Merge branch 'main' into add-ci-workflow

Author: ulziibay-kernel

.github/workflows/semgrep.yml

@@ -0,0 +1,17 @@
+name: Semgrep
+
+on:
+  pull_request:
+    branches: [main]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  scan:
+    uses: kernel/security-workflows/.github/workflows/semgrep.yml@main
+    with:
+      extra-configs: '--config p/javascript --config p/typescript'
+      codebase-description: 'Hosted MCP server handling authenticated tool execution and browser session data'
+    secrets: inherit

.github/workflows/vuln-remediation.yml

@@ -0,0 +1,17 @@
+name: Vulnerability Remediation
+
+on:
+  schedule:
+    - cron: '0 3 * * 3'
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  remediate:
+    uses: kernel/security-workflows/.github/workflows/vuln-remediation.yml@main
+    with:
+      setup-bun: true
+    secrets: inherit

.semgrepignore

@@ -0,0 +1,8 @@
+node_modules/
+dist/
+.next/
+out/
+bun.lock
+package-lock.json
+**/*.test.ts
+**/*.spec.ts

README.md

@@ -301,7 +301,7 @@ Each Kernel feature has a single `manage_*` tool with an `action` parameter, kee
 ```
 Human: Run my web-scraper app to get data from reddit.com
 Assistant: I'll execute your web-scraper action with reddit.com as the target.
-[Uses invoke_action tool to run your deployed app in the cloud]
+[Uses manage_apps tool with action: "invoke" to run your deployed app in the cloud]
 ```
 
 ### Execute Playwright code dynamically
@@ -318,11 +318,11 @@ Returns: { success: true, result: "Example Domain", replay_url: "https://..." }
 ```
 Human: Set up a profile for my work accounts
 Assistant: I'll create a profile and guide you through the setup process.
-[Uses setup_profile tool]
+[Uses manage_profiles tool with action: "setup"]
 
 Human: I'm done setting up my accounts
 Assistant: Perfect! I'll close the browser session and save your profile.
-[Uses delete_browser tool to save profile]
+[Uses manage_browsers tool with action: "delete" to save profile]
 ```
 
 ### Debug a browser session
@@ -342,9 +342,9 @@ This is perfect for AI coding workflows where you need to preview local changes
 
 ```
 Human: I'm working on a React app running on localhost:3000. I want to test it in a cloud browser.
-Assistant: I'll create a browser tunnel session for you.
-[Uses create_browser_tunnel tool with local_port: 3000]
-Returns: Session ID, live view URL, and tunnel connection command.
+Assistant: I'll create a browser session with SSH port forwarding for you.
+[Uses manage_browsers tool with action: "create" and remote_forward: "3000:localhost:3000"]
+Returns: Session ID, live view URL, and SSH tunnel command.
 ```
 
 ## 🤝 Contributing

bun.lock

@@ -30,19 +30,20 @@
   },
   "dependencies": {
     "@clerk/mcp-tools": "^0.1.1",
-    "@clerk/nextjs": "^6.32.0",
+    "@clerk/nextjs": "^6.39.2",
     "@clerk/themes": "^2.4.19",
     "@mcp-ui/server": "^5.10.0",
+    "@modelcontextprotocol/sdk": "1.26.0",
     "@onkernel/sdk": "^0.35.0",
     "@types/jsonwebtoken": "^9.0.10",
     "@types/redis": "^4.0.11",
-    "@vercel/mcp-adapter": "^1.0.0",
     "builtin-modules": "^5.0.0",
     "install": "^0.13.0",
     "jose": "^6.0.11",
     "jsonwebtoken": "^9.0.2",
     "jszip": "^3.10.1",
     "lucide-react": "^0.534.0",
+    "mcp-handler": "^1.1.0",
     "next": "^16.0.10",
     "next-themes": "^0.4.4",
     "playwright": "^1.49.1",