@minhspark/codex-mcp-bridge 1.13.2 → 1.13.3

package/CHANGELOG.md

@@ -2,6 +2,23 @@
 
 Follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and [SemVer](https://semver.org/).
 
+## [1.13.3] - 2026-09-05
+
+### Fixed
+
+- Verify the current saved project's identity, canonical directory, and task membership before reusing a Desktop creation receipt. Project drift is rejected; omitted recent/pinned metadata reports unverified assignment while preserving the task ID without resending or creating a duplicate.
+- Support `--version` and `-v` on every packaged command without starting servers, opening sockets, or mutating client configuration.
+- Preserve PowerShell's `$?` and conditional `&&`/`||` behavior as well as `$LASTEXITCODE` by invoking its footer through a script alias.
+
+### Added
+
+- Opt-in Bash, Zsh, and PowerShell installation footers for `npm install -g @minhspark/codex-mcp-bridge@latest`: first installation, changed version, unchanged version, failure, dry run, and unverifiable metadata are distinguished after npm's final output while preserving its exit code.
+- `codex-npm-footer-install` backs up and updates shell profiles idempotently, refuses unmanaged npm wrappers, supports removal, and explains how to reload an already-open terminal. Package installation does not change profiles automatically.
+
+### Verification
+
+- Regression coverage includes same-workspace project moves, deleted/repointed/replaced projects, incomplete Desktop snapshots, deadlines and authorization, shell argument boundaries, dry-run configuration, failure exit codes, metadata validation, and profile preservation.
+
 ## [1.13.2] - 2026-09-05
 
 ### Fixed

package/README.md

@@ -28,6 +28,8 @@ Desktop calls share a maximum 40-second budget across creation, opening, queuein
 
 Creation receipts persist in `$CODEX_HOME/bridge-task-receipts` (default `~/.codex/bridge-task-receipts`). The same canonical workspace and explicit title reuse the existing task, including after completion or a bridge restart; an edited brief is not resent. Use `send_to_codex_thread` to continue it, or a distinct title for separate work. Without an explicit title, the key uses the exact prompt hash. Receipts store hashes rather than prompt text and never grant thread permissions: `owned` policy still requires authorization after restart. Pending or uncertain receipts and abandoned creation locks fail closed without automatic expiry; inspect the actual task before repairing them.
 
+Reusing a receipt also verifies that the saved project still has the same identity and exact directory, then checks the task's current project membership in Desktop's recent/pinned listing. A moved task or deleted/repointed project is rejected before sending or creating anything. A task omitted from that listing keeps its known ID and reports `project assignment: unverified`; stored receipt metadata is not presented as current membership. If a checkout has moved, edit the existing project's folder in Desktop, then inspect the existing task's workspace. Do not add another project or append the obsolete directory merely to satisfy a match.
+
 The updated companion exposes a separate `-desktop-tasks` endpoint so a previous companion holding the legacy reply socket need not be killed during an upgrade. `codex_bridge_status` verifies the native connection through Desktop's local project list; `native_relay_status` reports both endpoints. Reconnect the companion after upgrading so it accepts the current native operations.
 
 Desktop mode never contacts, starts, or falls back to an external app-server, including during status checks and thread discovery. The Claude Desktop installer records `CODEX_BRIDGE_AUTOSTART=0` in this mode. If Desktop or its companion is unavailable, the bridge reports the failure and leaves existing tasks in Desktop. `stop_codex_app_server` is a no-op in Desktop mode; stop an obsolete external service through its own launcher after confirming it has no active work.
@@ -122,7 +124,7 @@ Installing straight from the repository works the same way and needs no registry
 npm install -g git+https://github.com/buidangminh23/codex-mcp-bridge.git
 ```
 
-Either route puts four commands on your PATH — `codex-mcp-bridge` and `claude-mcp-bridge` are the two servers, `codex-mcp-bridge-install` and `claude-mcp-bridge-install` do the wiring in the steps below. Wherever this README runs `node scripts/install-claude-desktop.mjs`, an installed copy runs `codex-mcp-bridge-install` instead.
+Either route puts the bridge servers, configuration installers, native relay, and `codex-npm-footer-install` on your PATH. Wherever this README runs `node scripts/install-claude-desktop.mjs`, an installed copy runs `codex-mcp-bridge-install` instead. Every packaged command supports `--version` and `-v` without starting a server or changing configuration.
 
 #### Upgrading an install you already have
 
@@ -130,6 +132,33 @@ Either route puts four commands on your PATH — `codex-mcp-bridge` and `claude-
 
 Re-running `codex-mcp-bridge-install` is **not** required to upgrade, and before 1.11.1 it actively hurt: it replaced the whole entry, discarding `CODEX_BRIDGE_ALLOWED_THREADS`, any hand-added `CODEX_BRIDGE_THREAD_POLICY`, and resetting `CODEX_BRIDGE_ALLOWED_ROOTS` to the install directory. From 1.11.1 it keeps what is already there — an environment variable you pass wins, the existing value is the fallback, and `--reset` gives you the defaults back.
 
+#### Show the final npm installation result
+
+Enable the optional shell integration once after installing the package:
+
+```sh
+codex-npm-footer-install --shell zsh
+```
+
+Use `--shell bash` on Bash or `--shell powershell` in PowerShell 7. A source checkout can run `npm run install:footer -- --shell zsh`. The installer backs up existing profiles, preserves unrelated content, and prints a command to load the integration into the current terminal. New login and interactive Bash/Zsh shells load it automatically; PowerShell uses its current-user all-hosts profile. A terminal started before setup must run the printed reload command or open a new shell. Existing unmanaged `npm` functions are refused for review rather than overwritten. Use `--profile /absolute/path` to select a custom profile or `--remove` to remove the managed loader.
+
+The integration leaves the command unchanged:
+
+```sh
+npm install -g @minhspark/codex-mcp-bridge@latest
+```
+
+| Measured result | Final line |
+| --- | --- |
+| No previous installation | `Successfully installed: @minhspark/codex-mcp-bridge v<version>` |
+| Version changed | `Successfully updated: @minhspark/codex-mcp-bridge v<before> -> v<after>` |
+| Same version after reinstalling | `Already up to date: @minhspark/codex-mcp-bridge v<version>` |
+| npm failed | `Failed to install: ... (exit code <code>). See npm error above.` |
+| Dry run | `Dry run completed: ... (no changes applied).` |
+| Mode or installed metadata cannot be verified | A warning instead of a success claim |
+
+The footer runs after npm finishes and keeps npm's output and exit code. It supports `install`/`i`, explicit global installation, one bridge package, dry-run flags, common install booleans, and a single `--prefix`. Other commands, multiple packages, unknown options, and machine-readable or silent output modes pass through without a footer. Installing the package itself does not alter shell profiles. A successful install confirms files on disk; restart the MCP client separately to load the new bridge code.
+
 **Clone it** — right if you intend to read, test or change the code:
 
 ```bash

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@minhspark/codex-mcp-bridge",
-  "version": "1.13.2",
+  "version": "1.13.3",
   "description": "Two-way MCP bridge between Claude and Codex: prompts into a live Codex thread, messages into a running Claude Code session.",
   "keywords": [
     "mcp",
@@ -27,7 +27,8 @@
     "codex-mcp-bridge-install": "scripts/install-claude-desktop.mjs",
     "claude-mcp-bridge-install": "scripts/install-codex-mcp.mjs",
     "codex-native-relay": "src/native-relay-companion.mjs",
-    "codex-native-relay-install": "scripts/install-native-relay.mjs"
+    "codex-native-relay-install": "scripts/install-native-relay.mjs",
+    "codex-npm-footer-install": "scripts/install-npm-footer.mjs"
   },
   "files": [
     "src",
@@ -53,6 +54,8 @@
     "install:relay": "node scripts/install-native-relay.mjs",
     "uninstall:relay": "node scripts/install-native-relay.mjs --remove",
     "install:agent": "node scripts/install-launch-agent.mjs",
+    "install:footer": "node scripts/install-npm-footer.mjs",
+    "uninstall:footer": "node scripts/install-npm-footer.mjs --remove",
     "uninstall:agent": "node scripts/install-launch-agent.mjs --uninstall",
     "version": "node scripts/sync-version.mjs && git add src/index.mjs src/claude-bridge.mjs src/native-relay-companion.mjs scripts/install-native-relay.mjs"
   },

package/scripts/install-claude-desktop.mjs

@@ -5,6 +5,9 @@ import { fileURLToPath } from "node:url";
 
 import { IS_WINDOWS, PLATFORM_LABEL, claudeDesktopConfigPath, resolveCodexBin } from "../src/platform.mjs";
 import { desktopTasksConfigured } from "../src/native-relay.mjs";
+import { exitForVersionRequest } from "../src/cli-version.mjs";
+
+exitForVersionRequest(import.meta.url);
 
 const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
 const cfgPath = process.env.CLAUDE_DESKTOP_CONFIG ?? claudeDesktopConfigPath();

package/scripts/install-codex-mcp.mjs

@@ -5,6 +5,9 @@ import path from "node:path";
 import { fileURLToPath } from "node:url";
 
 import { PLATFORM_LABEL, resolveCodexBin, spawnEnv } from "../src/platform.mjs";
+import { exitForVersionRequest } from "../src/cli-version.mjs";
+
+exitForVersionRequest(import.meta.url);
 
 const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
 const codexBin = resolveCodexBin(process.env.CODEX_EXE);

package/scripts/install-native-relay.mjs

@@ -7,8 +7,11 @@ import { fileURLToPath } from "node:url";
 import { CodexAppServerClient } from "../src/app-server-client.mjs";
 import { bootstrapRelayThread, readRelayConfig, relayConfigPath, relaySocketPath, writeRelayConfig } from "../src/native-relay.mjs";
 import { IS_MACOS, IS_WINDOWS, PLATFORM_LABEL, homeDir, resolveCodexBin, spawnEnv } from "../src/platform.mjs";
+import { exitForVersionRequest } from "../src/cli-version.mjs";
 
-const VERSION = "1.13.2";
+exitForVersionRequest(import.meta.url);
+
+const VERSION = "1.13.3";
 const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
 const entry = path.join(root, "src", "native-relay-companion.mjs");
 const serverName = process.env.CODEX_NATIVE_RELAY_NAME ?? "codex-native-relay";

package/scripts/install-npm-footer.mjs

@@ -0,0 +1,99 @@
+#!/usr/bin/env node
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { execFileSync } from "node:child_process";
+import { fileURLToPath } from "node:url";
+import { exitForVersionRequest } from "../src/cli-version.mjs";
+
+exitForVersionRequest(import.meta.url);
+
+const begin = "# codex-mcp-bridge npm footer: begin";
+const end = "# codex-mcp-bridge npm footer: end";
+const args = process.argv.slice(2);
+let shell = process.platform === "win32" ? "powershell" : path.basename(process.env.SHELL || "/bin/bash");
+const profiles = [];
+let remove = false;
+for (let index = 0; index < args.length; index += 1) {
+  const arg = args[index];
+  if (arg === "--remove") remove = true;
+  else if (["--shell", "--profile"].includes(arg) && args[index + 1]) {
+    const value = args[++index];
+    if (arg === "--shell") shell = value;
+    else profiles.push(path.resolve(value));
+  } else throw new Error(`Unsupported argument: ${arg}`);
+}
+if (!["bash", "zsh", "powershell"].includes(shell)) throw new Error("Choose --shell bash, zsh, or powershell.");
+const footerDirectory = path.join(os.homedir(), ".config", "codex-mcp-bridge");
+const footerName = shell === "powershell" ? "npm-footer.ps1" : "npm-footer.sh";
+const footerPath = path.join(footerDirectory, footerName);
+if (!profiles.length) {
+  if (shell === "powershell") {
+    profiles.push(execFileSync("pwsh", ["-NoProfile", "-Command", "$PROFILE.CurrentUserAllHosts"], { encoding: "utf8" }).trim());
+  } else if (shell === "zsh") {
+    const directory = process.env.ZDOTDIR || os.homedir();
+    profiles.push(path.join(directory, ".zshrc"), path.join(directory, ".zprofile"));
+  } else {
+    profiles.push(path.join(os.homedir(), ".bashrc"));
+    profiles.push([".bash_profile", ".bash_login", ".profile"].map((name) => path.join(os.homedir(), name)).find((file) => fs.existsSync(file)) || path.join(os.homedir(), ".profile"));
+  }
+}
+const quote = (value) => shell === "powershell" ? `'${value.replaceAll("'", "''")}'` : `'${value.replaceAll("'", `'\\''`)}'`;
+const loader = shell === "powershell"
+  ? `if (Test-Path -LiteralPath ${quote(footerPath)}) { . ${quote(footerPath)} }`
+  : `if [ -n "\${BASH_VERSION:-}\${ZSH_VERSION:-}" ] && [ -r ${quote(footerPath)} ]; then . ${quote(footerPath)}; fi`;
+const edits = [...new Set(profiles)].map((file) => {
+  if (!path.isAbsolute(file)) throw new Error(`Profile path must be absolute: ${file}`);
+  if (fs.existsSync(file) && (!fs.lstatSync(file).isFile() || fs.lstatSync(file).isSymbolicLink())) throw new Error(`Refusing to replace a non-regular profile: ${file}`);
+  const before = fs.existsSync(file) ? fs.readFileSync(file, "utf8") : "";
+  const newline = before.includes("\r\n") || shell === "powershell" ? "\r\n" : "\n";
+  const normalized = before.replaceAll("\r\n", "\n");
+  const begins = normalized.split(begin).length - 1;
+  const ends = normalized.split(end).length - 1;
+  if (begins !== ends || begins > 1) throw new Error(`Ambiguous managed footer block: ${file}`);
+  let unmanaged = normalized;
+  if (begins) {
+    const start = normalized.indexOf(begin);
+    const finish = normalized.indexOf(end, start);
+    if (finish < start) throw new Error(`Malformed managed footer block: ${file}`);
+    unmanaged = normalized.slice(0, start) + normalized.slice(finish + end.length).replace(/^\n/, "");
+  }
+  if (!remove && /^\s*(?:function\s+(?:global:)?)?npm\s*(?:\(\s*\))?\s*\{/im.test(unmanaged)) {
+    throw new Error(`An existing npm wrapper must be reviewed before installing the footer: ${file}`);
+  }
+  const after = (remove ? unmanaged : `${begin}\n${loader}\n${end}\n${unmanaged}`).replaceAll("\n", newline);
+  return { file, before, after };
+});
+
+if (!remove) {
+  const source = fs.readFileSync(fileURLToPath(new URL(`./${footerName}`, import.meta.url)), "utf8");
+  fs.mkdirSync(footerDirectory, { recursive: true, mode: 0o700 });
+  if (fs.existsSync(footerPath) && (!fs.lstatSync(footerPath).isFile() || fs.lstatSync(footerPath).isSymbolicLink())) throw new Error(`Unsafe footer destination: ${footerPath}`);
+  if (!fs.existsSync(footerPath) || fs.readFileSync(footerPath, "utf8") !== source) {
+    fs.writeFileSync(footerPath, source, { mode: 0o600 });
+  }
+}
+for (const { file, before, after } of edits) {
+  if (before === after) { console.log(`Unchanged: ${file}`); continue; }
+  fs.mkdirSync(path.dirname(file), { recursive: true });
+  const current = fs.existsSync(file) ? fs.readFileSync(file, "utf8") : "";
+  if (current !== before) throw new Error(`Profile changed during installation; rerun after reviewing it: ${file}`);
+  if (fs.existsSync(file)) {
+    const backup = `${file}.bak-npm-footer-${Date.now()}-${process.pid}`;
+    fs.copyFileSync(file, backup, fs.constants.COPYFILE_EXCL);
+    console.log(`Backup: ${backup}`);
+  }
+  const temporary = `${file}.tmp-npm-footer-${process.pid}`;
+  let temporaryCreated = false;
+  try {
+    fs.writeFileSync(temporary, after, { mode: 0o600, flag: "wx" });
+    temporaryCreated = true;
+    fs.renameSync(temporary, file);
+  } finally {
+    if (temporaryCreated && fs.existsSync(temporary)) fs.unlinkSync(temporary);
+  }
+  console.log(`${remove ? "Removed" : "Installed"}: ${file}`);
+}
+console.log(remove
+  ? "Open a new shell to use npm without the footer."
+  : `Reload the current shell with: . ${quote(footerPath)}`);

package/scripts/npm-footer.ps1

@@ -0,0 +1,140 @@
+if ($MyInvocation.InvocationName -eq '.') {
+    Set-Alias -Name npm -Value $PSCommandPath -Scope Global
+    return
+}
+
+$npmArguments = @($args)
+$nativeNpm = Get-Command npm -CommandType Application, ExternalScript -ErrorAction SilentlyContinue | Select-Object -First 1
+if (-not $nativeNpm) {
+    throw [System.Management.Automation.CommandNotFoundException]::new('The npm executable was not found on PATH.')
+}
+
+$matchesInstall = $npmArguments.Count -ge 3 -and $npmArguments[0] -cin @('install', 'i')
+$isGlobal = $false
+$targetCount = 0
+$prefixArguments = @()
+$dryRunOverride = $null
+for ($argumentIndex = 1; $matchesInstall -and $argumentIndex -lt $npmArguments.Count; $argumentIndex++) {
+    $argument = [string]$npmArguments[$argumentIndex]
+    if ($argument -cin @('-g', '--global', '--global=true')) {
+        $isGlobal = $true
+    } elseif ($argument -cmatch '^@minhspark/codex-mcp-bridge(?:@[^\s]+)?$') {
+        $targetCount++
+    } elseif ($argument -cin @('--no-fund', '--no-audit', '--force', '--ignore-scripts', '--foreground-scripts')) {
+        continue
+    } elseif ($argument -cin @('--dry-run', '--dry-run=true')) {
+        $dryRunOverride = $true
+    } elseif ($argument -cin @('--no-dry-run', '--dry-run=false')) {
+        $dryRunOverride = $false
+    } elseif ($argument -ceq '--prefix') {
+        $argumentIndex++
+        if ($argumentIndex -ge $npmArguments.Count -or -not $npmArguments[$argumentIndex] -or [string]$npmArguments[$argumentIndex] -clike '-*' -or $prefixArguments.Count) {
+            $matchesInstall = $false
+        } else {
+            $prefixArguments = @('--prefix', [string]$npmArguments[$argumentIndex])
+        }
+    } elseif ($argument -cmatch '^--prefix=(.+)$' -and -not $prefixArguments.Count) {
+        $prefixArguments = @($argument)
+    } else {
+        $matchesInstall = $false
+    }
+}
+
+if (-not $matchesInstall -or -not $isGlobal -or $targetCount -ne 1) {
+    $global:LASTEXITCODE = 0
+    & $nativeNpm @npmArguments
+    exit $LASTEXITCODE
+}
+
+$PSNativeCommandUseErrorActionPreference = $false
+$readVersion = {
+    param([string]$PackageRoot)
+    try {
+        $metadataPath = Join-Path $PackageRoot '@minhspark/codex-mcp-bridge/package.json'
+        if (-not [System.IO.File]::Exists($metadataPath)) {
+            return @{ Status = 'missing'; Version = $null }
+        }
+        $metadata = [System.IO.File]::ReadAllText($metadataPath) | ConvertFrom-Json -ErrorAction Stop
+        if ($metadata.name -cne '@minhspark/codex-mcp-bridge' -or $metadata.version -isnot [string] -or $metadata.version -cnotmatch '^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$') {
+            return @{ Status = 'unknown'; Version = $null }
+        }
+        return @{ Status = 'known'; Version = $metadata.version }
+    } catch {
+        return @{ Status = 'unknown'; Version = $null }
+    }
+}
+$readRoot = {
+    try {
+        $global:LASTEXITCODE = 0
+        $rootOutput = @(& $nativeNpm root --global @prefixArguments 2>$null)
+        if ($LASTEXITCODE -ne 0 -or $rootOutput.Count -ne 1) {
+            return $null
+        }
+        $packageRoot = ([string]$rootOutput[0]).Trim()
+        if (-not $packageRoot -or -not [System.IO.Path]::IsPathRooted($packageRoot)) {
+            return $null
+        }
+        return $packageRoot
+    } catch {
+        return $null
+    }
+}
+
+$dryRun = $dryRunOverride
+if ($null -eq $dryRun) {
+    try {
+        $global:LASTEXITCODE = 0
+        $configOutput = @(& $nativeNpm config get dry-run --global @prefixArguments 2>$null)
+        if ($LASTEXITCODE -eq 0 -and $configOutput.Count -eq 1) {
+            $configValue = ([string]$configOutput[0]).Trim()
+            if ($configValue -ceq 'true') {
+                $dryRun = $true
+            } elseif ($configValue -ceq 'false') {
+                $dryRun = $false
+            }
+        }
+    } catch {
+        $dryRun = $null
+    }
+}
+
+$beforeRoot = & $readRoot
+$before = @{ Status = 'unknown'; Version = $null }
+if ($beforeRoot) {
+    $before = & $readVersion $beforeRoot
+}
+
+$global:LASTEXITCODE = 0
+& $nativeNpm @npmArguments
+$npmExitCode = $LASTEXITCODE
+try {
+    if ($npmExitCode -ne 0) {
+        Write-Host "Failed to install: @minhspark/codex-mcp-bridge (exit code $npmExitCode). See npm error above."
+        exit $npmExitCode
+    }
+    if ($null -eq $dryRun) {
+        Write-Host 'Warning: npm completed, but installation mode could not be verified.'
+        exit $npmExitCode
+    }
+    if ($dryRun) {
+        Write-Host 'Dry run completed: @minhspark/codex-mcp-bridge (no changes applied).'
+        exit $npmExitCode
+    }
+    $afterRoot = & $readRoot
+    $after = @{ Status = 'unknown'; Version = $null }
+    if ($afterRoot) {
+        $after = & $readVersion $afterRoot
+    }
+    if ($after.Status -ne 'known' -or $before.Status -eq 'unknown' -or $beforeRoot -cne $afterRoot) {
+        Write-Host 'Warning: npm completed, but the installed @minhspark/codex-mcp-bridge version could not be verified.'
+    } elseif ($before.Status -eq 'missing') {
+        Write-Host "Successfully installed: @minhspark/codex-mcp-bridge v$($after.Version)"
+    } elseif ($before.Version -ceq $after.Version) {
+        Write-Host "Already up to date: @minhspark/codex-mcp-bridge v$($after.Version)"
+    } else {
+        Write-Host "Successfully updated: @minhspark/codex-mcp-bridge v$($before.Version) -> v$($after.Version)"
+    }
+} finally {
+    $global:LASTEXITCODE = $npmExitCode
+}
+exit $npmExitCode

package/scripts/npm-footer.sh

@@ -0,0 +1,81 @@
+_codex_bridge_installed_version() {
+  command node --input-type=module -e 'import fs from "node:fs"; const value = JSON.parse(fs.readFileSync(process.argv[1], "utf8")); if (value.name !== "@minhspark/codex-mcp-bridge" || typeof value.version !== "string" || !/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/.test(value.version)) process.exit(1); process.stdout.write(value.version);' "$1/@minhspark/codex-mcp-bridge/package.json" 2>/dev/null
+}
+
+npm() {
+  if [ "$#" -eq 0 ]; then command npm; return $?; fi
+  local bridge_command="${1-}" bridge_global=0 bridge_packages=0 bridge_supported=1
+  local bridge_dry_run=auto bridge_root= bridge_before= bridge_after= bridge_install_status=0
+  local bridge_after_root= bridge_mode=unknown bridge_before_verified=1
+  local -a bridge_arguments bridge_context
+  bridge_arguments=("$@")
+  bridge_context=(--global)
+  case "$bridge_command" in
+    install|i) shift ;;
+    *) command npm "${bridge_arguments[@]}"; return $? ;;
+  esac
+  while [ "$#" -gt 0 ]; do
+    case "$1" in
+      -g|--global|--global=true) bridge_global=1 ;;
+      @minhspark/codex-mcp-bridge|@minhspark/codex-mcp-bridge@?*) bridge_packages=$((bridge_packages + 1)) ;;
+      --dry-run|--dry-run=true) bridge_dry_run=true ;;
+      --no-dry-run|--dry-run=false) bridge_dry_run=false ;;
+      --no-fund|--no-audit|--force|--ignore-scripts|--foreground-scripts) ;;
+      --prefix=*)
+        if [ "${#bridge_context[@]}" -ne 1 ] || [ "$1" = --prefix= ]; then bridge_supported=0; break; fi
+        bridge_context+=("$1")
+        ;;
+      --prefix)
+        if [ "$#" -lt 2 ] || [ "${#bridge_context[@]}" -ne 1 ] || [ -z "$2" ]; then bridge_supported=0; break; fi
+        case "$2" in -*) bridge_supported=0; break ;; esac
+        bridge_context+=("$1" "$2")
+        shift
+        ;;
+      *) bridge_supported=0 ;;
+    esac
+    shift
+  done
+  if [ "$bridge_supported" -ne 1 ] || [ "$bridge_global" -ne 1 ] || [ "$bridge_packages" -ne 1 ]; then
+    command npm "${bridge_arguments[@]}"
+    return $?
+  fi
+  if [ "$bridge_dry_run" = auto ]; then
+    bridge_mode="$(command npm config get dry-run "${bridge_context[@]}" 2>/dev/null)" || bridge_mode=unknown
+  else
+    bridge_mode="$bridge_dry_run"
+  fi
+  if [ "$bridge_mode" = false ]; then
+    bridge_root="$(command npm root "${bridge_context[@]}" 2>/dev/null)" || bridge_root=
+    case "$bridge_root" in
+      /*)
+        if [ -e "$bridge_root/@minhspark/codex-mcp-bridge/package.json" ]; then
+          bridge_before="$(_codex_bridge_installed_version "$bridge_root")" || bridge_before_verified=0
+        fi
+        ;;
+      *) bridge_before_verified=0 ;;
+    esac
+  fi
+  command npm "${bridge_arguments[@]}" || bridge_install_status=$?
+  if [ "$bridge_install_status" -ne 0 ]; then
+    printf 'Failed to install: @minhspark/codex-mcp-bridge (exit code %s). See npm error above.\n' "$bridge_install_status" >&2
+  elif [ "$bridge_mode" = true ]; then
+    printf 'Dry run completed: @minhspark/codex-mcp-bridge (no changes applied).\n'
+  elif [ "$bridge_mode" != false ]; then
+    printf 'Warning: npm completed, but installation mode could not be verified.\n' >&2
+  else
+    bridge_after_root="$(command npm root "${bridge_context[@]}" 2>/dev/null)" || bridge_after_root=
+    case "$bridge_after_root" in
+      /*) bridge_after="$(_codex_bridge_installed_version "$bridge_after_root")" || bridge_after= ;;
+    esac
+    if [ -z "$bridge_after" ] || [ "$bridge_before_verified" -ne 1 ] || [ "$bridge_after_root" != "$bridge_root" ]; then
+      printf 'Warning: npm completed, but the installed @minhspark/codex-mcp-bridge version could not be verified.\n' >&2
+    elif [ "$bridge_after_root" = "$bridge_root" ] && [ "$bridge_after" = "$bridge_before" ]; then
+      printf 'Already up to date: @minhspark/codex-mcp-bridge v%s\n' "$bridge_after"
+    elif [ "$bridge_after_root" = "$bridge_root" ] && [ -n "$bridge_before" ]; then
+      printf 'Successfully updated: @minhspark/codex-mcp-bridge v%s -> v%s\n' "$bridge_before" "$bridge_after"
+    else
+      printf 'Successfully installed: @minhspark/codex-mcp-bridge v%s\n' "$bridge_after"
+    fi
+  fi
+  return "$bridge_install_status"
+}

package/src/claude-bridge.mjs

@@ -7,8 +7,11 @@ import { CodexAppServerClient } from "./app-server-client.mjs";
 import { PLATFORM_LABEL } from "./platform.mjs";
 import { PeerEndpoint, findClaudeSession, listClaudeSessions, readTranscript } from "./peer-protocol.mjs";
 import { createThreadDelivery } from "./thread-delivery.mjs";
+import { exitForVersionRequest } from "./cli-version.mjs";
 
-const VERSION = "1.13.2";
+exitForVersionRequest(import.meta.url);
+
+const VERSION = "1.13.3";
 const FORWARD_MIN_INTERVAL_MS = 5000;
 const FORWARD_MAX_PER_SESSION = 50;
 

package/src/cli-version.mjs

@@ -0,0 +1,20 @@
+import { readFileSync, realpathSync, writeSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+
+export function exitForVersionRequest(entrypointUrl) {
+  if (!process.argv.slice(2).some((arg) => arg === "--version" || arg === "-v")) return;
+  if (!process.argv[1]) return;
+
+  let entrypoint;
+  try {
+    entrypoint = realpathSync(process.argv[1]);
+  } catch (error) {
+    if (error.code === "ENOENT" || error.code === "ENOTDIR") return;
+    throw error;
+  }
+  if (entrypoint !== realpathSync(fileURLToPath(entrypointUrl))) return;
+
+  const { version } = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8"));
+  writeSync(process.stdout.fd, `${version}\n`);
+  process.exit(0);
+}

package/src/index.mjs

@@ -24,8 +24,11 @@ import { runTurn } from "./turn.mjs";
 import { BridgeSecurityPolicy } from "./security-policy.mjs";
 import { DesktopTaskDelivery, DESKTOP_TOOL_BUDGET_MS } from "./thread-delivery.mjs";
 import { desktopTasksConfigured } from "./native-relay.mjs";
+import { exitForVersionRequest } from "./cli-version.mjs";
 
-const VERSION = "1.13.2";
+exitForVersionRequest(import.meta.url);
+
+const VERSION = "1.13.3";
 const log = (msg) => process.stderr.write(`[codex-mcp-bridge] ${msg}\n`);
 
 /**
@@ -122,17 +125,23 @@ async function delegateDesktopTask({ cwd, prompt, name, model, effort, timeoutSe
   if (openInApp ?? DEFAULT_OPEN_IN_APP) {
     try {
       await desktopTasks.open(created.threadId, { deadline });
-      notes.push("opened in Codex Desktop while the task runs");
+      notes.push(created.reused ? "opened the existing task in Codex Desktop" : "opened in Codex Desktop while the task runs");
     } catch (err) {
-      notes.push(`task was accepted; opening its page failed: ${err.message}`);
+      notes.push(`${created.reused ? "existing task retained" : "task was accepted"}; opening its page failed: ${err.message}`);
     }
   }
   const lines = [
     created.reused ? "Reused the existing Codex Desktop task; the prompt was not resent" : "Delegated through Codex Desktop", `threadId: ${created.threadId}`, `name: ${created.name}`,
-    `cwd: ${created.cwd}`, `projectId: ${created.projectId}`, `project: ${created.projectName}`,
+    `cwd: ${created.cwd}`,
+    ...(created.projectAssignmentStatus === "unverified"
+      ? [`expected projectId: ${created.expectedProjectId}`, `expected project: ${created.expectedProjectName ?? "(unnamed)"}`, "project assignment: unverified", created.projectAssignmentNote]
+      : [`projectId: ${created.projectId}`, `project: ${created.projectName ?? "(unnamed)"}`, ...(created.projectAssignmentStatus === "verified" ? ["project assignment: verified in Desktop's current listing"] : [])]),
     "permissions: Codex Desktop settings; no external app-server writer",
-    ...(created.promptChanged ? ["The edited brief was not sent. Use send_to_codex_thread with this threadId for a continuation, or a distinct title for separate work."] : []), ...notes,
+    ...(created.promptChanged ? [created.projectAssignmentStatus === "unverified"
+      ? "The edited brief was not sent. Inspect this task's project assignment before continuing it."
+      : "The edited brief was not sent. Use send_to_codex_thread with this threadId for a continuation, or a distinct title for separate work."] : []), ...notes,
   ];
+  if (created.projectAssignmentStatus === "unverified") return textResult([...lines, "status: existing task retained; project assignment needs inspection"].join("\n"));
   if (!waitForReply) return textResult([...lines, created.reused ? "status: existing task; read it to check its current progress" : "status: accepted; the task is running in Desktop"].join("\n"));
   try {
     const result = await desktopTasks.wait(created.threadId, { timeoutMs: Math.max(0, deadline - Date.now()) });

package/src/native-relay-companion.mjs

@@ -19,8 +19,11 @@ import {
   decodeNativeToolResult,
 } from "./native-relay.mjs";
 import { IS_WINDOWS, PLATFORM_LABEL } from "./platform.mjs";
+import { exitForVersionRequest } from "./cli-version.mjs";
 
-const VERSION = "1.13.2";
+exitForVersionRequest(import.meta.url);
+
+const VERSION = "1.13.3";
 const log = (msg) => process.stderr.write(`[native-relay] ${msg}\n`);
 
 function errorResponse(code, message) {

package/src/thread-delivery.mjs

@@ -129,7 +129,45 @@ export class DesktopTaskDelivery {
     if (thread?.id !== receipt.threadId || thread.hostId !== "local" || !thread.cwd || path.relative(cwd, realpathSync.native(thread.cwd))) throw new Error(`Existing Desktop task ${receipt.threadId} did not confirm the requested local workspace. No prompt was sent.`);
     this.security.assertCwd(thread.cwd);
     this.security.assertThread(thread.id, thread.cwd);
-    return { threadId: receipt.threadId, name: thread.title ?? receipt.name ?? "(unnamed)", cwd, projectId: receipt.projectId, projectName: receipt.projectName, backend: NATIVE_BACKEND, reused: true, promptChanged: receipt.promptHash !== promptHash };
+    const assignment = await this.receiptProjectAssignment(receipt, cwd, { deadline });
+    return { threadId: receipt.threadId, name: thread.title ?? receipt.name ?? "(unnamed)", cwd, ...assignment, backend: NATIVE_BACKEND, reused: true, promptChanged: receipt.promptHash !== promptHash };
+  }
+
+  async receiptProjectAssignment(receipt, cwd, { deadline }) {
+    let project;
+    try {
+      const listed = await this.request("list_projects", {}, { deadline });
+      if (!Array.isArray(listed?.projects)) throw new Error("Desktop returned no project list");
+      project = matchDesktopProject(listed.projects, cwd);
+      if (receipt.projectId && receipt.projectId !== project.projectId) throw new Error("The saved project identity changed for this directory");
+    } catch (err) {
+      throw new Error(`Existing Desktop task ${receipt.threadId}'s saved project could not be verified: ${err.message}. No prompt was resent and no duplicate task was created. Inspect this existing task and its project settings.`, { cause: err });
+    }
+    const unverified = (reason) => ({
+      expectedProjectId: project.projectId,
+      expectedProjectName: project.label,
+      projectAssignmentStatus: "unverified",
+      projectAssignmentNote: `${reason} The task's current project assignment is unverified. Its workspace and existing ID were retained; no prompt was resent and no duplicate task was created. Inspect this task in Codex Desktop.`,
+    });
+    let snapshot;
+    try {
+      snapshot = await this.request("list_threads", { limit: 50 }, { deadline });
+      if (!Array.isArray(snapshot?.threads) || !Array.isArray(snapshot?.pinnedThreads)) throw new Error("Desktop returned an invalid thread list");
+      if (snapshot.unavailableHosts?.some((host) => host === "local" || host?.hostId === "local")) throw new Error("The local Desktop host is unavailable");
+    } catch (err) {
+      return unverified(`Desktop's recent/pinned listing could not be confirmed: ${err.message}.`);
+    }
+    const observed = [...snapshot.pinnedThreads, ...snapshot.threads].filter((thread) => thread?.id === receipt.threadId && thread.kind === "codex" && thread.hostId === "local");
+    if (observed.length === 0) return unverified("This task is absent from Desktop's recent/pinned listing.");
+    for (const thread of observed) {
+      if (thread.projectId !== undefined && thread.projectId !== project.projectId) throw new Error(`Existing Desktop task ${receipt.threadId}'s project assignment changed. No prompt was resent and no duplicate task was created. Inspect its assignment in Codex Desktop.`);
+      if (thread.cwd) {
+        this.security.assertCwd(thread.cwd);
+        if (path.relative(cwd, realpathSync.native(thread.cwd))) throw new Error(`Existing Desktop task ${receipt.threadId}'s listed workspace changed. No prompt was resent and no duplicate task was created.`);
+      }
+    }
+    if (observed.some((thread) => thread.projectId === undefined || !thread.cwd)) return unverified("Desktop's listing omitted this task's project or workspace metadata.");
+    return { projectId: project.projectId, projectName: project.label, projectAssignmentStatus: "verified" };
   }
 
   async create({ cwd, prompt, name, dedupeName = name, model, effort, deadline = this.now() + DESKTOP_TOOL_BUDGET_MS }) {