You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
feat: serve external clients from headless remote hosts - #788
Managed Remote Hosts currently skip the existing external-client listener, so an authenticated MCP client cannot delegate work without a local Desktop runtime. Start the same listener for local, shared, and managed remote runtimes, preserving token authentication, loopback binding, CODEXHOST_EXTERNAL_CLIENT_PORT=off, and best-effort handling of occupied ports.
Initialize the independent official connection before a headless client's first native thread/start. Without this, a first delegation using the default model can fail before any model-catalog call has initialized the protocol. Add a regression fixture that rejects requests made before initialization, and document the Remote Host data directory and headless behavior.
Validation: TypeScript build and typecheck; 70 focused tests across headless delegation, native projection, MCP, runtime, and local shared Host; ESLint and Prettier on changed files. A stable-version backport was also exercised on a Linux x64 NAS using an actual native Codex delegation, completion event, result read, and private Tailscale HTTPS endpoint.
CI: Linux x64, Linux ARM64, and Windows passed. macOS failed in the unchanged Web relay test closes a phone stalled after ClientHello at the 10-second TLS deadline (packages/web-server/test/relay-http.test.ts:242, lower-bound timing assertion). Re-running that upstream job requires repository administrator access.
Related: #785 provides optional remote-access policies and webhooks; this change reuses the existing external-client service and is independently applicable.
Included review availability: This review used your included allowance. Your plan provides up to 8 included reviews per hour; 6 remain after this review.
Keep local preview wiring from this branch and always start external
clients, matching main after BytePioneer-AI#788, instead of gating them to the local
runtime only.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Managed Remote Hosts currently skip the existing external-client listener, so an authenticated MCP client cannot delegate work without a local Desktop runtime. Start the same listener for local, shared, and managed remote runtimes, preserving token authentication, loopback binding,
CODEXHOST_EXTERNAL_CLIENT_PORT=off, and best-effort handling of occupied ports.Initialize the independent official connection before a headless client's first native
thread/start. Without this, a first delegation using the default model can fail before any model-catalog call has initialized the protocol. Add a regression fixture that rejects requests made before initialization, and document the Remote Host data directory and headless behavior.Validation: TypeScript build and typecheck; 70 focused tests across headless delegation, native projection, MCP, runtime, and local shared Host; ESLint and Prettier on changed files. A stable-version backport was also exercised on a Linux x64 NAS using an actual native Codex delegation, completion event, result read, and private Tailscale HTTPS endpoint.
CI: Linux x64, Linux ARM64, and Windows passed. macOS failed in the unchanged Web relay test
closes a phone stalled after ClientHello at the 10-second TLS deadline(packages/web-server/test/relay-http.test.ts:242, lower-bound timing assertion). Re-running that upstream job requires repository administrator access.Related: #785 provides optional remote-access policies and webhooks; this change reuses the existing external-client service and is independently applicable.