Codex Remote 0.5.0
Codex Remote 0.5.0 — the first notarised build, and Amazon EC2 working end to end.
Signed with a Developer ID certificate and notarised by Apple, so a downloaded copy opens normally. Earlier builds were ad-hoc signed, which macOS reported as "damaged"; the Homebrew cask no longer has to strip the quarantine flag.
AWS: six bugs, each of which only ever appeared on EC2.
- A Mac named with a possessive ("Pandelis's MacBook Pro", with a curly apostrophe) put a non-ASCII character in the SSH key comment, and EC2's ImportKeyPair rejects the whole request. The security group description carried an em dash and failed the same way.
- AMI ids are region-scoped, so asking for one region while taking the recommended image from another failed with "collecting instance settings: couldn't find resource".
- A provision that failed before the instance existed never ran tofu destroy, orphaning the key pair and security group and making every retry fail with "already exists".
- Amazon's Ubuntu images log in as ubuntu rather than root, so the bootstrap could not write to /etc.
- set -euo pipefail plus a grep that matched nothing ended the script silently, reporting a connected machine as failed.
Also: a real app icon (and three bugs that meant it never shipped), a share card for codexremote.io, and a fix to the cask's zap list, which still named the pre-0.4 home.