@minhspark/codex-mcp-bridge 1.22.8 → 1.22.10

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-mcp-bridge",
-  "version": "1.22.8",
+  "version": "1.22.10",
   "description": "Connect ChatGPT to your own Codex Desktop projects and conversations.",
   "author": {
     "name": "Bui Dang Minh"

package/CHANGELOG.md

@@ -4,6 +4,39 @@ Follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and [SemVer](ht
 
 ## [Unreleased]
 
+## [1.22.10] - 2026-10-20
+
+### Fixed
+
+- Re-read the whole rollout set when Codex appends between per-segment reads. The pre-send watermark, dispatch, turn and creation readers and Codex sender verification now repeat find, read and set check together, up to three times, instead of failing with `A rollout segment changed while reading`. Only read races qualify: identity, history, account, workspace and dispatch mismatches still fail at once.
+- Keep observing an accepted Desktop send or creation while Codex is still writing its rollout. When a read keeps reporting that the rollout changed while reading, the wait polls again until its deadline and then returns the pending receipt with that reason, instead of reporting the delivery as failed. Seen live on 2026-10-20: an accepted send reported `failed` while the reply was later recovered from the same receipt. A rollout whose last record stays incomplete, for example after Codex stopped mid-write, is still reported at once with its turn status and reason.
+
+### Verification
+
+- 8 new regression tests reproduce the append during the set check for the watermark, the turn and dispatch reply readers, sender verification and both wait paths; all fail on v1.22.8. Two more pin that a permanently incomplete rollout is reported without waiting, and a unit test pins which messages are retried.
+- Two rounds of independent review shaped the wait behavior. A deferred released turn stays the observed turn even if a newer turn starts. The deferral reason is cleared after a clean read, and a timeout reports it as an unavailable observation. Only the set level retries, so an actively written rollout is scanned at most three times per observation. Deferral is limited to `changed while reading`, because `incomplete final record` can be permanent. Each of these has a regression test that fails without its fix.
+
+### Limitations
+
+- The original race was seen once in a live Desktop send and cannot be triggered on demand; the regression tests reproduce it deterministically by appending to the rollout during the set check. A Codex Desktop or MCP restart still ends in-memory peer receipts, as before.
+
+## [1.22.9] - 2026-10-20
+
+### Fixed
+
+- Read the Claude Desktop configuration with exact bigint stats in `codex-mcp-bridge-install`, so a configuration file replaced during the installer's read is detected even when the two inodes differ only beyond Number precision. v1.22.8 converted the runtime stores but missed this installer.
+- Notice a new reply in a Claude Code transcript when the file changes within the same millisecond and keeps its size. The reply poll now compares the file's device, inode, nanosecond modification and change times, and size instead of only the millisecond modification time and size.
+
+### Verification
+
+- 2 new regression tests: a Desktop configuration whose inode changes only below Number precision (`2^60` and `2^60 + 1`) is rejected and left untouched, and a transcript reply is observed while its Number `mtimeMs` and size stay frozen. Both fail on v1.22.8.
+- Two independent sweeps of `src/`, `scripts/` and `bin/`, one by stat API and one by stored or compared stat data, found no other Number-based identity or change detection.
+- CI passed on macOS, Ubuntu and Windows with Node 22 and 24. CodeQL re-reported 3 `js/path-injection` flows on the edited stat lines; each source is operator environment configuration, matching earlier dismissals, and they were dismissed as false positives.
+
+### Limitations
+
+- The 64-bit NTFS case runs for real only on Windows CI; local tests simulate it with mocked stats.
+
 ## [1.22.8] - 2026-10-20
 
 ### Fixed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@minhspark/codex-mcp-bridge",
-  "version": "1.22.8",
+  "version": "1.22.10",
   "description": "Two-way MCP bridge between Claude and Codex: prompts into a live Codex thread, messages into a running Claude Code session.",
   "keywords": [
     "mcp",

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "codex-mcp-bridge",
-  "version": "1.22.8",
+  "version": "1.22.10",
   "description": "Connect ChatGPT to your own Codex Desktop projects and conversations.",
   "author": {
     "name": "Bui Dang Minh",

package/scripts/install-claude-desktop.mjs

@@ -45,23 +45,23 @@ fs.mkdirSync(path.dirname(cfgPath), { recursive: true });
 function readConfig() {
   let descriptor;
   try {
-    const before = fs.lstatSync(cfgPath);
-    if (!before.isFile() || before.isSymbolicLink() || before.nlink !== 1 || before.size > 4 * 1024 * 1024) throw new Error("Unsafe Desktop configuration file");
+    const before = fs.lstatSync(cfgPath, { bigint: true });
+    if (!before.isFile() || before.isSymbolicLink() || before.nlink !== 1n || before.size > 4n * 1024n * 1024n) throw new Error("Unsafe Desktop configuration file");
     descriptor = fs.openSync(cfgPath, fs.constants.O_RDONLY | (fs.constants.O_NOFOLLOW ?? 0));
-    const opened = fs.fstatSync(descriptor);
-    const fields = ["dev", "ino", "size", "mtimeMs", "ctimeMs"];
+    const opened = fs.fstatSync(descriptor, { bigint: true });
+    const fields = ["dev", "ino", "size", "mtimeNs", "ctimeNs"];
     const matches = (left, right) => fields.every(field => left[field] === right[field]);
-    if (!opened.isFile() || opened.nlink !== 1 || !matches(before, opened)) throw new Error("Desktop configuration changed during access");
-    const data = Buffer.alloc(opened.size);
+    if (!opened.isFile() || opened.nlink !== 1n || !matches(before, opened)) throw new Error("Desktop configuration changed during access");
+    const data = Buffer.alloc(Number(opened.size));
     let offset = 0;
     while (offset < data.length) {
       const count = fs.readSync(descriptor, data, offset, data.length - offset, offset);
       if (!count) throw new Error("Desktop configuration changed during access");
       offset += count;
     }
-    const after = fs.fstatSync(descriptor);
-    const current = fs.lstatSync(cfgPath);
-    if (!current.isFile() || current.isSymbolicLink() || current.nlink !== 1 || !matches(opened, after) || !matches(after, current)) throw new Error("Desktop configuration changed during access");
+    const after = fs.fstatSync(descriptor, { bigint: true });
+    const current = fs.lstatSync(cfgPath, { bigint: true });
+    if (!current.isFile() || current.isSymbolicLink() || current.nlink !== 1n || !matches(opened, after) || !matches(after, current)) throw new Error("Desktop configuration changed during access");
     return { data, version: fields.map(field => current[field]) };
   } catch (error) {
     if (error.code === "ENOENT" && descriptor === undefined) return null;

package/scripts/install-native-relay.mjs

@@ -24,7 +24,7 @@ import { stableInstallPath } from "../src/install-paths.mjs";
 
 exitForVersionRequest(import.meta.url);
 
-const VERSION = "1.22.8";
+const VERSION = "1.22.10";
 const root = stableInstallPath(path.resolve(path.dirname(fileURLToPath(import.meta.url)), ".."));
 const entry = path.join(root, "src", "mcp-supervisor.mjs");
 const entryArgs = ["native-relay-companion.mjs"];

package/src/claude-bridge.mjs

@@ -30,7 +30,7 @@ import { discoverClaudeProject } from "./claude-project-discovery.mjs";
 
 exitForVersionRequest(import.meta.url);
 
-const VERSION = "1.22.8";
+const VERSION = "1.22.10";
 void import("./telemetry.mjs").then(({ startUsageReporting }) => startUsageReporting({ version: VERSION })).catch(() => {});
 const FORWARD_MIN_INTERVAL_MS = 5000;
 const FORWARD_MAX_PER_SESSION = 50;

package/src/codex-native-response.mjs

@@ -5,7 +5,7 @@ import path from "node:path";
 import { isDeepStrictEqual } from "node:util";
 import { scanRollout } from "./rollout-reader.mjs";
 import { fileIdentity, sameFileIdentity } from "./file-identity.mjs";
-import { findRolloutSegments, confirmsDesktopTask, isLegacyCliSession, assertRolloutSetStable } from "./rollout-segments.mjs";
+import { findRolloutSegments, confirmsDesktopTask, isLegacyCliSession, assertRolloutSetStable, retryRolloutRead } from "./rollout-segments.mjs";
 
 const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
 const MAX_ROLLOUT_BYTES = 16 * 1024 * 1024;
@@ -84,12 +84,15 @@ function samePathBoundary(expected, current) {
 }
 
 function readStable(found, maxBytes, { threadId, turnId, afterOffset = 0, prefixSize, dispatchOutputs, dispatchAfterOffset = afterOffset } = {}) {
-  for (let attempt = 0; ; attempt++) {
-    try { return readStableOnce(found, maxBytes, { threadId, turnId, afterOffset, prefixSize, dispatchOutputs, dispatchAfterOffset }); }
-    catch (error) {
-      if (attempt >= 2 || !/changed while (reading|opening)|incomplete final record/.test(error.message)) throw error;
-    }
-  }
+  return readStableOnce(found, maxBytes, { threadId, turnId, afterOffset, prefixSize, dispatchOutputs, dispatchAfterOffset });
+}
+
+function readStableRolloutSet(threadId, env, readSegments) {
+  return retryRolloutRead(() => {
+    const snapshots = readSegments(findRollouts(threadId, env));
+    assertRolloutSetStable(snapshots[0].sessions, threadId, snapshots);
+    return snapshots;
+  });
 }
 
 function readStableOnce(found, maxBytes, { threadId, turnId, afterOffset, prefixSize, dispatchOutputs, dispatchAfterOffset }) {
@@ -346,8 +349,7 @@ function inspectTurnRecords(records, threadId, turnId, cwd, { requireDispatch, o
 export function captureCodexRolloutWatermark({ threadId, expectedCwd, desktopEvidence }, { env = process.env, maxRolloutBytes = MAX_ROLLOUT_BYTES } = {}) {
   try {
     const cwd = canonicalDirectory(expectedCwd, "The selected native task workspace");
-    const snapshots = findRollouts(threadId, env).map((found) => ({ ...found, ...readStable(found, maxRolloutBytes) }));
-    assertRolloutSetStable(snapshots[0].sessions, threadId, snapshots);
+    const snapshots = readStableRolloutSet(threadId, env, (found) => found.map((entry) => ({ ...entry, ...readStable(entry, maxRolloutBytes) })));
     for (const snapshot of snapshots) validateIdentity(snapshot, threadId, cwd, desktopEvidence);
     const matches = snapshots.length === 1 ? snapshots : snapshots.filter((snapshot) =>
       desktopEvidence?.latestTurnId && snapshot.latestContext?.turn_id === desktopEvidence.latestTurnId);
@@ -369,15 +371,16 @@ export function readCodexNativeCreationResponse({ threadId, turnId, expectedCwd,
     if (!UUID.test(threadId) || !UUID.test(turnId) || !UUID.test(executorThreadId)) throw new Error("The native creation response identity is invalid");
     if (typeof prompt !== "string" || !prompt.length) throw new Error("The exact creation prompt is unavailable");
     const cwd = canonicalDirectory(expectedCwd, "The created native task workspace");
-    let retainedBytes = 0;
-    const snapshots = findRollouts(threadId, env).map((found) => {
-      const snapshot = readStable(found, maxRolloutBytes, { threadId, turnId });
-      retainedBytes += snapshot.retainedBytes;
-      if (retainedBytes > maxRolloutBytes) throw new Error("The native turn exceeds the retained-record limit across segments");
-      validateIdentity(snapshot, threadId, cwd, desktopEvidence);
-      return snapshot;
+    const snapshots = readStableRolloutSet(threadId, env, (found) => {
+      let retainedBytes = 0;
+      return found.map((entry) => {
+        const snapshot = readStable(entry, maxRolloutBytes, { threadId, turnId });
+        retainedBytes += snapshot.retainedBytes;
+        if (retainedBytes > maxRolloutBytes) throw new Error("The native turn exceeds the retained-record limit across segments");
+        validateIdentity(snapshot, threadId, cwd, desktopEvidence);
+        return snapshot;
+      });
     });
-    assertRolloutSetStable(snapshots[0].sessions, threadId, snapshots);
     const selected = uniqueTurn(snapshots);
     validateSession(selected, threadId, cwd, desktopEvidence);
     return inspectTurnRecords(selected.records, threadId, turnId, cwd, {
@@ -392,14 +395,15 @@ export function inspectCodexNativeTurn({ threadId, turnId, expectedCwd, desktopE
   try {
     if (!UUID.test(threadId) || !UUID.test(turnId)) throw new Error("The native turn identity is invalid");
     const cwd = canonicalDirectory(expectedCwd, "The selected native task workspace");
-    let retainedBytes = 0;
-    const snapshots = findRollouts(threadId, env).map((found) => {
-      const snapshot = readStable(found, maxRolloutBytes, { threadId, turnId });
-      retainedBytes += snapshot.retainedBytes;
-      if (retainedBytes > maxRolloutBytes) throw new Error("The native turn exceeds the retained-record limit across segments");
-      return snapshot;
+    const snapshots = readStableRolloutSet(threadId, env, (found) => {
+      let retainedBytes = 0;
+      return found.map((entry) => {
+        const snapshot = readStable(entry, maxRolloutBytes, { threadId, turnId });
+        retainedBytes += snapshot.retainedBytes;
+        if (retainedBytes > maxRolloutBytes) throw new Error("The native turn exceeds the retained-record limit across segments");
+        return snapshot;
+      });
     });
-    assertRolloutSetStable(snapshots[0].sessions, threadId, snapshots);
     for (const snapshot of snapshots) validateIdentity(snapshot, threadId, cwd, desktopEvidence);
     const selected = uniqueTurn(snapshots);
     validateSession(selected, threadId, cwd, desktopEvidence);
@@ -421,20 +425,20 @@ export function resolveCodexNativeDispatchResponse(binding, { env = process.env,
     if (!Array.isArray(marks) || !marks.length || marks.length > 64 || new Set(marks.map((mark) => mark.file)).size !== marks.length ||
         !marks.some((mark) => mark.file === watermark.file && mark.size === watermark.size && mark.prefixSha256 === watermark.prefixSha256) ||
         marks.some((mark) => !Number.isSafeInteger(mark.size) || mark.size < 1)) throw new Error("The pre-send segment watermarks are invalid");
-    const found = findRollouts(threadId, env);
-    if (marks.some((mark) => !found.some(({ file }) => file === mark.file))) throw new Error("A pre-send rollout segment disappeared after dispatch");
     const outputs = delegationOutputs(executorThreadId, prompt);
-    const snapshots = found.map((entry) => {
-      const mark = marks.find(({ file }) => file === entry.file);
-      const snapshot = readStable(entry, maxRolloutBytes, { threadId, afterOffset: mark?.size ?? 0, prefixSize: mark?.size, dispatchOutputs: outputs });
-      if (mark) {
-        if (!sameFileIdentity(snapshot.identity, mark.identity) || snapshot.size < mark.size) throw new Error("The selected native task rollout identity changed after dispatch");
-        if (snapshot.prefixSha256 !== mark.prefixSha256) throw new Error("The pre-send Codex rollout history changed after dispatch");
-      }
-      validateIdentity(snapshot, threadId, cwd, desktopEvidence);
-      return snapshot;
+    const snapshots = readStableRolloutSet(threadId, env, (found) => {
+      if (marks.some((mark) => !found.some(({ file }) => file === mark.file))) throw new Error("A pre-send rollout segment disappeared after dispatch");
+      return found.map((entry) => {
+        const mark = marks.find(({ file }) => file === entry.file);
+        const snapshot = readStable(entry, maxRolloutBytes, { threadId, afterOffset: mark?.size ?? 0, prefixSize: mark?.size, dispatchOutputs: outputs });
+        if (mark) {
+          if (!sameFileIdentity(snapshot.identity, mark.identity) || snapshot.size < mark.size) throw new Error("The selected native task rollout identity changed after dispatch");
+          if (snapshot.prefixSha256 !== mark.prefixSha256) throw new Error("The pre-send Codex rollout history changed after dispatch");
+        }
+        validateIdentity(snapshot, threadId, cwd, desktopEvidence);
+        return snapshot;
+      });
     });
-    assertRolloutSetStable(snapshots[0].sessions, threadId, snapshots);
     const matches = snapshots.flatMap((snapshot) => snapshot.dispatches.map((dispatch) => ({ snapshot, dispatch })));
     if (!matches.length) return { status: "pending", threadId, turnId: null, text: "", assistantItems: [], replySha256: null };
     if (matches.length !== 1) throw new Error("Multiple post-send native dispatches match the reply receipt");
@@ -464,24 +468,24 @@ export function readCodexNativeTurnResponse({ threadId, turnId, previousTurnId,
         || new Set(marks.map((mark) => mark.file)).size !== marks.length
         || !marks.some((mark) => mark.file === watermark.file && mark.size === watermark.size && mark.prefixSha256 === watermark.prefixSha256)) throw new Error("The pre-send segment watermarks are invalid");
     for (const mark of marks) if (!Number.isSafeInteger(mark.size) || mark.size < 1) throw new Error("The pre-send rollout watermark size is invalid");
-    const found = findRollouts(threadId, env);
-    if (marks.some((mark) => !found.some(({ file }) => file === mark.file))) throw new Error("A pre-send rollout segment disappeared after dispatch");
     const outputs = delegationOutputs(executorThreadId, prompt);
-    let retainedBytes = 0;
-    const snapshots = found.map((entry) => {
-      const mark = marks.find(({ file }) => file === entry.file);
-      const snapshot = readStable(entry, maxRolloutBytes, { threadId, turnId, afterOffset: existingTurn ? 0 : mark?.size ?? 0, prefixSize: mark?.size, dispatchOutputs: outputs, dispatchAfterOffset: mark?.size ?? 0 });
-      retainedBytes += snapshot.retainedBytes;
-      if (retainedBytes > maxRolloutBytes) throw new Error("The native turn exceeds the retained-record limit across segments");
-      if (mark) {
-        if (!sameFileIdentity(snapshot.identity, mark.identity) || snapshot.size < mark.size) throw new Error("The selected native task rollout identity changed after dispatch");
-        if (snapshot.prefixSha256 !== mark.prefixSha256) throw new Error("The pre-send Codex rollout history changed after dispatch");
-      }
-      if (snapshot.turnBeforeWatermark) throw new Error("The observed turn was already present before dispatch");
-      validateIdentity(snapshot, threadId, cwd, desktopEvidence);
-      return snapshot;
+    const snapshots = readStableRolloutSet(threadId, env, (found) => {
+      if (marks.some((mark) => !found.some(({ file }) => file === mark.file))) throw new Error("A pre-send rollout segment disappeared after dispatch");
+      let retainedBytes = 0;
+      return found.map((entry) => {
+        const mark = marks.find(({ file }) => file === entry.file);
+        const snapshot = readStable(entry, maxRolloutBytes, { threadId, turnId, afterOffset: existingTurn ? 0 : mark?.size ?? 0, prefixSize: mark?.size, dispatchOutputs: outputs, dispatchAfterOffset: mark?.size ?? 0 });
+        retainedBytes += snapshot.retainedBytes;
+        if (retainedBytes > maxRolloutBytes) throw new Error("The native turn exceeds the retained-record limit across segments");
+        if (mark) {
+          if (!sameFileIdentity(snapshot.identity, mark.identity) || snapshot.size < mark.size) throw new Error("The selected native task rollout identity changed after dispatch");
+          if (snapshot.prefixSha256 !== mark.prefixSha256) throw new Error("The pre-send Codex rollout history changed after dispatch");
+        }
+        if (snapshot.turnBeforeWatermark) throw new Error("The observed turn was already present before dispatch");
+        validateIdentity(snapshot, threadId, cwd, desktopEvidence);
+        return snapshot;
+      });
     });
-    assertRolloutSetStable(snapshots[0].sessions, threadId, snapshots);
     const selected = uniqueTurn(snapshots);
     const matchedDispatches = snapshots.flatMap((snapshot) => snapshot.dispatches);
     if (matchedDispatches.length !== 1 || matchedDispatches[0].turnId !== turnId) throw new Error("The observed turn is not uniquely correlated to the exact native dispatch");

package/src/codex-sender-context.mjs

@@ -2,7 +2,7 @@ import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { scanRollout } from "./rollout-reader.mjs";
-import { findRolloutSegments, confirmsDesktopTask, isLegacyCliSession, assertRolloutSetStable } from "./rollout-segments.mjs";
+import { findRolloutSegments, confirmsDesktopTask, isLegacyCliSession, assertRolloutSetStable, retryRolloutRead } from "./rollout-segments.mjs";
 
 const METADATA_KEY = "x-codex-turn-metadata";
 const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
@@ -43,14 +43,9 @@ export function findRollout(sessions, threadId) {
 }
 
 export function readState(file, maxBytes) {
-  for (let attempt = 0; ; attempt++) {
-    try { return readStateOnce(file, maxBytes); }
-    catch (error) {
-      // A live Desktop task can append its tool event during verification.
-      // Retry the entire scan, never reuse partially observed permissions.
-      if (attempt >= 2 || !/changed while (reading|opening)|incomplete final record/.test(error.message)) throw error;
-    }
-  }
+  // A live Desktop task can append its tool event during verification.
+  // Retry the entire scan, never reuse partially observed permissions.
+  return retryRolloutRead(() => readStateOnce(file, maxBytes));
 }
 
 function readStateOnce(file, maxBytes) {
@@ -182,15 +177,18 @@ export function readCodexSenderContext(meta, { env = process.env, maxRolloutByte
     const configuredHome = env.CODEX_HOME || path.join(env.HOME || env.USERPROFILE || os.homedir(), ".codex");
     if (!path.isAbsolute(configuredHome)) throw new Error("The configured Codex home must be absolute");
     const sessions = path.join(configuredHome, "sessions");
-    const matches = [], snapshots = [];
-    for (const file of findRolloutSegments(sessions, identity.threadId)) {
-      const state = readState(file, Math.min(MAX_ROLLOUT_BYTES, maxRolloutBytes));
-      if (state.session?.id !== identity.threadId) throw new Error("A rollout segment contradicts the calling task identity");
-      snapshots.push({ file, version: state.version });
-      if (state.context?.turn_id === identity.turnId || state.lifecycle?.turn_id === identity.turnId) matches.push({ file, ...state });
-      if (matches.length > 1) throw new Error("Multiple rollout segments match the calling turn");
-    }
-    assertRolloutSetStable(sessions, identity.threadId, snapshots);
+    const matches = retryRolloutRead(() => {
+      const found = [], snapshots = [];
+      for (const file of findRolloutSegments(sessions, identity.threadId)) {
+        const state = readStateOnce(file, Math.min(MAX_ROLLOUT_BYTES, maxRolloutBytes));
+        if (state.session?.id !== identity.threadId) throw new Error("A rollout segment contradicts the calling task identity");
+        snapshots.push({ file, version: state.version });
+        if (state.context?.turn_id === identity.turnId || state.lifecycle?.turn_id === identity.turnId) found.push({ file, ...state });
+        if (found.length > 1) throw new Error("Multiple rollout segments match the calling turn");
+      }
+      assertRolloutSetStable(sessions, identity.threadId, snapshots);
+      return found;
+    });
     if (matches.length !== 1) throw new Error(matches.length ? "Multiple rollout segments match the calling turn" : "The calling turn is no longer the latest active Codex turn");
     const { file, session, context, lifecycle } = matches[0];
     if (!["Codex Desktop", "codex_vscode"].includes(originator)) throw new Error("Unsupported calling host");

package/src/index.mjs

@@ -40,7 +40,7 @@ import { PROJECT_SETUP_TOOLS, registerProjectOnboardingTools } from "./project-o
 
 exitForVersionRequest(import.meta.url);
 
-const VERSION = "1.22.8";
+const VERSION = "1.22.10";
 void import("./telemetry.mjs").then(({ startUsageReporting }) => startUsageReporting({ version: VERSION })).catch(() => {});
 const log = (msg) => process.stderr.write(`[codex-mcp-bridge] ${msg}\n`);
 

package/src/native-relay-companion.mjs

@@ -38,7 +38,7 @@ import { NativeCreationReceipts, creationIdValid } from "./native-creation-recei
 
 exitForVersionRequest(import.meta.url);
 
-const VERSION = "1.22.8";
+const VERSION = "1.22.10";
 const log = (msg) => process.stderr.write(`[native-relay] ${msg}\n`);
 
 function errorResponse(code, message, sent, details) {

package/src/peer-protocol.mjs

@@ -860,7 +860,7 @@ export class PeerEndpoint {
       const { sessionId, cwd } = pending.transcriptSession;
       const file = findTranscriptFile(sessionId, cwd);
       let stamp;
-      try { const stat = fs.statSync(file); stamp = `${stat.mtimeMs}:${stat.size}`; }
+      try { const stat = fs.statSync(file, { bigint: true }); stamp = `${stat.dev}:${stat.ino}:${stat.mtimeNs}:${stat.ctimeNs}:${stat.size}`; }
       catch { continue; }
       if (stamp === pending.transcriptStamp) continue;
       pending.transcriptStamp = stamp;

package/src/rollout-segments.mjs

@@ -55,6 +55,33 @@ export function isLegacyCliSession(session) {
   return session?.originator === "codex-tui" && session.source === "cli";
 }
 
+const TRANSIENT_ROLLOUT_READ = /changed while (reading|opening)|incomplete final record/;
+const ROLLOUT_CHANGED_DURING_READ = /changed while (reading|opening)/;
+const ROLLOUT_READ_ATTEMPTS = 3;
+
+function reasonText(reason) {
+  return typeof reason === "string" ? reason : reason?.message;
+}
+
+export function isTransientRolloutRead(reason) {
+  const message = reasonText(reason);
+  return typeof message === "string" && TRANSIENT_ROLLOUT_READ.test(message);
+}
+
+export function isRolloutChangedDuringRead(reason) {
+  const message = reasonText(reason);
+  return typeof message === "string" && ROLLOUT_CHANGED_DURING_READ.test(message);
+}
+
+export function retryRolloutRead(read, attempts = ROLLOUT_READ_ATTEMPTS) {
+  for (let attempt = 1; ; attempt++) {
+    try { return read(); }
+    catch (error) {
+      if (attempt >= attempts || !isTransientRolloutRead(error)) throw error;
+    }
+  }
+}
+
 export function assertRolloutSetStable(sessions, threadId, snapshots) {
   const files = findRolloutSegments(sessions, threadId);
   if (files.length !== snapshots.length || files.some((file, i) => file !== snapshots[i].file)) throw new Error("The rollout segment set changed while reading");

package/src/thread-delivery.mjs

@@ -7,6 +7,7 @@ import { creationRequestHash } from "./native-creation-receipts.mjs";
 import { DesktopTaskReceipts } from "./desktop-task-receipts.mjs";
 import { captureCodexRolloutWatermark, inspectCodexNativeTurn, readCodexNativeTurnResponse, readCodexNativeCreationResponse, resolveCodexNativeDispatchResponse } from "./codex-native-response.mjs";
 import { captureProjectScope, recheckProjectScope } from "./project-scope.mjs";
+import { isRolloutChangedDuringRead } from "./rollout-segments.mjs";
 import { requireClaudeSenderContext } from "./claude-sender-context.mjs";
 
 /**
@@ -550,6 +551,8 @@ export class DesktopTaskDelivery {
     let cursor;
     let turnId = null;
     let readSnapshots = false;
+    let deferredReason = null;
+    let deferredTurn = null;
     const readSnapshot = async () => {
       const result = await this.request("read_thread", { threadId, hostId: "local", turnLimit: 1, ...METADATA_READ_OPTIONS }, { deadline: startedAt + timeoutMs });
       const thread = result?.thread;
@@ -560,19 +563,24 @@ export class DesktopTaskDelivery {
       if (responseObservation?.expectedCwd && realpathSync.native(thread.cwd) !== responseObservation.expectedCwd) throw new Error("The selected native task workspace changed during observation");
       return { polls: [{ thread, latestTurn: result.turns?.[0] ?? null }] };
     };
-    const expired = () => ({ threadId, turnId, status: "timeout", text: "", responseStatus: "unavailable", assistantItems: [], replySha256: null, activity: [], errors: [], durationMs: this.now() - startedAt });
+    const expired = () => ({ threadId, turnId, status: "timeout", text: "", responseStatus: "unavailable", ...(deferredReason ? { observationStatus: "unavailable", observationReason: deferredReason } : {}), assistantItems: [], replySha256: null, activity: [], errors: [], durationMs: this.now() - startedAt });
     const deadlineError = (error) => {
       const cause = error.cause ?? error;
       return this.now() - startedAt >= timeoutMs && (["DESKTOP_RESPONSE_DEADLINE", "RELAY_TIMEOUT"].includes(cause.code) ||
         cause.code === "RELAY_UNREACHABLE" && cause.message === "The Codex Desktop relay send deadline elapsed before dispatch");
     };
-    const unassigned = Symbol("workspace-unassigned");
+    const observeLater = Symbol("observe-later");
     const observe = async (selectedTurnId, resolveDispatch = false) => {
       try {
-        return await this.observeNativeResponse(threadId, selectedTurnId, responseObservation, { deadline: startedAt + timeoutMs, resolveDispatch });
+        const observed = await this.observeNativeResponse(threadId, selectedTurnId, responseObservation, { deadline: startedAt + timeoutMs, resolveDispatch });
+        deferredReason = observed?.status === "unavailable" && isRolloutChangedDuringRead(observed.reason) ? observed.reason : null;
+        return deferredReason ? observeLater : observed;
       } catch (error) {
         if (deadlineError(error)) return null;
-        if (error.code === WORKSPACE_UNASSIGNED) return unassigned;
+        if (error.code === WORKSPACE_UNASSIGNED) {
+          deferredReason = null;
+          return observeLater;
+        }
         throw error;
       }
     };
@@ -611,7 +619,7 @@ export class DesktopTaskDelivery {
       if (this.resolveResponse && responseObservation?.watermark?.status === "available" && responseObservation.operation !== "create_thread") {
         const observed = await observe(null, true);
         if (!observed) return expired();
-        if (observed === unassigned) {
+        if (observed === observeLater) {
           await pause();
           continue;
         }
@@ -634,17 +642,20 @@ export class DesktopTaskDelivery {
         continue;
       }
       if (needsAttention) return attention();
-      const existingTurn = turn?.id === previousTurnId;
-      if (turn?.id && (!existingTurn || responseObservation?.previousTurnId === previousTurnId)) {
-        if (!existingTurn) turnId = turn.id;
-        const status = turn.status;
+      const released = deferredTurn ?? turn;
+      const existingTurn = released?.id === previousTurnId;
+      if (released?.id && (!existingTurn || responseObservation?.previousTurnId === previousTurnId)) {
+        if (!existingTurn) turnId = released.id;
+        const status = released.status;
         if (RELEASE_STATUSES.has(status)) {
-          const observed = await observe(turn.id);
+          const observed = await observe(released.id);
           if (!observed) return expired();
-          if (observed === unassigned) {
+          if (observed === observeLater) {
+            deferredTurn = deferredReason ? released : null;
             await pause();
             continue;
           }
+          deferredTurn = null;
           const responseStatus = observed.status;
           if (existingTurn && !observed.dispatchObserved && !["completed", "completed_no_reply"].includes(responseStatus)) {
             turnId = null;
@@ -652,7 +663,7 @@ export class DesktopTaskDelivery {
             await this.sleep(Math.min(1500, timeoutMs - (this.now() - startedAt)));
             continue;
           }
-          turnId = turn.id;
+          turnId = released.id;
           return {
             threadId, turnId, status,
             text: responseStatus === "completed" ? observed.text : "",
@@ -663,7 +674,7 @@ export class DesktopTaskDelivery {
             replySha256: observed.replySha256 ?? null,
             responseSource: observed.source ?? null,
             ...(observed.responseScope ? { responseScope: observed.responseScope } : {}),
-            activity: [], errors: turn.error ? [turn.error] : [], durationMs: turn.durationMs ?? this.now() - startedAt,
+            activity: [], errors: released.error ? [released.error] : [], durationMs: released.durationMs ?? this.now() - startedAt,
           };
         }
       }