@chatpanel/bridge 0.6.0 → 0.8.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chatpanel/bridge",
-  "version": "0.6.0",
+  "version": "0.8.0",
   "type": "module",
   "description": "Local bridge that exposes the AI coding agents installed on your machine — Claude Code (CLI), Codex (CLI), and Gemini CLI — to the ChatPanel Chrome extension over a localhost SSE endpoint. Bring your own agent.",
   "keywords": [

package/src/engines/codex.js

@@ -19,7 +19,7 @@ import { readFile, unlink, writeFile } from 'node:fs/promises';
 import { existsSync, mkdirSync, symlinkSync, readFileSync } from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
-import { findAgentBin } from '../env.js';
+import { findAgentBin, selfMcpStdio } from '../env.js';
 
 // Idle timeout: re-armed on every stdout/stderr chunk, so a long run that keeps
 // streaming never trips it — only true silence does. Override with
@@ -133,19 +133,28 @@ export async function chat({ messages, system, options, images }, emit) {
   const cleanupImages = () => imageFiles.forEach((f) => unlink(f).catch(() => {}));
 
   const cwd = options.workingDir ? path.resolve(options.workingDir) : SCRATCH;
-  const sandbox =
-    options.permissionMode === 'bypassPermissions'
-      ? 'danger-full-access'
-      : options.permissionMode === 'acceptEdits'
-        ? 'workspace-write'
-        : 'read-only';
-
-  const args = ['exec', '--json', '--skip-git-repo-check', '-s', sandbox, '-o', outFile];
-  // Headless exec has no human to approve commands. Auto-run within the sandbox
-  // so skill/startup reads don't get "approval declined" (and skills can load in
-  // local-config mode). The sandbox above still bounds what can actually happen.
-  args.push('-c', 'approval_policy=never');
+  const args = ['exec', '--json', '--skip-git-repo-check', '-o', outFile];
+  // Headless exec has no human to approve actions. With MCP/browser tools armed
+  // Codex would otherwise raise an approval prompt it can't show — and cancel the
+  // tool call. So in bypassPermissions (full autonomy, what "Act on page" needs)
+  // use the all-in bypass flag, which also clears MCP-tool approval. Lower modes
+  // keep the sandbox + never-ask, which auto-runs within bounds.
+  if (options.permissionMode === 'bypassPermissions') {
+    args.push('--dangerously-bypass-approvals-and-sandbox');
+  } else {
+    const sandbox = options.permissionMode === 'acceptEdits' ? 'workspace-write' : 'read-only';
+    args.push('-s', sandbox, '-c', 'approval_policy=never');
+  }
   if (REASONING) args.push('-c', `model_reasoning_effort=${REASONING}`);
+  // Browser tools: register the bridge's MCP server as a stdio MCP server (the
+  // bridge binary in --mcp-stdio mode), so Codex can call our page-action tools.
+  // `-c key=value` parses value as TOML; JSON.stringify yields valid TOML here.
+  if (options.mcp?.url) {
+    const name = options.mcp.serverName || 'chatpanel_browser';
+    const { command, args: pargs } = selfMcpStdio(options.mcp.url);
+    args.push('-c', `mcp_servers.${name}.command=${JSON.stringify(command)}`);
+    args.push('-c', `mcp_servers.${name}.args=${JSON.stringify(pargs)}`);
+  }
   if (options.model) args.push('-m', options.model);
   for (const f of imageFiles) args.push('-i', f); // attach images to the initial prompt
   args.push('-');

package/src/engines/custom.js

@@ -19,7 +19,7 @@ import { spawn } from 'node:child_process';
 import { writeFile, unlink } from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
-import { resolveCommand, buildSpawnSpec } from '../env.js';
+import { resolveCommand, buildSpawnSpec, selfMcpStdio } from '../env.js';
 import { isProEntitled } from '../entitlement.js';
 import { handleMessage } from './claude.js';
 
@@ -187,7 +187,26 @@ export async function runSpec(spec, { messages, system, options = {}, images },
   // just before the prompt (arg mode) or get appended (stdin mode).
   const tag = `${Date.now()}-${Math.random().toString(36).slice(2)}`;
   const imageFiles = spec.imageArg ? await writeImages(images, tag) : [];
-  const cleanup = () => imageFiles.forEach((f) => unlink(f).catch(() => {}));
+  const mcpFiles = [];
+  const cleanup = () => [...imageFiles, ...mcpFiles].forEach((f) => unlink(f).catch(() => {}));
+
+  // Browser tools: when armed (options.mcp) AND this CLI knows how to take an MCP
+  // config file (spec.mcpArg, e.g. "--mcp-config {file}"), write a standard
+  // mcpServers JSON pointing at the bridge's stdio MCP proxy and inject the flag.
+  // Covers any CLI that reads the de-facto {mcpServers:{name:{command,args}}} shape.
+  if (options.mcp?.url && spec.mcpArg) {
+    const name = options.mcp.serverName || 'chatpanel_browser';
+    const { command, args: pargs } = selfMcpStdio(options.mcp.url);
+    const cfgFile = path.join(os.tmpdir(), `chatpanel-mcp-${tag}.json`);
+    await writeFile(cfgFile, JSON.stringify({ mcpServers: { [name]: { command, args: pargs } } }));
+    mcpFiles.push(cfgFile);
+    const tmpl = String(spec.mcpArg);
+    const tokens = tmpl.includes('{file}')
+      ? tmpl.replaceAll('{file}', cfgFile).split(/\s+/).filter(Boolean)
+      : [...tmpl.split(/\s+/).filter(Boolean), cfgFile];
+    args = [...tokens, ...args];
+  }
+
   const imageTokens = imageTokensFor(spec.imageArg, imageFiles);
   let placedImages = false;
   if (imageTokens.length) {

package/src/env.js

@@ -48,6 +48,19 @@ export function isCompiledBinary() {
   return !(base.startsWith('node') || base.startsWith('bun'));
 }
 
+// How to re-invoke THIS bridge as a child process running the stdio↔HTTP MCP
+// proxy (`--mcp-stdio <url>`). Lets ANY stdio-capable MCP CLI (Codex, a custom
+// CLI) reach the bridge's HTTP MCP server using the bridge itself as the server
+// command — no extra runtime to install. Compiled binary → the binary; Node →
+// node + this entry script. Returns { command, args }.
+export function selfMcpStdio(url) {
+  const args = ['--mcp-stdio', url];
+  if (isCompiledBinary()) return { command: process.execPath, args };
+  // Node/Bun: re-run this same entry script (server.js) under the same runtime.
+  const entry = process.argv[1] || path.join(process.cwd(), 'src', 'server.js');
+  return { command: process.execPath, args: [entry, ...args] };
+}
+
 // Ask the user's login shell to locate a command — no hardcoded locations, works
 // wherever the user actually installed it.
 function shellWhich(name) {

package/src/server.js

@@ -25,11 +25,12 @@ import * as custom from './engines/custom.js';
 import { installService, uninstallService, serviceStatus, restartService } from './service.js';
 import { enrichPath, findAgentBin, resolveCommand } from './env.js';
 import { checkForUpdate, selfUpdate } from './update.js';
+import { callLocalMcp } from './mcp-local.js';
 
 // Hardcoded (not read from package.json) so it survives Bun's single-file
 // --compile, where package.json isn't on a readable FS. CI fails the publish if
 // this drifts from package.json, so the two can't silently diverge.
-const VERSION = '0.6.0';
+const VERSION = '0.8.0';
 const HOST = process.env.CHATPANEL_BRIDGE_HOST || '127.0.0.1';
 const PORT = Number(process.env.CHATPANEL_BRIDGE_PORT) || 4319;
 
@@ -273,6 +274,36 @@ async function handleMcp(req, res, sessionId) {
   return fail(-32601, `Method not found: ${msg.method}`);
 }
 
+// POST /mcp-local — proxy one JSON-RPC message to a user-configured STDIO MCP
+// server that the bridge spawns and keeps alive. Body: { server:{id,command,args,
+// env?,cwd?}, message }. Returns the full JSON-RPC response (or 202 for a
+// notification). Lets the extension use local MCP servers it can't spawn itself.
+async function handleMcpLocal(req, res) {
+  let body;
+  try {
+    body = await readBody(req);
+  } catch (e) {
+    return json(res, 400, { error: 'Bad JSON: ' + e.message });
+  }
+  const server = body.server || {};
+  const message = body.message;
+  if (!server.command || !message) return json(res, 400, { error: 'need server.command and message' });
+  try {
+    const result = await callLocalMcp(
+      { key: server.id, command: server.command, args: server.args, env: server.env, cwd: server.cwd },
+      message,
+    );
+    if (message.id == null) { res.writeHead(202); return res.end(); }
+    return json(res, 200, result); // the full JSON-RPC response message
+  } catch (e) {
+    return json(res, 200, {
+      jsonrpc: '2.0',
+      id: message.id ?? null,
+      error: { code: -32000, message: String(e?.message || e) },
+    });
+  }
+}
+
 // POST /tool-result — the extension returns a relayed tool's result.
 async function handleToolResult(req, res) {
   let body;
@@ -400,6 +431,7 @@ const server = createServer(async (req, res) => {
       if (req.method === 'DELETE') { deleteSession(sid); res.writeHead(204); return res.end(); }
     }
     if (req.method === 'POST' && url.pathname === '/tool-result') return handleToolResult(req, res);
+    if (req.method === 'POST' && url.pathname === '/mcp-local') return handleMcpLocal(req, res);
     if (req.method === 'POST' && url.pathname === '/complete') return handleComplete(req, res);
     if (req.method === 'POST' && url.pathname === '/list-models') return handleListModels(req, res);
     if (req.method === 'POST' && url.pathname === '/agent-check') return handleAgentCheck(req, res);
@@ -415,6 +447,59 @@ function log(level, msg) {
   fn(`[chatpanel-bridge] ${msg}`);
 }
 
+// `--mcp-stdio <url>` — run as a stdio↔HTTP MCP proxy: read newline-delimited
+// JSON-RPC from stdin, forward each message to the bridge's HTTP MCP endpoint
+// (<url> = http://127.0.0.1:PORT/mcp/<session>), and write responses to stdout.
+// This lets ANY stdio-MCP CLI (Codex, a custom CLI) use the browser tools with
+// the bridge binary itself as the MCP server command — no extra runtime needed.
+function runMcpStdioProxy(url) {
+  let buf = '';
+  const queue = [];
+  let draining = false;
+  let ended = false;
+  const maybeExit = () => { if (ended && !draining && !queue.length) process.exit(0); };
+  const drain = async () => {
+    if (draining) return;
+    draining = true;
+    while (queue.length) {
+      const line = queue.shift();
+      let msg;
+      try { msg = JSON.parse(line); } catch { continue; }
+      try {
+        const res = await fetch(url, {
+          method: 'POST',
+          headers: { 'Content-Type': 'application/json', Accept: 'application/json' },
+          body: line,
+        });
+        if (msg.id == null) continue; // notification — no response expected
+        const text = (await res.text()).trim();
+        if (text) process.stdout.write(text + '\n');
+      } catch (e) {
+        if (msg.id != null) {
+          process.stdout.write(
+            JSON.stringify({ jsonrpc: '2.0', id: msg.id, error: { code: -32000, message: String(e?.message || e) } }) + '\n',
+          );
+        }
+      }
+    }
+    draining = false;
+    maybeExit(); // stdin closed mid-flight → exit only after the queue is drained
+  };
+  process.stdin.setEncoding('utf8');
+  process.stdin.on('data', (chunk) => {
+    buf += chunk;
+    let nl;
+    while ((nl = buf.indexOf('\n')) >= 0) {
+      const line = buf.slice(0, nl).trim();
+      buf = buf.slice(nl + 1);
+      if (line) queue.push(line);
+    }
+    drain();
+  });
+  process.stdin.on('end', () => { ended = true; maybeExit(); });
+  process.stdin.resume();
+}
+
 function startServer() {
   enrichPath(); // so codex/gemini are found even under a minimal service PATH
   server.listen(PORT, HOST, async () => {
@@ -488,7 +573,15 @@ function runCli() {
   return false;
 }
 
-if (process.argv.includes('--update')) {
+const mcpStdioIdx = process.argv.indexOf('--mcp-stdio');
+if (mcpStdioIdx >= 0) {
+  const url = process.argv[mcpStdioIdx + 1];
+  if (!url) {
+    console.error('--mcp-stdio requires a URL');
+    process.exit(1);
+  }
+  runMcpStdioProxy(url);
+} else if (process.argv.includes('--update')) {
   (async () => {
     try {
       const r = await selfUpdate(VERSION);