feat: add standalone Web/PWA with shared CH threads

.github/workflows/ci.yml

@@ -92,6 +92,10 @@ jobs:
           --exclude 'packages/renderer-extension/test/**'
           --exclude 'tools/gate-claude-code/run.test.mjs'
 
+      # Real Launcher + Node service, with isolated HOME/data and fake Harnesses.
+      - name: Test independent Host lifecycle
+        run: npm run test:shared-host
+
       # Rust formatting is already covered by the Linux x64 formatting step.
       - name: Check Rust
         run: >
@@ -146,6 +150,8 @@ jobs:
         run: npm ci --prefer-offline
 
       # Linux x64 owns TS tests; ARM64 verifies native code and the installed package.
+      - name: Test independent Host lifecycle
+        run: npm run test:shared-host
 
       - name: Check Rust
         run: >

.gitignore

@@ -18,6 +18,9 @@
 
 # Dependencies and tool caches
 node_modules/
+.work/
+.dsh-build/
+/apps/web-ui/**/lib/
 .npm/
 .cache/
 .wix/

.prettierignore

@@ -15,3 +15,8 @@ package-lock.json
 Cargo.lock
 # Generated models.dev price snapshot.
 packages/host-runtime/src/model-prices.generated.ts
+# Pinned upstream browser protocol codecs.
+apps/web-ui/**/generated/
+# Imported browser build outputs and local diagnostics.
+apps/web-ui/**/lib/
+.work/

AGENTS.md

@@ -83,7 +83,7 @@ Existing Harness integration and Desktop update audit skills remain applicable t
 ## Testing & Completion
 
 - Choose build and validation commands from `package.json`, not a copied command catalog. For focused tests, use the repository configuration in `tests/vitest.config.js` or `tests/e2e/playwright.config.js`, and the owning `Cargo.toml` for Rust test features.
-- To build and launch from source, run `npm start` at the repository root; `npm start -- --no-build` reuses existing artifacts. On macOS/Windows this stops running Codex Desktop processes before launch. Use it when launching is intended, not as a routine validation command; implementation is in `tools/dev-desktop/run.mjs`.
+- To build and launch from source, run `npm start` at the repository root for Desktop or `npm start web` for Web; both restart the shared Host and the corresponding interface, interrupting Host tasks. `--no-build` reuses existing artifacts but still restarts. On macOS/Windows the Desktop command stops running Codex Desktop processes before launch. Use it when launching is intended, not as a routine validation command; implementation is in `tools/dev-desktop/run.mjs`.
 - Small, low-risk changes do not require tests. For high-risk or cross-package changes, or when explicitly requested, add focused tests for changed behavior and boundary conditions; do not run full test suites by default.
 - Do not claim a check passed unless it was executed. Report skipped or blocked checks and the reason.
 - A change is complete only when implementation, contracts, tests, and affected documentation agree.

README.md

@@ -62,6 +62,10 @@ https://github.com/user-attachments/assets/c48192d7-23ff-4f6e-b61a-6345a655bb76
   <img width="90%" src="docs/imgs/codexhost-native-overview.png" alt="Claude Code, Pi, Grok Build, and Oh My Pi sessions running in Codex Desktop, with Diff review, Fork, Worktree, and Agent switching">
 </div>
 
+## Standalone Web development
+
+This checkout also contains a Web/PWA application. Run `npm ci`, `npm run build:web`, then `npm start web` for an authenticated Web client. The development command restarts the shared Host and this checkout's Web service on the selected port, interrupting running Host tasks. Web and Desktop can each be used alone, share canonical external Threads when both are open, and close without stopping the other or its tasks. Existing saved GUI project metadata remains read-only; no GUI projects are created. This does not launch or restart Desktop. A running older Desktop-owned Host is not taken over; update/restart it separately to transition. `-- --session-source standalone` explicitly selects the independent Harness plugin mode. See [the Web guide](docs/product/standalone-web.md) for connection requirements, plugin distribution and current limitations.
+
 ## Quick Start
 
 **Option 1: npm** (macOS / Windows / Linux)
@@ -84,7 +88,7 @@ Run `codexhost update` to check for the latest release and prepare an upgrade fr
 
 **codexhost does not start, or Codex opens without codexhost features**
 
-Run `codexhost console` (Windows: Start Menu → "codexhost console") to open the local console at `http://127.0.0.1:4399/`. It shows why the last start failed, the Codex Desktop version, Host Runtime logs, and can update codexhost while Codex is not running. It starts together with codexhost: installer launches open it in your browser, and terminal launches print its address.
+Run `codexhost console` (Windows: Start Menu → "codexhost console") to open the local console at `http://127.0.0.1:4399/`. It shows why the last start failed, the Codex Desktop version, Host Runtime logs, and can update codexhost while Codex is not running. It starts together with codexhost: installer launches open it in your browser only when startup or Codex UI integration fails, and terminal launches print its address only when startup fails.
 
 **macOS: "App can't be verified" on first launch**
 
@@ -296,6 +300,8 @@ npm ci
 npm start
 ```
 
+`npm start` rebuilds and restarts the shared Host and Desktop; `npm start web` rebuilds and restarts the shared Host and Web. Both interrupt running Host tasks. `--no-build` skips building but still restarts the selected interface and Host.
+
 To run the current source with a specific runtime version, use `npm start 0.12.0` (prereleases such as `0.13.0-rc.1` are also accepted). Host status, console version and update-check version reporting use this value. Without a version argument the version remains `<workspace-version>-dev`; `npm start 0.12.0 -- --no-build` reuses artifacts after building once. The override lasts for this launch and does not modify version files or publish packages. Source installations still lack packaged self-update resources; remote npm installation downloads the published package with that version, not the local source.
 
 

apps/web-ui/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 DeepSeek
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

apps/web-ui/README.md

@@ -0,0 +1,13 @@
+# CodexHost Web UI
+
+Private browser workspaces imported from the MIT-licensed `deepseek-harness` 0.2.1-alpha.1 Web UI and the local `codexhost-web` fork. The import keeps the selected client plugins, their browser runtime and protocol dependencies, and local CodexHost/mobile changes. It does not include the upstream CLI, release machinery, independent agent execution, or a second Git repository.
+
+The source roster is in `import-manifest.json`. `packages/` and `vendor/` are npm workspaces of the parent CodexHost repository; install dependencies once at that repository root. `npm run build:web:ui` compiles plugin factories with the imported CSS/module-loader preset and builds `apps/web` with Vite. `lib/` and `dist/` are generated and ignored. All Harness execution belongs to the parent repository's Adapters and Web Server, not these browser packages.
+
+The `generated/remote.js` and matching declarations in selected packages are pinned DSH protocol codecs from the imported fork's generated Host descriptors. They are protocol source snapshots, not copies of Harness SDKs or bundled applications. Keep them aligned with the Web Server's DSH protocol compatibility layer; do not generate them from the Desktop Host. The full upstream frontend type-check and test programs are not imported yet; the current integration uses source compilation and the Web Server's browser regression tests.
+
+The right Sidebar also embeds upstream host services: `packages/fs/fs`, `packages/fs/fs-local`, `packages/util/timeout`, `packages/sandbox/sandbox-policy`, `packages/core/scope`, `packages/subprocess/*`, `packages/util/http-proxy`, `packages/util/lazy-require`, and `packages/document/office-to-pdf` are the imported local-filesystem, sandbox-policy, subprocess/PTY, and Office-conversion sources. `packages/host/dsh-web-backend` is the CodexHost adapter that mounts the Typert registry, local filesystem, Connection, gateway, workspace files, Office conversion, subprocess, and terminal services for `packages/web-server`; it supplies only a local Thread's working directory, the sandbox policy's workspace root, and the four Agent fields the terminal controller reads. The imported client plugins are the file tree, document preview, terminal, and sandboxed browser tabs; `packages/test-support/remote-mock` supports their client tests. The one upstream source adaptation in the gateway is `packages/api/gateway/src/index.ts`, which imports the runtime `OperatorPeer` from `src/operator-peer.ts` rather than the Connection plugin root so the embedded backend does not pull the upstream browser-auth and credentials chain; `subprocess-local/src/runner-launch.ts` additionally honors `CODEXHOST_SUBPROCESS_RUNNER` so a packed distribution can run its bundled runner. Dependency patches for FortuneSheet, ExcelJS, and node-pty are copied to the repository `patches/` directory and applied by `scripts/apply-dependency-patches.mjs` after install. `tests/dsh` holds the imported workspace file and terminal-controller tests; they run under Vitest with the same standard-decorator pre-transform the upstream repository uses.
+
+The upstream MIT license is retained in `LICENSE`, framework package licenses remain under `vendor/`, and upstream dependency notices are retained in `THIRD_PARTY_NOTICES.md`. Local import adaptations include private npm manifests, source exports, the selected source build, and removal of the upstream standalone Web Worker preview entry. The root LGPL license does not replace these notices.
+
+See [the Web feature document](../../docs/product/standalone-web.md) for runtime isolation, commands and supported behavior.