@minhspark/codex-mcp-bridge 1.22.2 → 1.22.3

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-mcp-bridge",
-  "version": "1.22.2",
+  "version": "1.22.3",
   "description": "Connect ChatGPT to your own Codex Desktop projects and conversations.",
   "author": {
     "name": "Bui Dang Minh"

package/CHANGELOG.md

@@ -4,6 +4,22 @@ Follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and [SemVer](ht
 
 ## [Unreleased]
 
+## [1.22.3] - 2026-10-15
+
+### Fixed
+
+- Retry the complete Claude Desktop identity snapshot up to three times when task metadata changes during inspection. An unrelated active chat updating its metadata no longer causes an immediate sender rejection; persistent changes, conflicting identities, archived tasks, and invalid metadata still fail closed.
+- Include bounded metadata diagnostic codes in sender-verification failures instead of discarding the underlying failure category behind a generic account message. Diagnostics exclude task contents and untrusted error text.
+
+### Verification
+
+- Regression tests reproduce a one-time unrelated metadata update, persistent updates, archive changes, duplicate identities, and diagnostic sanitization.
+- A live Windows check from the originally affected Claude Code session completed two reads, one diagnostic send to its existing Codex task, and reply observation through the returned delivery receipt. The exact diagnostic reply was verified in the destination task.
+
+### Upgrade notes
+
+- Existing supervisors load the updated source when safe. Shared Desktop MCP entries still cannot identify a Code task's process ancestry; use the per-Code bridge registration. The repair does not resend earlier work or weaken account, process, or project checks.
+
 ## [1.22.2] - 2026-10-13
 
 ### Fixed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@minhspark/codex-mcp-bridge",
-  "version": "1.22.2",
+  "version": "1.22.3",
   "description": "Two-way MCP bridge between Claude and Codex: prompts into a live Codex thread, messages into a running Claude Code session.",
   "keywords": [
     "mcp",

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "codex-mcp-bridge",
-  "version": "1.22.2",
+  "version": "1.22.3",
   "description": "Connect ChatGPT to your own Codex Desktop projects and conversations.",
   "author": {
     "name": "Bui Dang Minh",

package/scripts/install-native-relay.mjs

@@ -23,7 +23,7 @@ import { enableCodexFullAccess, fullAccessEnabled } from "../src/codex-full-acce
 
 exitForVersionRequest(import.meta.url);
 
-const VERSION = "1.22.2";
+const VERSION = "1.22.3";
 const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
 const entry = path.join(root, "src", "mcp-supervisor.mjs");
 const entryArgs = ["native-relay-companion.mjs"];

package/src/claude-bridge.mjs

@@ -29,7 +29,7 @@ import { registerProjectOnboardingTools } from "./project-onboarding-tools.mjs";
 
 exitForVersionRequest(import.meta.url);
 
-const VERSION = "1.22.2";
+const VERSION = "1.22.3";
 void import("./telemetry.mjs").then(({ startUsageReporting }) => startUsageReporting({ version: VERSION })).catch(() => {});
 const FORWARD_MIN_INTERVAL_MS = 5000;
 const FORWARD_MAX_PER_SESSION = 50;

package/src/claude-desktop-context.mjs

@@ -132,7 +132,14 @@ export function readClaudeDesktopContext(session, { platform = process.platform,
   try {
     const directory = root ?? (account ? path.join(account.root, "claude-code-sessions") : sessionsRoot(platform, env));
     if (!fs.existsSync(directory)) return result("missing", "Claude Desktop task metadata is not available on this host.");
-    records = readClaudeDesktopTasks({ platform, env, root, account });
+    for (let attempt = 0; attempt < 3; attempt += 1) {
+      try {
+        records = readClaudeDesktopTasks({ platform, env, root, account });
+        break;
+      } catch (error) {
+        if (error.message !== "metadata changed" || attempt === 2) throw error;
+      }
+    }
   } catch (error) {
     const detail = {
       "file limit": " A task metadata file exceeds the 4 MiB per-file limit.",
@@ -140,7 +147,13 @@ export function readClaudeDesktopContext(session, { platform = process.platform,
       "scan limit": " The task directory exceeds the 8192-entry scan limit.",
       "metadata changed": " Task metadata changed during inspection; retry discovery.",
     }[error.message] ?? "";
-    return result("mismatch", `Claude Desktop task metadata could not be read completely and consistently; no task identity is confirmed.${detail}`);
+    const code = {
+      "file limit": "FILE_LIMIT",
+      "identity limit": "IDENTITY_LIMIT",
+      "scan limit": "SCAN_LIMIT",
+      "metadata changed": "METADATA_CHANGED",
+    }[error.message] ?? "UNREADABLE_METADATA";
+    return { ...result("mismatch", `Claude Desktop task metadata could not be read completely and consistently; no task identity is confirmed.${detail}`), diagnostic: { stage: "task_metadata", code } };
   }
 
   const primary = records.filter((record) => record.cliSessionId === session.sessionId);

package/src/claude-sender-context.mjs

@@ -265,6 +265,17 @@ function senderFailureCode(error) {
   return "UNAVAILABLE";
 }
 
+const METADATA_FAILURE_CODES = new Set(["METADATA_CHANGED", "FILE_LIMIT", "IDENTITY_LIMIT", "SCAN_LIMIT", "UNREADABLE_METADATA", "MISSING", "MISMATCH", "AMBIGUOUS", "UNAVAILABLE"]);
+const INSPECTION_FAILURE_CODES = new Set(["INSPECTOR_START_TIMEOUT", "INSPECTION_TIMEOUT", "OUTPUT_LIMIT", "ENOENT", "EACCES", "EPERM", "NATIVE_EXIT", "INVALID_JSON", "UNAVAILABLE"]);
+
+function safeSenderDiagnostic(diagnostic) {
+  if (!diagnostic || typeof diagnostic !== "object") return null;
+  const { stage, code } = diagnostic;
+  if (stage === "task_metadata" && (METADATA_FAILURE_CODES.has(code) || INSPECTION_FAILURE_CODES.has(code))) return { stage, code };
+  if (["session_registry", "process_inspection", "ancestry_validation"].includes(stage) && INSPECTION_FAILURE_CODES.has(code)) return { stage, code };
+  return null;
+}
+
 export async function readClaudeSenderContext({ account, parentPid = process.ppid, readAncestry = readProcessAncestry, listSessions = listClaudeSessions, readContext = readClaudeDesktopContext } = {}) {
   if (account?.status !== "verified" || !account.fingerprint) return senderResult("unavailable", "The calling Claude account is not verified.");
   let stage = "session_registry";
@@ -291,7 +302,12 @@ export async function readClaudeSenderContext({ account, parentPid = process.ppi
     if (session.processStart && session.processStart !== process.processStart) return senderResult("unavailable", "The calling Claude session's registered process identity changed.");
     stage = "task_metadata";
     const context = readContext(session, { account });
-    if (context.status !== "matched") return senderResult("unavailable", "The calling Claude Code session is not confirmed in the currently signed-in account.");
+    if (context.status !== "matched") {
+      const code = context.diagnostic?.stage === "task_metadata" && METADATA_FAILURE_CODES.has(context.diagnostic.code)
+        ? context.diagnostic.code
+        : ["missing", "mismatch", "ambiguous"].includes(context.status) ? context.status.toUpperCase() : "UNAVAILABLE";
+      return senderResult("unavailable", `The calling Claude Code session is not confirmed in the currently signed-in account. (${stage}:${code})`, { diagnostic: { stage, code } });
+    }
     return senderResult("verified", "The calling MCP process belongs to a live Claude Desktop Code session in the selected account.", {
       pid: session.pid, sessionId: session.sessionId, taskId: context.taskId, cwd: context.cwd,
       processStart: process.processStart, accountFingerprint: account.fingerprint,
@@ -307,6 +323,8 @@ export function requireClaudeSenderContext(sender) {
   if (sender?.status !== "verified") {
     const error = new Error(sender?.reason ?? "The calling Claude Desktop Code session is unverified.");
     error.code = "CLAUDE_SENDER_CONTEXT_UNVERIFIED";
+    const diagnostic = safeSenderDiagnostic(sender?.diagnostic);
+    if (diagnostic) error.diagnostic = diagnostic;
     throw error;
   }
   return sender;

package/src/index.mjs

@@ -40,7 +40,7 @@ import { PROJECT_SETUP_TOOLS, registerProjectOnboardingTools } from "./project-o
 
 exitForVersionRequest(import.meta.url);
 
-const VERSION = "1.22.2";
+const VERSION = "1.22.3";
 void import("./telemetry.mjs").then(({ startUsageReporting }) => startUsageReporting({ version: VERSION })).catch(() => {});
 const log = (msg) => process.stderr.write(`[codex-mcp-bridge] ${msg}\n`);
 

package/src/native-relay-companion.mjs

@@ -38,7 +38,7 @@ import { NativeCreationReceipts, creationIdValid } from "./native-creation-recei
 
 exitForVersionRequest(import.meta.url);
 
-const VERSION = "1.22.2";
+const VERSION = "1.22.3";
 const log = (msg) => process.stderr.write(`[native-relay] ${msg}\n`);
 
 function errorResponse(code, message, sent, details) {