Better Codex v0.2.0-beta.2 — CVM access and client continuity

Better Codex now supports two access routes to the same Mac host: private Tailscale Serve, or an authenticated CVM HTTPS domain with a reverse SSH tunnel. Each installation selects one mode; execution and project credentials remain on the Mac.

• New better-codex cvm command generates a private Caddy site, proxy proof and loopback tunnel script, with a backup of the stopped installation's configuration. It does not remotely change a cloud server, DNS or firewall. Follow CVM deployment.
• Fixes portable startup with a validated HTTPS origin, including the Tailscale route.
• Send/create completion callbacks remain bound to the original conversation after navigation. Cached projects and pins are ready before the first sidebar; a restored list avoids a second loading-logo stage.
• Official renderer import maps preserve one identity for shared modules across resource prefixes, avoiding duplicate initialization.
• Plugin capabilities use a separate header that preserves HTTP Basic login through the CVM.

Download Better-Codex-v0.2.0-beta.2-mac.zip, extract it to a stable location and double-click Install.command. Install and sign in to the official Codex desktop app first. Existing installations: stop the host, use this source checkout, then run its installer/update workflow as described in installation.

Validation: 13 Node boundary tests; 43 checks through the complete portable host and real certificate-verified Caddy HTTPS, including AppHost WebSockets/reconnect, renderer resources, relay and plugins; 14 focused checks against the generated public renderer. An Android WebView fixture reproduces the old duplicate-module error and passes the normalized module map. No model turn or conversation-history write was used. Earlier clean installation and system-tools-only Node/Go bootstrap evidence is retained for the unchanged installer and dependencies.

This remains a beta. Physical phone/PWA behavior, live Tailscale between devices, external CVM DNS/certificate issuance and sustained SSH, Intel startup, and signed-in model execution in the clean portable install remain unverified. The portable CVM profile keeps its rebuildable sync cache on the Mac; it does not install a separate cloud cache. The public mobile client is a PWA, not an Android APK.

Official application assets, account credentials, private deployment data and raw session logs are excluded. The unchanged opencodex-2.1.0-better-codex-source.tar.gz provides complete modified AGPL source, license, lockfile and build instructions. SHA256SUMS.txt covers both archives.

中文：本次补齐 CVM + Mac 与 Mac + Tailscale 两种入口，并同步缓存首屏、发送后切换会话的回调归属及模块重复初始化修复。现有私人部署不因公开发行而切换；真机、外网部署与登录后模型执行仍需各自验收。