Skip to content

Releases: DannyBaanks/chatgpt-http-mcp

Release list

ISyMCP 1.0.0-rc.2

ISyMCP 1.0.0-rc.2 Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 14 Oct 23:24
v1.0.0-rc.2
b84a37d

ISyMCP 1.0.0-rc.2

A release candidate for the local ChatGPT / HTTP / MCP bridge, with isolated Codex profiles, scoped native tools and a clearer release distribution.

What changed

  • Includes the merged Codex CLI/App profile isolation and visible-browser integration changes that landed after the rc.1 tag.
  • README now links directly to releases, tags, the Spanish guide and evidence.
  • CLI help and --version use the same package version.
  • Versioned source archives include SHA-256 checksums; publication waits for successful CI on the exact commit.

Download & install

Download isymcp-v1.0.0-rc.2.tar.gz or .zip and SHA256SUMS from Assets below. These contain source code, not standalone executables.

sha256sum --ignore-missing -c SHA256SUMS
tar -xzf isymcp-v1.0.0-rc.2.tar.gz
cd isymcp-v1.0.0-rc.2
bun install --frozen-lockfile
bun link
isymcp --version

Bun 1.4.2 is the CI runtime. Local sandboxed tools require Linux and bubblewrap; media tools additionally require FFmpeg/ffprobe. Chrome and a configured session are required for Web-provider features. Follow the README and GUIA.md for setup.

Verification & scope

The repository records a 2026-10-14 two-way canary and a historical run of 545 passing tests / 1 skipped. These records are maintainer evidence, not independent certification or a guarantee for every client. This release is published only after its own GitHub CI succeeds; consult that run for current results.

This remains an experimental, unsupported ChatGPT Web integration. The internal policy review is not approval by OpenAI. Browser changes, authentication and platform blocks can interrupt operation. Keep scoped permissions and review the limitations before connecting an account.

The old rc.1 tags remain unchanged. rc.2 provides a new snapshot instead of silently moving an existing tag.

Verified commit: b84a37dec7e2e5f7fe7caaa74dc27a65988855c5 · CI run.

Loading

v1.0.0-rc.1 (1.0.rc1) — Two-Way E2E Pass, OpenAI Compliance P0 & Isolated Codex Environments

v1.0.0-rc.1 (1.0.rc1) — Two-Way E2E Pass, OpenAI Compliance P0 & Isolated Codex Environments Pre-release
Pre-release

Choose a tag to compare

View all tags
@DannyBaanks DannyBaanks released this 14 Oct 22:38
v1.0.0-rc.1
fa50d34

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog,
and this project adheres to Semantic Versioning.

[1.0.0-rc.1] - 2026-10-14

Highlights

  • Verified Two-Way E2E Round Trip ([CURRENT] PASS): Demonstrated and certified end-to-end execution between ChatGPT Web, local native broker, isolated bubblewrap sandbox, and return to ChatGPT Web. Verified with live canary nonces (ISYMCP_TWOWAY_4afa0c89), 18 ms execution duration, 0 child processes terminated, and live response receipts.
  • OpenAI Compliance & Account Safety Governance V1 (P0): Established a formal fail-closed governance framework across 9 audit deliverables (docs/compliance/). Distinguishes authorized human interaction in Chrome visible (ALLOW) from bot-driven UI typing/scraping (DENY per ToU §2(c)(iii)). Enforces immediate HALT upon server-side safety classifier triggers with zero prompt evasion or tool hopping.
  • Isolated & Decoupled Codex Environments: Native support for Codex CLI and Codex Desktop App via isolated isymcp_web Responses provider, private profiles, and thread journals under ~/.codex-web-http/codex-profiles/isymcp-web without mutating global ~/.codex/config.toml.
  • Modernized Host Landing & Visual Dashboard: Full dashboard at http://127.0.0.1:8798 with dynamic visible Chrome session detection, local loopback CDP controller, isolated profile metadata, and live Compliance P0 telemetry.
  • Comprehensive Test Parity: 545 tests passing / 1 skipped / 0 failed across 81 files (bun test).

Added

  • src/visible/browser-turn.ts: Visible browser turn adapter with findActiveVisibleSession and sendVisibleWebTurn.
  • src/visible/browser-host.ts: Modern HTML host landing page with dark mode, CDP port detection, and P0 safety notices.
  • src/panel.ts: Visual status cards for Chrome Visible session, native broker, and OpenAI Compliance P0.
  • src/codex-conversation.ts: Conversation launcher and persistence for CLI and Linux Desktop App.
  • src/isymcp.ts: Added isymcp version, --version, -v, and updated help menus.
  • docs/compliance/: Comprehensive 9-part OpenAI policy audit and threat model.
  • docs/verification/: Verification records for visible Chrome E2E and two-way return loop.

Fixed

  • Socket timeout handling in src/server.ts (idleTimeout: 0) to prevent socket aborts during multi-step execution turns.
  • Preserved Chrome sandbox flags (--user-data-dir, --no-first-run, --disable-blink-features=AutomationControlled).
  • Cleaned up lingering stale git index locks and process management.

[0.9.0] - 2026-10-10

Added

  • Scoped session broker and MCP tunnel connector (@Codex ISyMCP).
  • Local media processing suite (RMS audio activity scan, contact sheets, YouTube importer).
  • Multi-agent harness connectors for Claude Code, Cursor, OpenCode, and Copilot CLI.
  • Bubblewrap sandbox isolation (bwrap-read-only) for local tool execution.
Loading