burn-mcp-server 2.0.5 → 2.0.7

package/src/vercel-handler.ts

@@ -0,0 +1,20 @@
+// Vercel Edge handler — pre-bundled by esbuild into api/mcp.mjs
+
+import { handleMcpRequest } from './http.js'
+
+export const config = { runtime: 'edge' }
+
+export default async function handler(req: Request): Promise<Response> {
+  try {
+    return await handleMcpRequest(req)
+  } catch (e: any) {
+    return new Response(JSON.stringify({
+      error: 'Handler threw',
+      message: String(e?.message || e),
+      stack: String(e?.stack || '').slice(0, 2000),
+    }), {
+      status: 500,
+      headers: { 'content-type': 'application/json' },
+    })
+  }
+}

package/src/vercel-node-handler.ts

@@ -0,0 +1,76 @@
+// Vercel Node runtime handler — uses StreamableHTTPServerTransport (non-Web variant).
+// Pre-bundled by esbuild into api/mcp.js (Vercel detects .js as Node function).
+
+import type { IncomingMessage, ServerResponse } from 'node:http'
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js'
+import { createClient } from '@supabase/supabase-js'
+import { getOrExchangeSession } from './lib/auth.js'
+import { createBurnServer } from './setup.js'
+
+const SUPABASE_URL = process.env.BURN_SUPABASE_URL || 'https://juqtxylquemiuvvmgbej.supabase.co'
+const SUPABASE_ANON_KEY = process.env.BURN_SUPABASE_ANON_KEY || 'sb_publishable_reVgmmCC6ndIo6jFRMM2LQ_wujj5FrO'
+
+export default async function handler(req: IncomingMessage, res: ServerResponse): Promise<void> {
+  try {
+    // --- Auth ---
+    const authHeader = (req.headers.authorization || req.headers.Authorization || '') as string
+    const m = authHeader.match(/^Bearer\s+(.+)$/i)
+    const token = m?.[1]?.trim()
+
+    if (!token) {
+      res.statusCode = 401
+      res.setHeader('content-type', 'application/json')
+      res.end(JSON.stringify({
+        error: 'Missing Authorization header',
+        hint: 'Add `Authorization: Bearer <BURN_MCP_TOKEN>` — get yours at https://burn451.cloud → Settings → MCP Server.',
+      }))
+      return
+    }
+
+    // --- Exchange token → Supabase session (in-memory cache per token) ---
+    let session
+    try {
+      session = await getOrExchangeSession(token)
+    } catch (e: any) {
+      res.statusCode = 401
+      res.setHeader('content-type', 'application/json')
+      res.end(JSON.stringify({ error: 'Invalid or expired Burn MCP token', detail: String(e?.message || e) }))
+      return
+    }
+
+    // --- Per-request Supabase client with JWT in headers ---
+    const supabase = createClient(SUPABASE_URL, SUPABASE_ANON_KEY, {
+      auth: { persistSession: false, autoRefreshToken: false, detectSessionInUrl: false },
+      global: { headers: { Authorization: `Bearer ${session.access_token}` } },
+    })
+
+    const server = createBurnServer(supabase, { rateLimitPerMin: 60 })
+
+    // --- Stateless transport, JSON response mode ---
+    const transport = new StreamableHTTPServerTransport({
+      sessionIdGenerator: undefined,
+      enableJsonResponse: true,
+    })
+
+    await server.connect(transport)
+
+    // Read body — Vercel Node already parses JSON for us at req.body, but let's be safe
+    let parsedBody: unknown
+    if ((req as any).body !== undefined) {
+      parsedBody = (req as any).body
+    } else {
+      const chunks: Buffer[] = []
+      for await (const c of req) chunks.push(c as Buffer)
+      const raw = Buffer.concat(chunks).toString('utf8')
+      try { parsedBody = raw ? JSON.parse(raw) : undefined } catch { parsedBody = undefined }
+    }
+
+    await transport.handleRequest(req as any, res, parsedBody)
+  } catch (e: any) {
+    if (!res.headersSent) {
+      res.statusCode = 500
+      res.setHeader('content-type', 'application/json')
+      res.end(JSON.stringify({ error: 'Handler threw', message: String(e?.message || e), stack: String(e?.stack || '').slice(0, 2000) }))
+    }
+  }
+}

package/tsconfig.json

@@ -1,14 +1,18 @@
 {
   "compilerOptions": {
-    "target": "ES2020",
-    "module": "commonjs",
-    "lib": ["ES2020"],
+    "target": "ES2022",
+    "module": "ES2022",
+    "moduleResolution": "node",
+    "lib": ["ES2022"],
     "outDir": "./dist",
     "rootDir": "./src",
-    "strict": true,
+    "strict": false,
     "esModuleInterop": true,
     "skipLibCheck": true,
-    "resolveJsonModule": true
+    "resolveJsonModule": true,
+    "noEmit": true,
+    "allowJs": true
   },
-  "include": ["src/**/*"]
+  "include": ["src/lib/**/*", "src/index.ts", "src/http.ts", "src/http-dev.ts"],
+  "exclude": ["src/setup.ts", "api/**/*", "dist/**/*", "node_modules/**/*"]
 }

package/vercel.json

@@ -0,0 +1,9 @@
+{
+  "$schema": "https://openapi.vercel.sh/vercel.json",
+  "buildCommand": "npm run build:vercel",
+  "outputDirectory": "public",
+  "rewrites": [
+    { "source": "/mcp", "destination": "/api/mcp" },
+    { "source": "/mcp/(.*)", "destination": "/api/mcp" }
+  ]
+}

package/.mcpregistry_github_token

@@ -1 +0,0 @@
-ghu_O9YKcVdRYkRh7toV5NSHdMPiXcLm022eK2rf

package/.mcpregistry_registry_token

@@ -1 +0,0 @@
-{"token":"eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJtY3AtcmVnaXN0cnkiLCJleHAiOjE3NzU2MjUxNTcsIm5iZiI6MTc3NTYyNDg1NywiaWF0IjoxNzc1NjI0ODU3LCJhdXRoX21ldGhvZCI6ImdpdGh1Yi1hdCIsImF1dGhfbWV0aG9kX3N1YiI6IkZpc2hlcjUyMSIsInBlcm1pc3Npb25zIjpbeyJhY3Rpb24iOiJwdWJsaXNoIiwicmVzb3VyY2UiOiJpby5naXRodWIuRmlzaGVyNTIxLyoifV19.xHyojzKsFpwXquzD5L_RWurjUH-q6LlNM0Tf75AsN5QkOsDidVszBkb2vXGxJGXfwvUlgi2AA47sjujdP5tNCA","expires_at":1775625157}

package/smithery.yaml

@@ -1,17 +0,0 @@
-# Smithery configuration file: https://smithery.ai/docs/config#smitheryyaml
-
-startCommand:
-  type: stdio
-
-configSchema:
-  type: object
-  required:
-    - burnMcpToken
-  properties:
-    burnMcpToken:
-      type: string
-      description: Long-lived MCP access token from Burn App Settings page.
-
-commandFunction:
-  |-
-  (config) => ({ command: 'npx', args: ['-y', 'burn-mcp-server'], env: { BURN_MCP_TOKEN: config.burnMcpToken } })