@bridge_gpt/mcp-server 0.2.57 → 0.2.58

package/README.md

@@ -242,13 +242,16 @@ npx -y @bridge_gpt/mcp-server doctor
 `doctor` is strictly read-only. It reports what it found — configs, registrations,
 credential availability, prerequisites — and changes nothing.
 
-**Codex approval profile.** When selecting Codex during `install`, opt in at the
-prompt or pass `--tools=codex --codex-profile=on` in a scripted install. Bridge
+**Codex approval profile.** When selecting Codex during interactive `install`,
+press Enter to accept the default Yes at the profile prompt, or answer `n`/`no`
+to decline. Pass `--tools=codex --codex-profile=on` in a scripted install. Bridge
 creates `$CODEX_HOME/bridge.config.toml` (default `~/.codex/bridge.config.toml`)
 with approval settings for the tools used by its review and implementation
 workflows. Bridge-spawned Codex workers then select it automatically, including
 the fresh implementation session after review. Pass `--codex-profile=off` to
-decline; the installer leaves any existing profile content intact. If a profile
+decline; the installer leaves any existing profile content intact. On package
+upgrade, the next Bridge-spawned worker refreshes an older, unmodified managed
+profile before launch. If a profile
 already contains user-authored or conflicting content, the installer leaves it
 untouched and reports that workers cannot use it. Run `doctor --agent codex` to
 inspect the current status. To use the profile in a Codex session you open
@@ -365,7 +368,7 @@ later boot.
   "mcpServers": {
     "bridge": {
       "command": "npx",
-      "args": ["-y", "--prefer-offline", "@bridge_gpt/mcp-server@0.2.57", "serve"],
+      "args": ["-y", "--prefer-offline", "@bridge_gpt/mcp-server@0.2.58", "serve"],
       "env": {
         "BAPI_BASE_URL": "https://bridgegpt-api.com",
         "BAPI_REPO_NAME": "your-repo",
@@ -387,7 +390,7 @@ later boot.
     "bridge": {
       "type": "stdio",
       "command": "npx",
-      "args": ["-y", "--prefer-offline", "@bridge_gpt/mcp-server@0.2.57", "serve"],
+      "args": ["-y", "--prefer-offline", "@bridge_gpt/mcp-server@0.2.58", "serve"],
       "env": {
         "BAPI_BASE_URL": "https://bridgegpt-api.com",
         "BAPI_REPO_NAME": "your-repo",
@@ -409,7 +412,7 @@ later boot.
     "bridge": {
       "type": "stdio",
       "command": "npx",
-      "args": ["-y", "--prefer-offline", "@bridge_gpt/mcp-server@0.2.57", "serve"],
+      "args": ["-y", "--prefer-offline", "@bridge_gpt/mcp-server@0.2.58", "serve"],
       "env": {
         "BAPI_BASE_URL": "https://bridgegpt-api.com",
         "BAPI_REPO_NAME": "your-repo",
@@ -432,7 +435,7 @@ Windsurf only supports global MCP configuration.
   "mcpServers": {
     "bridge": {
       "command": "npx",
-      "args": ["-y", "--prefer-offline", "@bridge_gpt/mcp-server@0.2.57", "serve"],
+      "args": ["-y", "--prefer-offline", "@bridge_gpt/mcp-server@0.2.58", "serve"],
       "env": {
         "BAPI_BASE_URL": "https://bridgegpt-api.com",
         "BAPI_REPO_NAME": "your-repo",
@@ -451,7 +454,7 @@ Windsurf only supports global MCP configuration.
 ```toml
 [mcp_servers.bridge]
 command = "npx"
-args = ["-y", "--prefer-offline", "@bridge_gpt/mcp-server@0.2.57", "serve"]
+args = ["-y", "--prefer-offline", "@bridge_gpt/mcp-server@0.2.58", "serve"]
 
 [mcp_servers.bridge.env]
 BAPI_BASE_URL = "https://bridgegpt-api.com"
@@ -1569,7 +1572,7 @@ The authoritative tool catalog covers **75 tools** (enumerated below). What's ac
 - **Jira tickets** — `get_tickets`, `get_ticket`, `create_ticket`, `update_ticket_description`, `add_comment`, `get_comments`
 - **Attachments** — `attachment` (operations: `upload`, `download`, `list`)
 - **AI generation (request/get)** — `request_plan_generation`/`get_plan`, `create_doc`/`get_doc` (design docs by `doc_type`: tdd/architecture/fsd/prd, where `architecture` is an alias of `tdd`), `request_ticket_review` (writes both `get_clarifying_questions` and `get_ticket_critique`), `request_reimplement_context`/`get_reimplement_context`, `request_council`/`get_council`, `request_deep_research`/`get_deep_research`
-- **Bounded waits** — `wait_for_ticket_review`, `wait_for_ci_checks`. Each call waits at most 240 s and returns `state: "ready" | "pending" | "error"`; `pending` is a normal, resumable result you call again on, never a failure. They exist so an agent can wait without a foreground `sleep` and without binding a long server-side operation to the 900 s MCP client deadline. `wait_for_ci_checks` reports only that checks are **terminal** — deciding pass or fail stays with the caller.
+- **Bounded waits** — `wait_for_ticket_review`, `wait_for_ci_checks`. Each returns `state: "ready" | "pending" | "error"`; review waits default to 20 s and CI waits default to 240 s (both accept up to 240 s explicitly). `pending` is a normal, resumable result you call again on, never a failure. They exist so an agent can wait without a foreground `sleep` and without binding a long server-side operation to the 900 s MCP client deadline. `wait_for_ci_checks` reports only that checks are **terminal** — deciding pass or fail stays with the caller.
 - **Other AI** — `second_opinion`, `generate_image`, `generate_decision_page`, `visual_diff` (deterministic pixel diff of a rendered URL vs a design comp)
 - **Ticket lifecycle** — `track_ticket`, `update_ticket_state`, `get_ticket_state`, `get_ticket_state_tree` (live repo-wide lifecycle + dependency tree; read-only, no mutation parameter)
 - **Jira status** — `update_jira_status` (pass `status: "auto"` to resolve the configured post-PR status server-side)

package/build/codex-bridge-profile.js

@@ -13,6 +13,7 @@ export const BRIDGE_WORKFLOW_TOOLS = [
     "ping", "get_ticket", "get_pipeline_recipe", "request_ticket_review",
     "wait_for_ticket_review", "fresh_base", "generate_decision_page",
     "capture_review_decisions", "request_plan_generation", "get_plan",
+    "attachment",
     "get_phase_context", "record_phase_result", "create_pull_request",
     "update_jira_status", "config_field", "resolve_ci_checks", "poll_ci_checks",
     "wait_for_ci_checks",
@@ -76,8 +77,11 @@ export async function inspectBridgeCodexProfile(home, readFile) {
         return { status: "declined", key };
     if (profile === null || !("hash" in parsed) || typeof parsed.hash !== "string")
         return { status: "conflict", key };
-    if (profile !== renderBridgeCodexProfile(key) || fingerprint(profile) !== parsed.hash)
+    if (fingerprint(profile) !== parsed.hash)
         return { status: "conflict", key };
+    if (profile !== renderBridgeCodexProfile(key)) {
+        return { status: profile.startsWith(MARKER) ? "stale" : "conflict", key };
+    }
     return { status: "active", key };
 }
 export async function configureBridgeCodexProfile(home, choice, deps) {

package/build/codex-launch-scope.js

@@ -2,7 +2,7 @@
 import { readBridgeConfig } from "./bridge-config.js";
 import { codexBridgeTableNames } from "./mcp-host-config.js";
 import { codexHome } from "./codex-home.js";
-import { codexProfilePaths, inspectBridgeCodexProfile, BRIDGE_CODEX_PROFILE } from "./codex-bridge-profile.js";
+import { codexProfilePaths, configureBridgeCodexProfile, inspectBridgeCodexProfile, BRIDGE_CODEX_PROFILE } from "./codex-bridge-profile.js";
 import { buildMcpServerEntriesForManifest, normalizeWorktreePathForRegistration, } from "./mcp-provisioning.js";
 import { MCP_SERVER_NAME } from "./mcp-identity.js";
 /** A missing Bridge target is a launch failure, never a fallback to user-scoped config. */
@@ -39,7 +39,18 @@ export async function resolveCodexLaunchScope(root, deps, codexConfigPath = code
     }
     const bridgeKey = registeredNames[0] ?? MCP_SERVER_NAME;
     const home = codexHome(deps.env ?? process.env, deps.homedir?.());
-    const profile = await inspectBridgeCodexProfile(home, deps.readFile);
+    let profile = await inspectBridgeCodexProfile(home, deps.readFile);
+    if (profile.status === "stale") {
+        try {
+            profile = await configureBridgeCodexProfile(home, "enable", deps);
+        }
+        catch {
+            return { ok: false, error: "Codex MCP scope unavailable: could not refresh the managed Bridge approval profile." };
+        }
+        if (profile.status !== "active") {
+            return { ok: false, error: "Codex MCP scope unavailable: managed Bridge approval profile refresh failed." };
+        }
+    }
     const argv = ["-C", normalized.path];
     if (profile.status === "active" && profile.key === bridgeKey)
         argv.push("--profile", BRIDGE_CODEX_PROFILE);