[[providers]]


id = "MuskAI" # Provider ID; customize as needed


name = "MuskAI" # Provider display name; customize as needed


base_url = "Copy the Base URL from User Center > API Keys"


models = [] # Keep this empty; the model list is fetched dynamically


experimental_bearer_token = "sk-xxxxxxxxxxxx" # Replace with your API Key


wire_api = "responses" # Must be set to "responses"


requires_openai_auth = true # Must be true to pass the client's authentication checks

$ErrorActionPreference = "Stop"


$workspace = "C:\Users\11854\Documents\Codex\2026-05-16\chatgpt-codex"
$package = Get-AppxPackage OpenAI.Codex
if (-not $package) {
  throw "OpenAI.Codex package not found."
}


$asar = Join-Path $package.InstallLocation "app\resources\app.asar"
$patched = Join-Path $workspace ("app.asar.patched-" + $package.Version)
$backup = Join-Path $workspace ("app.asar.backup-" + $package.Version + "-" + (Get-Date -Format "yyyyMMdd-HHmmss"))
$log = Join-Path $workspace "patch-current-codex-asar.log"
$config = "C:\Users\11854\.codex\config.toml"


function Log($message) {
  "$(Get-Date -Format o) $message" | Add-Content -LiteralPath $log -Encoding UTF8
}


function IndexOfBytes([byte[]]$haystack, [byte[]]$needle, [int]$start) {
  for ($i = $start; $i -le $haystack.Length - $needle.Length; $i++) {
    $ok = $true
    for ($j = 0; $j -lt $needle.Length; $j++) {
      if ($haystack[$i + $j] -ne $needle[$j]) {
        $ok = $false
        break
      }
    }
    if ($ok) { return $i }
  }
  return -1
}


function New-PatchedAsar {
  $bytes = [System.IO.File]::ReadAllBytes($asar)
  $encoding = [System.Text.Encoding]::UTF8
  $text = $encoding.GetString($bytes)
  $pattern = "function xV(e){return Object.hasOwn(e,``remote_control``)||SV(e.features)&&Object.hasOwn(e.features,``remote_control``)}"
  $patchedPattern = "function xV(e){return Object.hasOwn(e,``remote_xontrol``)||SV(e.features)&&Object.hasOwn(e.features,``remote_xontrol``)}"
  $needle = "remote_control"
  $replacement = [System.Text.Encoding]::UTF8.GetBytes("remote_xontrol")


  $idx = $text.IndexOf($pattern, [System.StringComparison]::Ordinal)
  if ($idx -lt 0) {
    if ($text.IndexOf($patchedPattern, [System.StringComparison]::Ordinal) -ge 0) {
      Log "Installed app.asar already appears patched."
      return $false
    }
    throw "Target xV function pattern not found."
  }


  $positions = @()
  $pos = $idx
  $end = $idx + $pattern.Length
  while (($pos = $text.IndexOf($needle, $pos, [System.StringComparison]::Ordinal)) -ge 0 -and $pos -lt $end) {
    $positions += $encoding.GetByteCount($text.Substring(0, $pos))
    $pos += $needle.Length
  }
  if ($positions.Count -ne 2) {
    throw "Expected 2 remote_control occurrences in target xV function, found $($positions.Count)."
  }


  foreach ($p in $positions) {
    [Array]::Copy($replacement, 0, $bytes, $p, $replacement.Length)
  }


  [System.IO.File]::WriteAllBytes($patched, $bytes)
  Log "Created patched asar: $patched offsets=$($positions -join ',')"
  return $true
}


function Ensure-ConfigFlag {
  $bytes = [System.IO.File]::ReadAllBytes($config)
  $text = [System.Text.Encoding]::UTF8.GetString($bytes)
  if ($text.Length -gt 0 -and [int][char]$text[0] -eq 0xFEFF) {
    $text = $text.Substring(1)
  }
  $changed = $false
  if ($text -match '(?m)^\s*remote_control\s*=') {
    if (($bytes.Length -ge 3 -and $bytes[0] -eq 0xEF -and $bytes[1] -eq 0xBB -and $bytes[2] -eq 0xBF)) {
      $encoding = [System.Text.UTF8Encoding]::new($false)
      [System.IO.File]::WriteAllText($config, $text, $encoding)
      Log "Removed UTF-8 BOM from config.toml."
    }
    return
  }
  if ($text -match '(?m)^\s*remote_connections\s*=\s*true\s*$') {
    $text = $text -replace '(?m)^(\s*remote_connections\s*=\s*true\s*)$', "`$1`r`nremote_control = true"
    $changed = $true
  } elseif ($text -match '(?m)^\s*\[features\]\s*$') {
    $text = $text -replace '(?m)^(\s*\[features\]\s*)$', "`$1`r`nremote_control = true"
    $changed = $true
  } else {
    $text += "`r`n[features]`r`nremote_control = true`r`n"
    $changed = $true
  }
  if ($changed) {
    $encoding = [System.Text.UTF8Encoding]::new($false)
    [System.IO.File]::WriteAllText($config, $text, $encoding)
    Log "Added remote_control to config.toml."
  }
}


function Get-CodexPackageProcesses {
  Get-CimInstance Win32_Process |
    Where-Object {
      $_.ExecutablePath -and
      $_.ExecutablePath.StartsWith($package.InstallLocation, [System.StringComparison]::OrdinalIgnoreCase) -and
      ($_.Name -eq "Codex.exe" -or $_.Name -eq "codex.exe")
    }
}


Log "Package version: $($package.Version)"
Log "Target asar: $asar"
New-PatchedAsar | Out-Null
Ensure-ConfigFlag


Log "Waiting for Codex package processes to exit."
while ($true) {
  $running = @(Get-CodexPackageProcesses)
  if ($running.Count -eq 0) {
    break
  }
  Log "Still waiting for Codex processes: $($running.ProcessId -join ',')"
  Start-Sleep -Seconds 2
}


try {
  & takeown /F $asar | Out-Null
  $currentUser = [System.Security.Principal.WindowsIdentity]::GetCurrent().Name
  & icacls $asar /grant "$($currentUser):(F)" | Out-Null
  Log "Granted temporary app.asar permission."
  $cipherOutput = & cipher /d $asar 2>&1
  Log "Requested app.asar decryption/unprotect exit=$LASTEXITCODE output=$($cipherOutput -join ' | ')"
} catch {
  Log "Failed to grant temporary app.asar permission: $($_.Exception.Message)"
  throw
}


if (-not (Test-Path -LiteralPath $backup)) {
  [System.IO.File]::WriteAllBytes($backup, [System.IO.File]::ReadAllBytes($asar))
  Log "Created backup: $backup"
}


try {
  $stream = [System.IO.File]::Open($asar, [System.IO.FileMode]::Open, [System.IO.FileAccess]::ReadWrite, [System.IO.FileShare]::None)
  $stream.Close()
} catch {
  Log "app.asar is still not writable: $($_.Exception.Message)"
  throw
}


Copy-Item -LiteralPath $patched -Destination $asar -Force
Log "Installed patched app.asar."


try {
  $currentUser = [System.Security.Principal.WindowsIdentity]::GetCurrent().Name
  & icacls $asar /remove:g $currentUser | Out-Null
  & icacls $asar /setowner "NT SERVICE\TrustedInstaller" | Out-Null
  Log "Restored app.asar owner/temporary grant."
} catch {
  Log "Failed to restore app.asar owner/temporary grant: $($_.Exception.Message)"
}


Ensure-ConfigFlag
Log "Done."