@minhspark/codex-mcp-bridge 1.27.1 → 1.27.2

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-mcp-bridge",
-  "version": "1.27.1",
+  "version": "1.27.2",
   "description": "Connect ChatGPT to your own Codex Desktop projects and conversations.",
   "author": {
     "name": "Bui Dang Minh"

package/CHANGELOG.md

@@ -2,6 +2,21 @@
 
 Follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and [SemVer](https://semver.org/).
 
+## [1.27.2] - 2026-11-05
+
+### Fixed
+
+- The native relay and the Antigravity sidecar now recover when an owner is killed between publishing its socket and removing the private name used to create it. That left the socket with a second hard link, which the safety check refused to remove, so every later start failed and `codex_bridge_status` kept reporting `RELAY_UNREACHABLE` with `ECONNREFUSED`, even after restarting Codex Desktop. Once a socket has refused a connection, a replacement removes only hard links of that same socket named like a private socket and owned by the same user. A socket with any other hard link is still refused, and a live owner that is confirmed by the probe is left alone. The removal is now bound to the socket that was probed, so an owner that replaces it during the probe keeps its socket. The native relay then retries, and the Antigravity sidecar start fails without touching that owner.
+
+### Verification and limits
+
+- Reproduced on macOS: Codex Desktop killed a relay companion that exceeded its 30-second startup limit under heavy load, and the relay stayed down until the extra link was removed by hand. Regression tests kill a real process inside that window, and also cover a live owner and a foreign hard link.
+- Private socket names left unlinked by earlier crashes stay in `~/.codex`. They are harmless and are not removed, because a live companion may be using a name of that form.
+- A running supervised companion loads the new version once idle and then recovers on its own; a companion without a supervisor needs its host to reconnect. This reload was checked with a test harness, not on a machine stuck in this state with live Codex Desktop.
+- In the native relay, a liveness probe that fails or times out under heavy load still counts as a dead owner. That existing limit is unchanged and now also covers an owner still inside the brief link step. The Antigravity sidecar treats a timeout as a live owner.
+- `codex-native-relay-install --remove` still stops with `Unsafe relay socket file` on a socket in this state. Starting a companion recovers it, or the leftover private name can be removed by hand.
+- Upgrade with `npm install -g @minhspark/codex-mcp-bridge@latest --allow-scripts=@minhspark/codex-mcp-bridge --foreground-scripts`.
+
 ## [1.27.1] - 2026-11-05
 
 ### Fixed
@@ -15,7 +30,7 @@ Follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and [SemVer](ht
 
 - Reproduced on v1.27.0 with `CODEX_BRIDGE_THREAD_POLICY=roots` and no policy: inspection said `needs_setup` while `codex_bridge_status` said `authorized=true` for the same directory.
 - Delivery enforcement is unchanged: authorization, same-project, receipt and project-match decisions make the same choices as before. Only diagnostics, one error code and the message text change. Without a policy, the Codex-to-Claude bridge has no directory allowlist and now says so.
-- The cause of the reported `No saved local Codex Desktop project` refusal is still unknown. The new status and message will identify it on the next occurrence; this release does not change which projects match.
+- The cause of the reported `No saved local Codex Desktop project` refusal is still unknown. The new status and message should narrow it down on the next occurrence; this release does not change which projects match.
 - Upgrade with `npm install -g @minhspark/codex-mcp-bridge@latest --allow-scripts=@minhspark/codex-mcp-bridge --foreground-scripts`, then reconnect the MCP clients so they load the new version.
 
 ## [1.27.0] - 2026-11-05

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@minhspark/codex-mcp-bridge",
-  "version": "1.27.1",
+  "version": "1.27.2",
   "description": "Connect Claude, Codex, and Antigravity through MCP, with native Desktop handoffs and bridge-owned Antigravity CLI sessions.",
   "keywords": [
     "mcp",

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "codex-mcp-bridge",
-  "version": "1.27.1",
+  "version": "1.27.2",
   "description": "Connect ChatGPT to your own Codex Desktop projects and conversations.",
   "author": {
     "name": "Bui Dang Minh",

package/scripts/install-native-relay.mjs

@@ -25,7 +25,7 @@ import { removeRelayFile } from "../src/native-relay-files.mjs";
 
 exitForVersionRequest(import.meta.url);
 
-const VERSION = "1.27.1";
+const VERSION = "1.27.2";
 const root = stableInstallPath(path.resolve(path.dirname(fileURLToPath(import.meta.url)), ".."));
 const entry = path.join(root, "src", "mcp-supervisor.mjs");
 const entryArgs = ["native-relay-companion.mjs"];

package/src/antigravity-ipc.mjs

@@ -4,7 +4,7 @@ import net from "node:net";
 import os from "node:os";
 import path from "node:path";
 import { protectCurrentUserPipe } from "./windows-pipe-acl.mjs";
-import { relayFileIdentity, removeRelayFile } from "./native-relay-files.mjs";
+import { releasePrivateSocketLinks, relayFileIdentity, removeRelayFile, staleSocketIdentity } from "./native-relay-files.mjs";
 import { bridgeDiagnostic } from "./recipient-preflight.mjs";
 
 const LIMIT = 2 * 1024 * 1024;
@@ -131,9 +131,12 @@ export async function serveAntigravityDesktop(handler, { directory = antigravity
       try { fs.linkSync(privatePath, socketPath); }
       catch (error) {
         if (error.code !== "EEXIST") throw error;
-        const existing = relayFileIdentity(socketPath, "socket");
-        if (!await socketRefused(socketPath)) throw new Error("Another Antigravity sidecar owns the socket");
-        removeRelayFile(socketPath, { expected: existing });
+        const existing = staleSocketIdentity(socketPath);
+        if (existing !== null) {
+          if (!await socketRefused(socketPath)) throw new Error("Another Antigravity sidecar owns the socket");
+          releasePrivateSocketLinks(socketPath, existing);
+          removeRelayFile(socketPath, { expected: existing });
+        }
         fs.linkSync(privatePath, socketPath);
       }
       fs.unlinkSync(privatePath);

package/src/claude-bridge.mjs

@@ -31,7 +31,7 @@ import { BACKGROUND_WORKER_GUIDANCE, registerBackgroundTools } from "./backgroun
 
 exitForVersionRequest(import.meta.url);
 
-const VERSION = "1.27.1";
+const VERSION = "1.27.2";
 void import("./telemetry.mjs").then(({ startUsageReporting }) => startUsageReporting({ version: VERSION })).catch(() => {});
 const FORWARD_MIN_INTERVAL_MS = 5000;
 const FORWARD_MAX_PER_SESSION = 50;

package/src/index.mjs

@@ -44,7 +44,7 @@ import { BACKGROUND_WORKER_GUIDANCE, registerBackgroundTools } from "./backgroun
 
 exitForVersionRequest(import.meta.url);
 
-const VERSION = "1.27.1";
+const VERSION = "1.27.2";
 void import("./telemetry.mjs").then(({ startUsageReporting }) => startUsageReporting({ version: VERSION })).catch(() => {});
 const log = (msg) => process.stderr.write(`[codex-mcp-bridge] ${msg}\n`);
 

package/src/native-relay-companion.mjs

@@ -35,7 +35,7 @@ import { createRuntimeState } from "./runtime-state.mjs";
 import { hardenedBridgeEnabled } from "./hardened-root-policy.mjs";
 import { protectCurrentUserPipe } from "./windows-pipe-acl.mjs";
 import { createHardenedRootPolicy } from "./hardened-root-policy.mjs";
-import { removeRelayFile, relayFileIdentity, verifyRelaySocketMode } from "./native-relay-files.mjs";
+import { releasePrivateSocketLinks, removeRelayFile, relayFileIdentity, staleSocketIdentity, verifyRelaySocketMode } from "./native-relay-files.mjs";
 
 import { NativeCreationReceipts, creationIdValid } from "./native-creation-receipts.mjs";
 import { registerRemoteCodexTools } from "./remote-codex-tools.mjs";
@@ -43,7 +43,7 @@ import { remoteCodexSocketPath, remoteNativeAdapter, remoteRequestResponse } fro
 
 exitForVersionRequest(import.meta.url);
 
-const VERSION = "1.27.1";
+const VERSION = "1.27.2";
 const log = (msg) => process.stderr.write(`[native-relay] ${msg}\n`);
 
 function errorResponse(code, message, sent, details) {
@@ -565,9 +565,13 @@ export class RelaySocketServer {
         try { fs.linkSync(privatePath, this.socketPath); break; }
         catch (error) {
           if (error.code !== "EEXIST") throw error;
-          if (!replaceStale || attempt || await this.#socketIsLive()) throw new Error(`another native relay companion already owns ${this.socketPath}`);
+          if (!replaceStale || attempt) throw new Error(`another native relay companion already owns ${this.socketPath}`);
+          const stale = staleSocketIdentity(this.socketPath);
+          if (stale === null) continue;
+          if (await this.#socketIsLive()) throw new Error(`another native relay companion already owns ${this.socketPath}`);
           this.log(`removing the stale relay socket left at ${this.socketPath}`);
-          removeRelayFile(this.socketPath);
+          releasePrivateSocketLinks(this.socketPath, stale);
+          removeRelayFile(this.socketPath, { expected: stale });
         }
       }
       const identity = fs.lstatSync(this.socketPath, { bigint: true });

package/src/native-relay-files.mjs

@@ -17,6 +17,49 @@ export function relayFileIdentity(target, kind, expected) {
   return current;
 }
 
+const PRIVATE_SOCKET_LINK = /^\.[0-9a-f]{12}\.sock$/;
+
+const ownedSocket = (stat) => stat.isSocket() && (typeof process.getuid !== "function" || stat.uid === BigInt(process.getuid()));
+
+export function staleSocketIdentity(target) {
+  let root;
+  try { root = fs.realpathSync.native(path.dirname(target)); }
+  catch (error) { if (error.code === "ENOENT") return null; throw error; }
+  const file = path.resolve(root, path.basename(target));
+  if (!file.startsWith(root.endsWith(path.sep) ? root : `${root}${path.sep}`)) throw new Error("Relay file escaped its directory");
+  let current;
+  try { current = fs.lstatSync(file, { bigint: true }); }
+  catch (error) { if (error.code === "ENOENT") return null; throw error; }
+  if (!ownedSocket(current)) throw new Error(`Unsafe relay socket file: ${target}`);
+  return { dev: current.dev, ino: current.ino };
+}
+
+export function releasePrivateSocketLinks(target, expected) {
+  let root;
+  try { root = fs.realpathSync.native(path.dirname(target)); }
+  catch (error) { if (error.code === "ENOENT") return 0; throw error; }
+  const prefix = root.endsWith(path.sep) ? root : `${root}${path.sep}`;
+  const file = path.resolve(root, path.basename(target));
+  if (!file.startsWith(prefix)) throw new Error("Relay file escaped its directory");
+  let current;
+  try { current = fs.lstatSync(file, { bigint: true }); }
+  catch (error) { if (error.code === "ENOENT") return 0; throw error; }
+  if (current.nlink === 1n || !ownedSocket(current) || current.dev !== expected.dev || current.ino !== expected.ino) return 0;
+  let released = 0;
+  for (const name of fs.readdirSync(root)) {
+    if (!PRIVATE_SOCKET_LINK.test(name)) continue;
+    const link = path.resolve(root, name);
+    if (!link.startsWith(prefix)) continue;
+    let stat;
+    try { stat = fs.lstatSync(link, { bigint: true }); }
+    catch (error) { if (error.code === "ENOENT") continue; throw error; }
+    if (!ownedSocket(stat) || stat.dev !== current.dev || stat.ino !== current.ino) continue;
+    fs.unlinkSync(link);
+    released += 1;
+  }
+  return released;
+}
+
 export function removeRelayFile(target, { kind = "socket", directory = path.dirname(target), expected } = {}) {
   let root;
   try { root = fs.realpathSync.native(directory); }