `prompt`; default `prompt` for HTTP and `wait` for stdio)
+- `REPRO_MCP_OPEN_BROWSER`
+- `REPRO_MCP_DEBUG_LOG`
+- `REPRO_MCP_LAUNCH_LOG`
+- `REPRO_PATH_MAPPINGS`
+
+Hosted HTTP example:
+
+```bash
+export REPRO_MCP_HTTP_HOST="0.0.0.0"
+export REPRO_MCP_HTTP_PORT="8080"
+export REPRO_MCP_HTTP_PATH="/mcp"
+export REPRO_AI_BASE_URL="http://repro-ai:4011/"
+export REPRO_API_BASE_URL="http://api:4010/api/"
+export REPRO_API_PUBLIC_BASE_URL="https://api.example.com/api/"
+export REPRO_WEB_BASE_URL="https://app.example.com/"
+export REPRO_DEFAULT_TENANT_ID="TENANT_123"
+export REPRO_INVESTIGATE_TIMEOUT_MS="90000"
+export REPRO_MCP_AUTO_AUTH="true"
+export REPRO_MCP_AUTH_MODE="prompt"
+export REPRO_MCP_OPEN_BROWSER="false"
+export REPRO_PATH_MAPPINGS='[
+  {
+    "remotePrefix": "/srv/repro-demo",
+    "localPrefix": "/Users/alice/work/repro-demo"
+  }
+]'
+```
+
+`run-repro-mcp.sh` loads `repro-mcp/.env`, then `repro-mcp/.env.local`, then the file pointed to by `REPRO_MCP_ENV_FILE` when provided. Environment variables already set by the process take precedence in `src/index.js`; for DigitalOcean App Platform, prefer setting values in the app's environment configuration instead of committing an env file.
+
+`REPRO_API_BASE_URL` is used for privacy policy inspection/update tools and browser authentication. `REPRO_WEB_BASE_URL` is used for Privacy Studio links.
+
+For hosted MCP, point `REPRO_API_BASE_URL` at the private/internal API address used by the MCP container. Set `REPRO_API_PUBLIC_BASE_URL` to the public API origin users can open in a browser. The MCP server sends that public origin to the API when it creates browser-auth sessions, so the returned authorize URL is browser-accessible even when MCP talks to the API over VPC.
+
+`REPRO_PATH_MAPPINGS` is optional. Use it only when telemetry contains deployed code paths that should map to a checkout available inside the MCP runtime. For a hosted container without a mounted checkout, keep it as `[]`.
+
+For local development, copy `.env.local.example` to `.env.local`. It contains the old localhost defaults:
+
+- `REPRO_AI_BASE_URL=http://127.0.0.1:4011`
+- `REPRO_API_BASE_URL=http://127.0.0.1:4010/api`
+- `REPRO_WEB_BASE_URL=http://127.0.0.1:3000`
+- local `REPRO_PATH_MAPPINGS` for the demo checkout
+
+If `REPRO_AI_TOKEN` and `REPRO_API_TOKEN` are not set, `repro-mcp` starts a browser login flow against `REPRO_API_BASE_URL`, caches the resulting app-user bearer token, and reuses it on future requests. Stdio uses `REPRO_MCP_AUTH_MODE=wait`: it prints the authorize URL and waits for approval. HTTP uses `REPRO_MCP_AUTH_MODE=prompt`: the first protected MCP request returns a JSON-RPC error with `error.data.authorizeUrl`; open that URL, approve access, then retry the same MCP request.
+
+For the cached app-user token to work with `repro-ai`, configure `repro-ai` with the same `APP_USER_JWT_SECRET` as `repro-api`. Static `REPRO_AI_TOKEN` / `REPRO_API_TOKEN` values are optional overrides, not the normal hosted browser-auth path.
+
+`investigate` can legitimately take longer than the lower-level telemetry tools because it may retrieve scope context and run planner/answerer model calls. `REPRO_REQUEST_TIMEOUT_MS` controls the base timeout for all backend calls; `REPRO_INVESTIGATE_TIMEOUT_MS` overrides it just for `investigate` and defaults to at least 90 seconds.
+
+## DigitalOcean
+
+Container build:
+
+```bash
+docker build -t repro-mcp ./repro-mcp
+```
+
+Minimum production environment:
+
+```bash
+REPRO_MCP_HTTP_HOST=0.0.0.0
+PORT=8080
+REPRO_MCP_HTTP_PATH=/mcp
+REPRO_AI_BASE_URL=http://repro-ai:4011/
+REPRO_API_BASE_URL=http://api:4010/api/
+REPRO_API_PUBLIC_BASE_URL=https://your-public-api-host/api/
+REPRO_WEB_BASE_URL=https://your-repro-web-host/
+REPRO_MCP_AUTO_AUTH=true
+REPRO_MCP_AUTH_MODE=prompt
+REPRO_MCP_OPEN_BROWSER=false
+REPRO_PATH_MAPPINGS=[]
+```
+
+DigitalOcean service requirements:
+
+- `repro-mcp` runs as a Web Service from `repro-mcp/Dockerfile` on port `8080`.
+- `repro-mcp` reaches `repro-api` and `repro-ai` through VPC/internal routing.
+- `REPRO_API_PUBLIC_BASE_URL` points to the public API URL used only for the browser authorize page.
+- `repro-api` and `repro-ai` share the same `APP_USER_JWT_SECRET`, so the browser-auth app-user JWT can authorize both services.
+
+HTTP endpoints:
+
+- `GET /health` and `GET /healthz`: health checks
+- `POST /mcp`: JSON-RPC MCP requests
+- `GET /mcp`: event-stream placeholder for clients that open a stream
+
+The same tool handler backs stdio and HTTP transports.
+
+## Run
+
+```bash
+npm start
+```
+
+`npm start` runs the HTTP server. Local stdio MCP clients should use:
+
+```bash
+npm run start:stdio
+```
+
+## Tools
+
+- `investigate`
+- `resolve_scope`
+- `list_actions`
+- `list_requests`
+- `get_request`
+- `get_captured_value`
+- `get_requests_relative_to_anchor`
+- `get_db_changes`
+- `get_trace`
+- `get_action_path`
+- `get_function_candidates`

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "@reproapp/mcp",
+  "version": "0.0.1",
+  "description": "Repro MCP server for AI-assisted debugging and privacy policy workflows",
+  "license": "MIT",
+  "type": "commonjs",
+  "bin": {
+    "repro-mcp": "src/index.js"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/getrepro/repro-mcp.git"
+  },
+  "bugs": {
+    "url": "https://github.com/getrepro/repro-mcp/issues"
+  },
+  "homepage": "https://github.com/getrepro/repro-mcp#readme",
+  "keywords": [
+    "repro",
+    "mcp",
+    "debugging",
+    "privacy",
+    "ai"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "files": [
+    "src",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "start": "REPRO_MCP_TRANSPORT=http node src/index.js",
+    "start:stdio": "REPRO_MCP_TRANSPORT=stdio node src/index.js",
+    "start:http": "REPRO_MCP_TRANSPORT=http node src/index.js",
+    "check": "node --check src/index.js",
+    "test": "node --test"
+  }
+}