@codexapi/codexclaude 2.0.25 → 2.0.26

package/CUSTOMIZATIONS.md

@@ -5,10 +5,10 @@
 ## Runtime
 
 - Customer-facing app name: `MagnetAPI.org Codex CLI`
-- Local launcher version: `2.0.25`
+- Local launcher version: `2.0.26`
 - Bundled official runtime dependency: `@openai/codex@0.145.0`
 - Required install command: `npm install -g @codexapi/codexclaude@latest`
-- Hosted fallback: `npm install -g https://codexapi.pro/downloads/codexapi-codexclaude-2.0.25.tgz`
+- Hosted fallback: `npm install -g https://codexapi.pro/downloads/codexapi-codexclaude-2.0.26.tgz`
 - Bundled runtime version is managed internally and must not be used for customer update prompts.
 - Launcher update checks may call the CodexAPI.pro version endpoint and `@codexapi/codexclaude` npm metadata only.
 - The launcher must never check `@openai/codex` npm metadata or OpenAI GitHub releases for update notices.
@@ -27,8 +27,8 @@
 - Does not expose separate `codexclaude status` or `codexclaude usage` commands; wallet information remains a compact pre-launch line.
 - Version `2.0.25` is forced by the backend minimum version and older clients must show an update-required message.
 - Mandatory updates present `Upgrade Now` in an interactive terminal, invoke npm with an argument array and no shell interpolation, then relaunch the requested action automatically.
-- The npm package exposes `codexclaude` and `codex` as managed launch commands.
-- Global installation creates `claude` only when no existing command is present anywhere on `PATH`; native Claude Code must never be overwritten.
+- The npm package manifest exposes only `codexclaude`, preventing npm from colliding with a native `codex` or `claude` command before postinstall runs.
+- Global installation creates optional `codex` and `claude` aliases only when no existing command is present in the npm prefix or anywhere on `PATH`; native clients must never be overwritten.
 
 ## Provider Config
 
@@ -65,7 +65,7 @@ Before launching the runtime, the launcher calls `/api/v1/wallet/status`, then `
 Expected status line:
 
 ```text
-MagnetAPI.org Codex CLI v2.0.25 · gpt-5.6 xhigh · ~/project · Wallet $20.00
+MagnetAPI.org Codex CLI v2.0.26 · gpt-5.6 xhigh · ~/project · Wallet $20.00
 ```
 
 ## Upgrade Checklist
@@ -84,7 +84,7 @@ When updating the bundled runtime:
 10. Keep direct platform binary launch and do not fall back to the upstream npm wrapper.
 11. Keep update checks limited to `/api/v1/codexclaude/version` and `@codexapi/codexclaude` npm metadata.
 12. Keep the interactive `Upgrade Now` flow installing `@codexapi/codexclaude@latest` without a shell and relaunching automatically.
-13. Keep `codex` as a package alias and the conditional, non-overwriting `claude` postinstall alias.
+13. Keep `codexclaude` as the only manifest-owned command and preserve the conditional, non-overwriting `codex` and `claude` postinstall aliases.
 14. Keep the managed `MODELS` map and local model catalog, including Terra, SOL Max, and SOL Ultra.
 15. Keep bearer username auth and the `X-CodexAPI-*` headers.
 16. Update `README.md`, `CUSTOMIZATIONS.md`, and `codexclaude.md`.

package/README.md

@@ -2,7 +2,7 @@
 
 `codexclaude` installs the MagnetAPI.org Codex CLI for customers who want one coding CLI that can use GPT-5.6, GPT-5.6 Terra, GPT-5.6 SOL, GPT-5.6 SOL Max, GPT-5.6 SOL Ultra, ChatGPT-5.5, Opus 4.8, Sonnet 5, or Fable 5 against the same Token Wallet.
 
-Version `2.0.25` is a required client sync release. It bundles official Codex runtime dependency `@openai/codex@0.145.0`, launches the platform-native runtime binary directly, disables upstream OpenAI update prompts, and applies account, wallet, model, Full Access, GPT-5.6/xhigh defaults, and managed model metadata before each coding session starts. Model menus no longer display wallet multiplier notices; billing remains managed by the server.
+Version `2.0.26` fixes upgrades on systems that already have a native `codex` or `claude` command. It bundles official Codex runtime dependency `@openai/codex@0.145.0`, launches the platform-native runtime binary directly, disables upstream OpenAI update prompts, and applies account, wallet, model, Full Access, GPT-5.6/xhigh defaults, and managed model metadata before each coding session starts.
 
 ## Install Or Update
 
@@ -48,7 +48,7 @@ Available model labels are `GPT-5.6`, `GPT-5.6 SOL Max`, `GPT-5.6 SOL Ultra`, `G
 
 ## Launch Commands
 
-The managed package installs `codexclaude` and `codex` as equivalent launch commands. During a global install, it also creates a `claude` alias only when no existing `claude` command can be found. If official Claude Code is already installed, its native `claude` command is preserved.
+The npm package owns only the collision-free `codexclaude` command. During a global install, its postinstall step creates optional `codex` and `claude` aliases only when those command names are unused. Native Codex CLI and Claude Code commands are always preserved. This avoids npm `EEXIST` failures and never requires `--force`.
 
 ```bash
 codexclaude
@@ -67,7 +67,7 @@ codexclaude changelog
 Before launching the coding runtime, the app prints a compact status line like:
 
 ```text
-MagnetAPI.org Codex CLI v2.0.25 · gpt-5.6 xhigh · ~/project · Wallet $20.00
+MagnetAPI.org Codex CLI v2.0.26 · gpt-5.6 xhigh · ~/project · Wallet $20.00
 ```
 
 ## Preserved Customizations

package/bin/codexclaude.js

@@ -8,11 +8,11 @@ import path from "node:path";
 import readline from "node:readline/promises";
 import { stdin as input, stdout as output } from "node:process";
 import { fileURLToPath } from "node:url";
-import { installSafeClaudeAlias } from "../scripts/install-safe-aliases.js";
+import { installSafeCommandAliases } from "../scripts/install-safe-aliases.js";
 
 const require = createRequire(import.meta.url);
 
-const APP_VERSION = "2.0.25";
+const APP_VERSION = "2.0.26";
 const CODEX_VERSION = "0.145.0";
 const APP_DISPLAY_NAME = "MagnetAPI.org Codex CLI";
 const DEFAULT_MODEL_ID = "gpt-5.6";
@@ -1222,7 +1222,7 @@ function ensureSafeCommandAliases() {
   if (!prefix) {
     return;
   }
-  installSafeClaudeAlias({
+  installSafeCommandAliases({
     isGlobalInstall: true,
     prefix,
     quiet: true,

package/codexclaude.md

@@ -5,11 +5,11 @@ This file is the durable handoff for the `@codexapi/codexclaude` package in `/ro
 ## Current Release
 
 - Package name: `@codexapi/codexclaude`
-- Launcher version: `2.0.25`
+- Launcher version: `2.0.26`
 - Customer-facing app name: `MagnetAPI.org Codex CLI`
 - Bundled runtime dependency: `@openai/codex@0.145.0`
 - Required install command: `npm install -g @codexapi/codexclaude@latest`
-- Hosted fallback: `npm install -g https://codexapi.pro/downloads/codexapi-codexclaude-2.0.25.tgz`
+- Hosted fallback: `npm install -g https://codexapi.pro/downloads/codexapi-codexclaude-2.0.26.tgz`
 - Backend minimum version: `2.0.25`
 - Default visible model: `GPT-5.6`
 - Default model slug: `gpt-5.6`
@@ -25,13 +25,13 @@ This file is the durable handoff for the `@codexapi/codexclaude` package in `/ro
 The launcher must present itself as:
 
 ```text
-MagnetAPI.org Codex CLI v2.0.25
+MagnetAPI.org Codex CLI v2.0.26
 ```
 
 Normal pre-launch status should look like:
 
 ```text
-MagnetAPI.org Codex CLI v2.0.25 · gpt-5.6 xhigh · ~/project · Wallet $20.00
+MagnetAPI.org Codex CLI v2.0.26 · gpt-5.6 xhigh · ~/project · Wallet $20.00
 ```
 
 Do not show OpenAI update notices, OpenAI npm install commands, OpenAI release links, or the upstream runtime version in launcher-owned output. The package still depends on the official runtime internally, but the customer update surface is ours.
@@ -57,9 +57,9 @@ GPT-5.6 must be the default when a new config is created or a legacy config cont
 - `https://codexapi.pro/api/v1/codexclaude/version`
 - `https://registry.npmjs.org/@codexapi%2Fcodexclaude/latest`
 
-It must not check `@openai/codex` npm metadata, OpenAI GitHub releases, or any upstream OpenAI update endpoint. Version `2.0.25` is a forced release: the backend `minimumVersion` equals `2.0.25`. Compatible older launchers offer an interactive `Upgrade Now` action that invokes `npm install -g @codexapi/codexclaude@latest` without shell interpolation. Non-interactive terminals print the exact update command and exit instead of waiting for input. After a successful interactive update, the launcher starts the requested action again automatically.
+It must not check `@openai/codex` npm metadata, OpenAI GitHub releases, or any upstream OpenAI update endpoint. Version `2.0.25` remains the enforced minimum release while `2.0.26` is the current latest release. Compatible older launchers offer an interactive `Upgrade Now` action that invokes `npm install -g @codexapi/codexclaude@latest` without shell interpolation. Non-interactive terminals print the exact update command and exit instead of waiting for input. After a successful interactive update, the launcher starts the requested action again automatically.
 
-The npm package owns `codexclaude` and `codex`. Its postinstall script may create a `claude` alias only during a global installation and only when neither the target npm prefix nor any directory on `PATH` already contains a Claude command. If native Claude Code exists, report that it was preserved and do not write any `claude` shim.
+The npm package manifest owns only `codexclaude`. This is deliberate: npm creates manifest binaries before postinstall, so claiming `codex` there causes an `EEXIST` upgrade failure on machines with native Codex CLI. During a global installation, postinstall may create optional `codex` and `claude` aliases only when neither the target npm prefix nor any directory on `PATH` already contains the command. Existing native clients are preserved and no install path requires `--force`.
 
 The launcher writes `check_for_update_on_startup = false` and removes `~/.codex/version.json` so the bundled runtime does not display stale upstream update prompts. The launcher also resolves the platform-native runtime binary directly from the optional package (`@openai/codex-linux-x64`, `@openai/codex-darwin-arm64`, and so on). Do not fall back to the upstream npm wrapper, because that wrapper can re-enable upstream managed update behavior.
 
@@ -87,7 +87,7 @@ base_url = "<service Responses URL>"
 experimental_bearer_token = "<customer System Token/API username>"
 wire_api = "responses"
 supports_websockets = false
-http_headers = { "X-CodexAPI-Client" = "codexclaude", "X-CodexAPI-Client-Version" = "2.0.25", "X-CodexAPI-Selected-Model" = "<selected model>" }
+http_headers = { "X-CodexAPI-Client" = "codexclaude", "X-CodexAPI-Client-Version" = "2.0.26", "X-CodexAPI-Selected-Model" = "<selected model>" }
 
 [tui]
 status_line = ["model-with-reasoning", "fast-mode", "current-dir"]
@@ -136,7 +136,7 @@ When updating the bundled runtime dependency:
 9. Preserve direct platform-native binary launch.
 10. Preserve update checks through our version endpoint and `@codexapi/codexclaude` npm metadata only.
 11. Preserve the interactive `Upgrade Now` flow, shell-free npm invocation, and automatic relaunch.
-12. Preserve `codex` as a package alias and the conditional native-Claude-safe postinstall alias.
+12. Preserve `codexclaude` as the only manifest-owned binary and the conditional native-client-safe `codex` and `claude` postinstall aliases.
 13. Preserve deletion of `~/.codex/version.json` and `check_for_update_on_startup = false`.
 14. Update customer setup scripts on CodexAPI.pro, ChatPlus.chat, MyAPI.world, MagnetAPI.org, and VIP pages to use the current release.
 15. Update backend `CODEXCLAUDE_LATEST_VERSION`, `CODEXCLAUDE_MIN_VERSION`, and hosted tarball URL.
@@ -159,7 +159,7 @@ tmp_home="$(mktemp -d)"
 mkdir -p "$tmp_home/.codexclaude"
 cat > "$tmp_home/.codexclaude/config.json" <<'JSON'
 {
-  "version": "2.0.25",
+  "version": "2.0.26",
   "serviceId": "codexapi",
   "serviceLabel": "CodexAPI.pro",
   "apiOrigin": "https://codexapi.pro",
@@ -197,10 +197,16 @@ After packaging, copy the tarball to the public downloads directories, restart t
 
 ```bash
 curl -fsS "https://codexapi.pro/api/v1/codexclaude/version?current=2.0.17"
-curl -fsSI "https://codexapi.pro/downloads/codexapi-codexclaude-2.0.25.tgz"
+curl -fsSI "https://codexapi.pro/downloads/codexapi-codexclaude-2.0.26.tgz"
 ```
 
-The version endpoint must report `latestVersion = 2.0.25`, `minimumVersion = 2.0.25`, and `updateRequired = true` for old clients.
+The version endpoint must report `latestVersion = 2.0.26`, `minimumVersion = 2.0.25`, and `updateRequired = true` only for clients below the minimum.
+
+## Version 2.0.26 Changes
+
+- Fixed npm `EEXIST` upgrades on systems that already have native Codex CLI installed.
+- Limited package-manifest ownership to `codexclaude`.
+- Kept optional `codex` and `claude` convenience aliases without replacing native clients.
 
 ## Version 2.0.25 Changes
 

package/package.json

@@ -1,12 +1,11 @@
 {
   "name": "@codexapi/codexclaude",
-  "version": "2.0.25",
+  "version": "2.0.26",
   "description": "MagnetAPI.org Codex CLI for GPT-5.6, Opus 4.8, Sonnet 5, and Fable 5.",
   "license": "Apache-2.0",
   "type": "module",
   "bin": {
-    "codexclaude": "bin/codexclaude.js",
-    "codex": "bin/codexclaude.js"
+    "codexclaude": "bin/codexclaude.js"
   },
   "files": [
     "bin",
@@ -16,7 +15,8 @@
     "codexclaude.md"
   ],
   "scripts": {
-    "postinstall": "node scripts/install-safe-aliases.js"
+    "postinstall": "node scripts/install-safe-aliases.js",
+    "test": "node --test test/*.test.js"
   },
   "engines": {
     "node": ">=20"

package/scripts/install-safe-aliases.js

@@ -14,7 +14,25 @@ import { fileURLToPath } from "node:url";
 const packageRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
 const launcherPath = path.join(packageRoot, "bin", "codexclaude.js");
 
+export function installSafeCommandAliases(options = {}) {
+  return {
+    status: "complete",
+    aliases: {
+      codex: installSafeAlias("codex", options),
+      claude: installSafeAlias("claude", options),
+    },
+  };
+}
+
+export function installSafeCodexAlias(options = {}) {
+  return installSafeAlias("codex", options);
+}
+
 export function installSafeClaudeAlias(options = {}) {
+  return installSafeAlias("claude", options);
+}
+
+function installSafeAlias(command, options = {}) {
   const isGlobalInstall =
     options.isGlobalInstall ??
     String(process.env.npm_config_global || "").toLowerCase() === "true";
@@ -26,20 +44,20 @@ export function installSafeClaudeAlias(options = {}) {
   const prefix = String(options.prefix || process.env.npm_config_prefix || "").trim();
   if (!prefix) {
     if (!quiet) {
-      console.warn("codexclaude: skipped the optional claude alias because npm did not provide its global prefix.");
+      console.warn(`codexclaude: skipped the optional ${command} alias because npm did not provide its global prefix.`);
     }
     return { status: "missing-prefix" };
   }
 
   const binDir = process.platform === "win32" ? prefix : path.join(prefix, "bin");
-  const aliasPaths = claudeAliasPaths(binDir);
-  const existingCommand = findCommandOnPath("claude", aliasPaths);
+  const aliasPaths = commandAliasPaths(binDir, command);
+  const existingCommand = findCommandOnPath(command, aliasPaths);
   const existingAlias = aliasPaths.find((candidate) => existsSync(candidate));
 
   if (existingCommand || existingAlias) {
     const preserved = existingCommand || existingAlias;
     if (!quiet) {
-      console.log(`codexclaude: preserved the existing native claude command at ${preserved}.`);
+      console.log(`codexclaude: preserved the existing ${command} command at ${preserved}.`);
     }
     return { status: "preserved", path: preserved };
   }
@@ -53,27 +71,27 @@ export function installSafeClaudeAlias(options = {}) {
       chmodSync(aliasPaths[0], 0o755);
     }
     if (!quiet) {
-      console.log("codexclaude: installed the optional claude launch alias; codex and codexclaude are also available.");
+      console.log(`codexclaude: installed the optional ${command} launch alias.`);
     }
     return { status: "installed", paths: aliasPaths.filter((candidate) => existsSync(candidate)) };
   } catch (error) {
     if (!quiet) {
-      console.warn(`codexclaude: could not install the optional claude alias (${error.message}).`);
+      console.warn(`codexclaude: could not install the optional ${command} alias (${error.message}).`);
     }
     return { status: "failed", error: error.message };
   }
 }
 
-function claudeAliasPaths(directory) {
+function commandAliasPaths(directory, command) {
   if (process.platform === "win32") {
     return [
-      path.join(directory, "claude"),
-      path.join(directory, "claude.cmd"),
-      path.join(directory, "claude.ps1"),
-      path.join(directory, "claude.exe"),
+      path.join(directory, command),
+      path.join(directory, `${command}.cmd`),
+      path.join(directory, `${command}.ps1`),
+      path.join(directory, `${command}.exe`),
     ];
   }
-  return [path.join(directory, "claude")];
+  return [path.join(directory, command)];
 }
 
 function findCommandOnPath(command, ignoredPaths) {
@@ -147,5 +165,5 @@ function isTruthy(value) {
 }
 
 if (path.resolve(process.argv[1] || "") === fileURLToPath(import.meta.url)) {
-  installSafeClaudeAlias();
+  installSafeCommandAliases();
 }