@codexapi/codexclaude 2.0.24 → 2.0.26

package/CUSTOMIZATIONS.md

@@ -5,10 +5,10 @@
 ## Runtime
 
 - Customer-facing app name: `MagnetAPI.org Codex CLI`
-- Local launcher version: `2.0.24`
-- Bundled official runtime dependency: `@openai/codex@0.144.4`
+- Local launcher version: `2.0.26`
+- Bundled official runtime dependency: `@openai/codex@0.145.0`
 - Required install command: `npm install -g @codexapi/codexclaude@latest`
-- Hosted fallback: `npm install -g https://codexapi.pro/downloads/codexapi-codexclaude-2.0.24.tgz`
+- Hosted fallback: `npm install -g https://codexapi.pro/downloads/codexapi-codexclaude-2.0.26.tgz`
 - Bundled runtime version is managed internally and must not be used for customer update prompts.
 - Launcher update checks may call the CodexAPI.pro version endpoint and `@codexapi/codexclaude` npm metadata only.
 - The launcher must never check `@openai/codex` npm metadata or OpenAI GitHub releases for update notices.
@@ -25,8 +25,10 @@
 - Passes unknown commands directly to the bundled runtime after config is applied.
 - Provides `codexclaude changelog` using the managed version endpoint.
 - Does not expose separate `codexclaude status` or `codexclaude usage` commands; wallet information remains a compact pre-launch line.
-- Version `2.0.24` is forced by the backend minimum version and older clients must show an update-required message.
-- Mandatory updates present `Upgrade Now` in an interactive terminal, invoke npm with an argument array and no shell interpolation, then stop cleanly so the customer can start `codexclaude` again.
+- Version `2.0.25` is forced by the backend minimum version and older clients must show an update-required message.
+- Mandatory updates present `Upgrade Now` in an interactive terminal, invoke npm with an argument array and no shell interpolation, then relaunch the requested action automatically.
+- The npm package manifest exposes only `codexclaude`, preventing npm from colliding with a native `codex` or `claude` command before postinstall runs.
+- Global installation creates optional `codex` and `claude` aliases only when no existing command is present in the npm prefix or anywhere on `PATH`; native clients must never be overwritten.
 
 ## Provider Config
 
@@ -44,13 +46,13 @@ The launcher writes a model provider named `codexapi`:
 ## Runtime Defaults
 
 - Default model: `gpt-5.6` displayed as `GPT-5.6`
-- Supported launcher choices: `gpt-5.6`, `gpt-5.6-sol-max`, `gpt-5.6-sol-ultra`, `gpt-5.6-sol`, `gpt-5.5`, `claude-opus-4-8`, `claude-sonnet-5`, and `claude-fable-5`
+- Supported launcher choices: `gpt-5.6`, `gpt-5.6-sol-max`, `gpt-5.6-sol-ultra`, `gpt-5.6-sol`, `gpt-5.5`, `claude-opus-4-8`, `claude-sonnet-5`, `claude-fable-5`, and `gpt-5.6-terra`
 - Default reasoning effort displayed locally: `xhigh`; SOL Max and SOL Ultra retain their explicit premium labels.
 - Reasoning hint sent in launcher env: model-specific
 - Approval policy: `never`
 - Sandbox mode: `danger-full-access`
 - Display wording for permissions: `Full Access` in launcher-owned copy
-- Local model catalog: `~/.codexclaude/model_catalog.json`; this keeps the native `/model` picker limited to the supported choices and prevents fallback metadata warnings for GPT-5.6 SOL, SOL Max, SOL Ultra, Opus 4.8, Sonnet 5, and Fable 5.
+- Local model catalog: `~/.codexclaude/model_catalog.json`; this keeps the native `/model` picker limited to the supported choices and prevents fallback metadata warnings for GPT-5.6 Terra, SOL, SOL Max, SOL Ultra, Opus 4.8, Sonnet 5, and Fable 5.
 - Service tier: omitted by default; `/fast` remains user-controlled and billed server-side when active.
 - TUI status line: `model-with-reasoning`, `fast-mode`, `current-dir`
 - Fable 5 stays visible to the user while the backend applies its server-managed route and billing policy.
@@ -63,7 +65,7 @@ Before launching the runtime, the launcher calls `/api/v1/wallet/status`, then `
 Expected status line:
 
 ```text
-MagnetAPI.org Codex CLI v2.0.24 · gpt-5.6 xhigh · ~/project · Wallet $20.00
+MagnetAPI.org Codex CLI v2.0.26 · gpt-5.6 xhigh · ~/project · Wallet $20.00
 ```
 
 ## Upgrade Checklist
@@ -81,8 +83,9 @@ When updating the bundled runtime:
 9. Keep `clearUpstreamUpdateCache()` deleting `~/.codex/version.json`.
 10. Keep direct platform binary launch and do not fall back to the upstream npm wrapper.
 11. Keep update checks limited to `/api/v1/codexclaude/version` and `@codexapi/codexclaude` npm metadata.
-12. Keep the interactive `Upgrade Now` flow installing `@codexapi/codexclaude@latest` without a shell.
-13. Keep the managed `MODELS` map and local model catalog, including SOL Max and SOL Ultra.
-14. Keep bearer username auth and the `X-CodexAPI-*` headers.
-15. Update `README.md`, `CUSTOMIZATIONS.md`, and `codexclaude.md`.
-16. Run `node --check bin/codexclaude.js`, a temporary-home setup test, `npm pack --dry-run`, and endpoint validation before publishing.
+12. Keep the interactive `Upgrade Now` flow installing `@codexapi/codexclaude@latest` without a shell and relaunching automatically.
+13. Keep `codexclaude` as the only manifest-owned command and preserve the conditional, non-overwriting `codex` and `claude` postinstall aliases.
+14. Keep the managed `MODELS` map and local model catalog, including Terra, SOL Max, and SOL Ultra.
+15. Keep bearer username auth and the `X-CodexAPI-*` headers.
+16. Update `README.md`, `CUSTOMIZATIONS.md`, and `codexclaude.md`.
+17. Run syntax checks, temporary-home setup, alias-preservation tests, `npm pack --dry-run`, and endpoint validation before publishing.

package/README.md

@@ -1,8 +1,8 @@
 # codexclaude
 
-`codexclaude` installs the MagnetAPI.org Codex CLI for customers who want one coding CLI that can use GPT-5.6, GPT-5.6 SOL, GPT-5.6 SOL Max, GPT-5.6 SOL Ultra, ChatGPT-5.5, Opus 4.8, Sonnet 5, or Fable 5 against the same Token Wallet.
+`codexclaude` installs the MagnetAPI.org Codex CLI for customers who want one coding CLI that can use GPT-5.6, GPT-5.6 Terra, GPT-5.6 SOL, GPT-5.6 SOL Max, GPT-5.6 SOL Ultra, ChatGPT-5.5, Opus 4.8, Sonnet 5, or Fable 5 against the same Token Wallet.
 
-Version `2.0.24` is a required client sync release. It bundles official Codex runtime dependency `@openai/codex@0.144.4`, launches the platform-native runtime binary directly, disables upstream OpenAI update prompts, and applies account, wallet, model, Full Access, GPT-5.6/xhigh defaults, and managed model metadata before each coding session starts. Model menus no longer display wallet multiplier notices; billing remains managed by the server.
+Version `2.0.26` fixes upgrades on systems that already have a native `codex` or `claude` command. It bundles official Codex runtime dependency `@openai/codex@0.145.0`, launches the platform-native runtime binary directly, disables upstream OpenAI update prompts, and applies account, wallet, model, Full Access, GPT-5.6/xhigh defaults, and managed model metadata before each coding session starts.
 
 ## Install Or Update
 
@@ -16,7 +16,7 @@ This does not delete local session history. The update replaces the `codexclaude
 
 The launcher checks CodexAPI.pro's managed version endpoint and the `@codexapi/codexclaude` npm package metadata only. It must never check `@openai/codex` npm metadata or OpenAI GitHub releases for customer update prompts.
 
-Version `2.0.24` is currently enforced as the minimum supported version. A compatible older launcher presents `Upgrade Now`; selecting it installs `@codexapi/codexclaude@latest`, confirms completion, and asks the customer to start `codexclaude` again. Non-interactive terminals print the same npm command instead of hanging for input.
+Version `2.0.25` is currently enforced as the minimum supported version. A compatible older launcher presents `Upgrade Now`; selecting it installs `@codexapi/codexclaude@latest` and relaunches the requested action automatically. Non-interactive terminals print the same npm command instead of hanging for input.
 
 ## First Login
 
@@ -44,7 +44,17 @@ Switch model:
 codexclaude model
 ```
 
-Available model labels are `GPT-5.6`, `GPT-5.6 SOL Max`, `GPT-5.6 SOL Ultra`, `GPT-5.6 SOL`, `ChatGPT-5.5`, `Opus 4.8`, `Sonnet 5`, and `Fable 5`. All models use a Responses-compatible endpoint and the same customer Token Wallet.
+Available model labels are `GPT-5.6`, `GPT-5.6 SOL Max`, `GPT-5.6 SOL Ultra`, `GPT-5.6 SOL`, `ChatGPT-5.5`, `Opus 4.8`, `Sonnet 5`, `Fable 5`, and `GPT-5.6 Terra`. All models use a Responses-compatible endpoint and the same customer Token Wallet.
+
+## Launch Commands
+
+The npm package owns only the collision-free `codexclaude` command. During a global install, its postinstall step creates optional `codex` and `claude` aliases only when those command names are unused. Native Codex CLI and Claude Code commands are always preserved. This avoids npm `EEXIST` failures and never requires `--force`.
+
+```bash
+codexclaude
+codex
+claude
+```
 
 Show current launcher changes:
 
@@ -57,17 +67,17 @@ codexclaude changelog
 Before launching the coding runtime, the app prints a compact status line like:
 
 ```text
-MagnetAPI.org Codex CLI v2.0.24 · gpt-5.6 xhigh · ~/project · Wallet $20.00
+MagnetAPI.org Codex CLI v2.0.26 · gpt-5.6 xhigh · ~/project · Wallet $20.00
 ```
 
 ## Preserved Customizations
 
 - Dashboard Username or Email Address plus password login for CodexAPI.pro, ChatPlus.chat, MyAPI.world, and MagnetAPI.org.
-- GPT-5.6, GPT-5.6 SOL Max, GPT-5.6 SOL Ultra, GPT-5.6 SOL, ChatGPT-5.5, Opus 4.8, Sonnet 5, or Fable 5 model selection, with GPT-5.6/xhigh as the default.
+- GPT-5.6, GPT-5.6 Terra, GPT-5.6 SOL Max, GPT-5.6 SOL Ultra, GPT-5.6 SOL, ChatGPT-5.5, Opus 4.8, Sonnet 5, or Fable 5 model selection, with GPT-5.6/xhigh as the default.
 - Service-specific Responses-compatible provider for the dashboard account that logged in.
 - Full Access defaults: approval policy `never` and sandbox mode `danger-full-access`.
 - Model-specific visible reasoning in the local UI while the API server keeps upstream runtime effort server-managed.
-- A local `~/.codexclaude/model_catalog.json` file so the native `/model` picker lists only the supported MagnetAPI.org Codex CLI choices, including SOL Max and SOL Ultra.
+- A local `~/.codexclaude/model_catalog.json` file so the native `/model` picker lists only the supported MagnetAPI.org Codex CLI choices, including Terra, SOL Max, and SOL Ultra.
 - No default fast service tier. Fast mode is billed only when the user enables it inside the client.
 - Token Wallet balance lookup before launch without exposing separate `status` or `usage` launcher commands.
 - Backend-identifying request headers so the API can enforce account and plan rules server-side.

package/bin/codexclaude.js

@@ -7,11 +7,13 @@ import { homedir } from "node:os";
 import path from "node:path";
 import readline from "node:readline/promises";
 import { stdin as input, stdout as output } from "node:process";
+import { fileURLToPath } from "node:url";
+import { installSafeCommandAliases } from "../scripts/install-safe-aliases.js";
 
 const require = createRequire(import.meta.url);
 
-const APP_VERSION = "2.0.24";
-const CODEX_VERSION = "0.144.4";
+const APP_VERSION = "2.0.26";
+const CODEX_VERSION = "0.145.0";
 const APP_DISPLAY_NAME = "MagnetAPI.org Codex CLI";
 const DEFAULT_MODEL_ID = "gpt-5.6";
 const DEFAULT_DISPLAY_REASONING_EFFORT = "xhigh";
@@ -120,10 +122,17 @@ const MODELS = {
     aliases: ["8", "fable", "fable-5", "fabel", "fabel-5", "claude-fable-5", "claude-fabel-5"],
     premium: true,
   },
+  "gpt-5.6-terra": {
+    id: "gpt-5.6-terra",
+    label: "GPT-5.6 Terra",
+    aliases: ["9", "terra", "gpt-5.6-terra", "gpt56-terra"],
+    reasoningEffort: "xhigh",
+  },
 };
 
 async function main() {
   ensureExecutable();
+  ensureSafeCommandAliases();
   const [command = "start", ...args] = process.argv.slice(2);
   if (["-v", "--version", "version"].includes(command)) {
     console.log(`${APP_DISPLAY_NAME} v${APP_VERSION}`);
@@ -177,7 +186,7 @@ ${APP_DISPLAY_NAME} v${APP_VERSION}
 
 Commands:
   codexclaude login       Login with dashboard username/email and password
-  codexclaude model       Select GPT-5.6, SOL modes, Opus 4.8, Sonnet 5, or Fable 5
+  codexclaude model       Select GPT-5.6, Terra, SOL modes, Opus 4.8, Sonnet 5, or Fable 5
   codexclaude changelog   Show the latest CodexAPI.pro launcher changes
   codexclaude setup       Rewrite ~/.codex/config.toml with Full Access defaults
   codexclaude start       Start ${APP_DISPLAY_NAME} with --search
@@ -476,7 +485,20 @@ async function runMandatoryUpgrade(metadata) {
         `Hosted fallback: ${HOSTED_UPDATE_COMMAND}`,
     );
   }
-  console.log(`\nUpgrade complete. Start ${APP_DISPLAY_NAME} again by running: codexclaude`);
+  console.log(`\nUpgrade complete. Restarting ${APP_DISPLAY_NAME} now...`);
+  const relaunchArgs = process.argv.slice(2);
+  const relaunchCommand = process.platform === "win32" ? "codexclaude.cmd" : "codexclaude";
+  try {
+    const relaunchExitCode = await spawnAndWait(relaunchCommand, relaunchArgs);
+    if (relaunchExitCode !== 0) {
+      throw new Error(`updated client exited with code ${relaunchExitCode}`);
+    }
+  } catch (error) {
+    throw new Error(
+      `The update installed successfully, but automatic restart failed: ${error.message}. ` +
+        "Run codexclaude to continue.",
+    );
+  }
 }
 
 async function spawnAndWait(command, args) {
@@ -774,6 +796,9 @@ function modelCatalogDescription(modelId) {
   if (modelId === "gpt-5.6-sol") {
     return "GPT-5.6 SOL native coding route with local coding tools and wallet billing.";
   }
+  if (modelId === "gpt-5.6-terra") {
+    return "GPT-5.6 Terra coding route with local coding tools and wallet billing.";
+  }
   if (modelId === "claude-opus-4-8") {
     return "Opus 4.8 coding route with local coding tools and wallet billing.";
   }
@@ -1001,6 +1026,9 @@ function modelStatusName(model) {
   if (model === "gpt-5.6-sol") {
     return "gpt-5.6-sol";
   }
+  if (model === "gpt-5.6-terra") {
+    return "gpt-5.6-terra";
+  }
   if (model === "claude-opus-4-8") {
     return "opus-4.8";
   }
@@ -1040,6 +1068,9 @@ function normalizeConfig(config) {
   if (["gpt-5-6-sol", "sol"].includes(normalized.model)) {
     normalized.model = "gpt-5.6-sol";
   }
+  if (["gpt-5-6-terra", "gpt56-terra", "terra"].includes(normalized.model)) {
+    normalized.model = "gpt-5.6-terra";
+  }
   if (["gpt-5-6", "gpt56", "chatgpt-5.6", "chatgpt-5-6"].includes(normalized.model)) {
     normalized.model = "gpt-5.6";
   }
@@ -1186,6 +1217,36 @@ function ensureExecutable() {
   }
 }
 
+function ensureSafeCommandAliases() {
+  const prefix = installedGlobalPrefix();
+  if (!prefix) {
+    return;
+  }
+  installSafeCommandAliases({
+    isGlobalInstall: true,
+    prefix,
+    quiet: true,
+  });
+}
+
+function installedGlobalPrefix() {
+  const packageRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+  const segments = packageRoot.split(path.sep);
+  const nodeModulesIndex = segments.lastIndexOf("node_modules");
+  if (nodeModulesIndex < 0 || nodeModulesIndex >= segments.length - 2) {
+    return null;
+  }
+  const scope = segments[nodeModulesIndex + 1];
+  if (scope !== "@codexapi") {
+    return null;
+  }
+  const prefixSegments = process.platform === "win32"
+    ? segments.slice(0, nodeModulesIndex)
+    : segments.slice(0, Math.max(0, nodeModulesIndex - 1));
+  const prefix = prefixSegments.join(path.sep) || path.parse(packageRoot).root;
+  return prefix;
+}
+
 main().catch((error) => {
   console.error(`codexclaude: ${error.message}`);
   process.exit(1);

package/codexclaude.md

@@ -5,12 +5,12 @@ This file is the durable handoff for the `@codexapi/codexclaude` package in `/ro
 ## Current Release
 
 - Package name: `@codexapi/codexclaude`
-- Launcher version: `2.0.24`
+- Launcher version: `2.0.26`
 - Customer-facing app name: `MagnetAPI.org Codex CLI`
-- Bundled runtime dependency: `@openai/codex@0.144.4`
+- Bundled runtime dependency: `@openai/codex@0.145.0`
 - Required install command: `npm install -g @codexapi/codexclaude@latest`
-- Hosted fallback: `npm install -g https://codexapi.pro/downloads/codexapi-codexclaude-2.0.24.tgz`
-- Backend minimum version: `2.0.24`
+- Hosted fallback: `npm install -g https://codexapi.pro/downloads/codexapi-codexclaude-2.0.26.tgz`
+- Backend minimum version: `2.0.25`
 - Default visible model: `GPT-5.6`
 - Default model slug: `gpt-5.6`
 - Default visible reasoning effort: `xhigh`; premium SOL Max and SOL Ultra retain their explicit `max` and `ultra` labels.
@@ -25,13 +25,13 @@ This file is the durable handoff for the `@codexapi/codexclaude` package in `/ro
 The launcher must present itself as:
 
 ```text
-MagnetAPI.org Codex CLI v2.0.24
+MagnetAPI.org Codex CLI v2.0.26
 ```
 
 Normal pre-launch status should look like:
 
 ```text
-MagnetAPI.org Codex CLI v2.0.24 · gpt-5.6 xhigh · ~/project · Wallet $20.00
+MagnetAPI.org Codex CLI v2.0.26 · gpt-5.6 xhigh · ~/project · Wallet $20.00
 ```
 
 Do not show OpenAI update notices, OpenAI npm install commands, OpenAI release links, or the upstream runtime version in launcher-owned output. The package still depends on the official runtime internally, but the customer update surface is ours.
@@ -46,6 +46,7 @@ The launcher command `codexclaude model` must list these customer-visible models
 - `claude-opus-4-8` displayed as `Opus 4.8`
 - `claude-sonnet-5` displayed as `Sonnet 5`
 - `claude-fable-5` displayed as `Fable 5`
+- `gpt-5.6-terra` displayed as `GPT-5.6 Terra`
 
 GPT-5.6 must be the default when a new config is created or a legacy config contains an unsupported Gemini/Deepseek value. It is displayed with `xhigh` reasoning while the API servers execute Codex-family requests through the managed GPT-5.6 Terra/xhigh signed-in target. The selected model slug must stay in `~/.codex/config.toml`; do not rewrite customer-facing model selections locally. `gpt-5.6-sol-max` and `gpt-5.6-sol-ultra` remain distinct for customer choice, usage display, and wallet billing.
 
@@ -56,7 +57,9 @@ GPT-5.6 must be the default when a new config is created or a legacy config cont
 - `https://codexapi.pro/api/v1/codexclaude/version`
 - `https://registry.npmjs.org/@codexapi%2Fcodexclaude/latest`
 
-It must not check `@openai/codex` npm metadata, OpenAI GitHub releases, or any upstream OpenAI update endpoint. Version `2.0.24` is a forced release: the backend `minimumVersion` equals `2.0.24`. Compatible older launchers offer an interactive `Upgrade Now` action that invokes `npm install -g @codexapi/codexclaude@latest` without shell interpolation. Non-interactive terminals print the exact update command and exit instead of waiting for input. After a successful update, the old process exits and tells the customer to start `codexclaude` again.
+It must not check `@openai/codex` npm metadata, OpenAI GitHub releases, or any upstream OpenAI update endpoint. Version `2.0.25` remains the enforced minimum release while `2.0.26` is the current latest release. Compatible older launchers offer an interactive `Upgrade Now` action that invokes `npm install -g @codexapi/codexclaude@latest` without shell interpolation. Non-interactive terminals print the exact update command and exit instead of waiting for input. After a successful interactive update, the launcher starts the requested action again automatically.
+
+The npm package manifest owns only `codexclaude`. This is deliberate: npm creates manifest binaries before postinstall, so claiming `codex` there causes an `EEXIST` upgrade failure on machines with native Codex CLI. During a global installation, postinstall may create optional `codex` and `claude` aliases only when neither the target npm prefix nor any directory on `PATH` already contains the command. Existing native clients are preserved and no install path requires `--force`.
 
 The launcher writes `check_for_update_on_startup = false` and removes `~/.codex/version.json` so the bundled runtime does not display stale upstream update prompts. The launcher also resolves the platform-native runtime binary directly from the optional package (`@openai/codex-linux-x64`, `@openai/codex-darwin-arm64`, and so on). Do not fall back to the upstream npm wrapper, because that wrapper can re-enable upstream managed update behavior.
 
@@ -84,7 +87,7 @@ base_url = "<service Responses URL>"
 experimental_bearer_token = "<customer System Token/API username>"
 wire_api = "responses"
 supports_websockets = false
-http_headers = { "X-CodexAPI-Client" = "codexclaude", "X-CodexAPI-Client-Version" = "2.0.24", "X-CodexAPI-Selected-Model" = "<selected model>" }
+http_headers = { "X-CodexAPI-Client" = "codexclaude", "X-CodexAPI-Client-Version" = "2.0.26", "X-CodexAPI-Selected-Model" = "<selected model>" }
 
 [tui]
 status_line = ["model-with-reasoning", "fast-mode", "current-dir"]
@@ -92,7 +95,7 @@ status_line_use_colors = true
 terminal_title = ["project-name", "model-with-reasoning", "run-state"]
 ```
 
-The generated model catalog must contain full metadata for every supported slug, including `gpt-5.6`, `gpt-5.6-sol-max`, and `gpt-5.6-sol-ultra`. This prevents fallback metadata warnings such as:
+The generated model catalog must contain full metadata for every supported slug, including `gpt-5.6`, `gpt-5.6-terra`, `gpt-5.6-sol-max`, and `gpt-5.6-sol-ultra`. This prevents fallback metadata warnings such as:
 
 ```text
 Model metadata for `claude-opus-4-8` not found. Defaulting to fallback metadata; this can degrade performance and cause issues.
@@ -132,12 +135,13 @@ When updating the bundled runtime dependency:
 8. Preserve Full Access defaults and the local model catalog.
 9. Preserve direct platform-native binary launch.
 10. Preserve update checks through our version endpoint and `@codexapi/codexclaude` npm metadata only.
-11. Preserve the interactive `Upgrade Now` flow and shell-free npm invocation.
-12. Preserve deletion of `~/.codex/version.json` and `check_for_update_on_startup = false`.
-13. Update customer setup scripts on CodexAPI.pro, ChatPlus.chat, MyAPI.world, MagnetAPI.org, and VIP pages to use the current release.
-14. Update backend `CODEXCLAUDE_LATEST_VERSION`, `CODEXCLAUDE_MIN_VERSION`, and hosted tarball URL.
-15. Update this file, `README.md`, and `CUSTOMIZATIONS.md`.
-16. Run validation and publish.
+11. Preserve the interactive `Upgrade Now` flow, shell-free npm invocation, and automatic relaunch.
+12. Preserve `codexclaude` as the only manifest-owned binary and the conditional native-client-safe `codex` and `claude` postinstall aliases.
+13. Preserve deletion of `~/.codex/version.json` and `check_for_update_on_startup = false`.
+14. Update customer setup scripts on CodexAPI.pro, ChatPlus.chat, MyAPI.world, MagnetAPI.org, and VIP pages to use the current release.
+15. Update backend `CODEXCLAUDE_LATEST_VERSION`, `CODEXCLAUDE_MIN_VERSION`, and hosted tarball URL.
+16. Update this file, `README.md`, and `CUSTOMIZATIONS.md`.
+17. Run validation and publish.
 
 ## Validation Commands
 
@@ -155,7 +159,7 @@ tmp_home="$(mktemp -d)"
 mkdir -p "$tmp_home/.codexclaude"
 cat > "$tmp_home/.codexclaude/config.json" <<'JSON'
 {
-  "version": "2.0.24",
+  "version": "2.0.26",
   "serviceId": "codexapi",
   "serviceLabel": "CodexAPI.pro",
   "apiOrigin": "https://codexapi.pro",
@@ -187,15 +191,29 @@ Verify the generated model catalog contains only:
 - `claude-opus-4-8`
 - `claude-sonnet-5`
 - `claude-fable-5`
+- `gpt-5.6-terra`
 
 After packaging, copy the tarball to the public downloads directories, restart the backend, and verify:
 
 ```bash
 curl -fsS "https://codexapi.pro/api/v1/codexclaude/version?current=2.0.17"
-curl -fsSI "https://codexapi.pro/downloads/codexapi-codexclaude-2.0.24.tgz"
+curl -fsSI "https://codexapi.pro/downloads/codexapi-codexclaude-2.0.26.tgz"
 ```
 
-The version endpoint must report `latestVersion = 2.0.24`, `minimumVersion = 2.0.24`, and `updateRequired = true` for old clients.
+The version endpoint must report `latestVersion = 2.0.26`, `minimumVersion = 2.0.25`, and `updateRequired = true` only for clients below the minimum.
+
+## Version 2.0.26 Changes
+
+- Fixed npm `EEXIST` upgrades on systems that already have native Codex CLI installed.
+- Limited package-manifest ownership to `codexclaude`.
+- Kept optional `codex` and `claude` convenience aliases without replacing native clients.
+
+## Version 2.0.25 Changes
+
+- Updated the bundled runtime dependency to `@openai/codex@0.145.0`.
+- Added `GPT-5.6 Terra` to the managed `/model` catalog.
+- Added `codex` as a managed launch alias and a conditional `claude` alias that preserves native Claude Code.
+- Changed mandatory updates to relaunch the requested action automatically after installation.
 
 ## Version 2.0.24 Changes
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codexapi/codexclaude",
-  "version": "2.0.24",
+  "version": "2.0.26",
   "description": "MagnetAPI.org Codex CLI for GPT-5.6, Opus 4.8, Sonnet 5, and Fable 5.",
   "license": "Apache-2.0",
   "type": "module",
@@ -9,15 +9,20 @@
   },
   "files": [
     "bin",
+    "scripts",
     "README.md",
     "CUSTOMIZATIONS.md",
     "codexclaude.md"
   ],
+  "scripts": {
+    "postinstall": "node scripts/install-safe-aliases.js",
+    "test": "node --test test/*.test.js"
+  },
   "engines": {
     "node": ">=20"
   },
   "dependencies": {
-    "@openai/codex": "0.144.4"
+    "@openai/codex": "0.145.0"
   },
   "publishConfig": {
     "access": "public"

package/scripts/install-safe-aliases.js

@@ -0,0 +1,169 @@
+#!/usr/bin/env node
+
+import {
+  chmodSync,
+  existsSync,
+  lstatSync,
+  mkdirSync,
+  symlinkSync,
+  writeFileSync,
+} from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+const packageRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+const launcherPath = path.join(packageRoot, "bin", "codexclaude.js");
+
+export function installSafeCommandAliases(options = {}) {
+  return {
+    status: "complete",
+    aliases: {
+      codex: installSafeAlias("codex", options),
+      claude: installSafeAlias("claude", options),
+    },
+  };
+}
+
+export function installSafeCodexAlias(options = {}) {
+  return installSafeAlias("codex", options);
+}
+
+export function installSafeClaudeAlias(options = {}) {
+  return installSafeAlias("claude", options);
+}
+
+function installSafeAlias(command, options = {}) {
+  const isGlobalInstall =
+    options.isGlobalInstall ??
+    String(process.env.npm_config_global || "").toLowerCase() === "true";
+  const quiet = Boolean(options.quiet);
+  if (!isGlobalInstall || isTruthy(process.env.CODEXCLAUDE_SKIP_COMMAND_ALIASES)) {
+    return { status: "skipped" };
+  }
+
+  const prefix = String(options.prefix || process.env.npm_config_prefix || "").trim();
+  if (!prefix) {
+    if (!quiet) {
+      console.warn(`codexclaude: skipped the optional ${command} alias because npm did not provide its global prefix.`);
+    }
+    return { status: "missing-prefix" };
+  }
+
+  const binDir = process.platform === "win32" ? prefix : path.join(prefix, "bin");
+  const aliasPaths = commandAliasPaths(binDir, command);
+  const existingCommand = findCommandOnPath(command, aliasPaths);
+  const existingAlias = aliasPaths.find((candidate) => existsSync(candidate));
+
+  if (existingCommand || existingAlias) {
+    const preserved = existingCommand || existingAlias;
+    if (!quiet) {
+      console.log(`codexclaude: preserved the existing ${command} command at ${preserved}.`);
+    }
+    return { status: "preserved", path: preserved };
+  }
+
+  try {
+    mkdirSync(binDir, { recursive: true });
+    if (process.platform === "win32") {
+      installWindowsAliases(aliasPaths);
+    } else {
+      symlinkSync(launcherPath, aliasPaths[0]);
+      chmodSync(aliasPaths[0], 0o755);
+    }
+    if (!quiet) {
+      console.log(`codexclaude: installed the optional ${command} launch alias.`);
+    }
+    return { status: "installed", paths: aliasPaths.filter((candidate) => existsSync(candidate)) };
+  } catch (error) {
+    if (!quiet) {
+      console.warn(`codexclaude: could not install the optional ${command} alias (${error.message}).`);
+    }
+    return { status: "failed", error: error.message };
+  }
+}
+
+function commandAliasPaths(directory, command) {
+  if (process.platform === "win32") {
+    return [
+      path.join(directory, command),
+      path.join(directory, `${command}.cmd`),
+      path.join(directory, `${command}.ps1`),
+      path.join(directory, `${command}.exe`),
+    ];
+  }
+  return [path.join(directory, command)];
+}
+
+function findCommandOnPath(command, ignoredPaths) {
+  const ignored = new Set(ignoredPaths.map(normalizePath));
+  const pathEntries = String(process.env.PATH || "")
+    .split(path.delimiter)
+    .map((entry) => entry.trim())
+    .filter(Boolean);
+  const names =
+    process.platform === "win32"
+      ? [command, `${command}.exe`, `${command}.cmd`, `${command}.bat`, `${command}.ps1`]
+      : [command];
+  for (const entry of pathEntries) {
+    for (const name of names) {
+      const candidate = path.resolve(entry, name);
+      if (ignored.has(normalizePath(candidate)) || !existsSync(candidate)) {
+        continue;
+      }
+      try {
+        if (lstatSync(candidate).isFile() || lstatSync(candidate).isSymbolicLink()) {
+          return candidate;
+        }
+      } catch {
+        // Ignore a path entry that disappears while npm is installing.
+      }
+    }
+  }
+  return null;
+}
+
+function installWindowsAliases(paths) {
+  const [shellPath, cmdPath, ps1Path] = paths;
+  const node = quoteForCmd(process.execPath);
+  const launcher = quoteForCmd(launcherPath);
+  writeFileSync(
+    shellPath,
+    `#!/bin/sh\nexec "${escapeForShell(process.execPath)}" "${escapeForShell(launcherPath)}" "$@"\n`,
+    { encoding: "utf8", mode: 0o755 },
+  );
+  writeFileSync(
+    cmdPath,
+    `@ECHO off\r\n${node} ${launcher} %*\r\n`,
+    { encoding: "utf8" },
+  );
+  writeFileSync(
+    ps1Path,
+    `& '${escapeForPowerShell(process.execPath)}' '${escapeForPowerShell(launcherPath)}' @args\nexit $LASTEXITCODE\n`,
+    { encoding: "utf8" },
+  );
+}
+
+function normalizePath(value) {
+  const resolved = path.resolve(value);
+  return process.platform === "win32" ? resolved.toLowerCase() : resolved;
+}
+
+function quoteForCmd(value) {
+  return `"${String(value).replaceAll('"', '""')}"`;
+}
+
+function escapeForPowerShell(value) {
+  return String(value).replaceAll("'", "''");
+}
+
+function escapeForShell(value) {
+  return String(value).replaceAll("\\", "\\\\").replaceAll('"', '\\"').replaceAll("$", "\\$").replaceAll("`", "\\`");
+}
+
+function isTruthy(value) {
+  return ["1", "true", "yes", "on"].includes(String(value || "").trim().toLowerCase());
+}
+
+if (path.resolve(process.argv[1] || "") === fileURLToPath(import.meta.url)) {
+  installSafeCommandAliases();
+}