diff --git a/CHANGELOG.md b/CHANGELOG.md index 954befa..12c0717 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,8 @@ Versioning and uses Git tags as its release channel. ## [Unreleased] +## [0.1.2] - 2026-10-23 + - Security: a `bridge.toml` found by upward discovery can no longer allow workspaces outside its own directory, and on POSIX must be owned by the current user and not world-writable. Previously a cloned repository could @@ -15,6 +17,8 @@ Versioning and uses Git tags as its release channel. longer supported. - Updated the runtime boundaries to `openai-codex==0.163.0` (with its bundled runtime) and `mcp==2.3.0`. +- Updated the pinned developer tools (uv 0.13.5, betterleaks 1.9.0) and the CI + aqua installation (aqua 2.65.2). ## [0.1.1] - 2026-09-14 @@ -30,6 +34,7 @@ Versioning and uses Git tags as its release channel. - Added structured results with a text fallback for MCP clients including OpenCode. - Validated the pinned SDK against fake App Server contract tests and live Codex runtime tests. -[Unreleased]: https://github.com/PyYoshi/codex-app-mcp/compare/v0.1.1...HEAD +[Unreleased]: https://github.com/PyYoshi/codex-app-mcp/compare/v0.1.2...HEAD +[0.1.2]: https://github.com/PyYoshi/codex-app-mcp/compare/v0.1.1...v0.1.2 [0.1.1]: https://github.com/PyYoshi/codex-app-mcp/compare/v0.1.0...v0.1.1 [0.1.0]: https://github.com/PyYoshi/codex-app-mcp/releases/tag/v0.1.0 diff --git a/README.ja.md b/README.ja.md index f82e0d0..2f8b9d3 100644 --- a/README.ja.md +++ b/README.ja.md @@ -42,9 +42,9 @@ HTTP transportはv0.1の対象外です。 ```sh cd /absolute/path/to/target-project -uvx --from git+https://github.com/PyYoshi/codex-app-mcp.git@v0.1.1 \ +uvx --from git+https://github.com/PyYoshi/codex-app-mcp.git@v0.1.2 \ codex-app-mcp init -uvx --from git+https://github.com/PyYoshi/codex-app-mcp.git@v0.1.1 \ +uvx --from git+https://github.com/PyYoshi/codex-app-mcp.git@v0.1.2 \ codex-app-mcp doctor ``` @@ -59,7 +59,7 @@ doctor は SDK/runtime・認証の有無・自己接続の疑い・policy・モ ```sh cd /absolute/path/to/target-project -uvx --from git+https://github.com/PyYoshi/codex-app-mcp.git@v0.1.1 \ +uvx --from git+https://github.com/PyYoshi/codex-app-mcp.git@v0.1.2 \ codex-app-mcp init ``` @@ -122,7 +122,7 @@ format = "json" ```sh claude mcp add codex -- \ - uvx --from git+https://github.com/PyYoshi/codex-app-mcp.git@v0.1.1 \ + uvx --from git+https://github.com/PyYoshi/codex-app-mcp.git@v0.1.2 \ codex-app-mcp serve ``` @@ -134,7 +134,7 @@ claude mcp add codex -- \ "codex": { "command": "uvx", "args": [ - "--from", "git+https://github.com/PyYoshi/codex-app-mcp.git@v0.1.1", + "--from", "git+https://github.com/PyYoshi/codex-app-mcp.git@v0.1.2", "codex-app-mcp", "serve" ] } @@ -151,7 +151,7 @@ claude mcp add codex -- \ "type": "local", "command": [ "uvx", "--from", - "git+https://github.com/PyYoshi/codex-app-mcp.git@v0.1.1", + "git+https://github.com/PyYoshi/codex-app-mcp.git@v0.1.2", "codex-app-mcp", "serve" ], "enabled": true @@ -163,7 +163,7 @@ claude mcp add codex -- \ 注意: - shell文字列ではなくexecutableと引数配列として登録する。 -- PyPIには公開しない。GitHubのrelease tag `v0.1.1`を固定する。 +- PyPIには公開しない。GitHubのrelease tag `v0.1.2`を固定する。 - 自動探索はbridge起動directoryから親へ向かう。固定したい場合は従来どおり `serve --config /absolute/path/to/bridge.toml`を指定できる。 - Codex 側（`~/.codex/config.toml` の `mcp_servers`）にこの bridge を登録すると再帰的自己接続になり得る。bridge は子 runtime 環境の `CODEX_APP_MCP_CHILD=1` で起動拒否するが、その構成自体を推奨しない。 diff --git a/README.md b/README.md index b41b698..84ff52d 100644 --- a/README.md +++ b/README.md @@ -45,9 +45,9 @@ Create a safe project-local configuration from the target repository: ```sh cd /absolute/path/to/target-project -uvx --from git+https://github.com/PyYoshi/codex-app-mcp.git@v0.1.1 \ +uvx --from git+https://github.com/PyYoshi/codex-app-mcp.git@v0.1.2 \ codex-app-mcp init -uvx --from git+https://github.com/PyYoshi/codex-app-mcp.git@v0.1.1 \ +uvx --from git+https://github.com/PyYoshi/codex-app-mcp.git@v0.1.2 \ codex-app-mcp doctor ``` @@ -90,7 +90,7 @@ release tag shown below; use a full commit SHA only when testing unreleased code ```sh claude mcp add codex -- \ - uvx --from git+https://github.com/PyYoshi/codex-app-mcp.git@v0.1.1 \ + uvx --from git+https://github.com/PyYoshi/codex-app-mcp.git@v0.1.2 \ codex-app-mcp serve ``` @@ -103,7 +103,7 @@ claude mcp add codex -- \ "type": "local", "command": [ "uvx", "--from", - "git+https://github.com/PyYoshi/codex-app-mcp.git@v0.1.1", + "git+https://github.com/PyYoshi/codex-app-mcp.git@v0.1.2", "codex-app-mcp", "serve" ], "enabled": true diff --git a/pyproject.toml b/pyproject.toml index 068ad2b..ac4f8ae 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,6 +1,6 @@ [project] name = "codex-app-mcp" -version = "0.1.1" +version = "0.1.2" description = "Local MCP bridge exposing Codex App Server threads/turns as the codex / codex-reply MCP tools (noninteractive compatibility subset)" readme = "README.md" requires-python = ">=3.15,<3.16" diff --git a/src/codex_app_mcp/__init__.py b/src/codex_app_mcp/__init__.py index bea18df..3349478 100644 --- a/src/codex_app_mcp/__init__.py +++ b/src/codex_app_mcp/__init__.py @@ -5,7 +5,7 @@ compatibility subset; see ``docs/`` for the specification. """ -__version__ = "0.1.1" +__version__ = "0.1.2" CHILD_ENV_FLAG = "CODEX_APP_MCP_CHILD" """Set in the child runtime environment to break recursive self-connections.""" diff --git a/uv.lock b/uv.lock index efb358e..af2d45e 100644 --- a/uv.lock +++ b/uv.lock @@ -78,7 +78,7 @@ wheels = [ [[package]] name = "codex-app-mcp" -version = "0.1.1" +version = "0.1.2" source = { editable = "." } dependencies = [ { name = "mcp" },