@xallindrome-labs/codex-bridge 0.0.0-stage → 0.2.0

package/.claude-plugin/marketplace.json

@@ -0,0 +1,12 @@
+{
+  "name": "codex-bridge",
+  "owner": { "name": "Xallindrome", "url": "https://xallindrome.co" },
+  "metadata": { "description": "Claude Code add-ons for codex-bridge." },
+  "plugins": [
+    {
+      "name": "codex-jobs",
+      "source": "./plugins/codex-jobs",
+      "description": "A pane beside the chat that lists your codex-bridge jobs live: running, done, interrupted."
+    }
+  ]
+}

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Andrew Wilson
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,186 @@
-# Temporary Holding Version
+# codex-bridge
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+**Codex jobs for Claude Code that survive crashes, closed windows and reboots, with Codex image generation built in.** A dependency-free MCP server built Windows-first: every call is a job saved on disk, so you can close Claude, lose power, or kill a process, and pick the work up again with `codex_resume`.
+
+Roles: **Claude Code implements. Codex plans and builds images.** Optionally (opt-in, one folder), Codex can also write code while Claude reviews: see [Let Codex write code](#let-codex-write-code-opt-in). And an optional pane beside the chat lists your jobs live and shows your Codex usage and when it resets: see [Codex jobs pane](#codex-jobs-pane).
+
+![Recorded session: Claude Code starts codex-bridge and asks Codex for a plan](docs/demo.svg)
+
+<sub>The server calls in this recording are real (Codex at `effort: low`, idle time trimmed); the `claude mcp add` line is scripted. The raw recording is [docs/demo.cast](docs/demo.cast); play it with `asciinema play docs/demo.cast`.</sub>
+
+## Quickstart
+
+You need [Node.js](https://nodejs.org) 20 or newer and the [Codex CLI](https://github.com/openai/codex) installed and logged in.
+
+```bash
+claude mcp add codex-bridge -- npx -y @xallindrome-labs/codex-bridge
+```
+
+Restart Claude Code, then ask it something like *"Get a plan from Codex for adding rate limiting, in the background, and keep going"*. Claude will call `codex_plan` with `background: true` and collect the answer later.
+
+Other MCP clients: run `npx -y @xallindrome-labs/codex-bridge` as a stdio server.
+
+> **Platform note:** developed and tested on Windows 11, where real Codex jobs have been run. CI checks on Linux, macOS and Windows (Node 20 and 22) that the server starts, speaks MCP and works when installed from the npm tarball, and on Linux and macOS that jobs run, finish and survive the server being killed, using a fake `codex`. CI has no real Codex CLI, so real Codex jobs on macOS and Linux are untested. Reports and fixes are welcome.
+
+| Tool | What it does | Sandbox | Default model / effort |
+|---|---|---|---|
+| `codex_plan` | Codex writes implementation plans, design reviews and second opinions. It inspects the project in `cwd`. | `read-only` (always) | Your Codex config defaults |
+| `codex_image` | Codex generates or edits images. The bridge copies each one into `output_dir` as soon as it's made. | `read-only` (always) | **gpt-6-luna / high** |
+| `codex_code` | **Off by default.** Codex implements a change by editing files in one folder you choose. See [below](#let-codex-write-code-opt-in). | `workspace-write`, that folder only, no network | Your Codex config defaults |
+| `codex_result` | Gets a job's result or progress (`wait_seconds` up to 240), or lists recent jobs. | | |
+| `codex_resume` | Continues an interrupted, timed-out or failed job from where it stopped. | | |
+| `codex_cancel` | Stops a running job. | | |
+
+`codex_plan`, `codex_image` and `codex_code` accept:
+- `effort`: `low`, `medium`, `high`, `xhigh`, `max` or `ultra` (Luna supports up to `max`).
+- `model`: overrides the default model for that call.
+- `background: true`: returns a `job_id` immediately so Claude can keep working.
+- `session_id`: continues an earlier Codex thread, for example "make the icon darker".
+
+`codex_image` also takes `count`, the number of images wanted. Set it for batches: it enables `k/count` progress and resumes that ask for exactly the missing images.
+
+## Let Codex write code (opt-in)
+
+By default Codex can only read. If you want it to implement things while Claude reviews, name the one folder it may edit:
+
+```bash
+claude mcp add codex-bridge -e CODEX_BRIDGE_WRITE_ROOT=/path/to/your/project -- npx -y @xallindrome-labs/codex-bridge
+```
+
+Restart Claude Code and a fourth tool, `codex_code`, appears. Ask for it in plain words: *"Have Codex implement the plan in the background, then review its diff."*
+
+- **One folder.** `cwd` must be `CODEX_BRIDGE_WRITE_ROOT` or inside it. Anything else is refused, checked on real paths so `..` and symlinks don't escape. A drive root or your home folder is refused as too broad.
+- **No network, no commits.** Codex runs with network access off and is told to leave changes uncommitted so you can see them in `git diff`. The no-commit rule is a prompt, not a sandbox rule.
+- **Claude reviews.** Every `codex_code` result ends with a reminder to read the diff before accepting it. A failed or cancelled run says Codex may have left partial edits.
+- **Same job machinery.** It survives restarts, `background: true` and `codex_resume` work the same way, and a resume re-checks the folder rule.
+- **Temp files.** In our test on Windows 11, writes outside the folder and network access were blocked, but the system temp folder stayed writable. Treat temp as writable. `CODEX_BRIDGE_WRITE_ALLOW_TMP=1` stops asking Codex to block it.
+- **Don't edit the same files yourself** while a `codex_code` job runs.
+
+Unset the variable and restart, and the tool is gone; `codex_plan` and `codex_image` are always read-only.
+
+## Codex jobs pane
+
+An optional add-on that opens a pane beside the Claude Code chat listing your Codex jobs live: running, done, interrupted, with age, request and `images k/n` for batches. It also shows your Codex usage: the 5-hour and weekly windows, percent used, when each resets, and how many images were generated in each (Codex has one shared meter, so images use the same limits). It only reads the job files on disk, so it shows jobs from any session, including ones that kept running after you closed Claude. It also puts `codex: N running` in the status line and shows a toast when a job you watched finishes.
+
+At the prompt of a terminal Claude Code session:
+
+```
+/plugin install codex-jobs --marketplace xallindrome-labs/codex-bridge
+```
+
+In the desktop app, where `/plugin` does not run: click **+** next to the prompt box, then **Plugins**, **Add marketplace** with `xallindrome-labs/codex-bridge`, then **Add plugin**. Without a marketplace, for one session: `claude --plugin-dir "$(npx -y @xallindrome-labs/codex-bridge --pane-path)"`.
+
+Then type `/codex-jobs`. It also opens by itself the first time a job is running in a session. Details and how it works are in [plugins/codex-jobs](plugins/codex-jobs/README.md). It needs a Claude Code build that supports mods; it is tested against the engine's own test kit, not every surface's paint.
+
+## How it compares
+
+OpenAI's [codex-plugin-cc](https://github.com/openai/codex-plugin-cc) is the official way to use Codex from Claude Code, and it's good at what it does: slash commands for review and rescue. codex-bridge is an MCP server instead, with a different focus: **jobs that don't get lost**, and **images**.
+
+Several open issues in the plugin's tracker are about jobs getting lost, and codex-bridge is designed to avoid each of them. These come from reading the designs, not from a head-to-head test:
+
+| Reported in codex-plugin-cc | How codex-bridge handles it |
+|---|---|
+| Background job shows "running" forever after its worker dies ([#704](https://github.com/openai/codex-plugin-cc/issues/704), [#699](https://github.com/openai/codex-plugin-cc/issues/699)) | Status is worked out from files on disk plus a heartbeat and a process check. A dead runner shows as `interrupted`, never "running", and `codex_resume` continues it. |
+| Windows `cancel` silently fails ([#708](https://github.com/openai/codex-plugin-cc/issues/708)) | Cancel writes a marker file; the runner that owns the Codex process sees it within about 2 seconds and stops the process tree by calling `taskkill.exe` directly, with no shell in between. |
+| Windows broker processes leak ([#718](https://github.com/openai/codex-plugin-cc/issues/718), [#782](https://github.com/openai/codex-plugin-cc/issues/782)) | There is no shared broker. Each attempt is one runner process that exits when Codex does. |
+| One session ending kills other sessions' jobs ([#671](https://github.com/openai/codex-plugin-cc/issues/671)) | Runners are started outside Claude's process tree (via WMI on Windows), so closing a session can't take them down. |
+
+What the plugin does that this doesn't: slash commands, and its review-gate and rescue workflows. And this one is newer, with far fewer users. If the plugin works for you, keep using it. If you've lost jobs, or want Codex to generate images that survive a crash, try this.
+
+## Jobs survive restarts
+
+Every call is a job saved under `~/.codex-bridge/jobs/<job_id>/`, including calls that aren't run in the background.
+
+- **Claude closes or crashes:** the job keeps running. `server.mjs` starts `runner.mjs` through WMI (`Win32_Process.Create`), so the job isn't part of Claude Code's process tree. Closing Claude can't kill it, and any later Claude session can collect it with `codex_result`.
+- **The job itself dies** (reboot, power loss, Codex crash, or killed process): the job is marked `interrupted`. The next Claude session is told about it when it starts. `codex_resume` continues it:
+  1. It copies out any images generated just before the interruption.
+  2. It resumes the same Codex thread: "N are already done, generate only the remaining ones."
+  3. If no Codex thread had started yet, it reruns the original request.
+
+## How images are collected
+
+Codex never writes image files. Its image tool stores every generated image in `~/.codex/generated_images/<thread>/`. The runner checks that folder every 2 seconds and copies new images into `output_dir` as `<filename>.png`, `<filename>-2.png`, and so on, in the order they were made. `copied.json` in the job folder records what has been copied, so an image is never copied twice across attempts.
+
+This gives three benefits:
+- Image jobs run in a read-only sandbox.
+- A crash loses at most the one image being generated.
+- Resume counts exactly what's done.
+
+It also avoids a real problem: when Luna was allowed to save files itself, it re-typed each image as base64 through dozens of shell commands. That was slow, and the saved file no longer matched the original.
+- **Codex stalls:** the runner stops a run after 10 minutes with no output. The job is marked `timed_out`, and it can be resumed.
+
+Each attempt keeps its own `prompt.txt`, `events.jsonl` (the Codex event stream), `stderr.txt`, heartbeat and `result.json`. Finished jobs are deleted after 14 days.
+
+## How it works
+
+Each attempt runs `codex exec --json` (or `codex exec resume <thread>`) with the prompt on stdin. No shell is involved.
+
+Every call runs read-only, except `codex_code` when you have opted in (it runs `workspace-write` in your one folder, with network off). New sessions pass `-s read-only` plus `-c sandbox_mode="read-only"`; resumed sessions pass `-c sandbox_mode="read-only"` (`codex exec resume` takes no `-s`). Your Codex config may default to `danger-full-access`, but that default never applies to bridge calls. The `plan` smoke test checks that a write attempted from a resumed session fails.
+
+| File | Role |
+|---|---|
+| `server.mjs` | The MCP server. It creates jobs, launches runners, works out job status from the files on disk, and handles resume and cancel. |
+| `runner.mjs` | Runs one attempt: starts Codex, records the heartbeat, watches for a stall or cancellation, collects images and writes `result.json`. |
+| `lib.mjs` | Shared helpers: finding the Codex binary, building arguments, parsing events, handling images. |
+
+## Install options
+
+```bash
+# for all your projects
+claude mcp add -s user codex-bridge -- npx -y @xallindrome-labs/codex-bridge
+
+# or from a local checkout
+claude mcp add codex-bridge -- node /path/to/codex-bridge/server.mjs
+```
+
+Remove it with `claude mcp remove codex-bridge` (add `-s user` if you installed it that way).
+
+## Configuration (env vars)
+
+| Var | Default |
+|---|---|
+| `CODEX_BIN` | Auto-detected. It prefers a `codex.exe` next to `codex-code-mode-host.exe`, which is currently `~/.codex/plugins/.plugin-appserver/codex.exe`. |
+| `CODEX_BRIDGE_HOME` | `~/.codex-bridge` |
+| `CODEX_BRIDGE_IDLE_TIMEOUT_MS` | `600000` (stops a run after 10 minutes with no Codex output) |
+| `CODEX_BRIDGE_PLAN_MODEL` / `CODEX_BRIDGE_PLAN_EFFORT` | Your Codex config defaults |
+| `CODEX_BRIDGE_IMAGE_MODEL` / `CODEX_BRIDGE_IMAGE_EFFORT` | `gpt-6-luna` / `high` |
+| `CODEX_BRIDGE_WRITE_ROOT` | Unset: `codex_code` is off. Set to one folder to let `codex_code` edit files there. |
+| `CODEX_BRIDGE_WRITE_ALLOW_TMP` | Unset. `1` stops asking Codex to block temp-folder writes (not enforced on Windows anyway). |
+| `CODEX_BRIDGE_CODE_MODEL` / `CODEX_BRIDGE_CODE_EFFORT` | Your Codex config defaults |
+
+## Test
+
+```bash
+node smoke-test.mjs <scratch-dir> [plan|image|jobs|durable|all]
+```
+
+The smoke test drives the server over stdio like an MCP client and needs a logged-in Codex CLI; it uses a little of your Codex quota. The `durable` part uses `taskkill`, so it is Windows-only for now.
+
+- `plan`: runs a plan, then tries a write from a resumed session, which must fail.
+- `image`: generates one image.
+- `jobs`: tests background jobs, cancellation and the `effort` check.
+- `durable`:
+  1. Kills the server while a job is running, then checks that a new server collects the result.
+  2. Hard-kills an image batch partway through, then checks that a new server reports it as interrupted and that `codex_resume` finishes it.
+
+## Speed
+
+Each call has a fixed cost of about 4–5 seconds, and changing settings barely moves it. The rest of the time is Codex thinking and generating, which takes seconds to minutes. To spend less time waiting, use `background: true`, a lower `effort` for quick questions, and include relevant code in `context` so Codex reads less of the project.
+
+## Notes
+
+- This uses Codex's own login and quota, with no separate API key. A job left running after Claude closes keeps using that quota until it finishes.
+- Bridge calls run headlessly, so they don't show up as conversations in the Codex Desktop sidebar.
+- Don't send secrets in prompts. Prompts go to OpenAI.
+
+## Issues and contributing
+
+Bug reports and ideas are welcome on the [issue tracker](https://github.com/xallindrome-labs/codex-bridge/issues). Pull requests are welcome too, but reviewed slowly; see [CONTRIBUTING.md](CONTRIBUTING.md). Please report security problems privately, as described in [SECURITY.md](SECURITY.md).
+
+## License
+
+[MIT](LICENSE)
+
+---
+
+**Built by [Xallindrome](https://xallindrome.co)**: we build automation and AI workflows for small businesses. If you'd like something like this for your business, [book a diagnostic](https://xallindrome.co).

package/SECURITY.md

@@ -0,0 +1,23 @@
+# Security policy
+
+## Reporting a vulnerability
+
+Please report security problems privately through GitHub:
+**Security → Report a vulnerability** on https://github.com/xallindrome-labs/codex-bridge/security/advisories/new
+
+Please don't open a public issue for a vulnerability. This is a one-person project, so expect an acknowledgement within a week, not hours.
+
+## What codex-bridge does that matters for security
+
+- It runs the Codex CLI on your machine, by default always with a **read-only sandbox**: `-c sandbox_mode="read-only"` on every call, plus `-s read-only` when starting a new session. Your Codex config's default sandbox mode never applies to bridge calls.
+- **Opt-in exception: `codex_code`.** Only if you set `CODEX_BRIDGE_WRITE_ROOT` to one folder, an extra tool `codex_code` appears. It runs Codex in the `workspace-write` sandbox with network access off, and refuses any `cwd` that is not that folder or inside it (checked on the real path, so `..` and symlinks don't escape; a drive root or your home folder is refused as too broad). The check repeats on every resume. Everything else stays read-only. In our test on Windows 11, writes outside the folder and network access were blocked, but the system temp folder stayed writable even with the flags that ask Codex to block it (`CODEX_BRIDGE_WRITE_ALLOW_TMP` unset); treat temp as writable. Codex is told not to commit or push, but that is a prompt, not a sandbox rule: review the diff.
+- It starts Codex without a shell: arguments are passed as an array and the prompt goes in over stdin.
+- Prompts and any `context` you pass are sent to OpenAI through the Codex CLI, under your own Codex login. **Don't put secrets in prompts.**
+- Job files (prompts, Codex event streams, results) are stored unencrypted under `~/.codex-bridge/jobs/` (override with `CODEX_BRIDGE_HOME`) and deleted after 14 days.
+- It has no network listener and no dependencies. It talks to its MCP client over stdio only.
+
+Reports about any of the above not holding true are in scope.
+
+## Supported versions
+
+Only the latest release.

package/docs/demo.svg

@@ -0,0 +1,40 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="855.2" height="605" viewBox="0 0 855.2 605" role="img" aria-label="codex-bridge: Claude Code asks Codex for a plan (recorded terminal session)">
+<title>codex-bridge: Claude Code asks Codex for a plan</title>
+<style>:root{--bg:#0f1115;--fg:#d7dae0;--dim:#7d8590;--cy:#56b6c2;--gr:#7ee787}
+text{font:14px ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;fill:var(--fg);white-space:pre}
+.dim{fill:var(--dim)}.cy{fill:var(--cy)}.gr{fill:var(--gr)}
+.l{opacity:0}@keyframes k0{0%,0.032%{opacity:0}0.042%,96%{opacity:1}100%{opacity:0}}.l0{animation:k0 18.88s linear infinite}@keyframes k1{0%,14.165%{opacity:0}14.175%,96%{opacity:1}100%{opacity:0}}.l1{animation:k1 18.88s linear infinite}@keyframes k2{0%,17.380%{opacity:0}17.390%,96%{opacity:1}100%{opacity:0}}.l2{animation:k2 18.88s linear infinite}@keyframes k3{0%,32.949%{opacity:0}32.959%,96%{opacity:1}100%{opacity:0}}.l3{animation:k3 18.88s linear infinite}@keyframes k4{0%,33.367%{opacity:0}33.377%,96%{opacity:1}100%{opacity:0}}.l4{animation:k4 18.88s linear infinite}@keyframes k5{0%,37.672%{opacity:0}37.682%,96%{opacity:1}100%{opacity:0}}.l5{animation:k5 18.88s linear infinite}@keyframes k6{0%,48.030%{opacity:0}48.040%,96%{opacity:1}100%{opacity:0}}.l6{animation:k6 18.88s linear infinite}@keyframes k7{0%,54.385%{opacity:0}54.395%,96%{opacity:1}100%{opacity:0}}.l7{animation:k7 18.88s linear infinite}@keyframes k8{0%,60.739%{opacity:0}60.749%,96%{opacity:1}100%{opacity:0}}.l8{animation:k8 18.88s linear infinite}@keyframes k9{0%,60.739%{opacity:0}60.749%,96%{opacity:1}100%{opacity:0}}.l9{animation:k9 18.88s linear infinite}@keyframes k10{0%,60.745%{opacity:0}60.755%,96%{opacity:1}100%{opacity:0}}.l10{animation:k10 18.88s linear infinite}@keyframes k11{0%,67.099%{opacity:0}67.109%,96%{opacity:1}100%{opacity:0}}.l11{animation:k11 18.88s linear infinite}@keyframes k12{0%,67.099%{opacity:0}67.109%,96%{opacity:1}100%{opacity:0}}.l12{animation:k12 18.88s linear infinite}@keyframes k13{0%,67.099%{opacity:0}67.109%,96%{opacity:1}100%{opacity:0}}.l13{animation:k13 18.88s linear infinite}@keyframes k14{0%,73.454%{opacity:0}73.464%,96%{opacity:1}100%{opacity:0}}.l14{animation:k14 18.88s linear infinite}@keyframes k15{0%,73.454%{opacity:0}73.464%,96%{opacity:1}100%{opacity:0}}.l15{animation:k15 18.88s linear infinite}@keyframes k16{0%,78.818%{opacity:0}78.828%,96%{opacity:1}100%{opacity:0}}.l16{animation:k16 18.88s linear infinite}@keyframes k17{0%,78.818%{opacity:0}78.828%,96%{opacity:1}100%{opacity:0}}.l17{animation:k17 18.88s linear infinite}@keyframes k18{0%,78.818%{opacity:0}78.828%,96%{opacity:1}100%{opacity:0}}.l18{animation:k18 18.88s linear infinite}@keyframes k19{0%,78.818%{opacity:0}78.828%,96%{opacity:1}100%{opacity:0}}.l19{animation:k19 18.88s linear infinite}@keyframes k20{0%,78.818%{opacity:0}78.828%,96%{opacity:1}100%{opacity:0}}.l20{animation:k20 18.88s linear infinite}@keyframes k21{0%,78.818%{opacity:0}78.828%,96%{opacity:1}100%{opacity:0}}.l21{animation:k21 18.88s linear infinite}@keyframes k22{0%,78.818%{opacity:0}78.828%,96%{opacity:1}100%{opacity:0}}.l22{animation:k22 18.88s linear infinite}@keyframes k23{0%,78.818%{opacity:0}78.828%,96%{opacity:1}100%{opacity:0}}.l23{animation:k23 18.88s linear infinite}@keyframes k24{0%,78.818%{opacity:0}78.828%,96%{opacity:1}100%{opacity:0}}.l24{animation:k24 18.88s linear infinite}@keyframes k25{0%,78.818%{opacity:0}78.828%,96%{opacity:1}100%{opacity:0}}.l25{animation:k25 18.88s linear infinite}@keyframes k26{0%,78.818%{opacity:0}78.828%,96%{opacity:1}100%{opacity:0}}.l26{animation:k26 18.88s linear infinite}@keyframes k27{0%,78.818%{opacity:0}78.828%,96%{opacity:1}100%{opacity:0}}.l27{animation:k27 18.88s linear infinite}@keyframes k28{0%,78.818%{opacity:0}78.828%,96%{opacity:1}100%{opacity:0}}.l28{animation:k28 18.88s linear infinite}</style>
+<rect width="855.2" height="605" rx="8" fill="var(--bg)"/>
+<circle cx="20" cy="18" r="5.5" fill="#ff5f56"/><circle cx="40" cy="18" r="5.5" fill="#ffbd2e"/><circle cx="60" cy="18" r="5.5" fill="#27c93f"/>
+<text x="427.6" y="22" text-anchor="middle" class="dim" style="font-size:12px">codex-bridge (real run, idle time trimmed)</text>
+<text class="l l0" x="16" y="52" xml:space="preserve"><tspan class="">$ claude mcp add codex-bridge -- npx -y @xallindrome-labs/codex-bridge</tspan></text>
+<text class="l l1" x="16" y="71" xml:space="preserve"><tspan class="">Added stdio MCP server codex-bridge</tspan></text>
+<text class="l l2" x="16" y="90" xml:space="preserve"><tspan class=""># Claude Code starts the server and asks what it offers:</tspan></text>
+<text class="l l3" x="16" y="109" xml:space="preserve"><tspan class="">server: codex-bridge 0.1.0</tspan></text>
+<text class="l l4" x="16" y="128" xml:space="preserve"><tspan class="">tools:  codex_plan, codex_image, codex_result, codex_resume, codex_cancel</tspan></text>
+<text class="l l5" x="16" y="147" xml:space="preserve"><tspan class=""># Claude asks Codex for a plan (read-only sandbox, effort low):</tspan></text>
+<text class="l l6" x="16" y="166" xml:space="preserve"><tspan class="cy">codex_plan</tspan><tspan class=""> request="app.js add() returns a - b. Plan a fix plus a test, under 8 lines."</tspan></text>
+<text class="l l7" x="16" y="185" xml:space="preserve"><tspan class="dim">  ... codex: I’ll inspect `app.js` and the test setup.</tspan></text>
+<text class="l l8" x="16" y="204" xml:space="preserve"><tspan class="dim">  ... codex: running "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" -Command "rg </tspan></text>
+<text class="l l9" x="16" y="223" xml:space="preserve"><tspan class="dim">--files -g '"'!node_modules'"' -g '"'!pack</tspan></text>
+<text class="l l10" x="16" y="242" xml:space="preserve"><tspan class="dim">  ... codex: command_execution</tspan></text>
+<text class="l l11" x="16" y="261" xml:space="preserve"><tspan class="dim">  ... codex: running "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" -Command </tspan></text>
+<text class="l l12" x="16" y="280" xml:space="preserve"><tspan class="dim">'Get-Content app.js; Get-ChildItem -Force -Nam</tspan></text>
+<text class="l l13" x="16" y="299" xml:space="preserve"><tspan class="dim">  ... codex: command_execution</tspan></text>
+<text class="l l14" x="16" y="318" xml:space="preserve"><tspan class="dim">  ... codex: Goal/acceptance: `app.js`’s exported `add(a, b)` returns the sum; a regression test </tspan></text>
+<text class="l l15" x="16" y="337" xml:space="preserve"><tspan class="dim">passes.
+1. In `app.js`, change `add()` from `return a - b;` to `return a + b</tspan></text>
+<text class="l l16" x="16" y="356" xml:space="preserve"><tspan class="gr">done in 19s</tspan><tspan class="">  isError=false</tspan></text>
+<text class="l l17" x="16" y="375" xml:space="preserve"><tspan class="">Goal/acceptance: `app.js`’s exported `add(a, b)` returns the sum; a regression test passes.</tspan></text>
+<text class="l l18" x="16" y="394" xml:space="preserve"><tspan class="">1. In `app.js`, change `add()` from `return a - b;` to `return a + b;`, preserving the CommonJS </tspan></text>
+<text class="l l19" x="16" y="413" xml:space="preserve"><tspan class="">export.</tspan></text>
+<text class="l l20" x="16" y="432" xml:space="preserve"><tspan class="">2. Create `app.test.js` using `node:test` and `node:assert/strict`; import `add` via </tspan></text>
+<text class="l l21" x="16" y="451" xml:space="preserve"><tspan class="">`require('./app')` and assert `add(2, 3) === 5`.</tspan></text>
+<text class="l l22" x="16" y="470" xml:space="preserve"><tspan class="">3. Verify with `node --test app.test.js`; confirm the test fails against the original subtraction.</tspan></text>
+<text class="l l23" x="16" y="489" xml:space="preserve"><tspan class="">Risk/open question: No package manifest or test setup exists; confirm Node supports `node:test`.</tspan></text>
+<text class="l l24" x="16" y="508" xml:space="preserve"><tspan class="">---</tspan></text>
+<text class="l l25" x="16" y="527" xml:space="preserve"><tspan class="">job_id: job-261022182741-042a</tspan></text>
+<text class="l l26" x="16" y="546" xml:space="preserve"><tspan class="">session_id: 01a164de-7990-76d3-bd87-ba22f1b9a31b (pass as session_id to continue this Codex </tspan></text>
+<text class="l l27" x="16" y="565" xml:space="preserve"><tspan class="">thread)</tspan></text>
+<text class="l l28" x="16" y="584" xml:space="preserve"><tspan class="">model: codex default, effort: low</tspan></text>
+</svg>

package/lib.mjs

@@ -0,0 +1,208 @@
+// Shared helpers for server.mjs (MCP side) and runner.mjs (detached job runner).
+
+import { spawnSync } from 'node:child_process';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+
+export const isWin = process.platform === 'win32';
+export const CODEX_HOME = process.env.CODEX_HOME || path.join(os.homedir(), '.codex');
+export const BRIDGE_HOME = process.env.CODEX_BRIDGE_HOME || path.join(os.homedir(), '.codex-bridge');
+export const JOBS_DIR = path.join(BRIDGE_HOME, 'jobs');
+export const IMAGE_EXT = /\.(png|jpe?g|webp|gif)$/i;
+
+// ---------------------------------------------------------------- codex binary
+
+function findOnPath(name) {
+  const r = spawnSync(isWin ? 'where.exe' : 'which', [name], { encoding: 'utf8', windowsHide: true });
+  if (r.status !== 0) return [];
+  return r.stdout.split(/\r?\n/).map(s => s.trim()).filter(Boolean);
+}
+
+// Prefer a codex binary that sits next to codex-code-mode-host, otherwise
+// Codex logs a "Code Mode is unavailable" error on every run.
+export function resolveCodexBin() {
+  if (process.env.CODEX_BIN) return process.env.CODEX_BIN;
+  const exe = isWin ? 'codex.exe' : 'codex';
+  const candidates = [
+    ...findOnPath(exe),
+    path.join(CODEX_HOME, 'plugins', '.plugin-appserver', exe),
+    path.join(CODEX_HOME, '.sandbox-bin', exe),
+  ].filter(p => fs.existsSync(p));
+  const host = isWin ? 'codex-code-mode-host.exe' : 'codex-code-mode-host';
+  return candidates.find(p => fs.existsSync(path.join(path.dirname(p), host))) ?? candidates[0] ?? null;
+}
+
+// `codex exec` (or `codex exec resume`) arguments; the prompt is always read from stdin.
+// workspace-write is the opt-in codex_code sandbox: Codex may write in `cwd` only, with no network.
+// Unless allowTmp, the system temp dirs are not writable either, so "one folder" really means one folder.
+export function buildCodexArgs({ sandbox, cwd, sessionId, model, effort, images = [], allowTmp = false }) {
+  const args = ['exec'];
+  if (sessionId) args.push('resume');
+  args.push('--json', '--skip-git-repo-check', '-c', `sandbox_mode="${sandbox}"`);
+  if (sandbox === 'workspace-write') {
+    args.push('-c', 'sandbox_workspace_write.network_access=false');
+    if (!allowTmp) args.push('-c', 'sandbox_workspace_write.exclude_tmpdir_env_var=true', '-c', 'sandbox_workspace_write.exclude_slash_tmp=true');
+  }
+  if (!sessionId) args.push('-s', sandbox, '-C', cwd);
+  if (model) args.push('-m', model);
+  if (effort) args.push('-c', `model_reasoning_effort="${effort}"`);
+  for (const img of images) args.push('-i', img);
+  if (sessionId) args.push(sessionId);
+  args.push('-');
+  return args;
+}
+
+// ---------------------------------------------------------------- write root
+
+// The one folder codex_code may write in (CODEX_BRIDGE_WRITE_ROOT), as a real path. Throws with a
+// reason if it is unusable: missing, not a folder, a drive root or the home folder (too broad).
+export function resolveWriteRoot(raw = process.env.CODEX_BRIDGE_WRITE_ROOT) {
+  if (!raw) return null;
+  let root;
+  try { root = fs.realpathSync(path.resolve(raw)); } catch { throw new Error(`CODEX_BRIDGE_WRITE_ROOT does not exist: ${raw}`); }
+  if (!fs.statSync(root).isDirectory()) throw new Error(`CODEX_BRIDGE_WRITE_ROOT is not a folder: ${raw}`);
+  let home = os.homedir();
+  try { home = fs.realpathSync(home); } catch {}
+  if (path.parse(root).root === root || root === home) {
+    throw new Error(`CODEX_BRIDGE_WRITE_ROOT is too broad (${root}); point it at one project folder`);
+  }
+  return root;
+}
+
+// Real path of `dir` if it is `root` or inside it, otherwise throws.
+export function insideWriteRoot(root, dir) {
+  let real;
+  try { real = fs.realpathSync(path.resolve(dir)); } catch { throw new Error(`cwd does not exist: ${dir}`); }
+  const rel = path.relative(root, real);
+  if (rel === '..' || rel.startsWith(`..${path.sep}`) || path.isAbsolute(rel)) {
+    throw new Error(`codex_code may only write inside ${root}; ${real} is outside it`);
+  }
+  return real;
+}
+
+// ---------------------------------------------------------------- files
+
+export function readJson(p, fallback = null) {
+  try { return JSON.parse(fs.readFileSync(p, 'utf8')); } catch { return fallback; }
+}
+
+// Atomic write so a reader never sees a half-written file.
+export function writeJson(p, obj) {
+  const tmp = `${p}.${process.pid}.tmp`;
+  fs.writeFileSync(tmp, JSON.stringify(obj, null, 2));
+  fs.renameSync(tmp, p);
+}
+
+export const jobDir = id => path.join(JOBS_DIR, id);
+export const attemptDir = (id, n) => path.join(JOBS_DIR, id, `attempt-${n}`);
+
+export function pidAlive(pid) {
+  if (!pid) return false;
+  try { process.kill(pid, 0); return true; } catch (e) { return e.code === 'EPERM'; }
+}
+
+export function killTree(pid) {
+  if (!pid) return;
+  if (isWin) spawnSync('taskkill.exe', ['/PID', String(pid), '/T', '/F'], { windowsHide: true });
+  else try { process.kill(-pid, 'SIGTERM'); } catch { try { process.kill(pid, 'SIGTERM'); } catch {} }
+}
+
+// ---------------------------------------------------------------- codex events
+
+export function newEventState() {
+  return { threadId: null, messages: [], errors: [], usage: null, failed: null, completed: false, activity: 'starting' };
+}
+
+export function summarizeEvent(ev) {
+  if (ev.type === 'item.started' && ev.item?.type === 'command_execution') return `running ${String(ev.item.command).slice(0, 120)}`;
+  if (ev.type === 'item.completed' && ev.item?.type === 'agent_message') return ev.item.text.slice(0, 160);
+  if (ev.type === 'item.completed' && ev.item?.type) return ev.item.type;
+  return null;
+}
+
+export function applyEvent(s, ev) {
+  if (ev.type === 'thread.started') s.threadId = ev.thread_id;
+  else if (ev.type === 'turn.completed') { s.completed = true; s.usage = ev.usage; }
+  else if (ev.type === 'turn.failed') s.failed = ev.error?.message || JSON.stringify(ev.error);
+  else if (ev.type === 'error') s.errors.push(ev.message);
+  else if (ev.type === 'item.completed' && ev.item) {
+    if (ev.item.type === 'agent_message') s.messages.push(ev.item.text);
+    else if (ev.item.type === 'error' && !/Code Mode is unavailable/.test(ev.item.message)) s.errors.push(ev.item.message);
+  }
+  s.activity = summarizeEvent(ev) ?? s.activity;
+}
+
+// Incrementally reads a growing JSONL events file.
+export class EventTail {
+  constructor(file) { this.file = file; this.offset = 0; this.partial = ''; this.state = newEventState(); }
+  poll(onEvent) {
+    let fd;
+    try { fd = fs.openSync(this.file, 'r'); } catch { return this.state; }
+    try {
+      const size = fs.fstatSync(fd).size;
+      if (size > this.offset) {
+        const buf = Buffer.alloc(size - this.offset);
+        fs.readSync(fd, buf, 0, buf.length, this.offset);
+        this.offset = size;
+        const lines = (this.partial + buf.toString('utf8')).split(/\r?\n/);
+        this.partial = lines.pop();
+        for (const line of lines) {
+          let ev;
+          try { ev = JSON.parse(line); } catch { continue; }
+          applyEvent(this.state, ev);
+          onEvent?.(ev);
+        }
+      }
+    } finally { fs.closeSync(fd); }
+    return this.state;
+  }
+}
+
+// ---------------------------------------------------------------- images
+
+export function listImages(dir, sinceMs = 0) {
+  if (!dir || !fs.existsSync(dir)) return [];
+  return fs.readdirSync(dir)
+    .filter(f => IMAGE_EXT.test(f))
+    .map(f => path.join(dir, f))
+    .filter(p => fs.statSync(p).mtimeMs >= sinceMs)
+    .sort((a, b) => fs.statSync(a).mtimeMs - fs.statSync(b).mtimeMs);
+}
+
+function uniquePath(dir, name) {
+  const { name: base, ext } = path.parse(name);
+  let p = path.join(dir, name);
+  for (let i = 2; fs.existsSync(p); i++) p = path.join(dir, `${base}-${i}${ext}`);
+  return p;
+}
+
+// Codex never writes images itself: its image tool drops every generated image
+// into generated_images/<thread>/, and we copy them out from there. copied.json
+// maps store filename -> output path, so nothing is copied twice across attempts.
+const copiedFile = job => path.join(jobDir(job.id), 'copied.json');
+
+export const jobImages = job => Object.values(readJson(copiedFile(job), {})).filter(p => fs.existsSync(p));
+
+// Copies newly generated images of `threadId` into the job's output dir as
+// <base>.png, <base>-2.png, ... in generation order. With `settled`, skips files
+// modified in the last 1.5s (may still be being written). Returns the new paths.
+export function collectImages(job, threadId, { settled = true } = {}) {
+  if (!threadId) return [];
+  const store = path.join(CODEX_HOME, 'generated_images', threadId);
+  const copied = readJson(copiedFile(job), {});
+  const base = path.parse(job.args.filename || 'image').name;
+  const added = [];
+  for (const src of listImages(store, job.created - 1000)) {
+    const key = path.basename(src);
+    if (copied[key]) continue;
+    if (settled && Date.now() - fs.statSync(src).mtimeMs < 1500) continue;
+    const n = Object.keys(copied).length + 1;
+    const dest = uniquePath(job.outDir, `${base}${n > 1 ? `-${n}` : ''}${path.extname(src)}`);
+    fs.copyFileSync(src, dest);
+    copied[key] = dest;
+    added.push(dest);
+  }
+  if (added.length) writeJson(copiedFile(job), copied);
+  return added;
+}

package/package.json

@@ -1,6 +1,40 @@
 {
   "name": "@xallindrome-labs/codex-bridge",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.2.0",
+  "description": "MCP server that lets Claude Code consult the Codex CLI for plans, second opinions and images, as durable background jobs. Optional write mode, and a live jobs pane.",
+  "keywords": ["mcp", "model-context-protocol", "claude-code", "codex", "openai-codex", "planning", "image-generation", "claude-code-plugin"],
+  "homepage": "https://github.com/xallindrome-labs/codex-bridge#readme",
+  "bugs": "https://github.com/xallindrome-labs/codex-bridge/issues",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/xallindrome-labs/codex-bridge.git"
+  },
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "author": "Andrew Wilson (https://xallindrome.co)",
+  "mcpName": "io.github.xallindrome-labs/codex-bridge",
+  "type": "module",
+  "bin": {
+    "codex-bridge": "server.mjs"
+  },
+  "files": [
+    "server.mjs",
+    "runner.mjs",
+    "lib.mjs",
+    "smoke-test.mjs",
+    "docs/demo.svg",
+    "SECURITY.md",
+    ".claude-plugin/marketplace.json",
+    "plugins/codex-jobs",
+    "!plugins/codex-jobs/**/*.test.tsx"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "test": "node test/protocol.mjs && node test/jobs.mjs",
+    "smoke": "node smoke-test.mjs smoke-tmp plan"
+  }
+}

package/plugins/codex-jobs/.claude-plugin/plugin.json

@@ -0,0 +1,9 @@
+{
+  "name": "codex-jobs",
+  "version": "0.1.0",
+  "description": "A pane beside the chat that lists your codex-bridge jobs live: running, done, interrupted.",
+  "author": { "name": "Xallindrome", "url": "https://xallindrome.co" },
+  "homepage": "https://github.com/xallindrome-labs/codex-bridge#codex-jobs-pane",
+  "license": "MIT",
+  "types": "./types/index.d.ts"
+}

package/plugins/codex-jobs/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Andrew Wilson
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/plugins/codex-jobs/README.md

@@ -0,0 +1,45 @@
+# codex-jobs
+
+A Claude Code add-on (a "mod") that opens a pane beside the chat listing your [codex-bridge](https://github.com/xallindrome-labs/codex-bridge) jobs, live. It is read-only: it looks at the job files codex-bridge keeps on disk, so it shows jobs started by any Claude session, including ones that kept running after you closed Claude.
+
+For each job it shows the tool (`plan`, `code` or `image`), the status (running, done, failed, interrupted, cancelled, timed out), how long it has run or took, the request, and `images k/n` for image batches. Above the list it shows your **Codex usage**: the 5-hour and weekly windows with percent used, a bar, when each resets, and how many images the bridge generated in each window. Codex has one shared meter, so images use the same limits as text; there is no separate image meter. A status-line entry shows `codex: N running`, and a short toast appears when a job you watched start finishes.
+
+## Install
+
+At the prompt of a terminal Claude Code session:
+
+```
+/plugin install codex-jobs --marketplace xallindrome-labs/codex-bridge
+```
+
+From a shell: `claude plugin install codex-jobs --marketplace xallindrome-labs/codex-bridge`.
+
+In the desktop app, where `/plugin` does not run: click **+** next to the prompt box, then **Plugins**, **Add marketplace** with `xallindrome-labs/codex-bridge`, then **Add plugin**.
+
+Or, without a marketplace, from the npm package (this session only):
+
+```
+claude --plugin-dir "$(npx -y @xallindrome-labs/codex-bridge --pane-path)"
+```
+
+## Use
+
+- Type `/codex-jobs` to open the pane. It also opens by itself the first time a job is running in a session.
+- The list refreshes every 3 seconds and shows the 12 newest jobs.
+- If a job shows **interrupted**, its Codex process is gone (reboot, crash or kill). Ask Claude to run `codex_resume` with that job id.
+
+It finds the jobs in `$CODEX_BRIDGE_HOME/jobs`, or `~/.codex-bridge/jobs` if that is not set. Usage comes from the newest Codex session logs in `$CODEX_HOME/sessions` (default `~/.codex/sessions`), where Codex records its usage windows; it is re-read every 30 seconds and shows when it was last written, so it can lag until Codex runs again. A window whose reset time has passed shows as reset.
+
+## What it needs
+
+- codex-bridge, which creates the jobs. This add-on only reads local files (codex-bridge job files and Codex session logs); it does not call Codex or the network.
+- A Claude Code build that supports mods (hooks modules and `Pane`). Whether a pane is drawn depends on the surface; the add-on is tested against the terminal, desktop, VS Code and mobile element tables, not every paint.
+
+## Develop
+
+```
+claude plugin validate plugins/codex-jobs
+claude plugin test plugins/codex-jobs
+```
+
+MIT licensed, like codex-bridge. Built by [Xallindrome](https://xallindrome.co).

package/plugins/codex-jobs/hooks/hooks.json

@@ -0,0 +1 @@
+{ "modules": ["./register.tsx"] }