Skip to content

v0.2.4: persistent local signing

Choose a tag to compare

View all tags
@infinityf4p infinityf4p released this 05 Sep 11:47
v0.2.4
87060bb
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Fix repeated Keychain authorization caused by changing ad-hoc signatures. Patches now reuse one private local signing certificate, keeping the same designated requirement across updates.

First migration: when macOS asks for access to Codex Storage Key, choose Always Allow to authorize the new identity. Deny or one-time Allow does not establish persistent access. Unrelated macOS prompts are unaffected.

The dedicated signing keychain is registered in the current user's search list. Existing Keychain item permissions, the default keychain and system trust settings are preserved. The private key is non-extractable and sign-only. Local signing material stays outside the app, automatic-worker updates and release packages. Missing or mismatched identity files cause an error instead of silently generating a new certificate.

Verified on macOS arm64 with Codex 26.901.41600 (7982): 37 core/native tests, nine actual Keychain identity tests, 12 transaction/interruption tests, and the isolated App UI test. Two different signed builds can read the same dummy item without prompts; a different certificate cannot.

Use the existing one-command installer or Install or Update.command. Installation upgrades the patch to revision 4 without a stability delay. Details: persistent local signing.

Windows Preview

Windows support is available as additional assets on this release, built from commit 89a0d2fc5a4cf39492df22885fe224b86ef71227 on main after the macOS v0.2.4 tag.

  • Download install.cmd for one-click installation or updates, including automatic patch monitoring.
  • Download uninstall.cmd to quit local copies and remove Fast Switch installation files, while preserving Codex's personal profile.
  • codex-fast-switch-0.2.4-windows.zip includes the tools and dependencies. SHA256SUMS-windows.txt contains their checksums.
  • Windows Fast controls follow the macOS compact layout. The latest UI, setup and complete uninstall changes were not tested locally, at the user's request.

For the Windows source, use codex-fast-switch-windows-source.zip or the linked commit. GitHub's automatic source archives still refer to the macOS v0.2.4 tag. The existing macOS ZIP, installer and checksums are unchanged.

Assets 11
Loading