@minhspark/codex-mcp-bridge 1.10.0 → 1.11.0

package/CHANGELOG.md

@@ -2,6 +2,45 @@
 
 Follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and [SemVer](https://semver.org/).
 
+## [1.11.0] - 2026-08-23
+
+### Added
+
+- `CODEX_BRIDGE_THREAD_POLICY` selects what authorizes a thread: `owned` (unchanged default) or `roots`.
+
+  Under the only behaviour that existed before, a thread opened in the Codex app or the VS Code extension
+  was not merely restricted - it was unreachable. Codex assigns the thread ID at the moment it opens, so
+  the ID cannot have been listed in `CODEX_BRIDGE_ALLOWED_THREADS` beforehand, and the bridge-owned set
+  lives in memory and empties on every MCP server restart. The listing showed those threads, because
+  listing is gated on the workspace, and then every send into one answered `not authorized`. On a machine
+  with ten live threads, nine of them were unreachable and the tenth only because the bridge had just
+  created it.
+
+  `roots` grants on the workspace instead of the ID: a thread already working inside a directory named in
+  `CODEX_BRIDGE_ALLOWED_ROOTS` is reachable. That is the same containment every tool already enforces on
+  the `cwd` it is handed, applied to the `cwd` the thread reports. It is opt-in so an existing install
+  cannot widen silently on upgrade, and an unknown workspace fails closed exactly like one outside the
+  roots.
+
+### Fixed
+
+- Authorization now happens **before** `thread/resume`. Attaching takes the per-thread writer lock away
+  from whoever else has the thread open, so deciding afterwards would have locked a thread on its way to
+  being refused.
+- `openInApp` no longer raises a thread on screen before that thread is known to be in scope - a refusal
+  that leaked which threads exist.
+- `codex_bridge_status` printed the approval policy under a `thread policy` label. Two different settings:
+  one was misreported, the other invisible. It now names both.
+- The `NOT AUTHORIZED` line in `list_codex_threads` pointed only at `CODEX_BRIDGE_ALLOWED_THREADS`, which
+  is the option that cannot work for a thread a human just opened. It now names the policy as well.
+
+## [1.10.1] - 2026-08-20
+
+### Fixed
+
+- **`claude_bridge_status` advertised `claude-bridge 1.3.0` inside a 1.10.0 package.** Seven releases of drift, and the only thing it could tell a bug reporter was a wrong answer about which build was running. The stale constant was the symptom: `scripts/sync-version.mjs` named `src/index.mjs` and the repo-hygiene test checked that same single file, so nothing in the release path ever looked at the second entry point. The sync script now walks both, the `version` lifecycle stages both, and the test **discovers** every `src/*.mjs` declaring `const VERSION` rather than naming one - a third bridge added later is covered without editing any of this again. Confirmed red on the previous tree: `src/claude-bridge.mjs declares 1.3.0, package.json says 1.10.0`.
+- README said Windows was supported but not covered by CI, while `windows-latest` has been in the matrix since 1.10.0. A README that undersells its own coverage reads as a warning, and it is the first thing anyone evaluating the bridge sees. What stays true is narrower and is now what it says: the Codex to Claude tests skip on Windows because they need unix sockets, and the rest of the suite runs there.
+
 ## [1.10.0] - 2026-08-20
 
 ### Added

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 Bui Dang Minh
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 Bui Dang Minh
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,5 +1,9 @@
 # codex-mcp-bridge
 
+[![npm](https://img.shields.io/npm/v/@minhspark/codex-mcp-bridge?logo=npm&color=CB3837)](https://www.npmjs.com/package/@minhspark/codex-mcp-bridge)
+[![CI](https://github.com/buidangminh23/codex-mcp-bridge/actions/workflows/ci.yml/badge.svg)](https://github.com/buidangminh23/codex-mcp-bridge/actions/workflows/ci.yml)
+[![node](https://img.shields.io/node/v/@minhspark/codex-mcp-bridge?logo=node.js&color=5FA04E)](https://nodejs.org)
+[![license](https://img.shields.io/npm/l/@minhspark/codex-mcp-bridge)](LICENSE)
 [![M8ven Verified](https://m8ven.ai/badge/mcp/buidangminh23-codex-mcp-bridge-1ke8t1?variant=verified)](https://m8ven.ai/mcp/buidangminh23-codex-mcp-bridge-1ke8t1)
 
 A **two-way** bridge between Claude and Codex: Claude pushes prompts into a **live Codex thread**, and Codex messages back into a **running Claude Code session**. Each side sees the other's sessions and follows the conversation inside its own app. Runs on **macOS, Windows and Linux** (the Codex → Claude direction needs unix sockets, so macOS/Linux only).
@@ -258,7 +262,16 @@ On macOS and Linux the `codex` launcher is a Node script with a `#!/usr/bin/env
 
 `send_to_codex_thread` also accepts `timeoutSec` (default 240), `cwd`, `model`, `effort`, and `openInApp` (macOS — surface the thread in the desktop app before sending). A timeout does **not** cancel the turn: the bridge returns what it collected plus the `turnId`; keep reading with `read_codex_thread` or stop it with `interrupt_codex_turn`.
 
-Thread operations are deny-by-default. Set `CODEX_BRIDGE_ALLOWED_THREADS` to a comma-separated list of exact thread IDs you want this MCP server to access; threads created by `start_codex_thread` are authorized for the lifetime of this bridge process. Set `CODEX_BRIDGE_ALLOWED_ROOTS` to the absolute project directories the bridge may use. The installer defaults that root to this repository, so change it when delegating into another project.
+Thread operations are deny-by-default, and `CODEX_BRIDGE_THREAD_POLICY` decides what counts as permission:
+
+| Policy | A thread is reachable when | Use it when |
+|---|---|---|
+| `owned` *(default)* | the bridge created it with `start_codex_thread`, or its exact ID is listed in `CODEX_BRIDGE_ALLOWED_THREADS` | the bridge drives threads it opens itself |
+| `roots` | it is working inside a directory named in `CODEX_BRIDGE_ALLOWED_ROOTS` | you open threads in the Codex app or VS Code and want Claude to talk to them |
+
+Under `owned`, a thread a human opened is **unreachable rather than merely restricted**: Codex assigns its ID at the moment it opens, so the ID cannot have been allowlisted beforehand, and the bridge-owned set lives in memory and empties whenever the MCP server restarts. If every live thread answers `NOT AUTHORIZED`, that is the cause — switch to `roots`.
+
+`roots` does not remove a gate; it moves it from the ID to the workspace, which is the containment every tool already applies to the `cwd` it is handed. The bridge resolves a thread's workspace with a read **before** attaching, so a thread outside every root is refused without ever taking its writer lock. Set `CODEX_BRIDGE_ALLOWED_ROOTS` to the absolute project directories the bridge may use — the installer defaults that root to this repository, so change it when delegating into another project. A root as broad as `/` or `C:\` makes `roots` mean *every thread on this machine*.
 
 ## Tools — `claude-bridge` (runs inside Codex)
 
@@ -360,6 +373,7 @@ The bridge reads these from the environment its MCP client hands it — there is
 | `CODEX_APP_SERVER_URL` | `ws://127.0.0.1:8791` | Shared **loopback-only** app-server endpoint. Non-loopback endpoints are rejected because this bridge does not implement remote WebSocket authentication. |
 | `CODEX_BIN` | auto-detected | Path to `codex` used for autostart. |
 | `CODEX_BRIDGE_AUTOSTART` | `1` | `0` = never spawn an app-server; one must already be running. |
+| `CODEX_BRIDGE_THREAD_POLICY` | `owned` | What authorizes a thread: `owned` (created by this bridge, or listed in `CODEX_BRIDGE_ALLOWED_THREADS`) or `roots` (working inside `CODEX_BRIDGE_ALLOWED_ROOTS`). Default is unchanged on upgrade, so an existing install never widens by itself. |
 | `CODEX_BRIDGE_ALLOWED_THREADS` | empty | Exact comma-separated thread IDs permitted for read/send/interrupt/open/list. Empty means no pre-existing thread access. |
 | `CODEX_BRIDGE_ALLOWED_ROOTS` | empty (installer sets its repo root) | Absolute project directories permitted for `cwd`, separated by `:` (`;` on Windows). |
 | `CODEX_BRIDGE_APPROVAL` | `deny` | How to answer approval requests from Codex. `approve` is ignored unless `CODEX_BRIDGE_AUTO_APPROVE_ACK=1` is also set. |
@@ -415,7 +429,7 @@ Runs the whole suite with `node --test`. It needs no Codex install, no login and
 | `test/platform.test.mjs` | binary resolution, the PATH handed to child processes, per-OS config paths and cwd remapping |
 | `test/repo-hygiene.test.mjs` | no environment file or build output is ever tracked, versions do not drift, documentation stays in English |
 
-GitHub Actions runs the same command on every push and pull request, across Node 22 and 24 on Linux and macOS (`.github/workflows/ci.yml`). Windows is supported by the bridge but not covered by CI: the Codex → Claude direction needs unix sockets, so those tests skip there anyway.
+GitHub Actions runs the same command on every push and pull request, across Node 22 and 24 on Linux, macOS and Windows (`.github/workflows/ci.yml`). The Codex → Claude direction needs unix sockets, so those tests skip on Windows; the rest of the suite runs there like anywhere else.
 
 Two checks need a real Codex and are not part of `npm test`:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@minhspark/codex-mcp-bridge",
-  "version": "1.10.0",
+  "version": "1.11.0",
   "description": "Two-way MCP bridge between Claude and Codex: prompts into a live Codex thread, messages into a running Claude Code session.",
   "keywords": [
     "mcp",
@@ -50,7 +50,7 @@
     "uninstall:codex": "node scripts/install-codex-mcp.mjs --remove",
     "install:agent": "node scripts/install-launch-agent.mjs",
     "uninstall:agent": "node scripts/install-launch-agent.mjs --uninstall",
-    "version": "node scripts/sync-version.mjs && git add src/index.mjs"
+    "version": "node scripts/sync-version.mjs && git add src/index.mjs src/claude-bridge.mjs"
   },
   "engines": {
     "node": ">=22"

package/scripts/check-claude-bridge.mjs

@@ -1,37 +1,37 @@
-import { Client } from "@modelcontextprotocol/sdk/client/index.js";
-import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-
-const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
-const transport = new StdioClientTransport({
-  command: process.execPath,
-  args: [path.join(root, "src", "claude-bridge.mjs")],
-  stderr: "inherit",
-});
-const client = new Client({ name: "claude-bridge-check", version: "1.0.0" });
-await client.connect(transport);
-
-const tools = await client.listTools();
-console.log("tools:", tools.tools.map((t) => t.name).join(", "));
-
-const status = await client.callTool({ name: "claude_bridge_status", arguments: {} });
-console.log("\n--- claude_bridge_status ---\n" + status.content[0].text);
-
-const listed = await client.callTool({ name: "list_claude_sessions", arguments: {} });
-console.log("\n--- list_claude_sessions ---\n" + listed.content[0].text);
-
-const target = process.env.CLAUDE_TARGET;
-if (target) {
-  const message = process.env.CLAUDE_MESSAGE ?? "Ping from the Codex side of the bridge.";
-  const waitSec = Number(process.env.CLAUDE_WAIT ?? 180);
-  console.log(`\nsending to "${target}" (waiting ${waitSec}s)...`);
-  const sent = await client.callTool({
-    name: "send_to_claude_session",
-    arguments: { target, message, waitSec },
-  });
-  console.log("\n--- send_to_claude_session ---\n" + sent.content[0].text);
-}
-
-await client.close();
-process.exit(0);
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+const transport = new StdioClientTransport({
+  command: process.execPath,
+  args: [path.join(root, "src", "claude-bridge.mjs")],
+  stderr: "inherit",
+});
+const client = new Client({ name: "claude-bridge-check", version: "1.0.0" });
+await client.connect(transport);
+
+const tools = await client.listTools();
+console.log("tools:", tools.tools.map((t) => t.name).join(", "));
+
+const status = await client.callTool({ name: "claude_bridge_status", arguments: {} });
+console.log("\n--- claude_bridge_status ---\n" + status.content[0].text);
+
+const listed = await client.callTool({ name: "list_claude_sessions", arguments: {} });
+console.log("\n--- list_claude_sessions ---\n" + listed.content[0].text);
+
+const target = process.env.CLAUDE_TARGET;
+if (target) {
+  const message = process.env.CLAUDE_MESSAGE ?? "Ping from the Codex side of the bridge.";
+  const waitSec = Number(process.env.CLAUDE_WAIT ?? 180);
+  console.log(`\nsending to "${target}" (waiting ${waitSec}s)...`);
+  const sent = await client.callTool({
+    name: "send_to_claude_session",
+    arguments: { target, message, waitSec },
+  });
+  console.log("\n--- send_to_claude_session ---\n" + sent.content[0].text);
+}
+
+await client.close();
+process.exit(0);

package/scripts/install-launch-agent.mjs

@@ -1,93 +1,93 @@
-import { execFileSync } from "node:child_process";
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-
-import { IS_MACOS, LAUNCH_AGENT_LABEL, launchAgentPath, resolveCodexBin, spawnEnv } from "../src/platform.mjs";
-
-if (!IS_MACOS) {
-  throw new Error("install-launch-agent.mjs is macOS-only. On Windows use a Startup shortcut or a scheduled task.");
-}
-
-const plistPath = launchAgentPath();
-const uninstall = process.argv.includes("--uninstall");
-const domain = `gui/${process.getuid()}`;
-
-function bootout() {
-  try {
-    execFileSync("launchctl", ["bootout", `${domain}/${LAUNCH_AGENT_LABEL}`], { stdio: "pipe" });
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-if (uninstall) {
-  const wasLoaded = bootout();
-  if (fs.existsSync(plistPath)) fs.rmSync(plistPath);
-  console.log(`removed ${plistPath}${wasLoaded ? " (agent unloaded)" : ""}`);
-  process.exit(0);
-}
-
-const codexBin = resolveCodexBin(process.env.CODEX_EXE);
-if (!path.isAbsolute(codexBin) || !fs.existsSync(codexBin)) {
-  throw new Error(`codex binary not found (resolved to "${codexBin}"). Set CODEX_EXE to its absolute path.`);
-}
-
-const url = process.env.CODEX_APP_SERVER_URL ?? "ws://127.0.0.1:8791";
-const logDir = path.join(os.homedir(), "Library", "Logs", "codex-mcp-bridge");
-fs.mkdirSync(logDir, { recursive: true });
-fs.mkdirSync(path.dirname(plistPath), { recursive: true });
-
-const escapeXml = (value) =>
-  value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
-
-const plist = `<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-  <key>Label</key>
-  <string>${LAUNCH_AGENT_LABEL}</string>
-  <key>ProgramArguments</key>
-  <array>
-    <string>${escapeXml(codexBin)}</string>
-    <string>app-server</string>
-    <string>--listen</string>
-    <string>${escapeXml(url)}</string>
-  </array>
-  <key>EnvironmentVariables</key>
-  <dict>
-    <key>PATH</key>
-    <string>${escapeXml(spawnEnv().PATH)}</string>
-    <key>HOME</key>
-    <string>${escapeXml(os.homedir())}</string>
-  </dict>
-  <key>RunAtLoad</key>
-  <true/>
-  <key>KeepAlive</key>
-  <dict>
-    <key>SuccessfulExit</key>
-    <false/>
-  </dict>
-  <key>ThrottleInterval</key>
-  <integer>10</integer>
-  <key>ProcessType</key>
-  <string>Background</string>
-  <key>StandardOutPath</key>
-  <string>${escapeXml(path.join(logDir, "app-server.out.log"))}</string>
-  <key>StandardErrorPath</key>
-  <string>${escapeXml(path.join(logDir, "app-server.err.log"))}</string>
-</dict>
-</plist>
-`;
-
-fs.writeFileSync(plistPath, plist, "utf8");
-bootout();
-execFileSync("launchctl", ["bootstrap", domain, plistPath], { stdio: "inherit" });
-execFileSync("launchctl", ["enable", `${domain}/${LAUNCH_AGENT_LABEL}`], { stdio: "pipe" });
-
-console.log(`installed ${plistPath}`);
-console.log(`endpoint: ${url}`);
-console.log(`logs:     ${logDir}`);
-console.log(`status:   launchctl print ${domain}/${LAUNCH_AGENT_LABEL} | head -20`);
-console.log(`remove:   node scripts/install-launch-agent.mjs --uninstall`);
+import { execFileSync } from "node:child_process";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+
+import { IS_MACOS, LAUNCH_AGENT_LABEL, launchAgentPath, resolveCodexBin, spawnEnv } from "../src/platform.mjs";
+
+if (!IS_MACOS) {
+  throw new Error("install-launch-agent.mjs is macOS-only. On Windows use a Startup shortcut or a scheduled task.");
+}
+
+const plistPath = launchAgentPath();
+const uninstall = process.argv.includes("--uninstall");
+const domain = `gui/${process.getuid()}`;
+
+function bootout() {
+  try {
+    execFileSync("launchctl", ["bootout", `${domain}/${LAUNCH_AGENT_LABEL}`], { stdio: "pipe" });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+if (uninstall) {
+  const wasLoaded = bootout();
+  if (fs.existsSync(plistPath)) fs.rmSync(plistPath);
+  console.log(`removed ${plistPath}${wasLoaded ? " (agent unloaded)" : ""}`);
+  process.exit(0);
+}
+
+const codexBin = resolveCodexBin(process.env.CODEX_EXE);
+if (!path.isAbsolute(codexBin) || !fs.existsSync(codexBin)) {
+  throw new Error(`codex binary not found (resolved to "${codexBin}"). Set CODEX_EXE to its absolute path.`);
+}
+
+const url = process.env.CODEX_APP_SERVER_URL ?? "ws://127.0.0.1:8791";
+const logDir = path.join(os.homedir(), "Library", "Logs", "codex-mcp-bridge");
+fs.mkdirSync(logDir, { recursive: true });
+fs.mkdirSync(path.dirname(plistPath), { recursive: true });
+
+const escapeXml = (value) =>
+  value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+
+const plist = `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>${LAUNCH_AGENT_LABEL}</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>${escapeXml(codexBin)}</string>
+    <string>app-server</string>
+    <string>--listen</string>
+    <string>${escapeXml(url)}</string>
+  </array>
+  <key>EnvironmentVariables</key>
+  <dict>
+    <key>PATH</key>
+    <string>${escapeXml(spawnEnv().PATH)}</string>
+    <key>HOME</key>
+    <string>${escapeXml(os.homedir())}</string>
+  </dict>
+  <key>RunAtLoad</key>
+  <true/>
+  <key>KeepAlive</key>
+  <dict>
+    <key>SuccessfulExit</key>
+    <false/>
+  </dict>
+  <key>ThrottleInterval</key>
+  <integer>10</integer>
+  <key>ProcessType</key>
+  <string>Background</string>
+  <key>StandardOutPath</key>
+  <string>${escapeXml(path.join(logDir, "app-server.out.log"))}</string>
+  <key>StandardErrorPath</key>
+  <string>${escapeXml(path.join(logDir, "app-server.err.log"))}</string>
+</dict>
+</plist>
+`;
+
+fs.writeFileSync(plistPath, plist, "utf8");
+bootout();
+execFileSync("launchctl", ["bootstrap", domain, plistPath], { stdio: "inherit" });
+execFileSync("launchctl", ["enable", `${domain}/${LAUNCH_AGENT_LABEL}`], { stdio: "pipe" });
+
+console.log(`installed ${plistPath}`);
+console.log(`endpoint: ${url}`);
+console.log(`logs:     ${logDir}`);
+console.log(`status:   launchctl print ${domain}/${LAUNCH_AGENT_LABEL} | head -20`);
+console.log(`remove:   node scripts/install-launch-agent.mjs --uninstall`);

package/scripts/smoke.mjs

@@ -1,50 +1,50 @@
-import { Client } from "@modelcontextprotocol/sdk/client/index.js";
-import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
-import { fileURLToPath } from "node:url";
-import path from "node:path";
-
-const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
-const cwdForTest = process.env.SMOKE_CWD ?? root;
-
-const transport = new StdioClientTransport({
-  command: process.execPath,
-  args: [path.join(root, "src", "index.mjs")],
-  env: { ...process.env, CODEX_BRIDGE_ALLOWED_ROOTS: process.env.CODEX_BRIDGE_ALLOWED_ROOTS ?? cwdForTest },
-  stderr: "inherit",
-});
-const client = new Client({ name: "smoke", version: "1.0.0" });
-await client.connect(transport);
-
-const tools = await client.listTools();
-console.log("TOOLS:", tools.tools.map((t) => t.name).join(", "));
-
-const listed = await client.callTool({ name: "list_codex_threads", arguments: { limit: 3 } });
-console.log("\n--- list_codex_threads ---\n" + listed.content[0].text.slice(0, 900));
-
-const created = await client.callTool({
-  name: "start_codex_thread",
-  arguments: { cwd: cwdForTest },
-});
-console.log("\n--- start_codex_thread ---\n" + created.content[0].text);
-const threadId = created.content[0].text.match(/threadId: ([0-9a-f-]+)/)?.[1];
-if (!threadId) throw new Error("could not parse threadId");
-
-const first = await client.callTool({
-  name: "send_to_codex_thread",
-  arguments: { threadId, prompt: "Remember the codeword PAPAYA. Reply with only: SAVED", timeoutSec: 180 },
-});
-console.log("\n--- send #1 ---\n" + first.content[0].text);
-
-const second = await client.callTool({
-  name: "send_to_codex_thread",
-  arguments: { threadId, prompt: "What codeword did I give you? Reply with only that word.", timeoutSec: 180 },
-});
-console.log("\n--- send #2 (same thread, must recall) ---\n" + second.content[0].text);
-
-const read = await client.callTool({ name: "read_codex_thread", arguments: { threadId, limit: 6 } });
-console.log("\n--- read_codex_thread ---\n" + read.content[0].text.slice(0, 900));
-
-const ok = /PAPAYA/i.test(second.content[0].text);
-console.log("\nRESULT:", ok ? "PASS - thread continuity works" : "FAIL - Codex did not recall the codeword");
-await client.close();
-process.exit(ok ? 0 : 1);
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
+import { fileURLToPath } from "node:url";
+import path from "node:path";
+
+const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+const cwdForTest = process.env.SMOKE_CWD ?? root;
+
+const transport = new StdioClientTransport({
+  command: process.execPath,
+  args: [path.join(root, "src", "index.mjs")],
+  env: { ...process.env, CODEX_BRIDGE_ALLOWED_ROOTS: process.env.CODEX_BRIDGE_ALLOWED_ROOTS ?? cwdForTest },
+  stderr: "inherit",
+});
+const client = new Client({ name: "smoke", version: "1.0.0" });
+await client.connect(transport);
+
+const tools = await client.listTools();
+console.log("TOOLS:", tools.tools.map((t) => t.name).join(", "));
+
+const listed = await client.callTool({ name: "list_codex_threads", arguments: { limit: 3 } });
+console.log("\n--- list_codex_threads ---\n" + listed.content[0].text.slice(0, 900));
+
+const created = await client.callTool({
+  name: "start_codex_thread",
+  arguments: { cwd: cwdForTest },
+});
+console.log("\n--- start_codex_thread ---\n" + created.content[0].text);
+const threadId = created.content[0].text.match(/threadId: ([0-9a-f-]+)/)?.[1];
+if (!threadId) throw new Error("could not parse threadId");
+
+const first = await client.callTool({
+  name: "send_to_codex_thread",
+  arguments: { threadId, prompt: "Remember the codeword PAPAYA. Reply with only: SAVED", timeoutSec: 180 },
+});
+console.log("\n--- send #1 ---\n" + first.content[0].text);
+
+const second = await client.callTool({
+  name: "send_to_codex_thread",
+  arguments: { threadId, prompt: "What codeword did I give you? Reply with only that word.", timeoutSec: 180 },
+});
+console.log("\n--- send #2 (same thread, must recall) ---\n" + second.content[0].text);
+
+const read = await client.callTool({ name: "read_codex_thread", arguments: { threadId, limit: 6 } });
+console.log("\n--- read_codex_thread ---\n" + read.content[0].text.slice(0, 900));
+
+const ok = /PAPAYA/i.test(second.content[0].text);
+console.log("\nRESULT:", ok ? "PASS - thread continuity works" : "FAIL - Codex did not recall the codeword");
+await client.close();
+process.exit(ok ? 0 : 1);

package/scripts/sync-version.mjs

@@ -4,22 +4,29 @@ import path from "node:path";
 import { fileURLToPath } from "node:url";
 
 /**
- * `codex_bridge_status` reports a version constant that lives in the source,
- * and `npm version` only ever rewrites package.json. Left to a human the two
+ * Both status tools report a version constant that lives in the source, and
+ * `npm version` only ever rewrites package.json. Left to a human the two
  * drift, and a drifting version turns every bug report into a guess about
  * which build is actually running - so this runs from the `version` lifecycle
  * script, between the bump and the commit npm makes for it.
+ *
+ * Every entry point carrying its own constant belongs in this list. One that
+ * is missing here is not bumped by any release, which is exactly how
+ * claude-bridge sat at 1.3.0 while the package shipped 1.10.0.
  */
 const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
-const entry = path.join(root, "src", "index.mjs");
+const entries = [path.join("src", "index.mjs"), path.join("src", "claude-bridge.mjs")];
 const { version } = JSON.parse(fs.readFileSync(path.join(root, "package.json"), "utf8"));
 
-const before = fs.readFileSync(entry, "utf8");
-const after = before.replace(/^const VERSION = "[^"]+";$/m, `const VERSION = "${version}";`);
+for (const entry of entries) {
+  const file = path.join(root, entry);
+  const before = fs.readFileSync(file, "utf8");
+  const after = before.replace(/^const VERSION = "[^"]+";$/m, `const VERSION = "${version}";`);
 
-if (!after.includes(`const VERSION = "${version}";`)) {
-  throw new Error(`could not find the VERSION constant in ${entry}`);
-}
+  if (!after.includes(`const VERSION = "${version}";`)) {
+    throw new Error(`could not find the VERSION constant in ${entry}`);
+  }
 
-if (before !== after) fs.writeFileSync(entry, after);
-console.log(`src/index.mjs VERSION -> ${version}`);
+  if (before !== after) fs.writeFileSync(file, after);
+  console.log(`${entry.split(path.sep).join("/")} VERSION -> ${version}`);
+}