add simple-host example

examples/simple-host/serve.py

@@ -0,0 +1,63 @@
+#!/usr/bin/env python3
+"""
+Simple HTTP server to serve the MCP-UI proxy on port 8765
+"""
+
+import http.server
+import os
+import socketserver
+import sys
+from pathlib import Path
+
+PORT = int(os.environ.get('PORT', '8080'))
+DIRECTORY = Path(__file__).parent / 'dist'
+
+class CustomHTTPRequestHandler(http.server.SimpleHTTPRequestHandler):
+    def __init__(self, *args, **kwargs):
+        super().__init__(*args, directory=DIRECTORY.as_posix(), **kwargs)
+
+    def end_headers(self):
+        # Apply custom headers only to sandbox.html
+        if self.path == "/sandbox.html" or self.path == "/":
+            # Add CORS headers to allow cross-origin requests
+            self.send_header("Access-Control-Allow-Origin", "*")
+            self.send_header("Access-Control-Allow-Methods", "GET, POST, OPTIONS")
+            self.send_header("Access-Control-Allow-Headers", "*")
+
+            # Add permissive CSP to allow external resources (images, styles, scripts)
+            csp = "; ".join(
+                [
+                    "default-src 'self'",
+                    "img-src * data: blob: 'unsafe-inline'",
+                    "style-src * blob: data: 'unsafe-inline'",
+                    "script-src * blob: data: 'unsafe-inline' 'unsafe-eval'",
+                    "connect-src *",
+                    "font-src * blob: data:",
+                    "media-src * blob: data:",
+                    "frame-src * blob: data:",
+                ]
+            )
+            self.send_header("Content-Security-Policy", csp)
+
+            # Disable caching to ensure fresh content on every request
+            self.send_header("Cache-Control", "no-cache, no-store, must-revalidate")
+            self.send_header("Pragma", "no-cache")
+            self.send_header("Expires", "0")
+
+        super().end_headers()
+
+
+def main():
+    print(f"Server running on: http://localhost:{PORT}")
+    print(f"Press Ctrl+C to stop the server\n")
+
+    with socketserver.TCPServer(("", PORT), CustomHTTPRequestHandler) as httpd:
+        try:
+            httpd.serve_forever()
+        except KeyboardInterrupt:
+            print("\n\nServer stopped.")
+            sys.exit(0)
+
+
+if __name__ == "__main__":
+    main()