@uluops/setup 0.12.0 → 0.13.0

package/CHANGELOG.md

@@ -4,6 +4,39 @@ All notable changes to `@uluops/setup` will be documented in this file.
 
 ## [Unreleased]
 
+## [0.13.0] - 2026-09-11
+
+### Changed
+
+- **`@uluops/ops-mcp` pin 0.13.0 → 0.17.2** (`OPS_MCP_VERSION`). Every harness
+  writer stamps this into the MCP config, so this is the release that moves
+  first-launch users off a server that **silently stripped `cluster_key`** from
+  every recommendation on `save_run` / `update_run` / `validate_run` — the
+  schema was a plain `z.object()` and never declared the field, so within-run
+  convergence was recorded as NULL and read by the tracker as a collapsing
+  pipeline (ops-mcp 0.17.2 changelog; tracker issue `105c478f`). The jump also
+  crosses ops-mcp's 0.17.0 breaking train (strict ops-sdk 6.0.0; `list_agents`
+  and the list/query tools now return the `{data, total}` envelope; `get_run`
+  is a 14-key read projection). Setup itself calls none of these tools, but an
+  MCP client written against the 0.13.0 shapes will see the difference on
+  first launch after reattestation. Harness configs already on disk keep
+  resolving 0.13.0 until `npx @uluops/setup` runs again.
+- **Codex read-tool seed gains `preview_update_run`** (`src/harnesses/codex.ts`).
+  A read tool since ops-mcp 0.14 (2026-08-21) that the hand-maintained
+  `TRACKER_READ_TOOLS` list never picked up — three setup releases seeded a
+  Codex config that prompted on first use of it. Nothing checks this list
+  against the pinned package; the comment now says so, and deriving it is
+  tracked separately. Seeded only on fresh Codex configs, as before.
+
+### Not changed — deliberately
+
+- **`@uluops/registry-mcp` stays pinned at 0.3.7** while npm `latest` is
+  0.8.0. Two trees publish under that name — `packages/-uluops-registry-mcp`
+  (0.3.7) and `uluops-registry-mcp` (0.8.0), the latter being the live
+  registry registration's copy — and the 0.3.7 → 0.8.0 span has not been
+  validated against setup's Codex read-tool seed or the harness writers. That
+  is its own bump with its own changelog entry, not a rider on this one.
+
 ## [0.12.0] - 2026-08-21
 
 ### Added

package/dist/harnesses/codex.js

@@ -25,10 +25,19 @@ const RAW_TOML = "__rawToml";
  * Only read-side tools are seeded. Writes still prompt — the user retains a
  * choice point on every state-changing operation. Lists mirror the
  * `sideEffects: 'read'` declarations in the respective server's tool-registry
- * (sources of truth: ops-uluops-mcp/src/config/tool-registry.ts and
- * uluops-registry-mcp/src/config/tool-registry.ts). If a new read tool ships
- * there, add it here in the same PR — Codex users will silently get a prompt
- * on first use otherwise.
+ * (sources of truth: the tool-registry.ts of whichever copy OPS_MCP_SPEC /
+ * REGISTRY_MCP_SPEC actually pin — `@uluops/ops-mcp` is published from
+ * packages/-uluops-ops-mcp, NOT from ops-uluops-mcp, which is the live
+ * tracker registration's copy; the two are twins but not the same tree).
+ * If a new read tool ships there, add it here in the same PR — Codex users
+ * will silently get a prompt on first use otherwise.
+ *
+ * This list is hand-maintained and nothing checks it against the pinned
+ * package: `preview_update_run` (a read tool since ops-mcp 0.14, 2026-08-21)
+ * was absent here until the 0.17.2 pin bump on 2026-09-11 — three setup
+ * releases stamped a seed missing one read tool. The package's exports map
+ * exposes only its server entry, so a derived test needs ops-mcp to export
+ * its registry first; tracked separately.
  */
 const TRACKER_READ_TOOLS = [
     "diff_runs",
@@ -56,6 +65,7 @@ const TRACKER_READ_TOOLS = [
     "list_agents",
     "list_projects",
     "list_runs",
+    "preview_update_run",
     "query_analysis_records",
     "query_issues",
     "search_issues",

package/dist/lib/mcp-packages.d.ts

@@ -22,8 +22,8 @@
  * MCP launch. A pin is not a publish; the probe is what enforces that here.
  */
 export declare const OPS_MCP_PACKAGE = "@uluops/ops-mcp";
-export declare const OPS_MCP_VERSION = "0.13.0";
-export declare const OPS_MCP_SPEC: "@uluops/ops-mcp@0.13.0";
+export declare const OPS_MCP_VERSION = "0.17.2";
+export declare const OPS_MCP_SPEC: "@uluops/ops-mcp@0.17.2";
 export declare const REGISTRY_MCP_PACKAGE = "@uluops/registry-mcp";
 export declare const REGISTRY_MCP_VERSION = "0.3.7";
 export declare const REGISTRY_MCP_SPEC: "@uluops/registry-mcp@0.3.7";

package/dist/lib/mcp-packages.js

@@ -22,7 +22,7 @@
  * MCP launch. A pin is not a publish; the probe is what enforces that here.
  */
 export const OPS_MCP_PACKAGE = "@uluops/ops-mcp";
-export const OPS_MCP_VERSION = "0.13.0";
+export const OPS_MCP_VERSION = "0.17.2";
 export const OPS_MCP_SPEC = `${OPS_MCP_PACKAGE}@${OPS_MCP_VERSION}`;
 export const REGISTRY_MCP_PACKAGE = "@uluops/registry-mcp";
 export const REGISTRY_MCP_VERSION = "0.3.7";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uluops/setup",
-  "version": "0.12.0",
+  "version": "0.13.0",
   "description": "Zero-friction installer for UluOps agentic harnesses",
   "license": "MIT",
   "repository": {