feat(#2038): streamable-http mcp transport for hyperhive server

hive-ag3nt/src/mcp.rs

@@ -1549,6 +1549,41 @@ pub async fn serve_agent_stdio(socket: PathBuf) -> Result<()> {
     serve_stdio(socket).await
 }
 
+/// Run the MCP server over HTTP (rmcp streamable-http transport) on `addr`.
+///
+/// Unlike [`serve_stdio`] — a fresh stdio child claude respawns every turn —
+/// this is meant to run as a long-lived in-container daemon. claude reconnects
+/// to the stable URL each turn instead of respawning and re-registering a stdio
+/// subprocess, which removes the per-turn MCP registration race that can strand
+/// an agent when the async `initialize`/`tools/list` loses to claude's first
+/// tool call. `socket` is the hyperhive control socket every tool call dials
+/// fresh (the handler holds only the path), so a host-side hive-c0re restart is
+/// transparent — the next call just reconnects.
+///
+/// Binds loopback only in practice; the default `allowed_hosts`
+/// (`localhost`/`127.0.0.1`/`::1`) rejects Host headers from anywhere else.
+///
+/// # Errors
+///
+/// Returns an error if the listener cannot bind `addr` or the HTTP server
+/// exits with a fatal error.
+pub async fn serve_http(socket: PathBuf, addr: std::net::SocketAddr) -> Result<()> {
+    use rmcp::transport::streamable_http_server::{
+        StreamableHttpServerConfig, StreamableHttpService, session::local::LocalSessionManager,
+    };
+    let session_manager = std::sync::Arc::new(LocalSessionManager::default());
+    let service = StreamableHttpService::new(
+        move || Ok(AgentServer::new(socket.clone())),
+        session_manager,
+        StreamableHttpServerConfig::default(),
+    );
+    let app = axum::Router::new().nest_service("/mcp", service);
+    let listener = tokio::net::TcpListener::bind(addr).await?;
+    tracing::info!(%addr, "serving hyperhive MCP over streamable-http at /mcp");
+    axum::serve(listener, app).await?;
+    Ok(())
+}
+
 // -----------------------------------------------------------------------------
 // Privileged tool arg types (lifecycle, approvals, scheduling, diagnostics)
 // -----------------------------------------------------------------------------