setup

# Set Up the Bridge ## Bootstrap and plan - Treat a plain invocation as `action=all target=peer scope=auto live=prompt`. - The loaded Codex plugin, Codex trust, Codex authentication, and current session are external bootstrap prerequisites. Never try to replace or restart the current invocation surface. - Reject a model-controlled workspace override; use the host-selected launch workspace. - Require `python --version` >= 3.10. - Parse only `action=all|check|configure|authenticate|repair|verify-live`, `target=peer|codex|claude`, `scope=auto|user|project|local`, and `live=prompt|skip|required`, plus the one-release compatibility forms `--live` and `--direction codex|claude`; reject ambiguous or unknown arguments. For one resolved target, invoke: ```bash python "${PLUGIN_ROOT}/bin/bridge_setup.py" --current-host codex --workspace "<launch-workspace>" --action "<action>" --target "<target>" --scope "<scope>" --live "<live>" ``` The credential-free planner returns the setup result JSON defined by `schemas/setup-result.schema.json`. ## Check and approved changes For `check`, report the result and stop. For `all`, `configure`, or `repair`: 1. Show every planned `operations` entry and the approval digest before mutation. 2. Obtain explicit approval for exactly that digest. State: - action and purpose; - exact native argv and resolved target/scope; - external capability; - credential behavior; - filesystem and host-configuration effects; - rollback evidence; ...