@chatpanel/bridge 0.10.36 → 0.10.38

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chatpanel/bridge",
-  "version": "0.10.36",
+  "version": "0.10.38",
   "type": "module",
   "description": "Local bridge that exposes the AI coding agents installed on your machine \u2014 Claude Code (CLI), Codex (CLI), and Antigravity CLI (formerly Gemini CLI, which remains available for business/enterprise) \u2014 to the ChatPanel Chrome extension over a localhost SSE endpoint. Bring your own agent.",
   "keywords": [

package/src/engines/cli-agents.js

@@ -8,8 +8,8 @@
 //   kiro     — kiro-cli chat --no-interactive "<prompt>" · --model · --list-models
 //   hermes   — hermes -z "<prompt>"      · -m model · config get model (no list command)
 
-import { runSpec, listSpecModels, runForStdout } from './custom.js';
-import { findAgentBin } from '../env.js';
+import { runSpec, listSpecModels, runForStdout, CHATPANEL_STABLE_MCP_URL } from './custom.js';
+import { findAgentBin, selfMcpStdio } from '../env.js';
 
 // `listModels` override hook: a CLI whose model listing isn't "one id per line"
 // (Copilot prints a quoted list inside `help config`) passes its own parser here
@@ -275,8 +275,20 @@ export const hermes = makeCliAgent(
     requiresStableMcp: true,
     autoSetupStableMcp: true,
     stableMcpConfigCheck: 'hermes',
-    stableMcpSetupArgs: ['mcp', 'add', 'chatpanel_browser', '--url', 'http://127.0.0.1:4319/mcp'],
-    stableMcpSetupCommand: 'hermes mcp add chatpanel_browser --url http://127.0.0.1:4319/mcp',
+    // STDIO, not --url. Hermes's bundled MCP client has no HTTP transport ("requires HTTP
+    // transport but mcp.client.streamable_http is not available"), so a URL registration
+    // saves a config that can never connect. The bridge also speaks MCP over stdio — the
+    // same mode Codex uses — so we register that instead. A function because the executable
+    // is only known at runtime (a compiled binary runs itself; under node it re-runs its
+    // entry script). `--args` must come last, per `hermes mcp add`.
+    stableMcpSetupArgs: () => {
+      const { command, args } = selfMcpStdio(CHATPANEL_STABLE_MCP_URL);
+      return ['mcp', 'add', 'chatpanel_browser', '--command', command, '--args', ...args];
+    },
+    stableMcpSetupCommand: (() => {
+      const { command, args } = selfMcpStdio(CHATPANEL_STABLE_MCP_URL);
+      return `hermes mcp add chatpanel_browser --command ${command} --args ${args.join(' ')}`;
+    })(),
     label: 'Hermes',
   },
   'hermes not found on PATH. Install Hermes Agent, then run `hermes setup` to sign in.',

package/src/engines/custom.js

@@ -64,7 +64,7 @@ const IDLE_MS = Number(process.env.CHATPANEL_CUSTOM_TIMEOUT_MS) || 180_000;
 // ANSI stripping moved to stream-formats.js (imported above), which is where
 // text output is actually rendered - one implementation for every format.
 const OPENCODE_STABLE_MCP_URL = 'http://127.0.0.1:4319/mcp';
-const CHATPANEL_STABLE_MCP_URL = 'http://127.0.0.1:4319/mcp';
+export const CHATPANEL_STABLE_MCP_URL = 'http://127.0.0.1:4319/mcp';
 
 export async function available() {
   // The engine ships in every bridge; individual custom agents are user-defined
@@ -167,7 +167,10 @@ export function stableMcpSetupCommand(spec = {}) {
 }
 
 export function stableMcpSetupPlan(spec = {}) {
-  const args = Array.isArray(spec.stableMcpSetupArgs) ? spec.stableMcpSetupArgs.filter((a) => a != null).map(String) : null;
+  // A FUNCTION is allowed as well as an array: a stdio registration has to name the bridge's
+  // own executable, which is only known at runtime (compiled binary vs. node + entry script).
+  const raw = typeof spec.stableMcpSetupArgs === 'function' ? spec.stableMcpSetupArgs() : spec.stableMcpSetupArgs;
+  const args = Array.isArray(raw) ? raw.filter((a) => a != null).map(String) : null;
   if (!args?.length) return null;
   return { command: spec.stableMcpSetupCommandName || spec.command, args };
 }
@@ -348,6 +351,20 @@ async function runStableMcpSetup(plan, cwd) {
   });
 }
 
+// Turn a browser-tool setup failure into something the user can act on. The CLI's own words
+// are the most accurate signal available, so we forward them — but when they name a missing
+// SDK we say the fix, rather than repeating an `mcp add` that will fail identically.
+export function mcpSetupHint(label, err) {
+  const msg = String(err?.message || err || '');
+  if (/mcp['" ]* Python SDK|No module named ['"]?mcp|MCP support/i.test(msg)) {
+    return `${label} has no MCP support installed. Run \`hermes setup\` (or install the \`mcp\` package in its environment), then retry.`;
+  }
+  if (/streamable_http|HTTP transport/i.test(msg)) {
+    return `${label}'s MCP client has no HTTP transport; ChatPanel registers a stdio server instead. Upgrade its \`mcp\` package if this persists.`;
+  }
+  return msg.slice(0, 200) || 'the CLI could not register the tools';
+}
+
 export async function ensureStableMcpConfig(spec, cwd, label, emit, deps = {}) {
   if (!spec.requiresStableMcp) return true;
   const hasConfig = deps.hasConfig || hasStableMcpConfig;
@@ -471,10 +488,25 @@ export async function runSpec(spec, { messages, system, options = {}, images },
       : [...tmpl.split(/\s+/).filter(Boolean), cfgFile];
     args = [...tokens, ...args];
   }
-  if (options.mcp?.url) args.push(...mcpTrustArgs(spec, options.mcp));
   // Some CLIs only load MCP from their persistent config, so ensure that stable
   // /mcp endpoint is present before letting the agent answer with no tools.
-  if (options.mcp?.url) await ensureStableMcpConfig(spec, cwd, label, emit);
+  //
+  // DEGRADE, DON'T FAIL. Browser tools are an ENHANCEMENT on top of a CLI that already has
+  // its own; a turn that could have been answered should not die because they couldn't be
+  // registered. (Hermes ships without the `mcp` Python SDK unless `hermes setup` installed
+  // it, so every tool-armed turn failed — and the error told the user to run a command that
+  // fails the same way.) We now say what happened, drop the browser tools, and answer.
+  if (options.mcp?.url) {
+    try {
+      await ensureStableMcpConfig(spec, cwd, label, emit);
+    } catch (e) {
+      emit({ type: 'status', text: `${label}: continuing without ChatPanel's browser tools — ${mcpSetupHint(label, e)}` });
+      options = { ...options, mcp: null };
+    }
+  }
+  // Trust flags only make sense once the server is actually registered — pushing them for
+  // tools we then dropped would widen the CLI's permissions for nothing.
+  if (options.mcp?.url) args.push(...mcpTrustArgs(spec, options.mcp));
 
   // Model via a CONFIG-PATCH FILE, for agents with no --model flag (dsh takes the
   // model as a Cordis config overlay: `--patch <file>` replacing one row by id).

package/src/server.js

@@ -67,7 +67,7 @@ import {
 // Hardcoded (not read from package.json) so it survives Bun's single-file
 // --compile, where package.json isn't on a readable FS. CI fails the publish if
 // this drifts from package.json, so the two can't silently diverge.
-const VERSION = '0.10.36';
+const VERSION = '0.10.38';
 const HOST = process.env.CHATPANEL_BRIDGE_HOST || '127.0.0.1';
 const PORT = Number(process.env.CHATPANEL_BRIDGE_PORT) || 4319;