Codex Inner IDE v0.4.0 Preview

Codex Inner IDE v0.4.0 Preview

Highlights

• Browser-first real IDE for validated Codex Desktop builds, with automatic native-window fallback.
• Authenticated loopback HTTP bridge on a random port, token-in-fragment bootstrap, streaming events, Origin checks, a 16 MiB request limit, and restrictive CSP.
• Multi-client dirty state, active edit context, Save All coordination, heartbeat, disconnect, and service-restart handling.
• Python, Java, JavaScript, TypeScript, HTML, CSS, JSON, Markdown, and Plain Text language actions.
• Structured missing-runtime Setup guidance with copy-only commands, official downloads, and live Recheck.
• Java discovery through JAVA_HOME, Workspace .jdk, system JDKs, Homebrew, and PATH.
• Multi-language local completion, recent Workspace switching, redesigned file tree, collapsible sidebar, and Auto / Light / Dark themes.
• Development Vite mode is explicitly labelled Demo host; demo runtimes no longer appear as real installed environments.

Security boundaries

• The Companion App binds only to 127.0.0.1.
• Browser workspace APIs require the per-process token and same-origin requests.
• Runtime setup commands are never executed by the IDE.
• The Codex app, ASAR, signature, and private IPC are not modified.
• The native WKWebView Bridge and Unix Socket MCP Bridge remain available.

Artifacts

• Codex.Inner.IDE-v0.4.0-preview-macos-arm64.zip
• Codex.Inner.IDE-v0.4.0-preview-macos-arm64.zip.sha256
• codex-inner-edit-v0.1.0.zip
• codex-inner-edit-v0.1.0.zip.sha256

This preview is ad-hoc signed and is not notarized.

Compatibility note

The authenticated Browser page and native fallback were live-validated with
Codex Desktop 26.715.72359. The injected Sidepanel-to-Browser handoff remains
version-gated preview behavior because it requires a user-approved Codex relaunch
with a random loopback-only CDP port. Unknown versions and failed handshakes use
the native IDE.