@bridge_gpt/mcp-server 0.2.56 → 0.2.57

package/build/install-bridge.js

@@ -152,6 +152,7 @@ import { provisionHostTarget, createDefaultVendorProcessDeps, inspectBridgeApiPr
 import { adaptBridgeEntryForHostTarget, } from "./mcp-host-entry-adapter.js";
 import { MCP_SERVER_NAME, MCP_PACKAGE_NAME, resolveRegistrationKey, } from "./mcp-identity.js";
 import { DUPLICATE_REGISTRATION_GUIDANCE } from "./launcher-config-inspection.js";
+import { codexHome, configureBridgeCodexProfile, inspectBridgeCodexProfile } from "./codex-bridge-profile.js";
 import { recordInstalledConductorCapability, recordInstalledExecutorServiceUnit, recordInstalledProjectArtifact, writeMcpInstallState, } from "./mcp-install-state.js";
 // BAPI-1207: opt-in cross-platform agent notes (AGENTS.md / CLAUDE.md).
 import { AGENT_GUIDANCE } from "./agent-guidance.generated.js";
@@ -517,6 +518,9 @@ export function getInstallBridgeUsage(baseUrl = DEFAULT_BAPI_BASE_URL) {
         "                                manual continuation instead). --tools= (empty) is",
         "                                an explicit empty selection: it writes nothing and",
         "                                launches nothing.",
+        "  --codex-profile on|off       Opt in to Bridge workflow MCP approvals for",
+        "                                Codex workers, or explicitly decline. With a",
+        "                                Codex TTY selection, the installer asks.",
         "  --force                       Overwrite an existing real BAPI_API_KEY in a",
         "                                host config (or in the credential store) without",
         "                                prompting. It does NOT bypass the git-tracked",
@@ -614,6 +618,7 @@ export function parseInstallBridgeArgs(argv) {
     let invite;
     let email;
     let tools;
+    let codexProfile;
     // Track SUPPLIED-ness separately from the values: `--invite` is legitimately
     // valueless (prompt path) and `--api-key ""` is still a contradiction with it.
     let inviteSupplied = false;
@@ -699,6 +704,16 @@ export function parseInstallBridgeArgs(argv) {
             i = r.nextIndex;
             continue;
         }
+        if (arg === "--codex-profile" || arg.startsWith("--codex-profile=")) {
+            const r = readValue(arg, "--codex-profile", i);
+            if ("error" in r)
+                return { status: "error", message: r.error };
+            if (r.value !== "on" && r.value !== "off")
+                return { status: "error", message: "--codex-profile must be on or off." };
+            codexProfile = r.value;
+            i = r.nextIndex;
+            continue;
+        }
         if (arg === "--agent" || arg.startsWith("--agent=")) {
             const r = readValue(arg, "--agent", i);
             if ("error" in r)
@@ -749,7 +764,7 @@ export function parseInstallBridgeArgs(argv) {
     }
     return {
         status: "ok",
-        options: { apiKey, repo, force, dryRun, agentName, invite, inviteMode: inviteSupplied, email, tools },
+        options: { apiKey, repo, force, dryRun, agentName, invite, inviteMode: inviteSupplied, email, tools, codexProfile },
     };
 }
 /**
@@ -4932,6 +4947,15 @@ export async function runInstallBridgeCli(argv, overrides = {}) {
     // global (Codex) or manual (Windsurf) target is provisioned by the
     // registry-driven emitter after the connectivity check.
     const selectedPlatforms = await resolveSelectedHostPlatforms(deps, options);
+    if (options.codexProfile && !selectedPlatforms.includes("codex")) {
+        errorLog("Error: --codex-profile requires Codex in --tools or the interactive selection.");
+        return 1;
+    }
+    let codexProfileChoice = options.codexProfile;
+    if (selectedPlatforms.includes("codex") && !options.dryRun && !codexProfileChoice && deps.isTTY && deps.promptLine) {
+        const answer = (await deps.promptLine("Install the opt-in Bridge Codex approval profile for spawned workers? (y/N) ")).trim().toLowerCase();
+        codexProfileChoice = answer === "y" || answer === "yes" ? "on" : "off";
+    }
     const targets = hostConfigTargetsForPlatforms(selectedPlatforms);
     // Read-only detection (safe in dry-run) of global-config editors we can't write.
     const manualEditors = await detectManualEditors(deps);
@@ -5712,6 +5736,28 @@ export async function runInstallBridgeCli(argv, overrides = {}) {
             errorLog("  That host was left untouched. Re-run install-bridge once one entry is removed.");
             return 1;
         }
+        if (selectedPlatforms.includes("codex")) {
+            const home = codexHome(deps.env, deps.homedir());
+            try {
+                const profileDeps = {
+                    readFile: deps.readFile,
+                    writeFile: (p, data) => deps.writeFile(p, data, { encoding: "utf-8", mode: 0o600 }),
+                    mkdir: deps.mkdir,
+                };
+                const result = codexProfileChoice
+                    ? await configureBridgeCodexProfile(home, codexProfileChoice === "on" ? "enable" : "decline", profileDeps)
+                    : await inspectBridgeCodexProfile(home, deps.readFile);
+                if (result.status === "active")
+                    log("  Codex Bridge approval profile installed; spawned workers use --profile bridge.");
+                else if (result.status === "declined" || result.status === "missing")
+                    log("  Codex Bridge approval profile inactive; spawned workers use existing Codex approvals. Opt in with --codex-profile=on.");
+                else
+                    log(`  Codex Bridge approval profile ${result.status}; spawned workers will not use it. Inspect ${home}/bridge.config.toml and rerun with --codex-profile=on.`);
+            }
+            catch {
+                log("  Codex Bridge approval profile could not be configured; spawned workers will not use it. Inspect CODEX_HOME and rerun with --codex-profile=on.");
+            }
+        }
         // Legacy manual-editor instructions cover editors that are DETECTED but were
         // NOT part of the selection (so the emitter above did not handle them). The two
         // editors are suppressed INDEPENDENTLY: Codex is dropped when it was selected

package/build/mcp-host-config.js

@@ -28,6 +28,7 @@
  * rather than reserialize unrelated content.
  */
 import { VERSION } from "./version.generated.js";
+import { codexHome } from "./codex-home.js";
 import { refreshBridgeApiPackageSpec } from "./init.js";
 import { hostAdapterForTarget, } from "./mcp-host-targets.js";
 import { adaptBridgeEntryForHostTarget, } from "./mcp-host-entry-adapter.js";
@@ -56,6 +57,9 @@ function dirnameOf(p) {
 }
 /** Resolve a target's absolute path from injected cwd/homedir. */
 export function resolveTargetAbsPath(target, ctx) {
+    if (target.id === "codex" && ctx.env?.CODEX_HOME) {
+        return `${codexHome(ctx.env, ctx.homedir)}/config.toml`;
+    }
     if (target.scope === "project") {
         if (!target.relPath)
             throw new Error(`${target.id} missing relPath`);

package/build/mcp-host-targets.js

@@ -15,6 +15,7 @@
  * platform is a matter of adding one entry to {@link MCP_HOST_TARGETS} plus its
  * `PlatformId` union member.
  */
+import { codexHome } from "./codex-home.js";
 // ---------------------------------------------------------------------------
 // Path helpers (pure)
 // ---------------------------------------------------------------------------
@@ -190,6 +191,8 @@ export function getManualHostTargets() {
  * Project targets resolve below `ctx.cwd`; global targets below `ctx.homedir`.
  */
 export function resolveHostTargetPath(target, ctx) {
+    if (target.id === "codex" && ctx.env?.CODEX_HOME)
+        return `${codexHome(ctx.env, ctx.homedir)}/config.toml`;
     if (target.scope === "project") {
         if (!target.relPath) {
             throw new Error(`project target ${target.id} is missing relPath`);