mirror of
https://github.com/DeusData/codebase-memory-mcp.git
synced 2026-11-04 08:13:37 +08:00
Martin Vogel
5d10cb7af7
Normalize Windows cache paths when reporting runtime settings and resolve Git executables before spawning history queries. Keep executable lookup results per thread and cover the ownership contract deterministically. Support Git 2.43 while denying history-query network transports, and close the activity database on daemon startup failure so Windows can clean up. Validation: 463 native macOS tests, 421 Windows tests, 44 MSan UI tests, and focused canonical lint passed. Production-only revert checks confirm the repaired failures. Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>
136 lines
6.5 KiB
C
136 lines
6.5 KiB
C
/*
|
|
* http_server.h — Embedded HTTP server for the graph visualization UI.
|
|
*
|
|
* Binds to 127.0.0.1:<port> only (localhost).
|
|
* Serves embedded frontend assets and proxies /rpc to a dedicated
|
|
* read-only cbm_mcp_server_t instance.
|
|
*
|
|
* Runs in a background pthread, same pattern as the watcher thread.
|
|
*/
|
|
#ifndef CBM_UI_HTTP_SERVER_H
|
|
#define CBM_UI_HTTP_SERVER_H
|
|
|
|
#include "ui/httpd.h"
|
|
#include "foundation/sha256.h"
|
|
|
|
#include <stdbool.h>
|
|
#include <stddef.h>
|
|
|
|
/* Content-Security-Policy directives for the served UI (the value only; the
|
|
* server prepends the header name). External connections are limited to the
|
|
* pinned opt-in browser model on Hugging Face and its verified download host.
|
|
* Agent activity and logs use this same daemon origin. The optional local
|
|
* inference sidecar remains on 127.0.0.1:4141. The other
|
|
* allowances cover the bundled app's own needs (inline styles, three.js
|
|
* textures, Monaco workers, WASM). */
|
|
#define CBM_UI_CSP_VALUE \
|
|
"default-src 'self'; " \
|
|
"connect-src 'self' http://127.0.0.1:4141 " \
|
|
"https://huggingface.co https://us.aws.cdn.hf.co; " \
|
|
"img-src 'self' data: blob:; script-src 'self' 'wasm-unsafe-eval'; " \
|
|
"style-src 'self' 'unsafe-inline'; font-src 'self' data:; " \
|
|
"worker-src 'self' blob:; object-src 'none'; base-uri 'none'; " \
|
|
"frame-ancestors 'none'"
|
|
|
|
typedef struct cbm_http_server cbm_http_server_t;
|
|
struct cbm_watcher;
|
|
|
|
/* Daemon-owned index boundary. The callback blocks until the coordinated
|
|
* operation finishes; the HTTP server runs it on a tracked, joinable thread. */
|
|
typedef int (*cbm_http_index_executor_fn)(void *context, const char *root_path,
|
|
const char *project_name);
|
|
typedef bool (*cbm_http_project_mutation_begin_fn)(void *context, const char *project);
|
|
typedef void (*cbm_http_project_mutation_end_fn)(void *context, const char *project);
|
|
|
|
/* Create an HTTP server on the given port.
|
|
* Creates its own cbm_mcp_server_t with a separate read-only SQLite connection.
|
|
* Returns NULL on failure (e.g. port in use). */
|
|
cbm_http_server_t *cbm_http_server_new(int port);
|
|
|
|
/* Free a quiescent HTTP server. Returns false without freeing if the run loop
|
|
* or an index callback can still access it; callers must fail-stop rather than
|
|
* continue cleanup in that state. */
|
|
bool cbm_http_server_free(cbm_http_server_t *srv);
|
|
|
|
/* Signal the HTTP server to stop (safe to call from any thread). */
|
|
void cbm_http_server_stop(cbm_http_server_t *srv);
|
|
|
|
/* Claim a future run before handing the server pointer to a new thread. This
|
|
* closes the create-to-child-start lifetime gap. If thread creation fails,
|
|
* cancel the still-scheduled run before freeing. */
|
|
bool cbm_http_server_schedule_run(cbm_http_server_t *srv);
|
|
bool cbm_http_server_cancel_scheduled_run(cbm_http_server_t *srv);
|
|
|
|
/* Run the scheduled HTTP server event loop from the background thread.
|
|
* Blocks until cbm_http_server_stop() is called. */
|
|
void cbm_http_server_run(cbm_http_server_t *srv);
|
|
|
|
/* Observation-only phase seam for deterministic concurrency tests. */
|
|
cbm_httpd_activity_t cbm_http_server_activity_for_test(cbm_http_server_t *srv);
|
|
|
|
/* Check if the server started successfully (listener bound). */
|
|
bool cbm_http_server_is_running(const cbm_http_server_t *srv);
|
|
|
|
/* The actually-bound port (useful when constructed with port 0 in tests). */
|
|
int cbm_http_server_port(const cbm_http_server_t *srv);
|
|
|
|
/* Override the per-connection receive deadline (tests use short values). */
|
|
void cbm_http_server_set_recv_deadline_ms(cbm_http_server_t *srv, int ms);
|
|
|
|
/* Set external watcher reference for UI project lifecycle actions. Not owned. */
|
|
void cbm_http_server_set_watcher(cbm_http_server_t *srv, struct cbm_watcher *watcher);
|
|
|
|
/* Route UI indexing through the daemon's shared operation registry. */
|
|
void cbm_http_server_set_index_executor(cbm_http_server_t *srv, cbm_http_index_executor_fn executor,
|
|
void *context);
|
|
|
|
/* Route direct UI mutations and /rpc mutation tools through the daemon's
|
|
* per-project coordination gate. Direct UI calls are non-blocking: begin=false
|
|
* is returned to the browser as a retryable locked response. */
|
|
void cbm_http_server_set_project_mutation_guard(cbm_http_server_t *srv,
|
|
cbm_http_project_mutation_begin_fn begin,
|
|
cbm_http_project_mutation_end_fn end,
|
|
void *context);
|
|
|
|
/* Copy the daemon generation's private readiness secret into the server
|
|
* before its run loop starts. GET /__cbm/ui-readiness returns only a
|
|
* challenge-bound HMAC proof; the secret itself is never served. */
|
|
void cbm_http_server_set_readiness_secret(cbm_http_server_t *srv,
|
|
const uint8_t secret[CBM_SHA256_DIGEST_LEN]);
|
|
|
|
/* Initialize the log ring buffer mutex. Must be called once before any threads. */
|
|
void cbm_ui_log_init(void);
|
|
|
|
/* Persist a daemon log line in SQLite and the emergency memory ring. */
|
|
void cbm_ui_log_append(const char *line);
|
|
|
|
/* Release the current activity database. A later append can reopen it;
|
|
* final shutdown must first quiesce log producers. The mutex remains valid. */
|
|
void cbm_ui_log_close(void);
|
|
|
|
/* Frontend compatibility export: <cache_dir>/logs/ui.log, one JSON line
|
|
* per accepted entry. Both HTTP log readers use the SQLite journal.
|
|
* Returns false when the path does not fit in out. */
|
|
bool cbm_ui_log_file_path(char *out, size_t outsz);
|
|
|
|
/* Set the binary path for subprocess spawning (call from main). */
|
|
void cbm_http_server_set_binary_path(const char *path);
|
|
|
|
/* Resolve argv[0] into an executable path suitable for subprocess spawning. */
|
|
bool cbm_http_server_resolve_binary_path(const char *argv0, char *out, size_t outsz);
|
|
|
|
/* Pure git-remote URL helpers used by GET /api/repo-info. Exposed for tests. */
|
|
|
|
/* Normalize a git remote (scp-style / ssh:// / https://) to a canonical
|
|
* "https://host/org/repo" web base, with trailing ".git" and any embedded
|
|
* credentials removed. OTHER-owned or NULL; release with
|
|
* cbm_free(CBM_MEM_CLASS_OTHER, result). */
|
|
char *cbm_ui_git_web_base(const char *url);
|
|
|
|
/* Copy `url` with any "user[:password]@" userinfo stripped from a
|
|
* scheme://authority URL (scp-style is left unchanged). malloc'd, or NULL when
|
|
* `url` is NULL. Caller frees. */
|
|
char *cbm_ui_git_strip_credentials(const char *url);
|
|
|
|
#endif /* CBM_UI_HTTP_SERVER_H */
|