codex-invite-helper

Move a Codex invite handoff through the official UI without exposing tokens, cookies, or account data.

codex-invite-helper is a tiny standalone HTML helper for people who need to send a legitimate Codex invite from an account they already control. It keeps the sensitive part of the handoff small and inspectable: paste one recipient email, copy it into the official OpenAI Codex or ChatGPT invite UI, and record the action only after the official UI accepts it.

It has the same practical shape as codex-reset: one narrow Codex workflow, no backend, no dependency chain, and clear limits. Codex Reset is now the broader long-term home for reset-credit and Codex helper workflows; this repo intentionally stays alive as the minimal standalone invite handoff variant.

What This Solves

Some Codex invite and reset workflows are visible only in browser or extension surfaces. If the operator is working from Linux, a server, a terminal-heavy setup, or a coordination chat, the risky part is usually not the email itself. The risky part is mixing account cookies, tokens, chat context, copied notes, and unclear confirmation steps.

This helper gives the operator a local, readable handoff surface:

• normalize and mask the recipient email before copying
• copy a short checklist for the official invite UI
• copy a recipient note after the official UI accepts the invite
• avoid storing or transmitting anything

Boundaries

• It does not send invites.
• It does not call OpenAI endpoints.
• It does not read cookies, local storage, tokens, auth files, or account data.
• It does not make network requests.
• It is not a marketplace, queue, broker, reseller, farming tool, or growth loop.
• The official OpenAI UI remains the authority for eligibility and sending.

Use

Open the raw helper locally:

curl -fsSL https://raw.githubusercontent.com/aaamosh/codex-invite-helper/main/invite-helper.html \
  -o codex-invite-helper.html
xdg-open ./codex-invite-helper.html

Or clone the repo and open invite-helper.html in a browser. Because the file uses a strict Content Security Policy with connect-src 'none', it is designed to stay useful even when inspected offline.

Verify

npm test

The test checks that the helper stays standalone, ASCII-only, network-free, and free of old bot-specific or public promo-style language.

Source Of Truth

• README.md: purpose, boundaries, usage, and verification.
• invite-helper.html: the shipped standalone helper.
• test/invite-helper.test.mjs: guardrails for standalone and no-network behavior.

Documentation Contract

Any meaningful change to helper behavior, public copy, privacy boundaries, distribution URLs, or verification requirements must update this README in the same commit.

License

MIT