blackops-onboard 0.4.0 → 0.7.0

package/bin/onboard.mjs

@@ -16,7 +16,7 @@ import path from 'node:path'
 import os from 'node:os'
 import readline from 'node:readline/promises'
 
-const VERSION = '0.4.0'
+const VERSION = '0.7.0'
 const INSTALL_URL = process.env.BLACKOPS_INSTALL_URL || 'https://blackopscenter.com/api/install'
 const CONFIG_DIR = path.join(os.homedir(), '.blackops')
 const CONFIG_PATH = path.join(CONFIG_DIR, 'config.json')
@@ -68,15 +68,35 @@ function writeJsonAtomic(filePath, value) {
 // All known clients use the same `mcpServers.<name>.{type,url,headers}`
 // JSON shape, so a single writer covers them.
 
+// `transport: 'http'` writes the native streamable HTTP entry that
+// Claude Code and Cursor both understand:
+//   { type: 'http', url, headers: { Authorization: 'Bearer ...' } }
+//
+// `transport: 'stdio-bridge'` writes an `mcp-remote` stdio shim, used for
+// Claude Desktop and Cline which only speak stdio MCP today:
+//   { command: 'npx', args: ['-y', 'mcp-remote', url, '--header', 'Authorization: Bearer ...'] }
+
 function getClientConfigs(homedir, platform) {
   const APPDATA = process.env.APPDATA || ''
   return [
     {
+      // Claude Code's canonical config path is ~/.claude.json (single file at
+      // home), NOT ~/.claude/settings.json. The latter holds permissions/hooks
+      // but Claude Code only reads mcpServers from ~/.claude.json.
       id: 'claude-code',
       label: 'Claude Code',
-      path: path.join(homedir, '.claude', 'settings.json'),
+      path: path.join(homedir, '.claude.json'),
+      transport: 'http',
       alwaysInstall: true,
     },
+    {
+      // Legacy/secondary path kept for any client that still reads it.
+      // Harmless duplicate; cheap insurance against tool-discovery drift.
+      id: 'claude-code-legacy',
+      label: 'Claude Code (legacy settings.json)',
+      path: path.join(homedir, '.claude', 'settings.json'),
+      transport: 'http',
+    },
     {
       id: 'claude-desktop',
       label: 'Claude Desktop',
@@ -86,20 +106,52 @@ function getClientConfigs(homedir, platform) {
           : platform === 'win32'
             ? path.join(APPDATA, 'Claude', 'claude_desktop_config.json')
             : path.join(homedir, '.config', 'Claude', 'claude_desktop_config.json'),
+      transport: 'stdio-bridge',
     },
     {
       id: 'cursor',
       label: 'Cursor',
       path: path.join(homedir, '.cursor', 'mcp.json'),
+      transport: 'http',
     },
     {
       id: 'cline',
       label: 'Cline (VS Code)',
       path: path.join(homedir, '.cline', 'mcp_settings.json'),
+      transport: 'stdio-bridge',
     },
   ]
 }
 
+function buildServerEntry(transport, { mcpUrl, token }) {
+  if (transport === 'stdio-bridge') {
+    // --transport http-only avoids mcp-remote's SSE-fallback path (which has
+    // historically hung for several minutes on slow tool calls).
+    // --timeout 30000 caps any single request at 30s instead of the 4-minute
+    // default, so a stuck call surfaces as an error the agent can recover
+    // from instead of a silent hang.
+    return {
+      command: 'npx',
+      args: [
+        '-y',
+        'mcp-remote',
+        mcpUrl,
+        '--header',
+        `Authorization: Bearer ${token}`,
+        '--transport',
+        'http-only',
+        '--timeout',
+        '30000',
+      ],
+    }
+  }
+  return {
+    type: 'http',
+    url: mcpUrl,
+    headers: { Authorization: `Bearer ${token}` },
+  }
+}
+
 function clientIsInstalled(cfg) {
   if (cfg.alwaysInstall) return true
   // File exists OR its parent dir exists (covers cases where the user
@@ -112,11 +164,7 @@ function clientIsInstalled(cfg) {
 function injectMcpServer(cfg, { mcpServerName, mcpUrl, token }) {
   const existing = readJsonSafe(cfg.path) ?? {}
   existing.mcpServers = existing.mcpServers ?? {}
-  existing.mcpServers[mcpServerName] = {
-    type: 'http',
-    url: mcpUrl,
-    headers: { Authorization: `Bearer ${token}` },
-  }
+  existing.mcpServers[mcpServerName] = buildServerEntry(cfg.transport, { mcpUrl, token })
   writeJsonAtomic(cfg.path, existing)
 }
 
@@ -208,22 +256,28 @@ async function main() {
     err(`Could not write ${f.client.label} config: ${f.error}`)
   }
 
-  // 4. Always print the universal snippet as fallback for any other MCP client.
+  // 4. Always print universal snippets as fallback for any other MCP client.
+  // Two formats — pick whichever your client supports.
   log()
-  log(`${DIM}Using a different MCP client? Add this to its config under \`mcpServers\`:${RESET}`)
+  log(`${DIM}Using a different MCP client? Add ONE of these to its config under \`mcpServers\`:${RESET}`)
   log()
-  const snippet = JSON.stringify(
-    {
-      [config.mcp_server_name]: {
-        type: 'http',
-        url: config.mcp_url,
-        headers: { Authorization: `Bearer ${config.token}` },
-      },
-    },
-    null,
-    2
+  log(`${DIM}// HTTP transport (Claude Code, Cursor, etc.):${RESET}`)
+  log(
+    `${DIM}${JSON.stringify(
+      { [config.mcp_server_name]: buildServerEntry('http', { mcpUrl: config.mcp_url, token: config.token }) },
+      null,
+      2
+    )}${RESET}`
+  )
+  log()
+  log(`${DIM}// stdio bridge (Claude Desktop, Cline, anything stdio-only):${RESET}`)
+  log(
+    `${DIM}${JSON.stringify(
+      { [config.mcp_server_name]: buildServerEntry('stdio-bridge', { mcpUrl: config.mcp_url, token: config.token }) },
+      null,
+      2
+    )}${RESET}`
   )
-  log(`${DIM}${snippet}${RESET}`)
 
   // 5. Tell the user the one thing to say next. Single line, copy-pasteable.
   log()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blackops-onboard",
-  "version": "0.4.0",
+  "version": "0.7.0",
   "description": "Agent-first onboarding for BlackOps Center. Run via `npx blackops-onboard` to provision your account through Claude Code.",
   "type": "module",
   "publishConfig": {