@wirecat/cli-template 0.6.1 → 0.7.0

package/CHANGELOG.md

@@ -5,6 +5,40 @@ Notable changes to `@wirecat/cli-template`. One section per version, newest firs
 
 <!-- cspell:words katex smol whatsapp -->
 
+## 0.7.0 — 27.10.2026
+
+### Changed — may break callers
+
+- **The skeleton runs on cli-core 0.449.0 and cli-base 0.62.0**, the only cli-base line cli-core 0.449 accepts; a CLI
+  that pins cli-base moves both pins together. The commands and their help do not change, apart from the `mcp`
+  additions below.
+
+### Added
+
+- **`clidev <profile> mcp --http` serves the profile to ChatGPT and Claude in the browser**, on `127.0.0.1` behind the
+  owner's tunnel, with a one-time login code; `--revoke` ends every login, and is refused under `CLIDEV_READ_ONLY`.
+  **`mcp server start|stop|status`** runs it in the background (from cli-core 0.445.0): `status` shows the port, the
+  connector address, the current login code and the apps logged in, and the background server writes no login code to
+  its log. A second `mcp --http` for the same profile is refused. `mcp --permission key=level` makes a permission
+  stricter for one server, over stdio too. A CLI made from an older template takes this with `upgrade`, or mounts
+  `mcpServerCommand` on its own `mcp` and passes `lockFile: httpLockFile(tokenFile)` to `serveOverHttp`.
+
+### Fixed
+
+- **`new` writes the speech model advice into `docs/dev/DESIGN.md` only for `--category messenger`.** A calendar or
+  notes CLI got "If this CLI defines a messenger, set its speechModels…" and a warning that no speech model hears a
+  language, though only a messenger transcribes voice messages.
+- **The cron step `new` prints points to the list of taken monthly minutes** in cli-base's CI page (WC-CI-9), so
+  nobody has to read `monthly.yml` in every repository to find a free one. The examples now use `gcal-cli` and
+  `gcal`: `cal` is the system calendar program on macOS and many Linux systems.
+- **Every command spends less time getting ready (cli-base 0.62.0, cli-core 0.449.0).** The check of shared commands now
+  describes each command once, not again for every group above it. It was about 60% of each command's setup; in tg a
+  warm `run(["--version"])` went from 49 to 29 ms. It catches the same changes as before.
+- **`bin/release` no longer reports a release that passed as failed.** `gh run watch` also stops with an error when
+  one of its own requests to GitHub fails, while the run goes on; 0.6.1 was published, tagged and green, and the
+  script said it failed. It now waits for the run to finish, reads its result, and checks npm before it says anything.
+  It names `bin/release --local` only when npm refused the publish because it does not trust the workflow yet.
+
 ## 0.6.1 — 26.10.2026
 
 ### Fixed

package/README.md

@@ -11,7 +11,7 @@ with the tool's own introduction once it does.
 To start a new CLI from the template:
 
 ```sh
-npx @wirecat/cli-template new cal-cli --command cal --package @wirecat/cal-cli --owner WireCatLabs
+npx @wirecat/cli-template new gcal-cli --command gcal --package @wirecat/gcal-cli --owner WireCatLabs
 ```
 
 ## Quick start
@@ -33,7 +33,7 @@ such as `personal` in `clidev personal config show`; none is ever assumed. `CLID
 | `clidev commands --json` | Prints every command as JSON, for agents and scripts |
 | `clidev personal config show` | Shows each setting and where it came from |
 | `clidev skill install` | Installs the agent skill for Claude Code, Codex, Gemini CLI and OpenClaw; `--for hermes` for Hermes Agent |
-| `clidev personal mcp` | Serves the profile's commands to an AI agent over MCP |
+| `clidev personal mcp` | Serves the profile's commands to an AI agent over MCP; `--http` for agents in the browser |
 | `clidev runs list` | Lists recorded runs, newest first: every command that failed is kept |
 | `clidev upgrade --check` | Says whether a newer version is on npm |
 

package/bin/release

@@ -55,6 +55,15 @@ version=$(node -p 'require("./package.json").version')
 published() {
   npm view "$package@$version" version --prefer-online >/dev/null 2>&1
 }
+# The version list `npm view` reads can lag minutes behind a publish.
+wait_for_npm() {
+  echo "== waiting for npm to show $version (up to fifteen minutes) =="
+  for _ in $(seq 90); do
+    published && return 0
+    sleep 10
+  done
+  return 1
+}
 
 # main takes changes only through a pull request (the repository's ruleset).
 land() {
@@ -147,11 +156,32 @@ if [ "$mode" = ci ]; then
     sleep 2
   done
   [ -n "$run" ] || { echo "the release workflow did not start within a minute — see gh run list --workflow release.yml" >&2; exit 1; }
-  if ! gh run watch "$run" --exit-status; then
-    echo "release failed; inspect: gh run view $run --log-failed" >&2
-    echo "a package npm does not trust yet publishes its first version with bin/release --local" >&2
-    exit 1
-  fi
+  # gh run watch also exits non-zero when one of its own API calls fails, while the run goes on: only the run's
+  # conclusion and npm say whether the release failed.
+  state=""
+  for _ in $(seq 30); do
+    gh run watch "$run" || sleep 10
+    state=$(gh run view "$run" --json status,conclusion --jq '.status + ":" + .conclusion' 2>/dev/null || true)
+    case "$state" in completed:*) break ;; esac
+  done
+  case "$state" in
+    completed:success)
+      wait_for_npm ||
+        { echo "release run $run passed but npm does not show $version — see gh run view $run" >&2; exit 1; } ;;
+    completed:*)
+      if published; then
+        echo "$package@$version is on npm, but release run $run did not pass; check its tag: gh run view $run" >&2
+        exit 1
+      fi
+      echo "release failed; inspect: gh run view $run --log-failed" >&2
+      # npm answers 404 to a publish from a workflow it does not trust.
+      if gh run view "$run" --log-failed 2>/dev/null | grep -q "404 Not Found - PUT"; then
+        echo "npm refused the publish; a package npm does not trust yet publishes its first version with" >&2
+        echo "bin/release --local" >&2
+      fi
+      exit 1 ;;
+    *) echo "lost track of release run $run — see gh run view $run" >&2; exit 1 ;;
+  esac
   git fetch -q --tags origin
   echo "published $package@$version"
   exit 0
@@ -194,13 +224,7 @@ echo "== publishing $package@$version =="
 pnpm build
 NPM_TOKEN="$publish_token" npm publish --access public --ignore-scripts "$@"
 
-echo "== waiting for npm to show $version (up to fifteen minutes) =="
-seen=""
-for _ in $(seq 90); do
-  if published; then seen=1; break; fi
-  sleep 10
-done
-[ -n "$seen" ] || {
+wait_for_npm || {
   echo "npm does not show $version after fifteen minutes — not tagging. Once it does, on $(git rev-parse HEAD):" >&2
   echo "  git tag -a v$version -m $version && git push origin v$version" >&2
   exit 1

package/dist/commands/mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/commands/mcp.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAInC,eAAO,MAAM,UAAU,QAAO,OA8BxB,CAAA"}
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/commands/mcp.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAyBnC,eAAO,MAAM,UAAU,QAAO,OA2ExB,CAAA"}

package/dist/commands/mcp.js

@@ -1,36 +1,83 @@
 import { CliError } from "@wirecat/cli-base";
 import { annotate, describeProgram } from "@wirecat/cli-base/commands";
-import { changesAuthorityAt, environmentOf, REMOTE_WRITE, rootOf } from "@wirecat/cli-core/cli";
+import { changesAuthorityAt, environmentOf, httpTokenFile, itemOf, MCP_HTTP_DEFAULT_PORT, mcpServerCommand, outputFor, REMOTE_WRITE, refuseUnderReadOnly, renderAnswer, rootOf, } from "@wirecat/cli-core/cli";
+import { portOf, publicUrlOf } from "@wirecat/cli-core/mcp";
 import { Command } from "commander";
 import { configuration } from "../config.js";
 import { IDENTITY } from "../identity.js";
-export const mcpCommand = () => annotate(new Command("mcp"), {
+const settingsOf = (command) => {
+    const flags = command.optsWithGlobals();
+    const env = environmentOf(command).env ?? process.env;
+    const { profile } = configuration.resolveSettings(flags, { env });
+    return { flags, env, profile, tokenFile: httpTokenFile(IDENTITY, profile, env) };
+};
+const withPermission = (command) => command.option("--permission <key=level>", "make a permission stricter for this server only, like messages.send=deny; it never loosens the profile; repeat for more keys", (value, previous = []) => [...previous, value]);
+export const mcpCommand = () => withPermission(annotate(new Command("mcp"), {
     effects: REMOTE_WRITE,
     lifetime: "persistent",
     mcp: false,
     examples: [`${IDENTITY.command} personal mcp`],
 })
     .summary("serve this profile's commands to an AI agent")
-    .description(`serve this profile's commands to an agent over MCP, on stdin and stdout, writes included; the profile's permissions decide — \`claude mcp add ${IDENTITY.command} -- ${IDENTITY.command} personal mcp\``)
+    .description(`serve this profile's commands to an agent over MCP, on stdin and stdout, writes included; the profile's permissions decide — \`claude mcp add ${IDENTITY.command} -- ${IDENTITY.command} personal mcp\``))
+    .option("--http", "serve over HTTP on 127.0.0.1 for ChatGPT and Claude in the browser, behind your tunnel; the profile's permissions decide")
+    .option("--port <port>", `the local port for --http (default ${MCP_HTTP_DEFAULT_PORT})`)
+    .option("--public-url <url>", "the tunnel's https address the browser apps use, e.g. https://<name>.ts.net")
+    .option("--revoke", "forget every login given to a browser app; each must log in again")
+    .addCommand(mcpServerCommand({
+    example: `${IDENTITY.command} personal`,
+    target: (self) => {
+        const { env, profile, tokenFile } = settingsOf(self);
+        return {
+            invocation: `${IDENTITY.command} ${profile}`,
+            profile,
+            envPrefix: IDENTITY.envPrefix,
+            env,
+            tokenFile,
+            argv: [profile, "mcp", "--http"],
+            version: IDENTITY.version,
+        };
+    },
+    answer: (self, item, lines) => renderAnswer(self, outputFor(self), itemOf(item), () => lines.join("\n")),
+}))
     .action(async function () {
-    const flags = this.optsWithGlobals();
-    if (flags.json || flags.jsonl)
+    const { flags, env, profile, tokenFile } = settingsOf(this);
+    if (flags.revoke) {
+        refuseUnderReadOnly(this, "mcp --revoke");
+        const { revokeAll } = await import("@wirecat/cli-core/mcp");
+        revokeAll(tokenFile);
+        renderAnswer(this, outputFor(this), itemOf({ revoked: true, profile }));
+        return;
+    }
+    if (!flags.http && (flags.json || flags.jsonl))
         throw new CliError("validation_error", "MCP over stdio controls its own output; leave out --json and --jsonl");
     const environment = environmentOf(this);
-    const env = environment.env ?? process.env;
-    const { profile } = configuration.resolveSettings(flags, { env });
     const run = environment.runCommand;
     if (!run)
         throw new Error("mcp runs inside the program's run(), which provides runCommand");
     const program = rootOf(this);
-    const { serveMcp } = await import("../mcp.js");
-    await serveMcp({
+    const options = {
         profile,
         commands: describeProgram(program),
         levels: () => configuration.resolveSettings(flags, { env }).permissions,
         authority: changesAuthorityAt(program),
         run,
         ...(environment.signal ? { signal: environment.signal } : {}),
+    };
+    // Loaded here, not at the top: every other command would otherwise pay for the MCP SDK.
+    const { serveMcp, serveMcpOverHttp } = await import("../mcp.js");
+    if (!flags.http)
+        return serveMcp(options);
+    const { renderer } = outputFor(this);
+    await serveMcpOverHttp(options, {
+        publicUrl: publicUrlOf(flags.publicUrl, {
+            missing: "--http",
+            reaches: `the browser apps reach ${IDENTITY.command}`,
+        }),
+        port: portOf(flags.port, MCP_HTTP_DEFAULT_PORT),
+        tokenFile,
+        background: env[`${IDENTITY.envPrefix}_MCP_HTTP`] !== undefined,
+        note: (line) => renderer.note(line),
     });
 });
 //# sourceMappingURL=mcp.js.map

package/dist/commands/mcp.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/commands/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AACtE,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAoB,YAAY,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AACjH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAEzC,MAAM,CAAC,MAAM,UAAU,GAAG,GAAY,EAAE,CACtC,QAAQ,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE;IAC3B,OAAO,EAAE,YAAY;IACrB,QAAQ,EAAE,YAAY;IACtB,GAAG,EAAE,KAAK;IACV,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,eAAe,CAAC;CAC/C,CAAC;KACC,OAAO,CAAC,8CAA8C,CAAC;KACvD,WAAW,CACV,iJAAiJ,QAAQ,CAAC,OAAO,OAAO,QAAQ,CAAC,OAAO,iBAAiB,CAC1M;KACA,MAAM,CAAC,KAAK;IACX,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,EAAe,CAAA;IACjD,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK;QAC3B,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,sEAAsE,CAAC,CAAA;IAChH,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IACvC,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;IAC1C,MAAM,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;IACjE,MAAM,GAAG,GAAG,WAAW,CAAC,UAAU,CAAA;IAClC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAA;IAC3F,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;IAC5B,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;IAC9C,MAAM,QAAQ,CAAC;QACb,OAAO;QACP,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC;QAClC,MAAM,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,WAAW;QACvE,SAAS,EAAE,kBAAkB,CAAC,OAAO,CAAC;QACtC,GAAG;QACH,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/commands/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AACtE,OAAO,EACL,kBAAkB,EAClB,aAAa,EAEb,aAAa,EACb,MAAM,EACN,qBAAqB,EACrB,gBAAgB,EAChB,SAAS,EACT,YAAY,EACZ,mBAAmB,EACnB,YAAY,EACZ,MAAM,GACP,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AASzC,MAAM,UAAU,GAAG,CAAC,OAAgB,EAAE,EAAE;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,eAAe,EAAY,CAAA;IACjD,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;IACrD,MAAM,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;IACjE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,CAAA;AAClF,CAAC,CAAA;AAED,MAAM,cAAc,GAAG,CAAC,OAAgB,EAAE,EAAE,CAC1C,OAAO,CAAC,MAAM,CACZ,0BAA0B,EAC1B,8HAA8H,EAC9H,CAAC,KAAa,EAAE,QAAQ,GAAa,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC,CACjE,CAAA;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,GAAY,EAAE,CACtC,cAAc,CACZ,QAAQ,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE;IAC3B,OAAO,EAAE,YAAY;IACrB,QAAQ,EAAE,YAAY;IACtB,GAAG,EAAE,KAAK;IACV,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,eAAe,CAAC;CAC/C,CAAC;KACC,OAAO,CAAC,8CAA8C,CAAC;KACvD,WAAW,CACV,iJAAiJ,QAAQ,CAAC,OAAO,OAAO,QAAQ,CAAC,OAAO,iBAAiB,CAC1M,CACJ;KACE,MAAM,CACL,QAAQ,EACR,0HAA0H,CAC3H;KACA,MAAM,CAAC,eAAe,EAAE,sCAAsC,qBAAqB,GAAG,CAAC;KACvF,MAAM,CAAC,oBAAoB,EAAE,6EAA6E,CAAC;KAC3G,MAAM,CAAC,UAAU,EAAE,mEAAmE,CAAC;KACvF,UAAU,CACT,gBAAgB,CAAC;IACf,OAAO,EAAE,GAAG,QAAQ,CAAC,OAAO,WAAW;IACvC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QACf,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;QACpD,OAAO;YACL,UAAU,EAAE,GAAG,QAAQ,CAAC,OAAO,IAAI,OAAO,EAAE;YAC5C,OAAO;YACP,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,GAAG;YACH,SAAS;YACT,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC;YAChC,OAAO,EAAE,QAAQ,CAAC,OAAO;SAC1B,CAAA;IACH,CAAC;IACD,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;CACzG,CAAC,CACH;KACA,MAAM,CAAC,KAAK;IACX,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAC3D,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,mBAAmB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAA;QACzC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAA;QAC3D,SAAS,CAAC,SAAS,CAAC,CAAA;QACpB,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;QACvE,OAAM;IACR,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC;QAC5C,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,sEAAsE,CAAC,CAAA;IAChH,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IACvC,MAAM,GAAG,GAAG,WAAW,CAAC,UAAU,CAAA;IAClC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAA;IAC3F,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;IAC5B,MAAM,OAAO,GAAG;QACd,OAAO;QACP,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC;QAClC,MAAM,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,WAAW;QACvE,SAAS,EAAE,kBAAkB,CAAC,OAAO,CAAC;QACtC,GAAG;QACH,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAA;IACD,wFAAwF;IACxF,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;IAChE,IAAI,CAAC,KAAK,CAAC,IAAI;QAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAA;IACzC,MAAM,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IACpC,MAAM,gBAAgB,CAAC,OAAO,EAAE;QAC9B,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE;YACtC,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,0BAA0B,QAAQ,CAAC,OAAO,EAAE;SACtD,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,qBAAqB,CAAC;QAC/C,SAAS;QACT,UAAU,EAAE,GAAG,CAAC,GAAG,QAAQ,CAAC,SAAS,WAAW,CAAC,KAAK,SAAS;QAC/D,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;KACpC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/mcp.d.ts

@@ -16,4 +16,14 @@ export interface McpOptions {
 export declare const createMcpServer: (options: McpOptions) => McpServer;
 /** Serves until the client closes the connection or the command is stopped. */
 export declare const serveMcp: (options: McpOptions) => Promise<void>;
+export interface HttpServing {
+    publicUrl: URL;
+    port: number;
+    tokenFile: string;
+    /** Started by `mcp server start`: its stderr is a log file. */
+    background: boolean;
+    note: (line: string) => void;
+}
+/** Serves on 127.0.0.1 behind the owner's tunnel until the command is stopped (WC-MCP-12). */
+export declare const serveMcpOverHttp: (options: McpOptions, http: HttpServing) => Promise<void>;
 //# sourceMappingURL=mcp.d.ts.map

package/dist/mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AAGxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAA;AAC7D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAEvD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAA;AAGpD,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAA;IAChC,gGAAgG;IAChG,MAAM,EAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAA;IAC7C,SAAS,EAAE,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAA;IAC/C,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,UAAU,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IACjE,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,SAAS,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;CAChD;AAOD,6GAA6G;AAC7G,eAAO,MAAM,eAAe,YAAa,UAAU,KAAG,SAwCrD,CAAA;AAED,+EAA+E;AAC/E,eAAO,MAAM,QAAQ,YAAmB,UAAU,KAAG,OAAO,CAAC,IAAI,CAkBhE,CAAA"}
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AAGxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAA;AAC7D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAUvD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAA;AAGpD,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAA;IAChC,gGAAgG;IAChG,MAAM,EAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAA;IAC7C,SAAS,EAAE,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAA;IAC/C,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,UAAU,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IACjE,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,SAAS,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;CAChD;AAOD,6GAA6G;AAC7G,eAAO,MAAM,eAAe,YAAa,UAAU,KAAG,SAwCrD,CAAA;AAED,+EAA+E;AAC/E,eAAO,MAAM,QAAQ,YAAmB,UAAU,KAAG,OAAO,CAAC,IAAI,CAkBhE,CAAA;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,GAAG,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,+DAA+D;IAC/D,UAAU,EAAE,OAAO,CAAA;IACnB,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC7B;AAED,8FAA8F;AAC9F,eAAO,MAAM,gBAAgB,YAAmB,UAAU,QAAQ,WAAW,KAAG,OAAO,CAAC,IAAI,CAgC3F,CAAA"}

package/dist/mcp.js

@@ -1,7 +1,7 @@
 import { McpServer } from "@modelcontextprotocol/server";
 import { StdioServerTransport } from "@modelcontextprotocol/server/stdio";
-import { mcpErrorResult } from "@wirecat/cli-base";
-import { registerCommands, runCommandForAgent, toolsFromCommands } from "@wirecat/cli-core/mcp";
+import { CliError, mcpErrorResult } from "@wirecat/cli-base";
+import { httpLockFile, MCP_PATH, registerCommands, runCommandForAgent, serveOverHttp, toolsFromCommands, } from "@wirecat/cli-core/mcp";
 import { IDENTITY } from "./identity.js";
 const EXCLUDED = [["mcp"]];
 const isObject = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
@@ -64,4 +64,35 @@ export const serveMcp = async (options) => {
         await server.close();
     }
 };
+/** Serves on 127.0.0.1 behind the owner's tunnel until the command is stopped (WC-MCP-12). */
+export const serveMcpOverHttp = async (options, http) => {
+    const listening = await serveOverHttp(() => createMcpServer(options), {
+        publicUrl: http.publicUrl,
+        port: http.port,
+        tokenFile: http.tokenFile,
+        lockFile: httpLockFile(http.tokenFile),
+        version: IDENTITY.version,
+        appName: IDENTITY.command,
+        // A code in a log file outlives its use; in the background it goes only to the lock that status reads.
+        onCode: (code, expires) => http.note(http.background
+            ? `a new login code for a browser app: \`${IDENTITY.command} ${options.profile} mcp server status\``
+            : `login code for a new browser app: ${code} (until ${expires.toTimeString().slice(0, 5)}; a new one after each login)`),
+        onError: (error) => http.note(`mcp: ${error.message}`),
+    }).catch((error) => {
+        if (error instanceof Error && "code" in error && error.code === "EADDRINUSE")
+            throw new CliError("configuration_error", `port ${http.port} is in use — pass another with --port`);
+        throw error;
+    });
+    http.note(`serving on ${listening.url.href} — point your tunnel at it; connectors use ${new URL(MCP_PATH, http.publicUrl).href}`);
+    try {
+        await new Promise((resolve) => {
+            options.signal?.addEventListener("abort", () => resolve(), { once: true });
+            if (options.signal?.aborted)
+                resolve();
+        });
+    }
+    finally {
+        await listening.close();
+    }
+};
 //# sourceMappingURL=mcp.js.map

package/dist/mcp.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAA;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAGlD,OAAO,EAAmB,gBAAgB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAEhH,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAaxC,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;AAE1B,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CACpE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAEtE,6GAA6G;AAC7G,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAmB,EAAa,EAAE;IAChE,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,EACrD;QACE,YAAY,EACV,GAAG,QAAQ,CAAC,OAAO,uBAAuB,OAAO,CAAC,OAAO,yBAAyB,QAAQ,CAAC,OAAO,iBAAiB;YACnH,oBAAoB,QAAQ,CAAC,OAAO,YAAY,QAAQ,CAAC,OAAO,kCAAkC;YAClG,0GAA0G;YAC1G,wCAAwC;KAC3C,CACF,CAAA;IACD,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAA;IAChE,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAA;IAClG,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,EAAE;QAChD,kBAAkB,EAAE,IAAI;QACxB,aAAa,EAAE,OAAO,CAAC,MAAM;QAC7B,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;QACxB,OAAO,EAAE,QAAQ;QACjB,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAA;IACF,MAAM,QAAQ,GAA+B,MAAM,CAAC,WAAW,CAC7D,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAClB,IAAI,CAAC,OAAO;QACZ;YACE,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBACnB,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;gBAC3E,IAAI,OAAO,IAAI,MAAM;oBAAE,OAAO,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBAC1D,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAA;gBACjF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAA;YACxG,CAAC;SACF;KACF,CAAC,CACH,CAAA;IACD,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAA;IAC9F,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED,+EAA+E;AAC/E,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,EAAE,OAAmB,EAAiB,EAAE;IACnE,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IACvC,IAAI,IAAI,GAAG,GAAG,EAAE,GAAE,CAAC,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,OAAO,CAAA;YAC/B,IAAI,GAAG,GAAG,EAAE;gBACV,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YAC3C,CAAC,CAAA;YACD,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YAC/D,uGAAuG;YACvG,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;gBAAE,IAAI,EAAE,CAAA;YACnC,KAAK,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACpF,CAAC,CAAC,CAAA;IACJ,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAClD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;AACH,CAAC,CAAA"}
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAA;AACzE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAG5D,OAAO,EACL,YAAY,EACZ,QAAQ,EAER,gBAAgB,EAChB,kBAAkB,EAClB,aAAa,EACb,iBAAiB,GAClB,MAAM,uBAAuB,CAAA;AAE9B,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAaxC,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;AAE1B,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CACpE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAEtE,6GAA6G;AAC7G,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAmB,EAAa,EAAE;IAChE,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,EACrD;QACE,YAAY,EACV,GAAG,QAAQ,CAAC,OAAO,uBAAuB,OAAO,CAAC,OAAO,yBAAyB,QAAQ,CAAC,OAAO,iBAAiB;YACnH,oBAAoB,QAAQ,CAAC,OAAO,YAAY,QAAQ,CAAC,OAAO,kCAAkC;YAClG,0GAA0G;YAC1G,wCAAwC;KAC3C,CACF,CAAA;IACD,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAA;IAChE,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAA;IAClG,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,EAAE;QAChD,kBAAkB,EAAE,IAAI;QACxB,aAAa,EAAE,OAAO,CAAC,MAAM;QAC7B,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;QACxB,OAAO,EAAE,QAAQ;QACjB,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAA;IACF,MAAM,QAAQ,GAA+B,MAAM,CAAC,WAAW,CAC7D,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAClB,IAAI,CAAC,OAAO;QACZ;YACE,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBACnB,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;gBAC3E,IAAI,OAAO,IAAI,MAAM;oBAAE,OAAO,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBAC1D,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAA;gBACjF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAA;YACxG,CAAC;SACF;KACF,CAAC,CACH,CAAA;IACD,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAA;IAC9F,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED,+EAA+E;AAC/E,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,EAAE,OAAmB,EAAiB,EAAE;IACnE,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IACvC,IAAI,IAAI,GAAG,GAAG,EAAE,GAAE,CAAC,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,OAAO,CAAA;YAC/B,IAAI,GAAG,GAAG,EAAE;gBACV,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YAC3C,CAAC,CAAA;YACD,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YAC/D,uGAAuG;YACvG,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;gBAAE,IAAI,EAAE,CAAA;YACnC,KAAK,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACpF,CAAC,CAAC,CAAA;IACJ,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAClD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;AACH,CAAC,CAAA;AAWD,8FAA8F;AAC9F,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EAAE,OAAmB,EAAE,IAAiB,EAAiB,EAAE;IAC9F,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE;QACpE,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC;QACtC,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,uGAAuG;QACvG,MAAM,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CACxB,IAAI,CAAC,IAAI,CACP,IAAI,CAAC,UAAU;YACb,CAAC,CAAC,yCAAyC,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,sBAAsB;YACpG,CAAC,CAAC,qCAAqC,IAAI,WAAW,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,+BAA+B,CAC1H;QACH,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,OAAO,EAAE,CAAC;KACvD,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC1B,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;YAC1E,MAAM,IAAI,QAAQ,CAAC,qBAAqB,EAAE,QAAQ,IAAI,CAAC,IAAI,uCAAuC,CAAC,CAAA;QACrG,MAAM,KAAK,CAAA;IACb,CAAC,CAAC,CAAA;IACF,IAAI,CAAC,IAAI,CACP,cAAc,SAAS,CAAC,GAAG,CAAC,IAAI,8CAA8C,IAAI,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CACvH,CAAA;IACD,IAAI,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YAC1E,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;gBAAE,OAAO,EAAE,CAAA;QACxC,CAAC,CAAC,CAAA;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,SAAS,CAAC,KAAK,EAAE,CAAA;IACzB,CAAC;AACH,CAAC,CAAA"}

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.6.1";
+export declare const VERSION = "0.7.0";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -1,2 +1,2 @@
-export const VERSION = "0.6.1";
+export const VERSION = "0.7.0";
 //# sourceMappingURL=version.js.map

package/docs/commands.md

@@ -125,12 +125,66 @@ serve this profile's commands to an agent over MCP, on stdin and stdout, writes
 **Changes something in the service.**
 
 ```sh
-clidev mcp
+clidev mcp [options]
 ```
 
-**Returns:** serve this profile's commands to an AI agent
+| Option | What it does |
+|---|---|
+| `--permission <key=level>` | make a permission stricter for this server only, like messages.send=deny; it never loosens the profile; repeat for more keys. |
+| `--http` | serve over HTTP on 127.0.0.1 for ChatGPT and Claude in the browser, behind your tunnel; the profile's permissions decide. |
+| `--port <port>` | the local port for --http (default 8765). |
+| `--public-url <url>` | the tunnel's https address the browser apps use, e.g. https://<name>.ts.net. |
+| `--revoke` | forget every login given to a browser app; each must log in again. |
+
+### `clidev mcp server`
+
+start, stop and check `mcp --http` in the background; status shows the login code for a browser app
+
+#### `clidev mcp server start`
+
+start `mcp --http` apart from this shell and answer once it listens, with its login code
+
+**Changes something on this computer only.**
+
+```sh
+clidev mcp server start [options]
+```
+
+| Option | What it does |
+|---|---|
+| `--port <port>` | the local port (default 8765). |
+| `--public-url <url>` | the tunnel's https address the browser apps use, e.g. https://<name>.ts.net. |
+| `--permission <key=level>` | make a permission stricter for this server only; repeat for more keys. |
+
+**Returns:** start the HTTP MCP server in the background
+
+**Example:** `clidev personal mcp server start --public-url https://laptop.example.ts.net`
+
+#### `clidev mcp server stop`
+
+stop `mcp --http` — only one that `mcp server start` started
+
+**Changes something on this computer only.**
+
+```sh
+clidev mcp server stop
+```
+
+**Returns:** stop the background HTTP MCP server
+
+**Example:** `clidev personal mcp server stop`
+
+#### `clidev mcp server status`
+
+whether `mcp --http` runs, on which port and address, the login code for a new browser app, and the apps logged in
+
+```sh
+clidev mcp server status
+```
+
+**Returns:** whether the HTTP MCP server runs, its login code and the apps logged in
 
-**Example:** `clidev personal mcp`
+**Example:** `clidev personal mcp server status --json`
 
 ## `clidev upgrade`
 

package/docs/dev/test-matrix.md

@@ -7,7 +7,7 @@ ran it · ⛔ not tested offline, with the reason and where it is checked instea
 Measured from the test run (`coverage/argv.jsonl`), not searched for — see
 [TESTING.md](TESTING.md) for how, and for the states and failures that cut across commands.
 
-**45 ✅ · 2 ⛔ · 0 ❌** — 15 commands, 32 options.
+**51 ✅ · 7 ⛔ · 0 ❌** — 18 commands, 40 options.
 
 | Command | Option | | Note |
 |---|---|---|---|
@@ -20,6 +20,17 @@ Measured from the test run (`coverage/argv.jsonl`), not searched for — see
 | `skill install` | `--for` | ✅ |  |
 | `skill status` |  | ✅ |  |
 | `mcp` |  | ✅ |  |
+| `mcp` | `--permission` | ✅ |  |
+| `mcp` | `--http` | ✅ |  |
+| `mcp` | `--port` | ✅ |  |
+| `mcp` | `--public-url` | ✅ |  |
+| `mcp` | `--revoke` | ✅ |  |
+| `mcp server start` |  | ⛔ | starts a detached `mcp --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/ |
+| `mcp server start` | `--port` | ⛔ | starts a detached `mcp --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/ |
+| `mcp server start` | `--public-url` | ⛔ | starts a detached `mcp --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/ |
+| `mcp server start` | `--permission` | ⛔ | starts a detached `mcp --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/ |
+| `mcp server stop` |  | ⛔ | starts a detached `mcp --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/ |
+| `mcp server status` |  | ✅ |  |
 | `upgrade` |  | ✅ |  |
 | `upgrade` | `--check` | ✅ |  |
 | `config show` |  | ✅ |  |

package/docs/usage.md

@@ -15,7 +15,7 @@ command without one stops with exit code 2 and lists the profiles on this comput
 
 ## Output for scripts
 
-Every command except `mcp` takes `--json`, and prints one JSON value on stdout. Errors are JSON on stderr, with a code to branch
+Every command except `mcp` on stdin and stdout takes `--json`, and prints one JSON value on stdout. Errors are JSON on stderr, with a code to branch
 on. The [command reference](commands.md) lists the codes.
 
 ## Agents
@@ -29,4 +29,11 @@ claude mcp add clidev -- clidev personal mcp
 ```
 
 The server offers every command, the ones that write included. The profile's permissions decide what runs; see
-[settings](configuration.md#permissions).
+[settings](configuration.md#permissions). `--permission <key>=deny` makes one permission key stricter for this server
+only; it never loosens the profile.
+
+For ChatGPT and Claude in the browser, `clidev personal mcp --http --public-url https://laptop.example.ts.net` serves on
+`127.0.0.1` (port 8765, or `--port`) behind your own tunnel. A browser app logs in with a one-time code that the
+command prints; `clidev personal mcp --revoke` ends every login. `clidev personal mcp server start` runs the same
+server in the background, `mcp server status` shows its port, the login code and the apps logged in, and
+`mcp server stop` ends it.

package/kit/dist/interview.js

@@ -6,13 +6,13 @@ export const NAME_QUESTIONS = [
     {
         key: "command",
         flag: "command",
-        text: "The command word people type (lowercase, e.g. cal)",
+        text: "The command word people type (lowercase, e.g. gcal)",
         check: (value) => commandWord.test(value) ? undefined : "lowercase letters, digits and dashes, starting with a letter",
     },
     {
         key: "package",
         flag: "package",
-        text: "The npm package name (e.g. @wirecat/cal-cli)",
+        text: "The npm package name (e.g. @wirecat/gcal-cli)",
         check: (value) => (npmName.test(value) ? undefined : "a valid npm package name, scoped or not"),
     },
     {

package/kit/dist/new.js

@@ -25,17 +25,18 @@ export const speechModels = (languages) => {
         return ["parakeet-v3"];
     return undefined;
 };
-export const languageWarnings = (languages) => languages.flatMap((lang) => [
+// Speech models transcribe voice messages, so only a messenger needs them.
+export const languageWarnings = (languages, messenger) => languages.flatMap((lang) => [
     ...(STEMMED.includes(baseLang(lang))
         ? []
         : [`${lang}: cli-core has no search stemmer for it; search matches whole words only`]),
-    ...(PARAKEET.includes(baseLang(lang)) ? [] : [`${lang}: no speech model in cli-core hears it`]),
+    ...(messenger && !PARAKEET.includes(baseLang(lang)) ? [`${lang}: no speech model in cli-core hears it`] : []),
 ]);
 const NAME_PATTERN = /^[a-z0-9][a-z0-9._-]*$/;
 const NAME_QUESTION = {
     key: "name",
     flag: "name",
-    text: "The folder (and repository) name, e.g. cal-cli",
+    text: "The folder (and repository) name, e.g. gcal-cli",
     check: (value) => (NAME_PATTERN.test(value) ? undefined : "lowercase letters, digits, dots and dashes"),
 };
 const collect = async (args, io) => {
@@ -97,8 +98,9 @@ export const withReference = (agents, category) => {
 export const designDoc = (names, answers) => {
     const rows = INTERVIEW.map((question) => `- **${question.title ?? question.text}:** ${(answers[question.key] ?? []).map((value) => labelOf(question, value)).join(", ")}`);
     const languages = answers.contentLang ?? [];
+    const messenger = answers.category?.[0] === "messenger";
     const speech = speechModels(languages);
-    const warnings = languageWarnings(languages);
+    const warnings = languageWarnings(languages, messenger);
     return [
         `# ${names.command} — design`,
         "",
@@ -116,9 +118,13 @@ export const designDoc = (names, answers) => {
         "## Content languages",
         "",
         `Languages: ${languages.join(", ")}.`,
-        speech
-            ? `If this CLI defines a messenger, set its \`speechModels\` to ${speech.map((model) => `\`${model}\``).join(", ")}.`
-            : "No speech model in cli-core covers all of these languages: leave `speechModels` out.",
+        ...(messenger
+            ? [
+                speech
+                    ? `Set the messenger's \`speechModels\` to ${speech.map((model) => `\`${model}\``).join(", ")}.`
+                    : "No speech model in cli-core covers all of these languages: leave `speechModels` out.",
+            ]
+            : []),
         ...warnings.map((warning) => `- ${warning}`),
         "",
         "## Further answers",
@@ -220,7 +226,7 @@ export const markExecutable = async (cwd, paths) => {
 export const manualSteps = (names) => [
     `1. Create the repository ${names.owner}/${names.name} and its main ruleset (cli-base docs/standards/new-cli.md).`,
     `2. Set npm trusted publishing for ${names.package}, naming release.yml (WC-REL-11), and add any secrets.`,
-    "3. Give .github/workflows/monthly.yml a cron minute between 02:17 and 03:20 UTC that no other repository uses.",
+    "3. Give .github/workflows/monthly.yml a free cron minute from the list in cli-base docs/standards/ci.md (WC-CI-9).",
     "4. WireCat CLIs only: a pull request to cli-base's PARITY_GROUPS, a line in cli-core's WIRECAT_TOOLS and in cli-docs' tools.json.",
 ];
 export const runNew = async (cwd, source, args, io) => {
@@ -261,7 +267,7 @@ export const runNew = async (cwd, source, args, io) => {
     await writeOut(target, MANIFEST, `${JSON.stringify(manifest, null, 2)}\n`);
     await run("git", ["init", "-q", "-b", "main"], { cwd: target });
     await markExecutable(target, [...rendered].filter(([, file]) => file.mode & 0o111).map(([path]) => path));
-    const warnings = languageWarnings(answers.contentLang ?? []);
+    const warnings = languageWarnings(answers.contentLang ?? [], category === "messenger");
     return [
         `Created ${target} from ${source.name}@${source.version}.`,
         ...(warnings.length ? ["", "Content languages:", ...warnings.map((warning) => `  ${warning}`)] : []),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wirecat/cli-template",
-  "version": "0.6.1",
+  "version": "0.7.0",
   "description": "Start a new WireCat CLI: a working skeleton on cli-base and cli-core, copied by new and kept current by upgrade",
   "license": "Apache-2.0",
   "author": "Viacheslav Ptsarev",
@@ -84,8 +84,8 @@
   },
   "dependencies": {
     "@modelcontextprotocol/server": "2.4.0",
-    "@wirecat/cli-base": "0.59.0",
-    "@wirecat/cli-core": "0.444.0",
+    "@wirecat/cli-base": "0.62.0",
+    "@wirecat/cli-core": "0.449.0",
     "commander": "15.0.0"
   },
   "devDependencies": {

package/scripts/test-matrix-untested.ts

@@ -9,4 +9,32 @@ export const UNTESTED: { command: string; option?: string; reason: string }[] =
     option: "--version",
     reason: "Commander answers before any command runs, so the trace never sees it; `pnpm version:check` checks it",
   },
+  {
+    command: "mcp server start",
+    reason:
+      "starts a detached `mcp --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/",
+  },
+  {
+    command: "mcp server start",
+    option: "--port",
+    reason:
+      "starts a detached `mcp --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/",
+  },
+  {
+    command: "mcp server start",
+    option: "--public-url",
+    reason:
+      "starts a detached `mcp --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/",
+  },
+  {
+    command: "mcp server start",
+    option: "--permission",
+    reason:
+      "starts a detached `mcp --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/",
+  },
+  {
+    command: "mcp server stop",
+    reason:
+      "starts a detached `mcp --http` from the built entry; cli-core tests mcpServerCommand, and the background run was checked by hand against dist/",
+  },
 ]

package/src/commands/mcp.ts

@@ -1,38 +1,118 @@
 import { CliError } from "@wirecat/cli-base"
 import { annotate, describeProgram } from "@wirecat/cli-base/commands"
-import { changesAuthorityAt, environmentOf, type GlobalFlags, REMOTE_WRITE, rootOf } from "@wirecat/cli-core/cli"
+import {
+  changesAuthorityAt,
+  environmentOf,
+  type GlobalFlags,
+  httpTokenFile,
+  itemOf,
+  MCP_HTTP_DEFAULT_PORT,
+  mcpServerCommand,
+  outputFor,
+  REMOTE_WRITE,
+  refuseUnderReadOnly,
+  renderAnswer,
+  rootOf,
+} from "@wirecat/cli-core/cli"
+import { portOf, publicUrlOf } from "@wirecat/cli-core/mcp"
 import { Command } from "commander"
 import { configuration } from "../config.js"
 import { IDENTITY } from "../identity.js"
 
+interface McpFlags extends GlobalFlags {
+  http?: boolean
+  port?: string
+  publicUrl?: string
+  revoke?: boolean
+}
+
+const settingsOf = (command: Command) => {
+  const flags = command.optsWithGlobals<McpFlags>()
+  const env = environmentOf(command).env ?? process.env
+  const { profile } = configuration.resolveSettings(flags, { env })
+  return { flags, env, profile, tokenFile: httpTokenFile(IDENTITY, profile, env) }
+}
+
+const withPermission = (command: Command) =>
+  command.option(
+    "--permission <key=level>",
+    "make a permission stricter for this server only, like messages.send=deny; it never loosens the profile; repeat for more keys",
+    (value: string, previous: string[] = []) => [...previous, value],
+  )
+
 export const mcpCommand = (): Command =>
-  annotate(new Command("mcp"), {
-    effects: REMOTE_WRITE,
-    lifetime: "persistent",
-    mcp: false,
-    examples: [`${IDENTITY.command} personal mcp`],
-  })
-    .summary("serve this profile's commands to an AI agent")
-    .description(
-      `serve this profile's commands to an agent over MCP, on stdin and stdout, writes included; the profile's permissions decide — \`claude mcp add ${IDENTITY.command} -- ${IDENTITY.command} personal mcp\``,
+  withPermission(
+    annotate(new Command("mcp"), {
+      effects: REMOTE_WRITE,
+      lifetime: "persistent",
+      mcp: false,
+      examples: [`${IDENTITY.command} personal mcp`],
+    })
+      .summary("serve this profile's commands to an AI agent")
+      .description(
+        `serve this profile's commands to an agent over MCP, on stdin and stdout, writes included; the profile's permissions decide — \`claude mcp add ${IDENTITY.command} -- ${IDENTITY.command} personal mcp\``,
+      ),
+  )
+    .option(
+      "--http",
+      "serve over HTTP on 127.0.0.1 for ChatGPT and Claude in the browser, behind your tunnel; the profile's permissions decide",
+    )
+    .option("--port <port>", `the local port for --http (default ${MCP_HTTP_DEFAULT_PORT})`)
+    .option("--public-url <url>", "the tunnel's https address the browser apps use, e.g. https://<name>.ts.net")
+    .option("--revoke", "forget every login given to a browser app; each must log in again")
+    .addCommand(
+      mcpServerCommand({
+        example: `${IDENTITY.command} personal`,
+        target: (self) => {
+          const { env, profile, tokenFile } = settingsOf(self)
+          return {
+            invocation: `${IDENTITY.command} ${profile}`,
+            profile,
+            envPrefix: IDENTITY.envPrefix,
+            env,
+            tokenFile,
+            argv: [profile, "mcp", "--http"],
+            version: IDENTITY.version,
+          }
+        },
+        answer: (self, item, lines) => renderAnswer(self, outputFor(self), itemOf(item), () => lines.join("\n")),
+      }),
     )
     .action(async function (this: Command) {
-      const flags = this.optsWithGlobals<GlobalFlags>()
-      if (flags.json || flags.jsonl)
+      const { flags, env, profile, tokenFile } = settingsOf(this)
+      if (flags.revoke) {
+        refuseUnderReadOnly(this, "mcp --revoke")
+        const { revokeAll } = await import("@wirecat/cli-core/mcp")
+        revokeAll(tokenFile)
+        renderAnswer(this, outputFor(this), itemOf({ revoked: true, profile }))
+        return
+      }
+      if (!flags.http && (flags.json || flags.jsonl))
         throw new CliError("validation_error", "MCP over stdio controls its own output; leave out --json and --jsonl")
       const environment = environmentOf(this)
-      const env = environment.env ?? process.env
-      const { profile } = configuration.resolveSettings(flags, { env })
       const run = environment.runCommand
       if (!run) throw new Error("mcp runs inside the program's run(), which provides runCommand")
       const program = rootOf(this)
-      const { serveMcp } = await import("../mcp.js")
-      await serveMcp({
+      const options = {
         profile,
         commands: describeProgram(program),
         levels: () => configuration.resolveSettings(flags, { env }).permissions,
         authority: changesAuthorityAt(program),
         run,
         ...(environment.signal ? { signal: environment.signal } : {}),
+      }
+      // Loaded here, not at the top: every other command would otherwise pay for the MCP SDK.
+      const { serveMcp, serveMcpOverHttp } = await import("../mcp.js")
+      if (!flags.http) return serveMcp(options)
+      const { renderer } = outputFor(this)
+      await serveMcpOverHttp(options, {
+        publicUrl: publicUrlOf(flags.publicUrl, {
+          missing: "--http",
+          reaches: `the browser apps reach ${IDENTITY.command}`,
+        }),
+        port: portOf(flags.port, MCP_HTTP_DEFAULT_PORT),
+        tokenFile,
+        background: env[`${IDENTITY.envPrefix}_MCP_HTTP`] !== undefined,
+        note: (line) => renderer.note(line),
       })
     })

package/src/mcp-http.test.ts

@@ -0,0 +1,171 @@
+import { createServer } from "node:net"
+import {
+  Client,
+  type OAuthClientInformationMixed,
+  type OAuthClientProvider,
+  type OAuthTokens,
+  StreamableHTTPClientTransport,
+  UnauthorizedError,
+} from "@modelcontextprotocol/client"
+import { expect, it, vi } from "vitest"
+import { run } from "./program.js"
+
+const started = (argv: string[], signal?: AbortSignal, env?: NodeJS.ProcessEnv) => {
+  const out: string[] = []
+  const err: string[] = []
+  const code = run(argv, {
+    streams: { data: (text) => out.push(text), diagnostic: (text) => err.push(text) },
+    tty: false,
+    ...(signal ? { signal } : {}),
+    ...(env ? { env } : {}),
+  })
+  return { code, out, err }
+}
+
+const answer = async (argv: string[]) => {
+  const one = started(argv)
+  expect(await one.code).toBe(0)
+  return JSON.parse(one.out.join("")).item
+}
+
+const REDIRECT = "http://localhost/callback"
+
+/** Logs in the way a browser app does: registers, types the terminal's code on the consent page, swaps it for tokens. */
+const loggedInClient = async (base: URL, loginCode: () => string) => {
+  const endpoint = new URL("/mcp", base)
+  const saved: { info?: OAuthClientInformationMixed; tokens?: OAuthTokens; verifier?: string; consentAt?: URL } = {}
+  const authProvider: OAuthClientProvider = {
+    get redirectUrl() {
+      return REDIRECT
+    },
+    get clientMetadata() {
+      return {
+        client_name: "Test app",
+        redirect_uris: [REDIRECT],
+        token_endpoint_auth_method: "none",
+        grant_types: ["authorization_code", "refresh_token"],
+        response_types: ["code"],
+      }
+    },
+    clientInformation: () => saved.info,
+    saveClientInformation: (info) => {
+      saved.info = info
+    },
+    tokens: () => saved.tokens,
+    saveTokens: (tokens) => {
+      saved.tokens = tokens
+    },
+    redirectToAuthorization: (url) => {
+      saved.consentAt = url
+    },
+    saveCodeVerifier: (verifier) => {
+      saved.verifier = verifier
+    },
+    codeVerifier: () => saved.verifier ?? "",
+  }
+  const first = new StreamableHTTPClientTransport(endpoint, { authProvider })
+  try {
+    await new Client({ name: "test", version: "1" }).connect(first)
+  } catch (error) {
+    if (!(error instanceof UnauthorizedError)) throw error
+  }
+  if (!saved.consentAt) throw new Error("the server did not ask the client to log in")
+  const typed = new URLSearchParams(saved.consentAt.searchParams)
+  typed.set("login_code", loginCode())
+  const answer = await fetch(new URL("/authorize", base), { method: "POST", body: typed, redirect: "manual" })
+  const location = answer.headers.get("location")
+  if (answer.status !== 302 || !location) throw new Error(`consent refused: ${answer.status}`)
+  await first.finishAuth(new URL(location).searchParams.get("code") ?? "")
+  const client = new Client({ name: "test", version: "1" })
+  await client.connect(new StreamableHTTPClientTransport(endpoint, { authProvider }))
+  return client
+}
+
+const freePort = () =>
+  new Promise<number>((resolve, reject) => {
+    const probe = createServer()
+    probe.once("error", reject)
+    probe.listen(0, "127.0.0.1", () => {
+      const address = probe.address()
+      probe.close(() => (typeof address === "object" && address ? resolve(address.port) : reject(new Error("no port"))))
+    })
+  })
+
+it("serves the three tools behind the browser login, and shows the server in mcp server status until it stops, and frees the lock when it stops", async () => {
+  const port = await freePort()
+  const base = new URL(`http://127.0.0.1:${port}`)
+  const stop = new AbortController()
+  const serving = started(["personal", "mcp", "--http", "--public-url", base.href, "--port", String(port)], stop.signal)
+  await vi.waitFor(() => expect(serving.err.join("\n")).toContain("serving on"))
+  const codes = () => [...serving.err.join("\n").matchAll(/login code for a new browser app: (\S+)/g)].map((m) => m[1])
+  const client = await loggedInClient(base, () => codes()[0] ?? "")
+  try {
+    expect((await client.listTools()).tools.map((tool) => tool.name).sort()).toEqual([
+      "clidev_read",
+      "clidev_tools_search",
+      "clidev_write",
+    ])
+    expect(await answer(["personal", "mcp", "server", "status", "--json"])).toMatchObject({
+      profile: "personal",
+      running: true,
+      port,
+      connector_url: new URL("/mcp", base).href,
+      login_code: { code: codes().at(-1) },
+      clients: [expect.objectContaining({ claimed_name: "Test app" })],
+    })
+  } finally {
+    await client.close()
+    stop.abort()
+    expect(await serving.code).toBe(0)
+  }
+  expect(await answer(["personal", "mcp", "server", "status", "--json"])).toMatchObject({ running: false })
+})
+
+it("refuses mcp --http without the tunnel's address", async () => {
+  const one = started(["personal", "mcp", "--http", "--json"])
+  expect(await one.code).not.toBe(0)
+  expect(one.err.join("\n")).toContain("--public-url")
+})
+
+it("forgets every browser login on --revoke", async () => {
+  expect(await answer(["personal", "mcp", "--revoke", "--json"])).toEqual({ revoked: true, profile: "personal" })
+})
+
+it("reads --permission through the profile's settings, refusing one that is not a command path and level", async () => {
+  const one = started(["personal", "mcp", "--permission", "messages.send", "--json"])
+  expect(await one.code).toBe(2)
+  expect(one.err.join("\n")).toContain("--permission takes a command path and level")
+})
+
+it("keeps the login code out of a background server's log, and refuses a port in use", async () => {
+  const port = await freePort()
+  const url = `http://127.0.0.1:${port}`
+  const stop = new AbortController()
+  const background = started(["personal", "mcp", "--http", "--public-url", url, "--port", String(port)], stop.signal, {
+    ...process.env,
+    CLIDEV_MCP_HTTP: "personal",
+  })
+  try {
+    await vi.waitFor(() => expect(background.err.join("\n")).toContain("serving on"))
+    expect(background.err.join("\n")).toContain(
+      "a new login code for a browser app: `clidev personal mcp server status`",
+    )
+    const second = started(["work", "mcp", "--http", "--public-url", url, "--port", String(port), "--json"])
+    expect(await second.code).not.toBe(0)
+    expect(second.err.join("\n")).toContain(`port ${port} is in use`)
+  } finally {
+    stop.abort()
+    await background.code
+  }
+})
+
+it("refuses --json for MCP over stdio", async () => {
+  const one = started(["personal", "mcp", "--json"])
+  expect(await one.code).toBe(2)
+  expect(one.err.join("\n")).toContain("MCP over stdio controls its own output")
+})
+
+it("refuses --revoke under the read-only lock", async () => {
+  const one = started(["personal", "mcp", "--revoke", "--json"], undefined, { ...process.env, CLIDEV_READ_ONLY: "1" })
+  expect(await one.code).toBe(5)
+})

package/src/mcp.ts

@@ -1,9 +1,17 @@
 import { McpServer } from "@modelcontextprotocol/server"
 import { StdioServerTransport } from "@modelcontextprotocol/server/stdio"
-import { mcpErrorResult } from "@wirecat/cli-base"
+import { CliError, mcpErrorResult } from "@wirecat/cli-base"
 import type { CommandInfo } from "@wirecat/cli-base/commands"
 import type { RunOptions } from "@wirecat/cli-core/cli"
-import { type McpCommand, registerCommands, runCommandForAgent, toolsFromCommands } from "@wirecat/cli-core/mcp"
+import {
+  httpLockFile,
+  MCP_PATH,
+  type McpCommand,
+  registerCommands,
+  runCommandForAgent,
+  serveOverHttp,
+  toolsFromCommands,
+} from "@wirecat/cli-core/mcp"
 import type { Level } from "@wirecat/cli-core/sends"
 import { IDENTITY } from "./identity.js"
 
@@ -86,3 +94,47 @@ export const serveMcp = async (options: McpOptions): Promise<void> => {
     await server.close()
   }
 }
+
+export interface HttpServing {
+  publicUrl: URL
+  port: number
+  tokenFile: string
+  /** Started by `mcp server start`: its stderr is a log file. */
+  background: boolean
+  note: (line: string) => void
+}
+
+/** Serves on 127.0.0.1 behind the owner's tunnel until the command is stopped (WC-MCP-12). */
+export const serveMcpOverHttp = async (options: McpOptions, http: HttpServing): Promise<void> => {
+  const listening = await serveOverHttp(() => createMcpServer(options), {
+    publicUrl: http.publicUrl,
+    port: http.port,
+    tokenFile: http.tokenFile,
+    lockFile: httpLockFile(http.tokenFile),
+    version: IDENTITY.version,
+    appName: IDENTITY.command,
+    // A code in a log file outlives its use; in the background it goes only to the lock that status reads.
+    onCode: (code, expires) =>
+      http.note(
+        http.background
+          ? `a new login code for a browser app: \`${IDENTITY.command} ${options.profile} mcp server status\``
+          : `login code for a new browser app: ${code} (until ${expires.toTimeString().slice(0, 5)}; a new one after each login)`,
+      ),
+    onError: (error) => http.note(`mcp: ${error.message}`),
+  }).catch((error: unknown) => {
+    if (error instanceof Error && "code" in error && error.code === "EADDRINUSE")
+      throw new CliError("configuration_error", `port ${http.port} is in use — pass another with --port`)
+    throw error
+  })
+  http.note(
+    `serving on ${listening.url.href} — point your tunnel at it; connectors use ${new URL(MCP_PATH, http.publicUrl).href}`,
+  )
+  try {
+    await new Promise<void>((resolve) => {
+      options.signal?.addEventListener("abort", () => resolve(), { once: true })
+      if (options.signal?.aborted) resolve()
+    })
+  } finally {
+    await listening.close()
+  }
+}

package/src/roots.test.ts

@@ -77,13 +77,18 @@ it("skill status and skill show --for read what skill install wrote", async () =
   expect((await ran(["skill", "install", "--for", "claude", "--json"])).code).toBe(0)
   const status = await ran(["skill", "status", "--json"])
   expect(status.code).toBe(0)
-  expect(JSON.parse(status.out).targets).toEqual([
+  // cli-core #2059 wraps skill answers in `{ item, meta }`; accept both until this CLI pins the release that ships it.
+  const answer = (out: string) => {
+    const body = JSON.parse(out)
+    return body.item ?? body
+  }
+  expect(answer(status.out).targets).toEqual([
     expect.objectContaining({ target: "claude", state: "current" }),
     expect.objectContaining({ target: "agents", installed: null, state: "missing" }),
   ])
   const shown = await ran(["skill", "show", "--for", "claude", "--json"])
   expect(shown.code).toBe(0)
-  expect(JSON.parse(shown.out)).toMatchObject({
+  expect(answer(shown.out)).toMatchObject({
     target: "claude",
     content: expect.stringContaining("name: clidev-cli"),
   })

package/src/version.ts

@@ -1 +1 @@
-export const VERSION = "0.6.1"
+export const VERSION = "0.7.0"