codex-plus-patcher 0.7.1 → 0.8.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-plus-patcher",
-  "version": "0.7.1",
+  "version": "0.8.0",
   "private": false,
   "description": "Patch queue tool for building a local Codex Plus.app from an installed Codex.app.",
   "repository": {

package/src/cli.js

@@ -13,6 +13,7 @@ const {
 const { readAsar, walkFiles } = require("./core/asar");
 const {
   DEFAULT_DEV_HOME,
+  DEFAULT_DEV_INSTANCE_ID,
   DEFAULT_ELECTRON_USER_DATA,
   formatLaunchDevResult,
   formatSyncDevHomeResult,
@@ -49,12 +50,14 @@ function parseArgs(argv) {
     includeNativeOpenProbes: false,
     noProgress: false,
     quiet: false,
+    devInstanceId: DEFAULT_DEV_INSTANCE_ID,
   };
   const rest = [...argv];
   if (rest[0] && !rest[0].startsWith("--")) args.command = rest.shift();
   if (args.command === "audit-plugins") {
     args.target = DEFAULT_AUDIT_TARGET;
     args.remoteDebuggingPort = DEFAULT_AUDIT_PORT;
+    args.devInstanceId = "audit";
   }
   for (let index = 0; index < rest.length; index += 1) {
     const arg = rest[index];
@@ -68,6 +71,7 @@ function parseArgs(argv) {
     else if (arg === "--source-home") args.sourceHome = path.resolve(expandPath(next()));
     else if (arg === "--dev-home") args.devHome = path.resolve(expandPath(next()));
     else if (arg === "--electron-user-data") args.electronUserDataPath = path.resolve(expandPath(next()));
+    else if (arg === "--dev-instance-id") args.devInstanceId = next();
     else if (arg === "--remote-debugging-port" || arg === "--port") {
       const value = next();
       args.remoteDebuggingPort = args.command === "audit-plugins" ? Number(value) : value;
@@ -120,6 +124,7 @@ Options:
                            Isolated Electron userData for launch-dev. Default: ./work/codex-plus-electron-user-data
   --remote-debugging-port <port>
                            Remote debugging port passed to launch-dev or audit-plugins
+  --dev-instance-id <id>    Dev-only bundle identity suffix. Default: dev, or audit for audit-plugins
   --asar <path>            app.asar path for ASAR readback commands
   --file <asar-path>       Packed file path for asar-cat
   --contains <text>        Filter asar-list paths by substring
@@ -396,6 +401,7 @@ async function main() {
       devHome: args.devHome,
       electronUserDataPath: args.electronUserDataPath,
       remoteDebuggingPort: args.remoteDebuggingPort,
+      devInstanceId: args.devInstanceId,
     });
     process.stdout.write(args.json ? `${JSON.stringify(result, null, 2)}\n` : formatLaunchDevResult(result));
     return;

package/src/core/asar.js

@@ -11,9 +11,10 @@ function sha256File(file) {
 
 function readAsar(asarPath) {
   const buffer = fs.readFileSync(asarPath);
+  const headerSize = buffer.readUInt32LE(4);
   const jsonSize = buffer.readUInt32LE(12);
   const header = JSON.parse(buffer.subarray(16, 16 + jsonSize).toString("utf8"));
-  return { buffer, dataStart: 16 + jsonSize, header };
+  return { buffer, dataStart: 8 + headerSize, header };
 }
 
 function walkFiles(node, prefix = "", out = []) {
@@ -99,13 +100,14 @@ function patchAsar(asarPath, fileTransforms, transformContext = {}) {
   }
 
   const json = Buffer.from(JSON.stringify(archive.header), "utf8");
+  const padding = Buffer.alloc((4 - (json.length % 4)) % 4);
   const header = Buffer.alloc(16);
   header.writeUInt32LE(4, 0);
-  header.writeUInt32LE(json.length + 8, 4);
-  header.writeUInt32LE(json.length + 4, 8);
+  header.writeUInt32LE(json.length + padding.length + 8, 4);
+  header.writeUInt32LE(json.length + padding.length + 4, 8);
   header.writeUInt32LE(json.length, 12);
 
-  fs.writeFileSync(asarPath, Buffer.concat([header, json, ...dataBuffers]));
+  fs.writeFileSync(asarPath, Buffer.concat([header, json, padding, ...dataBuffers]));
   return sha256File(asarPath);
 }
 

package/src/core/dev-mode.js

@@ -4,12 +4,13 @@ const os = require("node:os");
 const path = require("node:path");
 
 const { patchAsar } = require("./asar");
-const { setPlistBuddyValue } = require("./plist");
+const { replacePlistString, setPlistBuddyValue } = require("./plist");
 
 const ASAR_PATH_IN_BUNDLE = "Contents/Resources/app.asar";
 const RUNTIME_MANIFEST_FILE = "webview/assets/codex-plus/runtime-manifest.js";
 const DEFAULT_DEV_HOME = path.resolve("work/codex-plus-dev-home");
 const DEFAULT_ELECTRON_USER_DATA = path.resolve("work/codex-plus-electron-user-data");
+const DEFAULT_DEV_INSTANCE_ID = "dev";
 const DEV_MODE_WARNING =
   "Dev mode shares the original Codex worktrees. Use it for UI/plugin validation; do not edit the same checkout from regular Codex and Codex Plus at the same time.";
 
@@ -179,11 +180,40 @@ function syncDevHome({
   };
 }
 
-function buildLaunchDev({ targetApp, devHome = DEFAULT_DEV_HOME, electronUserDataPath = DEFAULT_ELECTRON_USER_DATA, remoteDebuggingPort } = {}) {
+function sanitizeDevInstanceId(devInstanceId) {
+  if (devInstanceId == null || devInstanceId === "") return null;
+  const sanitized = String(devInstanceId)
+    .trim()
+    .toLowerCase()
+    .replace(/[^a-z0-9-]+/g, "-")
+    .replace(/^-+|-+$/g, "");
+  if (!sanitized) throw new Error("--dev-instance-id must contain at least one letter or number");
+  return sanitized;
+}
+
+function devBundleIdentity(devInstanceId) {
+  const sanitized = sanitizeDevInstanceId(devInstanceId);
+  if (!sanitized) return null;
+  return {
+    id: sanitized,
+    bundleIdentifier: `com.openai.codex-plus.${sanitized}`,
+    displayName: `Codex Plus (${sanitized})`,
+    name: `Codex Plus ${sanitized}`,
+  };
+}
+
+function buildLaunchDev({
+  targetApp,
+  devHome = DEFAULT_DEV_HOME,
+  electronUserDataPath = DEFAULT_ELECTRON_USER_DATA,
+  remoteDebuggingPort,
+  devInstanceId = DEFAULT_DEV_INSTANCE_ID,
+} = {}) {
   if (!targetApp) throw new Error("--target is required");
   const appBinary = path.join(path.resolve(targetApp), "Contents/MacOS/Codex");
   const resolvedDevHome = path.resolve(devHome);
   const resolvedElectronUserDataPath = path.resolve(electronUserDataPath);
+  const instanceIdentity = devBundleIdentity(devInstanceId);
   const args = [`--user-data-dir=${resolvedElectronUserDataPath}`];
   if (remoteDebuggingPort != null) args.push(`--remote-debugging-port=${remoteDebuggingPort}`);
   return {
@@ -193,6 +223,7 @@ function buildLaunchDev({ targetApp, devHome = DEFAULT_DEV_HOME, electronUserDat
       CODEX_HOME: resolvedDevHome,
       CODEX_ELECTRON_USER_DATA_PATH: resolvedElectronUserDataPath,
     },
+    instanceIdentity,
     warning: DEV_MODE_WARNING,
   };
 }
@@ -217,18 +248,46 @@ function markDevRuntimeConfig(targetApp, { patchAsarImpl = patchAsar, setPlistBu
   return { asar: asarPath, patchedAsarSha };
 }
 
-function launchDevApp({ spawn = childProcess.spawn, env = process.env, markDevRuntimeConfigImpl = markDevRuntimeConfig, ...options } = {}) {
+function signDevApp(targetApp, execFileSync = childProcess.execFileSync) {
+  execFileSync("/usr/bin/codesign", ["--force", "--deep", "--sign", "-", path.resolve(targetApp)], { stdio: "pipe" });
+  return { signed: true };
+}
+
+function markDevBundleIdentity(
+  targetApp,
+  devInstanceId = DEFAULT_DEV_INSTANCE_ID,
+  { replacePlistStringImpl = replacePlistString } = {},
+) {
+  const identity = devBundleIdentity(devInstanceId);
+  if (!identity) return null;
+  const plistPath = path.join(path.resolve(targetApp), "Contents/Info.plist");
+  replacePlistStringImpl(plistPath, "CFBundleIdentifier", identity.bundleIdentifier);
+  replacePlistStringImpl(plistPath, "CFBundleDisplayName", identity.displayName);
+  replacePlistStringImpl(plistPath, "CFBundleName", identity.name);
+  return identity;
+}
+
+function launchDevApp({
+  spawn = childProcess.spawn,
+  env = process.env,
+  markDevRuntimeConfigImpl = markDevRuntimeConfig,
+  markDevBundleIdentityImpl = markDevBundleIdentity,
+  signDevAppImpl = signDevApp,
+  ...options
+} = {}) {
   const launch = buildLaunchDev(options);
   fs.mkdirSync(launch.env.CODEX_HOME, { recursive: true });
   fs.mkdirSync(launch.env.CODEX_ELECTRON_USER_DATA_PATH, { recursive: true });
   const devRuntimeConfig = markDevRuntimeConfigImpl(options.targetApp);
+  const devBundle = markDevBundleIdentityImpl(options.targetApp, options.devInstanceId);
+  const devSignature = signDevAppImpl(options.targetApp);
   const child = spawn(launch.command, launch.args, {
     detached: true,
     env: { ...env, ...launch.env },
     stdio: "ignore",
   });
   child.unref();
-  return { ...launch, devRuntimeConfig, pid: child.pid };
+  return { ...launch, devRuntimeConfig, devBundle, devSignature, pid: child.pid };
 }
 
 function formatSyncDevHomeResult(result) {
@@ -255,6 +314,7 @@ function formatLaunchDevResult(result) {
     `CODEX_ELECTRON_USER_DATA_PATH: ${result.env.CODEX_ELECTRON_USER_DATA_PATH}`,
   ];
   if (result.pid != null) lines.push(`PID: ${result.pid}`);
+  if (result.instanceIdentity) lines.push(`Bundle identity: ${result.instanceIdentity.bundleIdentifier}`);
   lines.push(`Warning: ${result.warning}`);
   return `${lines.join("\n")}\n`;
 }
@@ -262,13 +322,18 @@ function formatLaunchDevResult(result) {
 module.exports = {
   COPY_ENTRIES,
   DEFAULT_DEV_HOME,
+  DEFAULT_DEV_INSTANCE_ID,
   DEFAULT_ELECTRON_USER_DATA,
   DEV_MODE_WARNING,
   SQLITE_SNAPSHOT_ENTRIES,
   buildLaunchDev,
+  devBundleIdentity,
   formatLaunchDevResult,
   formatSyncDevHomeResult,
   launchDevApp,
+  markDevBundleIdentity,
   markDevRuntimeConfig,
+  sanitizeDevInstanceId,
+  signDevApp,
   syncDevHome,
 };