@minhspark/codex-mcp-bridge 1.22.7 → 1.22.9

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-mcp-bridge",
-  "version": "1.22.7",
+  "version": "1.22.9",
   "description": "Connect ChatGPT to your own Codex Desktop projects and conversations.",
   "author": {
     "name": "Bui Dang Minh"

package/CHANGELOG.md

@@ -4,6 +4,43 @@ Follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and [SemVer](ht
 
 ## [Unreleased]
 
+## [1.22.9] - 2026-10-20
+
+### Fixed
+
+- Read the Claude Desktop configuration with exact bigint stats in `codex-mcp-bridge-install`, so a configuration file replaced during the installer's read is detected even when the two inodes differ only beyond Number precision. v1.22.8 converted the runtime stores but missed this installer.
+- Notice a new reply in a Claude Code transcript when the file changes within the same millisecond and keeps its size. The reply poll now compares the file's device, inode, nanosecond modification and change times, and size instead of only the millisecond modification time and size.
+
+### Verification
+
+- 2 new regression tests: a Desktop configuration whose inode changes only below Number precision (`2^60` and `2^60 + 1`) is rejected and left untouched, and a transcript reply is observed while its Number `mtimeMs` and size stay frozen. Both fail on v1.22.8.
+- Two independent sweeps of `src/`, `scripts/` and `bin/`, one by stat API and one by stored or compared stat data, found no other Number-based identity or change detection.
+- CI passed on macOS, Ubuntu and Windows with Node 22 and 24. CodeQL re-reported 3 `js/path-injection` flows on the edited stat lines; each source is operator environment configuration, matching earlier dismissals, and they were dismissed as false positives.
+
+### Limitations
+
+- The 64-bit NTFS case runs for real only on Windows CI; local tests simulate it with mocked stats.
+
+## [1.22.8] - 2026-10-20
+
+### Fixed
+
+- Compare file identities with exact 64-bit values everywhere. Reply and native creation receipts, the creation signing key, Codex rollout watermarks and segment checks, Codex account evidence, Claude Desktop task metadata and account state, project repository metadata, and the Sites connector's private files read `dev`, `ino`, `size` and nanosecond `mtime`/`ctime` as bigint. Number stats round inodes above 2^53, which NTFS file IDs and some macOS volumes (such as `/tmp` on the sealed system volume) exceed, so a replaced file or directory could pass as unchanged; this made `rejects replacement of a pinned receipt directory` fail intermittently on Windows CI.
+
+### Security
+
+- A rollout watermark now stores its file identity as exact decimal strings. A reply receipt written by an earlier version still matches only when its numeric identity is an exactly representable integer equal to the current file; a rounded identity no longer matches, and the observation reports the rollout as changed instead.
+
+### Verification
+
+- 7 new regression tests. Two identities that differ only below Number precision (`2^60` and `2^60 + 1`) compare as different for both `ino` and `dev`; the reply and native creation receipt stores reject a pinned directory whose inode changes only below 2^53, and both store tests fail on v1.22.7. The rollout watermark keeps exact string identities through JSON and honors only exactly representable legacy numbers.
+- A review of the change found a test that now passed without reaching its byte comparison: its mock returned Number stats to code that requests bigint. It was fixed and checked by removing the comparison, which makes the test fail.
+- CI passed on macOS, Ubuntu and Windows with Node 22 and 24, including `test (windows-latest, 22)` where the flake appeared. CodeQL re-reported 12 `js/path-injection` flows on the edited stat lines; each source is operator `process.env` configuration, matching the earlier dismissals, and they were dismissed as false positives.
+
+### Limitations
+
+- The 64-bit NTFS case runs for real only on Windows CI; local tests simulate it with mocked bigint stats. A reply observation whose earlier receipt stored a rounded rollout identity reports the rollout as changed; inspect that task instead of resending.
+
 ## [1.22.7] - 2026-10-20
 
 ### Added

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@minhspark/codex-mcp-bridge",
-  "version": "1.22.7",
+  "version": "1.22.9",
   "description": "Two-way MCP bridge between Claude and Codex: prompts into a live Codex thread, messages into a running Claude Code session.",
   "keywords": [
     "mcp",

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "codex-mcp-bridge",
-  "version": "1.22.7",
+  "version": "1.22.9",
   "description": "Connect ChatGPT to your own Codex Desktop projects and conversations.",
   "author": {
     "name": "Bui Dang Minh",

package/scripts/install-claude-desktop.mjs

@@ -45,23 +45,23 @@ fs.mkdirSync(path.dirname(cfgPath), { recursive: true });
 function readConfig() {
   let descriptor;
   try {
-    const before = fs.lstatSync(cfgPath);
-    if (!before.isFile() || before.isSymbolicLink() || before.nlink !== 1 || before.size > 4 * 1024 * 1024) throw new Error("Unsafe Desktop configuration file");
+    const before = fs.lstatSync(cfgPath, { bigint: true });
+    if (!before.isFile() || before.isSymbolicLink() || before.nlink !== 1n || before.size > 4n * 1024n * 1024n) throw new Error("Unsafe Desktop configuration file");
     descriptor = fs.openSync(cfgPath, fs.constants.O_RDONLY | (fs.constants.O_NOFOLLOW ?? 0));
-    const opened = fs.fstatSync(descriptor);
-    const fields = ["dev", "ino", "size", "mtimeMs", "ctimeMs"];
+    const opened = fs.fstatSync(descriptor, { bigint: true });
+    const fields = ["dev", "ino", "size", "mtimeNs", "ctimeNs"];
     const matches = (left, right) => fields.every(field => left[field] === right[field]);
-    if (!opened.isFile() || opened.nlink !== 1 || !matches(before, opened)) throw new Error("Desktop configuration changed during access");
-    const data = Buffer.alloc(opened.size);
+    if (!opened.isFile() || opened.nlink !== 1n || !matches(before, opened)) throw new Error("Desktop configuration changed during access");
+    const data = Buffer.alloc(Number(opened.size));
     let offset = 0;
     while (offset < data.length) {
       const count = fs.readSync(descriptor, data, offset, data.length - offset, offset);
       if (!count) throw new Error("Desktop configuration changed during access");
       offset += count;
     }
-    const after = fs.fstatSync(descriptor);
-    const current = fs.lstatSync(cfgPath);
-    if (!current.isFile() || current.isSymbolicLink() || current.nlink !== 1 || !matches(opened, after) || !matches(after, current)) throw new Error("Desktop configuration changed during access");
+    const after = fs.fstatSync(descriptor, { bigint: true });
+    const current = fs.lstatSync(cfgPath, { bigint: true });
+    if (!current.isFile() || current.isSymbolicLink() || current.nlink !== 1n || !matches(opened, after) || !matches(after, current)) throw new Error("Desktop configuration changed during access");
     return { data, version: fields.map(field => current[field]) };
   } catch (error) {
     if (error.code === "ENOENT" && descriptor === undefined) return null;

package/scripts/install-native-relay.mjs

@@ -24,7 +24,7 @@ import { stableInstallPath } from "../src/install-paths.mjs";
 
 exitForVersionRequest(import.meta.url);
 
-const VERSION = "1.22.7";
+const VERSION = "1.22.9";
 const root = stableInstallPath(path.resolve(path.dirname(fileURLToPath(import.meta.url)), ".."));
 const entry = path.join(root, "src", "mcp-supervisor.mjs");
 const entryArgs = ["native-relay-companion.mjs"];

package/src/claude-bridge.mjs

@@ -30,7 +30,7 @@ import { discoverClaudeProject } from "./claude-project-discovery.mjs";
 
 exitForVersionRequest(import.meta.url);
 
-const VERSION = "1.22.7";
+const VERSION = "1.22.9";
 void import("./telemetry.mjs").then(({ startUsageReporting }) => startUsageReporting({ version: VERSION })).catch(() => {});
 const FORWARD_MIN_INTERVAL_MS = 5000;
 const FORWARD_MAX_PER_SESSION = 50;

package/src/claude-desktop-context.mjs

@@ -9,7 +9,7 @@ const TASK_FILE = new RegExp(`^(local_${UUID})\\.json$`, "i");
 const MAX_ENTRIES = 8192;
 const MAX_FILE_BYTES = 4 * 1024 * 1024;
 const MAX_IDENTITY_BYTES = 32 * 1024 * 1024;
-const VERSION_FIELDS = ["size", "mtimeMs", "ctimeMs", "ino", "dev"];
+const VERSION_FIELDS = ["size", "mtimeNs", "ctimeNs", "ino", "dev"];
 
 const sameVersion = (left, right) => VERSION_FIELDS.every((field) => left[field] === right[field]);
 
@@ -68,12 +68,12 @@ function metadataFiles(root, accountId) {
 function readMetadata(file, budget) {
   const descriptor = fs.openSync(file, fs.constants.O_RDONLY | (fs.constants.O_NOFOLLOW ?? 0));
   try {
-    const before = fs.fstatSync(descriptor);
-    if (!before.isFile() || before.size > MAX_FILE_BYTES) throw new Error("file limit");
-    const bytes = Buffer.alloc(before.size);
+    const before = fs.fstatSync(descriptor, { bigint: true });
+    if (!before.isFile() || before.size > BigInt(MAX_FILE_BYTES)) throw new Error("file limit");
+    const bytes = Buffer.alloc(Number(before.size));
     if (fs.readSync(descriptor, bytes, 0, bytes.length, 0) !== bytes.length) throw new Error("short read");
-    const after = fs.fstatSync(descriptor);
-    const current = fs.lstatSync(file);
+    const after = fs.fstatSync(descriptor, { bigint: true });
+    const current = fs.lstatSync(file, { bigint: true });
     if (!sameVersion(before, after) || current.isSymbolicLink() || !sameVersion(current, after)) throw new Error("metadata changed");
     budget.versions.set(file, current);
     budget.digests.set(file, createHash("sha256").update(bytes).digest("hex"));
@@ -217,7 +217,7 @@ export function readClaudeDesktopTasks({ platform = process.platform, env = proc
   const currentFiles = metadataFiles(directory, account?.accountId);
   if (files.length !== currentFiles.length || files.some((file, index) => file !== currentFiles[index])) throw new Error("metadata changed");
   for (const file of files) {
-    const current = fs.lstatSync(file);
+    const current = fs.lstatSync(file, { bigint: true });
     if (!current.isFile() || !sameVersion(current, budget.versions.get(file)) || rereadMetadata(file) !== budget.digests.get(file)) throw new Error("metadata changed");
   }
   return records;

package/src/codex-account-context.mjs

@@ -16,22 +16,22 @@ function identity(value) {
 }
 
 function readStable(file, limit) {
-  const entry = fs.lstatSync(file);
+  const entry = fs.lstatSync(file, { bigint: true });
   if (!entry.isFile() || entry.isSymbolicLink()) throw new Error("Codex account evidence must be a regular file");
   const descriptor = fs.openSync(file, fs.constants.O_RDONLY | (fs.constants.O_NOFOLLOW ?? 0));
   try {
-    const before = fs.fstatSync(descriptor);
-    if (!before.isFile() || before.size > limit || entry.ino !== before.ino || entry.dev !== before.dev) throw new Error("Codex account evidence is invalid or exceeds its read limit");
-    const data = Buffer.alloc(before.size);
+    const before = fs.fstatSync(descriptor, { bigint: true });
+    if (!before.isFile() || before.size > BigInt(limit) || entry.ino !== before.ino || entry.dev !== before.dev) throw new Error("Codex account evidence is invalid or exceeds its read limit");
+    const data = Buffer.alloc(Number(before.size));
     let offset = 0;
     while (offset < data.length) {
       const count = fs.readSync(descriptor, data, offset, data.length - offset, offset);
       if (!count) throw new Error("Codex account evidence changed while reading; retry on the next call");
       offset += count;
     }
-    const after = fs.fstatSync(descriptor);
-    const current = fs.lstatSync(file);
-    if (!current.isFile() || current.isSymbolicLink() || before.size !== after.size || before.mtimeMs !== after.mtimeMs || before.ctimeMs !== after.ctimeMs || before.ino !== current.ino || before.dev !== current.dev || after.size !== current.size || after.mtimeMs !== current.mtimeMs || after.ctimeMs !== current.ctimeMs) throw new Error("Codex account evidence changed while reading; retry on the next call");
+    const after = fs.fstatSync(descriptor, { bigint: true });
+    const current = fs.lstatSync(file, { bigint: true });
+    if (!current.isFile() || current.isSymbolicLink() || before.size !== after.size || before.mtimeNs !== after.mtimeNs || before.ctimeNs !== after.ctimeNs || before.ino !== current.ino || before.dev !== current.dev || after.size !== current.size || after.mtimeNs !== current.mtimeNs || after.ctimeNs !== current.ctimeNs) throw new Error("Codex account evidence changed while reading; retry on the next call");
     return data.toString("utf8");
   } finally {
     fs.closeSync(descriptor);

package/src/codex-native-response.mjs

@@ -4,6 +4,7 @@ import os from "node:os";
 import path from "node:path";
 import { isDeepStrictEqual } from "node:util";
 import { scanRollout } from "./rollout-reader.mjs";
+import { fileIdentity, sameFileIdentity } from "./file-identity.mjs";
 import { findRolloutSegments, confirmsDesktopTask, isLegacyCliSession, assertRolloutSetStable } from "./rollout-segments.mjs";
 
 const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
@@ -52,9 +53,9 @@ function findRollouts(threadId, env) {
 }
 
 function pathIdentity(candidate, kind) {
-  const status = fs.lstatSync(candidate);
+  const status = fs.lstatSync(candidate, { bigint: true });
   if ((kind === "file" ? !status.isFile() : !status.isDirectory()) || status.isSymbolicLink()) throw new Error(`The Codex rollout ${kind === "file" ? "file" : "ancestor"} is not regular`);
-  return { path: candidate, dev: status.dev, ino: status.ino };
+  return { path: candidate, ...fileIdentity(status) };
 }
 
 function capturePathBoundary(file, sessions) {
@@ -77,9 +78,9 @@ function capturePathBoundary(file, sessions) {
 }
 
 function samePathBoundary(expected, current) {
-  return expected.file.dev === current.file.dev && expected.file.ino === current.file.ino &&
+  return sameFileIdentity(expected.file, current.file) &&
     expected.ancestors.length === current.ancestors.length && expected.ancestors.every((entry, index) =>
-      entry.path === current.ancestors[index].path && entry.dev === current.ancestors[index].dev && entry.ino === current.ancestors[index].ino);
+      entry.path === current.ancestors[index].path && sameFileIdentity(entry, current.ancestors[index]));
 }
 
 function readStable(found, maxBytes, { threadId, turnId, afterOffset = 0, prefixSize, dispatchOutputs, dispatchAfterOffset = afterOffset } = {}) {
@@ -136,7 +137,7 @@ function readStableOnce(found, maxBytes, { threadId, turnId, afterOffset, prefix
     },
   });
   const afterBoundary = capturePathBoundary(file, sessions);
-  if (!samePathBoundary(beforeBoundary, afterBoundary) || snapshot.identity.dev !== beforeBoundary.file.dev || snapshot.identity.ino !== beforeBoundary.file.ino) {
+  if (!samePathBoundary(beforeBoundary, afterBoundary) || !sameFileIdentity(snapshot.identity, beforeBoundary.file)) {
     throw new Error("The Codex rollout changed while reading");
   }
   return { ...snapshot, file, sessions, records, dispatches, otherTurnStarts, retainedBytes, session, latestContext, turnBeforeWatermark, prefixSha256: digest.digest("hex") };
@@ -427,7 +428,7 @@ export function resolveCodexNativeDispatchResponse(binding, { env = process.env,
       const mark = marks.find(({ file }) => file === entry.file);
       const snapshot = readStable(entry, maxRolloutBytes, { threadId, afterOffset: mark?.size ?? 0, prefixSize: mark?.size, dispatchOutputs: outputs });
       if (mark) {
-        if (snapshot.identity.dev !== mark.identity?.dev || snapshot.identity.ino !== mark.identity?.ino || snapshot.size < mark.size) throw new Error("The selected native task rollout identity changed after dispatch");
+        if (!sameFileIdentity(snapshot.identity, mark.identity) || snapshot.size < mark.size) throw new Error("The selected native task rollout identity changed after dispatch");
         if (snapshot.prefixSha256 !== mark.prefixSha256) throw new Error("The pre-send Codex rollout history changed after dispatch");
       }
       validateIdentity(snapshot, threadId, cwd, desktopEvidence);
@@ -473,7 +474,7 @@ export function readCodexNativeTurnResponse({ threadId, turnId, previousTurnId,
       retainedBytes += snapshot.retainedBytes;
       if (retainedBytes > maxRolloutBytes) throw new Error("The native turn exceeds the retained-record limit across segments");
       if (mark) {
-        if (snapshot.identity.dev !== mark.identity?.dev || snapshot.identity.ino !== mark.identity?.ino || snapshot.size < mark.size) throw new Error("The selected native task rollout identity changed after dispatch");
+        if (!sameFileIdentity(snapshot.identity, mark.identity) || snapshot.size < mark.size) throw new Error("The selected native task rollout identity changed after dispatch");
         if (snapshot.prefixSha256 !== mark.prefixSha256) throw new Error("The pre-send Codex rollout history changed after dispatch");
       }
       if (snapshot.turnBeforeWatermark) throw new Error("The observed turn was already present before dispatch");

package/src/desktop-account-context.mjs

@@ -8,7 +8,7 @@ const PACKAGE_NAME = /^Claude_[a-z0-9._-]+$/i;
 const MAX_CONFIG_BYTES = 1024 * 1024;
 const MAX_PACKAGES = 512;
 const MAX_ROOTS = 16;
-const VERSION_FIELDS = ["size", "mtimeMs", "ctimeMs", "ino", "dev"];
+const VERSION_FIELDS = ["size", "mtimeNs", "ctimeNs", "ino", "dev"];
 const sameVersion = (left, right) => VERSION_FIELDS.every((field) => left[field] === right[field]);
 const isMissing = (error) => error.code === "ENOENT";
 
@@ -28,7 +28,7 @@ function absoluteDirectory(value) {
 }
 
 function directoryStat(directory) {
-  const stat = fs.lstatSync(directory);
+  const stat = fs.lstatSync(directory, { bigint: true });
   if (!stat.isDirectory() || stat.isSymbolicLink()) throw new Error("invalid directory");
   return stat;
 }
@@ -73,22 +73,22 @@ function readConfig(root) {
   }
   const file = path.join(root, "config.json");
   let initial;
-  try { initial = fs.lstatSync(file); }
+  try { initial = fs.lstatSync(file, { bigint: true }); }
   catch (error) {
     if (isMissing(error)) return { kind: "missing-config", rootStat };
     throw error;
   }
-  if (!initial.isFile() || initial.isSymbolicLink() || initial.size > MAX_CONFIG_BYTES) throw new Error("invalid config");
+  if (!initial.isFile() || initial.isSymbolicLink() || initial.size > BigInt(MAX_CONFIG_BYTES)) throw new Error("invalid config");
   const descriptor = fs.openSync(file, fs.constants.O_RDONLY | (fs.constants.O_NOFOLLOW ?? 0));
   let bytes;
   let current;
   try {
-    const before = fs.fstatSync(descriptor);
+    const before = fs.fstatSync(descriptor, { bigint: true });
     if (!before.isFile() || !sameVersion(initial, before)) throw new Error("config changed");
-    bytes = Buffer.alloc(before.size);
+    bytes = Buffer.alloc(Number(before.size));
     if (fs.readSync(descriptor, bytes, 0, bytes.length, 0) !== bytes.length) throw new Error("short read");
-    const after = fs.fstatSync(descriptor);
-    current = fs.lstatSync(file);
+    const after = fs.fstatSync(descriptor, { bigint: true });
+    current = fs.lstatSync(file, { bigint: true });
     if (!current.isFile() || current.isSymbolicLink() || !sameVersion(before, after) || !sameVersion(after, current)) throw new Error("config changed");
   } finally {
     fs.closeSync(descriptor);

package/src/desktop-reply-receipts.mjs

@@ -4,10 +4,11 @@ import { randomUUID } from "node:crypto";
 import { isDeepStrictEqual } from "node:util";
 import { creationRequestHash, creationIdValid } from "./native-creation-receipts.mjs";
 import { homeDir } from "./platform.mjs";
+import { fileIdentity, sameFileIdentity } from "./file-identity.mjs";
 
 const ID = /^[a-f0-9]{8}-[a-f0-9]{4}-4[a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/;
 const LIMIT = 256 * 1024;
-const sameFile = (left, right) => ["dev", "ino", "size", "mode", "uid", "nlink", "mtimeMs", "ctimeMs"].every(field => left[field] === right[field]);
+const sameFile = (left, right) => ["dev", "ino", "size", "mode", "uid", "nlink", "mtimeNs", "ctimeNs"].every(field => left[field] === right[field]);
 
 function owner(context) {
   const { sessionId, taskId } = context?.caller ?? {};
@@ -29,11 +30,11 @@ export class DesktopReplyReceipts {
   file(id, create = false) {
     if (typeof id !== "string" || !ID.test(id)) throw new Error("Invalid reply deliveryId");
     if (create) fs.mkdirSync(this.directory, { recursive: true, mode: 0o700 });
-    const info = fs.lstatSync(this.directory);
+    const info = fs.lstatSync(this.directory, { bigint: true });
     if (!info.isDirectory() || info.isSymbolicLink()) throw new Error("Unsafe reply receipt directory");
     const canonical = fs.realpathSync.native(this.directory);
-    if (this.#boundary && (this.#boundary.path !== canonical || this.#boundary.dev !== info.dev || this.#boundary.ino !== info.ino)) throw new Error("Reply receipt directory changed");
-    this.#boundary ??= { path: canonical, dev: info.dev, ino: info.ino };
+    if (this.#boundary && (this.#boundary.path !== canonical || !sameFileIdentity(this.#boundary, fileIdentity(info)))) throw new Error("Reply receipt directory changed");
+    this.#boundary ??= { path: canonical, ...fileIdentity(info) };
     return path.join(canonical, `${id}.json`);
   }
 
@@ -82,11 +83,11 @@ export class DesktopReplyReceipts {
 
   read(id, context) {
     const file = this.file(id);
-    const before = fs.lstatSync(file);
-    if (!before.isFile() || before.isSymbolicLink() || before.nlink !== 1 || before.size > LIMIT) throw new Error("Unsafe reply receipt");
+    const before = fs.lstatSync(file, { bigint: true });
+    if (!before.isFile() || before.isSymbolicLink() || before.nlink !== 1n || before.size > BigInt(LIMIT)) throw new Error("Unsafe reply receipt");
     const fd = fs.openSync(file, fs.constants.O_RDONLY | (fs.constants.O_NOFOLLOW ?? 0) | (fs.constants.O_NONBLOCK ?? 0));
     try {
-      const opened = fs.fstatSync(fd);
+      const opened = fs.fstatSync(fd, { bigint: true });
       if (!opened.isFile() || !sameFile(before, opened)) throw new Error("Reply receipt changed while opening");
       const buffer = Buffer.alloc(LIMIT + 1);
       let length = 0;
@@ -96,9 +97,9 @@ export class DesktopReplyReceipts {
         length += count;
         if (length > LIMIT) throw new Error("Reply receipt exceeds its read limit");
       }
-      const after = fs.fstatSync(fd);
-      const current = fs.lstatSync(this.file(id));
-      if (current.isSymbolicLink() || !sameFile(opened, after) || !sameFile(after, current) || length !== opened.size) throw new Error("Reply receipt changed while reading");
+      const after = fs.fstatSync(fd, { bigint: true });
+      const current = fs.lstatSync(this.file(id), { bigint: true });
+      if (current.isSymbolicLink() || !sameFile(opened, after) || !sameFile(after, current) || BigInt(length) !== opened.size) throw new Error("Reply receipt changed while reading");
       const receipt = JSON.parse(buffer.subarray(0, length).toString("utf8"));
       const expected = owner(context);
       if (receipt.version !== 1 || receipt.deliveryId !== id || !receipt.owner ||

package/src/file-identity.mjs

@@ -0,0 +1,13 @@
+const exact = (value) => typeof value === "bigint" ? String(value)
+  : typeof value === "string" ? (/^-?\d+$/.test(value) ? value : null)
+    : Number.isSafeInteger(value) ? String(value) : null;
+
+export function fileIdentity(stat) {
+  if (typeof stat?.dev !== "bigint" || typeof stat.ino !== "bigint") throw new TypeError("File identity requires bigint stats");
+  return { dev: String(stat.dev), ino: String(stat.ino) };
+}
+
+export function sameFileIdentity(left, right) {
+  const values = [left?.dev, left?.ino, right?.dev, right?.ino].map(exact);
+  return values.every((value) => value !== null) && values[0] === values[2] && values[1] === values[3];
+}

package/src/index.mjs

@@ -40,7 +40,7 @@ import { PROJECT_SETUP_TOOLS, registerProjectOnboardingTools } from "./project-o
 
 exitForVersionRequest(import.meta.url);
 
-const VERSION = "1.22.7";
+const VERSION = "1.22.9";
 void import("./telemetry.mjs").then(({ startUsageReporting }) => startUsageReporting({ version: VERSION })).catch(() => {});
 const log = (msg) => process.stderr.write(`[codex-mcp-bridge] ${msg}\n`);
 

package/src/native-creation-receipts.mjs

@@ -3,8 +3,9 @@ import path from "node:path";
 import { createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { execFileSync } from "node:child_process";
 import { homeDir } from "./platform.mjs";
+import { fileIdentity, sameFileIdentity } from "./file-identity.mjs";
 
-const sameFile = (left, right) => ["dev", "ino", "size", "mode", "uid", "nlink", "mtimeMs", "ctimeMs"].every(field => left[field] === right[field]);
+const sameFile = (left, right) => ["dev", "ino", "size", "mode", "uid", "nlink", "mtimeNs", "ctimeNs"].every(field => left[field] === right[field]);
 
 export const creationIdValid = value => typeof value === "string" && /^[a-f0-9]{8}-[a-f0-9]{4}-4[a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/.test(value);
 export function creationRequestHash(args) {
@@ -31,23 +32,23 @@ export class NativeCreationReceipts {
         if (process.platform === "win32") this.#protectWindowsPrivate(this.#keyDirectory, true);
       } catch (error) { if (error.code !== "EEXIST") throw error; }
     }
-    const directory = fs.lstatSync(this.#keyDirectory);
+    const directory = fs.lstatSync(this.#keyDirectory, { bigint: true });
     const canonical = fs.realpathSync.native(this.#keyDirectory);
     if (!directory.isDirectory() || directory.isSymbolicLink() ||
-        process.platform !== "win32" && ((directory.mode & 0o077) || directory.uid !== process.getuid()) ||
-        this.#keyDirectoryBoundary && (this.#keyDirectoryBoundary.path !== canonical || this.#keyDirectoryBoundary.dev !== directory.dev || this.#keyDirectoryBoundary.ino !== directory.ino)) {
+        process.platform !== "win32" && ((directory.mode & 0o077n) || directory.uid !== BigInt(process.getuid())) ||
+        this.#keyDirectoryBoundary && (this.#keyDirectoryBoundary.path !== canonical || !sameFileIdentity(this.#keyDirectoryBoundary, fileIdentity(directory)))) {
       throw Error("Unsafe native creation authority directory");
     }
     if (process.platform === "win32" && !this.#keyDirectoryBoundary) {
       this.#assertWindowsPrivate(canonical, true);
     }
-    this.#keyDirectoryBoundary ??= { path: canonical, dev: directory.dev, ino: directory.ino };
+    this.#keyDirectoryBoundary ??= { path: canonical, ...fileIdentity(directory) };
     const file = path.join(canonical, "signing-key");
     if (create) {
       let created, createdBoundary;
       try {
         created = fs.openSync(file, "wx", 0o600);
-        createdBoundary = fs.fstatSync(created);
+        createdBoundary = fs.fstatSync(created, { bigint: true });
         if (process.platform === "win32") this.#protectWindowsPrivate(file, false);
         fs.writeFileSync(created, randomBytes(32));
         fs.fsyncSync(created);
@@ -56,32 +57,32 @@ export class NativeCreationReceipts {
         if (created !== undefined) {
           fs.closeSync(created);
           created = undefined;
-          const failed = fs.lstatSync(file);
-          if (failed.dev === createdBoundary.dev && failed.ino === createdBoundary.ino && !failed.isSymbolicLink()) fs.unlinkSync(file);
+          const failed = fs.lstatSync(file, { bigint: true });
+          if (sameFileIdentity(fileIdentity(failed), fileIdentity(createdBoundary)) && !failed.isSymbolicLink()) fs.unlinkSync(file);
         }
         if (error.code !== "EEXIST") throw error;
       }
       finally { if (created !== undefined) fs.closeSync(created); }
     }
-    const before = fs.lstatSync(file);
-    if (!before.isFile() || before.isSymbolicLink() || before.nlink !== 1 || before.size !== 32 ||
-        process.platform !== "win32" && ((before.mode & 0o077) || before.uid !== process.getuid())) throw Error("Unsafe native creation signing key");
+    const before = fs.lstatSync(file, { bigint: true });
+    if (!before.isFile() || before.isSymbolicLink() || before.nlink !== 1n || before.size !== 32n ||
+        process.platform !== "win32" && ((before.mode & 0o077n) || before.uid !== BigInt(process.getuid()))) throw Error("Unsafe native creation signing key");
     if (process.platform === "win32" && !this.#keyBoundary) this.#assertWindowsPrivate(file, false);
     const fd = fs.openSync(file, fs.constants.O_RDONLY | (fs.constants.O_NOFOLLOW ?? 0) | (fs.constants.O_NONBLOCK ?? 0));
     let key;
     try {
-      const opened = fs.fstatSync(fd);
+      const opened = fs.fstatSync(fd, { bigint: true });
       if (!opened.isFile() || !sameFile(before, opened)) throw Error("Native creation signing key changed");
       const bytes = Buffer.alloc(33);
       let count = 0, read;
       while (count < bytes.length && (read = fs.readSync(fd, bytes, count, bytes.length - count, count))) count += read;
       key = bytes.subarray(0, count);
-      const after = fs.fstatSync(fd);
-      const current = fs.lstatSync(file);
+      const after = fs.fstatSync(fd, { bigint: true });
+      const current = fs.lstatSync(file, { bigint: true });
       if (key.length !== 32 || current.isSymbolicLink() || !sameFile(opened, after) || !sameFile(after, current)) throw Error("Native creation signing key changed");
     } finally { fs.closeSync(fd); }
-    if (this.#keyBoundary && (this.#keyBoundary.dev !== before.dev || this.#keyBoundary.ino !== before.ino || !timingSafeEqual(this.#key, key))) throw Error("Native creation signing key changed");
-    this.#keyBoundary ??= { dev: before.dev, ino: before.ino };
+    if (this.#keyBoundary && (!sameFileIdentity(this.#keyBoundary, fileIdentity(before)) || !timingSafeEqual(this.#key, key))) throw Error("Native creation signing key changed");
+    this.#keyBoundary ??= fileIdentity(before);
     this.#key ??= key;
     return this.#key;
   }
@@ -110,11 +111,11 @@ export class NativeCreationReceipts {
   file(id) {
     if (!creationIdValid(id)) throw Error("Invalid native creation receipt id");
     fs.mkdirSync(this.directory, { recursive: true, mode: 0o700 });
-    const st = fs.lstatSync(this.directory);
+    const st = fs.lstatSync(this.directory, { bigint: true });
     if (!st.isDirectory() || st.isSymbolicLink()) throw Error("Unsafe native creation receipt directory");
     const canonical = fs.realpathSync.native(this.directory);
-    if (this.boundary && (this.boundary.path !== canonical || this.boundary.dev !== st.dev || this.boundary.ino !== st.ino)) throw Error("Native creation receipt directory changed");
-    this.boundary ??= { path: canonical, dev: st.dev, ino: st.ino };
+    if (this.boundary && (this.boundary.path !== canonical || !sameFileIdentity(this.boundary, fileIdentity(st)))) throw Error("Native creation receipt directory changed");
+    this.boundary ??= { path: canonical, ...fileIdentity(st) };
     this.directory = canonical;
     return path.join(canonical, id + ".json");
   }
@@ -122,18 +123,18 @@ export class NativeCreationReceipts {
     const file = this.file(id);
     let fd, receiptFound = false;
     try {
-      const before = fs.lstatSync(file);
+      const before = fs.lstatSync(file, { bigint: true });
       receiptFound = true;
-      if (!before.isFile() || before.isSymbolicLink() || before.nlink !== 1 || before.size > 1024 * 1024) throw Error("Unsafe native creation receipt");
+      if (!before.isFile() || before.isSymbolicLink() || before.nlink !== 1n || before.size > 1024n * 1024n) throw Error("Unsafe native creation receipt");
       fd = fs.openSync(file, fs.constants.O_RDONLY | (fs.constants.O_NOFOLLOW ?? 0) | (fs.constants.O_NONBLOCK ?? 0));
-      const opened = fs.fstatSync(fd);
+      const opened = fs.fstatSync(fd, { bigint: true });
       if (!opened.isFile() || !sameFile(before, opened)) throw Error("Native creation receipt changed");
       const bytes = Buffer.alloc(1024 * 1024 + 1);
       let count = 0, n;
       while ((n = fs.readSync(fd, bytes, count, bytes.length - count, count))) { count += n; if (count > 1024 * 1024) throw Error("Oversized native creation receipt"); }
-      const after = fs.fstatSync(fd);
-      const current = fs.lstatSync(this.file(id));
-      if (current.isSymbolicLink() || !sameFile(opened, after) || !sameFile(after, current) || count !== opened.size) throw Error("Native creation receipt changed");
+      const after = fs.fstatSync(fd, { bigint: true });
+      const current = fs.lstatSync(this.file(id), { bigint: true });
+      if (current.isSymbolicLink() || !sameFile(opened, after) || !sameFile(after, current) || BigInt(count) !== opened.size) throw Error("Native creation receipt changed");
       const row = JSON.parse(bytes.subarray(0, count).toString());
       if (row.version !== 1 || row.id !== id || row.hash !== hash || creationRequestHash(row.args) !== hash ||
           !accounts || ["claude", "codex"].some(k => !accounts[k] || row.accounts?.[k] !== accounts[k]) ||

package/src/native-relay-companion.mjs

@@ -38,7 +38,7 @@ import { NativeCreationReceipts, creationIdValid } from "./native-creation-recei
 
 exitForVersionRequest(import.meta.url);
 
-const VERSION = "1.22.7";
+const VERSION = "1.22.9";
 const log = (msg) => process.stderr.write(`[native-relay] ${msg}\n`);
 
 function errorResponse(code, message, sent, details) {

package/src/peer-protocol.mjs

@@ -860,7 +860,7 @@ export class PeerEndpoint {
       const { sessionId, cwd } = pending.transcriptSession;
       const file = findTranscriptFile(sessionId, cwd);
       let stamp;
-      try { const stat = fs.statSync(file); stamp = `${stat.mtimeMs}:${stat.size}`; }
+      try { const stat = fs.statSync(file, { bigint: true }); stamp = `${stat.dev}:${stat.ino}:${stat.mtimeNs}:${stat.ctimeNs}:${stat.size}`; }
       catch { continue; }
       if (stamp === pending.transcriptStamp) continue;
       pending.transcriptStamp = stamp;

package/src/project-scope.mjs

@@ -15,23 +15,23 @@ function samePath(left, right) {
 }
 
 function metadata(file) {
-  const entry = fs.lstatSync(file);
-  if (!entry.isFile() || entry.isSymbolicLink() || entry.size > 4096) throw new Error("Invalid project repository metadata");
+  const entry = fs.lstatSync(file, { bigint: true });
+  if (!entry.isFile() || entry.isSymbolicLink() || entry.size > 4096n) throw new Error("Invalid project repository metadata");
   const descriptor = fs.openSync(file, fs.constants.O_RDONLY | (fs.constants.O_NOFOLLOW ?? 0));
   try {
-    const before = fs.fstatSync(descriptor);
-    const fields = ["dev", "ino", "size", "mtimeMs", "ctimeMs"];
+    const before = fs.fstatSync(descriptor, { bigint: true });
+    const fields = ["dev", "ino", "size", "mtimeNs", "ctimeNs"];
     const matches = (left, right) => fields.every((field) => left[field] === right[field]);
     if (!before.isFile() || !matches(entry, before)) throw new Error("Project repository metadata changed during access");
-    const data = Buffer.alloc(before.size);
+    const data = Buffer.alloc(Number(before.size));
     let offset = 0;
     while (offset < data.length) {
       const count = fs.readSync(descriptor, data, offset, data.length - offset, offset);
       if (!count) throw new Error("Project repository metadata changed during access");
       offset += count;
     }
-    const after = fs.fstatSync(descriptor);
-    const current = fs.lstatSync(file);
+    const after = fs.fstatSync(descriptor, { bigint: true });
+    const current = fs.lstatSync(file, { bigint: true });
     if (!current.isFile() || current.isSymbolicLink() || !matches(before, after) || !matches(after, current)) throw new Error("Project repository metadata changed during access");
     return data.toString("utf8").trim();
   } finally {

package/src/rollout-reader.mjs

@@ -1,25 +1,28 @@
 import fs from "node:fs";
+import { fileIdentity } from "./file-identity.mjs";
 
 const CHUNK_BYTES = 256 * 1024;
-const VERSION_FIELDS = ["size", "mtimeMs", "ctimeMs", "ino", "dev"];
+const VERSION_FIELDS = ["size", "mtimeNs", "ctimeNs", "ino", "dev"];
 const sameVersion = (a, b) => VERSION_FIELDS.every((key) => a[key] === b[key]);
 
 // Scan the complete history, but retain at most one bounded JSONL record.
 // Skipping the middle of a rollout would miss duplicate identities or corruption.
 export function scanRollout(file, { maxRecordBytes, onRecord, onChunk = () => {} }) {
   if (!Number.isSafeInteger(maxRecordBytes) || maxRecordBytes < 1) throw new Error("The rollout record read limit is invalid");
-  const named = fs.lstatSync(file);
+  const named = fs.lstatSync(file, { bigint: true });
   if (!named.isFile() || named.isSymbolicLink()) throw new Error("The rollout is not a regular file");
   const descriptor = fs.openSync(file, fs.constants.O_RDONLY | (fs.constants.O_NOFOLLOW ?? 0) | (fs.constants.O_NONBLOCK ?? 0));
   try {
-    const before = fs.fstatSync(descriptor);
+    const before = fs.fstatSync(descriptor, { bigint: true });
     if (!before.isFile()) throw new Error("The opened rollout is not a regular file");
     if (!sameVersion(named, before)) throw new Error("The rollout changed while opening");
-    if (before.size === 0) throw new Error("The rollout is empty (0 bytes)");
+    if (before.size > BigInt(Number.MAX_SAFE_INTEGER)) throw new Error("The rollout exceeds the safe size range");
+    const size = Number(before.size);
+    if (size === 0) throw new Error("The rollout is empty (0 bytes)");
     let parts = [], length = 0, start = 0, position = 0;
     const decoder = new TextDecoder("utf-8", { fatal: true });
-    while (position < before.size) {
-      const buffer = Buffer.allocUnsafe(Math.min(CHUNK_BYTES, before.size - position));
+    while (position < size) {
+      const buffer = Buffer.allocUnsafe(Math.min(CHUNK_BYTES, size - position));
       const count = fs.readSync(descriptor, buffer, 0, buffer.length, position);
       if (!count) throw new Error("The rollout changed while reading");
       const chunk = buffer.subarray(0, count);
@@ -29,7 +32,7 @@ export function scanRollout(file, { maxRecordBytes, onRecord, onChunk = () => {}
         const newline = chunk.indexOf(0x0a, offset);
         const end = newline < 0 ? count : newline;
         length += end - offset;
-        if (length > maxRecordBytes) throw new Error(`The rollout record at byte ${start} exceeds the ${maxRecordBytes}-byte per-record read limit (file: ${before.size} bytes)`);
+        if (length > maxRecordBytes) throw new Error(`The rollout record at byte ${start} exceeds the ${maxRecordBytes}-byte per-record read limit (file: ${size} bytes)`);
         parts.push(chunk.subarray(offset, end));
         if (newline < 0) break;
         if (length) {
@@ -45,14 +48,14 @@ export function scanRollout(file, { maxRecordBytes, onRecord, onChunk = () => {}
       }
       position += count;
     }
-    if (start !== before.size) throw new Error("The rollout has an incomplete final record");
-    const after = fs.fstatSync(descriptor);
-    const current = fs.lstatSync(file);
+    if (start !== size) throw new Error("The rollout has an incomplete final record");
+    const after = fs.fstatSync(descriptor, { bigint: true });
+    const current = fs.lstatSync(file, { bigint: true });
     if (!current.isFile() || current.isSymbolicLink() || !sameVersion(before, after) || !sameVersion(after, current)) {
       throw new Error("The rollout changed while reading");
     }
-    return { size: before.size, identity: { dev: before.dev, ino: before.ino },
-      version: Object.fromEntries(VERSION_FIELDS.map((key) => [key, before[key]])) };
+    return { size, identity: fileIdentity(before),
+      version: Object.fromEntries(VERSION_FIELDS.map((key) => [key, String(before[key])])) };
   } finally {
     fs.closeSync(descriptor);
   }

package/src/rollout-segments.mjs

@@ -59,7 +59,7 @@ export function assertRolloutSetStable(sessions, threadId, snapshots) {
   const files = findRolloutSegments(sessions, threadId);
   if (files.length !== snapshots.length || files.some((file, i) => file !== snapshots[i].file)) throw new Error("The rollout segment set changed while reading");
   for (const { file, version } of snapshots) {
-    const current = fs.lstatSync(file);
-    if (!current.isFile() || current.isSymbolicLink() || Object.entries(version).some(([key, value]) => current[key] !== value)) throw new Error("A rollout segment changed while reading");
+    const current = fs.lstatSync(file, { bigint: true });
+    if (!current.isFile() || current.isSymbolicLink() || Object.entries(version).some(([key, value]) => typeof value !== "string" || String(current[key]) !== value)) throw new Error("A rollout segment changed while reading");
   }
 }

package/src/sites-connector.mjs

@@ -49,24 +49,24 @@ export function validateSitesConfig(value, { allowLoopback = false } = {}) {
 }
 
 async function readPrivateJson(file, maxBytes = 2 * 1024 * 1024) {
-  const info = await fs.lstat(file);
-  if (!info.isFile() || info.isSymbolicLink() || info.nlink !== 1 || info.size > maxBytes) throw new Error("Private connector file is unsafe or oversized");
+  const info = await fs.lstat(file, { bigint: true });
+  if (!info.isFile() || info.isSymbolicLink() || info.nlink !== 1n || info.size > BigInt(maxBytes)) throw new Error("Private connector file is unsafe or oversized");
   const handle = await fs.open(file, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
   try {
-    const current = await handle.stat();
-    const fields = ["dev", "ino", "size", "mtimeMs", "ctimeMs"];
+    const current = await handle.stat({ bigint: true });
+    const fields = ["dev", "ino", "size", "mtimeNs", "ctimeNs"];
     const matches = (left, right) => fields.every((field) => left[field] === right[field]);
-    if (!current.isFile() || current.nlink !== 1 || current.size > maxBytes || !matches(info, current)) throw new Error("Private connector file changed during access");
-    const data = Buffer.alloc(current.size);
+    if (!current.isFile() || current.nlink !== 1n || current.size > BigInt(maxBytes) || !matches(info, current)) throw new Error("Private connector file changed during access");
+    const data = Buffer.alloc(Number(current.size));
     let offset = 0;
     while (offset < data.length) {
       const { bytesRead } = await handle.read(data, offset, data.length - offset, offset);
       if (!bytesRead) throw new Error("Private connector file changed during access");
       offset += bytesRead;
     }
-    const after = await handle.stat();
-    const entry = await fs.lstat(file);
-    if (!entry.isFile() || entry.isSymbolicLink() || entry.nlink !== 1 || !matches(current, after) || !matches(after, entry)) throw new Error("Private connector file changed during access");
+    const after = await handle.stat({ bigint: true });
+    const entry = await fs.lstat(file, { bigint: true });
+    if (!entry.isFile() || entry.isSymbolicLink() || entry.nlink !== 1n || !matches(current, after) || !matches(after, entry)) throw new Error("Private connector file changed during access");
     return JSON.parse(data.toString("utf8"));
   } catch (error) {
     if (error.code === "ENOENT") throw new Error("Private connector file changed during access", { cause: error });