cli/internal/core-ide/mcp_bridge.go
Snider 5e2765fd5f feat: wire release command, add tar.xz support, unified installers (#277)
* feat(cli): wire release command and add installer scripts

- Wire up `core build release` subcommand (was orphaned)
- Wire up `core monitor` command (missing import in full variant)
- Add installer scripts for Unix (.sh) and Windows (.bat)
  - setup: Interactive with variant selection
  - ci: Minimal for CI/CD environments
  - dev: Full development variant
  - go/php/agent: Targeted development variants
- All scripts include security hardening:
  - Secure temp directories (mktemp -d)
  - Architecture validation
  - Version validation after GitHub API call
  - Proper cleanup on exit
  - PowerShell PATH updates on Windows (avoids setx truncation)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* feat(build): add tar.xz support and unified installer scripts

- Add tar.xz archive support using Borg's compress package
  - ArchiveXZ() and ArchiveWithFormat() for configurable compression
  - Better compression ratio than gzip for release artifacts
- Consolidate 12 installer scripts into 2 unified scripts
  - install.sh and install.bat with BunnyCDN edge variable support
  - Subdomains: setup.core.help, ci.core.help, dev.core.help, etc.
  - MODE and VARIANT transformed at edge based on subdomain
- Installers prefer tar.xz with automatic fallback to tar.gz
- Fixed CodeRabbit issues: HTTP status patterns, tar error handling,
  verify_install params, VARIANT validation, CI PATH persistence

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* chore: add build and release config files

- .core/build.yaml - cross-platform build configuration
- .core/release.yaml - release workflow configuration

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* chore: move plans from docs/ to tasks/

Consolidate planning documents in tasks/plans/ directory.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix(install): address CodeRabbit review feedback

- Add curl timeout (--max-time) to prevent hanging on slow networks
- Rename TMPDIR to WORK_DIR to avoid clobbering system env var
- Add chmod +x to ensure binary has execute permissions
- Add error propagation after subroutine calls in batch file
- Remove System32 install attempt in CI mode (use consistent INSTALL_DIR)
- Fix HTTP status regex for HTTP/2 compatibility

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* feat(rag): add Go RAG implementation with Qdrant + Ollama

Add RAG (Retrieval Augmented Generation) tools for storing documentation
in Qdrant vector database and querying with semantic search. This replaces
the Python tools/rag implementation with a native Go solution.

New commands:
- core rag ingest [directory] - Ingest markdown files into Qdrant
- core rag query [question] - Query vector database with semantic search
- core rag collections - List and manage Qdrant collections

Features:
- Markdown chunking by sections and paragraphs with overlap
- UTF-8 safe text handling for international content
- Automatic category detection from file paths
- Multiple output formats: text, JSON, LLM context injection
- Environment variable support for host configuration

Dependencies:
- github.com/qdrant/go-client (gRPC client)
- github.com/ollama/ollama/api (embeddings API)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* feat(deploy): add pure-Go Ansible executor and Coolify API integration

Implement infrastructure deployment system with:

- pkg/ansible: Pure Go Ansible executor
  - Playbook/inventory parsing (types.go, parser.go)
  - Full execution engine with variable templating, loops, blocks,
    conditionals, handlers, and fact gathering (executor.go)
  - SSH client with key/password auth and privilege escalation (ssh.go)
  - 35+ module implementations: shell, command, copy, template, file,
    apt, service, systemd, user, group, git, docker_compose, etc. (modules.go)

- pkg/deploy/coolify: Coolify API client wrapping Python swagger client
  - List/get servers, projects, applications, databases, services
  - Generic Call() for any OpenAPI operation

- pkg/deploy/python: Embedded Python runtime for swagger client integration

- internal/cmd/deploy: CLI commands
  - core deploy servers/projects/apps/databases/services/team
  - core deploy call <operation> [params-json]

This enables Docker-free infrastructure deployment with Ansible-compatible
playbooks executed natively in Go.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix(deploy): address linter warnings and build errors

- Fix fmt.Sprintf format verb error in ssh.go (remove unused stat command)
- Fix errcheck warnings by explicitly ignoring best-effort operations
- Fix ineffassign warning in cmd_ansible.go

All golangci-lint checks now pass for deploy packages.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* style(deploy): fix gofmt formatting

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix(deploy): use known_hosts for SSH host key verification

Address CodeQL security alert by using the user's known_hosts file
for SSH host key verification when available. Falls back to accepting
any key only when known_hosts doesn't exist (common in containerized
or ephemeral environments).

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* feat(ai,security,ide): add agentic MVP, security jobs, and Core IDE desktop app

Wire up AI infrastructure with unified pkg/ai package (metrics JSONL,
RAG integration), move RAG under `core ai rag`, add `core ai metrics`
command, and enrich task context with Qdrant documentation.

Add `--target` flag to all security commands for external repo scanning,
`core security jobs` for distributing findings as GitHub Issues, and
consistent error logging across scan/deps/alerts/secrets commands.

Add Core IDE Wails v3 desktop app with Angular 20 frontend, MCP bridge
(loopback-only HTTP server), WebSocket hub, and Claude Code bridge.
Production-ready with Lethean CIC branding, macOS code signing support,
and security hardening (origin validation, body size limits, URL scheme
checks, memory leak prevention, XSS mitigation).

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: address PR review comments from CodeRabbit, Copilot, and Gemini

Fixes across 25 files addressing 46+ review comments:

- pkg/ai/metrics.go: handle error from Close() on writable file handle
- pkg/ansible: restore loop vars after loop, restore become settings,
  fix Upload with become=true and no password (use sudo -n), honour
  SSH timeout config, use E() helper for contextual errors, quote git
  refs in checkout commands
- pkg/rag: validate chunk config, guard negative-to-uint64 conversion,
  use E() helper for errors, add context timeout to Ollama HTTP calls
- pkg/deploy/python: fix exec.ExitError type assertion (was os.PathError),
  handle os.UserHomeDir() error
- pkg/build/buildcmd: use cmd.Context() instead of context.Background()
  for proper Ctrl+C cancellation
- install.bat: add curl timeouts, CRLF line endings, use --connect-timeout
  for archive downloads
- install.sh: use absolute path for version check in CI mode
- tools/rag: fix broken ingest.py function def, escape HTML in query.py,
  pin qdrant-client version, add markdown code block languages
- internal/cmd/rag: add chunk size validation, env override handling

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix(build): make release dry-run by default and remove darwin/amd64 target

Replace --dry-run (default false) with --we-are-go-for-launch (default
false) so `core build release` is safe by default. Remove darwin/amd64
from default build targets (arm64 only for macOS). Fix cmd_project.go
to use command context instead of context.Background().

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-04 00:49:57 +00:00

520 lines
16 KiB
Go

package main
import (
"context"
"encoding/json"
"fmt"
"log"
"net/http"
"net/url"
"sync"
"time"
"github.com/host-uk/core-gui/pkg/webview"
"github.com/host-uk/core-gui/pkg/ws"
"github.com/wailsapp/wails/v3/pkg/application"
)
// MCPBridge wires together WebView and WebSocket services
// and starts the MCP HTTP server after Wails initializes.
type MCPBridge struct {
webview *webview.Service
wsHub *ws.Hub
claudeBridge *ClaudeBridge
app *application.App
port int
running bool
mu sync.Mutex
}
// NewMCPBridge creates a new MCP bridge with all services wired up.
func NewMCPBridge(port int) *MCPBridge {
wv := webview.New()
hub := ws.NewHub()
// Create Claude bridge to forward messages to MCP core on port 9876
claudeBridge := NewClaudeBridge("ws://localhost:9876/ws")
return &MCPBridge{
webview: wv,
wsHub: hub,
claudeBridge: claudeBridge,
port: port,
}
}
// ServiceStartup is called by Wails when the app starts.
// This wires up the app reference and starts the HTTP server.
func (b *MCPBridge) ServiceStartup(ctx context.Context, options application.ServiceOptions) error {
b.mu.Lock()
defer b.mu.Unlock()
// Get the Wails app reference
b.app = application.Get()
if b.app == nil {
return fmt.Errorf("failed to get Wails app reference")
}
// Wire up the WebView service with the app
b.webview.SetApp(b.app)
// Set up console listener
b.webview.SetupConsoleListener()
// Inject console capture into all windows after a short delay
// (windows may not be created yet)
go b.injectConsoleCapture()
// Start the HTTP server for MCP
go b.startHTTPServer()
log.Printf("MCP Bridge started on port %d", b.port)
return nil
}
// injectConsoleCapture injects the console capture script into windows.
func (b *MCPBridge) injectConsoleCapture() {
// Wait for windows to be created (poll with timeout)
var windows []webview.WindowInfo
for i := 0; i < 10; i++ {
time.Sleep(500 * time.Millisecond)
windows = b.webview.ListWindows()
if len(windows) > 0 {
break
}
}
if len(windows) == 0 {
log.Printf("MCP Bridge: no windows found after waiting")
return
}
for _, w := range windows {
if err := b.webview.InjectConsoleCapture(w.Name); err != nil {
log.Printf("Failed to inject console capture in %s: %v", w.Name, err)
}
}
}
// startHTTPServer starts the HTTP server for MCP and WebSocket.
func (b *MCPBridge) startHTTPServer() {
b.mu.Lock()
b.running = true
b.mu.Unlock()
// Start the WebSocket hub
hubCtx := context.Background()
go b.wsHub.Run(hubCtx)
// Claude bridge disabled - port 9876 is not an MCP WebSocket server
// b.claudeBridge.Start()
mux := http.NewServeMux()
// WebSocket endpoint for GUI clients
mux.HandleFunc("/ws", b.wsHub.HandleWebSocket)
// MCP info endpoint
mux.HandleFunc("/mcp", b.handleMCPInfo)
// MCP tools endpoint
mux.HandleFunc("/mcp/tools", b.handleMCPTools)
mux.HandleFunc("/mcp/call", b.handleMCPCall)
// Health check
mux.HandleFunc("/health", func(w http.ResponseWriter, r *http.Request) {
w.Header().Set("Content-Type", "application/json")
json.NewEncoder(w).Encode(map[string]any{
"status": "ok",
"mcp": true,
"webview": b.webview != nil,
})
})
addr := fmt.Sprintf("127.0.0.1:%d", b.port)
log.Printf("MCP HTTP server listening on %s", addr)
if err := http.ListenAndServe(addr, mux); err != nil {
log.Printf("MCP HTTP server error: %v", err)
}
}
// handleMCPInfo returns MCP server information.
func (b *MCPBridge) handleMCPInfo(w http.ResponseWriter, r *http.Request) {
w.Header().Set("Content-Type", "application/json")
w.Header().Set("Access-Control-Allow-Origin", "http://localhost")
info := map[string]any{
"name": "core-ide",
"version": "0.1.0",
"capabilities": map[string]any{
"webview": true,
"websocket": fmt.Sprintf("ws://localhost:%d/ws", b.port),
},
}
json.NewEncoder(w).Encode(info)
}
// handleMCPTools returns the list of available tools.
func (b *MCPBridge) handleMCPTools(w http.ResponseWriter, r *http.Request) {
w.Header().Set("Content-Type", "application/json")
w.Header().Set("Access-Control-Allow-Origin", "http://localhost")
tools := []map[string]string{
// WebView interaction (JS runtime, console, DOM)
{"name": "webview_list", "description": "List windows"},
{"name": "webview_eval", "description": "Execute JavaScript"},
{"name": "webview_console", "description": "Get console messages"},
{"name": "webview_console_clear", "description": "Clear console buffer"},
{"name": "webview_click", "description": "Click element"},
{"name": "webview_type", "description": "Type into element"},
{"name": "webview_query", "description": "Query DOM elements"},
{"name": "webview_navigate", "description": "Navigate to URL"},
{"name": "webview_source", "description": "Get page source"},
{"name": "webview_url", "description": "Get current page URL"},
{"name": "webview_title", "description": "Get current page title"},
{"name": "webview_screenshot", "description": "Capture page as base64 PNG"},
{"name": "webview_screenshot_element", "description": "Capture specific element as PNG"},
{"name": "webview_scroll", "description": "Scroll to element or position"},
{"name": "webview_hover", "description": "Hover over element"},
{"name": "webview_select", "description": "Select option in dropdown"},
{"name": "webview_check", "description": "Check/uncheck checkbox or radio"},
{"name": "webview_element_info", "description": "Get detailed info about element"},
{"name": "webview_computed_style", "description": "Get computed styles for element"},
{"name": "webview_highlight", "description": "Visually highlight element"},
{"name": "webview_dom_tree", "description": "Get DOM tree structure"},
{"name": "webview_errors", "description": "Get captured error messages"},
{"name": "webview_performance", "description": "Get performance metrics"},
{"name": "webview_resources", "description": "List loaded resources"},
{"name": "webview_network", "description": "Get network requests log"},
{"name": "webview_network_clear", "description": "Clear network request log"},
{"name": "webview_network_inject", "description": "Inject network interceptor for detailed logging"},
{"name": "webview_pdf", "description": "Export page as PDF (base64 data URI)"},
{"name": "webview_print", "description": "Open print dialog for window"},
}
json.NewEncoder(w).Encode(map[string]any{"tools": tools})
}
// handleMCPCall handles tool calls via HTTP POST.
func (b *MCPBridge) handleMCPCall(w http.ResponseWriter, r *http.Request) {
w.Header().Set("Content-Type", "application/json")
w.Header().Set("Access-Control-Allow-Origin", "http://localhost")
w.Header().Set("Access-Control-Allow-Methods", "POST, OPTIONS")
w.Header().Set("Access-Control-Allow-Headers", "Content-Type")
if r.Method == "OPTIONS" {
w.WriteHeader(http.StatusOK)
return
}
if r.Method != "POST" {
http.Error(w, "Method not allowed", http.StatusMethodNotAllowed)
return
}
var req struct {
Tool string `json:"tool"`
Params map[string]any `json:"params"`
}
// Limit request body to 1MB
r.Body = http.MaxBytesReader(w, r.Body, 1<<20)
if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
http.Error(w, "invalid request body", http.StatusBadRequest)
return
}
result := b.executeWebviewTool(req.Tool, req.Params)
json.NewEncoder(w).Encode(result)
}
// executeWebviewTool handles webview/JS tool execution.
func (b *MCPBridge) executeWebviewTool(tool string, params map[string]any) map[string]any {
if b.webview == nil {
return map[string]any{"error": "webview service not available"}
}
switch tool {
case "webview_list":
windows := b.webview.ListWindows()
return map[string]any{"windows": windows}
case "webview_eval":
windowName := getStringParam(params, "window")
code := getStringParam(params, "code")
result, err := b.webview.ExecJS(windowName, code)
if err != nil {
return map[string]any{"error": err.Error()}
}
return map[string]any{"result": result}
case "webview_console":
level := getStringParam(params, "level")
limit := getIntParam(params, "limit")
if limit == 0 {
limit = 100
}
messages := b.webview.GetConsoleMessages(level, limit)
return map[string]any{"messages": messages}
case "webview_console_clear":
b.webview.ClearConsole()
return map[string]any{"success": true}
case "webview_click":
windowName := getStringParam(params, "window")
selector := getStringParam(params, "selector")
err := b.webview.Click(windowName, selector)
if err != nil {
return map[string]any{"error": err.Error()}
}
return map[string]any{"success": true}
case "webview_type":
windowName := getStringParam(params, "window")
selector := getStringParam(params, "selector")
text := getStringParam(params, "text")
err := b.webview.Type(windowName, selector, text)
if err != nil {
return map[string]any{"error": err.Error()}
}
return map[string]any{"success": true}
case "webview_query":
windowName := getStringParam(params, "window")
selector := getStringParam(params, "selector")
result, err := b.webview.QuerySelector(windowName, selector)
if err != nil {
return map[string]any{"error": err.Error()}
}
return map[string]any{"elements": result}
case "webview_navigate":
windowName := getStringParam(params, "window")
rawURL := getStringParam(params, "url")
parsed, err := url.Parse(rawURL)
if err != nil || (parsed.Scheme != "http" && parsed.Scheme != "https") {
return map[string]any{"error": "only http/https URLs are allowed"}
}
err = b.webview.Navigate(windowName, rawURL)
if err != nil {
return map[string]any{"error": err.Error()}
}
return map[string]any{"success": true}
case "webview_source":
windowName := getStringParam(params, "window")
result, err := b.webview.GetPageSource(windowName)
if err != nil {
return map[string]any{"error": err.Error()}
}
return map[string]any{"source": result}
case "webview_url":
windowName := getStringParam(params, "window")
result, err := b.webview.GetURL(windowName)
if err != nil {
return map[string]any{"error": err.Error()}
}
return map[string]any{"url": result}
case "webview_title":
windowName := getStringParam(params, "window")
result, err := b.webview.GetTitle(windowName)
if err != nil {
return map[string]any{"error": err.Error()}
}
return map[string]any{"title": result}
case "webview_screenshot":
windowName := getStringParam(params, "window")
data, err := b.webview.Screenshot(windowName)
if err != nil {
return map[string]any{"error": err.Error()}
}
return map[string]any{"data": data}
case "webview_screenshot_element":
windowName := getStringParam(params, "window")
selector := getStringParam(params, "selector")
data, err := b.webview.ScreenshotElement(windowName, selector)
if err != nil {
return map[string]any{"error": err.Error()}
}
return map[string]any{"data": data}
case "webview_scroll":
windowName := getStringParam(params, "window")
selector := getStringParam(params, "selector")
x := getIntParam(params, "x")
y := getIntParam(params, "y")
err := b.webview.Scroll(windowName, selector, x, y)
if err != nil {
return map[string]any{"error": err.Error()}
}
return map[string]any{"success": true}
case "webview_hover":
windowName := getStringParam(params, "window")
selector := getStringParam(params, "selector")
err := b.webview.Hover(windowName, selector)
if err != nil {
return map[string]any{"error": err.Error()}
}
return map[string]any{"success": true}
case "webview_select":
windowName := getStringParam(params, "window")
selector := getStringParam(params, "selector")
value := getStringParam(params, "value")
err := b.webview.Select(windowName, selector, value)
if err != nil {
return map[string]any{"error": err.Error()}
}
return map[string]any{"success": true}
case "webview_check":
windowName := getStringParam(params, "window")
selector := getStringParam(params, "selector")
checked, _ := params["checked"].(bool)
err := b.webview.Check(windowName, selector, checked)
if err != nil {
return map[string]any{"error": err.Error()}
}
return map[string]any{"success": true}
case "webview_element_info":
windowName := getStringParam(params, "window")
selector := getStringParam(params, "selector")
result, err := b.webview.GetElementInfo(windowName, selector)
if err != nil {
return map[string]any{"error": err.Error()}
}
return map[string]any{"element": result}
case "webview_computed_style":
windowName := getStringParam(params, "window")
selector := getStringParam(params, "selector")
var properties []string
if props, ok := params["properties"].([]any); ok {
for _, p := range props {
if s, ok := p.(string); ok {
properties = append(properties, s)
}
}
}
result, err := b.webview.GetComputedStyle(windowName, selector, properties)
if err != nil {
return map[string]any{"error": err.Error()}
}
return map[string]any{"styles": result}
case "webview_highlight":
windowName := getStringParam(params, "window")
selector := getStringParam(params, "selector")
duration := getIntParam(params, "duration")
err := b.webview.Highlight(windowName, selector, duration)
if err != nil {
return map[string]any{"error": err.Error()}
}
return map[string]any{"success": true}
case "webview_dom_tree":
windowName := getStringParam(params, "window")
maxDepth := getIntParam(params, "maxDepth")
result, err := b.webview.GetDOMTree(windowName, maxDepth)
if err != nil {
return map[string]any{"error": err.Error()}
}
return map[string]any{"tree": result}
case "webview_errors":
limit := getIntParam(params, "limit")
if limit == 0 {
limit = 50
}
errors := b.webview.GetErrors(limit)
return map[string]any{"errors": errors}
case "webview_performance":
windowName := getStringParam(params, "window")
result, err := b.webview.GetPerformance(windowName)
if err != nil {
return map[string]any{"error": err.Error()}
}
return map[string]any{"performance": result}
case "webview_resources":
windowName := getStringParam(params, "window")
result, err := b.webview.GetResources(windowName)
if err != nil {
return map[string]any{"error": err.Error()}
}
return map[string]any{"resources": result}
case "webview_network":
windowName := getStringParam(params, "window")
limit := getIntParam(params, "limit")
result, err := b.webview.GetNetworkRequests(windowName, limit)
if err != nil {
return map[string]any{"error": err.Error()}
}
return map[string]any{"requests": result}
case "webview_network_clear":
windowName := getStringParam(params, "window")
err := b.webview.ClearNetworkRequests(windowName)
if err != nil {
return map[string]any{"error": err.Error()}
}
return map[string]any{"success": true}
case "webview_network_inject":
windowName := getStringParam(params, "window")
err := b.webview.InjectNetworkInterceptor(windowName)
if err != nil {
return map[string]any{"error": err.Error()}
}
return map[string]any{"success": true}
case "webview_pdf":
windowName := getStringParam(params, "window")
options := make(map[string]any)
if filename := getStringParam(params, "filename"); filename != "" {
options["filename"] = filename
}
if margin, ok := params["margin"].(float64); ok {
options["margin"] = margin
}
data, err := b.webview.ExportToPDF(windowName, options)
if err != nil {
return map[string]any{"error": err.Error()}
}
return map[string]any{"data": data}
case "webview_print":
windowName := getStringParam(params, "window")
err := b.webview.PrintToPDF(windowName)
if err != nil {
return map[string]any{"error": err.Error()}
}
return map[string]any{"success": true}
default:
return map[string]any{"error": "unknown tool", "tool": tool}
}
}
// Helper functions for parameter extraction
func getStringParam(params map[string]any, key string) string {
if v, ok := params[key].(string); ok {
return v
}
return ""
}
func getIntParam(params map[string]any, key string) int {
if v, ok := params[key].(float64); ok {
return int(v)
}
return 0
}