codex v0.144.1-proxy — macOS arm64 (wss proxy fix, signed + notarized)

Unofficial build of codex at upstream release rust-v0.144.1 plus two local proxy patches:

• wss respects https:// and scheme-less environment proxies — a wss:// connection behind a TLS-to-proxy (https://…) or scheme-less (host:port) proxy previously failed with Proxy URL scheme not supported and silently fell back to the HTTPS transport. The WebSocket connector now resolves those proxies explicitly and tunnels through them (CONNECT + TLS-to-proxy), matching the HTTP client. http/socks proxies, NO_PROXY, and loopback are handled as before.
• [env] config block — set process env vars (e.g. HTTPS_PROXY, HTTP_PROXY, NO_PROXY) from config.toml, applied at startup before any network client is built. An inherited/shell value takes precedence. See docs/config.md.

Asset

Platform	macOS Apple Silicon (aarch64-apple-darwin)
File	codex-aarch64-apple-darwin.tar.gz
Version	codex-cli 0.144.1
Signing	Developer ID + hardened runtime, notarized by Apple
SHA-256	5bdbba6e145f6d326fb37977962977d266facd50a7d5abcfbbe3ecbea06eacf0

Install

tar -xzf codex-aarch64-apple-darwin.tar.gz
chmod +x codex
./codex --version
# If launched offline and Gatekeeper complains, clear quarantine:
#   xattr -d com.apple.quarantine codex
sudo mv codex /usr/local/bin/   # optional: put on PATH

Note: the realtime_websocket (voice) path is not covered by the wss proxy fix; only the Responses (model streaming) WebSocket is.

Built, signed, and notarized locally from branch env-config-block; not an official OpenAI release.