feat(frontend): WebMCP tools for Capgo console AI agents

[riderx]

Summary (AI generated)

• Adds WebMCP integration to the Capgo console via document.modelContext.registerTool() (with fallback feature detection for deprecated navigator.modelContext).
• Mounts useWebMcp() from the app shell; tools re-register on route/auth changes and unregister via AbortController on navigation/unmount.
• Exposes six console tools grounded in existing Pinia stores and Supabase queries.

Motivation (AI generated)

Browser AI agents (Chrome WebMCP / W3C webmachinelearning/webmcp) need a standard way to discover and invoke console capabilities without scraping the DOM. This registers read-mostly tools that reuse the same client paths the UI already uses.

Business Impact (AI generated)

Signed-in users can operate the Capgo console through compatible in-browser agents (navigation, listing apps/channels/bundles, reading context). No API keys or session tokens are exposed. Unsupported browsers are unaffected.

Tools (AI generated)

Tool	Auth	readOnlyHint	Description
console_get_context	No	yes	Current route, auth state, org, app/channel/bundle/device context
console_list_organizations	Yes	yes	Organizations the user belongs to
console_list_apps	Yes	yes	Apps for current or specified org
console_list_channels	Yes	yes	Channels for an app (PostgREST, same shape as channel table)
console_list_bundles	Yes	yes	Bundles/app versions for an app
console_navigate	Yes	no	SPA navigation to supported pages (dashboard, apps, app tabs, bundle/channel detail, settings)

Authenticated tools are only registered when a session exists. Data tools verify app access via organizationStore.getOrgByAppId().

Test Plan (AI generated)

• bunx vitest run tests/webmcp.unit.test.ts — feature detection + route builder
• In Chrome Canary 146+ with WebMCP enabled (chrome://flags → WebMCP / document-model-context), sign in to the console
• DevTools console: await document.modelContext.getTools() lists the tools above
• Call console_get_context — returns path + org/app context matching the visible page
• Call console_list_apps — returns apps for the active org
• Call console_navigate with { "page": "app_channels", "appId": "<your-app>" } — SPA navigates to channels
• Sign out — only console_get_context remains registered
• Browsers without WebMCP — console loads normally, no errors

Generated with AI

  

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

[github-actions]

@coderabbitai review

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codspeed-hq]

Merging this PR will not alter performance

✅ 43 untouched benchmarks
⏩ 2 skipped benchmarks¹

---

_{Comparing cursor/webmcp-console-support-8149 (80b3289) with main (ab0a677)}

Footnotes

1. 2 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

[github-actions]

@coderabbitai review

[github-actions]

@coderabbitai review

[sonarqubecloud]

Quality Gate passed

Issues
5 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud