WebUI & Remote Access

In addition to the interactive terminal environment (TUI), JeikCode features an integrated web-based graphical user interface. It not only provides a visual canvas for multi-turn conversations and workspace management in your browser, but also shares the exact live session context with your terminal in real time, supporting flexible remote access across local networks and the public internet.

---

Ways to Launch WebUI

Method 1: One-Click Launch from Interactive Terminal

In any active JeikCode terminal session, simply type the slash command:

/webui

This will automatically:

1. Start a lightweight HTTP / WebSocket server on your local machine (default: 127.0.0.1:13457);
2. Open your default web browser to http://127.0.0.1:13457/?token=<security-token>;
3. Synchronize your active terminal session with the browser interface in real time.

To stop the WebUI service, type in your terminal:

/webui stop

---

Method 2: Launch Directly via CLI Command

In headless server environments, or when you want to bypass the terminal TUI, pass arguments directly from the command line:

# Listen on all interfaces with an authentication token (Recommended)
jeikcode --host 0.0.0.0 --port 13457 --token your-secret-token

# No-token mode (Only recommended in trusted private LAN/VPN environments)
jeikcode --host 0.0.0.0 --port 13457 --no-token

# Or use the equivalent serve subcommand
jeikcode serve --host 127.0.0.1 --port 8080

💡 Tip: When launched with --host on Linux systems, JeikCode automatically detects systemd and prompts you to optionally register the service as a background daemon for automatic reboot persistence.

---

Secure Remote & Mobile Access Guide

Security First: Never Expose Bare Ports Publicly

JeikCode possesses privileges to execute arbitrary shell commands and edit local code files. Never expose an unauthenticated --host 0.0.0.0 port directly to the open internet without firewall or encryption layers!

Option 1: Private Overlay Network (EasyTier / Tailscale / WireGuard / P2P VPN)

1. Install EasyTier, Tailscale, or WireGuard on your development machine and your mobile device/laptop;
2. Bind the server to your VPN address:

   jeikcode --host <VPN-IP> --port 13457 --token your-token

3. Connect from your mobile browser using the encrypted VPN IP with zero public exposure risk.

Option 2: SSH Port Forwarding Tunnel (SSH Tunnel)

When developing on a remote cloud server:

# Run port forwarding on your local workstation
ssh -N -L 13457:127.0.0.1:13457 user@your-remote-server

Open http://127.0.0.1:13457/?token=... in your local browser to access the remote session securely.

Option 3: Nginx Reverse Proxy + HTTPS + HTTP Basic Auth

When providing shared access over a custom domain, enforce SSL encryption and password authentication:

location / {
    # Enforce basic HTTP authentication
    auth_basic "JeikCode Workspace";
    auth_basic_user_file /etc/nginx/.htpasswd;

    # Proxy to local daemon
    proxy_pass http://127.0.0.1:13457;
    proxy_http_version 1.1;

    # Mandatory WebSocket headers for Live Sync
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
}

Option 4: Public IPv6 + DDNS + Token Access (Blazing Fast & Recommended)

When launched with standard --host 0.0.0.0, JeikCode by default automatically attempts dual-stack listening for both IPv4 and IPv6 ([::]), with no complex configuration required. Most residential broadband and mobile networks now come with native public IPv6 addresses:

1. Server Startup (Dual-Stack by Default):

   # --host 0.0.0.0 automatically attempts dual-stack (IPv4 + IPv6) listening with a secure token
   jeikcode --host 0.0.0.0 --port 13457 --token your-secret-token

2. Pair with Dynamic DNS (DDNS): If you own a domain, use a DDNS tool (such as DDNS-Go, Cloudflare DDNS, or cloud provider DNS) to automatically map your host's dynamic IPv6 to a subdomain (e.g. jeik.yourdomain.com);
3. Blazing-Fast Direct Access: Access directly from your phone or remote laptop via http://jeik.yourdomain.com:13457/?token=your-secret-token (or http://[your-ipv6-address]:13457/?token=...) without third-party VPN overhead, secured by your secret token.