Regression: Codex Computer Use helper is damaged after 26.616.41845 auto-update

[GGBondBlueWhale]

Summary

After updating Codex Desktop to version 26.616.41845 and letting it restart automatically, macOS immediately shows the damaged-app warning for the bundled Computer Use helper.

This appears to be a regression: the same Codex Computer Use damaged-app problem occurred in previous builds, seemed to be fixed in the last few versions, and has now returned after the latest update.

Environment

• Codex Desktop version: 26.616.41845
• About window release date: Jun 20, 2026
• macOS: Tahoe 26.5.1
• Device: MacBook Pro 16-inch, Apple M5 Max, 128 GB memory
• Plan: ChatGPT Pro

Steps to reproduce

1. Update Codex Desktop to version 26.616.41845.
2. Let Codex complete the update and restart automatically.
3. After restart, macOS displays the damaged-app warning for Codex Computer Use.

Expected behavior

Codex Desktop should update and restart cleanly, and Codex Computer Use should open normally after the update.

Actual behavior

macOS shows this dialog:

“Codex Computer Use” is damaged and can’t be opened. You should move it to the Trash.

The same dialog also says:

This file was downloaded on an unknown date.

As a result, Computer Use cannot be used after the update.

Regression note

This problem existed in earlier versions, then appeared to be fixed for several builds. It has now returned after the 26.616.41845 update and automatic restart.

Please investigate the update/restart lifecycle for the Codex Computer Use helper, including packaging/signing/notarization/quarantine handling and any stale helper state left across auto-updates.

[github-actions]

Potential duplicates detected. Please review them and close your issue if it is a duplicate.

• Codex Computer Use still reported damaged after 26.611.61049 update and auto-restart #28600

Powered by Codex Action

[rokgregoric]

Also affected on a newer desktop build.

Environment:

• Codex Desktop: 26.616.51431 (CFBundleVersion 4212)
• Bundled Codex CLI: codex-cli 0.142.0-alpha.6
• macOS: 26.5.1 (25F80)
• Architecture checked by codesign: arm64

Observed dialog from screenshot:

"Codex Computer Use.app" is damaged and cannot be opened.
You should move it to the Trash.

This file was downloaded on an unknown date.

This is happening repeatedly when Computer Use is triggered.

Local bundle paths found:

/Applications/Codex.app/Contents/Resources/plugins/openai-bundled/plugins/computer-use/Codex Computer Use.app
/Applications/Codex.app/Contents/Resources/plugins/openai-bundled/plugins/record-and-replay/Codex Computer Use.app

Both helper copies report the same local diagnostics:

spctl --assess --type execute --verbose=4 .../Codex Computer Use.app
=> internal error in Code Signing subsystem

codesign --verify --deep --strict --verbose=4 .../Codex Computer Use.app
=> invalid signature (code or signature have been modified)
=> In architecture: arm64

xattr -p com.apple.quarantine .../Codex Computer Use.app
=> No such xattr: com.apple.quarantine

Helper plist details are the same for both copies:

CFBundleIdentifier: com.openai.sky.CUAService
CFBundleShortVersionString: 1.0
CFBundleVersion: 829
CFBundleExecutable: SkyComputerUseService
SUFeedURL: https://oaisidekickupdates.blob.core.windows.net/mac/cua/alpha/appcast.xml