chore(mcp): remove unused HTTP transport

AGENTS.md

@@ -121,7 +121,7 @@ fail-closed and only pauses when the agent actually proposed a reviewed output.
 │   ├── execute.rs        # Stage 3 safe output execution
 │   ├── fuzzy_schedule.rs # Fuzzy schedule parsing
 │   ├── logging.rs        # File-based logging infrastructure
-│   ├── mcp.rs            # SafeOutputs MCP server (stdio + HTTP)
+│   ├── mcp.rs            # SafeOutputs stdio MCP server
 │   ├── mcp_author/       # Author-facing read-only MCP server for local IDE/Copilot Chat integrations
 │   │   ├── mod.rs        # Tool router + handlers for inspect/graph/deps/outputs/whatif/lint/catalog/trace/audit
 │   │   └── tests.rs      # MCP-author integration / contract tests
@@ -352,7 +352,7 @@ index to jump to the right page.
 
 - [`docs/ir.md`](docs/ir.md) — typed Azure DevOps pipeline IR (`Pipeline`, jobs/stages/steps, output refs, graph pass, lowering, target builders, and the public JSON summary consumed by agent-facing tooling).
 - [`docs/cli.md`](docs/cli.md) — `ado-aw` CLI commands (`init`, `compile`,
-  `check`, `mcp`, `mcp-http`, `execute`, `secrets`, `enable`, `disable`,
+  `check`, `mcp`, `execute`, `secrets`, `enable`, `disable`,
   `remove`, `list`, `status`, `run`, `audit`, `mcp-author`, `trace`,
   `inspect`, `graph`, `whatif`, `lint`, `catalog`; `configure` is a
   deprecated hidden alias; `export-gate-schema` and `export-fact-catalog` are hidden build-time tools).

Cargo.toml

@@ -17,7 +17,6 @@ schemars = { version = "1.2", features = ["derive"] }
 rmcp = { version = "1.4.0", features = [
     "server",
     "transport-io",
-    "transport-streamable-http-server",
 ] }
 percent-encoding = "2.3"
 reqwest = { version = "0.12", features = ["json"] }
@@ -28,8 +27,6 @@ env_logger = "0.11"
 regex-lite = "0.1"
 inquire = "0.9.2"  # Used by configure command (Password prompts)
 url = "2.5.8"
-axum = { version = "0.8.8", features = ["tokio"] }
-subtle = "2.6.1"
 rand = "0.10.1"
 base64 = "0.22.1"
 glob-match = "0.2.1"

README.md

@@ -634,7 +634,6 @@ Commands:
   check         Verify a compiled pipeline matches its source
   mcp           Run as an MCP server (safe outputs)
   mcp-author    Run the author-facing MCP server over stdio (IDE/Copilot Chat integration)
-  mcp-http      Run as an HTTP MCP server (for MCPG integration)
   execute       Execute safe outputs (Stage 3)
   secrets       Manage pipeline-variable secrets on matched ADO definitions (set/list/delete)
   enable        Register ADO build definitions for compiled pipelines and ensure they are enabled

docs/cli.md

@@ -26,11 +26,6 @@ Global flags (apply to all subcommands): `--verbose, -v` (enable info-level logg
 - `mcp <output_directory> <bounding_directory>` - Run SafeOutputs as a stdio MCP server. **This is what compiled pipelines use**: MCPG spawns it as a hardened, network-isolated sibling container entrypoint (see [`docs/mcpg.md`](mcpg.md)).
   - `--enabled-tools <name>` - Restrict available tools to those named (repeatable)
 - `mcp-author` - Run the author-facing stdio MCP server for IDE/Copilot Chat integrations. See [`mcp-author.md`](mcp-author.md) for the full tool surface and trust model.
-- `mcp-http <output_directory> <bounding_directory>` - Run SafeOutputs as an HTTP MCP server (for direct/local MCPG integration or manual testing). **Optional and not compiler-emitted** — compiled pipelines no longer start this server; see [`docs/local-development.md`](local-development.md).
-  - `--bind-address <ip>` - Listener IP address (default: `127.0.0.1`)
-  - `--port <port>` - Port to listen on (default: 8100)
-  - `--api-key <key>` - API key for authentication (auto-generated if not provided)
-  - `--enabled-tools <name>` - Restrict available tools to those named (repeatable)
 - `execute` - Execute safe outputs from Stage 1 (Stage 3 of pipeline)
   - `--source, -s <path>` - Path to source markdown file
   - `--safe-output-dir <path>` - Directory containing safe output NDJSON (default: current directory)