ios-agent-bridge v0.1.0

Initial public integration release of a GPL-3.0-or-later MCP and CLI control
plane for authorized, non-jailbroken iPhones.

Implemented

One shared BridgeService for the ios-agent CLI and 35 MCP tools.
Capability registry, provider routing, structured availability/remediation,
bounded read fallback, per-device serialization and server-side allow-listed
flows.
pymobiledevice3 adapter for safe discovery/pairing state, apps, AFC,
HouseArrest Documents containers, bounded syslog, crash reports, process
queries, and Web Inspector integration.
Appium 3/XCUITest adapter for accessibility-first UI operations, bounded WDA
session recovery, screenshot/tree/text, gestures, text entry, lifecycle and
browser context operations.
Doctor checks, safe optional Appium bootstrap, exact Codex MCP registration
verification, local-only artifact handling, safety gates and project skill.

Offline source formatting, linting, strict typing and test suite passed.
MCP server import and 35-tool schema smoke passed.
CLI doctor, capability and discovery smoke passed on macOS.
Opt-in real-device acceptance test is present and skipped without explicit
operator opt-in.

Physical iPhone: none was discoverable.
iOS Simulator: unavailable because full Xcode is not installed.
Appium/XCUITest/WDA signing and a live UI session: unavailable because full
Xcode and Appium/XCUITest are not installed.

LIVE_DEVICE_ACCEPTANCE_BLOCKED: NO_PHYSICAL_DEVICE

See CAPABILITY_SCORE.md for the conservative 0–100
real-device score and the full evidence matrix.

No jailbreak, passcode bypass, root filesystem, erase, restore, recovery/DFU
or security-profile mutation support.
Backup creation is intentionally unavailable until it has a dedicated private
encryption/passphrase/retention workflow.
Browser DOM actions depend on Apple Web Inspector and Safari Remote
Automation; a page listing alone is not treated as proof that navigation is
ready.
App container operations are limited to app-vended Documents containers; an
app may decline that access.