Remodex Relay

This is a WebSocket relay service used by the Remodex pairing flow. It enables secure communication between your Mac and iPhone for the Remodex application.

What It Does

• Accepts WebSocket connections at /relay/{sessionId}
• Pairs one Mac host with one live iPhone client for a session
• Forwards secure control messages and encrypted payloads between Mac and iPhone
• Logs only connection metadata and payload sizes, not plaintext prompts or responses
• Exposes lightweight stats for a health endpoint

What It Does Not Do

• It does not run Codex
• It does not execute git commands
• It does not contain your repository checkout
• It does not persist the local workspace on the server

Security Model

Remodex uses the relay as a transport hop, not as a trusted application server. The pairing QR gives the iPhone the bridge identity public key plus short-lived session details. The iPhone and bridge perform a signed handshake, derive shared AES-256-GCM keys with X25519 + HKDF-SHA256, and then encrypt application payloads end to end.