web-edit 0.1a0

#summary

web-edit 0.1a0

While using Codex Remote from his phone, Simon Willison wanted to edit a project credentials file without sending its contents through the language model. He had Codex build a small mobile-friendly web editor that an agent could start and he could reach over his Tailscale network. The release post describes the need and the new interface, not a completed credential edit.

The October 12 release code confines ordinary file paths to a selected directory and checks for edits made elsewhere before overwriting a file. It defaults to localhost and can bind to a Tailscale address, but the web app has no login: any client permitted to reach it can use its file operations. Tailscale access depends on the owner’s network policy, which is not published. Keeping bytes out of a chat prompt does not show that a host agent with file access cannot read them. There is no public review of this deployment or follow-up after a real secret rotation.

Read at simonwillison.net · 2 min