@vibekiln/cutline-mcp-cli 0.5.0 → 0.6.0

package/README.md

@@ -135,6 +135,19 @@ cutline-mcp serve output         # Export and rendering
 cutline-mcp serve integrations   # External integrations
 ```
 
+HTTP bridge mode (for registries/hosts that require an HTTPS MCP URL):
+
+```bash
+cutline-mcp serve constraints --http --host 0.0.0.0 --port 8080 --path /mcp
+# Health: GET /health
+# MCP endpoint: POST /mcp
+```
+
+Bridge notes:
+- Default mode remains stdio (no behavior change for Cursor/Claude Desktop local configs).
+- The bridge forwards JSON-RPC requests to the bundled stdio server process.
+- Batch JSON-RPC payloads are not supported by the bridge.
+
 ### `upgrade`
 
 Open the upgrade page and refresh your session.
@@ -206,6 +219,10 @@ Config: [`server.json`](./server.json)
 
 Config: [`smithery.yaml`](./smithery.yaml) with [`Dockerfile`](./Dockerfile)
 
+If the publish UI requires an MCP Server URL, deploy the bridge and provide your public HTTPS endpoint, for example:
+
+`https://mcp.thecutline.ai/mcp`
+
 ### Claude Desktop Extension
 
 ```bash

package/dist/commands/serve.d.ts

@@ -1 +1,8 @@
-export declare function serveCommand(serverName: string): void;
+interface ServeOptions {
+    http?: boolean;
+    host?: string;
+    port?: string;
+    path?: string;
+}
+export declare function serveCommand(serverName: string, options?: ServeOptions): void;
+export {};

package/dist/commands/serve.js

@@ -1,4 +1,5 @@
-import { execFileSync } from 'node:child_process';
+import { execFileSync, spawn } from 'node:child_process';
+import { createServer } from 'node:http';
 import { resolve, dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { existsSync } from 'node:fs';
@@ -11,7 +12,174 @@ const SERVER_MAP = {
     output: 'output-server.js',
     integrations: 'integrations-server.js',
 };
-export function serveCommand(serverName) {
+function readJsonBody(req) {
+    return new Promise((resolveBody, rejectBody) => {
+        const chunks = [];
+        let total = 0;
+        const MAX_BODY_BYTES = 1024 * 1024; // 1MB safety cap
+        req.on('data', (chunk) => {
+            total += chunk.length;
+            if (total > MAX_BODY_BYTES) {
+                rejectBody(new Error('Request body too large'));
+                req.destroy();
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on('end', () => {
+            try {
+                const text = Buffer.concat(chunks).toString('utf8');
+                resolveBody(text ? JSON.parse(text) : {});
+            }
+            catch {
+                rejectBody(new Error('Invalid JSON body'));
+            }
+        });
+        req.on('error', rejectBody);
+    });
+}
+function writeJson(res, statusCode, body) {
+    const payload = JSON.stringify(body);
+    res.writeHead(statusCode, {
+        'Content-Type': 'application/json',
+        'Content-Length': Buffer.byteLength(payload),
+    });
+    res.end(payload);
+}
+function normalizeId(id) {
+    if (typeof id === 'string' || typeof id === 'number')
+        return String(id);
+    return '';
+}
+function serveHttpBridge(serverName, serverPath, opts) {
+    const host = opts.host || process.env.CUTLINE_MCP_HTTP_HOST || '0.0.0.0';
+    const port = Number(opts.port || process.env.CUTLINE_MCP_HTTP_PORT || '8080');
+    const mcpPath = opts.path || process.env.CUTLINE_MCP_HTTP_PATH || '/mcp';
+    const requestTimeoutMs = Number(process.env.CUTLINE_MCP_HTTP_TIMEOUT_MS || '30000');
+    if (!Number.isFinite(port) || port <= 0) {
+        console.error(`Invalid --port value: ${opts.port}`);
+        process.exit(1);
+    }
+    const child = spawn(process.execPath, [serverPath], {
+        stdio: ['pipe', 'pipe', 'inherit'],
+        env: process.env,
+    });
+    const pending = new Map();
+    let stdoutBuffer = Buffer.alloc(0);
+    const failAllPending = (reason) => {
+        for (const [key, entry] of pending.entries()) {
+            clearTimeout(entry.timer);
+            entry.reject(reason);
+            pending.delete(key);
+        }
+    };
+    const sendToStdioServer = (message) => {
+        if (!child.stdin || child.killed) {
+            throw new Error('MCP stdio server is not available');
+        }
+        const body = JSON.stringify(message);
+        const packet = `Content-Length: ${Buffer.byteLength(body, 'utf8')}\r\n\r\n${body}`;
+        child.stdin.write(packet, 'utf8');
+    };
+    child.stdout?.on('data', (chunk) => {
+        stdoutBuffer = Buffer.concat([stdoutBuffer, chunk]);
+        while (true) {
+            const separatorIndex = stdoutBuffer.indexOf('\r\n\r\n');
+            if (separatorIndex < 0)
+                break;
+            const headers = stdoutBuffer.slice(0, separatorIndex).toString('utf8');
+            const lengthMatch = headers.match(/content-length:\s*(\d+)/i);
+            if (!lengthMatch) {
+                stdoutBuffer = stdoutBuffer.slice(separatorIndex + 4);
+                continue;
+            }
+            const contentLength = Number(lengthMatch[1]);
+            const packetLength = separatorIndex + 4 + contentLength;
+            if (stdoutBuffer.length < packetLength)
+                break;
+            const jsonBytes = stdoutBuffer.slice(separatorIndex + 4, packetLength);
+            stdoutBuffer = stdoutBuffer.slice(packetLength);
+            try {
+                const message = JSON.parse(jsonBytes.toString('utf8'));
+                const id = normalizeId(message?.id);
+                if (!id)
+                    continue;
+                const entry = pending.get(id);
+                if (!entry)
+                    continue;
+                clearTimeout(entry.timer);
+                pending.delete(id);
+                entry.resolve(message);
+            }
+            catch {
+                // Ignore malformed child output and keep processing subsequent frames.
+            }
+        }
+    });
+    child.on('exit', (code, signal) => {
+        failAllPending(new Error(`MCP stdio server exited unexpectedly (${signal ? `signal ${signal}` : `code ${code ?? 'unknown'}`})`));
+    });
+    const httpServer = createServer(async (req, res) => {
+        const { method } = req;
+        const reqPath = (req.url || '/').split('?')[0];
+        if (method === 'GET' && reqPath === '/health') {
+            writeJson(res, 200, {
+                ok: true,
+                server: serverName,
+                transport: 'http-bridge-stdio',
+                mcp_path: mcpPath,
+            });
+            return;
+        }
+        if (method !== 'POST' || reqPath !== mcpPath) {
+            writeJson(res, 404, { error: `Not found. Use POST ${mcpPath}` });
+            return;
+        }
+        try {
+            const body = await readJsonBody(req);
+            if (Array.isArray(body)) {
+                writeJson(res, 400, { error: 'Batch JSON-RPC is not supported by this bridge' });
+                return;
+            }
+            const message = body;
+            const id = normalizeId(message?.id);
+            // Notifications do not have an id and do not expect a response.
+            if (!id) {
+                sendToStdioServer(message);
+                writeJson(res, 202, { ok: true });
+                return;
+            }
+            const response = await new Promise((resolveResponse, rejectResponse) => {
+                const timer = setTimeout(() => {
+                    pending.delete(id);
+                    rejectResponse(new Error(`Timed out waiting for response id=${id}`));
+                }, requestTimeoutMs);
+                pending.set(id, {
+                    resolve: resolveResponse,
+                    reject: rejectResponse,
+                    timer,
+                });
+                try {
+                    sendToStdioServer(message);
+                }
+                catch (error) {
+                    clearTimeout(timer);
+                    pending.delete(id);
+                    rejectResponse(error);
+                }
+            });
+            writeJson(res, 200, response);
+        }
+        catch (error) {
+            writeJson(res, 500, { error: error?.message || 'Bridge request failed' });
+        }
+    });
+    httpServer.listen(port, host, () => {
+        console.error(`Cutline MCP HTTP bridge listening on http://${host}:${port}${mcpPath}`);
+        console.error(`Health check: http://${host}:${port}/health`);
+    });
+}
+export function serveCommand(serverName, options = {}) {
     const fileName = SERVER_MAP[serverName];
     if (!fileName) {
         const valid = Object.keys(SERVER_MAP).join(', ');
@@ -24,8 +192,11 @@ export function serveCommand(serverName) {
         console.error('The package may not have been built correctly.');
         process.exit(1);
     }
-    // Replace this process with the MCP server.
-    // MCP servers use stdio transport, so we need to keep stdin/stdout connected.
+    if (options.http) {
+        serveHttpBridge(serverName, serverPath, options);
+        return;
+    }
+    // Replace this process with the MCP server (default stdio mode).
     try {
         execFileSync(process.execPath, [serverPath], {
             stdio: 'inherit',

package/dist/index.js

@@ -47,7 +47,16 @@ program
 program
     .command('serve <server>')
     .description('Start an MCP server (constraints, premortem, exploration, tools, output, integrations)')
-    .action(serveCommand);
+    .option('--http', 'Expose the selected stdio server over an HTTP bridge')
+    .option('--host <host>', 'HTTP bind host for bridge mode (default: 0.0.0.0)')
+    .option('--port <port>', 'HTTP port for bridge mode (default: 8080)')
+    .option('--path <path>', 'HTTP MCP path for bridge mode (default: /mcp)')
+    .action((server, opts) => serveCommand(server, {
+    http: opts.http,
+    host: opts.host,
+    port: opts.port,
+    path: opts.path,
+}));
 program
     .command('setup')
     .description('One-command onboarding: authenticate, write IDE MCP config, generate rules')

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@vibekiln/cutline-mcp-cli",
-    "version": "0.5.0",
+    "version": "0.6.0",
     "description": "CLI and MCP servers for Cutline — authenticate, then run constraint-aware MCP servers in Cursor or any MCP client.",
     "type": "module",
     "main": "dist/index.js",