@minhspark/codex-mcp-bridge 1.26.4 → 1.26.6

package/docs/new-macos-setup.md

@@ -15,25 +15,30 @@ separately authenticated provider CLIs and do not require open Desktop apps.
 Use the same command for a fresh installation and every update:
 
 ```bash
-npm exec --yes --ignore-scripts --package=@minhspark/codex-mcp-bridge@latest -- codex-bridge-update
+npx -y @minhspark/codex-mcp-bridge@latest
 ```
 
-npm downloads the latest updater into its cache. `--ignore-scripts` suppresses
-setup only in that temporary location. The updater installs its exact resolved
-version globally, enables this package's managed setup hook, displays progress
-and verifies the global version and configuration. No second installation or
+Run this directly in an interactive terminal. The bare npm package launch
+selects the complete updater. The updater installs its exact resolved
+version globally with lifecycle scripts disabled, runs managed setup directly
+using Node and verifies the global version and configuration. No second installation or
 setup command is required. Existing disabled choices, authentication and custom
 project grants are preserved; the updater does not open apps or chats or kill
 processes. A pending service migration is reported instead of interrupting work.
 
+For scripts or redirected input/output, use
+`npx -y --ignore-scripts -p @minhspark/codex-mcp-bridge@latest codex-bridge-update`.
+MCP clients keep using the normal stdio launch; piped launches do not select
+the terminal updater.
+
 Setup registers the local bridges, adds native pipe forwarding, and bootstraps
 the relay executor. It reuses an available Codex CLI or installs a pinned
 official package under `~/.config/GptClaudeBridge/tools` (or
 `XDG_CONFIG_HOME/GptClaudeBridge/tools`). No separate Codex CLI install command
 is required. Run the install under the account that uses the apps, without `sudo`.
 If setup or update exits nonzero, inspect the reported component and installed
-version, correct the cause, and rerun the same updater command. npm can roll back
-package files without restoring settings already written or command shims.
+version, correct the cause, and rerun the same updater command. A completed
+package installation is preserved when managed setup fails.
 
 The command also installs an independent per-user LaunchAgent for separate
 Claude, Codex and Antigravity CLI workers and updates its managed settings on
@@ -101,14 +106,13 @@ a nonzero exit status while configuration is incomplete.
 
 Local `npm install` and `npm ci` do not change app settings. For a deliberate
 package-only installation, a direct global npm install can use
-`CODEX_BRIDGE_SKIP_SETUP=1` or `--ignore-scripts`; this differs from the cache-only
-script suppression in the recommended updater command. For Homebrew, run
+`CODEX_BRIDGE_SKIP_SETUP=1` or `--ignore-scripts`; the complete updater runs
+managed setup directly after package installation. For Homebrew, run
 `codex-bridge-setup` after installing the formula. A pinned source checkout can
 use `node scripts/setup.mjs`.
 
-The [manual macOS commands](../README.md#macos-terminal) and
-[Claude Code registration commands](../README.md#register-claude-code) remain
-available for selective configuration. `codex-bridge-code-install --install`
+See [project onboarding](project-onboarding.md) for shared authorization and
+selective configuration. `codex-bridge-code-install --install`
 can create a missing user-level Code entry; its existing policy migration mode
 is described in [project onboarding](project-onboarding.md). Use intended
 project paths when setting explicit `CODEX_BRIDGE_ALLOWED_ROOTS`; macOS

package/docs/new-windows-setup.md

@@ -7,15 +7,28 @@ does not require the Desktop apps to be open. Use this one PowerShell command
 for a fresh installation or an update, including from 1.26.0 or 1.26.1:
 
 ```powershell
-npm.cmd exec --yes --ignore-scripts --package=@minhspark/codex-mcp-bridge@latest -- codex-bridge-update
+npx.cmd -y @minhspark/codex-mcp-bridge@latest
 ```
 
-npm downloads the latest updater into its cache. `--ignore-scripts` prevents
-setup from running in that temporary location; the updater then installs its
-exact resolved version globally with this package's managed setup hook enabled.
-It displays progress and verifies the global version and saved settings.
+Run this directly in an interactive terminal. The bare npm package launch
+selects the complete updater and defaults to `%APPDATA%\npm` on Windows instead
+of a protected Node installation directory such as `Program Files`;
+administrator rights are not required. The updater installs its exact resolved
+version globally with lifecycle scripts disabled, then runs managed setup
+directly using Node. It displays progress and verifies the global version,
+saved settings and relay activation.
 No second installation or setup command is required.
 
+For scripts or redirected input/output, select the updater explicitly:
+
+```powershell
+npx.cmd -y --ignore-scripts -p @minhspark/codex-mcp-bridge@latest codex-bridge-update --user
+```
+
+MCP clients keep using the package's normal stdio launch. Piped launches do not
+select the terminal updater. An installed package also accepts
+`codex-mcp-bridge.cmd update` for an explicit update from that package version.
+
 An older Windows background service can keep the global npm package directory
 locked as its working directory. Before replacing the package, the updater
 moves only this package's owned legacy service to newer code using private relay
@@ -33,8 +46,8 @@ official package in the current user's `.config\GptClaudeBridge\tools`
 directory. It also configures native pipe forwarding and bootstraps the relay
 executor. A failed component is reported as incomplete rather than ready. If
 setup or update exits nonzero, inspect the reported component and installed
-version, correct the cause, and rerun the same updater command. npm can roll back
-package files without restoring settings already written or command shims.
+version, correct the cause, and rerun the same updater command. A completed
+package installation is preserved when managed setup fails.
 
 The same command installs the independent worker relay as a hidden per-user
 scheduled task and applies its managed settings on every update. It registers
@@ -104,8 +117,8 @@ attempting delivery.
 Local `npm install` and `npm ci` do not configure apps. For a deliberate
 package-only installation, a direct global npm install can use
 `CODEX_BRIDGE_SKIP_SETUP=1` or `--ignore-scripts`. This differs from the
-recommended updater command, which suppresses setup only in its temporary cache
-and enables it for the final global installation. A direct install skips the
+recommended updater command, which disables lifecycle scripts and runs managed
+setup directly after the final global installation. A direct install skips the
 updater's migration of legacy Windows services that can lock the package.
 The optional card extension, hosted ChatGPT pairing, and VS Code preview have
 separate installation steps.

package/docs/project-onboarding.md

@@ -4,15 +4,19 @@ One command installs or updates the global package, registers the bridges and
 configures the independent worker relay automatically:
 
 ```sh
-npm exec --yes --ignore-scripts --package=@minhspark/codex-mcp-bridge@latest -- codex-bridge-update
+npx -y @minhspark/codex-mcp-bridge@latest
 ```
 
-In Windows PowerShell use `npm.cmd`. npm fetches the latest updater into its
-cache with setup disabled there. The updater moves an owned legacy service to
+Run it directly in an interactive terminal. In Windows PowerShell use
+`npx.cmd -y @minhspark/codex-mcp-bridge@latest`; it selects the per-user npm
+prefix without administrator rights. For scripts or redirected terminals, use
+the explicit updater in the [Windows](new-windows-setup.md) or
+[macOS](new-macos-setup.md) guide. Normal MCP client launches keep serving stdio.
+The updater moves an owned legacy service to
 newer code using private relay storage as its working directory when needed,
 temporarily using the downloaded updater package. It waits for active work to
-drain, then installs its exact resolved version globally with the setup hook
-enabled. It verifies the global installation and managed settings. No second
+drain, then installs its exact resolved version globally with lifecycle scripts
+disabled and runs managed setup directly using Node. It verifies the global installation and managed settings. No second
 installation command is required. It does not open apps or chats or kill
 processes. The setup creates
 `codex-bridge` for Claude Code and the separate `codex-bridge-desktop` shared
@@ -37,10 +41,10 @@ setup after correcting an incomplete component. Add `.cmd` on Windows and
 `--json` for structured output. Local package installs do not run setup.
 For a deliberate package-only direct global installation,
 `CODEX_BRIDGE_SKIP_SETUP=1` or npm `--ignore-scripts` opts out of setup; this is
-separate from the cache-only script suppression in the recommended updater.
+separate from the complete updater, which runs managed setup directly after installation.
 Failed setup or update returns a nonzero exit. Inspect the reported component
 and installed version, correct the cause, then rerun the same updater command.
-npm can roll back package files without restoring settings or command shims.
+A completed package installation is preserved when managed setup fails.
 Explicit setup and `--check` also return a nonzero status until the saved
 configuration passes verification.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@minhspark/codex-mcp-bridge",
-  "version": "1.26.4",
+  "version": "1.26.6",
   "description": "Connect Claude, Codex, and Antigravity through MCP, with native Desktop handoffs and bridge-owned Antigravity CLI sessions.",
   "keywords": [
     "mcp",

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "codex-mcp-bridge",
-  "version": "1.26.4",
+  "version": "1.26.6",
   "description": "Connect ChatGPT to your own Codex Desktop projects and conversations.",
   "author": {
     "name": "Bui Dang Minh",

package/scripts/install-native-relay.mjs

@@ -25,7 +25,7 @@ import { removeRelayFile } from "../src/native-relay-files.mjs";
 
 exitForVersionRequest(import.meta.url);
 
-const VERSION = "1.26.4";
+const VERSION = "1.26.6";
 const root = stableInstallPath(path.resolve(path.dirname(fileURLToPath(import.meta.url)), ".."));
 const entry = path.join(root, "src", "mcp-supervisor.mjs");
 const entryArgs = ["native-relay-companion.mjs"];

package/scripts/update.mjs

@@ -87,11 +87,19 @@ function neutralDirectory(roots, env) {
 }
 
 function childFailure(result, phase) {
-  const match = /npm\s+(?:ERR!|error)\s+code\s+([A-Z][A-Z0-9_]{0,79})\b/.exec(String(result?.stderr ?? ""));
-  const code = match?.[1] ?? (/^[A-Z][A-Z0-9_]{0,79}$/.test(result?.error?.code ?? "") ? result.error.code : null);
+  const match = /npm\s+(?:ERR!|error)\s+code\s+([A-Z][A-Z0-9_]{0,79}|\d{1,10})\b/.exec(String(result?.stderr ?? ""));
+  const signal = result?.error?.signal ?? result?.signal;
+  const value = match?.[1] ?? result?.error?.code ?? (signal ? null : result?.status ?? result?.exitCode);
+  const timedOut = value === "ETIMEDOUT" || result?.error?.killed === true && signal === "SIGTERM";
+  const code = timedOut ? "ETIMEDOUT" : /^\d{1,10}$/.test(String(value)) ? `EXIT_${value}`
+    : /^[A-Z][A-Z0-9_]{0,79}$/.test(value ?? "") ? value
+    : /^SIG[A-Z0-9]{1,20}$/.test(signal ?? "") ? `SIGNAL_${signal}` : null;
   const cause = code ? Object.assign(new Error("The child command reported a failure."), { code }) : undefined;
-  return failure(code === "EBUSY" ? "UPDATE_PACKAGE_BUSY" : phase === "verification" ? "UPDATE_SETUP_INCOMPLETE" : "UPDATE_NPM_FAILED",
-    code === "EBUSY" ? `The installed package is still held open by another process. No process was stopped. ${RETRY}`
+  const permissionDenied = phase === "installation" && ["EPERM", "EACCES"].includes(code);
+  return failure(permissionDenied ? "UPDATE_INSTALL_PERMISSION" : code === "EBUSY" ? "UPDATE_PACKAGE_BUSY" : timedOut ? "UPDATE_COMMAND_TIMEOUT" : phase === "verification" ? "UPDATE_SETUP_INCOMPLETE" : "UPDATE_NPM_FAILED",
+    permissionDenied ? "npm could not write to the installation directory. Run codex-bridge-update --user to install and configure the bridge in your user account without administrator rights. Existing work and receipts were preserved."
+      : timedOut ? `The update command exceeded its deadline. ${RETRY}`
+      : code === "EBUSY" ? `The installed package is still held open by another process. No process was stopped. ${RETRY}`
       : `The ${phase === "verification" ? "installed setup verification" : "npm command"} did not complete. ${RETRY}`, phase, cause);
 }
 
@@ -114,28 +122,35 @@ function serviceQuiescent(config) {
 export async function runUpdate({ args = [], env = process.env, platform = process.platform, root = ROOT, run = execute,
   installService = installBackgroundRelay, readConfig = readRelayConfiguration, readRuntime = readRelayServiceRuntime,
   quiescent = serviceQuiescent, now = Date.now, sleep = pause, waitMs = 120000, onProgress = () => {} } = {}) {
-  if (args.some(arg => !["--help", "--json"].includes(arg))) throw failure("UPDATE_ARGUMENT_INVALID", "Usage: codex-bridge-update [--json] [--help]", "preflight");
-  if (args.includes("--help")) return { help: "Usage: codex-bridge-update [--json]\nSafely update the global bridge and all managed settings. Legacy Windows relays migrate when existing work finishes; pending migrations can be retried with the same command." };
+  if (args.some(arg => !["--help", "--json", "--user"].includes(arg))) throw failure("UPDATE_ARGUMENT_INVALID", "Usage: codex-bridge-update [--user] [--json] [--help]", "preflight");
+  if (args.includes("--help")) return { help: "Usage: codex-bridge-update [--user] [--json]\nSafely update the global bridge and all managed settings. --user selects the per-user npm prefix (Windows: AppData/Roaming/npm; macOS/Linux: ~/.local) without administrator rights. Legacy Windows relays migrate when existing work finishes; pending migrations can be retried with the same command." };
   if (env.CODEX_BRIDGE_SKIP_SETUP === "1") throw failure("UPDATE_SETUP_DISABLED", "CODEX_BRIDGE_SKIP_SETUP=1 disables managed setup. Remove that explicit opt-out before requesting this complete update.", "preflight");
   if (!Number.isSafeInteger(waitMs) || waitMs < 1 || waitMs > 600000) throw failure("UPDATE_ARGUMENT_INVALID", "The update readiness deadline is invalid.", "preflight");
   root = fs.realpathSync.native(root);
   const version = packageVersion(root);
   const npm = resolveUpdateNpm(env);
+  const userPrefix = args.includes("--user") ? platform === "win32"
+    ? path.join(env.APPDATA || path.join(env.USERPROFILE || os.homedir(), "AppData", "Roaming"), "npm")
+    : path.join(env.HOME || os.homedir(), ".local") : null;
+  if (userPrefix && (!path.isAbsolute(userPrefix) || /[\u0000-\u001f\u007f]/.test(userPrefix))) {
+    throw failure("UPDATE_GLOBAL_ROOT_INVALID", "The per-user installation directory is invalid.", "preflight");
+  }
+  const prefixArgs = userPrefix ? ["--prefix", userPrefix] : [];
   let cwd = neutralDirectory([root], env);
   let childEnv = Object.fromEntries(Object.entries(env).filter(([name]) => !/^AGENT_RELAY_(?!DIRECTORY$)/i.test(name)));
-  const command = async (arguments_, phase, timeout = 600000) => {
+  const command = async (arguments_, phase, timeout = 600000, environment = childEnv) => {
     let result;
     try {
-      result = await run(process.execPath, arguments_, { env: childEnv, cwd, encoding: "utf8", windowsHide: true,
+      result = await run(process.execPath, arguments_, { env: environment, cwd, encoding: "utf8", windowsHide: true,
         shell: false, timeout, maxBuffer: 8 * 1024 * 1024, stdio: ["ignore", "pipe", "pipe"] });
     } catch (error) { throw childFailure({ error, stderr: error.stderr }, phase); }
     if (result?.error || (result?.status ?? result?.exitCode ?? 0) !== 0) throw childFailure(result, phase);
     return String(result?.stdout ?? "");
   };
-  const modules = (await command([npm, "root", "--global"], "preflight", 30000)).trim();
+  const modules = (await command([npm, "root", "--global", ...prefixArgs], "preflight", 30000)).trim();
   if (!path.isAbsolute(modules) || /[\u0000-\u001f\u007f]/.test(modules)) throw failure("UPDATE_GLOBAL_ROOT_INVALID", "npm returned an invalid global installation directory.", "preflight");
-  const prefix = (await command([npm, "prefix", "--global"], "preflight", 30000)).trim();
-  if (!path.isAbsolute(prefix) || /[\u0000-\u001f\u007f]/.test(prefix)
+  const prefix = (await command([npm, "prefix", "--global", ...prefixArgs], "preflight", 30000)).trim();
+  if (!path.isAbsolute(prefix) || /[\u0000-\u001f\u007f]/.test(prefix) || userPrefix && path.relative(userPrefix, prefix) !== ""
       || path.relative(modules, path.join(prefix, ...(platform === "win32" ? [] : ["lib"]), "node_modules")) !== "") {
     throw failure("UPDATE_GLOBAL_ROOT_INVALID", "npm returned inconsistent global prefix and installation directories.", "preflight");
   }
@@ -146,7 +161,7 @@ export async function runUpdate({ args = [], env = process.env, platform = proce
   const config = readConfig({ env: childEnv, platform, missing: true });
   let runtime;
   if (config) {
-    runtime = readRuntime(config.paths.root, { root: globalRoot, nodeExecutable: process.execPath });
+    runtime = readRuntime(config.paths.root, { root: globalRoot, nodeExecutable: process.execPath, allowMissingFiles: true });
     if (runtime.packageVersion && newerVersion(runtime.packageVersion, version)) throw failure("UPDATE_DOWNGRADE_REFUSED", "The owned relay runtime is newer than this updater. Run the update command with the latest published package.", "preflight");
     if (runtime.environment !== undefined) childEnv = { ...Object.fromEntries(Object.entries(childEnv).filter(([name]) => !MANAGED_ENV.has(name.toUpperCase()))), ...runtime.environment };
     childEnv.AGENT_RELAY_DIRECTORY = config.paths.root;
@@ -176,26 +191,27 @@ export async function runUpdate({ args = [], env = process.env, platform = proce
       if (!quiescent(config)) throw Object.assign(failure("UPDATE_RELAY_PENDING", `The disabled relay still has an owned process whose release could not be verified. ${RETRY}`, "migration"), { pending: true });
     } else {
       onProgress("Waiting for the legacy relay to finish existing work and activate the update runtime.");
-      const staged = runtime.packageVersion && !legacy(runtime.packageVersion) && !newerVersion("1.26.2", runtime.packageVersion);
+      const staged = runtime.filesAvailable !== false && runtime.packageVersion && !legacy(runtime.packageVersion) && !newerVersion("1.26.2", runtime.packageVersion);
       const service = await awaitService(staged ? runtime.packageRoot : root, !staged, "migration", staged ? runtime.packageVersion : version);
       migrated = !staged && service.enabled;
     }
   }
-  onProgress(`Installing bridge ${version} and applying managed settings.`);
-  await command([npm, "install", "--global", "--prefix", prefix, `${PACKAGE}@${version}`, "--ignore-scripts=false", `--allow-scripts=${PACKAGE}`, "--foreground-scripts"], "installation");
+  onProgress(`Installing bridge ${version}.`);
+  await command([npm, "install", "--global", "--prefix", prefix, `${PACKAGE}@${version}`, "--ignore-scripts"],
+    "installation", 600000, { ...childEnv, CODEX_BRIDGE_SKIP_SETUP: "1" });
   if (packageVersion(globalRoot) !== version) throw failure("UPDATE_VERSION_MISMATCH", "The global package version does not match the updater version. Rerun the same update command.", "verification");
-  onProgress("Verifying the global bridge settings and owned relay runtime.");
-  let setup;
-  try { setup = JSON.parse(await command([path.join(globalRoot, "scripts", "setup.mjs"), "--check", "--json"], "verification")); }
-  catch (error) { if (error?.code) throw error; throw failure("UPDATE_SETUP_INCOMPLETE", `Global setup did not return a verifiable result. ${RETRY}`, "verification"); }
-  if (setup?.configured !== true) throw failure("UPDATE_SETUP_INCOMPLETE", `The global bridge settings are incomplete. ${RETRY}`, "verification");
+  for (const check of [false, true]) {
+    onProgress(check ? "Verifying the global bridge settings and owned relay runtime." : "Applying managed settings from the installed bridge.");
+    let setup;
+    try { setup = JSON.parse(await command([path.join(globalRoot, "scripts", "setup.mjs"), ...(check ? ["--check"] : []), "--json"], "verification")); }
+    catch (error) { if (error?.code) throw error; throw failure("UPDATE_SETUP_INCOMPLETE", `Global setup did not return a verifiable result. ${RETRY}`, "verification"); }
+    if (setup?.configured !== true) throw failure("UPDATE_SETUP_INCOMPLETE", `The global bridge settings are incomplete. ${RETRY}`, "verification");
+  }
   const service = await awaitService(globalRoot, false, "verification");
   return { updated: true, configured: true, version, previousVersion, migrated, service, opensApps: false, opensChats: false };
 }
 
-if (isMainModule(process.argv[1], import.meta.url)) {
-  exitForVersionRequest(import.meta.url);
-  const args = process.argv.slice(2);
+export async function runUpdateCli(args = process.argv.slice(2)) {
   try {
     process.chdir(neutralDirectory([ROOT], process.env));
     const result = await runUpdate({ args, onProgress: message => process.stderr.write(`${message}\n`) });
@@ -208,3 +224,8 @@ if (isMainModule(process.argv[1], import.meta.url)) {
     process.exitCode = 1;
   }
 }
+
+if (isMainModule(process.argv[1], import.meta.url)) {
+  exitForVersionRequest(import.meta.url);
+  await runUpdateCli();
+}

package/src/background-relay-service.mjs

@@ -66,7 +66,7 @@ export function relayServiceRuntimeId(runtime) {
   return createHash("sha256").update(JSON.stringify([runtime.packageRoot, runtime.nodeExecutable, runtime.packageVersion ?? null, runtime.environment ?? {}])).digest("hex");
 }
 
-export function readRelayServiceRuntime(directory, { root = ROOT, nodeExecutable = stableNodeBin() } = {}) {
+export function readRelayServiceRuntime(directory, { root = ROOT, nodeExecutable = stableNodeBin(), allowMissingFiles = false } = {}) {
   let text;
   try { text = readRegularConfigFile(path.join(directory, "service-runtime.json"), { missing: true, maxBytes: 64 * 1024 }); }
   catch { throw serviceFailure("SERVICE_RUNTIME_INVALID"); }
@@ -78,11 +78,17 @@ export function readRelayServiceRuntime(directory, { root = ROOT, nodeExecutable
       || ![value.packageRoot, value.nodeExecutable].every((entry) => typeof entry === "string" && path.isAbsolute(entry) && !/[\u0000-\u001f\u007f]/.test(entry))
       || value.environment !== undefined && (!value.environment || typeof value.environment !== "object" || Array.isArray(value.environment)
         || Object.entries(value.environment).some(([name, entry]) => !["HOME", "PATH", "CODEX_HOME", "CLAUDE_CONFIG_DIR", "XDG_CONFIG_HOME"].includes(name)
-          || typeof entry !== "string" || !entry || /[\u0000-\u001f\u007f]/.test(entry)))
-      || ![path.join(value.packageRoot, "src", "background-relay-service.mjs"), path.join(value.packageRoot, "src", "background-relay-daemon.mjs"), value.nodeExecutable].every((entry) => {
-        try { return fs.statSync(entry).isFile(); } catch { return false; }
-      })) throw serviceFailure("SERVICE_RUNTIME_INVALID");
-  return value;
+          || typeof entry !== "string" || !entry || /[\u0000-\u001f\u007f]/.test(entry)))) throw serviceFailure("SERVICE_RUNTIME_INVALID");
+  let filesAvailable = true;
+  for (const entry of [path.join(value.packageRoot, "src", "background-relay-service.mjs"), path.join(value.packageRoot, "src", "background-relay-daemon.mjs"), value.nodeExecutable]) {
+    try {
+      if (!fs.statSync(entry).isFile()) throw serviceFailure("SERVICE_RUNTIME_INVALID");
+    } catch (error) {
+      if (!allowMissingFiles || error.code !== "ENOENT") throw serviceFailure("SERVICE_RUNTIME_INVALID");
+      filesAvailable = false;
+    }
+  }
+  return allowMissingFiles ? { ...value, filesAvailable } : value;
 }
 
 export function acquireRelayServiceLock(root, { pid = process.pid, isAlive = alive, identity = processIdentity } = {}) {

package/src/claude-bridge.mjs

@@ -31,7 +31,7 @@ import { BACKGROUND_WORKER_GUIDANCE, registerBackgroundTools } from "./backgroun
 
 exitForVersionRequest(import.meta.url);
 
-const VERSION = "1.26.4";
+const VERSION = "1.26.6";
 void import("./telemetry.mjs").then(({ startUsageReporting }) => startUsageReporting({ version: VERSION })).catch(() => {});
 const FORWARD_MIN_INTERVAL_MS = 5000;
 const FORWARD_MAX_PER_SESSION = 50;

package/src/codex-bridge-launcher.mjs

@@ -1,11 +1,39 @@
 #!/usr/bin/env node
 import { runSupervisor } from "./mcp-supervisor.mjs";
 import { handleTelemetryCommand } from "./telemetry.mjs";
-if (process.argv[2] === "setup") {
+import { exitForVersionRequest } from "./cli-version.mjs";
+import { isMainModule } from "./install-paths.mjs";
+
+async function applySetup(args) {
   const { runSetup, printSetup } = await import("./setup.mjs");
-  try {
-    const result = runSetup({ args: process.argv.slice(3) });
-    printSetup(result, { json: process.argv.includes("--json") });
-    if (result.configured === false && !result.dryRun) process.exitCode = 1;
-  } catch (error) { process.stderr.write(`Bridge setup: ${error.message}\n`); process.exitCode = 1; }
-} else if (!await handleTelemetryCommand(process.argv.slice(2))) await runSupervisor("index.mjs");
+  const result = runSetup({ args });
+  printSetup(result, { json: args.includes("--json") });
+  return result;
+}
+
+export async function runLauncher({ args = process.argv.slice(2), env = process.env, platform = process.platform,
+  input = process.stdin, output = process.stdout, errorOutput = process.stderr, supervise = runSupervisor,
+  telemetry = handleTelemetryCommand, setup = applySetup,
+  updateCli = async args => (await import("../scripts/update.mjs")).runUpdateCli(args) } = {}) {
+  const terminalUpdate = args.length === 0 && env.npm_command === "exec" && input.isTTY === true && output.isTTY === true;
+  if (terminalUpdate || args[0] === "update") {
+    const updateArgs = terminalUpdate ? [] : args.slice(1);
+    return updateCli(platform === "win32" && !updateArgs.includes("--user") ? ["--user", ...updateArgs] : updateArgs);
+  }
+  if (args[0] === "setup") {
+    try {
+      const result = await setup(args.slice(1));
+      return result.configured === false && !result.dryRun ? 1 : 0;
+    } catch (error) {
+      errorOutput.write(`Bridge setup: ${error.message}\n`);
+      return 1;
+    }
+  }
+  if (!await telemetry(args)) return supervise("index.mjs");
+}
+
+if (isMainModule(process.argv[1], import.meta.url)) {
+  exitForVersionRequest(import.meta.url);
+  const exitCode = await runLauncher();
+  if (Number.isInteger(exitCode)) process.exitCode = exitCode;
+}

package/src/index.mjs

@@ -44,7 +44,7 @@ import { BACKGROUND_WORKER_GUIDANCE, registerBackgroundTools } from "./backgroun
 
 exitForVersionRequest(import.meta.url);
 
-const VERSION = "1.26.4";
+const VERSION = "1.26.6";
 void import("./telemetry.mjs").then(({ startUsageReporting }) => startUsageReporting({ version: VERSION })).catch(() => {});
 const log = (msg) => process.stderr.write(`[codex-mcp-bridge] ${msg}\n`);
 

package/src/native-relay-companion.mjs

@@ -43,7 +43,7 @@ import { remoteCodexSocketPath, remoteNativeAdapter, remoteRequestResponse } fro
 
 exitForVersionRequest(import.meta.url);
 
-const VERSION = "1.26.4";
+const VERSION = "1.26.6";
 const log = (msg) => process.stderr.write(`[native-relay] ${msg}\n`);
 
 function errorResponse(code, message, sent, details) {

package/src/setup.mjs

@@ -179,7 +179,7 @@ export function checkSetup({ env = process.env, platform = process.platform, roo
 
 export function runSetup({ args = [], env = process.env, platform = process.platform, root = ROOT, run = execute, resolve = resolveCodexBin } = {}) {
   const options = setupArguments(args);
-  if (options.help) return { help: "Usage: codex-bridge-setup [--check|--dry-run] [--json] [--no-download]\nUpdate the package and apply managed settings with: npm install -g @minhspark/codex-mcp-bridge@latest --allow-scripts=@minhspark/codex-mcp-bridge --foreground-scripts\nGlobal npm installation configures Claude Desktop, Claude Code, Codex, Antigravity and the independent worker relay automatically. CODEX_BRIDGE_SKIP_SETUP=1 opts out. Saved configuration, background relay health and loaded native app connections are verified separately." };
+  if (options.help) return { help: `Usage: codex-bridge-setup [--check|--dry-run] [--json] [--no-download]\nUpdate the package and apply managed settings in an interactive terminal with: ${platform === "win32" ? "npx.cmd" : "npx"} -y @minhspark/codex-mcp-bridge@latest\nThe updater installs the package with lifecycle scripts disabled, then directly configures Claude Desktop, Claude Code, Codex, Antigravity and the independent worker relay. CODEX_BRIDGE_SKIP_SETUP=1 opts out. Saved configuration, background relay health and loaded native app connections are verified separately.` };
   if (options.postinstall && !automaticSetupEnabled(env)) return { skipped: true, reason: "Automatic configuration runs only for a global npm install; use codex-bridge-setup for manual setup." };
   if (options.check) return checkSetup({ env, platform, root, run, resolve });
   const native = platform === "win32" || platform === "darwin";