What problem does it solve? Opening a local HTTPS SaaS frontend in the Codex in-app browser fails when certificates are untrusted, OIDC environment values are misconfigured, or another worktree owns port 3000. This Skill provides a deterministic, safety-checked workflow to prepare and verify the CogDB saas-frontend at https://localhost:3000 without weakening browser security. ## Core Features & Use Cases - Read-only preflight checks: Validates macOS platform, certificate fingerprints, OIDC .env values, port ownership, and HTTPS probes before any change. - Deterministic repairs: Normalizes four non-secret OIDC keys, generates the Vite basic-ssl certificate, and installs pinned public certificates into the macOS System keychain only after explicit user confirmation. - Browser handoff with verification: Starts the dev server, probes readiness, and hands off to the Codex in-app browser, verifying origin, path, and authenticated SaaS shell before claiming success. - Use Case: A developer needs to demo the CogDB SaaS console inside Codex. The Skill detects a missing Vite certificate, generates it, installs trust after confirmation, restarts the server, and confirms the authenticated page loads at https://localhost:3000/saas. ## Quick Start Ask the agent to use codex-local-saas-browser to prepare and open your local SaaS page in the Codex in-app browser, providing the absolute path to your saas-frontend checkout.