@friuns/codex-web-local
Advanced tools
A lightweight web interface for Codex that runs on top of the Codex app-server, allowing remote access from any browser
A self-contained Android APK that bundles OpenClaw + OpenAI Codex CLI with a complete Linux environment. Two AI agents, one app, your pocket.
Download APK · OpenClaw Docs · Project Spec
This project puts two AI coding agents on your Android phone in a single APK:
Both run inside an embedded Linux environment extracted from the APK. No root required. No Termux dependency. Everything is self-contained.
The app authenticates once via OpenAI OAuth, and both agents share the same credentials. OpenClaw uses openai-codex/gpt-5.3-codex by default; Codex CLI uses its own codex app-server backend.
| Feature | Description | |
|---|---|---|
| OpenClaw Dashboard | Full Control UI accessible from the sidebar — chat, agents, sessions, skills | |
| Codex Chat | Conversational coding agent with streaming responses and reasoning visibility | |
| Execute Commands | Both agents run shell commands in the embedded Linux environment | |
| Multi-Thread Sessions | Parallel conversations, each with its own context and working directory | |
| Full Auto-Approval | No permission popups — danger-full-access mode by default | |
| Background Execution | Foreground service keeps everything alive when you switch apps | |
| OAuth Login | One-time browser-based OpenAI auth — shared between both agents | |
| Offline Bootstrap | Linux environment extracted from APK — works without internet after setup |
git clone https://github.com/friuns2/openclaw-android-assistant.git
cd openclaw-android-assistant
npm install && npm run build
cd android && bash scripts/download-bootstrap.sh
bash scripts/build-server-bundle.sh && ./gradlew assembleDebug
adb install -r app/build/outputs/apk/debug/app-debug.apk
adb shell am start -n com.codex.mobile/.MainActivity
Or download the latest APK directly.
┌──────────────────────────────────────────────────────────┐
│ Android APK │
│ │
│ ┌────────────┐ ┌──────────────────────────────────────┐ │
│ │ WebView │ │ APK Assets │ │
│ │ (Vue.js) │ │ bootstrap-aarch64.zip │ │
│ └─────┬──────┘ │ server-bundle/ (Vue + Express) │ │
│ │ │ proxy.js / bionic-compat.js │ │
│ │ └──────────────────────────────────────┘ │
│ ┌─────▼────────────────────────────────────────────────┐ │
│ │ CodexServerManager │ │
│ │ Bootstrap → Node.js → Codex + OpenClaw → Auth │ │
│ │ Proxy → Gateway → Control UI → Web Server │ │
│ └─────┬────────────────────────────────────────────────┘ │
│ │ │
│ ┌─────▼────────────────────────────────────────────────┐ │
│ │ Embedded Linux ($PREFIX) │ │
│ │ │ │
│ │ codex-web-local → :18923 (HTTP, WebView target) │ │
│ │ └─ codex app-server (native Rust/musl, JSON-RPC) │ │
│ │ │ │
│ │ openclaw gateway → :18789 (WebSocket) │ │
│ │ openclaw ctrl UI → :19001 (static file server) │ │
│ │ │ │
│ │ proxy.js → :18924 (CONNECT proxy, DNS/TLS) │ │
│ └───────────────────────────────────────────────────────┘ │
└──────────────────────────────────────────────────────────┘
| Port | Service | Purpose |
|---|---|---|
| 18789 | OpenClaw Gateway | WebSocket control plane for agents, sessions, tools |
| 18923 | codex-web-local | HTTP server with Vue.js UI (WebView target) |
| 18924 | CONNECT Proxy | DNS/TLS bridge for musl-linked Codex binary |
| 19001 | Control UI Server | Static file server for OpenClaw dashboard |
OpenClaw is installed alongside Codex and runs as a WebSocket gateway on the device. The installation is complex because OpenClaw depends on koffi (a native FFI module) which requires a full C/C++ toolchain to build from source on Android.
make/cmake to replace hardcoded Termux shell paths with /system/bin/sh, creates stub headers (spawn.h, android/api-level.h, renameat2_shim.h)npm install -g --ignore-scripts openclaw@latest (689 packages, skip native builds)CC=clang CXX=clang++ LDFLAGS="-fuse-ld=lld"/tmp, /bin/sh, /bin/bash, /usr/bin/env in all JS files to $PREFIX/...Authentication is automatic from the existing Codex OAuth login:
configureOpenClawAuth() writes openclaw.json with gateway token auth + dangerouslyDisableDeviceAuthaccess_token from ~/.codex/auth.json is copied into auth-profiles.json as an openai-codex:codex-cli profile with type: "token"openai-codex/gpt-5.3-codex — uses the same OpenAI account, no separate API key needed~/.openclaw/) and agent-specific (~/.openclaw/agents/main/agent/) directoriesThe bionic-compat.js shim (loaded via NODE_OPTIONS="-r ...") patches:
process.platform — returns "linux" instead of "android"os.cpus() — returns a valid CPU array (Android's /proc/cpuinfo format differs)os.networkInterfaces() — handles Android's interface namingThe APK bundles Termux's bootstrap-aarch64.zip — a minimal Linux userland with sh, apt-get, dpkg-deb, SSL certificates, and core libraries. On first launch, it's extracted to the app's private storage at $PREFIX = /data/user/0/com.codex.mobile/files/usr.
The Codex CLI ships a 73MB native Rust binary compiled for aarch64-unknown-linux-musl. npm refuses to install it on Android, so we download the tarball directly from the npm registry and extract it manually.
The musl-linked binary reads /etc/resolv.conf for DNS — which doesn't exist on Android. A Node.js CONNECT proxy on port 18924 bridges this: Node.js uses Android's Bionic DNS resolver, and the native binary routes all HTTPS through HTTPS_PROXY.
Android 10+ enforces SELinux W^X (Write XOR Execute) policies. We use targetSdk = 28 to bypass this, same approach as Termux (F-Droid).
apt-get download + dpkg-deb)bionic-compat.js extractionapproval_policy = "never")codex login via browser)codex exec "say hi")http://127.0.0.1:18923/android/
├── app/src/main/
│ ├── AndroidManifest.xml
│ ├── assets/
│ │ ├── proxy.js # CONNECT proxy (DNS/TLS bridge)
│ │ ├── bionic-compat.js # Android platform shim
│ │ └── server-bundle/ # Pre-built Vue + Express + deps
│ └── java/com/codex/mobile/
│ ├── BootstrapInstaller.kt # Linux environment setup
│ ├── CodexForegroundService.kt # Background persistence
│ ├── CodexServerManager.kt # Install, auth, proxy, OpenClaw, server
│ └── MainActivity.kt # WebView + setup orchestration
├── scripts/
│ ├── download-bootstrap.sh # Fetch Termux bootstrap
│ └── build-server-bundle.sh # Bundle frontend into APK assets
src/ # codex-web-local (TypeScript + Vue)
├── api/ # RPC client, gateway, SSE
├── components/ # Vue components (composer, threads, sidebar)
├── composables/ # useDesktopState (reactive state)
├── server/ # Express + codex app-server bridge
└── cli/ # CLI entry point
| Layer | Technology | Version |
|---|---|---|
| AI Gateway | OpenClaw | 2026.2.21-2 |
| AI Agent | OpenAI Codex CLI | 0.104.0 |
| Model | gpt-5.3-codex (via Codex OAuth) | - |
| Runtime | Node.js (via Termux) | 24.13.0 |
| Build Tools | Clang/LLVM, CMake, Make, LLD | 21.1.8 / 4.2.3 |
| Frontend | Vue.js 3 + Vite + TailwindCSS | 3.x |
| Backend | Express.js + JSON-RPC bridge | - |
| Android | Kotlin + WebView | 2.1.0 |
| Linux | Termux bootstrap (aarch64) | - |
| Problem | Solution |
|---|---|
| App crashes on launch | Check adb logcat | grep CodexServerManager |
| "Permission denied" executing binaries | Ensure targetSdk = 28 in build.gradle.kts |
| OpenClaw gateway fails to start | Check ~/.openclaw/openclaw.json config and auth-profiles |
| koffi build fails | Verify clang/cmake/make are installed and binary-patched |
| "No address associated with hostname" | Check internet; CONNECT proxy may not be running |
| Login page doesn't open | Ensure a default browser is set on the device |
| App killed in background | Grant battery optimization exemption in Android settings |
Two AI agents. One APK. Your pocket.
FAQs
A lightweight web interface for Codex that runs on top of the Codex app-server, allowing remote access from any browser
We found that @friuns/codex-web-local demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.
Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.