@codexapi/codexclaude 2.0.23 → 2.0.25

package/CUSTOMIZATIONS.md

@@ -1,13 +1,14 @@
-# Magnetapi Client Customizations
+# MagnetAPI.org Codex CLI Customizations
 
-`codexclaude` tracks the managed coding runtime while keeping a thin Magnetapi Client launcher layer. Future upgrades must preserve this file's behavior before a package is published.
+`codexclaude` tracks the managed coding runtime while keeping a thin MagnetAPI.org Codex CLI launcher layer. Future upgrades must preserve this file's behavior before a package is published.
 
 ## Runtime
 
-- Customer-facing app name: `Magnetapi Client`
-- Local launcher version: `2.0.23`
-- Bundled official runtime dependency: `@openai/codex@0.144.3`
-- Required install command: `npm install -g https://codexapi.pro/downloads/codexapi-codexclaude-2.0.23.tgz`
+- Customer-facing app name: `MagnetAPI.org Codex CLI`
+- Local launcher version: `2.0.25`
+- Bundled official runtime dependency: `@openai/codex@0.145.0`
+- Required install command: `npm install -g @codexapi/codexclaude@latest`
+- Hosted fallback: `npm install -g https://codexapi.pro/downloads/codexapi-codexclaude-2.0.25.tgz`
 - Bundled runtime version is managed internally and must not be used for customer update prompts.
 - Launcher update checks may call the CodexAPI.pro version endpoint and `@codexapi/codexclaude` npm metadata only.
 - The launcher must never check `@openai/codex` npm metadata or OpenAI GitHub releases for update notices.
@@ -19,12 +20,15 @@
 - Rewrites `~/.codex/config.toml` before every launch.
 - Deletes stale `~/.codex/version.json` before writing managed config.
 - Launches the bundled platform-native runtime binary directly rather than the upstream npm wrapper.
-- Keeps launcher-owned output branded as `Magnetapi Client`; hardcoded native binary strings require a forked native runtime build if operations wants them removed across all platforms.
+- Keeps launcher-owned output branded as `MagnetAPI.org Codex CLI`; hardcoded native binary strings require a forked native runtime build if operations wants them removed across all platforms.
 - Starts with `--search` by default.
 - Passes unknown commands directly to the bundled runtime after config is applied.
 - Provides `codexclaude changelog` using the managed version endpoint.
 - Does not expose separate `codexclaude status` or `codexclaude usage` commands; wallet information remains a compact pre-launch line.
-- Version `2.0.23` is forced by the backend minimum version and older clients must show an update-required message.
+- Version `2.0.25` is forced by the backend minimum version and older clients must show an update-required message.
+- Mandatory updates present `Upgrade Now` in an interactive terminal, invoke npm with an argument array and no shell interpolation, then relaunch the requested action automatically.
+- The npm package exposes `codexclaude` and `codex` as managed launch commands.
+- Global installation creates `claude` only when no existing command is present anywhere on `PATH`; native Claude Code must never be overwritten.
 
 ## Provider Config
 
@@ -42,13 +46,13 @@ The launcher writes a model provider named `codexapi`:
 ## Runtime Defaults
 
 - Default model: `gpt-5.6` displayed as `GPT-5.6`
-- Supported launcher choices: `gpt-5.6`, `gpt-5.6-sol-max`, `gpt-5.6-sol-ultra`, `gpt-5.6-sol`, `gpt-5.5`, `claude-opus-4-8`, `claude-sonnet-5`, and `claude-fable-5`
+- Supported launcher choices: `gpt-5.6`, `gpt-5.6-sol-max`, `gpt-5.6-sol-ultra`, `gpt-5.6-sol`, `gpt-5.5`, `claude-opus-4-8`, `claude-sonnet-5`, `claude-fable-5`, and `gpt-5.6-terra`
 - Default reasoning effort displayed locally: `xhigh`; SOL Max and SOL Ultra retain their explicit premium labels.
 - Reasoning hint sent in launcher env: model-specific
 - Approval policy: `never`
 - Sandbox mode: `danger-full-access`
 - Display wording for permissions: `Full Access` in launcher-owned copy
-- Local model catalog: `~/.codexclaude/model_catalog.json`; this keeps the native `/model` picker limited to the supported choices and prevents fallback metadata warnings for GPT-5.6 SOL, SOL Max, SOL Ultra, Opus 4.8, Sonnet 5, and Fable 5.
+- Local model catalog: `~/.codexclaude/model_catalog.json`; this keeps the native `/model` picker limited to the supported choices and prevents fallback metadata warnings for GPT-5.6 Terra, SOL, SOL Max, SOL Ultra, Opus 4.8, Sonnet 5, and Fable 5.
 - Service tier: omitted by default; `/fast` remains user-controlled and billed server-side when active.
 - TUI status line: `model-with-reasoning`, `fast-mode`, `current-dir`
 - Fable 5 stays visible to the user while the backend applies its server-managed route and billing policy.
@@ -61,7 +65,7 @@ Before launching the runtime, the launcher calls `/api/v1/wallet/status`, then `
 Expected status line:
 
 ```text
-Magnetapi Client v2.0.23 · gpt-5.6 xhigh · ~/project · Wallet $20.00
+MagnetAPI.org Codex CLI v2.0.25 · gpt-5.6 xhigh · ~/project · Wallet $20.00
 ```
 
 ## Upgrade Checklist
@@ -71,7 +75,7 @@ When updating the bundled runtime:
 1. Update `CODEX_VERSION` in `bin/codexclaude.js`.
 2. Update `@openai/codex` in `package.json` and `package-lock.json`.
 3. Bump the launcher package version.
-4. Keep `APP_DISPLAY_NAME = "Magnetapi Client"`.
+4. Keep `APP_DISPLAY_NAME = "MagnetAPI.org Codex CLI"`.
 5. Keep `DEFAULT_MODEL_ID = "gpt-5.6"`.
 6. Keep `reasoningEffortForModel()` and model-specific visible reasoning.
 7. Keep Full Access defaults: `approval_policy = "never"` and `sandbox_mode = "danger-full-access"`.
@@ -79,7 +83,9 @@ When updating the bundled runtime:
 9. Keep `clearUpstreamUpdateCache()` deleting `~/.codex/version.json`.
 10. Keep direct platform binary launch and do not fall back to the upstream npm wrapper.
 11. Keep update checks limited to `/api/v1/codexclaude/version` and `@codexapi/codexclaude` npm metadata.
-12. Keep the managed `MODELS` map and local model catalog, including SOL Max and SOL Ultra.
-13. Keep bearer username auth and the `X-CodexAPI-*` headers.
-14. Update `README.md`, `CUSTOMIZATIONS.md`, and `codexclaude.md`.
-15. Run `node --check bin/codexclaude.js`, a temporary-home setup test, `npm pack --dry-run`, and endpoint validation before publishing.
+12. Keep the interactive `Upgrade Now` flow installing `@codexapi/codexclaude@latest` without a shell and relaunching automatically.
+13. Keep `codex` as a package alias and the conditional, non-overwriting `claude` postinstall alias.
+14. Keep the managed `MODELS` map and local model catalog, including Terra, SOL Max, and SOL Ultra.
+15. Keep bearer username auth and the `X-CodexAPI-*` headers.
+16. Update `README.md`, `CUSTOMIZATIONS.md`, and `codexclaude.md`.
+17. Run syntax checks, temporary-home setup, alias-preservation tests, `npm pack --dry-run`, and endpoint validation before publishing.

package/README.md

@@ -1,13 +1,13 @@
 # codexclaude
 
-`codexclaude` installs the Magnetapi Client for customers who want one coding CLI that can use GPT-5.6, GPT-5.6 SOL, GPT-5.6 SOL Max, GPT-5.6 SOL Ultra, ChatGPT-5.5, Opus 4.8, Sonnet 5, or Fable 5 against the same Token Wallet.
+`codexclaude` installs the MagnetAPI.org Codex CLI for customers who want one coding CLI that can use GPT-5.6, GPT-5.6 Terra, GPT-5.6 SOL, GPT-5.6 SOL Max, GPT-5.6 SOL Ultra, ChatGPT-5.5, Opus 4.8, Sonnet 5, or Fable 5 against the same Token Wallet.
 
-Version `2.0.23` is a required client sync release. It bundles official Codex runtime dependency `@openai/codex@0.144.3`, launches the platform-native runtime binary directly, disables upstream OpenAI update prompts, and applies account, wallet, model, Full Access, GPT-5.6/xhigh defaults, and managed model metadata before each coding session starts. Model menus no longer display wallet multiplier notices; billing remains managed by the server.
+Version `2.0.25` is a required client sync release. It bundles official Codex runtime dependency `@openai/codex@0.145.0`, launches the platform-native runtime binary directly, disables upstream OpenAI update prompts, and applies account, wallet, model, Full Access, GPT-5.6/xhigh defaults, and managed model metadata before each coding session starts. Model menus no longer display wallet multiplier notices; billing remains managed by the server.
 
 ## Install Or Update
 
 ```bash
-npm install -g https://codexapi.pro/downloads/codexapi-codexclaude-2.0.23.tgz
+npm install -g @codexapi/codexclaude@latest
 ```
 
 This does not delete local session history. The update replaces the `codexclaude` launcher package, refreshes the bundled runtime dependency, and rewrites the managed provider config the next time `codexclaude setup`, `codexclaude login`, or `codexclaude start` runs.
@@ -16,7 +16,7 @@ This does not delete local session history. The update replaces the `codexclaude
 
 The launcher checks CodexAPI.pro's managed version endpoint and the `@codexapi/codexclaude` npm package metadata only. It must never check `@openai/codex` npm metadata or OpenAI GitHub releases for customer update prompts.
 
-Version `2.0.23` is currently enforced as the minimum supported version, so older launchers show a required update message with the exact hosted tarball command above.
+Version `2.0.25` is currently enforced as the minimum supported version. A compatible older launcher presents `Upgrade Now`; selecting it installs `@codexapi/codexclaude@latest` and relaunches the requested action automatically. Non-interactive terminals print the same npm command instead of hanging for input.
 
 ## First Login
 
@@ -44,7 +44,17 @@ Switch model:
 codexclaude model
 ```
 
-Available model labels are `GPT-5.6`, `GPT-5.6 SOL Max`, `GPT-5.6 SOL Ultra`, `GPT-5.6 SOL`, `ChatGPT-5.5`, `Opus 4.8`, `Sonnet 5`, and `Fable 5`. All models use a Responses-compatible endpoint and the same customer Token Wallet.
+Available model labels are `GPT-5.6`, `GPT-5.6 SOL Max`, `GPT-5.6 SOL Ultra`, `GPT-5.6 SOL`, `ChatGPT-5.5`, `Opus 4.8`, `Sonnet 5`, `Fable 5`, and `GPT-5.6 Terra`. All models use a Responses-compatible endpoint and the same customer Token Wallet.
+
+## Launch Commands
+
+The managed package installs `codexclaude` and `codex` as equivalent launch commands. During a global install, it also creates a `claude` alias only when no existing `claude` command can be found. If official Claude Code is already installed, its native `claude` command is preserved.
+
+```bash
+codexclaude
+codex
+claude
+```
 
 Show current launcher changes:
 
@@ -57,17 +67,17 @@ codexclaude changelog
 Before launching the coding runtime, the app prints a compact status line like:
 
 ```text
-Magnetapi Client v2.0.23 · gpt-5.6 xhigh · ~/project · Wallet $20.00
+MagnetAPI.org Codex CLI v2.0.25 · gpt-5.6 xhigh · ~/project · Wallet $20.00
 ```
 
 ## Preserved Customizations
 
 - Dashboard Username or Email Address plus password login for CodexAPI.pro, ChatPlus.chat, MyAPI.world, and MagnetAPI.org.
-- GPT-5.6, GPT-5.6 SOL Max, GPT-5.6 SOL Ultra, GPT-5.6 SOL, ChatGPT-5.5, Opus 4.8, Sonnet 5, or Fable 5 model selection, with GPT-5.6/xhigh as the default.
+- GPT-5.6, GPT-5.6 Terra, GPT-5.6 SOL Max, GPT-5.6 SOL Ultra, GPT-5.6 SOL, ChatGPT-5.5, Opus 4.8, Sonnet 5, or Fable 5 model selection, with GPT-5.6/xhigh as the default.
 - Service-specific Responses-compatible provider for the dashboard account that logged in.
 - Full Access defaults: approval policy `never` and sandbox mode `danger-full-access`.
 - Model-specific visible reasoning in the local UI while the API server keeps upstream runtime effort server-managed.
-- A local `~/.codexclaude/model_catalog.json` file so the native `/model` picker lists only the supported Magnetapi Client choices, including SOL Max and SOL Ultra.
+- A local `~/.codexclaude/model_catalog.json` file so the native `/model` picker lists only the supported MagnetAPI.org Codex CLI choices, including Terra, SOL Max, and SOL Ultra.
 - No default fast service tier. Fast mode is billed only when the user enables it inside the client.
 - Token Wallet balance lookup before launch without exposing separate `status` or `usage` launcher commands.
 - Backend-identifying request headers so the API can enforce account and plan rules server-side.

package/bin/codexclaude.js

@@ -7,12 +7,14 @@ import { homedir } from "node:os";
 import path from "node:path";
 import readline from "node:readline/promises";
 import { stdin as input, stdout as output } from "node:process";
+import { fileURLToPath } from "node:url";
+import { installSafeClaudeAlias } from "../scripts/install-safe-aliases.js";
 
 const require = createRequire(import.meta.url);
 
-const APP_VERSION = "2.0.23";
-const CODEX_VERSION = "0.144.3";
-const APP_DISPLAY_NAME = "Magnetapi Client";
+const APP_VERSION = "2.0.25";
+const CODEX_VERSION = "0.145.0";
+const APP_DISPLAY_NAME = "MagnetAPI.org Codex CLI";
 const DEFAULT_MODEL_ID = "gpt-5.6";
 const DEFAULT_DISPLAY_REASONING_EFFORT = "xhigh";
 const DEFAULT_SERVER_REASONING_EFFORT = "xhigh";
@@ -24,7 +26,8 @@ const VERSION_CHECK_PATH = "/api/v1/codexclaude/version";
 const NPM_PACKAGE_NAME = "@codexapi/codexclaude";
 const NPM_LATEST_URL = "https://registry.npmjs.org/@codexapi%2Fcodexclaude/latest";
 const HOSTED_TARBALL_URL = `https://codexapi.pro/downloads/codexapi-codexclaude-${APP_VERSION}.tgz`;
-const UPDATE_COMMAND = `npm install -g ${HOSTED_TARBALL_URL}`;
+const UPDATE_COMMAND = `npm install -g ${NPM_PACKAGE_NAME}@latest`;
+const HOSTED_UPDATE_COMMAND = `npm install -g ${HOSTED_TARBALL_URL}`;
 const CONFIG_DIR = path.join(homedir(), ".codexclaude");
 const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
 const MODEL_CATALOG_FILE = path.join(CONFIG_DIR, "model_catalog.json");
@@ -119,13 +122,20 @@ const MODELS = {
     aliases: ["8", "fable", "fable-5", "fabel", "fabel-5", "claude-fable-5", "claude-fabel-5"],
     premium: true,
   },
+  "gpt-5.6-terra": {
+    id: "gpt-5.6-terra",
+    label: "GPT-5.6 Terra",
+    aliases: ["9", "terra", "gpt-5.6-terra", "gpt56-terra"],
+    reasoningEffort: "xhigh",
+  },
 };
 
 async function main() {
   ensureExecutable();
+  ensureSafeCommandAliases();
   const [command = "start", ...args] = process.argv.slice(2);
   if (["-v", "--version", "version"].includes(command)) {
-    console.log(`${APP_DISPLAY_NAME} ${APP_VERSION}`);
+    console.log(`${APP_DISPLAY_NAME} v${APP_VERSION}`);
     return;
   }
   if (["-h", "--help", "help"].includes(command)) {
@@ -136,7 +146,9 @@ async function main() {
     await printChangelog();
     return;
   }
-  await enforceLauncherVersion();
+  if (await enforceLauncherVersion()) {
+    return;
+  }
   if (command === "login") {
     await loginFlow();
     return;
@@ -170,14 +182,14 @@ async function main() {
 
 function printHelp() {
   console.log(`
-${APP_DISPLAY_NAME} ${APP_VERSION}
+${APP_DISPLAY_NAME} v${APP_VERSION}
 
 Commands:
   codexclaude login       Login with dashboard username/email and password
-  codexclaude model       Select GPT-5.6, SOL modes, Opus 4.8, Sonnet 5, or Fable 5
+  codexclaude model       Select GPT-5.6, Terra, SOL modes, Opus 4.8, Sonnet 5, or Fable 5
   codexclaude changelog   Show the latest CodexAPI.pro launcher changes
   codexclaude setup       Rewrite ~/.codex/config.toml with Full Access defaults
-  codexclaude start       Start Magnetapi Client with --search
+  codexclaude start       Start ${APP_DISPLAY_NAME} with --search
   codexclaude resume      Resume the latest coding session with --search
   codexclaude logout      Remove saved codexclaude account state
 
@@ -187,7 +199,7 @@ Any other command is passed through to the bundled coding runtime after Magnetap
 
 async function printChangelog() {
   const metadata = await getJson(`${VERSION_CHECK_PATH}?current=${encodeURIComponent(APP_VERSION)}`);
-  console.log(`codexclaude ${metadata?.latestVersion || APP_VERSION}`);
+  console.log(`${APP_DISPLAY_NAME} v${metadata?.latestVersion || APP_VERSION}`);
   console.log(`Required minimum: ${metadata?.minimumVersion || APP_VERSION}`);
   const changes = Array.isArray(metadata?.changes) ? metadata.changes : [];
   if (changes.length) {
@@ -268,7 +280,7 @@ async function loginWithServiceSelection({ username, password, selectedService,
   const loginBody = {
     username,
     password,
-    deviceName: `codexclaude ${APP_VERSION}`,
+    deviceName: `${APP_DISPLAY_NAME} v${APP_VERSION}`,
   };
   if (selectedService) {
     return {
@@ -414,7 +426,7 @@ async function postJson(pathname, body, origin = API_ORIGIN) {
 
 async function enforceLauncherVersion() {
   if (isTruthy(process.env.CODEXCLAUDE_DISABLE_UPDATE_CHECK)) {
-    return;
+    return false;
   }
   const params = new URLSearchParams({ current: APP_VERSION });
   let metadata = null;
@@ -424,12 +436,83 @@ async function enforceLauncherVersion() {
     metadata = null;
   }
   if (metadata?.updateRequired || isOlderVersion(APP_VERSION, metadata?.minimumVersion)) {
-    throw new Error(updateRequiredMessage(metadata));
+    await runMandatoryUpgrade(metadata);
+    return true;
   }
   const updateMetadata = optionalUpdateMetadata(metadata, await npmLatestMetadata());
   if (updateMetadata) {
     printOptionalUpdateNotice(updateMetadata);
   }
+  return false;
+}
+
+async function runMandatoryUpgrade(metadata) {
+  const latest = metadata?.latestVersion || "latest";
+  const minimum = metadata?.minimumVersion || latest;
+  const changes = Array.isArray(metadata?.changes) ? metadata.changes.slice(0, 4) : [];
+  console.error(`\n${APP_DISPLAY_NAME} v${latest} is required before your next coding session.`);
+  console.error(`Installed: v${APP_VERSION} · Required: v${minimum}`);
+  for (const change of changes) {
+    console.error(`- ${change}`);
+  }
+  console.error("Your local project files and coding-session history will not be removed.\n");
+
+  let shouldUpgrade = isTruthy(process.env.CODEXCLAUDE_AUTO_UPDATE);
+  if (!shouldUpgrade) {
+    if (!input.isTTY || !output.isTTY) {
+      throw new Error(updateRequiredMessage(metadata));
+    }
+    const rl = readline.createInterface({ input, output });
+    try {
+      console.log("  1. Upgrade Now");
+      console.log("  2. Exit");
+      const answer = (await rl.question("Select [Upgrade Now]: ")).trim().toLowerCase();
+      shouldUpgrade = ["", "1", "upgrade", "upgrade now", "yes", "y"].includes(answer);
+    } finally {
+      rl.close();
+    }
+  }
+  if (!shouldUpgrade) {
+    throw new Error(`Upgrade cancelled. Run ${UPDATE_COMMAND} before starting codexclaude again.`);
+  }
+
+  console.log(`\nDownloading and installing ${NPM_PACKAGE_NAME}@latest...`);
+  const npmCommand = process.platform === "win32" ? "npm.cmd" : "npm";
+  const exitCode = await spawnAndWait(npmCommand, ["install", "-g", `${NPM_PACKAGE_NAME}@latest`]);
+  if (exitCode !== 0) {
+    throw new Error(
+      `Automatic upgrade failed with exit code ${exitCode}. Run ${UPDATE_COMMAND}. ` +
+        `Hosted fallback: ${HOSTED_UPDATE_COMMAND}`,
+    );
+  }
+  console.log(`\nUpgrade complete. Restarting ${APP_DISPLAY_NAME} now...`);
+  const relaunchArgs = process.argv.slice(2);
+  const relaunchCommand = process.platform === "win32" ? "codexclaude.cmd" : "codexclaude";
+  try {
+    const relaunchExitCode = await spawnAndWait(relaunchCommand, relaunchArgs);
+    if (relaunchExitCode !== 0) {
+      throw new Error(`updated client exited with code ${relaunchExitCode}`);
+    }
+  } catch (error) {
+    throw new Error(
+      `The update installed successfully, but automatic restart failed: ${error.message}. ` +
+        "Run codexclaude to continue.",
+    );
+  }
+}
+
+async function spawnAndWait(command, args) {
+  return await new Promise((resolve, reject) => {
+    const child = spawn(command, args, { stdio: "inherit", env: process.env, shell: false });
+    child.once("error", reject);
+    child.once("exit", (code, signal) => {
+      if (signal) {
+        reject(new Error(`Upgrade process stopped by ${signal}.`));
+        return;
+      }
+      resolve(code ?? 1);
+    });
+  });
 }
 
 async function getJson(pathname) {
@@ -527,8 +610,8 @@ function updateRequiredMessage(metadata) {
   const latest = metadata?.latestVersion || "latest";
   const minimum = metadata?.minimumVersion || latest;
   return [
-    `Update required: ${APP_DISPLAY_NAME} has updated to codexclaude ${latest}. This major release is required for all users so your local client stays synced with the managed model catalog, Full Access defaults, and provider config.`,
-    `Installed codexclaude: ${APP_VERSION}. Required: ${minimum}. Latest: ${latest}.`,
+    `Update required: ${APP_DISPLAY_NAME} v${latest} is required so your local client stays synced with the managed model catalog, Full Access defaults, and provider config.`,
+    `Installed: v${APP_VERSION}. Required: v${minimum}. Latest: v${latest}.`,
     `Run: ${installCommand}`,
     "Your local session history will not be deleted. The update only replaces the codexclaude launcher and rewrites provider config backups.",
   ].join("\n");
@@ -562,7 +645,7 @@ function printOptionalUpdateNotice(metadata) {
   const border = "─".repeat(64);
   const line = (text) => `│ ${String(text)}`.slice(0, 65).padEnd(65) + "│";
   console.error(`\n┌${border}┐`);
-  console.error(line(`codexclaude ${latest} is available. You can keep coding on ${APP_VERSION}.`));
+  console.error(line(`${APP_DISPLAY_NAME} v${latest} is available. You can keep coding on v${APP_VERSION}.`));
   console.error(line(`Update when ready: ${installCommand}`));
   for (const change of changes) {
     console.error(line(`• ${change}`));
@@ -713,6 +796,9 @@ function modelCatalogDescription(modelId) {
   if (modelId === "gpt-5.6-sol") {
     return "GPT-5.6 SOL native coding route with local coding tools and wallet billing.";
   }
+  if (modelId === "gpt-5.6-terra") {
+    return "GPT-5.6 Terra coding route with local coding tools and wallet billing.";
+  }
   if (modelId === "claude-opus-4-8") {
     return "Opus 4.8 coding route with local coding tools and wallet billing.";
   }
@@ -940,6 +1026,9 @@ function modelStatusName(model) {
   if (model === "gpt-5.6-sol") {
     return "gpt-5.6-sol";
   }
+  if (model === "gpt-5.6-terra") {
+    return "gpt-5.6-terra";
+  }
   if (model === "claude-opus-4-8") {
     return "opus-4.8";
   }
@@ -979,6 +1068,9 @@ function normalizeConfig(config) {
   if (["gpt-5-6-sol", "sol"].includes(normalized.model)) {
     normalized.model = "gpt-5.6-sol";
   }
+  if (["gpt-5-6-terra", "gpt56-terra", "terra"].includes(normalized.model)) {
+    normalized.model = "gpt-5.6-terra";
+  }
   if (["gpt-5-6", "gpt56", "chatgpt-5.6", "chatgpt-5-6"].includes(normalized.model)) {
     normalized.model = "gpt-5.6";
   }
@@ -1125,6 +1217,36 @@ function ensureExecutable() {
   }
 }
 
+function ensureSafeCommandAliases() {
+  const prefix = installedGlobalPrefix();
+  if (!prefix) {
+    return;
+  }
+  installSafeClaudeAlias({
+    isGlobalInstall: true,
+    prefix,
+    quiet: true,
+  });
+}
+
+function installedGlobalPrefix() {
+  const packageRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+  const segments = packageRoot.split(path.sep);
+  const nodeModulesIndex = segments.lastIndexOf("node_modules");
+  if (nodeModulesIndex < 0 || nodeModulesIndex >= segments.length - 2) {
+    return null;
+  }
+  const scope = segments[nodeModulesIndex + 1];
+  if (scope !== "@codexapi") {
+    return null;
+  }
+  const prefixSegments = process.platform === "win32"
+    ? segments.slice(0, nodeModulesIndex)
+    : segments.slice(0, Math.max(0, nodeModulesIndex - 1));
+  const prefix = prefixSegments.join(path.sep) || path.parse(packageRoot).root;
+  return prefix;
+}
+
 main().catch((error) => {
   console.error(`codexclaude: ${error.message}`);
   process.exit(1);

package/codexclaude.md

@@ -5,11 +5,12 @@ This file is the durable handoff for the `@codexapi/codexclaude` package in `/ro
 ## Current Release
 
 - Package name: `@codexapi/codexclaude`
-- Launcher version: `2.0.23`
-- Customer-facing app name: `Magnetapi Client`
-- Bundled runtime dependency: `@openai/codex@0.144.3`
-- Required install command: `npm install -g https://codexapi.pro/downloads/codexapi-codexclaude-2.0.23.tgz`
-- Backend minimum version: `2.0.23`
+- Launcher version: `2.0.25`
+- Customer-facing app name: `MagnetAPI.org Codex CLI`
+- Bundled runtime dependency: `@openai/codex@0.145.0`
+- Required install command: `npm install -g @codexapi/codexclaude@latest`
+- Hosted fallback: `npm install -g https://codexapi.pro/downloads/codexapi-codexclaude-2.0.25.tgz`
+- Backend minimum version: `2.0.25`
 - Default visible model: `GPT-5.6`
 - Default model slug: `gpt-5.6`
 - Default visible reasoning effort: `xhigh`; premium SOL Max and SOL Ultra retain their explicit `max` and `ultra` labels.
@@ -24,13 +25,13 @@ This file is the durable handoff for the `@codexapi/codexclaude` package in `/ro
 The launcher must present itself as:
 
 ```text
-Magnetapi Client v2.0.23
+MagnetAPI.org Codex CLI v2.0.25
 ```
 
 Normal pre-launch status should look like:
 
 ```text
-Magnetapi Client v2.0.23 · gpt-5.6 xhigh · ~/project · Wallet $20.00
+MagnetAPI.org Codex CLI v2.0.25 · gpt-5.6 xhigh · ~/project · Wallet $20.00
 ```
 
 Do not show OpenAI update notices, OpenAI npm install commands, OpenAI release links, or the upstream runtime version in launcher-owned output. The package still depends on the official runtime internally, but the customer update surface is ours.
@@ -45,6 +46,7 @@ The launcher command `codexclaude model` must list these customer-visible models
 - `claude-opus-4-8` displayed as `Opus 4.8`
 - `claude-sonnet-5` displayed as `Sonnet 5`
 - `claude-fable-5` displayed as `Fable 5`
+- `gpt-5.6-terra` displayed as `GPT-5.6 Terra`
 
 GPT-5.6 must be the default when a new config is created or a legacy config contains an unsupported Gemini/Deepseek value. It is displayed with `xhigh` reasoning while the API servers execute Codex-family requests through the managed GPT-5.6 Terra/xhigh signed-in target. The selected model slug must stay in `~/.codex/config.toml`; do not rewrite customer-facing model selections locally. `gpt-5.6-sol-max` and `gpt-5.6-sol-ultra` remain distinct for customer choice, usage display, and wallet billing.
 
@@ -55,11 +57,13 @@ GPT-5.6 must be the default when a new config is created or a legacy config cont
 - `https://codexapi.pro/api/v1/codexclaude/version`
 - `https://registry.npmjs.org/@codexapi%2Fcodexclaude/latest`
 
-It must not check `@openai/codex` npm metadata, OpenAI GitHub releases, or any upstream OpenAI update endpoint. Version `2.0.23` is a forced release: the backend `minimumVersion` equals `2.0.23`, and older clients must show an update-required message with the hosted tarball command.
+It must not check `@openai/codex` npm metadata, OpenAI GitHub releases, or any upstream OpenAI update endpoint. Version `2.0.25` is a forced release: the backend `minimumVersion` equals `2.0.25`. Compatible older launchers offer an interactive `Upgrade Now` action that invokes `npm install -g @codexapi/codexclaude@latest` without shell interpolation. Non-interactive terminals print the exact update command and exit instead of waiting for input. After a successful interactive update, the launcher starts the requested action again automatically.
+
+The npm package owns `codexclaude` and `codex`. Its postinstall script may create a `claude` alias only during a global installation and only when neither the target npm prefix nor any directory on `PATH` already contains a Claude command. If native Claude Code exists, report that it was preserved and do not write any `claude` shim.
 
 The launcher writes `check_for_update_on_startup = false` and removes `~/.codex/version.json` so the bundled runtime does not display stale upstream update prompts. The launcher also resolves the platform-native runtime binary directly from the optional package (`@openai/codex-linux-x64`, `@openai/codex-darwin-arm64`, and so on). Do not fall back to the upstream npm wrapper, because that wrapper can re-enable upstream managed update behavior.
 
-The optional platform-native runtime packages can still contain upstream README files and hardcoded native strings inside the binary. Launcher-owned output must say `Magnetapi Client`; replacing native binary text itself requires a maintained forked native runtime build for every supported platform. Until such a fork exists, do not re-enable the upstream npm wrapper and do not present upstream update notices to customers.
+The optional platform-native runtime packages can still contain upstream README files and hardcoded native strings inside the binary. Launcher-owned output must say `MagnetAPI.org Codex CLI`; replacing native binary text itself requires a maintained forked native runtime build for every supported platform. Until such a fork exists, do not re-enable the upstream npm wrapper and do not present upstream update notices to customers.
 
 ## Generated Config Contract
 
@@ -83,7 +87,7 @@ base_url = "<service Responses URL>"
 experimental_bearer_token = "<customer System Token/API username>"
 wire_api = "responses"
 supports_websockets = false
-http_headers = { "X-CodexAPI-Client" = "codexclaude", "X-CodexAPI-Client-Version" = "2.0.23", "X-CodexAPI-Selected-Model" = "<selected model>" }
+http_headers = { "X-CodexAPI-Client" = "codexclaude", "X-CodexAPI-Client-Version" = "2.0.25", "X-CodexAPI-Selected-Model" = "<selected model>" }
 
 [tui]
 status_line = ["model-with-reasoning", "fast-mode", "current-dir"]
@@ -91,7 +95,7 @@ status_line_use_colors = true
 terminal_title = ["project-name", "model-with-reasoning", "run-state"]
 ```
 
-The generated model catalog must contain full metadata for every supported slug, including `gpt-5.6`, `gpt-5.6-sol-max`, and `gpt-5.6-sol-ultra`. This prevents fallback metadata warnings such as:
+The generated model catalog must contain full metadata for every supported slug, including `gpt-5.6`, `gpt-5.6-terra`, `gpt-5.6-sol-max`, and `gpt-5.6-sol-ultra`. This prevents fallback metadata warnings such as:
 
 ```text
 Model metadata for `claude-opus-4-8` not found. Defaulting to fallback metadata; this can degrade performance and cause issues.
@@ -125,17 +129,19 @@ When updating the bundled runtime dependency:
 2. Run `npm install @openai/codex@<version> --save-exact`.
 3. Bump `package.json` and `package-lock.json` to a new `@codexapi/codexclaude` version.
 4. Update `APP_VERSION` and `CODEX_VERSION` in `bin/codexclaude.js`.
-5. Preserve `APP_DISPLAY_NAME = "Magnetapi Client"`.
+5. Preserve `APP_DISPLAY_NAME = "MagnetAPI.org Codex CLI"`.
 6. Preserve `DEFAULT_MODEL_ID = "gpt-5.6"`.
 7. Preserve `DISPLAY_REASONING_EFFORT = "xhigh"` and `SERVER_REASONING_EFFORT = "xhigh"` unless operations explicitly changes the launcher-visible contract.
 8. Preserve Full Access defaults and the local model catalog.
 9. Preserve direct platform-native binary launch.
 10. Preserve update checks through our version endpoint and `@codexapi/codexclaude` npm metadata only.
-11. Preserve deletion of `~/.codex/version.json` and `check_for_update_on_startup = false`.
-12. Update customer setup scripts on CodexAPI.pro, ChatPlus.chat, MyAPI.world, MagnetAPI.org, and VIP pages to use the exact hosted tarball command.
-13. Update backend `CODEXCLAUDE_LATEST_VERSION`, `CODEXCLAUDE_MIN_VERSION`, and hosted tarball URL.
-14. Update this file, `README.md`, and `CUSTOMIZATIONS.md`.
-15. Run validation and publish.
+11. Preserve the interactive `Upgrade Now` flow, shell-free npm invocation, and automatic relaunch.
+12. Preserve `codex` as a package alias and the conditional native-Claude-safe postinstall alias.
+13. Preserve deletion of `~/.codex/version.json` and `check_for_update_on_startup = false`.
+14. Update customer setup scripts on CodexAPI.pro, ChatPlus.chat, MyAPI.world, MagnetAPI.org, and VIP pages to use the current release.
+15. Update backend `CODEXCLAUDE_LATEST_VERSION`, `CODEXCLAUDE_MIN_VERSION`, and hosted tarball URL.
+16. Update this file, `README.md`, and `CUSTOMIZATIONS.md`.
+17. Run validation and publish.
 
 ## Validation Commands
 
@@ -153,7 +159,7 @@ tmp_home="$(mktemp -d)"
 mkdir -p "$tmp_home/.codexclaude"
 cat > "$tmp_home/.codexclaude/config.json" <<'JSON'
 {
-  "version": "2.0.23",
+  "version": "2.0.25",
   "serviceId": "codexapi",
   "serviceLabel": "CodexAPI.pro",
   "apiOrigin": "https://codexapi.pro",
@@ -185,15 +191,30 @@ Verify the generated model catalog contains only:
 - `claude-opus-4-8`
 - `claude-sonnet-5`
 - `claude-fable-5`
+- `gpt-5.6-terra`
 
 After packaging, copy the tarball to the public downloads directories, restart the backend, and verify:
 
 ```bash
 curl -fsS "https://codexapi.pro/api/v1/codexclaude/version?current=2.0.17"
-curl -fsSI "https://codexapi.pro/downloads/codexapi-codexclaude-2.0.23.tgz"
+curl -fsSI "https://codexapi.pro/downloads/codexapi-codexclaude-2.0.25.tgz"
 ```
 
-The version endpoint must report `latestVersion = 2.0.23`, `minimumVersion = 2.0.23`, and `updateRequired = true` for old clients.
+The version endpoint must report `latestVersion = 2.0.25`, `minimumVersion = 2.0.25`, and `updateRequired = true` for old clients.
+
+## Version 2.0.25 Changes
+
+- Updated the bundled runtime dependency to `@openai/codex@0.145.0`.
+- Added `GPT-5.6 Terra` to the managed `/model` catalog.
+- Added `codex` as a managed launch alias and a conditional `claude` alias that preserves native Claude Code.
+- Changed mandatory updates to relaunch the requested action automatically after installation.
+
+## Version 2.0.24 Changes
+
+- Updated the bundled runtime dependency to `@openai/codex@0.144.4`.
+- Changed launcher-owned titles, help, status, terminal title, and version output to `MagnetAPI.org Codex CLI v2.0.24`.
+- Added the interactive mandatory `Upgrade Now` action backed by `@codexapi/codexclaude@latest`.
+- Preserved dashboard login, wallet status, Full Access, managed models, web search, local tools, and upstream update suppression.
 
 ## Version 2.0.23 Changes
 

package/package.json

@@ -1,23 +1,28 @@
 {
   "name": "@codexapi/codexclaude",
-  "version": "2.0.23",
-  "description": "Magnetapi Client launcher for ChatGPT-5.5, Opus 4.8, Sonnet 5, and Fable 5.",
+  "version": "2.0.25",
+  "description": "MagnetAPI.org Codex CLI for GPT-5.6, Opus 4.8, Sonnet 5, and Fable 5.",
   "license": "Apache-2.0",
   "type": "module",
   "bin": {
-    "codexclaude": "bin/codexclaude.js"
+    "codexclaude": "bin/codexclaude.js",
+    "codex": "bin/codexclaude.js"
   },
   "files": [
     "bin",
+    "scripts",
     "README.md",
     "CUSTOMIZATIONS.md",
     "codexclaude.md"
   ],
+  "scripts": {
+    "postinstall": "node scripts/install-safe-aliases.js"
+  },
   "engines": {
     "node": ">=20"
   },
   "dependencies": {
-    "@openai/codex": "0.144.3"
+    "@openai/codex": "0.145.0"
   },
   "publishConfig": {
     "access": "public"

package/scripts/install-safe-aliases.js

@@ -0,0 +1,151 @@
+#!/usr/bin/env node
+
+import {
+  chmodSync,
+  existsSync,
+  lstatSync,
+  mkdirSync,
+  symlinkSync,
+  writeFileSync,
+} from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+const packageRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+const launcherPath = path.join(packageRoot, "bin", "codexclaude.js");
+
+export function installSafeClaudeAlias(options = {}) {
+  const isGlobalInstall =
+    options.isGlobalInstall ??
+    String(process.env.npm_config_global || "").toLowerCase() === "true";
+  const quiet = Boolean(options.quiet);
+  if (!isGlobalInstall || isTruthy(process.env.CODEXCLAUDE_SKIP_COMMAND_ALIASES)) {
+    return { status: "skipped" };
+  }
+
+  const prefix = String(options.prefix || process.env.npm_config_prefix || "").trim();
+  if (!prefix) {
+    if (!quiet) {
+      console.warn("codexclaude: skipped the optional claude alias because npm did not provide its global prefix.");
+    }
+    return { status: "missing-prefix" };
+  }
+
+  const binDir = process.platform === "win32" ? prefix : path.join(prefix, "bin");
+  const aliasPaths = claudeAliasPaths(binDir);
+  const existingCommand = findCommandOnPath("claude", aliasPaths);
+  const existingAlias = aliasPaths.find((candidate) => existsSync(candidate));
+
+  if (existingCommand || existingAlias) {
+    const preserved = existingCommand || existingAlias;
+    if (!quiet) {
+      console.log(`codexclaude: preserved the existing native claude command at ${preserved}.`);
+    }
+    return { status: "preserved", path: preserved };
+  }
+
+  try {
+    mkdirSync(binDir, { recursive: true });
+    if (process.platform === "win32") {
+      installWindowsAliases(aliasPaths);
+    } else {
+      symlinkSync(launcherPath, aliasPaths[0]);
+      chmodSync(aliasPaths[0], 0o755);
+    }
+    if (!quiet) {
+      console.log("codexclaude: installed the optional claude launch alias; codex and codexclaude are also available.");
+    }
+    return { status: "installed", paths: aliasPaths.filter((candidate) => existsSync(candidate)) };
+  } catch (error) {
+    if (!quiet) {
+      console.warn(`codexclaude: could not install the optional claude alias (${error.message}).`);
+    }
+    return { status: "failed", error: error.message };
+  }
+}
+
+function claudeAliasPaths(directory) {
+  if (process.platform === "win32") {
+    return [
+      path.join(directory, "claude"),
+      path.join(directory, "claude.cmd"),
+      path.join(directory, "claude.ps1"),
+      path.join(directory, "claude.exe"),
+    ];
+  }
+  return [path.join(directory, "claude")];
+}
+
+function findCommandOnPath(command, ignoredPaths) {
+  const ignored = new Set(ignoredPaths.map(normalizePath));
+  const pathEntries = String(process.env.PATH || "")
+    .split(path.delimiter)
+    .map((entry) => entry.trim())
+    .filter(Boolean);
+  const names =
+    process.platform === "win32"
+      ? [command, `${command}.exe`, `${command}.cmd`, `${command}.bat`, `${command}.ps1`]
+      : [command];
+  for (const entry of pathEntries) {
+    for (const name of names) {
+      const candidate = path.resolve(entry, name);
+      if (ignored.has(normalizePath(candidate)) || !existsSync(candidate)) {
+        continue;
+      }
+      try {
+        if (lstatSync(candidate).isFile() || lstatSync(candidate).isSymbolicLink()) {
+          return candidate;
+        }
+      } catch {
+        // Ignore a path entry that disappears while npm is installing.
+      }
+    }
+  }
+  return null;
+}
+
+function installWindowsAliases(paths) {
+  const [shellPath, cmdPath, ps1Path] = paths;
+  const node = quoteForCmd(process.execPath);
+  const launcher = quoteForCmd(launcherPath);
+  writeFileSync(
+    shellPath,
+    `#!/bin/sh\nexec "${escapeForShell(process.execPath)}" "${escapeForShell(launcherPath)}" "$@"\n`,
+    { encoding: "utf8", mode: 0o755 },
+  );
+  writeFileSync(
+    cmdPath,
+    `@ECHO off\r\n${node} ${launcher} %*\r\n`,
+    { encoding: "utf8" },
+  );
+  writeFileSync(
+    ps1Path,
+    `& '${escapeForPowerShell(process.execPath)}' '${escapeForPowerShell(launcherPath)}' @args\nexit $LASTEXITCODE\n`,
+    { encoding: "utf8" },
+  );
+}
+
+function normalizePath(value) {
+  const resolved = path.resolve(value);
+  return process.platform === "win32" ? resolved.toLowerCase() : resolved;
+}
+
+function quoteForCmd(value) {
+  return `"${String(value).replaceAll('"', '""')}"`;
+}
+
+function escapeForPowerShell(value) {
+  return String(value).replaceAll("'", "''");
+}
+
+function escapeForShell(value) {
+  return String(value).replaceAll("\\", "\\\\").replaceAll('"', '\\"').replaceAll("$", "\\$").replaceAll("`", "\\`");
+}
+
+function isTruthy(value) {
+  return ["1", "true", "yes", "on"].includes(String(value || "").trim().toLowerCase());
+}
+
+if (path.resolve(process.argv[1] || "") === fileURLToPath(import.meta.url)) {
+  installSafeClaudeAlias();
+}