ssh config tweaks

add MCPs to codex - oci-kb, notmuch, grt, webrti, bugdb, central confluence, vm, bitbucket
create mrshughes works again
2026-04-08 13:17:32 +02:00 · 2026-04-08 13:16:05 +02:00 · 2026-03-18 11:31:48 +01:00 · 2026-03-18 11:00:49 +01:00
6 changed files with 300 additions and 22 deletions
@@ -1,11 +1,15 @@
 # doc: https://developers.openai.com/codex/config-advanced
 #      https://developers.openai.com/codex/config-reference
-approval_policy = "on-request"
-preferred_auth_method = "apikey"
-# model = "oca/gpt-5-codex"
-# profile = "gpt-5-codex"
-# model = "oca/gpt-5.1-codex"
-# profile = "gpt-5-1-codex"
+
+# The API key is valid just for a week
+# Generate API key:
+# 1. Open https://apex.oraclecorp.com/pls/apex/r/oca/api-key/home and generate an API Key for yourself.
+# 2. Press 'Copy Codex Environment Setup Command'
+# 3. paste the command and run it
+#    #+begin_src bash
+#      echo <api_key> | codex login --with-api-key
+#    #+end_src
+

 # model = "oca/gpt-5.1-codex-mini"
 # profile = "gpt-5-1-codex-mini"
@@ -24,7 +28,7 @@ sandbox_mode = "workspace-write"
 multi_agent = true

 [agents]
-max_threads = 6
+max_threads = 20
 max_depth = 2

 [tui]
@@ -133,6 +137,16 @@ model_provider = "oca-responses"
 review_model = "gpt-5.4"
 personality = "pragmatic"
 model_reasoning_effort = "high"
+plan_mode_reasoning_effort = "high"
+
+[profiles.gpt-5-4-pro]
+model = "gpt-5.4-pro"
+model_provider = "oca-responses"
+review_model = "gpt-5.4"
+personality = "pragmatic"
+# model_reasoning_effort = "high"
+
+


 [mcp_servers.playwright]
@@ -140,13 +154,22 @@ command = "/Users/jetpac/.codex/bin/playwright-mcp"
 startup_timeout_sec = 30.0
 PLAYWRIGHT_BROWSERS_PATH = "0"

+[mcp_servers.playwright.tools.browser_navigate]
+approval_mode = "approve"
+

 [mcp_servers.oci-kb]
-# command = "/Users/jetpac/.local/bin/ocikb-mcp-server"
+command = "/Users/jetpac/.local/bin/ocikb-mcp-server"
 #
-command = "uvx"
-args = ["--index", "https://artifactory.oci.oraclecorp.com/api/pypi/global-release-pypi/simple/", "--from", "oci-kb-mcp@latest", "ocikb-mcp-server"]
+# command = "uvx"
+# args = ["--index", "https://artifactory.oci.oraclecorp.com/api/pypi/global-release-pypi/simple/", "--from", "oci-kb-mcp@latest", "ocikb-mcp-server"]
 startup_timeout_sec = 30.0
+
+[mcp_servers.oci-kb.tools.search]
+approval_mode = "approve"
+
+[mcp_servers.oci-kb.tools.getDocument]
+approval_mode = "approve"
 ##  Adjust args if you need --browser=firefox, --headed, or custom launch flags.


@@ -155,6 +178,27 @@ command = "/Users/jetpac/bin/devops-mcp-wrapper.sh"
 env_vars = ["OP_TOKEN", "OPERATOR_ACCESS_TOKEN"]
 startup_timeout_sec = 180.0

+[mcp_servers.devops_mcp.tools.get_regions]
+approval_mode = "approve"
+
+[mcp_servers.devops_mcp.tools.list_shepherd_region_details]
+approval_mode = "approve"
+
+[mcp_servers.devops_mcp.tools.search_runbooks]
+approval_mode = "approve"
+
+[mcp_servers.devops_mcp.tools.get_runbook_projects]
+approval_mode = "approve"
+
+[mcp_servers.devops_mcp.tools.get_realms]
+approval_mode = "approve"
+
+[mcp_servers.devops_mcp.tools.search_phonebook]
+approval_mode = "approve"
+
+[mcp_servers.devops_mcp.tools.get_tenancy_by_name]
+approval_mode = "approve"
+
 [projects."/Users/jetpac/bin"]
 trust_level = "trusted"

@@ -170,14 +214,238 @@ trust_level = "trusted"
 [projects."/Users/jetpac/PycharmProjects/userland-pipeline/solaris/userland/sru"]
 trust_level = "trusted"

+[projects."/Users/jetpac/.codex"]
+trust_level = "trusted"
+
+[projects."/private/tmp/q"]
+trust_level = "trusted"
+
+[projects."/Users/jetpac/PycharmProjects/event-horizon"]
+trust_level = "trusted"
+
+[projects."/private/tmp/ff"]
+trust_level = "trusted"
+
+[projects."/Users/jetpac/Documents/OSD/PRs/R2D2"]
+trust_level = "trusted"
+
+[projects."/Users/jetpac/PycharmProjects/userland-pipeline"]
+trust_level = "trusted"
+
+[projects."/Users/jetpac/PycharmProjects/overview"]
+trust_level = "trusted"
+
+[projects."/Users/jetpac"]
+trust_level = "trusted"
+
+[projects."/Users/jetpac/Documents/OSD/oci-desktop-service-shepherd"]
+trust_level = "trusted"
+
+[projects."/private/tmp/ips-tracker"]
+trust_level = "trusted"
+
+[projects."/Users/jetpac/PycharmProjects/ips-tracker"]
+trust_level = "trusted"
+
+[projects."/Users/jetpac/PycharmProjects/akidr/solaris/akidr"]
+trust_level = "trusted"
+
+[projects."/Users/jetpac/PycharmProjects/akidr/solaris/akidr/tf"]
+trust_level = "trusted"
+
+[projects."/private/tmp/empty"]
+trust_level = "trusted"
+
+[projects."/Users/jetpac/PycharmProjects/nori"]
+trust_level = "trusted"
+
+[projects."/Users/jetpac/Documents/OSD/tenancy-creator/valentin/tenancy-creator"]
+trust_level = "trusted"
+
+[projects."/Users/jetpac/PycharmProjects/akidr/solaris/akidr/oci/scripts"]
+trust_level = "trusted"
+
+[projects."/private/tmp/emptydir"]
+trust_level = "trusted"
+
+[projects."/private/tmp/eee"]
+trust_level = "trusted"
+
+[projects."/private/tmp/testy"]
+trust_level = "trusted"
+
+[projects."/private/tmp/pepa"]
+trust_level = "trusted"
+
+[projects."/Users/jetpac/Documents/OSD/release-tools/release-tools"]
+trust_level = "trusted"
+
+[projects."/private/tmp/proxy"]
+trust_level = "trusted"
+
+[projects."/Users/jetpac/Documents"]
+trust_level = "trusted"
+
+[projects."/private/tmp/training"]
+trust_level = "trusted"
+
+[projects."/private/tmp/demo"]
+trust_level = "trusted"
+
+[projects."/Users/jetpac/Documents/codex-tools/MCPs/notmuch"]
+trust_level = "trusted"
+
+[projects."/private/tmp/review/oci-desktop-service-shepherd"]
+trust_level = "trusted"
+
+[projects."/private/tmp/people"]
+trust_level = "trusted"
+
+[projects."/Users/jetpac/Documents/OSD/python-code-analyzer"]
+trust_level = "trusted"
+
+[projects."/Users/jetpac/PycharmProjects/jenkins-test"]
+trust_level = "trusted"
+
+[projects."/Users/jetpac/PycharmProjects/jenkins-plugin"]
+trust_level = "trusted"
+
+[projects."/private/tmp/prs/desktop-image-builds"]
+trust_level = "trusted"
+
+[projects."/private/tmp/effe"]
+trust_level = "trusted"
+
+[projects."/Users/jetpac/Documents/OSD/PRs/ted"]
+trust_level = "trusted"
+
+[projects."/private/tmp/runbooks"]
+trust_level = "trusted"
+
+[projects."/private/tmp"]
+trust_level = "trusted"
+
+[projects."/Users/jetpac/PycharmProjects/ips-gate"]
+trust_level = "trusted"
+
+[projects."/Users/jetpac/Documents/OSD/PRs/dragos/oci-desktop-service-shepherd"]
+trust_level = "trusted"
+
+[projects."/Users/jetpac/Documents/codex/presso"]
+trust_level = "trusted"
+
+[projects."/Users/jetpac/Documents/OSD/limits/vmicp-limits-shepherd"]
+trust_level = "trusted"
+
+[projects."/Users/jetpac/Documents/OSD/PRs/dragos/pr2/oci-desktop-service-shepherd"]
+trust_level = "trusted"
+
+[projects."/Users/jetpac/Documents/codex-tools"]
+trust_level = "trusted"
+
+[projects."/Users/jetpac/.ssh"]
+trust_level = "trusted"
+
+[projects."/private/tmp/qq"]
+trust_level = "trusted"
+
 [mcp_servers.grt]
 command = "/Users/jetpac/.codex/bin/grt-mcp"
 startup_timeout_sec = 30

+[mcp_servers.grt.tools."grt.search_entries"]
+approval_mode = "approve"
+
+[mcp_servers.grt.tools."grt.get_entry"]
+approval_mode = "approve"
+
+[mcp_servers.grt.tools."grt.get_rtis_by_target"]
+approval_mode = "approve"
+
 [mcp_servers.webrti]
 command = "/Users/jetpac/.codex/bin/webrti-mcp"
 startup_timeout_sec = 30

+[mcp_servers.webrti.tools."webrti.get_entry"]
+approval_mode = "approve"
+
 [mcp_servers.bugdb]
 command = "/Users/jetpac/.codex/bin/bugdb-mcp"
-startup_timeout_sec = 30
+startup_timeout_sec = 30
+
+[mcp_servers.bugdb.tools."bugdb.get_bug"]
+approval_mode = "approve"
+
+[mcp_servers.bugdb.tools."bugdb.get_comments"]
+approval_mode = "approve"
+
+[mcp_servers.bugdb.tools."bugdb.get_header_history"]
+approval_mode = "approve"
+
+[mcp_servers.bugdb.tools."bugdb.get_references"]
+approval_mode = "approve"
+
+[mcp_servers.bugdb.tools."bugdb.get_releases_affected"]
+approval_mode = "approve"
+
+[mcp_servers.bugdb.tools."bugdb.get_summary"]
+approval_mode = "approve"
+
+[mcp_servers.bugdb.tools."bugdb.search_bugs"]
+approval_mode = "approve"
+
+[mcp_servers.central_confluence]
+command = "uvx"
+args = [
+  "--python", "3.12",
+  "--default-index", "https://artifactory.oci.oraclecorp.com/api/pypi/global-dev-pypi/simple",
+  "mcp-atlassian",
+  "--confluence-url", "https://confluence.oraclecorp.com/confluence",
+  "--confluence-use-web-session",
+  "--browser", "chrome",
+]
+startup_timeout_sec = 300
+
+[mcp_servers.central_confluence.tools.confluence_get_page_children]
+approval_mode = "approve"
+
+[mcp_servers.notmuch]
+command = "node"
+args = ["/Users/jetpac/Documents/codex-tools/MCPs/notmuch/dist/index.js"]
+startup_timeout_sec = 30
+
+[mcp_servers.notmuch.tools.notmuch_search_threads]
+approval_mode = "approve"
+
+[mcp_servers.notmuch.tools.notmuch_get_thread]
+approval_mode = "approve"
+
+[mcp_servers.notmuch.tools.notmuch_get_message]
+approval_mode = "approve"
+
+[mcp_servers.vm]
+command = "node"
+args = ["/Users/jetpac/Documents/codex-tools/MCPs/vm/dist/index.js"]
+startup_timeout_sec = 30
+
+[mcp_servers.oracle-bitbucket]
+command = "node"
+args = ["/Users/jetpac/Documents/codex-tools/MCPs/bitbucket-mcp/build/index.js"]
+env_vars = ["BITBUCKET_TOKEN"]
+startup_timeout_sec = 60
+
+[mcp_servers.oracle-bitbucket.env]
+BITBUCKET_URL = "https://bitbucket.oci.oraclecorp.com"
+BITBUCKET_ENABLE_READ_ONLY = "true"
+BITBUCKET_ENABLE_SAFE_WRITE = "true"
+MCP_PROJECT_DEFAULT = "ODAAS"
+MCP_PROJECT_LIST = "ODAAS"
+
+[mcp_servers.oracle-bitbucket.tools.list_projects]
+approval_mode = "approve"
+
+[mcp_servers.oracle-bitbucket.tools.list_repositories]
+approval_mode = "approve"
+
+[mcp_servers.oracle-bitbucket.tools.search]
+approval_mode = "approve"
@@ -0,0 +1,4 @@
+Host oci*.private.devops.scmservice.*.oci.oracleiaas.com
+     User pnyc@bmc_operator_access
+     # IdentityAgent ~/.ssh/scm-agent.sock
+     AddKeysToAgent no
@@ -8,7 +8,7 @@ Host bitbucket.oci.oraclecorp.com
 	HostkeyAlgorithms +ssh-rsa
 	PubkeyAcceptedAlgorithms +ssh-rsa

-Host dabel dabel.us.oracle.com andel andel.us.oracle.com gates gates.us.oracle.com
+Host dabel dabel.us.oracle.com andel andel.us.oracle.com gates gates.us.oracle.com on10-patch.us.oracle.com
 	User pnyc
 	IdentityFile ~/.ssh/dabel.key
 	RequestTTY yes
@@ -65,6 +65,11 @@ Host osd-calico-dev osd-calico-dev.webad1phx.solarisx86phx.oraclevcn.com
    User opc
    IdentityFile ~/.ssh/id_ed25519

+Host pnyc-sgd-build 100.73.219.105
+     Hostname 100.73.219.105
+     IdentityFile ~/.ssh/id_pnyc-ws
+     User opc
+

 # private m1 mac
 Host 192.168.2.81
@@ -90,7 +95,7 @@ Host www.jetpac.org
 	User jetpac


-Host dabel dabel.us.oracle.com andel andel.us.oracle.com gates gates.us.oracle.com
+Host dabel dabel.us.oracle.com andel andel.us.oracle.com gates gates.us.oracle.com re-userland-build-x01.us.oracle.com
 	User pnyc
 	IdentityFile ~/.ssh/dabel.key
 	RequestTTY yes
@@ -11,7 +11,7 @@ if [[ -z $1 ]]; then
    # PARENT_WS='ssh://pnyc@andel.us.oracle.com//workspace/pnyc/solaris-reviews/secure-integrate/userland11.4'
    # PARENT_WS='ssh://pnyc@andel.us.oracle.com//workspace/pnyc/solaris-reviews/userland-pipeline'
    # PARENT_WS='ssh://pnyc@andel.us.oracle.com//workspace/pnyc/solaris-reviews/akidr-text'
-    PARENT_WS='ssh://pnyc@andel.us.oracle.com//workspace/pnyc/solaris-reviews/on-sru'
+    PARENT_WS='ssh://pnyc@andel.us.oracle.com//workspace/pnyc/solaris-reviews/akidr'
 else
    PARENT_WS=$1
 fi
@@ -40,12 +40,14 @@ pwd
 cd "${DIR}/${REPO}"
 pwd

-source proxy on
+source proxy off
 $RM -rf venv
-virtualenv -p /opt/homebrew/bin/python3.11 venv
-source venv/bin/activate
-pip install --upgrade pip
-pip install -r requirements.txt
+
+# this holds upgraded python-jenkins - will it work?
+sed -E 's/^git.*$/git+file:\/\/\/Users\/jetpac\/PycharmProjects\/python-jenkins/' requirements.txt > /tmp/r
+mv /tmp/r requirements.txt
+
+common/tools/create_virtualenv /opt/homebrew/bin/python3.11 requirements.txt venv

 echo '[alias]'                  >> .hg/hgrc
 echo 'ci = ci -X Makefile.inc'  >> .hg/hgrc
@@ -93,4 +95,3 @@ patch -p0 defaults.devel.yml < defaults_devel_patch
 source proxy off
 cd "${DIR}/${REPO}/solaris/userland/sru/"
 make lint
-
@@ -273,8 +273,8 @@ notmuch tag +on +gkap +logs +s11u4-sru \



-# notmuch tag +on +gkap +logs +s11u4-sru \
-#         tag:new AND from:rpe_sme_ww_grp@oracle.com AND subject:"/INTERIM.GK.Backport.report.for.GKAP_11.4.*/"
+notmuch tag +on +gkap +logs +s11u4-sru \
+        tag:new AND from:rpe_sme_ww_grp@oracle.com AND subject:"/INTERIM.GK.Backport.report.for.GKAP_11.4.*/"

 # notmuch tag +on +gkap +logs +s11u4-sru \
 #         "tag:new AND subject:/.*Build.*GKAB.*Completed/"
Author	SHA1	Message	Date
Petr Nyc	155085aae4	ssh config tweaks	2026-04-08 13:17:32 +02:00
Petr Nyc	c198851d10	add MCPs to codex - oci-kb, notmuch, grt, webrti, bugdb, central confluence, vm, bitbucket	2026-04-08 13:16:05 +02:00
Petr Nyc	44d8948315	create mrshughes works again	2026-03-18 11:31:48 +01:00
Petr Nyc	8e7c99edcf	mrshughes and retag-email mods	2026-03-18 11:00:49 +01:00