@minhspark/codex-mcp-bridge 1.19.3 → 1.19.4

package/CHANGELOG.md

@@ -4,6 +4,12 @@ Follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and [SemVer](ht
 
 ## [Unreleased]
 
+## [1.19.4] - 2026-10-02
+
+### Fixed
+
+- Detect a managed Codex `requirements.toml` whose `allowed_sandbox_modes` omits `read-only` before auto-starting an external app-server. The bridge and `npm run check` now report the policy error directly instead of waiting for a generic connection failure; they do not edit the administrator-managed file.
+
 ## [1.19.3] - 2026-09-30
 
 ### Changed

package/README.md

@@ -310,6 +310,7 @@ Start with `codex doctor` for Codex installation problems and `claude doctor` fo
 
 | Error / symptom | Fix |
 |---|---|
+| Codex says `Organization settings could not be loaded`, or the bridge reports `INVALID_MANAGED_CONFIG` | Check the managed `requirements.toml` at `%ProgramData%\OpenAI\Codex\requirements.toml` on Windows or `/etc/codex/requirements.toml` on macOS/Linux. If it defines `allowed_sandbox_modes`, the list must include `"read-only"` alongside any other allowed modes. Ask the machine administrator to correct it, then run `codex doctor --summary --ascii`. The bridge reports this error before trying to start an external app-server; it does not change managed policy. |
 | `codex binary not found`, `ENOENT`, or Windows `EINVAL` during registration | Locate the actual executable. Set `CODEX_EXE` before rerunning the installer: PowerShell `$env:CODEX_EXE = (Get-Command codex.exe).Source`; macOS/Linux `export CODEX_EXE="$(command -v codex)"`. On Windows, do not point it at `codex.ps1` or `codex.cmd`. |
 | Tools appear in Claude Desktop but not in its Code task | Complete the separate [Claude Code registration](#register-claude-code), then reconnect `/mcp` in that Code session. |
 | Installer refuses an entry with custom access/timeout settings | Keep those settings. Update only the existing entry's `command` and `args` to the values printed by the installer, then reconnect. |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@minhspark/codex-mcp-bridge",
-  "version": "1.19.3",
+  "version": "1.19.4",
   "description": "Two-way MCP bridge between Claude and Codex: prompts into a live Codex thread, messages into a running Claude Code session.",
   "keywords": [
     "mcp",

package/scripts/check.mjs

@@ -2,6 +2,7 @@ import { Client } from "@modelcontextprotocol/sdk/client/index.js";
 import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
+import { readManagedRequirementsIssue } from "../src/app-server-client.mjs";
 import { desktopTasksConfigured } from "../src/native-relay.mjs";
 
 const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
@@ -40,6 +41,8 @@ const transport = new StdioClientTransport({
 const client = new Client({ name: "bridge-check", version: "1.0.0" });
 
 try {
+  const managedIssue = readManagedRequirementsIssue();
+  if (managedIssue) throw new Error(managedIssue);
   await client.connect(transport);
   const tools = await client.listTools();
   console.log("tools:", tools.tools.map((t) => t.name).join(", "));

package/scripts/install-native-relay.mjs

@@ -22,7 +22,7 @@ import { createReleaseSnapshot, snapshotRoot } from "../src/release-snapshot.mjs
 
 exitForVersionRequest(import.meta.url);
 
-const VERSION = "1.19.3";
+const VERSION = "1.19.4";
 const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
 const entry = path.join(root, "src", "mcp-supervisor.mjs");
 const entryArgs = ["native-relay-companion.mjs"];

package/src/app-server-client.mjs

@@ -1,4 +1,6 @@
 import { execFileSync, spawn } from "node:child_process";
+import { readFileSync } from "node:fs";
+import path from "node:path";
 import { setTimeout as delay } from "node:timers/promises";
 
 import { PLATFORM_LABEL, resolveCodexBin, spawnEnv } from "./platform.mjs";
@@ -8,6 +10,24 @@ const DEFAULT_URL = "ws://127.0.0.1:8791";
 const CONNECT_ATTEMPTS = 2;
 const CONNECT_RETRY_DELAY_MS = 750;
 
+function managedRequirementsPath() {
+  return process.platform === "win32"
+    ? path.join(process.env.ProgramData ?? process.env.PROGRAMDATA ?? "C:\\ProgramData", "OpenAI", "Codex", "requirements.toml")
+    : "/etc/codex/requirements.toml";
+}
+
+export function readManagedRequirementsIssue(filePath = managedRequirementsPath()) {
+  let contents;
+  try {
+    contents = readFileSync(filePath, "utf8");
+  } catch {
+    return null;
+  }
+  const sandboxModes = /^\s*allowed_sandbox_modes\s*=\s*\[([\s\S]*?)\]/m.exec(contents);
+  if (!sandboxModes || /["']read-only["']/.test(sandboxModes[1])) return null;
+  return `Codex managed requirements at ${filePath} are invalid: allowed_sandbox_modes must include "read-only". Ask the machine administrator to repair the policy, then run codex doctor. The bridge does not edit managed policy files.`;
+}
+
 export function parseListeningPids(output, port) {
   const suffix = `:${port}`;
   return [
@@ -81,6 +101,7 @@ export class CodexAppServerClient {
     this.url = options.url ?? process.env.CODEX_APP_SERVER_URL ?? DEFAULT_URL;
     assertAllowedAppServerUrl(this.url);
     this.codexBin = resolveCodexBin(options.codexBin);
+    this.requirementsPath = options.requirementsPath ?? managedRequirementsPath();
     this.autoStart = options.autoStart ?? process.env.CODEX_BRIDGE_AUTOSTART !== "0";
     this.log = options.log ?? (() => {});
     const requestedApproval = options.approval ?? process.env.CODEX_BRIDGE_APPROVAL ?? "deny";
@@ -119,6 +140,8 @@ export class CodexAppServerClient {
   }
 
   async startServer() {
+    const managedIssue = readManagedRequirementsIssue(this.requirementsPath);
+    if (managedIssue) throw new AppServerError(managedIssue, "INVALID_MANAGED_CONFIG");
     this.log(`starting shared app-server on ${PLATFORM_LABEL}: ${this.codexBin} app-server --listen ${this.url}`);
     const needsShell = /\.(cmd|bat)$/i.test(this.codexBin);
     const child = spawn(this.codexBin, ["app-server", "--listen", this.url], {
@@ -194,6 +217,7 @@ export class CodexAppServerClient {
           lastError = err;
           this.#assertConnectionEpoch(epoch);
           this.log(`connect attempt ${attempt}/${CONNECT_ATTEMPTS} failed: ${err.message}`);
+          if (err.code === "INVALID_MANAGED_CONFIG") throw err;
           if (attempt < CONNECT_ATTEMPTS) await delay(CONNECT_RETRY_DELAY_MS);
         }
       }

package/src/claude-bridge.mjs

@@ -26,7 +26,7 @@ import { AGENT_PROMPT_GUIDANCE, PROMPT_FIELD_HINT } from "./prompt-guidance.mjs"
 
 exitForVersionRequest(import.meta.url);
 
-const VERSION = "1.19.3";
+const VERSION = "1.19.4";
 void import("./telemetry.mjs").then(({ startUsageReporting }) => startUsageReporting({ version: VERSION })).catch(() => {});
 const FORWARD_MIN_INTERVAL_MS = 5000;
 const FORWARD_MAX_PER_SESSION = 50;

package/src/index.mjs

@@ -34,7 +34,7 @@ import { AGENT_PROMPT_GUIDANCE, PROMPT_FIELD_HINT } from "./prompt-guidance.mjs"
 
 exitForVersionRequest(import.meta.url);
 
-const VERSION = "1.19.3";
+const VERSION = "1.19.4";
 void import("./telemetry.mjs").then(({ startUsageReporting }) => startUsageReporting({ version: VERSION })).catch(() => {});
 const log = (msg) => process.stderr.write(`[codex-mcp-bridge] ${msg}\n`);
 

package/src/native-relay-companion.mjs

@@ -34,7 +34,7 @@ import { createHardenedRootPolicy } from "./hardened-root-policy.mjs";
 
 exitForVersionRequest(import.meta.url);
 
-const VERSION = "1.19.3";
+const VERSION = "1.19.4";
 const log = (msg) => process.stderr.write(`[native-relay] ${msg}\n`);
 
 function errorResponse(code, message, sent) {