MCP DevBridge v0.8.8

MCP DevBridge v0.8.8

Highlights

• Removes the hidden global/current-workspace routing dependency. Independent MCP conversations can hold explicit C:/D: workspace handles without cross-session drift.
• Makes system/full_system a true system-access mode: the workspace is the default context rather than the filesystem boundary, while restricted modes keep canonical containment.
• Adds a Windows high-integrity broker using one explicit UAC authorization plus a RunLevel Highest scheduled task; later full-system commands do not prompt per command. UAC is not disabled or bypassed.
• Hardens privilege downgrade, broker startup/stop concurrency, path routing precedence, credential handling, output bounds and negative security paths.
• Reduces routing/status overhead with a short active-root snapshot, O(1) workspace-root lookup and coalesced elevated-status IPC.

Verification

• Python: 377 passed, 3 skipped; Ruff pass; Windows/Linux Pyright 0 errors / 0 warnings.
• CodexPro: build + complete smoke pass; system-access smoke pass; production npm audit reports 0 vulnerabilities.
• Windows and Ubuntu 22.04 release jobs passed from source commit c2e23508f0960e0f9201ad92b5fc4e94b1cfbe6d.

See docs/en/CHANGELOG.md and 项目架构.md for details.

MCP DevBridge v0.8.7

MCP DevBridge v0.8.7 — stateless MCP and idle-502 self-healing

v0.8.7 focuses on eliminating the recurring 502/unreachable condition observed after the Windows desktop bridge had been left idle in the background.

Stability

• Upgrades the bundled CodexPro fork to the stable MCP TypeScript SDK v2 packages and Zod 4.
• Replaces sessionful Streamable HTTP with createMcpHandler(..., { legacy: "stateless" }). Modern 2026-07-28 requests and legacy 2025-era requests no longer depend on a server-side protocol session TTL.
• Removes the 30-minute Mcp-Session-Id transport map, prune timer and Gateway upstream-session virtualization/replay path.
• Keeps workspace handles, background tasks and durable long-run orchestration as process-level application state, while bounding client-specific selected-workspace/review-checkpoint affinity.
• Detects dead CodexPro children instead of leaving cached READY state.
• Adds authenticated project data-plane supervision with targeted per-project recovery and no restart after an explicit user stop.
• Adds cooldown-protected Gateway-only recovery when the local shared Gateway becomes unhealthy; public-only degradation still uses tunnel-only recovery.
• Adds a Windows system-awake guard while a public Hub is running, preventing idle Modern Standby from suspending the local origin without forcing the display to remain on.

Updates

• Application update discovery now scans stable GitHub Releases and selects the highest installable version for the current platform.
• A machine several releases behind can jump directly to the newest stable release in one update.
• Drafts, prereleases, malformed/non-stable tags and releases missing the platform installer/package are ignored.
• Existing download size/digest verification and detached live-upgrade behavior are retained.

Long-running work

• Retains v0.8.6 protocol-safe SSE keepalives, request-tied MCP progress, compact running task payloads and durable long_run_* review/rework/completion gates.
• MCP DevBridge still cannot override a ChatGPT host-side hard turn/message-delivery timeout; durable local work remains recoverable after such a host interruption.

Compatibility

• Windows 10/11 remains the primary desktop target.
• Linux / SteamOS Desktop Mode packaging remains supported.
• The v0.9.x historical branches/tags are unchanged and are not merged into this maintenance release.

MCP DevBridge v0.8.6

MCP DevBridge v0.8.6 — Goal-like ChatGPT long-turn resilience

This release hardens long-running MCP work in ChatGPT without reintroducing the removed v0.9 multi-Agent runtime.

• Adds protocol-safe 12-second SSE idle keepalives at complete event boundaries only.
• Adds a bounded Streamable HTTP EventStore for retained-event replay with Last-Event-ID.
• Makes wait_task progress-aware: 30-second cap without a progress token, up to 120 seconds with standard MCP progress notifications.
• Compacts repeated running-task output to small UTF-8-safe tails and lengthens adaptive poll hints for long tasks.
• Strengthens model instructions so clear, actionable goals continue in the same assistant turn instead of asking the user to type “continue”.
• Preserves durable long_run_* recovery for host-side hard disconnects such as Message delivery timed out.
• Adds cross-platform transport/replay/progress/fault-injection regressions and fixes the Linux install-script parser issue found by the stronger gate.

Validation

• Windows Python gate: 352 passed, 3 skipped; Ruff passed; Pyright 0 errors / 0 warnings.
• CodexPro TypeScript build and complete smoke suite passed.
• npm audit --omit=dev --audit-level=high: 0 vulnerabilities.
• GitHub Release build run 32815318577 succeeded for Windows and Ubuntu 22.04 from commit 2161eb6926d1f9f3a6ebdc38f41f945c6612b2d6.

SHA-256

See SHA256SUMS.txt for the exact uploaded Windows installer and Linux tarball hashes.

MCP DevBridge v0.8.5

MCP DevBridge v0.8.5

ChatGPT 网页端 transport 稳定性热修复。

• 共享 Hub/Tunnel 启动 single-flight，同配置并发启动幂等，修复多项目恢复时重复 cloudflared 的竞态。
• Gateway 上游响应改为单一所有权，buffered 与 streaming 路径严格互斥并在结束/取消时关闭 upstream，消除 StreamConsumed 类失败。
• 增加本机/公网 /health 与 TTFB 监控；公网连续降级而本机 Gateway 健康时，受冷却保护地只重建 Tunnel。
• 保留 v0.8.4 durable long-run、多根平等路由与 v0.9.x 历史。

验证：348 passed / 2 skipped；Ruff、Pyright、CodexPro build/smoke、Windows/Linux CI 全部通过。

Source commit: d76710a
CI run: 32580861496

MCP DevBridge v0.8.4

MCP DevBridge v0.8.4

Durable multi-hour orchestration

• Adds durable long_run_start/status/list/update/review/complete/cancel tools for multi-phase work.
• Persists objective, plan steps, acceptance criteria, evidence, checkpoints, review rounds, rework, background task ids and completion state under .ai-bridge/long-runs/<run_id>.json.
• A step cannot be marked done without evidence. Any meaningful post-review work increments workRevision and invalidates an older PASS until the current revision is reviewed again.
• FAIL reviews must identify failed criteria and actionable rework, reopen affected steps, and remain bounded.
• Background bash tasks can be attached to a long run. PASS/completion is fail-closed while tasks are running/cancelling; after a process restart an unknown task must be explicitly resolved with terminal evidence.
• Long shell work remains execution-unbounded while MCP polling stays short (wait_task <=30s) with adaptive 5/15/30 second poll hints, avoiding multi-hour blocking tools/call requests in ChatGPT/Codex/browser hosts.
• Local loop-handoff now defaults to a 2-hour executor timeout, 1-hour reviewer/test timeouts and five evaluator/rework iterations, with durable phase/timestamp/exit/terminal-reason state.
• Native MCP io.modelcontextprotocol/tasks remains an optional capability-negotiated future mapping; the ordinary-tool durable fallback works with current hosts that do not advertise that extension.

Existing v0.8.3 guarantees retained

• All READY project roots are equal active roots; no entry/bootstrap project ownership.
• Local and public modes both route through the shared Gateway; Gateway port/Bearer are Hub-scoped, while projects only keep internal CodexPro/Windows-MCP ports.
• Windows custom install directory and Linux/SteamOS user-level build/install/live-upgrade support remain intact.

Verification

• Python: 342 passed / 2 skipped.
• Ruff: pass.
• Pyright: 0 errors / 0 warnings.
• CodexPro full smoke: pass, including durable long-run smoke, main stdio long-run flow, root scan (569 entries / 3 permission warnings), nested Git, async task, handoff and release guard.
• CodexPro stress: pass.
• npm production audit: 0 vulnerabilities.
• Windows local full build: pass.
• GitHub Actions from exact v0.8.4 tag / commit c96234dfe0a7eb271fb2f7b5f1bb2ea86109ae0c: Linux/SteamOS 3m32s pass; Windows 5m24s pass.

Release asset SHA-256

• MCPDevBridge-Setup-0.8.4.exe: 7E3E308D35DBA0901DC0FD7FCDF72AF4F40ABD958953C428D0B0602D261EFB91
• MCPDevBridge-Linux-x86_64-0.8.4.tar.gz: 12F3E18FE2823BC296BD4E2440FA90A60955EA3114E06394181EB4EFC6E0A40C

MCP DevBridge v0.8.2

MCP DevBridge v0.8.2 maintenance release.

• All running project roots are equal active roots; routing follows explicit DevBridge override, task affinity, path/cwd evidence, opaque workspace handle fallback, then bootstrap fallback.
• Starting a disk/root grants its descendants access within that root boundary without per-subdirectory registration.
• Relative-path ambiguity no longer guesses a workspace; callers must provide stronger evidence such as an absolute path.
• Canonical real-path containment blocks .. escape and symlink/junction escape; local tool cwd is constrained to the routed root.
• Root scans skip inaccessible system directories with warnings rather than failing the entire operation.
• Desktop lifecycle uses a five-column project table, Start/Stop All, bulk connection/permission settings, and keeps shared Hub/Gateway/Tunnel alive while any project root remains running.
• Windows installer exposes a custom installation directory and live upgrade preserves the installed location.
• Linux/SteamOS Desktop Mode support includes XDG-aware config/data paths, POSIX lifecycle handling, protected user secrets, private runtimes, native install/build/live-upgrade scripts, and Ubuntu 22.04 release packaging.

Release verification:

• Final commit/tag: f66dee6
• GitHub Actions run: 32482835752
• Windows job: success
• Linux/SteamOS job: success
• Local Python: 350 passed, 2 skipped
• Ruff: clean
• Pyright: 0 errors, 0 warnings
• CodexPro full smoke: pass; root scan 569 entries, 3 permission warnings

SHA-256:

• MCPDevBridge-Setup-0.8.2.exe: D8B465FFB9A43C0CB4E327108CE7016897A5A8B694D44FC56759B5B144DD2CCE
• MCPDevBridge-Linux-x86_64-0.8.2.tar.gz: 3D8DDE20118F30A6A827668BEED5EF45773EA195A69D5E7F708D67BB69BA1D54

SteamOS physical-device install/upgrade validation is intentionally not claimed in this release note.

MCP DevBridge v0.8.1

MCP DevBridge v0.8.1

修复

• 修复 ChatGPT 在多项目同时运行时，切换到项目 B 后下一次工具调用又回到入口项目 A。
• 显式 workspace/device 路由不再依赖底层 MCP transport session 持续不变。
• Gateway 为每个项目/设备维护独立上游 MCP session，跨 C:\ / D:\ 切换时自动初始化目标引擎并改写上游 session id，避免 Session not found。
• 修复 Gateway run_command / run_program 参数解析。
• 修复项目引擎已经 READY、运行记录仍卡在“正在启动”的 Qt 异步回调生命周期问题。
• 长任务工具调用改为短同步/后台轮询策略：同步命令最多 20 秒，长构建/测试使用 bash + wait_task/get_task，降低 ChatGPT Web stream recovery timeout 风险。
• C:\ / D:\ 等盘符根目录现在显示正常名称。
• detached updater 会保留并恢复升级前所有正在运行的项目，不再只恢复入口项目。

升级后

ChatGPT 开发模式中的 App 请执行一次 Refresh / Scan Tools，以获取新增的可选路由字段。

发布验证

• pytest：320 passed
• Ruff：通过
• Pyright：0 errors / 0 warnings
• PyInstaller + Inno Setup：通过
• live_upgrade.ps1：安装包 staging 已包含；detached Dry Run ok=true
• 真机双引擎：D::8788 ↔ C::8791 LIVE_DUAL_WORKSPACE_OK
• 0.8.0→0.8.1 detached 真机升级：ok=true，单实例、快捷方式、D:\ / C:\ 与其它运行项目自动恢复
• 固定域名 https://mcp.shiningsugar.shop/mcp：临时 OAuth + 同一 client session D:\→C:\ 实测 FIXED_DOMAIN_DUAL_WORKSPACE_OK
• 安装器大小：104,361,240 bytes
• SHA-256：00C7E4E8F748ABC8A8A75A44CE20E1F3363A7FB27970DB5D148F4FABB9DFE6B4

MCP DevBridge v0.8.0

MCP DevBridge v0.8.0

主要更新

• 单域名 Hub 路由：ChatGPT / Gemini 只连接主 Hub 的固定 MCP 地址，在同一会话内切换设备与工作区。
• 配对可靠性：同一配对码 + device_id 在首次注册成功后的 1800 秒内支持幂等重试；首次配对成功后设备目录与心跳凭据持久化，软件或电脑重启无需再次配对。
• 桌面可靠性：同一 Windows 用户单实例运行；稳定状态自动清理残留 busy；退出与在线升级继续清理旧版本残留进程。
• 更新检查：启动后检查一次，之后每 12 小时检查 GitHub Release；下载后校验资产大小与 SHA-256，再交给 detached updater 静默安装并恢复项目。
• 长任务轮询：wait_task 默认 15 秒、单次最多 30 秒，减少 ChatGPT Web/MCP 长同步等待触发 message delivery timeout；后台命令本身仍无固定执行时长上限。
• 自带运行组件：Windows 安装包内置固定版本 Node.js 22.19.0、uv/uvx 0.11.25 和 cloudflared 2026.7.3；普通用户无需预装 Node/uv 或修改 PATH。可选 Windows 控制首次启用时由内置 uvx 获取锁定的 windows-mcp==0.8.2。
• 内置 live_upgrade.ps1：支持 detached updater、Dry Run、旧进程清理、桌面快捷方式重建和升级前项目恢复。

发布验证

• pytest：311 passed
• Ruff：通过
• Pyright：0 errors / 0 warnings
• CodexPro TypeScript build：通过
• PowerShell parser：build.ps1 / prepare_runtime.ps1 / live_upgrade.ps1 全部通过
• uv lock --check：通过
• PyInstaller + Inno Setup v0.8.0：通过
• frozen payload：Node / uv / uvx / cloudflared / live_upgrade.ps1 均已验证存在
• detached updater Dry Run：ok=true
• 安装器 SHA-256：8CB74D274B69ABC7903E381492AD6D60940506BF5205A431B594C061D4257B39
• 安装器大小：104,348,634 bytes

MCP DevBridge v0.7.2

Default asynchronous command tasks + multi-session hotfix + orchestration watchdog.

• bash has no public timeout_ms; every command immediately returns task_id and runs until natural exit or cancel_task.
• Removed separate start_task; lifecycle uses get_task, wait_task, list_tasks, and cancel_task.
• Fixed v0.7.1 live bug: BashTaskManager is process-scoped instead of MCP-server/session-scoped, while task lookup remains workspace-scoped.
• Added cross-HTTP-session regression: session A starts a task, session B can wait on the same task id.
• wait_task is capped at 60 seconds per poll and terminal tasks return immediately.
• Added 600-second orchestration watchdog: no task observation for 600 seconds marks the next snapshot orchestrationStale=true with resumeHint; the watchdog never kills or changes the task.
• Bounded rolling output, full process-tree cancellation, existing PathGuard/bash-session/safety policies preserved.

Verification: TypeScript build, full npm run smoke, npm run stress, 304 pytest tests, Ruff, Pyright, lock/diff checks all green. Frozen staging smoke and detached-upgrade dry-run passed.

Installer SHA-256: 09f6e87f699fdc806404a961846cf78d1ece1fbdcaff80d3a6b4a1243c577510

MCP DevBridge v0.7.1

Default task-based shell execution release. bash no longer exposes timeout_ms and every shell command starts as a background task that immediately returns task_id. Removed the separate start_task tool and the normal-vs-large task distinction. Task lifecycle is managed with get_task, wait_task, list_tasks, and cancel_task; wait_task only bounds polling and never limits execution. Tasks keep the same workspace/bash-session/safety policy, use bounded rolling output, and cancellation terminates the full process tree. Running tasks are not persisted across DevBridge/CodexPro restarts. Verification: 304 pytest tests passed, Ruff clean, Pyright 0/0, TypeScript build green, full npm run smoke green, npm run stress green, frozen staging smoke and detached-upgrade dry-run passed. Installer SHA-256: 30562bfcdb3b25bbb330d06aec028cefc735e917bf735aa6e436b6236af5ea3c.