feat(mcp): add HTTP transport for network access

[shivasurya]

Summary

Adds HTTP transport layer for MCP server, enabling network-based access.

Features:

• HTTP server with configurable address (--http --address :8080)
• CORS support with configurable allowed origins
• /health endpoint for monitoring
• Graceful shutdown handling
• Streaming support (line-delimited JSON, SSE foundation)

Usage:

# Start HTTP server
pathfinder serve --project . --http --address :8080

# Health check
curl http://localhost:8080/health

# JSON-RPC request
curl -X POST http://localhost:8080 \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Configuration:

Option	Default	Description
--http	false	Enable HTTP transport
--address	:8080	Server address

[shivasurya]

• feat(mcp): add indexing status, analytics, and comprehensive tests #459
• feat(mcp): add HTTP transport for network access #458 👈 (View in Graphite)
• feat(mcp): add cursor-based pagination for large result sets #457
• feat(mcp): add robust error handling per JSON-RPC 2.0 spec #456
• feat(mcp): add comprehensive test coverage for MCP server #455
• feat(mcp): add MCP server foundation with protocol handler and tools #454
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[safedep]

SafeDep Report Summary

No dependency changes detected. Nothing to scan.

_{This report is generated by SafeDep Github App}

[codecov]

Codecov Report

❌ Patch coverage is 62.17617% with 73 lines in your changes missing coverage. Please review.
✅ Project coverage is 80.79%. Comparing base (c923c7a) to head (3a962b9).
⚠️ Report is 1 commits behind head on main.

Files with missing lines	Patch %	Lines
sast-engine/mcp/http.go	71.51%	43 Missing and 4 partials ⚠️
sast-engine/cmd/serve.go	7.14%	26 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #458      +/-   ##
==========================================
- Coverage   81.11%   80.79%   -0.32%     
==========================================
  Files          91       92       +1     
  Lines       10014    10207     +193     
==========================================
+ Hits         8123     8247     +124     
- Misses       1578     1643      +65     
- Partials      313      317       +4     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[shivasurya]

Merge activity

• Jan 10, 4:45 AM UTC: A user started a stack merge that includes this pull request via Graphite.
• Jan 10, 4:52 AM UTC: Graphite rebased this pull request as part of a merge.
• Jan 10, 4:53 AM UTC: @shivasurya merged this pull request with Graphite.