contentrain 0.4.4 → 0.5.1

package/dist/doctor-MOf_LQEL.mjs

@@ -0,0 +1,95 @@
+import { i as pc, o as statusIcon } from "./ui-B8l_LC36.mjs";
+import { r as resolveProjectRoot } from "./context-OskMGy8y.mjs";
+import { defineCommand } from "citty";
+import { intro, log, outro, spinner } from "@clack/prompts";
+import { runDoctor } from "@contentrain/mcp/core/doctor";
+//#region src/commands/doctor.ts
+/**
+* Thin CLI wrapper over the shared `runDoctor()` from `@contentrain/mcp`.
+*
+* All health-check logic lives in the MCP core so the same report
+* drives three consumers: this command, the `contentrain_doctor` MCP
+* tool, and the Serve UI's `/api/doctor` route. Behaviour in the
+* default (non-`--json`) mode is unchanged — same check labels, same
+* details, same grouped usage output.
+*/
+var doctor_default = defineCommand({
+	meta: {
+		name: "doctor",
+		description: "Check project health and environment"
+	},
+	args: {
+		root: {
+			type: "string",
+			description: "Project root path",
+			required: false
+		},
+		usage: {
+			type: "boolean",
+			description: "Analyze content key usage in source files",
+			required: false
+		},
+		json: {
+			type: "boolean",
+			description: "Emit the raw DoctorReport JSON",
+			required: false
+		}
+	},
+	async run({ args }) {
+		const projectRoot = await resolveProjectRoot(args.root);
+		if (Boolean(args.json)) {
+			const report = await runDoctor(projectRoot, { usage: Boolean(args.usage) });
+			process.stdout.write(JSON.stringify(report, null, 2));
+			if (report.summary.failed > 0) process.exitCode = 1;
+			return;
+		}
+		intro(pc.bold("contentrain doctor"));
+		const s = spinner();
+		s.start("Running health checks...");
+		if (args.usage) s.message("Analyzing content key usage...");
+		const report = await runDoctor(projectRoot, { usage: Boolean(args.usage) });
+		s.stop("Health checks complete");
+		for (const check of report.checks) log.message(`${statusIcon(check.pass)} ${pc.bold(check.name)}: ${check.detail}`);
+		if (report.usage?.unusedKeys.length) {
+			log.message("");
+			log.message(pc.bold("  Unused keys:"));
+			const grouped = groupBy(report.usage.unusedKeys, (e) => e.model);
+			for (const [model, entries] of Object.entries(grouped)) {
+				const keyList = entries.length <= 5 ? entries.map((e) => e.key).join(", ") : `${entries.slice(0, 5).map((e) => e.key).join(", ")} (+${entries.length - 5} more)`;
+				log.message(`    ${pc.dim(model)}: ${pc.yellow(keyList)}`);
+			}
+		}
+		if (report.usage?.duplicateValues.length) {
+			log.message("");
+			log.message(pc.bold("  Duplicate values:"));
+			for (const dv of report.usage.duplicateValues.slice(0, 10)) {
+				const truncated = dv.value.length > 30 ? `${dv.value.slice(0, 30)}...` : dv.value;
+				log.message(`    ${pc.dim(`${dv.model}/${dv.locale}`)}: ${pc.yellow(`"${truncated}"`)} → [${dv.keys.join(", ")}]`);
+			}
+			if (report.usage.duplicateValues.length > 10) log.message(`    ... and ${report.usage.duplicateValues.length - 10} more`);
+		}
+		if (report.usage?.missingLocaleKeys.length) {
+			log.message("");
+			log.message(pc.bold("  Missing translations:"));
+			const grouped = groupBy(report.usage.missingLocaleKeys, (e) => `${e.model}/${e.missingIn}`);
+			for (const [label, entries] of Object.entries(grouped)) log.message(`    ${pc.dim(label)}: ${pc.yellow(`${entries.length} key(s)`)}`);
+		}
+		const { passed, failed } = report.summary;
+		if (failed === 0) outro(pc.green(`All ${passed} checks passed!`));
+		else {
+			outro(pc.yellow(`${passed} passed, ${failed} failed`));
+			process.exitCode = 1;
+		}
+	}
+});
+function groupBy(arr, keyFn) {
+	const result = {};
+	for (const item of arr) {
+		const key = keyFn(item);
+		if (!result[key]) result[key] = [];
+		result[key].push(item);
+	}
+	return result;
+}
+//#endregion
+export { doctor_default as default };

package/dist/{generate-DrUojrk8.mjs → generate-ByscV5SN.mjs}

@@ -1,5 +1,5 @@
-import { n as requireInitialized, r as resolveProjectRoot, t as loadProjectContext } from "./context-An3xrvcP.mjs";
-import { i as pc } from "./ui-B5mXontH.mjs";
+import { i as pc } from "./ui-B8l_LC36.mjs";
+import { n as requireInitialized, r as resolveProjectRoot, t as loadProjectContext } from "./context-OskMGy8y.mjs";
 import { defineCommand } from "citty";
 import { intro, log, outro, spinner } from "@clack/prompts";
 import { join } from "node:path";
@@ -24,18 +24,33 @@ var generate_default = defineCommand({
 			type: "boolean",
 			description: "Watch for changes and regenerate",
 			required: false
+		},
+		json: {
+			type: "boolean",
+			description: "Emit the generate result as JSON (silences pretty output)",
+			required: false
 		}
 	},
 	async run({ args }) {
 		const projectRoot = await resolveProjectRoot(args.root);
 		requireInitialized(await loadProjectContext(projectRoot));
-		intro(pc.bold("contentrain generate"));
-		const s = spinner();
-		s.start("Generating SDK client...");
+		const useJson = Boolean(args.json);
+		if (!useJson) intro(pc.bold("contentrain generate"));
+		const s = useJson ? null : spinner();
+		s?.start("Generating SDK client...");
 		try {
 			const { generate } = await import("@contentrain/query/generate");
 			const result = await generate({ projectRoot });
-			s.stop("SDK client generated");
+			s?.stop("SDK client generated");
+			if (useJson) {
+				process.stdout.write(JSON.stringify({
+					generatedFiles: result.generatedFiles,
+					typesCount: result.typesCount,
+					dataModulesCount: result.dataModulesCount,
+					packageJsonUpdated: Boolean(result.packageJsonUpdated)
+				}, null, 2));
+				return;
+			}
 			log.success(`Output: ${pc.cyan(".contentrain/client/")}`);
 			log.message(`  Files:  ${result.generatedFiles.length}`);
 			log.message(`  Types:  ${result.typesCount}`);
@@ -66,11 +81,13 @@ var generate_default = defineCommand({
 				await new Promise(() => {});
 			}
 		} catch (error) {
-			s.stop("Generation failed");
-			log.error(error instanceof Error ? error.message : String(error));
+			s?.stop("Generation failed");
+			const message = error instanceof Error ? error.message : String(error);
+			if (useJson) process.stdout.write(JSON.stringify({ error: message }, null, 2));
+			else log.error(message);
 			process.exitCode = 1;
 		}
-		outro("");
+		if (!useJson) outro("");
 	}
 });
 //#endregion

package/dist/index.mjs

@@ -1,25 +1,63 @@
 #!/usr/bin/env node
+import { i as pc } from "./ui-B8l_LC36.mjs";
 import { defineCommand, runMain } from "citty";
+//#region package.json
+var version = "0.5.1";
+//#endregion
+//#region src/utils/debug.ts
+/**
+* Debug logging — silent by default, enabled by either the
+* `--debug` flag (recognised per-command) or the
+* `CONTENTRAIN_DEBUG=1` env var. Intended for diagnosing
+* git transactions, MCP calls, and file writes when the
+* user-facing output isn't enough.
+*
+* The tiny helper here is deliberately local — we do not want
+* to ship a logging dependency for something this small.
+* Everything routes through stderr so `--json` stdout payloads
+* stay clean and CI can still capture diagnostic output.
+*/
+let enabled = Boolean(process.env["CONTENTRAIN_DEBUG"]);
+/** Turn debug on for the rest of the process. Command runners call
+* this when `--debug` is passed. Once on, stays on. */
+function enableDebug() {
+	enabled = true;
+}
+/** Opening banner for a debug block. `context` is a short label — the
+* command name or helper — that lets the reader grep the noise. */
+function debug(context, message) {
+	if (!enabled) return;
+	process.stderr.write(`${pc.dim(`[debug:${context}]`)} ${message}\n`);
+}
 //#endregion
 //#region src/index.ts
+const debugIndex = process.argv.findIndex((a) => a === "--debug");
+if (debugIndex !== -1) {
+	enableDebug();
+	process.argv.splice(debugIndex, 1);
+}
 runMain(defineCommand({
 	meta: {
 		name: "contentrain",
-		version: "0.4.4",
+		version,
 		description: "Contentrain CLI — AI content governance infrastructure"
 	},
 	subCommands: {
-		init: () => import("./init-CqoDCSV5.mjs").then((m) => m.default),
-		status: () => import("./status-CoHgz6HN.mjs").then((m) => m.default),
-		doctor: () => import("./doctor-DyKjAIKH.mjs").then((m) => m.default),
-		validate: () => import("./validate-B10L7RL7.mjs").then((m) => m.default),
-		serve: () => import("./serve-CNeFIQ1i.mjs").then((m) => m.default),
-		generate: () => import("./generate-DrUojrk8.mjs").then((m) => m.default),
-		diff: () => import("./diff--halNUpG.mjs").then((m) => m.default),
-		setup: () => import("./setup-Y1LFQ9rZ.mjs").then((m) => m.default),
-		skills: () => import("./skills-Cp8KF1af.mjs").then((m) => m.default),
-		studio: () => import("./studio-CJUGiIMd.mjs").then((m) => m.default)
+		init: () => import("./init-540qiNQJ.mjs").then((m) => m.default),
+		status: () => import("./status-Bmjfrk-B.mjs").then((m) => m.default),
+		doctor: () => import("./doctor-MOf_LQEL.mjs").then((m) => m.default),
+		validate: () => import("./validate-BG0X5g09.mjs").then((m) => m.default),
+		serve: () => import("./serve-CxA2pKbp.mjs").then((m) => m.default),
+		generate: () => import("./generate-ByscV5SN.mjs").then((m) => m.default),
+		diff: () => import("./diff-ov1j9bAb.mjs").then((m) => m.default),
+		merge: () => import("./merge-DdPRttF-.mjs").then((m) => m.default),
+		describe: () => import("./describe-DJ5H9Cxm.mjs").then((m) => m.default),
+		"describe-format": () => import("./describe-format-CUAqB0C4.mjs").then((m) => m.default),
+		scaffold: () => import("./scaffold-iuvrMh78.mjs").then((m) => m.default),
+		setup: () => import("./setup-BMqKibZt.mjs").then((m) => m.default),
+		skills: () => import("./skills-CZ54F-97.mjs").then((m) => m.default),
+		studio: () => import("./studio-DPVJ-2oG.mjs").then((m) => m.default)
 	}
 }));
 //#endregion
-export {};
+export { debug as t };

package/dist/{init-CqoDCSV5.mjs → init-540qiNQJ.mjs}

@@ -1,17 +1,17 @@
-import { r as resolveProjectRoot, t as loadProjectContext } from "./context-An3xrvcP.mjs";
-import { i as pc } from "./ui-B5mXontH.mjs";
-import { a as createPackageResolver, c as writeMcpConfig, i as addClaudeMdReference, n as IDE_CONFIGS, o as detectIdes, s as installIdeRulesAndSkills } from "./ide-_C2gUPbQ.mjs";
+import { i as pc } from "./ui-B8l_LC36.mjs";
+import { r as resolveProjectRoot, t as loadProjectContext } from "./context-OskMGy8y.mjs";
+import { a as createPackageResolver, c as writeMcpConfig, i as addClaudeMdReference, n as IDE_CONFIGS, o as detectIdes, s as installIdeRulesAndSkills } from "./ide-DPDVYiaq.mjs";
 import { defineCommand } from "citty";
 import { confirm, intro, isCancel, log, multiselect, outro, select, spinner } from "@clack/prompts";
-import { simpleGit } from "simple-git";
 import { join } from "node:path";
 import { writeModel } from "@contentrain/mcp/core/model-manager";
 import { ensureDir, pathExists, writeJson } from "@contentrain/mcp/util/fs";
-import { appendFile, readFile, writeFile } from "node:fs/promises";
+import { simpleGit } from "simple-git";
+import { buildBranchName, createTransaction } from "@contentrain/mcp/git/transaction";
 import { detectStackInfo } from "@contentrain/mcp/util/detect";
 import { getTemplate, listTemplates } from "@contentrain/mcp/templates";
-import { buildBranchName, createTransaction } from "@contentrain/mcp/git/transaction";
 import { scanSummary } from "@contentrain/mcp/core/scanner";
+import { appendFile, readFile, writeFile } from "node:fs/promises";
 //#region src/commands/init.ts
 const COMMON_LOCALES = [
 	{

package/dist/{login-DCXkOrQV.mjs → login-xvzL-UvR.mjs}

@@ -1,6 +1,6 @@
-import { i as pc } from "./ui-B5mXontH.mjs";
-import { i as checkPermissions, o as loadCredentials, s as saveCredentials, t as StudioApiClient } from "./client-C400qHcL.mjs";
-import { n as openBrowser, t as startOAuthServer } from "./oauth-server-Beppljfz.mjs";
+import { i as pc } from "./ui-B8l_LC36.mjs";
+import { i as checkPermissions, o as loadCredentials, s as saveCredentials, t as StudioApiClient } from "./client-C9E9D4mb.mjs";
+import { n as openBrowser, t as startOAuthServer } from "./oauth-server-smSxDoH5.mjs";
 import { defineCommand } from "citty";
 import { confirm, intro, isCancel, log, outro, select, spinner } from "@clack/prompts";
 //#region src/studio/commands/login.ts

package/dist/{logout-nPt2UAeQ.mjs → logout-DzspSatR.mjs}

@@ -1,5 +1,5 @@
-import { i as pc } from "./ui-B5mXontH.mjs";
-import { a as clearCredentials, o as loadCredentials, t as StudioApiClient } from "./client-C400qHcL.mjs";
+import { i as pc } from "./ui-B8l_LC36.mjs";
+import { a as clearCredentials, o as loadCredentials, t as StudioApiClient } from "./client-C9E9D4mb.mjs";
 import { defineCommand } from "citty";
 import { intro, log, outro } from "@clack/prompts";
 //#region src/studio/commands/logout.ts

package/dist/mcp-client-DVWTex2i.mjs

@@ -0,0 +1,44 @@
+import { createServer } from "@contentrain/mcp/server";
+import { InMemoryTransport } from "@modelcontextprotocol/sdk/inMemory.js";
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+//#region src/utils/mcp-client.ts
+/**
+* Start an in-memory MCP session against a local project root. Always
+* `await session.close()` — typically in a `finally` block — so the
+* underlying transports release cleanly.
+*/
+async function openMcpSession(projectRoot) {
+	const server = createServer(projectRoot);
+	const [clientTransport, serverTransport] = InMemoryTransport.createLinkedPair();
+	const client = new Client({
+		name: "contentrain-cli",
+		version: "1.0.0"
+	});
+	await Promise.all([client.connect(clientTransport), server.connect(serverTransport)]);
+	return {
+		async call(name, args = {}, options = {}) {
+			const result = await client.callTool({
+				name,
+				arguments: args
+			});
+			const textContent = (result.content ?? []).find((c) => c.type === "text");
+			if (!textContent || typeof textContent.text !== "string") throw new Error(`Tool ${name} returned no text content`);
+			let parsed;
+			try {
+				parsed = JSON.parse(textContent.text);
+			} catch {
+				parsed = textContent.text;
+			}
+			if (result.isError && options.throwOnError !== false) {
+				const msg = typeof parsed === "object" && parsed !== null && "error" in parsed ? String(parsed.error) : textContent.text;
+				throw new Error(msg);
+			}
+			return parsed;
+		},
+		async close() {
+			await Promise.all([client.close().catch(() => {}), server.close().catch(() => {})]);
+		}
+	};
+}
+//#endregion
+export { openMcpSession as t };

package/dist/merge-DdPRttF-.mjs

@@ -0,0 +1,82 @@
+import { i as pc } from "./ui-B8l_LC36.mjs";
+import { r as resolveProjectRoot } from "./context-OskMGy8y.mjs";
+import { defineCommand } from "citty";
+import { confirm, intro, isCancel, log, outro } from "@clack/prompts";
+import { simpleGit } from "simple-git";
+import { CONTENTRAIN_BRANCH } from "@contentrain/types";
+import { mergeBranch } from "@contentrain/mcp/git/transaction";
+//#region src/commands/merge.ts
+/**
+* One-shot merge of a single contentrain feature branch.
+*
+* `contentrain diff` drives an interactive review over every pending
+* branch; this command is the scriptable, one-branch sibling —
+* shell-friendly for agents, CI, and manual triage. It reuses the exact
+* same MCP helper (`mergeBranch`) that the interactive command
+* delegates to, so the worktree transaction + selective-sync + dirty-
+* file protections stay on one code path.
+*/
+var merge_default = defineCommand({
+	meta: {
+		name: "merge",
+		description: "Merge one contentrain feature branch into the content branch"
+	},
+	args: {
+		branch: {
+			type: "positional",
+			description: "Feature branch name (e.g. cr/content/blog/...)",
+			required: true
+		},
+		root: {
+			type: "string",
+			description: "Project root path",
+			required: false
+		},
+		yes: {
+			type: "boolean",
+			description: "Skip confirmation prompt",
+			required: false
+		}
+	},
+	async run({ args }) {
+		const projectRoot = await resolveProjectRoot(args.root);
+		const branch = String(args.branch);
+		intro(pc.bold("contentrain merge"));
+		if (branch === CONTENTRAIN_BRANCH) {
+			log.error(`Cannot merge the content-tracking branch (${CONTENTRAIN_BRANCH}) into itself.`);
+			outro("");
+			process.exitCode = 1;
+			return;
+		}
+		if (!(await simpleGit(projectRoot).branchLocal()).all.includes(branch)) {
+			log.error(`Branch "${branch}" does not exist locally.`);
+			outro("");
+			process.exitCode = 1;
+			return;
+		}
+		if (!args.yes) {
+			const ok = await confirm({ message: `Merge ${branch} into ${CONTENTRAIN_BRANCH} and fast-forward the base branch?` });
+			if (isCancel(ok) || !ok) {
+				outro("");
+				return;
+			}
+		}
+		try {
+			const result = await mergeBranch(projectRoot, branch);
+			log.success(`Merged ${branch} (commit ${result.commit.slice(0, 8)})`);
+			if (result.sync?.synced?.length) log.message(pc.dim(`  Synced ${result.sync.synced.length} file(s) to working tree.`));
+			if (result.sync?.skipped?.length) {
+				log.warning(`${result.sync.skipped.length} file(s) skipped during sync — you have uncommitted changes:`);
+				for (const f of result.sync.skipped) log.message(pc.dim(`    ${f}`));
+				if (result.sync.warning) log.message(pc.dim(`  ${result.sync.warning}`));
+			}
+		} catch (error) {
+			log.error(`Merge failed: ${error instanceof Error ? error.message : String(error)}`);
+			process.exitCode = 1;
+			return;
+		}
+		outro("");
+	}
+});
+//#endregion
+export { merge_default as default };

package/dist/{resolve-context-Cg6JoVZt.mjs → resolve-context-hKVYPniC.mjs}

@@ -1,4 +1,4 @@
-import { c as saveDefaults, o as loadCredentials } from "./client-C400qHcL.mjs";
+import { c as saveDefaults, o as loadCredentials } from "./client-C9E9D4mb.mjs";
 import { confirm, isCancel, select } from "@clack/prompts";
 //#region src/studio/resolve-context.ts
 /**

package/dist/scaffold-iuvrMh78.mjs

@@ -0,0 +1,115 @@
+import { i as pc } from "./ui-B8l_LC36.mjs";
+import { r as resolveProjectRoot } from "./context-OskMGy8y.mjs";
+import { t as openMcpSession } from "./mcp-client-DVWTex2i.mjs";
+import { defineCommand } from "citty";
+import { intro, isCancel, log, outro, select, spinner } from "@clack/prompts";
+//#region src/commands/scaffold.ts
+const KNOWN_TEMPLATES = [
+	"blog",
+	"landing",
+	"docs",
+	"ecommerce",
+	"saas",
+	"i18n",
+	"mobile"
+];
+/**
+* Template-based project seeding, wrapping `contentrain_scaffold`.
+*
+* Agents normally drive scaffolding through the MCP tool directly; this
+* command gives humans the same entry point with an interactive
+* template picker and a bit more actionable next-step output.
+*/
+var scaffold_default = defineCommand({
+	meta: {
+		name: "scaffold",
+		description: "Apply a Contentrain template (models + sample content + vocabulary)"
+	},
+	args: {
+		root: {
+			type: "string",
+			description: "Project root path",
+			required: false
+		},
+		template: {
+			type: "string",
+			description: `Template ID (${KNOWN_TEMPLATES.join(", ")})`,
+			required: false
+		},
+		locales: {
+			type: "string",
+			description: "Comma-separated locale override (e.g. \"en,tr,de\")",
+			required: false
+		},
+		"no-sample": {
+			type: "boolean",
+			description: "Skip sample content",
+			required: false
+		},
+		json: {
+			type: "boolean",
+			description: "Emit raw JSON for scripts",
+			required: false
+		}
+	},
+	async run({ args }) {
+		const projectRoot = await resolveProjectRoot(args.root);
+		let templateId = args.template ? String(args.template) : void 0;
+		if (!templateId && !args.json) {
+			intro(pc.bold("contentrain scaffold"));
+			const pick = await select({
+				message: "Choose a template",
+				options: KNOWN_TEMPLATES.map((t) => ({
+					value: t,
+					label: t
+				}))
+			});
+			if (isCancel(pick)) {
+				outro("");
+				return;
+			}
+			templateId = pick;
+		}
+		if (!templateId) {
+			log.error("Template is required. Pass --template <id> or run interactively.");
+			process.exitCode = 1;
+			return;
+		}
+		const locales = args.locales ? String(args.locales).split(",").map((s) => s.trim()).filter(Boolean) : void 0;
+		const session = await openMcpSession(projectRoot);
+		const s = args.json ? null : spinner();
+		s?.start(`Applying template "${templateId}"...`);
+		try {
+			const result = await session.call("contentrain_scaffold", {
+				template: templateId,
+				...locales ? { locales } : {},
+				with_sample_content: !args["no-sample"]
+			});
+			s?.stop(`Template "${templateId}" applied.`);
+			if (args.json) {
+				process.stdout.write(JSON.stringify(result, null, 2));
+				return;
+			}
+			const git = result["git"];
+			log.success(`Scaffolded ${pc.bold(templateId)} on ${pc.cyan(git?.branch ?? "(branch)")} (${git?.action ?? "committed"})`);
+			const models = result["models_created"];
+			if (models?.length) log.message(`  Models: ${models.map((m) => m.id).join(", ")}`);
+			if (typeof result["content_created"] === "number") log.message(`  Sample entries: ${result["content_created"]}`);
+			if (typeof result["vocabulary_terms_added"] === "number" && result["vocabulary_terms_added"]) log.message(`  Vocabulary terms added: ${result["vocabulary_terms_added"]}`);
+			const next = result["next_steps"];
+			if (next?.length) {
+				log.info(pc.bold("\nNext steps"));
+				for (const step of next) log.message(`  • ${step}`);
+			}
+			outro("");
+		} catch (error) {
+			s?.stop("Scaffold failed.");
+			log.error(error instanceof Error ? error.message : String(error));
+			process.exitCode = 1;
+		} finally {
+			await session.close();
+		}
+	}
+});
+//#endregion
+export { scaffold_default as default };

package/dist/{serve-CNeFIQ1i.mjs → serve-CxA2pKbp.mjs}

@@ -1,4 +1,4 @@
-import { r as resolveProjectRoot } from "./context-An3xrvcP.mjs";
+import { r as resolveProjectRoot } from "./context-OskMGy8y.mjs";
 import { defineCommand } from "citty";
 import { createServer } from "@contentrain/mcp/server";
 import consola from "consola";
@@ -6,7 +6,7 @@ import consola from "consola";
 var serve_default = defineCommand({
 	meta: {
 		name: "serve",
-		description: "Start local content viewer or MCP stdio server"
+		description: "Start the local content viewer or the MCP server (stdio for IDE agents, --mcpHttp for Studio / CI / remote drivers)"
 	},
 	args: {
 		root: {
@@ -19,6 +19,16 @@ var serve_default = defineCommand({
 			description: "Use stdio MCP transport for IDE integration (env: CONTENTRAIN_STDIO=true)",
 			required: false
 		},
+		mcpHttp: {
+			type: "boolean",
+			description: "Use HTTP MCP transport (serves tool calls at POST /mcp)",
+			required: false
+		},
+		authToken: {
+			type: "string",
+			description: "Bearer token required for HTTP MCP requests (env: CONTENTRAIN_AUTH_TOKEN)",
+			required: false
+		},
 		port: {
 			type: "string",
 			description: "HTTP server port, default: 3333 (env: CONTENTRAIN_PORT)",
@@ -44,7 +54,7 @@ var serve_default = defineCommand({
 		let projectRoot = await resolveProjectRoot(args.root);
 		let demoDir;
 		if (args.demo) {
-			const { createDemoProject, cleanupDemoProject } = await import("./demo-DcBt6fw8.mjs");
+			const { createDemoProject, cleanupDemoProject } = await import("./demo-BOUcAoFZ.mjs");
 			demoDir = await createDemoProject();
 			projectRoot = demoDir;
 			consola.info(`Demo project created at ${demoDir}`);
@@ -76,6 +86,50 @@ var serve_default = defineCommand({
 		}
 		const port = Number(args.port) || Number(process.env["CONTENTRAIN_PORT"]) || 3333;
 		const host = args.host ?? process.env["CONTENTRAIN_HOST"] ?? "localhost";
+		const authToken = args.authToken ?? process.env["CONTENTRAIN_AUTH_TOKEN"];
+		if (args.mcpHttp || process.env["CONTENTRAIN_MCP_HTTP"] === "true" || process.env["CONTENTRAIN_MCP_HTTP"] === "1") {
+			const { startHttpMcpServer } = await import("@contentrain/mcp/server/http");
+			const handle = await startHttpMcpServer({
+				projectRoot,
+				host,
+				port,
+				authToken
+			});
+			consola.box({
+				title: "Contentrain MCP (HTTP)",
+				message: [
+					`Endpoint: ${handle.url}`,
+					`Root:     ${projectRoot}`,
+					authToken ? "Auth:     Bearer token required" : "Auth:     none (local-only server)",
+					"",
+					"Press Ctrl+C to stop"
+				].join("\n")
+			});
+			if (host === "0.0.0.0" && !authToken) consola.warn("HTTP MCP server is accessible from the network with no Bearer token. Set --auth-token or CONTENTRAIN_AUTH_TOKEN.");
+			process.on("SIGINT", () => {
+				handle.close().finally(() => process.exit(0));
+			});
+			process.on("SIGTERM", () => {
+				handle.close().finally(() => process.exit(0));
+			});
+			return;
+		}
+		if (host !== "localhost" && host !== "127.0.0.1" && !authToken) {
+			consola.error([
+				`Refusing to start serve UI on ${host} without a Bearer token.`,
+				"",
+				"  The serve UI exposes the full .contentrain/ write surface to any",
+				"  reachable host. Either bind to localhost:",
+				"",
+				"    contentrain serve --host localhost",
+				"",
+				"  Or pass an auth token (coming soon — today, use stdio MCP for remote agents):",
+				"",
+				"    contentrain serve --mcpHttp --host 0.0.0.0 --authToken $(openssl rand -hex 32)"
+			].join("\n"));
+			process.exitCode = 1;
+			return;
+		}
 		const shouldOpen = args.open !== false && process.env["CONTENTRAIN_NO_OPEN"] !== "true";
 		const { join, dirname } = await import("node:path");
 		const { existsSync } = await import("node:fs");
@@ -85,7 +139,7 @@ var serve_default = defineCommand({
 			consola.warn("Serve UI not found. Running in API-only mode.");
 			consola.info("UI will be available after building: cd packages/cli/src/serve-ui && pnpm build");
 		}
-		const { createServeApp } = await import("./server-DTdmutjb.mjs");
+		const { createServeApp } = await import("./server-B1PSjXbu.mjs");
 		const { app, handleUpgrade } = await createServeApp({
 			projectRoot,
 			port,
@@ -123,7 +177,6 @@ var serve_default = defineCommand({
 				exec(`${process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open"} ${url}`);
 			});
 		});
-		if (host === "0.0.0.0") consola.warn("Server is accessible from the network. No authentication is configured.");
 	}
 });
 //#endregion

package/dist/serve-ui/assets/{AgentPromptGroup.vue_vue_type_script_setup_true_lang-Ulb-9Tr3.js → AgentPromptGroup.vue_vue_type_script_setup_true_lang-Bftt9tx_.js}

@@ -1,4 +1,4 @@
-import{c as i,a as p,o as t,p as o,q as s,j as u,u as a,B as n,g as m,b as l,r as x,E as d,f as g}from"./index-RDdffBTh.js";/**
+import{c as i,a as p,o as t,p as o,q as s,j as u,u as a,B as n,g as m,b as l,r as x,G as d,f as g}from"./index-DL_dw3XX.js";/**
  * @license lucide-vue-next v0.474.0 - ISC
  *
  * This source code is licensed under the ISC license.