@chatpanel/bridge 0.10.7 → 0.10.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chatpanel/bridge",
-  "version": "0.10.7",
+  "version": "0.10.9",
   "type": "module",
   "description": "Local bridge that exposes the AI coding agents installed on your machine — Claude Code (CLI), Codex (CLI), and Gemini CLI — to the ChatPanel Chrome extension over a localhost SSE endpoint. Bring your own agent.",
   "keywords": [

package/src/engines/cli-agents.js

@@ -82,7 +82,10 @@ export const kiro = makeCliAgent(
     args: 'chat --no-interactive --require-mcp-startup',
     promptVia: 'arg',
     modelArg: '--model {model}',
-    trustToolsArg: '--trust-tools={tools}',
+    // Kiro can see MCP tools with --trust-tools, but in --no-interactive mode it
+    // only executes MCP calls when this broader trust flag is present.
+    trustAllToolsForMcp: true,
+    trustAllToolsArg: '--trust-all-tools',
     requiresStableMcp: true,
     autoSetupStableMcp: true,
     stableMcpConfigCheck: 'kiro',

package/src/engines/custom.js

@@ -150,6 +150,11 @@ export function trustToolArgs(template, mcp) {
     : [...tmpl.split(/\s+/).filter(Boolean), value];
 }
 
+export function mcpTrustArgs(spec = {}, mcp) {
+  if (spec.trustAllToolsForMcp) return [spec.trustAllToolsArg || '--trust-all-tools'];
+  return spec.trustToolsArg ? trustToolArgs(spec.trustToolsArg, mcp) : [];
+}
+
 export function stableMcpSetupCommand(spec = {}) {
   if (spec.stableMcpSetupCommand) return spec.stableMcpSetupCommand;
   return `opencode mcp add chatpanel --url ${CHATPANEL_STABLE_MCP_URL}`;
@@ -434,9 +439,7 @@ export async function runSpec(spec, { messages, system, options = {}, images },
       : [...tmpl.split(/\s+/).filter(Boolean), cfgFile];
     args = [...tokens, ...args];
   }
-  if (options.mcp?.url && spec.trustToolsArg) {
-    args.push(...trustToolArgs(spec.trustToolsArg, options.mcp));
-  }
+  if (options.mcp?.url) args.push(...mcpTrustArgs(spec, options.mcp));
   // Some CLIs only load MCP from their persistent config, so ensure that stable
   // /mcp endpoint is present before letting the agent answer with no tools.
   if (options.mcp?.url) await ensureStableMcpConfig(spec, cwd, label, emit);

package/src/env.js

@@ -312,6 +312,7 @@ export function enrichPath() {
     path.join(home, '.cargo', 'bin'),
     path.join(home, '.deno', 'bin'),
     path.join(home, '.bun', 'bin'),
+    path.join(home, '.opencode', 'bin'),
     ...versionManagerBins(home),
   ];
 

package/src/server.js

@@ -30,7 +30,7 @@ import { callLocalMcp } from './mcp-local.js';
 // Hardcoded (not read from package.json) so it survives Bun's single-file
 // --compile, where package.json isn't on a readable FS. CI fails the publish if
 // this drifts from package.json, so the two can't silently diverge.
-const VERSION = '0.10.7';
+const VERSION = '0.10.9';
 const HOST = process.env.CHATPANEL_BRIDGE_HOST || '127.0.0.1';
 const PORT = Number(process.env.CHATPANEL_BRIDGE_PORT) || 4319;