跨平台兼容性：支持 Windows、macOS 和 Linux 系统，保证应用在不同平台上的无缝使用。
增量更新：仅更新变化的部分，减少网络带宽占用和用户等待时间。
干净卸载：确保卸载后系统中没有残留文件，避免系统污染。
核心技术揭秘
Codex-App-Manager 的实现基于现代跨平台框架，如 Electron 和 Node.js，结合国内可达的镜像服务来实现高效、可靠的安装、更新和卸载功能。
技术架构分析
以下是关键技术栈：
跨平台框架：Electron 构建跨平台桌面应用。
更新机制：采用增量更新技术，减少更新包大小。
镜像服务：支持国内可达的镜像服务器，确保高速下载。
下面是一个简化的系统架构图，展示了 Codex-App-Manager 的主要流程。
graph TD
A[用户请求] --> B("请求处理")
B --> C{"操作类型?"}
C -->|"安装"| D[校验环境]
C -->|"更新"| E[下载增量包]
C -->|"卸载"| F[清理残留]
D --> G[复制文件]
E --> H[替换文件]
F --> I[删除文件]
G --> J[安装完成]
H --> J
I --> J
跨平台桌面客户端 —— 一键安装、增量更新、干净卸载官方 Codex 桌面应用,自带国内可达的自更新。
A cross-platform desktop client to install, incrementally update, and cleanly uninstall the official Codex desktop app — with built-in, China-reachable self-update.
本项目由 DuckCoding 赞助支持
为 Claude Code / Codex / Gemini CLI 提供按量计费的 API 中转服务。 Sponsored by DuckCoding — a pay-as-you-go API relay for Claude Code / Codex / Gemini CLI.
Codex App Manager is an install / update / uninstall manager for the official OpenAI Codex desktop app: it detects the locally installed Codex, plans and performs install, incremental update, and clean uninstall, and offers one-click launch. It consumes the upstream codex-app-mirror (mirror + Sparkle update feed) to manage the Codex payload, and also self-updates through its own China-reachable mirror. The Manager does not build or modify Codex — it owns only the client-side “install & update” experience.
At a glance
Capability
Detail
🧭 One-stop management
Detects the local Codex install, plans install / update / uninstall, launches Codex in one click
🔄 Incremental update (macOS)
Consumes codex-app-mirror’s Sparkle appcast, downloads only the delta between versions, verifies EdDSA signatures byte-for-byte, rolls back on failure
🪟 Windows
MSIX / portable install and staged updates; MSIX health check after install, with a warning on stripped systems
🆕 Self-update
The Manager updates itself via R2 (global) + IHEP S3 (China), with GitHub fallback; signatures sign the bytes, so a byte-identical mirror stays valid
🌏 Reachable in China
Self-update and payload downloads share one mirror link, auto-routed by region (IHEP in China, R2 elsewhere) — transparent to users
🎨 Warm material UI
OKLCH palette, material depth, polished dark + light themes, GSAP-orchestrated entrances and transitions
🌐 11 languages
Auto-selected from the system locale, including Arabic RTL
🍎 Transparent signing status
macOS Developer ID signing + Apple notarization; the Windows installer is not Authenticode-signed yet, while self-update artifacts carry the Tauri updater signature
Download & install
macOS — Homebrew (recommended)
brew install --cask wangnov/tap/codex-app-manager
Direct download
Grab your platform’s file from the latest GitHub Release (global), or use the agentsmirror mirror (no VPN needed in China; a Cloudflare Worker routes by region — IHEP for mainland China, R2 elsewhere):
The macOS builds are Developer ID signed + Apple notarized, so Gatekeeper won’t block first launch. The Windows installers (CodexAppManager_x64-setup.exe / CodexAppManager_arm64-setup.exe) are not Authenticode-signed yet, so SmartScreen may warn on first run; the Tauri updater signature used for in-app updates verifies bytes only and is not Windows publisher trust. The SignPath Foundation application is no longer being pursued; the project is instead planning a paid cloud-HSM certificate, and current downloads must not be described as signed until one is actually configured and verified. See the code signing policy and Windows signing and verification.
After downloading, compare the file with SHA256SUMS from the same GitHub Release. Use PowerShell on Windows or shasum on macOS:
The mirror links always resolve to the latest release — /manager/latest/ is auto-resolved to the current version by the Cloudflare Worker, with no per-release edits; after install, the Manager also keeps itself up to date via in-app self-update (below).
Once the Manager is installed, it installs and updates the actual Codex desktop app for you — you don’t need to download Codex separately.
Self-update (the Manager itself)
The Manager ships the Tauri updater and checks for new versions of itself in this order:
https://codexapp.agentsmirror.com/manager/latest.json — its own mirror: R2 globally, auto-failover to IHEP S3 for mainland China
The signatures in latest.json sign the installer bytes, not the URL, so the mirror only re-hosts the bytes verbatim and rewrites the download URL — the signature stays valid. On every stable release, CI syncs the artifacts and a rewritten latest.json to both mirrors (installers under a versioned path …/manager/<version>/… so long caching is safe; latest.json at the fixed root with a short cache), so self-update never depends on GitHub — which matters most inside China.
Managing & updating Codex itself
The Manager manages the Codex desktop payload through the upstream mirror:
macOS: reads the mirror’s Sparkle appcast (arm64 / x64), plans against the installed build, prefers the delta enclosure, verifies the Sparkle signature, then swaps in place with rollback on failure; falls back to the full archive when no delta matches.
Windows: fetches the MSIX / portable build from the mirror and stages the update, with a configurable install directory and a post-install health check.
Codex skins (asset-based UI themes)
The Manager is the official runtime for awesome-codex-skins — the .codexskin standard, toolchain & gallery:
Online skin library: the theme page pulls skins.agentsmirror.com for one-click installs (sha256-verified downloads);
Try-on: live hot-swap on a running Codex, nothing persisted, instantly revertible; Apply: persistent, incl. native accent/font config; Restore: one click back to stock;
Import: pick or drag a .codexskin straight onto the theme page;
Skins inject over CDP — no app file is modified, the signature stays intact; every preview is a real screenshot taken under an automated quality gate. Want to make your own? The production line (an agent skill for both Claude Code and Codex) lives in awesome-codex-skins.
How it works
Detect → plan → execute
The app first probes the local Codex install state and platform capabilities, produces an install / update / uninstall plan, and only then performs destructive operations (with a version + signature check before the swap to guard against TOCTOU).
Two-tier mirror + geo routing
Self-update and payload downloads share the codexapp.agentsmirror.com link, fronted by a Cloudflare Worker: global traffic is served straight from R2, mainland-China traffic is routed by CF-IPCountry to a presigned IHEP S3 URL — one link, auto-routed to the fastest node.
Release pipeline
Pushing a v* tag triggers release.yml: four-platform build (with automatic retry on transient download hiccups) → macOS inside-out Developer ID signing + notarization + updater repackage → Windows updater artifact signing → publish the GitHub Release → auto-sync to the R2 + IHEP mirror.
Ecosystem: codex-app-mirror
The Manager is the downstream client of codex-app-mirror. The mirror distributes the official Codex installers verbatim, verifiably, and reachably inside China, and serves the Sparkle incremental-update feed; the Manager turns those into a local install-and-update experience. Both stay narrow and stable, with clear responsibilities.
Tech stack & local development
Frontend: React 19 · TypeScript · Vite · GSAP
Shell: Tauri v2 (frameless popover window)
Backend: Rust command layer with app services / ports / platform adapters; two standalone crates codex-mac-engine (Sparkle) and codex-win-engine (MSIX/portable)
npm install
npm run tauri:dev # local development
npm run check # type-check
npm run tauri:build # local (unsigned) build
Non-goals
Does not modify or repackage Codex installers
Does not bypass OpenAI / Microsoft authorization or local install policies
Does not forge or recompute Sparkle signatures (official signatures are copied verbatim)
Is not a replacement for official OpenAI / Microsoft Store distribution
Policy and privacy
Code signing policy: signing provider plan (SignPath Foundation is no longer being pursued), project roles, per-request human approval, artifact scope, and the verification required before production signing can go live.
Privacy policy: Manager update checks, download-source and proxy behavior, website local storage, local diagnostics, and third-party connection metadata.
Acknowledgements
LINUX DO community — the home for feedback on install experience, update links, and bug reports.
Institute of High Energy Physics, Chinese Academy of Sciences (IHEP) — provides the S3 mirror storage that keeps self-update and downloads fast and reachable inside mainland China.
Star History
License
MIT. Not affiliated with or endorsed by OpenAI or Microsoft.
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4)
评论