Rene Nochebuena e23e86b06c feat(mcp): systemd socket activation and healthz under /mcp (v0.1.1)
Patch release. Two changes to cmd/server, both motivated by running the
service behind a unix socket on a reverse-proxied host: the binary now
inherits a systemd-passed listener when present, and the healthz handler
moves under the same path prefix as the MCP endpoint so a single proxy
location forwards both. Bundled with two repository-hygiene changes.

cmd/server:
- chooseListener (new) — picks a listener at startup. When systemd has
  passed a LISTEN_FDS fd via github.com/coreos/go-systemd/v22/activation,
  the binary uses the inherited listener; otherwise it binds TCP at -addr
  as before. The startup log records "mode":"socket-activated" or
  "mode":"tcp" so operators can confirm which path is live. Same binary
  works for local dev and for systemd-managed deployment with no flags
  or env vars to toggle.
- Health probe path is now derived from -path. With the default -path /mcp
  the probe is served at /mcp/healthz; the legacy /healthz route is no
  longer registered. A reverse proxy can now route the whole MCP service
  through a single "/mcp" location prefix instead of maintaining a second
  forward for /healthz. Consumers of v0.1.0 that hit /healthz directly
  must switch to /mcp/healthz.

Dependencies:
- github.com/coreos/go-systemd/v22 v22.7.0 — listener inheritance via
  LISTEN_FDS. Loaded only by cmd/server.

Docs:
- README.md "Deployment" section rewritten to be hosting-agnostic. The
  v0.1.0 draft prescribed a specific systemd-on-HestiaCP layout; the new
  text points at the Dockerfile and at systemd socket activation as a
  supported binary mode without dictating one operator's setup. Adds an
  explicit note that any reverse proxy must disable response buffering on
  the /mcp location — streamable MCP delivers tool results via Server-Sent
  Events and default proxy buffering breaks the stream.

Repository hygiene:
- /deploy/ is now .gitignored. Local deployment artefacts (systemd units,
  reverse-proxy templates, per-release scripts) are operator-specific by
  design and live outside the public repository. The Dockerfile at the
  module root remains the only portable, public-facing build artefact.

No tool surface, no validation rules, no index schema, and no behaviour of
the indexer changed. Operators upgrading from v0.1.0 must update their
health-probe URL to /mcp/healthz (or whichever path matches their -path
flag); MCP-protocol clients (Claude, Cursor, Zed, etc.) need no changes.
2026-05-29 14:09:06 -06:00

einherjar/mcp

version license go

Every warrior who knew the sagas had a skald nearby. This is yours.

code.nochebuena.dev/einherjar/mcp is the Einherjar Model Context Protocol server. It is a remote, streamable-HTTP service that teaches AI assistants about every other module of the framework: which package exposes which type, what each module promises via its compliance tests, the canonical wiring shape for a service, and whether a snippet of Go follows the conventions. Anyone who works in an Einherjar codebase can point their AI tools at one URL and get answers grounded in the actual source.


What Is Einherjar?

In Norse mythology, the Einherjar are the chosen warriors of Valhalla — selected not for glory, but to be ready for what comes after. They train. They prepare. They build the capability that others will rely on.

This framework is named for that purpose. Every module is a piece of that preparation: built carefully, documented for those who were never in the room, and designed to hold under pressure.


Commands

Command Purpose
cmd/server Streamable-HTTP MCP server. Embeds the framework index at build time and serves it over a single HTTP endpoint.
cmd/indexer Walks an Einherjar repository checkout and writes the framework index to data/index.json.

Tools

The server exposes ten tools to MCP-aware clients (Claude desktop, Claude Code, Cursor, Zed, and anything else that speaks MCP):

Tool Purpose
list_modules Enumerate every Einherjar module with its purpose and sub-packages
get_module Package doc, dependencies, sub-packages, key types, compliance counts; optional README
search_symbols Find a type, function, or interface by name, doc text, sub-package, or module
get_symbol Full signature, doc comment, and source location for one symbol
list_adrs List architectural decision records, optionally restricted to one module
get_adr Fetch a single ADR's markdown body
get_example Canonical usage snippet — pulled from module READMEs and from the synthetic wire conventions
get_compliance Interface assertions and structural test names from a module's compliance_test.go
get_changelog Full CHANGELOG.md markdown for one module
validate_snippet Pattern-match a Go snippet against framework conventions; returns findings with severity, hint, and line

validate_snippet ships eight wiring-convention rules at v0.1.0: launcher.missing-run, launcher.no-components, launcher.run-error-discarded, logz.direct-env-read, web.server-not-appended, wire.hook-bad-signature, wire.hook-outside-beforestart, and wire.route-specific-after-param.


Build Flow

                  build time                          runtime
   ┌──────────────────────────────┐      ┌──────────────────────────┐
   │ cmd/indexer ../              │      │ cmd/server               │
   │   walks every Einherjar      │      │   streamable-HTTP MCP    │
   │   module, parses Go pkgs,    │ ──▶  │   tools served from the  │
   │   reads READMEs + ADRs       │      │   embedded index.json    │
   │   ⇒ data/index.json (embed)  │      │                          │
   └──────────────────────────────┘      └──────────────────────────┘

The indexer is a separate command. It produces data/index.json which the server embeds via //go:embed, so the deployed binary is self-contained and reads nothing from disk at runtime.


Usage

Local run

# 1. Build the framework index from the sibling Einherjar modules
go run ./cmd/indexer ..

# 2. Build and run the server
go build -o bin/einherjar-mcp ./cmd/server
./bin/einherjar-mcp -addr :8080 -path /mcp

Container

# Build the image from the einherjar repo root so the indexer can walk every
# sibling module at image-build time.
docker build -f mcp/Dockerfile -t einherjar-mcp:0.1.0 .

docker run --rm -p 8080:8080 einherjar-mcp:0.1.0

Environment variables

Variable Default Effect
EINHERJAR_MCP_ADDR :8080 Listen address for the MCP server
EINHERJAR_MCP_PATH /mcp HTTP path served by the streamable-HTTP endpoint

Wiring Conventions (the synthetic wire module)

The MCP server ships a 15th, synthetic module called wire. It is not an Einherjar module — it documents the canonical application shape that uses Einherjar modules. The content lives at internal/index/builtins/README.md and is embedded at build time. AI assistants discover it via list_modules and read it via get_module and get_example the same way they read any real module.

The conventions captured: project layout (cmd/<app>/main.go, internal/wire/*.go, domain layout per feature), the fixed shape of Run(), the fixed shape of a with<Feature> hook (one lc.BeforeStart containing all construction and route registration), route-ordering rules for chi, the authz middleware helper, when to use skipPublicPaths vs skipMethodPath, and adapter patterns at the wire boundary.


Dependency Rules

contracts  (zero dependencies)
    ↑
  core, web, auth, …                  (every framework module)
    ↑
   mcp                                (reads framework source at index-time only)

mcp imports nothing from other Einherjar modules at compile time. The indexer parses the framework source on disk and writes a JSON blob; the server embeds that blob. This keeps mcp outside the framework dependency graph: it can index any version of einherjar without versioning itself in lock-step.


Verification

cd mcp/
go build ./...     # must compile clean
go vet ./...       # no warnings
go test ./...      # all tests pass
gofmt -l .         # no output

All four commands must produce clean output before a PR will be reviewed.


Deployment

The server is a single self-contained static binary. There is no canonical hosting shape — pick whichever matches the rest of your infrastructure. Two patterns cover most cases:

  • Container. The Dockerfile at the module root produces a distroless runtime image. Build from the einherjar repository root so the indexer can reach every sibling module at image-build time:

    docker build -f mcp/Dockerfile -t einherjar-mcp:0.1.0 .
    docker run --rm -p 8080:8080 einherjar-mcp:0.1.0
    
  • Systemd / socket-activated binary. The server detects an inherited listener via github.com/coreos/go-systemd/v22/activation and uses it when present, falling back to -addr TCP binding otherwise. Same binary works in both modes — no flag, no env var. Drop the binary into /opt/<somewhere>/ and write a .socket + .service pair that matches your conventions.

Whatever shape you pick, the public-facing reverse proxy must keep response buffering off on the /mcp location. Streamable MCP delivers tool results via Server-Sent Events; default nginx, Envoy, or Caddy buffering batches the stream and breaks Claude's session before the first event arrives. For nginx that means proxy_buffering off; proxy_cache off; proxy_request_buffering off; chunked_transfer_encoding on; plus an extended proxy_read_timeout for long-lived sessions.


Architecture Decisions

No ADRs at v0.1.0. The structural decisions in this release (synthetic wire module, go:embed of the index, build-time-not-runtime knowledge model, primitives not response shapes) are captured in the framework-wide memory and in this README.


A blade is sharper when the warrior knows its name. This is what tells them.

Description
No description provided
Readme AGPL-3.0 99 KiB
2026-05-29 14:09:46 -06:00
Languages
Go 99.1%
Dockerfile 0.9%