Codex-App-Manager

Wangnov/Codex-App-Manager is ranked 1,507 among these 8 peers; Noelo-Lab/kuna is ranked 1,506.

It consumes the upstream codex-app-mirror (mirror + Sparkle update feed) to manage the Codex payload, and **also self-updates** through its own China-reachable mirror. The Windows installers ( / ) are **not Authenticode-signed** yet, so SmartScreen may warn on first run; the Tauri updater signature used for in-app updates verifies bytes only and is not Windows publisher trust. The SignPath Foundation application is no longer being pursued; the project is instead planning a paid cloud-HSM certificate, and current

downloads must not be described as signed until one is actually configured and verified. See the code signing policy and Windows signing and verification. After downloading, compare the file with from the same GitHub Release. Self-update (the Manager itself) The Manager ships the Tauri updater and checks for new versions of itself in this order: 1. Managing & updating Codex itself The Manager manages the Codex desktop payload through the upstream mirror: **macOS**: reads the mirror's Sparkle appcast (arm64 / x64

), plans against the installed build, prefers the delta enclosure, verifies the Sparkle signature, then **swaps in place** with rollback on failure; falls back to the full archive when no delta matches. **Windows**: fetches the MSIX / portable build from the mirror and stages the update, with a configurable install directory and a post-install health check. com for one-click installs (sha256-verified downloads); **Try-on**: live hot-swap on a running Codex, nothing persisted, instantly revertible; **Apply**: persistent, incl. The

production line (an agent skill for both Claude Code and Codex) lives in awesome-codex-skins. How it works Detect → plan → execute The app first probes the local Codex install state and platform capabilities, produces an install / update / uninstall plan, and only then performs destructive operations (with a version + signature check before the swap to guard against TOCTOU). Release pipeline Pushing a tag triggers : four-platform build (with automatic retry on transient download hiccups) → macOS inside-out Developer ID signing

+ notarization + updater repackage → Windows updater artifact signing → publish the GitHub Release → auto-sync to the R2 + IHEP mirror. Ecosystem: codex-app-mirror The Manager is the downstream client of codex-app-mirror. The mirror distributes the official Codex installers verbatim, verifiably, and reachably inside China, and serves the Sparkle incremental-update feed; the Manager turns those into a local install-and-update experience. Both stay narrow and stable, with clear responsibilities. Tech stack & local development **Frontend**: React 19 · TypeScript · Vite

· GSAP **Shell**: Tauri v2 (frameless popover window) **Backend**: Rust command layer with app services / ports / platform adapters; two standalone crates (Sparkle) and (MSIX/portable) Non-goals Does not modify or repackage Codex installers Does not bypass OpenAI / Microsoft authorization or local install policies Does not forge or recompute Sparkle signatures (official signatures are copied verbatim) Is not a replacement for official OpenAI / Microsoft Store distribution Policy and privacy Code signing policy: signing provider plan (SignPath Foundation is no longer being

pursued), project roles, per-request human approval, artifact scope, and the verification required before production signing can go live. Privacy