Dockerize HexStrike AI and harden MCP flows for Claude and Codex automation

[alfonsoalongi]

Priority request: please consider this with high priority. A shared Docker workflow and MCP hardening give the community a stable, identical environment for running tools and for further testing.

Summary

This PR adds an official Docker packaging and strengthens the MCP client and server so AI assistants run reliably across environments, including strict STDIO fallback for ChatGPT Codex and consistent wrappers for common tools.

Rationale

• Reproducibility: one image and compose stack so contributors and AIs run the same toolchain.
• Reliability: stdio bootstrap avoids Codex startup hangs; command timeouts prevent long locks; wildcard handling reduces noisy outputs.
• Consistency: unified httpx semantics, sane defaults for cloud tooling, and de-duplicated health reporting.

What changed

Docker packaging

• New docker/ directory with a multi-stage Dockerfile based on Kali Linux and helper scripts to build and run the server.

• docker-compose.yml includes host networking, privileged default, bind-mounted caches, health check, and sidecars for Clair 4.8.0 and PostgreSQL 18 with health checks and persistent volumes.

• Helper scripts:

  • ./docker/build-docker-image.sh
  • ./docker/build-docker-image-release.sh (no-cache/squash release builds)
  • ./docker/start-docker-mcp-server.sh

• A patched ghidra/ExportProgramScript.java is copied into the image to avoid the upstream NPE during export.

MCP client (hexstrike_mcp.py)

• STDIO fallback: when running over stdio, HTTP health probes are skipped and the client starts run_stdio() directly, which restores Codex compatibility.
• Cloud tooling: prowler_scan defaults to json-ocsf output format.
• httpx: unified wrapper aligned with the server target_file semantics and removed the duplicate variant that lacked target_file.
• Fixes: corrected ai_generate_payload invocation.

MCP server (hexstrike_server.py)

• Timeouts: execute_command enforces per-command timeouts with sensible defaults, overridable per tool.
• Health: de-duplicates tool inventory for accurate counts and guards empty worker pools.
• Nmap: parses host:port from URLs, strips scheme and path, and passes a clean host to Nmap.
• Gobuster: automatic wildcard handling that chooses --exclude-length or --wildcard as needed.
• dotdotpwn: parses explicit ports and falls back to TRAVERSAL when mode is omitted.
• httpx: endpoint supports target_file and aligns flags with the client wrapper.
• Burp Suite: new /api/tools/burpsuite with automatic fallback to the alternative path when Community Edition refuses headless mode.
• ZAP: daemon readiness probe so the API returns only after the service is ready.
• Prowler: default output format set to json-ocsf for consistency with the client.

Documentation

• README gains a "Docker Installation" section with rationale, quick start, cache notes, and a health check example.
• .gitignore excludes local env, logs, and cache directories created by the Docker workflow.

Testing

# 1) Clone
git clone https://github.com/0x4m4/hexstrike-ai.git
cd hexstrike-ai

# 2) Build image (dev)
./docker/build-docker-image.sh

# 2b) Build image (release)
./docker/build-docker-image-release.sh

# 3) Start MCP server
./docker/start-docker-mcp-server.sh

# 4) Verify
curl http://localhost:8888/health

• AI clients: ChatGPT Codex (stdio fallback verified), Claude Desktop (stdio) with repeated runs.
• Targets: OWASP Juice Shop, DVWA, and WordPress to validate wildcard handling, host:port parsing, httpx target_file, Burp fallback, and general stability.
• Cloud tools: Prowler, Pacu, CloudMapper smoke-tested without real credentials.

Backward compatibility

• Removal of the duplicate httpx variant may require downstream users to switch to the unified endpoint.
• Defaults are conservative and can be overridden.

Linked issues

Closes #93
Closes #88
Relates to #78, #84, #85, #77, #81