create-multicast 0.1.1 → 0.2.0

package/dist/cli.js

@@ -256,45 +256,88 @@ async function main() {
             process.exit(0);
         }
         const selectedNames = selections;
-        // Confirm/collect auth for each selected server
+        // Auto-detect auth for each selected server
+        // Strategy:
+        //   1. If auth found in config → use it silently
+        //   2. If no auth → probe the server to check if it needs auth
+        //   3. Only ask the user if we can't determine automatically
+        const authSpinner = p.spinner();
+        authSpinner.start("Detecting authentication requirements...");
         for (const name of selectedNames) {
             const server = httpServers.find((s) => s.name === name);
             let auth = server.auth;
+            let authStatus;
             if (auth) {
-                const useExisting = await p.confirm({
-                    message: `${name} — found auth credentials. Use them?`,
-                    initialValue: true,
-                });
-                if (p.isCancel(useExisting)) {
-                    p.cancel("Setup cancelled.");
-                    process.exit(0);
-                }
-                if (!useExisting)
-                    auth = undefined;
+                // Auth found in existing config — use it
+                authStatus = "credentials found in config";
             }
-            if (!auth) {
-                const needsAuth = await p.confirm({
-                    message: `${name} — does this server require authentication?`,
-                    initialValue: false,
-                });
-                if (!p.isCancel(needsAuth) && needsAuth) {
-                    const authResult = await p.text({
-                        message: `Enter auth header for ${name}:`,
-                        placeholder: "Bearer your-token-here",
+            else {
+                // No auth in config — probe the server
+                try {
+                    const probe = await fetch(server.url, {
+                        method: "POST",
+                        headers: { "Content-Type": "application/json" },
+                        body: JSON.stringify({
+                            jsonrpc: "2.0",
+                            method: "initialize",
+                            params: {
+                                protocolVersion: "2024-11-05",
+                                capabilities: {},
+                                clientInfo: { name: "multicast-probe", version: "0.1.0" },
+                            },
+                            id: "probe",
+                        }),
+                        signal: AbortSignal.timeout(5000),
                     });
-                    if (p.isCancel(authResult)) {
-                        p.cancel("Setup cancelled.");
-                        process.exit(0);
+                    if (probe.status === 401 || probe.status === 403) {
+                        // Server requires auth but we don't have it — need to ask
+                        authStatus = "needs-auth";
+                    }
+                    else {
+                        // Server responded without auth — no auth needed
+                        authStatus = "no auth required";
                     }
-                    auth = authResult;
+                }
+                catch {
+                    // Can't reach server — assume no auth (will fail later with clear error)
+                    authStatus = "unreachable (skipping auth)";
                 }
             }
+            if (authStatus === "needs-auth") {
+                // Only ask when we KNOW the server needs auth but we don't have it
+                authSpinner.stop(`${pc.yellow("!")} ${name} requires authentication.`);
+                const authResult = await p.text({
+                    message: `Enter auth header for ${pc.bold(name)}:`,
+                    placeholder: "Bearer your-token-here",
+                    validate: (v) => {
+                        if (!v.trim())
+                            return "Auth header is required — server returned 401";
+                        return undefined;
+                    },
+                });
+                if (p.isCancel(authResult)) {
+                    p.cancel("Setup cancelled.");
+                    process.exit(0);
+                }
+                auth = authResult;
+                authSpinner.start("Detecting authentication requirements...");
+            }
             selectedServers.push({
                 name,
                 url: server.url,
                 auth: auth || undefined,
             });
         }
+        authSpinner.stop("Authentication configured.");
+        // Show auth summary
+        for (const s of selectedServers) {
+            if (s.auth) {
+                p.log.message(`  ${pc.green("✓")} ${pc.bold(s.name)} — auth configured`);
+            }
+            else {
+                p.log.message(`  ${pc.green("✓")} ${pc.bold(s.name)} — no auth needed`);
+            }
+        }
     }
     // Option to add servers manually
     let addMore = true;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-multicast",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "Create a Multicast MCP gateway — one command to scaffold, configure, and deploy your parallel MCP server.",
   "type": "module",
   "bin": "./dist/cli.js",

package/templates/default/src/index.ts

@@ -67,16 +67,53 @@ async function callMcpServer(
   const timer = setTimeout(() => controller.abort(), timeoutMs);
 
   try {
-    const headers: Record<string, string> = {
+    const baseHeaders: Record<string, string> = {
       "Content-Type": "application/json",
+      "Accept": "application/json, text/event-stream",
     };
     if (server.auth) {
-      headers["Authorization"] = server.auth;
+      baseHeaders["Authorization"] = server.auth;
+    }
+
+    // Step 1: Initialize MCP session
+    const initResponse = await fetch(server.url, {
+      method: "POST",
+      headers: baseHeaders,
+      body: JSON.stringify({
+        jsonrpc: "2.0",
+        method: "initialize",
+        params: {
+          protocolVersion: "2024-11-05",
+          capabilities: {},
+          clientInfo: { name: "multicast", version: "0.1.0" },
+        },
+        id: "init-" + crypto.randomUUID(),
+      }),
+      signal: controller.signal,
+    });
+
+    const sessionId = initResponse.headers.get("mcp-session-id");
+
+    // Step 2: Send initialized notification (required by spec)
+    const callHeaders = { ...baseHeaders };
+    if (sessionId) {
+      callHeaders["mcp-session-id"] = sessionId;
     }
 
+    await fetch(server.url, {
+      method: "POST",
+      headers: callHeaders,
+      body: JSON.stringify({
+        jsonrpc: "2.0",
+        method: "notifications/initialized",
+      }),
+      signal: controller.signal,
+    });
+
+    // Step 3: Call the tool with the session
     const response = await fetch(server.url, {
       method: "POST",
-      headers,
+      headers: callHeaders,
       body: JSON.stringify({
         jsonrpc: "2.0",
         method: "tools/call",
@@ -148,6 +185,7 @@ async function discoverServerTools(
   try {
     const headers: Record<string, string> = {
       "Content-Type": "application/json",
+      "Accept": "application/json, text/event-stream",
     };
     if (server.auth) {
       headers["Authorization"] = server.auth;
@@ -222,6 +260,15 @@ async function discoverServerTools(
 
     const tools = data.result?.tools || [];
 
+    // Upsert server row FIRST (tools table has FK reference to servers)
+    await db
+      .prepare(
+        `INSERT OR REPLACE INTO servers (name, url, description, tool_count, status, last_error, last_discovered_at, updated_at)
+         VALUES (?, ?, '', ?, 'active', NULL, datetime('now'), datetime('now'))`
+      )
+      .bind(server.name, server.url, tools.length)
+      .run();
+
     // Clear old tools for this server
     await db
       .prepare("DELETE FROM tools WHERE server_name = ?")
@@ -244,15 +291,6 @@ async function discoverServerTools(
         .run();
     }
 
-    // Update server metadata
-    await db
-      .prepare(
-        `INSERT OR REPLACE INTO servers (name, url, description, tool_count, status, last_error, last_discovered_at, updated_at)
-         VALUES (?, ?, '', ?, 'active', NULL, datetime('now'), datetime('now'))`
-      )
-      .bind(server.name, server.url, tools.length)
-      .run();
-
     return { tool_count: tools.length };
   } catch (err: unknown) {
     const message = err instanceof Error ? err.message : "discovery failed";