Codex Quota Guard MCP 0.7.0 — MCP 2026-07-28

MCP 2026-07-28

• Migrates to the stable MCP TypeScript SDK v2 packages.
• Uses server/discover, per-request metadata, and required HTTP routing headers end to end.
• Runs modern-only: legacy initialize/initialized traffic is rejected instead of downgraded.
• Fixes Codex startup stalling on an unanswered STDIO discovery probe.
• Keeps portable cross-tool workflow guidance in server-wide instructions.
• Prevents disposable SDK discovery probes from creating stale live-client leases.

Verification

• 94/94 tests passed locally.
• GitHub Actions passed all 12 Node 22/24 jobs across Windows x64/ARM64, Ubuntu x64/ARM64, and macOS Intel/Apple Silicon.
• Fresh install/uninstall acceptance passed with shared-core shutdown and unrelated Codex config preserved.
• npm audit reports 0 vulnerabilities.

Full Changelog: v0.6.1...v0.7.0

Codex Quota Guard MCP v0.6.1

Added

• Portable MCP server-wide instructions covering quota status, bounded preflight, defer, and resume sequencing.
• Regression coverage for instructions through direct MCP and the registered stdio-to-shared-core connector.

Fixed and documented

• Live acceptance now validates the installed managed connector and its server instructions.
• Community checkout, verification, package metadata, CI audit, and portable/shared acceptance guidance are aligned.

The eight-tool public interface, authenticated loopback transport, quota policy, persistence, and scheduler behavior are unchanged.

Codex Quota Guard MCP v0.6.0

Highlights

• Uses only the current Codex ChatGPT session through the official codex app-server; API-key, Bedrock, signed-out, and unstable identities fail safe with CHATGPT_LOGIN_REQUIRED and expose no quota percentages.
• Replaces persistent Windows supervision with one authenticated on-demand loopback core and lightweight per-task connectors.
• Connector leases renew every 20 seconds, expire after 60 seconds after a crash, and allow the core to stop about five seconds after the final clean disconnect.
• Five-minute early-recovery polling runs only while a connector, active defer, and scheduler capability are all present.
• Removes Scheduled Task, service/daemon, wscript, Codex PID scanning, login flows, OAuth fallback, and direct auth-file access.
• Adds one installer for Windows, WSL-hosted Windows usage, Linux, and macOS while preserving unrelated Codex configuration.
• Keeps all eight MCP tools. The metadata now tells Codex to check near long work segments rather than before every command or small read.

Compatibility and verification

CI passed the full check, disposable installer fixture, six-concurrent-connector singleton acceptance, and package dry run on Node.js 22 and 24 across:

• Windows x64 and Windows ARM64
• Ubuntu x64 and Ubuntu ARM64
• macOS Intel and Apple Silicon

Windows running in a VM is treated as ordinary Windows; there is no hypervisor-specific code path.

Install

This package remains private and is installed from the GitHub checkout:

npm ci
npm run check
node scripts/install.mjs

Restart or reconnect Codex after installation. See the README for Windows/WSL state-sharing and uninstall instructions.