lean-memory-console 0.2.0__tar.gz

lean_memory_console-0.2.0/.gitignore

@@ -0,0 +1,2 @@
+# Built SPA (produced by ui/ via `bun run build`; never committed)
+src/lean_memory_console/static/

lean_memory_console-0.2.0/PKG-INFO

@@ -0,0 +1,14 @@
+Metadata-Version: 2.4
+Name: lean-memory-console
+Version: 0.2.0
+Summary: Agent-first read-only verification console for lean-memory
+Requires-Python: >=3.10
+Requires-Dist: fastapi>=0.115
+Requires-Dist: lean-memory
+Requires-Dist: mcp>=1.0
+Requires-Dist: uvicorn>=0.30
+Provides-Extra: dev
+Requires-Dist: anyio>=4; extra == 'dev'
+Requires-Dist: httpx>=0.27; extra == 'dev'
+Requires-Dist: pytest>=8; extra == 'dev'
+Requires-Dist: pyyaml; extra == 'dev'

lean_memory_console-0.2.0/README.md

@@ -0,0 +1,213 @@
+# lean-memory-console
+
+A read-only verification console for [lean-memory](../README.md).
+
+**Agents write and search; the human verifies.** Your agent (Claude Code via
+the observing MCP, or any HTTP client in Docker mode) is the only writer of
+memory content. You open the console **read-only over stored memory** — no
+adding, editing, or deleting facts — to see the engine's invisible signals for
+the first time: the ADD-only supersession spine, per-hit score decomposition,
+and provenance episodes.
+
+> The single write exception is the manual **test-search box**: it runs a real
+> engine search and therefore bumps access stats (`touch()`). That is
+> observability of live-search behavior, not a memory mutation.
+
+## Two modes
+
+### Local (default — zero Docker, nothing runs when the agent doesn't)
+
+Two transient localhost processes over one shared data root:
+
+```bash
+# 1. The observing MCP wrapper — your agent stores + searches through this.
+uvx lean-memory-console mcp
+
+# 2. The console — you open this to verify. Binds 127.0.0.1, prints a
+#    tokened URL, Ctrl-C to stop.
+uvx lean-memory-console serve
+```
+
+`serve` accepts `--root`, `--port`, and `--no-open` (skip the browser launch).
+On load the SPA captures the token from `?token=…` — held in memory and sent as
+the `X-Console-Token` header on every request — and strips it from the address
+bar (`history.replaceState`). There is no cookie; a page refresh without the
+token drops the session.
+
+Via the Claude Code plugin (recommended), the MCP is wired automatically:
+
+```
+/plugin marketplace add Wuesteon/lean-memory-console
+/plugin install lean-memory
+/memory:ui          # launch + open the console
+/memory:status      # resolved root, namespaces, connect snippets
+/memory:server-up   # start the Docker data plane
+/memory:server-down # stop it (the data volume persists)
+```
+
+(From a local checkout you can register the marketplace with
+`/plugin marketplace add ./` at the repo root instead of the GitHub slug.)
+
+### Docker (single-tenant, long-running, container owns /data)
+
+```bash
+export LM_API_KEY=$(openssl rand -hex 24)     # REQUIRED — the container refuses to boot without it
+docker compose -f "$(lean-memory-console --print-compose-path)" up -d
+```
+
+Then connect an agent over streamable-HTTP MCP and open the UI:
+
+```bash
+claude mcp add --transport http lean-memory http://127.0.0.1:8377/mcp \
+  --header "Authorization: Bearer $LM_API_KEY"
+# UI: http://127.0.0.1:8377/  (authenticate with the same LM_API_KEY)
+```
+
+Docker mode binds `0.0.0.0` so the published port is reachable; there is **no**
+local-mode Host guard and no per-launch session token. The controls are the
+bearer gate (`LM_API_KEY`) plus the MCP transport-security Host allowlist. If
+you reach the container over a LAN hostname/IP (no reverse proxy), list the
+host(s) in `LM_MCP_ALLOWED_HOSTS` (comma-separated; `:*` matches any port) or
+the `/mcp` mount 421s on its Host check — a commented example sits in the
+packaged `docker-compose.yml`. The compose service builds the
+`full` image target; container env is `LM_DATA_ROOT` / `LM_API_KEY` (required) /
+`PORT` / `LM_CONSOLE_MODELS` / `LM_MCP_ALLOWED_HOSTS`.
+
+A plain REST mirror exists for non-MCP agents:
+`POST /v1/{namespace}/memories` and `POST /v1/{namespace}/search`.
+
+## The data-root rule (read this — it is the #1 trap)
+
+The console serves **exactly one** data root and never auto-merges roots.
+Resolution order, both `serve` and `mcp`:
+
+```
+--root  >  $LM_DATA_ROOT  >  ~/.lean_memory
+```
+
+**The ./lm_data trap.** The core `lean-memory` engine's *own* default root is
+`./lm_data` (a directory in your current working directory), **not**
+`~/.lean_memory`. So if you ran the engine directly (or the core stdio MCP
+server pointed at the default) your memories may be under `./lm_data` while the
+console defaults to `~/.lean_memory` — and you would inspect an empty root.
+
+- `/memory:status` **prints the resolved root** and **warns** when `./lm_data`
+  exists in the working directory but is not the served root.
+- Fix: point the console at the right root, e.g.
+  `uvx lean-memory-console serve --root ./lm_data`, or set
+  `export LM_DATA_ROOT=$(pwd)/lm_data`.
+
+The console adds exactly one file to the data root: `_events.db` (search/add
+traces). Everything else is the engine's own `<namespace>.db` files.
+
+## Live vs. replay: the `t_ref` rule
+
+`t_ref` (epoch-ms) is the **world/event time** that becomes a fact's `valid_at`
+and anchors the temporal supersession spine.
+
+- **Live agents omit it.** The observing MCP fills `now`, so facts are ordered
+  by wall-clock ingest — correct for an agent capturing memories as they happen.
+- **Replay / import supplies it.** When backfilling historical conversations,
+  pass the original event time as `t_ref` (epoch-ms) on every add. **Omitting
+  `t_ref` on historical data silently collapses the spine's ordering** — every
+  backfilled fact gets `now`, so supersession and point-in-time queries become
+  meaningless.
+
+Rule of thumb: if you are importing anything that did not happen right now,
+set `t_ref`.
+
+## One namespace per project
+
+Namespaces replace tenants: the engine stores one SQLite file per namespace,
+which is the isolation boundary. Use **one namespace per project/session**.
+
+Cross-process writers on a *single* namespace (e.g. two Claude Code sessions
+spawning the wrapper on the same data root) are supported but serialized by a
+bounded retry-on-`SQLITE_BUSY` loop — not a lock manager. Pathological
+contention degrades to retries and, eventually, a `SQLITE_BUSY` surfaced in the
+event's `payload.error`. Keeping namespaces per-project avoids the contention
+entirely.
+
+Namespaces are created implicitly on first accepted `memory_add`. There is no
+create-namespace step, and no delete-namespace surface (ADD-only discipline —
+to remove a namespace, delete its `.db` file while nothing is running).
+Namespaces whose sanitized name starts with `_` are **rejected** (the
+`_events.db` sidecar is reserved); an empty name is not rejected — it sanitizes
+to `default`.
+
+## Image size (Docker `full`)
+
+The default Docker image is the `full` target: it installs `lean-memory[models]`
+(CPU **torch** + sentence-transformers + a cross-encoder reranker), so the image
+is large (~1.46 GB) and the first run downloads model weights into the mounted
+HF cache volume. The CPU torch build is pinned from
+`download.pytorch.org/whl/cpu` so the resolve never pulls the multi-GB CUDA
+wheels. This is deliberate — stub vectors would recreate the FakeEmbedder
+first-impression failure the quality gate exists to fix. A `slim` target
+(~365 MB, stub embedder, no models) exists for API/UI development
+(`docker build --target slim …`) but is never the documented first-run path.
+
+## Offline by default
+
+The console runs fully on deterministic stub backends with no network and no
+model downloads (`LM_CONSOLE_MODELS=stub`, or `auto` when `[models]` is not
+importable). When scores are stub-generated the UI shows a banner saying so.
+
+## License
+
+Apache-2.0
+
+## Manual E2E verification (pre-merge)
+
+Run this before merge. It is a **manual** gate, not automated — steps that need
+a live interactive Claude Code session are marked `[manual]` and are driven by a
+human, not by tooling. Capture the observed outcome next to each step.
+
+**Local mode (plugin + observing MCP):**
+
+- [ ] `[manual]` `/plugin marketplace add ./` (from the repo root marketplace),
+      then `/plugin install lean-memory`.
+      Expected: plugin installs; the `lean-memory` MCP server appears in the
+      session's MCP list, and `/memory:ui|status|server-up|server-down` are
+      offered as commands.
+- [ ] `[manual]` In a real Claude Code session, ask the agent to store a couple
+      of facts and then search them (through the observing MCP
+      `memory_add`/`memory_search`).
+      Expected: `memory_add` returns `{fact_ids, superseded_count}`;
+      `memory_search` returns hits whose `fact_text` matches what was stored;
+      rows land in `<root>/_events.db`.
+- [ ] `[manual]` Run `/memory:ui`.
+      Expected: browser opens `http://127.0.0.1:8377/?token=…`; the address bar
+      loses `?token` after boot; no login screen (local mode).
+- [ ] `[manual]` Verify all four pages render the resulting state:
+      - **Overview** — the namespace card shows fact counts, top predicates,
+        the 7-day adds/searches sparkline, supersession rate, and facts-per-add.
+      - **Memories** — the fact table lists the stored facts; opening a fact
+        drawer shows metadata, the supersession timeline (chain oldest→newest),
+        and the provenance episode.
+      - **Episodes** — the transcript shows the stored turns, each expanding to
+        the facts extracted from it.
+      - **Activity & Traces** — the polled feed shows the `add`/`search` events;
+        a search row expands to the per-hit score decomposition
+        (`0.6·relevance + 0.2·recency + 0.2·importance`, dense/sparse ranks,
+        RRF); the test-query box runs a live search and its row is labeled
+        `origin: ui`.
+
+**Docker mode (HTTP data plane):**
+
+- [ ] `[manual]` `export LM_API_KEY=$(openssl rand -hex 24)` then
+      `docker compose -f "$(lean-memory-console --print-compose-path)" up -d`
+      (or `/memory:server-up`).
+      Expected: container starts; boot validation passes (data root writable,
+      `LM_API_KEY` set, sqlite-vec loadable).
+- [ ] `[manual]` `claude mcp add --transport http lean-memory
+      http://127.0.0.1:8377/mcp --header "Authorization: Bearer $LM_API_KEY"`.
+      Expected: the MCP connection registers; a store+search from the agent
+      succeeds and records events in the container's `/data/_events.db`.
+- [ ] `[manual]` Open `http://127.0.0.1:8377/`.
+      Expected: the login screen prompts for the key; entering `LM_API_KEY`
+      authenticates; all four pages render the same as local mode, and the
+      Overview shows the Docker connect snippet.
+- [ ] `[manual]` `/memory:server-down`.
+      Expected: container stops; the `lm_data` volume persists (re-`up` shows
+      the same memories).

lean_memory_console-0.2.0/deploy/docker-compose.yml

@@ -0,0 +1,36 @@
+# deploy/docker-compose.yml — single-tenant lean-memory-console (Docker mode).
+#
+# Usage:
+#   LM_API_KEY=$(openssl rand -hex 24) docker compose -f deploy/docker-compose.yml up -d
+#
+# Single source of truth (spec §9): the console CLI packages this exact file
+# into the wheel; the plugin's /memory:server-up|down commands resolve it via
+#   docker compose -f "$(lean-memory-console --print-compose-path)" up -d
+services:
+  console:
+    build:
+      context: ..
+      dockerfile: deploy/Dockerfile
+      target: full            # full is the default first-run image (real models)
+    ports:
+      - "8377:8377"
+    environment:
+      # LM_API_KEY is required in Docker mode — compose refuses to start
+      # without it (the console also boot-checks it).
+      - LM_API_KEY=${LM_API_KEY:?set LM_API_KEY - e.g. openssl rand -hex 24}
+      - LM_DATA_ROOT=/data
+      - PORT=8377
+      - LM_CONSOLE_MODELS=auto
+      # Remote-host deployments (reached over the LAN, no reverse proxy) must
+      # list the hostname(s)/IP(s) the container is reached by, or the MCP mount
+      # 421s on the Host check. Comma-separated; ":*" matches any port. The
+      # bearer gate (LM_API_KEY) remains the primary access control.
+      # - LM_MCP_ALLOWED_HOSTS=myhost:*
+    volumes:
+      - lm_data:/data
+      - hf_cache:/root/.cache/huggingface
+    restart: unless-stopped
+
+volumes:
+  lm_data:
+  hf_cache:

lean_memory_console-0.2.0/pyproject.toml

@@ -0,0 +1,34 @@
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
+name = "lean-memory-console"
+version = "0.2.0"
+description = "Agent-first read-only verification console for lean-memory"
+requires-python = ">=3.10"
+dependencies = [
+    "lean-memory",
+    "fastapi>=0.115",
+    "uvicorn>=0.30",
+    "mcp>=1.0",
+]
+
+[project.optional-dependencies]
+dev = ["pytest>=8", "anyio>=4", "httpx>=0.27", "pyyaml"]
+
+[project.scripts]
+lean-memory-console = "lean_memory_console.cli:main"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/lean_memory_console"]
+
+# Packaging copy lives IN-TREE (console/deploy/) so the sdist->wheel path can
+# resolve it — a parent-relative ../deploy source escapes the sdist root and
+# fails any pip/uvx install from sdist (v0.2.0 readiness-board finding). The
+# operational file stays at repo-root deploy/; a test pins the two identical.
+[tool.hatch.build.targets.wheel.force-include]
+"deploy/docker-compose.yml" = "lean_memory_console/deploy/docker-compose.yml"
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]

lean_memory_console-0.2.0/src/lean_memory_console/__init__.py

@@ -0,0 +1,3 @@
+"""lean-memory-console — agent-first read-only verification console."""
+
+__version__ = "0.2.0"

lean_memory_console-0.2.0/src/lean_memory_console/app.py

@@ -0,0 +1,142 @@
+"""FastAPI factory for the console (both modes).
+
+Local mode: 127.0.0.1 bind, per-launch session token (query param or
+X-Console-Token header). Docker mode: Authorization: Bearer <api_key>.
+Referrer-Policy: no-referrer on everything; local mode also validates the
+Host header (DNS-rebinding belt-and-suspenders).
+"""
+
+from __future__ import annotations
+
+import secrets
+from contextlib import AsyncExitStack, asynccontextmanager
+from pathlib import Path
+
+from fastapi import Depends, FastAPI, HTTPException, Request
+from fastapi.responses import JSONResponse, RedirectResponse
+from fastapi.staticfiles import StaticFiles
+
+from .config import ConsoleConfig
+from .engine import EngineGateway
+from .events import EventLog
+from .routes.data import build_data_router
+from .routes.mcp import build_mcp_mount
+from .routes.review import build_review_router
+from .routes.views import build_views_router
+
+# Loopback hostnames accepted in local mode (DNS-rebinding guard). Exact-match
+# only: a startswith check would wrongly admit e.g. "localhost.attacker.com".
+_ALLOWED_LOCAL_HOSTS = frozenset({"127.0.0.1", "localhost"})
+
+
+def _static_dir() -> Path:
+    """Directory of the built SPA (populated by the UI build). A seam so the
+    static-mount-ordering regression can be tested hermetically regardless of
+    whether the UI build has materialized ``static/`` on disk."""
+    return Path(__file__).parent / "static"
+
+
+def _ct_eq(presented: str | None, expected: str | None) -> bool:
+    """Constant-time string equality. False unless BOTH sides are non-None
+    strings (compare_digest raises on None/mismatched types), so a missing
+    credential or unconfigured secret never authenticates."""
+    if not isinstance(presented, str) or not isinstance(expected, str):
+        return False
+    return secrets.compare_digest(presented, expected)
+
+
+def _is_authenticated(request: Request, config: ConsoleConfig) -> bool:
+    if config.mode == "docker":
+        header = request.headers.get("Authorization", "")
+        expected = f"Bearer {config.api_key}" if config.api_key else None
+        return _ct_eq(header, expected)
+    # local mode: query token OR X-Console-Token header
+    token = request.query_params.get("token") or request.headers.get(
+        "X-Console-Token"
+    )
+    return _ct_eq(token, config.session_token)
+
+
+def require_auth(request: Request) -> None:
+    """FastAPI dependency: 401 unless valid credential is presented."""
+    config: ConsoleConfig = request.app.state.config
+    if not _is_authenticated(request, config):
+        raise HTTPException(status_code=401, detail="unauthorized")
+
+
+def create_app(
+    config: ConsoleConfig,
+    gateway: EngineGateway,
+    event_log: EventLog,
+) -> FastAPI:
+    # In Docker mode, build the streamable-HTTP MCP mount up front so its
+    # once-only session manager can be started by the app lifespan below — the
+    # only supported start path (run() cannot be re-entered per request). Under a
+    # real ASGI server (uvicorn) the lifespan runs; tests hitting /mcp must use a
+    # context-managed TestClient so the lifespan runs there too.
+    mcp_mount = (
+        build_mcp_mount(gateway, config) if config.mode == "docker" else None
+    )
+
+    @asynccontextmanager
+    async def _lifespan(_app: FastAPI):
+        async with AsyncExitStack() as stack:
+            if mcp_mount is not None:
+                await stack.enter_async_context(mcp_mount.session_manager.run())
+            yield
+
+    app = FastAPI(title="lean-memory-console", lifespan=_lifespan)
+    app.state.config = config
+    app.state.gateway = gateway
+    app.state.event_log = event_log
+
+    @app.middleware("http")
+    async def _security(request: Request, call_next):
+        # Local-mode Host guard (DNS-rebinding belt-and-suspenders).
+        if config.mode == "local":
+            host = request.headers.get("host", "")
+            hostname = host.split(":")[0]
+            if hostname not in _ALLOWED_LOCAL_HOSTS:
+                resp = JSONResponse(
+                    {"detail": "forbidden host"}, status_code=403
+                )
+                resp.headers["Referrer-Policy"] = "no-referrer"
+                return resp
+        response = await call_next(request)
+        response.headers["Referrer-Policy"] = "no-referrer"
+        return response
+
+    app.include_router(build_views_router())
+    # /views/*/review + /views/*/maintenance — per-route auth-gated, same prefix
+    # as views; registered before the static catch-all so its greedy "/" mount
+    # never shadows these paths.
+    app.include_router(build_review_router())
+    # /v1/* are POST handlers reading app.state.gateway; gate the whole router
+    # with the same auth dependency (local token / docker bearer).
+    app.include_router(
+        build_data_router(), dependencies=[Depends(require_auth)]
+    )
+
+    if mcp_mount is not None:
+        # A Starlette Mount("/mcp") only matches "/mcp/..." — a bare "/mcp"
+        # (what real MCP clients POST to, per the connect snippet) is NOT matched
+        # by the mount. Without a static "/" mount, Starlette's slash-redirect
+        # fallback used to bounce "/mcp" -> "/mcp/". But the greedy StaticFiles
+        # mount at "/" matches "/mcp" first and 405s every non-GET method before
+        # that fallback can run. Register an explicit 307 (method+body preserving)
+        # from "/mcp" to "/mcp/" so a bare POST reaches the bearer gate whether or
+        # not the SPA is present.
+        @app.post("/mcp", include_in_schema=False)
+        async def _mcp_slash_redirect() -> RedirectResponse:
+            return RedirectResponse(url="/mcp/", status_code=307)
+
+        app.mount("/mcp", mcp_mount)
+
+    # The SPA catch-all MUST be registered LAST so its greedy "/" mount never
+    # shadows /v1, /views, or /mcp (StaticFiles serves only GET/HEAD and 405s
+    # every other method on any path it matches).
+    static_dir = _static_dir()
+    if static_dir.is_dir():
+        app.mount("/", StaticFiles(directory=str(static_dir), html=True), name="spa")
+
+    return app

lean_memory_console-0.2.0/src/lean_memory_console/cli.py

@@ -0,0 +1,134 @@
+"""`lean-memory-console` CLI: serve | mcp, plus --print-compose-path."""
+
+from __future__ import annotations
+
+import argparse
+import importlib.resources
+import os
+import sys
+from pathlib import Path
+
+from .config import ConsoleConfig, load_config, resolve_data_root
+from .observe_mcp import run_stdio
+
+
+def _compose_path() -> Path:
+    """Path to the packaged docker-compose.yml.
+
+    Primary: importlib.resources over the installed package's deploy/ dir
+    (the wheel force-includes deploy/docker-compose.yml there). Dev fallback:
+    resolve the repo's deploy/docker-compose.yml relative to this file when
+    the packaged resource is missing (editable installs may not map the
+    force-include).
+    """
+    try:
+        res = importlib.resources.files("lean_memory_console").joinpath(
+            "deploy/docker-compose.yml"
+        )
+        if res.is_file():
+            return Path(str(res))
+    except (ModuleNotFoundError, FileNotFoundError):
+        pass
+    # Dev fallback: repo_root/deploy/docker-compose.yml.
+    # cli.py -> lean_memory_console -> src -> console -> repo_root
+    repo_root = Path(__file__).resolve().parents[3]
+    return repo_root / "deploy" / "docker-compose.yml"
+
+
+def _validate_serve_root(root: Path) -> None:
+    if not root.exists() or not os.access(root, os.R_OK):
+        sys.stderr.write(
+            f"error: data root not readable: {root}\n"
+        )
+        raise SystemExit(2)
+
+
+def _run_server(config: ConsoleConfig, no_open: bool) -> None:  # pragma: no cover
+    """Start uvicorn (real entry; monkeypatched in tests).
+
+    Host bind is mode-dependent:
+      local  -> 127.0.0.1  (loopback only; the app's Host guard is a second belt)
+      docker -> 0.0.0.0    (the container must be reachable via published ports;
+                            the local-mode Host guard does NOT run in docker mode,
+                            so the controls are the bearer gate (LM_API_KEY) plus
+                            the MCP transport-security Host allowlist).
+    Docker mode has no per-launch session token, so there is no tokened URL to
+    open and the browser-open path is skipped entirely (there is no browser in
+    the container regardless).
+    """
+    import uvicorn
+
+    from .app import create_app
+    from .engine import EngineGateway
+    from .events import EventLog
+
+    event_log = EventLog(config.data_root)
+    gateway = EngineGateway(config, event_log)
+    app = create_app(config, gateway, event_log)
+    if config.mode == "docker":
+        host = "0.0.0.0"  # noqa: S104 — intentional; see docstring (bearer + allowlist gate)
+        url = f"http://0.0.0.0:{config.port}/"
+    else:
+        host = "127.0.0.1"
+        url = f"http://127.0.0.1:{config.port}/?token={config.session_token}"
+        if not no_open:
+            import webbrowser
+
+            webbrowser.open(url)
+    sys.stdout.write(f"lean-memory-console serving at {url}\n")
+    try:
+        uvicorn.run(app, host=host, port=config.port, log_level="info")
+    finally:
+        gateway.close()
+        event_log.close()
+
+
+def main(argv=None) -> int:
+    parser = argparse.ArgumentParser(prog="lean-memory-console")
+    parser.add_argument(
+        "--print-compose-path", action="store_true",
+        help="print the packaged docker-compose.yml path and exit",
+    )
+    sub = parser.add_subparsers(dest="command")
+
+    p_serve = sub.add_parser("serve", help="run the read-only console")
+    p_serve.add_argument("--root", default=None)
+    p_serve.add_argument("--port", type=int, default=None)
+    p_serve.add_argument("--no-open", action="store_true")
+    p_serve.add_argument(
+        "--docker",
+        action="store_true",
+        help=(
+            "run in Docker mode: bearer auth (LM_API_KEY required), bind 0.0.0.0, "
+            "register the /mcp mount. Explicit flag — no env-based magic detection."
+        ),
+    )
+
+    p_mcp = sub.add_parser("mcp", help="run the observing MCP stdio server")
+    p_mcp.add_argument("--root", default=None)
+
+    args = parser.parse_args(argv)
+
+    if args.print_compose_path:
+        sys.stdout.write(f"{_compose_path()}\n")
+        return 0
+
+    if args.command == "serve":
+        root = resolve_data_root(args.root)
+        _validate_serve_root(root)
+        # Explicit mode selection — no magic env detection. --docker selects the
+        # containerized entrypoint: bearer auth, 0.0.0.0 bind, /mcp mount. Boot
+        # validation (LM_API_KEY required -> SystemExit(2)) comes free from
+        # load_config("docker").
+        mode = "docker" if args.docker else "local"
+        config = load_config(mode, cli_root=args.root, port=args.port)
+        _run_server(config, no_open=args.no_open)
+        return 0
+
+    if args.command == "mcp":
+        config = load_config("local", cli_root=args.root)
+        run_stdio(config)
+        return 0
+
+    parser.print_help()
+    return 1