Codex 0.163.0-fork.2 — Keychain proxy + BUSY Bar (Apple Silicon)

Codex 0.163.0-fork.2 for macOS Apple Silicon (unofficial personal build).

Based on upstream rust-v0.163.0, source 451a69980f.

Keeps the fork's MCP Apps browser bridge and reconnect recovery, startup [env] loading and native BUSY Bar model/effort/Fast controls, and includes the unchanged signed voice runtime from the verified official 0.163.0 package.

Fixed in 0.163.0-fork.2

Agent shell commands (unified exec and the exec-server) received the codex command-proxy identity instead of their thread, so codex proxy route … refused them and package registries were not direct. Commands now carry thread-<id>; verified live against the real upstream proxy before release.

What changed since 0.160.0-fork.1

• Upstream proxy in the macOS Keychain. The full proxy URL, credentials included, lives in the Keychain item Codex Fork Proxy (one per CODEX_HOME), created by codex itself. It never enters the process environment, config.toml, shell snapshots, rollouts, logs or /feedback. Manage it with codex proxy set|status|clear|import; set, clear and import refuse to run inside an agent session.
• Kill switch. Codex refuses to start without a stored proxy or when the Keychain cannot be read, and never falls back to a direct route. Proxy variables in [env] stop startup with a pointer to codex proxy import. Override only with CODEX_FORK_DANGEROUSLY_ALLOW_DIRECT=1.
• Live changes. codex proxy set|clear|import and edits of [proxy] direct apply to running processes, including the app-server daemon, within about two seconds.
• Command proxy. Agent commands and MCP stdio servers get a credential-free loopback proxy. OpenAI destinations always use the upstream proxy; loopback and [proxy] direct connect directly; package registries connect directly for agent commands; the agent can change only its own thread's command routing with codex proxy route … and is told how by the bundled codex-proxy-routing skill.
• Closed bypasses. Legacy transport-default clients (used by login), OTLP/HTTP and the WebSocket bypass matcher now follow the required proxy; OTLP/gRPC and WebRTC voice are refused; feedback diagnostics redact proxy credentials.

Install and migrate

Open the DMG and leave it mounted while running these commands in Terminal:

install_dir="$HOME/.local/lib/codex-fork/0.163.0-fork.2"
mkdir -p "$install_dir" "$HOME/.local/bin"
ditto "/Volumes/Codex 0.163.0-fork.2" "$install_dir"
ln -sfn "$install_dir/scripts/run-codex-fork.sh" "$HOME/.local/bin/codex"
rehash
codex --version
codex proxy import                # moves HTTP(S)_PROXY/NO_PROXY from [env] into the Keychain
codex proxy status
codex app-server daemon update --from-cli -y   # pin this package for the background server
rm -rf ~/.codex/shell_snapshots   # old snapshots still export the former proxy credentials

Upgrading from 0.163.0-fork.1: install the package and update the symlink as above, then run only codex app-server daemon update --from-cli -y; the proxy is already in the Keychain.

Until codex proxy import (or codex proxy set) has run, this build refuses to start: the proxy in [env] is no longer used. Use update --from-cli: daemon restart restarts the previously pinned package, and a plain daemon update switches the background server to official production builds without this fork's proxy or kill switch. Keep the entire package together: codex-package.json, bin, codex-path, codex-resources and scripts.

Validation

Port: 1,973 affected non-TUI and 5,806 TUI tests ran; the only differences were fork-version and upstream ⇧tab snapshots, reviewed and accepted, plus one upstream test adapted to the fork's strict startup configuration. Proxy work: 1,185 and 1,285 affected-crate tests passed (one environment-dependent queue test was isolated and passed on recheck). End to end with a fake upstream proxy: commands saw only the credential-free command proxy, requests reached the upstream with its credentials, agent routing changes sent hosts direct without touching the upstream, and OpenAI stayed upstream. The release binary refuses to start without a stored proxy. fork.2: protocol suite, 185 unified-exec core tests and update-dialog TUI tests passed; 29 codex-exec-server remote/websocket tests fail when run together on this Mac with and without the fix (each passes alone). Full workspace, Windows/Linux and a live TUI session against the real upstream proxy were not run.

All 30 Mach-O files have valid timestamped signatures: four personal Developer ID executables and 26 unchanged official voice-runtime files. The DMG is Developer ID signed with a timestamp.

Apple notarization: Accepted (submission 43c7d3ed-fc02-48a2-91d7-1918e9c9a0b1). The ticket is stapled to the DMG; stapler validation, DMG integrity checks and Gatekeeper (Notarized Developer ID) pass. Checksums were generated after stapling.

The optional debug-symbol archive is partial because Thin LTO temporary objects were unavailable to dsymutil.

Codex 0.163.0-fork.1 — Keychain proxy + BUSY Bar (Apple Silicon)

Codex 0.163.0-fork.1 for macOS Apple Silicon (unofficial personal build).

Based on upstream rust-v0.163.0, source 172b7dc960.

Keeps the fork's MCP Apps browser bridge and reconnect recovery, startup [env] loading and native BUSY Bar model/effort/Fast controls, and includes the unchanged signed voice runtime from the verified official 0.163.0 package.

What changed since 0.160.0-fork.1

• Upstream proxy in the macOS Keychain. The full proxy URL, credentials included, lives in the Keychain item Codex Fork Proxy (one per CODEX_HOME), created by codex itself. It never enters the process environment, config.toml, shell snapshots, rollouts, logs or /feedback. Manage it with codex proxy set|status|clear|import; set, clear and import refuse to run inside an agent session.
• Kill switch. Codex refuses to start without a stored proxy or when the Keychain cannot be read, and never falls back to a direct route. Proxy variables in [env] stop startup with a pointer to codex proxy import. Override only with CODEX_FORK_DANGEROUSLY_ALLOW_DIRECT=1.
• Live changes. codex proxy set|clear|import and edits of [proxy] direct apply to running processes, including the app-server daemon, within about two seconds.
• Command proxy. Agent commands and MCP stdio servers get a credential-free loopback proxy. OpenAI destinations always use the upstream proxy; loopback and [proxy] direct connect directly; package registries connect directly for agent commands; the agent can change only its own thread's command routing with codex proxy route … and is told how by the bundled codex-proxy-routing skill.
• Closed bypasses. Legacy transport-default clients (used by login), OTLP/HTTP and the WebSocket bypass matcher now follow the required proxy; OTLP/gRPC and WebRTC voice are refused; feedback diagnostics redact proxy credentials.

Install and migrate

Open the DMG and leave it mounted while running these commands in Terminal:

install_dir="$HOME/.local/lib/codex-fork/0.163.0-fork.1"
mkdir -p "$install_dir" "$HOME/.local/bin"
ditto "/Volumes/Codex 0.163.0-fork.1" "$install_dir"
ln -sfn "$install_dir/scripts/run-codex-fork.sh" "$HOME/.local/bin/codex"
rehash
codex --version
codex proxy import                # moves HTTP(S)_PROXY/NO_PROXY from [env] into the Keychain
codex proxy status
codex app-server daemon update --from-cli -y   # pin this package for the background server
rm -rf ~/.codex/shell_snapshots   # old snapshots still export the former proxy credentials

Until codex proxy import (or codex proxy set) has run, this build refuses to start: the proxy in [env] is no longer used. Use update --from-cli: daemon restart restarts the previously pinned package, and a plain daemon update switches the background server to official production builds without this fork's proxy or kill switch. Keep the entire package together: codex-package.json, bin, codex-path, codex-resources and scripts.

Validation

Port: 1,973 affected non-TUI and 5,806 TUI tests ran; the only differences were fork-version and upstream ⇧tab snapshots, reviewed and accepted, plus one upstream test adapted to the fork's strict startup configuration. Proxy work: 1,185 and 1,285 affected-crate tests passed (one environment-dependent queue test was isolated and passed on recheck). End to end with a fake upstream proxy: commands saw only the credential-free command proxy, requests reached the upstream with its credentials, agent routing changes sent hosts direct without touching the upstream, and OpenAI stayed upstream. The release binary refuses to start without a stored proxy. Full workspace, Windows/Linux and a live TUI session against the real upstream proxy were not run.

All 30 Mach-O files have valid timestamped signatures: four personal Developer ID executables and 26 unchanged official voice-runtime files. The DMG is Developer ID signed with a timestamp.

Apple notarization: Accepted (submission a945a006-a2a5-4027-b12c-c7b43015fef9). The ticket is stapled to the DMG; stapler validation, DMG integrity checks and Gatekeeper (Notarized Developer ID) pass. Use the DMG for distribution; checksums were generated after stapling.

The optional debug-symbol archive is partial because Thin LTO temporary objects were unavailable to dsymutil.

Codex 0.160.0-fork.1 — proxy + BUSY Bar (Apple Silicon)

Codex 0.160.0-fork.1 for macOS Apple Silicon (unofficial personal build).

Based on upstream rust-v0.160.0, source 9a23812a94.

Preserves the fork's MCP Apps browser bridge and reconnect recovery, startup [env] loading, required HTTP/WebSocket/Realtime proxy routing without direct fallback, and native BUSY Bar model/effort/Fast controls. Retains upstream network-policy enforcement and includes the unchanged signed voice runtime from the verified official 0.160.0 package.

Validation: 7,519 affected-package tests ran; only two version-number snapshots initially failed. Both were reviewed and updated; all seven update-dialog tests passed on recheck. Ten tests were skipped. All 35 BUSY client tests and the live signed-release model/effort/Fast, Plan/config, focus, reconnect and stale-target checks passed. Clippy, formatting, config schema and Bazel lock checks completed. Full workspace and Windows/Linux validation were not run.

The five primary Mach-O executables and DMG are Developer ID signed with secure timestamps. The 26 voice runtime Mach-O files retain verified upstream signatures.

Apple notarization: Accepted (submission 2285da04-215a-47d1-9439-3a1a9c6d300c). The notarization ticket is stapled to the DMG; stapler validation, DMG integrity checks and Gatekeeper (Notarized Developer ID) pass. Use the DMG for distribution; checksums were generated after stapling.

Install from the DMG

Open the DMG and leave it mounted while running these commands in Terminal:

install_dir="$HOME/.local/lib/codex-fork/0.160.0-fork.1"
mkdir -p "$install_dir" "$HOME/.local/bin"
ditto "/Volumes/Codex 0.160.0-fork.1" "$install_dir"
ln -sfn "$install_dir/scripts/run-codex-fork.sh" "$HOME/.local/bin/codex"
export PATH="$HOME/.local/bin:$PATH"
rehash
codex --version
codex

Keep the entire package together: codex-package.json, bin, codex-path, codex-resources, and scripts. Replacing only files in bin causes this CLI has no complete local package when Codex starts its background server. The launcher enables the native BUSY Bar controls. Put ~/.local/bin at the front of your shell's PATH permanently if it is not already there.

The optional debug-symbol archive is partial because Thin LTO temporary objects were unavailable to dsymutil.

Codex 0.156.1-fork.1 — proxy + BUSY Bar (2026-09-23)

Codex 0.156.1-fork.1 — proxy + BUSY Bar

Personal, unofficial macOS Apple Silicon build based on upstream rust-v0.156.1.
Source: 77502086f27c85a3b689e55262b8d3de9104ac3e.

For another Apple Silicon Mac, download the notarized and stapled DMG. This is a CLI package rather than a GUI application. Intel Macs are not supported; the minimum deployment target is macOS 11.0.

Included changes

• Ports the fork's MCP Apps browser bridge and reconnect recovery to Codex 0.156.1.
• Loads and validates the configured startup environment before CLI startup.
• Routes HTTP, Responses WebSocket and Realtime WebSocket traffic through the configured proxy and fails closed when required proxy routing fails.
• Preserves native BUSY Bar controls for model, reasoning effort and Fast mode.
• Includes the upstream 0.156.1 changes and confirms runtime discovery of GPT-6-Sol and GPT-6-Luna.

Signing and notarization

All five Mach-O executables and the DMG carry a verified Developer ID Application: Misha Kharytonchyk (H8QG3CBM96) signature and secure timestamp. This is not an official OpenAI build.

Apple notarization completed successfully: Accepted, submission 1427fe4f-d352-4e9e-9a03-893ba6375ad8, with no reported issues. The ticket is stapled to the DMG; stapler validate succeeds and Gatekeeper accepts it as Notarized Developer ID.

Use the DMG for distribution because a tar archive cannot carry a stapled notarization ticket. SHA256SUMS contains the hashes of the final stapled DMG and both archives.

Validation and known limits

• Affected-crate run executed 7,253 tests. The 12 initial failures were addressed; all 164 selected rechecks covering those failures passed.
• The additional startup-configuration credential-redaction regression passed.
• Scoped Clippy, formatting, configuration schema generation and Bazel lock validation passed.
• The signed release binary started its app-server and returned GPT-6-Sol and GPT-6-Luna without sending an inference request.
• The full workspace suite and native Windows/Linux validation were not run.
• The optional debug-symbol archive is partial because Thin LTO temporary objects were unavailable to dsymutil; this does not affect the signed executable or runtime checks.

Codex 0.154.0-fork.1 — proxy + BUSY Bar (2026-09-17 09:52 UTC)

Codex 0.154.0-fork.1 — proxy + BUSY Bar

Personal, unofficial macOS Apple Silicon build based on upstream rust-v0.154.0.
Source: 8822eed9c77a2f5edff90a82262af3e78fa54ee5.

Recommended for sharing with another Apple Silicon Mac: download the notarized and stapled DMG. Open it, copy the entire Codex-0.154.0-fork.1 folder to a permanent location, and follow READ-ME.txt. This is a CLI package, not a GUI application. Intel Macs are not supported.

Included changes

• Restored the fork's MCP Apps browser bridge and reconnect recovery.
• Load and validate the user config's [env] before CLI startup, including direct binary launches. Invalid proxy/configuration fails startup without exposing proxy credentials.
• HTTP, Responses WebSocket and Realtime WebSocket use the configured proxy and fail closed on proxy connection, authentication or TLS failures. A WebSocket-to-HTTP retry retains proxy routing.
• Invalid or unavailable enabled upstream proxies do not silently become direct connections in the managed command proxy.
• OTLP/gRPC exporters reject environment-proxy configurations because their transport cannot honor them; use OTLP/HTTP instead.
• BUSY Codex native TUI protocol v1: effort, Fast and model controls, confirmed settings changes, Plan-mode preservation, focus/stale-target checks and reconnect/replay handling.

Routing scope matters: explicit NO_PROXY destinations and dedicated loopback IPC remain direct. Existing managed-proxy local/private-target bypass and allow_upstream_proxy policy are unchanged. This is application-level routing, not an OS firewall or a guarantee for browsers and independently launched programs.

Artifact and signing

The signed archive contains codex, codex-code-mode-host, codex-responses-api-proxy, bundled ripgrep and zsh, plus the fork launcher and build metadata. Built for aarch64-apple-darwin with the upstream optimized Cargo release profile. Debug symbols are provided separately.

All five executables carry a verified Developer ID Application: Misha Kharytonchyk (H8QG3CBM96) signature, hardened runtime and Apple secure timestamp. Appropriate JIT entitlements are retained. This is not an official OpenAI build.

Apple notarization completed on 2026-09-17: Accepted, submission 4f475a26-ff79-4c9e-89b0-c55d6a665da9, with no issues. The ticket covers the DMG and all five arm64 executables. The ticket is stapled to the DMG; stapler validate succeeded and Gatekeeper accepted it as Notarized Developer ID. The mounted DMG's binaries match the original SHA-256 digests and Apple's ticket CDHashes, and its launcher reports 0.154.0-fork.1.

fork-build.json records the original packaging/signing step, before notarization, so its historical notarized: false field is unchanged. signing-verification.json and SHA256SUMS cover the original artifacts. notarization-apple.json is Apple's acceptance report, notarization-verification.txt records stapling and Gatekeeper checks, and SHA256SUMS-notarized covers the final stapled DMG and these reports. Apple's report contains the pre-stapling upload hash; the final DMG hash changes when the ticket is attached. The original tar archive remains available unchanged, but use the DMG when sharing because the tar format cannot carry a stapled ticket.

Extract the signed archive into its own directory, then launch ./scripts/run-codex-fork.sh. This enables same-user native TUI controls by default; set CODEX_TUI_CONTROL=0 to disable them. The raw ./bin/codex remains opt-in. Publishing this release does not replace an installed Codex.

Validation and known limits

• The signed release archive passed all 5 selected upstream CLI package smoke tests, including sandboxed code mode through the Python SDK and a local mock Responses server. All five shipped executables started successfully; archive checksums and extracted executable signatures were verified.
• Affected-crate run: 5,728 tests; two CLI failures fixed and rechecked, and four terminal-color failures passed after removing the runner's NO_COLOR override.
• Follow-up CLI, HTTP/WebSocket and targeted Realtime/system-proxy checks: 710/710 passed, including reachable-origin/no-direct-fallback regressions.
• OTEL: 63/63 passed; BUSY native client/model-menu/effort: 35/35 passed.
• Isolated live TUI: effort/Fast/model roundtrips, Plan/config preservation, focus checks, reconnect/replay and stale-target rejection passed without submitting model prompts or restarting physical Bar workers.
• Scoped lint/fix, formatting, config schema generation and Bazel lock refresh completed.
• 22 network-proxy tests remain failing under this Mac's DNS environment: public test hostnames resolve to 240.0.2.17 and existing destination-policy checks reject them. The policy was not weakened.
• Full workspace and native Windows/Linux validation were not run.

Codex 0.153.4 — Crown model selection, effort and Fast (macOS arm64)

Release build for macOS Apple Silicon, based on commit a16413c.

Signing and notarization update — September 16, 2026

Download the -signed.tar.gz archive, SHA256SUMS-signed, and fork-build-signed.json from Assets. All five bundled executables are now signed with Developer ID Application: Misha Kharytonchyk (H8QG3CBM96), with hardened runtime and secure timestamps. Signature verification, archive extraction, and launcher version checks passed. The source commit and functionality are unchanged. Notarized by Apple: Accepted, submission c55dfb16-0c3e-47d6-8f84-3d6eb13d39b0. All five executables passed codesign --verify --strict --check-notarization. See notarization-apple.json in Assets. The existing signed archive is unchanged: its binaries are now covered by Apple's online notarization tickets. A Mac needs access to Apple's service on first launch. The notarized: false field in the original build manifest records the pre-submission state; the Apple report is the current notarization result. Original ad-hoc assets remain available for reference.

BUSY Bar controls

Use with BUSY Codex at commit 768f944 or later.

• Click Crown to open the model picker, rotate to browse, then click again to apply and return to effort control. Browsing does not change settings.
• Rotate Crown outside the picker to change reasoning effort.
• Press START to toggle Fast mode.
• The native CLI endpoint supports model/set, effort/set, and fast/set, and advertises available models in its status snapshot.
• Changes require the focused, ready task and backend confirmation. They preserve Plan mode, do not send prompts, and do not write global model defaults.

Restart existing CLI processes after updating. A running process retains the old protocol even after the executable is replaced. This supersedes the earlier effort-only native-control release.

Run

The signed archive contains the CLI, companion binaries, resources, and launcher. Download all three signed assets before checking the manifest.

shasum -a 256 -c SHA256SUMS-signed
mkdir -p codex-native-model
tar -xzf codex-v0.153.4-fork.1-native-model-aarch64-apple-darwin-signed.tar.gz -C codex-native-model
./codex-native-model/scripts/run-codex-fork.sh

The launcher enables native TUI control. A raw binary requires CODEX_TUI_CONTROL=1.

Original build validation

• Cargo release profile; stripped packaged binary and verified signature.
• 4,108 TUI tests passed across the full run and scoped retries; 6 skipped.
• All 22 scoped checks passed after resolving disk exhaustion and the test color environment, including native model confirmation and Plan/config preservation.
• BUSY Codex: 193 tests completed; one optional Pillow test skipped.
• Archive extraction, packaged launcher, and binary checksum verified.

The CLI version string remains 0.153.4-fork.1; the packaged fork-build.json and downloadable fork-build-signed.json identify the signed build and its supported native commands.

Codex 0.153.4 — native BUSY Bar control (macOS arm64)

Unofficial Codex fork release for macOS Apple Silicon, with native BUSY Bar effort control.

Changes

• The BUSY Bar dial changes effort in the focused CLI session through a native, versioned Unix-socket API.
• Changes are confirmed by Codex settings events, preserve Plan mode and the selected model, and apply to subsequent turns.
• Works immediately after startup without an initial keypress, recovers request outcomes after reconnecting, and rejects stale task targets.
• The included launcher enables native control by default. Set CODEX_TUI_CONTROL=0 to disable it; direct use of bin/codex requires CODEX_TUI_CONTROL=1 to enable it.
• Retains the MCP Apps browser bridge and proxy-aware launcher. Source builds default to one Cargo job to reduce concurrent compilation load.

Download and run

Use codex-package-aarch64-apple-darwin.tar.gz for the complete package: CLI, launcher, code-mode host, Responses API proxy, ripgrep, and zsh resources. The standalone CLI archive is also available.

mkdir codex-native-control
tar -xzf codex-package-aarch64-apple-darwin.tar.gz -C codex-native-control
./codex-native-control/scripts/run-codex-fork.sh --version
./codex-native-control/scripts/run-codex-fork.sh

Verify downloads using shasum -a 256 -c SHA256SUMS. The manifest covers both archives and fork-build.json; download all three to check the complete manifest. Existing CLI sessions need one restart. BUSY Bar integration requires busy-codex b47fdaa or later, distributed separately.

Build and validation

• Source: 5470d8c42f32d8c740d0d1b503f8b34676573aee on codex/native-tui-control.
• Platform: aarch64-apple-darwin; optimized Cargo release profile.
• Binary version remains codex-cli 0.153.4-fork.1. This release tag and fork-build.json identify the native-control build.
• CLI is ad-hoc signed, not Developer ID signed or notarized by Apple. Bundled helper binaries are retained from the matching base fork package.
• Validation: 118 Python tests; native socket/startup regression tests; reviewed TUI snapshot coverage; live release checks for supported effort levels, Plan mode, focus loss, request recovery, and task switches, including fresh startup without a keypress.
• Archive extraction, launcher execution, CLI signature, and SHA-256 checksums verified locally.

This is a personal fork build, not an official OpenAI release.

codex v0.151.0-fork.f23b540 — macOS arm64

Unofficial macOS Apple Silicon build of the Codex fork at f23b54059c.

Fork changes

• MCP Apps browser bridge.
• HTTPS environment-proxy support for Responses WebSocket connections.
• Standard HTTP_PROXY, HTTPS_PROXY, ALL_PROXY, and NO_PROXY routing, including direct LAN MCP endpoints listed in NO_PROXY.

Build

Platform	macOS Apple Silicon (aarch64-apple-darwin)
Version	codex-cli 0.151.0-fork.f23b540
Profile	Cargo release, stripped release artifacts
Signing	Developer ID Application + hardened runtime + timestamp
Notarization	Not notarized

The combined codex-package-aarch64-apple-darwin.tar.gz contains Codex, the code-mode host, ripgrep, and zsh resources. Standalone archives are also attached for Codex, the code-mode host, and the Responses API proxy.

Install

tar -xzf codex-package-aarch64-apple-darwin.tar.gz
./bin/codex --version

Verify downloads with the attached SHA256SUMS file.

This is a personal fork build and not an official OpenAI release.

codex v0.144.1-proxy — macOS arm64 (wss proxy fix, signed + notarized)

Unofficial build of codex at upstream release rust-v0.144.1 plus two local proxy patches:

• wss respects https:// and scheme-less environment proxies — a wss:// connection behind a TLS-to-proxy (https://…) or scheme-less (host:port) proxy previously failed with Proxy URL scheme not supported and silently fell back to the HTTPS transport. The WebSocket connector now resolves those proxies explicitly and tunnels through them (CONNECT + TLS-to-proxy), matching the HTTP client. http/socks proxies, NO_PROXY, and loopback are handled as before.
• [env] config block — set process env vars (e.g. HTTPS_PROXY, HTTP_PROXY, NO_PROXY) from config.toml, applied at startup before any network client is built. An inherited/shell value takes precedence. See docs/config.md.

Asset

Platform	macOS Apple Silicon (aarch64-apple-darwin)
File	codex-aarch64-apple-darwin.tar.gz
Version	codex-cli 0.144.1
Signing	Developer ID + hardened runtime, notarized by Apple
SHA-256	5bdbba6e145f6d326fb37977962977d266facd50a7d5abcfbbe3ecbea06eacf0

Install

tar -xzf codex-aarch64-apple-darwin.tar.gz
chmod +x codex
./codex --version
# If launched offline and Gatekeeper complains, clear quarantine:
#   xattr -d com.apple.quarantine codex
sudo mv codex /usr/local/bin/   # optional: put on PATH

Note: the realtime_websocket (voice) path is not covered by the wss proxy fix; only the Responses (model streaming) WebSocket is.

Built, signed, and notarized locally from branch env-config-block; not an official OpenAI release.

codex v0.144.1-env — macOS arm64 (signed + notarized)

Unofficial build of codex at upstream release rust-v0.144.1 plus one local patch:

• [env] config block — set process environment variables (e.g. HTTPS_PROXY, HTTP_PROXY, NO_PROXY) directly from config.toml, applied at startup before any network client is built. An inherited/shell value always takes precedence. See docs/config.md.

Note: the earlier "make wss respect system/env proxies" patch was dropped — upstream 0.144.1 now does this natively (codex-websocket-client + codex-http-client resolve the system/PAC and environment proxy for WebSocket traffic, same as HTTP).

Asset

Platform	macOS Apple Silicon (aarch64-apple-darwin)
File	codex-aarch64-apple-darwin.tar.gz
Version	codex-cli 0.144.1
Signing	Developer ID + hardened runtime, notarized by Apple
SHA-256	df6d643d346e0180bfd1f26e8d0fd20fc0e4c9ab1406e8df86844f99f2346d74

Install

tar -xzf codex-aarch64-apple-darwin.tar.gz
chmod +x codex
./codex --version
# If launched offline and Gatekeeper complains, clear quarantine:
#   xattr -d com.apple.quarantine codex
sudo mv codex /usr/local/bin/   # optional: put on PATH

Built, signed, and notarized locally from branch env-config-block; not an official OpenAI release.