# ๐ŸŒ Codex App Web UI Enabler ### ๐Ÿš€ Run OpenAI Codex Desktop in Your Browser โ€” From Any Device ๐Ÿš€ [![Shell Script](https://img.shields.io/badge/Shell-Bash-4EAA25?logo=gnubash&logoColor=white&style=for-the-badge)](https://www.gnu.org/software/bash/) [![Electron](https://img.shields.io/badge/Electron-Patched-47848F?logo=electron&logoColor=white&style=for-the-badge)](https://www.electronjs.org/) [![Platform](https://img.shields.io/badge/Platform-macOS%20%7C%20Linux%20%7C%20Windows-blue?style=for-the-badge&logo=apple)](https://github.com/friuns2/codex-unpacked-toolkit) [![License](https://img.shields.io/badge/License-MIT-yellow?style=for-the-badge)](LICENSE) [![Status](https://img.shields.io/badge/Status-๐Ÿ”ฅ%20WORKS-brightgreen?style=for-the-badge)](https://github.com/friuns2/codex-unpacked-toolkit) [![GitHub stars](https://img.shields.io/github/stars/friuns2/codex-unpacked-toolkit?style=for-the-badge&logo=github&color=gold)](https://github.com/friuns2/codex-unpacked-toolkit/stargazers) [![GitHub forks](https://img.shields.io/github/forks/friuns2/codex-unpacked-toolkit?style=for-the-badge&logo=github&color=blue)](https://github.com/friuns2/codex-unpacked-toolkit/network)

> **Codex Desktop's full UI โ€” chat, skills, file editing, code execution โ€”** > **accessible from any browser on any device. No Electron window required.** > > **One script. Full Web UI. Anywhere.** ๐ŸŒ
``` โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•”โ•โ•โ•โ•โ•โ–ˆโ–ˆโ•”โ•โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•”โ•โ•โ•โ•โ•โ•šโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•”โ• โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ•โ•โ•โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ•šโ–ˆโ–ˆโ–ˆโ•”โ• โ–ˆโ–ˆโ•‘ โ–ˆโ•— โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ• โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ• โ–ˆโ–ˆโ•”โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ• โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘ โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•”โ• โ•šโ–ˆโ–ˆโ•— โ•šโ–ˆโ–ˆโ–ˆโ•”โ–ˆโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ• โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ•‘ โ•šโ•โ•โ•โ•โ•โ• โ•šโ•โ•โ•โ•โ•โ• โ•šโ•โ•โ•โ•โ•โ• โ•šโ•โ•โ•โ•โ•โ•โ•โ•šโ•โ• โ•šโ•โ• โ•šโ•โ•โ•โ•šโ•โ•โ• โ•šโ•โ•โ•โ•โ•โ•โ•โ•šโ•โ•โ•โ•โ•โ• โ•šโ•โ•โ•โ•โ•โ• โ•šโ•โ• E N A B L E R ```
--- ## ๐Ÿคฏ What Is This? OpenAI's Codex Desktop is a powerful AI coding agent โ€” but it's locked inside an Electron window on a single machine. What if you could access it **from any browser, on any device, anywhere on your network?** We reverse-engineered the minified Electron bundle and built scripts that **patch the app at runtime** to expose the full Codex UI over HTTP + WebSocket. The same scripts also unlock a **hidden SSH remote execution engine** that was already compiled into the binary but never wired up. **One command. Full Web UI. Plus SSH remote control. No recompilation.** --- ## ๐Ÿ“ฑ See It In Action โ€” Codex in Your Browser, From Any Device > **Yes, that's a phone. Yes, that's Codex. Yes, it's running on a Mac across the network.**

๐Ÿ’ฌ Live AI Chat Session
Full Codex conversation running on a Mac, controlled from an Android phone over the network. GPT-5.3-Codex responding in real-time. The address bar says it all: 100.107.32.83:5999 โ€” that's a remote Mac.
๐Ÿงฉ Skills Manager โ€” From Your Pocket
Browsing and managing Codex skills (Playwright, Oracle Cloud CLI, Three.js, YouTube Search...) from a mobile browser. Full desktop functionality, zero compromises.
> ๐Ÿคฏ **This is not a mockup.** This is a real Codex Desktop instance running on macOS, patched with our Web UI Enabler scripts, accessed from a mobile phone browser over Tailscale. Every feature works โ€” chat, skills, file editing, code execution โ€” all from your pocket. --- ## โšก Quick Start ```bash # Run directly from npm (no clone needed) npx -y codex-web-ui --port 5999 ``` Open `http://127.0.0.1:5999/` and you're flying. โœˆ๏ธ --- ## ๐ŸŒ What Can You Actually Do With This? With the Web UI enabled, Codex breaks free from the Electron window โ€” and with SSH mode unlocked, it reaches **any machine you own**: | ๐ŸŽฏ Use Case | ๐Ÿ’ก Description | |---|---| | ๐Ÿ“ฑ **Code From Your Phone** | Open Codex in any mobile browser โ€” full chat, skills, file editing, code execution | | ๐Ÿ’ป **Use Any Browser** | Chrome, Firefox, Safari, Arc โ€” no Electron install needed on the client | | ๐ŸŒ **Access Over the Network** | Tailscale, LAN, VPN โ€” access your Codex instance from anywhere securely | | ๐Ÿ–ฅ๏ธ **Control Your Mac Remotely** | SSH into your MacBook from anywhere and let Codex operate it as if you're sitting in front of it | | ๐Ÿง **Orchestrate Linux Servers** | Point Codex at your Ubuntu/Debian/Arch boxes and run AI-powered coding sessions remotely | | ๐ŸชŸ **Manage Windows via WSL** | Connect through WSL2 SSH and bring Codex intelligence to your Windows dev environment | | ๐Ÿ  **Command Your Homelab** | Proxmox, TrueNAS, Raspberry Pi clusters โ€” Codex becomes your AI sysadmin | | โ˜๏ธ **Cloud Fleet Management** | AWS EC2, Oracle Cloud, DigitalOcean droplets โ€” manage entire fleets from one Codex window | | ๐Ÿ”ง **Web Service Orchestration** | Nginx configs, Docker containers, systemd services โ€” edit and deploy across machines | | ๐Ÿงช **Remote CI/CD Pipelines** | Trigger builds, inspect logs, fix failing tests on remote CI runners in real-time | | ๐Ÿ“ก **IoT & Edge Devices** | SSH into Raspberry Pis, Jetson Nanos, or any edge device and code directly on them | | ๐Ÿ—๏ธ **Multi-Machine Refactoring** | Coordinate code changes across microservices running on different hosts simultaneously | > **TL;DR:** Codex in your browser + SSH to any machine = your entire infrastructure as one AI-powered IDE. ๐Ÿง  --- ## ๐Ÿ“ Project Structure ``` codex-unpacked-toolkit/ โ”œโ”€โ”€ ๐ŸŒ launch_codex_webui_unpacked.sh # WebUI mode launcher (browser access) โ”œโ”€โ”€ ๐Ÿ”ง launch_codex_unpacked.sh # SSH unlock & debug launcher โ”œโ”€โ”€ ๐Ÿ”Œ webui-bridge.js # Browser-side WebSocket โ†” IPC bridge โ”œโ”€โ”€ ๐Ÿ“– PROJECT_STATE.md # Living project state & patching reference โ”œโ”€โ”€ ๐Ÿ“‚ images/ # Screenshots & proof it works โ”‚ โ”œโ”€โ”€ mobile-chat-session.jpeg # Codex chat from mobile phone โ”‚ โ””โ”€โ”€ mobile-skills-browser.jpeg # Skills manager from mobile phone โ””โ”€โ”€ ๐Ÿ“‚ skills/ โ””โ”€โ”€ launch-codex-unpacked/ โ””โ”€โ”€ SKILL.md # Codex skill definition ``` --- ## ๐ŸŒ `launch_codex_webui_unpacked.sh` โ€” Browser-Based Codex > **The main event.** Run Codex in your browser. No Electron window needed. Access from any device on your network. ### What It Does 1. ๐Ÿ“ฆ **Extracts `app.asar`** โ€” Same unpacking as above 2. ๐Ÿ’‰ **Injects WebUI runtime patch** โ€” Embeds a full HTTP server + WebSocket bridge directly into the Electron main process (~800 lines of runtime injection) 3. ๐Ÿฉน **Patches renderer bundle** โ€” Fixes a `roots` guard compatibility issue in the React renderer that crashes in WebUI mode 4. ๐Ÿ”Œ **Copies `webui-bridge.js`** โ€” Installs the browser-side bridge into the webview directory 5. ๐Ÿš€ **Launches headless Electron** โ€” Starts with `--webui` flag, hides all native windows, serves UI over HTTP 6. ๐Ÿ” **Optional token auth** โ€” Protect your instance with `--token` for secure remote access 7. ๐ŸŒ **Origin allowlist** โ€” Restrict which domains can connect via `--origins` 8. ๐Ÿ–ฅ๏ธ **Auto-opens browser** โ€” Polls the server and opens your default browser when ready ### The Injected Runtime Includes - ๐ŸŒ Full HTTP static file server (serves Codex webview assets) - ๐Ÿ”„ RFC 6455-compliant WebSocket server (zero dependencies, hand-rolled frame parser) - ๐Ÿ”’ Timing-safe token authentication (Bearer, header, query param, and cookie) - ๐Ÿ›ก๏ธ Security headers (X-Content-Type-Options, X-Frame-Options, CORP, Referrer-Policy) - ๐Ÿ“ก IPC-to-WebSocket bridge (intercepts `webContents.send` and mirrors to all connected clients) - ๐Ÿšฆ Rate limiting (5000 messages/minute for local, configurable) - ๐Ÿ‘ค Single-client policy (new tab takes over, old tab gets disconnected) - ๐Ÿ’‰ SPA fallback with automatic `webui-bridge.js` injection into HTML ### Options ``` --app Custom Codex.app path --port WebUI port (default: 5999) --token Auth token for secure access ๐Ÿ” --origins Allowed origins (comma-separated) --bridge Custom webui-bridge.js path --user-data-dir Chromium user data dir override --no-open Don't auto-open browser --keep-temp Keep extracted app dir ``` ### Examples ```bash # Run from npm package npx -y codex-web-ui --port 5999 # Basic local access ./launch_codex_webui_unpacked.sh # Secure remote access with auth ./launch_codex_webui_unpacked.sh --port 8080 --token mysecrettoken # Access from specific origins only ./launch_codex_webui_unpacked.sh --origins "https://mysite.com,http://localhost:3000" ``` --- ## ๐Ÿ”ง `launch_codex_unpacked.sh` โ€” The SSH Unlocker > **Bonus superpower.** This script extracts, patches, and launches Codex with the hidden SSH remote execution feature fully activated. ### What It Does 1. ๐Ÿ“ฆ **Extracts `app.asar`** โ€” Unpacks the Codex Electron bundle into a temp directory using `@electron/asar` 2. ๐Ÿ”‘ **Injects SSH host into global state** โ€” Writes your SSH host into `.codex-global-state.json` so the app recognizes it as a configured remote 3. ๐Ÿงฌ **Patches the main bundle** โ€” Performs a surgical AST-level patch on the minified `main-*.js` to auto-select the SSH host on startup (finds the startup sequence and rewires it to check `electron-ssh-hosts` first) 4. ๐Ÿ” **Enables Node Inspector** โ€” Launches with `--inspect` for live debugging (port 9229 by default) 5. ๐ŸŒ **Enables Chromium Remote Debug** โ€” Opens `--remote-debugging-port` (9222) for DevTools Protocol access 6. โœ… **SSH preflight check** โ€” Validates connectivity to your host with `BatchMode=yes` and `ConnectTimeout=6` before launching 7. ๐Ÿงน **Auto-cleanup** โ€” Temp directory is removed on exit (unless `--keep-temp`) ### Options ``` --app Custom Codex.app path (default: /Applications/Codex.app) --user-data-dir Chromium user data dir override --inspect-port Node inspector port (default: 9229) --remote-debug-port Chromium remote debug port (default: 9222) --ssh-host The SSH host to unlock and auto-connect ๐Ÿ”‘ --no-inspect Disable Node inspector --no-remote-debug Disable Chromium remote debugging --keep-temp Keep extracted app dir for inspection ``` ### Example ```bash # Unlock SSH to your homelab server with custom ports ./launch_codex_unpacked.sh \ --ssh-host ubuntu@192.168.1.100 \ --inspect-port 9230 \ --remote-debug-port 9223 ``` --- ## ๐Ÿ”Œ `webui-bridge.js` โ€” The Browser-Side Bridge > **Makes the browser think it's Electron.** Replaces `window.electronBridge` with a WebSocket-backed implementation. ### What It Does 1. ๐Ÿ” **Detects environment** โ€” Only activates when the native Electron preload bridge is absent 2. ๐Ÿ”„ **Establishes WebSocket connection** โ€” Connects to `/ws` with automatic reconnection (exponential backoff, 500ms โ†’ 5s) 3. ๐Ÿ“จ **Implements full `electronBridge` API** โ€” `sendMessageFromView`, `sendWorkerMessageFromView`, `subscribeToWorkerMessages`, and more 4. ๐Ÿ“ฌ **Message queue** โ€” Buffers outbound messages while disconnected, flushes on reconnect 5. ๐Ÿ“ก **Event forwarding** โ€” Translates WebSocket packets into browser `MessageEvent`s that the React app expects 6. ๐Ÿ”„ **Worker subscription system** โ€” Manages per-worker callback subscriptions with proper cleanup 7. ๐Ÿท๏ธ **Session management** โ€” Emits `client-status-changed` on connect, handles `open-new-instance` redirects 8. ๐Ÿ›ก๏ธ **Single-socket guard** โ€” Token-based deduplication prevents ghost connections --- ## ๐Ÿ”ฌ How We Found It โ€” The Investigation > See the full reverse-engineering findings in [`PROJECT_STATE.md` ยง 9](PROJECT_STATE.md#9-ssh-reverse-engineering-findings) We extracted the `app.asar`, deobfuscated the minified bundles, and traced the execution paths. Along the way we discovered a fully-built SSH remote execution engine hidden inside the binary. Here's what we found: | ๐Ÿ”Ž Discovery | ๐Ÿ“ Detail | |---|---| | **Remote host detection** | Activates when host config `kind` is `ssh` or `brix` | | **Command execution** | Builds args from `hostConfig.terminal_command`, appends `--`, env vars, and command | | **SSH wrapper** | Wraps commands in `sh -lc ` with `-o BatchMode=yes -o ConnectTimeout=10` | | **Git over SSH** | Routes git commands through remote shell with `GIT_TERMINAL_PROMPT=0` | | **Remote git apply** | Full flow: `mktemp -d` โ†’ `cat > patch` โ†’ `test -e` โ†’ `git apply --3way` โ†’ `rm -rf` | | **Codex home resolution** | Checks `$CODEX_HOME`, falls back to `$HOME/.codex` | **All of this was already compiled into the app. We just wired it up.** โšก --- ## ๐Ÿ—๏ธ Architecture ``` โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ” โ”‚ YOUR BROWSER โ”‚ โ”‚ โ”‚ โ”‚ webui-bridge.js โ”‚ โ”‚ โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ” โ”‚ โ”‚ โ”‚ window.electronBridge (fake) โ”‚ โ”‚ โ”‚ โ”‚ โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ” โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ” โ”‚ โ”‚ โ”‚ โ”‚ โ”‚ sendMessage โ”‚ โ”‚ subscribe โ”‚ โ”‚ โ”‚ โ”‚ โ”‚ โ”‚ FromView โ”‚ โ”‚ ToWorker โ”‚ โ”‚ โ”‚ โ”‚ โ”‚ โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”ฌโ”€โ”€โ”€โ”€โ”€โ”˜ โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”ฌโ”€โ”€โ”€โ”€โ”€โ”€โ”˜ โ”‚ โ”‚ โ”‚ โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜ โ”‚ โ”‚ โ”‚ WebSocket โ”‚ โ”‚ โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜ โ”‚ /ws โ”‚ โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ” โ”‚ ELECTRON MAIN PROCESS (headless) โ”‚ โ”‚ โ”‚ โ”‚ โ”‚ โ”‚ โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ดโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ดโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ” โ”‚ โ”‚ โ”‚ WebUI Runtime Patch โ”‚ โ”‚ โ”‚ โ”‚ โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ” โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ” โ”‚ โ”‚ โ”‚ โ”‚ โ”‚ HTTP โ”‚ โ”‚ WebSocket โ”‚ โ”‚ โ”‚ โ”‚ โ”‚ โ”‚ Server โ”‚ โ”‚ Server โ”‚ โ”‚ โ”‚ โ”‚ โ”‚ โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜ โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”ฌโ”€โ”€โ”€โ”€โ”€โ”€โ”˜ โ”‚ โ”‚ โ”‚ โ”‚ โ”‚ โ”‚ โ”‚ โ”‚ โ”‚ webContents.send โ—„โ”€โ”€โ”˜ (intercept & mirror) โ”‚ โ”‚ โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜ โ”‚ โ”‚ โ”‚ โ”‚ โ”‚ โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ดโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ” โ”‚ โ”‚ โ”‚ SSH Transport โ”‚ โ—„โ”€โ”€ UNLOCKED ๐Ÿ”“ โ”‚ โ”‚ โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ฌโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜ โ”‚ โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜ โ”‚ SSH โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ดโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ” โ”‚ REMOTE HOST โ”‚ โ”‚ โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ” โ”‚ โ”‚ โ”‚ ~/.codex โ”‚ โ”‚ โ”‚ โ”‚ git apply โ”‚ โ”‚ โ”‚ โ”‚ sh -lc ... โ”‚ โ”‚ โ”‚ โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜ โ”‚ โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜ ``` --- ## ๐ŸŽฏ Requirements - ๐ŸŽ **macOS** with Codex Desktop installed (or custom `--app` path) - ๐Ÿ“ฆ **Launcher dependencies are auto-installed** when missing: - `node`/`npx` (both launchers) - `ripgrep` (`launch_codex_webui_unpacked.sh`) - via Homebrew bootstrap when `brew` is missing - ๐ŸŒ Internet access and `curl` available for automatic Homebrew/tool installation - โš™๏ธ Optional: set `AUTO_INSTALL_TOOLS=0` to disable auto-install behavior - ๐ŸŒ **A modern browser** (Chrome, Firefox, Safari, Arc, etc.) for Web UI access - ๐Ÿ”‘ **SSH key-based auth** configured for your target host โ€” only needed for SSH mode (`BatchMode=yes`) - ๐Ÿ–ฅ๏ธ Target host with `~/.codex` directory (or `$CODEX_HOME` set) โ€” only needed for SSH mode --- ## ๐Ÿ›ก๏ธ Security Notes - SSH uses `BatchMode=yes` โ€” no interactive password prompts, key-based auth only - WebUI token auth uses **timing-safe comparison** to prevent timing attacks - Security headers are set on all HTTP responses (DENY framing, no-sniff, no-referrer) - Single-client policy prevents session hijacking from duplicate tabs - Rate limiting protects against WebSocket flood attacks - No `StrictHostKeyChecking` overrides โ€” your existing SSH config is respected --- ## ๐Ÿ› Troubleshooting | Problem | Solution | |---|---| | `EADDRINUSE` | Port already in use โ€” try `--port 6002` | | `SSH preflight failed` | Check your SSH key: `ssh -o BatchMode=yes user@host 'echo ok'` | | `Renderer guard patch anchor not found` | Bundle version changed โ€” open an issue | | `Missing app.asar` | Point `--app` to your Codex.app location | | Blank page in WebUI | Check console for `roots` error โ€” renderer patch may need updating | --- ## ๐Ÿ› ๏ธ Development ```bash # Clone this repo git clone https://github.com/friuns2/codex-web-ui.git cd codex-web-ui # ๐ŸŒ Launch the Web UI โ€” access Codex from any browser ./launch_codex_webui_unpacked.sh --port 5999 # ๐Ÿ”“ Or launch with SSH mode unlocked (connects to your remote host) ./launch_codex_unpacked.sh --ssh-host user@your-server.com ``` --- ## ๐Ÿค Contributing Found a new Codex version that breaks the patches? Bundle patterns change between releases โ€” [PRs](https://github.com/friuns2/codex-unpacked-toolkit/pulls) to update the patch anchors are always welcome! [Open an issue](https://github.com/friuns2/codex-unpacked-toolkit/issues) if you hit a new bundle shape. --- ## โญ Star This Repo If you think Codex should be accessible **from any browser, on any device** โ€” not just the Electron window it shipped in โ€” [smash that star button](https://github.com/friuns2/codex-unpacked-toolkit). โญ ---
**Built by reverse-engineering Codex Desktop's Electron bundle** ๐Ÿ”ฌ *Because the best features are the ones they already shipped but forgot to turn on.* ๐Ÿ˜