fix(next-config): move serverActions to experimental for Next.js 15+ compatibility

packages/gitea-mcp/src/index.ts

@@ -26,8 +26,9 @@ if (!GITEA_ACCESS_TOKEN) {
 const giteaClient = axios.create({
   baseURL: `${GITEA_HOST.replace(/\/$/, "")}/api/v1`,
   headers: {
-    Authorization: `token ${GITEA_ACCESS_TOKEN}`,
+    Authorization: `token ${GITEA_ACCESS_TOKEN || ''}`,
   },
+  timeout: 10000
 });
 
 const LIST_PIPELINES_TOOL: Tool = {
@@ -1275,6 +1276,18 @@ async function run() {
     const app = express();
     const transports = new Map<string, SSEServerTransport>();
 
+    // Manual CORS middleware
+    app.use((req, res, next) => {
+      res.setHeader("Access-Control-Allow-Origin", "*");
+      res.setHeader("Access-Control-Allow-Methods", "GET, POST, OPTIONS");
+      res.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization, x-mcp-protocol-version");
+      if (req.method === "OPTIONS") {
+        res.status(204).end();
+        return;
+      }
+      next();
+    });
+
     // Middleware to log all requests for debugging
     app.use((req, _res, next) => {
       console.error(`${req.method} ${req.url}`);
@@ -1282,34 +1295,45 @@ async function run() {
     });
 
     app.get("/sse", async (req, res) => {
-      const sessionId = crypto.randomUUID();
-      console.error(`New SSE connection: ${sessionId}`);
-      const transport = new SSEServerTransport(`/message/${sessionId}`, res);
+      const transport = new SSEServerTransport("/message", res as any);
+      const sessionId = transport.sessionId;
       transports.set(sessionId, transport);
+      console.error(`New SSE connection: ${sessionId}`);
+      
+      const heartbeatInterval = setInterval(() => {
+        res.write(": heartbeat\n\n");
+      }, 15000);
 
       req.on("close", () => {
         console.error(`SSE connection closed: ${sessionId}`);
+        clearInterval(heartbeatInterval);
         transports.delete(sessionId);
       });
 
       await server.connect(transport);
+      
+      // Keep the connection open indefinitely until client closes
+      await new Promise((resolve) => {
+        req.on("close", resolve);
+      });
     });
 
-    app.post("/message/:sessionId", async (req, res) => {
-      const { sessionId } = req.params;
+    app.post("/message", express.json(), async (req, res) => {
+      const sessionId = req.query.sessionId as string;
       const transport = transports.get(sessionId);
 
       if (!transport) {
         console.error(`No transport found for session: ${sessionId}`);
-        res.status(400).send("No active SSE connection for this session");
+        res.status(404).send("No active SSE connection for this session");
         return;
       }
+
       await transport.handlePostMessage(req, res);
     });
 
-    const PORT = process.env.GITEA_MCP_PORT || 3001;
-    app.listen(PORT, () => {
-      console.error(`Gitea MCP server running on http://localhost:${PORT}/sse`);
+    const PORT = Number(process.env.GITEA_MCP_PORT) || 3001;
+    app.listen(PORT, "0.0.0.0", () => {
+      console.error(`Gitea MCP server running on http://0.0.0.0:${PORT}/sse`);
     });
 
     // Start the background poller only in SSE mode or if specifically desired