setup

> Before asking, read [User Questions](../../rules/codex-user-questions.md). # Set Up the Bridge ## Bootstrap and plan - Treat a plain invocation as `action=all target=peer scope=auto live=prompt`. - Loaded Codex plugin, Codex trust, Codex authentication, and current session are external bootstrap prerequisites. Never replace or restart current invocation surface. - Reject a model-controlled workspace override; use host-selected launch workspace. - Require `python --version` >= 3.10. - Parse only `action=all|check|configure|authenticate|repair|verify-live`, `target=peer|codex|claude`, `scope=auto|user|project|local`, and `live=prompt|skip|required`, plus one-release compatibility forms `--live` and `--direction codex|claude`; reject ambiguous or unknown arguments. For one resolved target, invoke: ```bash python "${PLUGIN_ROOT}/bin/bridge_setup.py" --current-host codex --workspace "<launch-workspace>" --action "<action>" --target "<target>" --scope "<scope>" --live "<live>" ``` Credential-free planner returns setup result JSON defined by `schemas/setup-result.schema.json`. > Route configuration/repair, authentication, and paid live-verification decisions separately through User Questions. Bind each answer to its own current action digest after displaying effects; generic approval never carries to another stage. Preserve digest confirmation syntax, operator-terminal login, cost disclosure, and denial/replay/expiry stops. Host-side answers are not guest authorization or r...