winter-super-cli 2026.6.23 → 2026.6.26

package/README.md

@@ -162,6 +162,25 @@ Winter reads config from the user profile directory. Typical settings include:
 - MCP servers
 - sandbox / allowlist options
 
+### Chrome DevTools MCP
+
+Winter has a built-in preset for ChromeDevTools/chrome-devtools-mcp:
+
+```bash
+winter mcp preset chrome-devtools --isolated
+winter mcp tools chrome-devtools
+```
+
+In the REPL, use the same flow with slash commands:
+
+```text
+/mcp preset chrome-devtools --isolated
+/mcp tools chrome-devtools
+```
+
+The preset registers the `chrome-devtools` MCP server, allowlists it, and gives Winter runtime hints to use its page navigation, click, fill, snapshot, screenshot, console, network, and performance tools for live browser debugging. Omit `--headless` when you want to watch Winter operate Chrome in a normal visible window.
+It requires Node.js 22.12+ and a current Chrome installation, matching the upstream MCP package requirements.
+
 ### Minimal example
 
 ```json

package/bin/winter.js

@@ -13,6 +13,7 @@ import { SessionManager } from '../src/session/manager.js';
 import { AIProviderManager } from '../src/ai/providers.js';
 import { CommandParser } from '../src/cli/commands.js';
 import { supportsUnicodeUi } from '../src/cli/terminal-ui.js';
+import { IDEServer } from '../src/mcp/ide-server.js';
 
 const pkg = JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8'));
 const version = pkg.version;
@@ -23,7 +24,7 @@ const COMMANDS = new Set([
   'autopilot', 'plan',
   'provider', 'providers', 'model', 'models', 'ecc', 'page-agent', 'pageagent',
   'resources', 'htmlfx', 'memory-vault', 'doctor', 'context', 'scorecard',
-  'tui',
+  'tui', 'rag',
 ]);
 
 function isInteractiveRequest(args) {
@@ -69,6 +70,7 @@ Commands:
   winter context [task]       Inspect model context for this project
   winter scorecard            Score Winter capability gates
   winter doctor [full|tools]  Diagnose context, provider, and tools
+  winter rag <action>         RAG query/index/status/reset
   winter provider [name]      Show/switch provider
   winter providers            List providers
   winter model [model]        Show/set active provider model
@@ -89,6 +91,7 @@ Flags:
 
   winter -h, --help           Show help
   winter -v, --version        Show version
+  winter --mcp [--port n]     Start VS Code/IDE MCP bridge
 
 Version ${version}
   `);
@@ -97,6 +100,25 @@ Version ${version}
 async function main() {
   const args = process.argv.slice(2);
 
+  if (args.includes('--mcp')) {
+    const portIndex = args.indexOf('--port');
+    const hostIndex = args.indexOf('--host');
+    const projectIndex = args.indexOf('--project');
+    const server = new IDEServer({
+      port: portIndex !== -1 && args[portIndex + 1] ? Number(args[portIndex + 1]) : undefined,
+      host: hostIndex !== -1 && args[hostIndex + 1] ? args[hostIndex + 1] : undefined,
+      projectPath: projectIndex !== -1 && args[projectIndex + 1] ? path.resolve(args[projectIndex + 1]) : process.cwd(),
+    });
+    await server.start();
+    const shutdown = async () => {
+      await server.stop();
+      process.exit(0);
+    };
+    process.on('SIGINT', shutdown);
+    process.on('SIGTERM', shutdown);
+    return new Promise(() => {});
+  }
+
   if (args.includes('--help') || args.includes('-h')) {
     printHelp();
     return;

package/extensions/vscode/src/extension.js

@@ -341,6 +341,7 @@ function sendMessage(message) {
     }, 5000);
 
     let responseData = '';
+    let settled = false;
 
     client.connect(SERVER_PORT, SERVER_HOST, () => {
       client.write(JSON.stringify(message) + '\n');
@@ -348,13 +349,31 @@ function sendMessage(message) {
 
     client.on('data', (data) => {
       responseData += data.toString();
-      try {
-        const response = JSON.parse(responseData);
+      const lines = responseData.split(/\r?\n/);
+      responseData = lines.pop() || '';
+
+      for (const line of lines) {
+        if (!line.trim()) continue;
+        let response;
+        try {
+          response = JSON.parse(line);
+        } catch {
+          continue;
+        }
+
+        if (response.type === 'server:info') {
+          continue;
+        }
+
+        settled = true;
         clearTimeout(timeout);
         client.destroy();
-        resolve(response);
-      } catch {
-        // Incomplete JSON, wait for more data
+        if (response.type === 'error') {
+          reject(new Error(response.message || 'Winter MCP server returned an error'));
+        } else {
+          resolve(response);
+        }
+        return;
       }
     });
 
@@ -366,9 +385,17 @@ function sendMessage(message) {
 
     client.on('close', () => {
       clearTimeout(timeout);
-      if (responseData) {
+      if (settled) return;
+      if (responseData.trim()) {
         try {
-          resolve(JSON.parse(responseData));
+          const response = JSON.parse(responseData);
+          if (response.type === 'error') {
+            reject(new Error(response.message || 'Winter MCP server returned an error'));
+          } else if (response.type === 'server:info') {
+            reject(new Error('Connection closed before Winter MCP server responded'));
+          } else {
+            resolve(response);
+          }
         } catch {
           reject(new Error('Invalid response from Winter MCP server'));
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "winter-super-cli",
-  "version": "2026.6.23",
+  "version": "2026.6.26",
   "description": "❄️ AI-Powered Development CLI with Interactive REPL",
   "type": "module",
   "main": "bin/winter.js",
@@ -83,7 +83,8 @@
   },
   "dependencies": {
     "cli-highlight": "^2.1.11",
-    "diff": "^9.0.0"
+    "diff": "^9.0.0",
+    "glob": "^13.0.6"
   },
   "optionalDependencies": {
     "@colbymchenry/codegraph": "^0.7.12",

package/skill.md

@@ -16,10 +16,12 @@ File này định nghĩa cách Winter chọn và áp dụng skill. Không chỉ
 - **security**: Protect secrets, validate inputs, avoid unsafe shell/file operations.
 - **performance**: Measure or reason from the hot path before optimizing.
 
-## Available Local Skills (13)
+## Available Local Skills (16)
 - codex-primary-runtime
 - coding
+- coding.md
 - debug
+- debug.md
 - design
 - learned
 - performance
@@ -27,6 +29,7 @@ File này định nghĩa cách Winter chọn và áp dụng skill. Không chỉ
 - security
 - skill-creator
 - test
+- test.md
 - vercel-react-best-practices
 - vibefigma
 - web-design-guidelines

package/src/agent/agent-definitions.js

@@ -3,13 +3,13 @@ import { pathToFileURL } from 'url';
 import { promises as fs } from 'fs';
 
 const DEFAULT_TOOL_SETS = {
-  general: ['Read', 'Write', 'Edit', 'Bash', 'Glob', 'Grep', 'BrowserDebug', 'WebFetch', 'WebSearch', 'Parallel', 'Agent'],
+  general: ['Read', 'Write', 'Edit', 'Bash', 'Glob', 'Grep', 'OpenBrowser', 'BrowserDebug', 'WebFetch', 'WebSearch', 'Parallel', 'Agent'],
   plan: ['Read', 'Grep', 'Glob', 'WebFetch', 'WebSearch', 'Parallel'],
   review: ['Read', 'Grep', 'Glob', 'Bash', 'WebFetch'],
-  debug: ['Read', 'Write', 'Edit', 'Bash', 'Grep', 'Glob', 'BrowserDebug', 'WebFetch', 'Parallel'],
-  design: ['Read', 'Write', 'Edit', 'Bash', 'Grep', 'Glob', 'BrowserDebug', 'WebFetch'],
+  debug: ['Read', 'Write', 'Edit', 'Bash', 'Grep', 'Glob', 'OpenBrowser', 'BrowserDebug', 'WebFetch', 'Parallel'],
+  design: ['Read', 'Write', 'Edit', 'Bash', 'Grep', 'Glob', 'OpenBrowser', 'BrowserDebug', 'WebFetch'],
   research: ['Read', 'Grep', 'Glob', 'WebFetch', 'WebSearch', 'Parallel'],
-  swe: ['Read', 'Write', 'Edit', 'Bash', 'Grep', 'Glob', 'BrowserDebug', 'Parallel'],
+  swe: ['Read', 'Write', 'Edit', 'Bash', 'Grep', 'Glob', 'OpenBrowser', 'BrowserDebug', 'Parallel'],
 };
 
 const BUILTIN_AGENTS = [

package/src/ai/prompts/system-prompt.js

@@ -100,7 +100,9 @@ function buildStandardSystemPrompt(options = {}) {
     'Use tools when they materially improve correctness. Inspect before editing. Verify after changes.',
     'Use maximum reasoning discipline for every model tier, including tiny, local, free, and routed models.',
     'Never invent file paths, APIs, command output, or test results.',
+    'For visible browser launch requests such as "mở chrome" or "open Chrome", use OpenBrowser; do not use Bash, Get-Command, Start-Process, or shell launch commands.',
     'For debug work, locate the first hard failure, patch the root cause, and verify with the closest test/build/browser smoke.',
+    'For live browser debugging and user-visible Chrome control, prefer MCP server chrome-devtools when configured; use its page, click, fill, snapshot, screenshot, console, network, and performance tools before falling back to headless browser automation.',
     'For design/UI work, inspect the existing interface and design resources first; avoid generic placeholder layouts.',
     'If the user attaches or pastes an image, analyze it as primary evidence.',
     '',

package/src/cli/commands.js

@@ -10,6 +10,7 @@ import { DesignCommands } from '../design/commands.js';
 import { SkillManager } from '../skills/manager.js';
 import { PluginManager } from '../plugins/manager.js';
 import { MCPClient } from '../mcp/client.js';
+import { getMcpPreset, upsertMcpServer } from '../mcp/presets.js';
 import { BenchmarkRunner } from '../ai/benchmark.js';
 import { redactSecrets } from './secret-env.js';
 import { formatRuntimeEnvironmentSummary, getRuntimeEnvironment } from './runtime-env.js';
@@ -20,6 +21,7 @@ import { HtmlFxManager } from '../integrations/htmlfx-manager.js';
 import { selectWorkflow } from '../ai/workflow-selector.js';
 import { getProfileBlueprint } from '../ai/profile-blueprints.js';
 import { ToolExecutor } from '../tools/executor.js';
+import { handleRagCommandFromParser } from '../rag/cli.js';
 import { promises as fs } from 'fs';
 import path from 'path';
 import readline from 'node:readline/promises';
@@ -76,6 +78,7 @@ export class CommandParser {
       resources: this.handleResources.bind(this),
       htmlfx: this.handleHtmlFx.bind(this),
       'memory-vault': this.handleMemoryVault.bind(this),
+      rag: this.handleRag.bind(this),
       tui: this.handleTui.bind(this),
       provider: this.handleProvider.bind(this),
       providers: this.showProviders.bind(this),
@@ -142,6 +145,7 @@ export class CommandParser {
       '/htmlfx': () => this.handleHtmlFx(args),
       '/debug': () => this.handleDebug(args),
       '/auto': () => this.handleDebug(args),
+      '/rag': () => this.handleRag(args),
       '/autopilot': () => this.handleAutopilot(args),
       '/exit': () => process.exit(0),
     };
@@ -234,6 +238,10 @@ export class CommandParser {
     })}\n`);
   }
 
+  async handleRag(args = []) {
+    await handleRagCommandFromParser(this, args);
+  }
+
   async searchResourceFiles(root, query, limit = 30) {
     const matches = [];
     const needle = String(query || '').toLowerCase();
@@ -806,6 +814,29 @@ EXECUTION CONTRACT:
         console.log(`${colors.green}✓ Added MCP server: ${name}${colors.reset}`);
         break;
       }
+      case 'preset':
+      case 'install': {
+        const [presetName, ...presetOptions] = rest;
+        if (!presetName) {
+          console.log(`${colors.yellow}Usage: winter mcp preset <chrome-devtools> [--isolated] [--headless] [--browser-url <url>]${colors.reset}`);
+          break;
+        }
+
+        try {
+          const server = getMcpPreset(presetName, presetOptions);
+          upsertMcpServer(config, server);
+          await this.config.save(config);
+          console.log(`${colors.green}OK Installed MCP preset: ${server.name}${colors.reset}`);
+          console.log(`  ${colors.dim}${server.command} ${server.args.join(' ')}${colors.reset}`);
+          if (!server.args.includes('--headless')) {
+            console.log(`  ${colors.dim}Visible Chrome mode: enabled. Use --headless only for background browser runs.${colors.reset}`);
+          }
+          console.log(`  ${colors.dim}Inspect tools with: winter mcp tools ${server.name}${colors.reset}`);
+        } catch (error) {
+          console.log(`${colors.red}${error.message}${colors.reset}`);
+        }
+        break;
+      }
       case 'remove': {
         const name = rest[0];
         if (!name) {
@@ -861,7 +892,7 @@ EXECUTION CONTRACT:
         break;
       }
       default:
-        console.log(`${colors.yellow}Usage: winter mcp <list|add|remove|allow|tools>${colors.reset}`);
+        console.log(`${colors.yellow}Usage: winter mcp <list|add|preset|install|remove|allow|tools>${colors.reset}`);
     }
   }
 

package/src/cli/config.js

@@ -7,6 +7,7 @@ import { promises as fs } from 'fs';
 import path from 'path';
 import { homedir } from 'os';
 import { loadEnvFile, stripInlineSecrets } from './secret-env.js';
+import { CHROME_DEVTOOLS_MCP_NAME, createChromeDevtoolsMcpServer } from '../mcp/presets.js';
 
 export class ConfigLoader {
   constructor() {
@@ -61,13 +62,13 @@ export class ConfigLoader {
       permissions: {
         promptByDefault: true,
         allowlist: {
-          tools: ['Read', 'Glob', 'Grep', 'LSP', 'TaskCreate', 'TaskUpdate', 'TaskList', 'WebFetch', 'WebSearch', 'Parallel'],
+          tools: ['Read', 'Glob', 'Grep', 'LSP', 'TaskCreate', 'TaskUpdate', 'TaskList', 'WebFetch', 'WebSearch', 'Parallel', 'MCP'],
           commands: [],
-          mcpServers: [],
+          mcpServers: [CHROME_DEVTOOLS_MCP_NAME],
         },
       },
       mcp: {
-        servers: [],
+        servers: [createChromeDevtoolsMcpServer(['--isolated'])],
       },
       routing: {
         strategy: 'heuristic',

package/src/cli/prompt-builder.js

@@ -117,12 +117,14 @@ export class PromptBuilder {
       `Prefer Read/Grep/Glob before editing. Use Write/Edit for file changes.`,
       `CRITICAL: When the user asks you to fix/create/edit/run/modify anything, you MUST call tools (Read, Write, Edit, Bash, etc.) to actually do it. NEVER just write code in a markdown code block and claim it is done. Winter will detect and block fake completions. If you say "đã sửa/đã tạo/done/fixed" without a tool call, your response will be rejected.`,
       `Tool call compatibility: if native tool calls are unavailable, output exactly one of these forms and no prose: <invoke name="Read"><parameter name="path">README.md</parameter></invoke> OR {"tool":"Read","arguments":{"path":"README.md"}} OR CALL_TOOL Read {"path":"README.md"}.`,
-      `Browser capability: You CAN browse URLs! Use WebFetch to fetch page content (text extraction) or BrowserDebug for Chrome automation (JS rendering, screenshots). If user shares a URL or asks to view a website, use these tools automatically.`,
+      `Open browser requests: if the user asks to "mở chrome", "open Chrome", or open a URL in a visible browser, use OpenBrowser. Do NOT use Bash, Get-Command, Start-Process, cmd start, or shell app launch commands for this.`,
+      `Browser capability: You CAN browse URLs! Use WebFetch only for static page text extraction. For live Chrome debugging and visible browser control, prefer MCP server "chrome-devtools" when configured: use MCP tool "new_page" or "navigate_page", then "take_snapshot", "click", "fill"/"fill_form", "take_screenshot", "evaluate_script", "list_console_messages", "list_network_requests", or performance trace tools. BrowserDebug is headless fallback only when chrome-devtools MCP is unavailable or the user explicitly asks for headless smoke/debug.`,
+      `Browser interaction rule: if the user asks to click, press, fill, select, submit, open a web app path, or inspect page-by-page data, WebFetch is not enough and BrowserDebug is not user-visible. Use chrome-devtools MCP so the user can watch the normal Chrome client. Never claim "đã bấm/đã điền/đã mở/đã kiểm tra" from prose alone.`,
       `When a task touches coding, agents, UI, brand, or design, inspect the relevant required local resource in depth before deciding.`,
       `If the user asks you to modify, run, inspect, check, publish, commit, or otherwise act on the project, you MUST use tools. Do not claim completion without a tool result from this turn.`,
       ``,
       `## Debug Excellence`,
-      `For bugs, crashes, test failures, or "not working": identify the first hard failure, reproduce or inspect logs, trace the exact runtime path, patch the smallest root cause, and verify with the closest command. For frontend/runtime UI issues, use BrowserDebug when a URL or dev server is available.`,
+      `For bugs, crashes, test failures, or "not working": identify the first hard failure, reproduce or inspect logs, trace the exact runtime path, patch the smallest root cause, and verify with the closest command. For frontend/runtime UI issues with a URL/dev server, prefer chrome-devtools MCP in visible Chrome; use BrowserDebug only as a headless fallback.`,
       ``,
       `## Design Excellence`,
       `For UI/design work: inspect existing components/styles and any design resources first. Build a polished, responsive, domain-appropriate interface with complete states and clear interactions. Avoid generic placeholders, fake controls, one-note palettes, and unverified visual claims.`,
@@ -193,7 +195,7 @@ export class PromptBuilder {
       review: 'You are a Winter review subagent. Critique the request or implementation with specific issues, edge cases, and concrete improvements.',
       debug: 'You are a Winter debugging subagent. Reproduce or inspect the exact failing path, isolate the first hard blocker, patch the smallest root cause, and verify with the closest test/build/browser smoke.',
       research: 'You are a Winter research subagent. Gather the important facts, compare options, and summarize only what matters.',
-      browser: `You are a Winter browser subagent. Bạn CÓ QUYỀN sử dụng tool 'BrowserDebug' để tương tác với trình duyệt. Hãy dùng nó để mở URL, chụp ảnh màn hình (nếu cần), hoặc chạy JS để kiểm tra trang web.`,
+      browser: `You are a Winter browser subagent. Bạn CÓ QUYỀN sử dụng chrome-devtools MCP để thao tác Chrome visible cho user xem: mở URL, click, fill form, snapshot, screenshot, đọc console/network. Dùng BrowserDebug chỉ khi cần headless fallback.`,
     };
 
     const rolePrompt = rolePrompts[role] || 'You are a Winter coding subagent. Solve the task directly, use tools when needed, and return a concise result.';
@@ -208,14 +210,14 @@ export class PromptBuilder {
       '3. [DEBUG EXCELLENCE]: Reproduce or inspect the failing path first, isolate the first hard blocker, patch root cause, and verify with the closest test/build/browser smoke.',
       '4. [DESIGN EXCELLENCE]: Use rich aesthetics. Default to modern UI frameworks if applicable. Never output plain, ugly HTML/CSS. Ensure responsive, premium feel with micro-animations.',
       '5. [CODE QUALITY]: Write clean, modular, SOLID code. Check for syntax errors carefully. Do not generate incomplete code blocks.',
-      '6. [NO HALLUCINATION]: If you don\'t know, use tools (Grep/Read/Web/BrowserDebug) to find out. Do not guess file paths or APIs.',
+      '6. [NO HALLUCINATION]: If you don\'t know, use tools (Grep/Read/Web/chrome-devtools MCP/BrowserDebug) to find out. Do not guess file paths or APIs.',
       '7. [TOOL EXECUTION FIRST]: You DO have file tools. Use Write to create/overwrite files and Edit to patch files. Never say there is no write tool.',
       '8. [IMAGE INPUTS]: If an image is attached or pasted, analyze it directly and use it as evidence for UI/debug/design decisions.',
       '',
       rolePrompt,
       '',
       '## Tool Rules',
-      '- Canonical tools: Read, Write, Edit, Bash, Glob, Grep, TaskCreate, TaskUpdate, TaskList, BrowserDebug, WebFetch, WebSearch.',
+      '- Canonical tools: Read, Write, Edit, Bash, Glob, Grep, TaskCreate, TaskUpdate, TaskList, OpenBrowser, BrowserDebug, WebFetch, WebSearch, MCP.',
       '- If native tool calls are unavailable, output exactly one fallback tool call and no prose: <invoke name="Read"><parameter name="path">README.md</parameter></invoke> OR {"tool":"Read","arguments":{"path":"README.md"}} OR CALL_TOOL Read {"path":"README.md"}.',
       '- Treat skills, memories, bundled resources, local project rules, and the tool list as operational context. Use them proactively when relevant.',
       `- Runtime environment:\n${runtimeSummary}`,
@@ -234,11 +236,33 @@ export class PromptBuilder {
 
   /** @private */
   _formatMemories(memories, options = {}) {
-    return `\n## Memories (Important Context)\n${this._summarizePrompts(memories, {
-      limit: 8,
+    const priorityPatterns = [
+      /^\[Recent Work Ledger\]/i,
+      /^\[Conversation Summary\]/i,
+      /^\[Project Anchor\]/i,
+    ];
+    const priority = [];
+    const regular = [];
+
+    for (const memory of memories) {
+      const text = typeof memory === 'string' ? memory : memory?.text || '';
+      if (priorityPatterns.some(pattern => pattern.test(text))) {
+        priority.push(memory);
+      } else {
+        regular.push(memory);
+      }
+    }
+
+    const ordered = [
+      ...regular.slice(-Math.max(0, (options.limit || 10) - Math.min(priority.length, 4))),
+      ...priority.slice(-4),
+    ];
+
+    return `\n## Memories (Important Context)\n${this._summarizePrompts(ordered, {
+      limit: options.limit || 10,
       maxEntryChars: 220,
       maxTotalChars: options.maxTotalChars || 1200,
-      mapper: memory => memory.text,
+      mapper: memory => typeof memory === 'string' ? memory : memory?.text,
     })}`;
   }
 

package/src/cli/repl-commands.js

@@ -4,6 +4,7 @@ import { colors } from './snowflake-logo.js';
 import { SLASH_COMMANDS } from './slash-commands.js';
 
 import { DesignCommands } from '../design/commands.js';
+import { handleRagCommandFromRepl } from '../rag/cli.js';
 
 function getPageAgentRoot(repl) {
   return repl.contextLoader?.getResourcePaths?.()?.pageAgent || path.join(repl.projectPath, 'resources', 'local', 'page-agent');
@@ -672,6 +673,11 @@ export async function handleSlashCommand(repl, input) {
     case '/pageagent':
       await handlePageAgentCommand(repl, args);
       break;
+
+    // RAG
+    case '/rag':
+      await handleRagCommandFromRepl(repl, args);
+      break;
     case '/image':
       const imagePath = args[0];
       const imageQuestion = args.slice(1).join(' ');