burn-mcp-server 2.0.6 → 2.1.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "burn-mcp-server",
-  "version": "2.0.6",
+  "version": "2.1.0",
   "mcpName": "io.github.Fisher521/burn-mcp-server",
   "description": "Burn MCP — give your AI agent a reading workflow. 26 tools to search, triage, burn, vault, and analyze your saved articles. Works with Claude, Cursor, Windsurf.",
   "main": "dist/index.js",

package/server.json

@@ -7,12 +7,12 @@
     "source": "github"
   },
   "websiteUrl": "https://burn451.cloud",
-  "version": "2.0.6",
+  "version": "2.1.0",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "burn-mcp-server",
-      "version": "2.0.6",
+      "version": "2.1.0",
       "transport": {
         "type": "stdio"
       },
@@ -26,5 +26,19 @@
         }
       ]
     }
+  ],
+  "remotes": [
+    {
+      "type": "streamable-http",
+      "url": "https://burn-mcp-server.vercel.app/api/mcp",
+      "headers": [
+        {
+          "name": "Authorization",
+          "description": "Bearer <BURN_MCP_TOKEN> — generate at https://burn451.cloud → Settings → MCP Server",
+          "isRequired": true,
+          "isSecret": true
+        }
+      ]
+    }
   ]
 }

package/src/vercel-node-handler.ts

@@ -0,0 +1,76 @@
+// Vercel Node runtime handler — uses StreamableHTTPServerTransport (non-Web variant).
+// Pre-bundled by esbuild into api/mcp.js (Vercel detects .js as Node function).
+
+import type { IncomingMessage, ServerResponse } from 'node:http'
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js'
+import { createClient } from '@supabase/supabase-js'
+import { getOrExchangeSession } from './lib/auth.js'
+import { createBurnServer } from './setup.js'
+
+const SUPABASE_URL = process.env.BURN_SUPABASE_URL || 'https://juqtxylquemiuvvmgbej.supabase.co'
+const SUPABASE_ANON_KEY = process.env.BURN_SUPABASE_ANON_KEY || 'sb_publishable_reVgmmCC6ndIo6jFRMM2LQ_wujj5FrO'
+
+export default async function handler(req: IncomingMessage, res: ServerResponse): Promise<void> {
+  try {
+    // --- Auth ---
+    const authHeader = (req.headers.authorization || req.headers.Authorization || '') as string
+    const m = authHeader.match(/^Bearer\s+(.+)$/i)
+    const token = m?.[1]?.trim()
+
+    if (!token) {
+      res.statusCode = 401
+      res.setHeader('content-type', 'application/json')
+      res.end(JSON.stringify({
+        error: 'Missing Authorization header',
+        hint: 'Add `Authorization: Bearer <BURN_MCP_TOKEN>` — get yours at https://burn451.cloud → Settings → MCP Server.',
+      }))
+      return
+    }
+
+    // --- Exchange token → Supabase session (in-memory cache per token) ---
+    let session
+    try {
+      session = await getOrExchangeSession(token)
+    } catch (e: any) {
+      res.statusCode = 401
+      res.setHeader('content-type', 'application/json')
+      res.end(JSON.stringify({ error: 'Invalid or expired Burn MCP token', detail: String(e?.message || e) }))
+      return
+    }
+
+    // --- Per-request Supabase client with JWT in headers ---
+    const supabase = createClient(SUPABASE_URL, SUPABASE_ANON_KEY, {
+      auth: { persistSession: false, autoRefreshToken: false, detectSessionInUrl: false },
+      global: { headers: { Authorization: `Bearer ${session.access_token}` } },
+    })
+
+    const server = createBurnServer(supabase, { rateLimitPerMin: 60 })
+
+    // --- Stateless transport, JSON response mode ---
+    const transport = new StreamableHTTPServerTransport({
+      sessionIdGenerator: undefined,
+      enableJsonResponse: true,
+    })
+
+    await server.connect(transport)
+
+    // Read body — Vercel Node already parses JSON for us at req.body, but let's be safe
+    let parsedBody: unknown
+    if ((req as any).body !== undefined) {
+      parsedBody = (req as any).body
+    } else {
+      const chunks: Buffer[] = []
+      for await (const c of req) chunks.push(c as Buffer)
+      const raw = Buffer.concat(chunks).toString('utf8')
+      try { parsedBody = raw ? JSON.parse(raw) : undefined } catch { parsedBody = undefined }
+    }
+
+    await transport.handleRequest(req as any, res, parsedBody)
+  } catch (e: any) {
+    if (!res.headersSent) {
+      res.statusCode = 500
+      res.setHeader('content-type', 'application/json')
+      res.end(JSON.stringify({ error: 'Handler threw', message: String(e?.message || e), stack: String(e?.stack || '').slice(0, 2000) }))
+    }
+  }
+}

package/vercel.json

@@ -0,0 +1,11 @@
+{
+  "functions": {
+    "api/mcp.js": {
+      "runtime": "nodejs20.x",
+      "maxDuration": 30
+    }
+  },
+  "rewrites": [
+    { "source": "/mcp", "destination": "/api/mcp" }
+  ]
+}