Channing Conger
c23566b3af
Add JIT entitlement for macosx ( #15409 )
...
Without this entitlement, hardened mac os release binaries are unable to
allocate the executable memory for the JIT compiled JS.
Tested with local signing. Without entitlement I reproduce the error:
```
#
# Fatal process out of memory: Failed to reserve virtual memory for CodeRange
#
==== C stack trace ===============================
0 codex 0x00000001075d1acc codex + 85760716
1 codex 0x00000001075d6a64 codex + 85781092
2 codex 0x00000001075c7100 codex + 85717248
3 codex 0x0000000107637394 codex + 86176660
4 codex 0x0000000107823cfc codex + 88194300
5 codex 0x000000010777c438 codex + 87508024
6 codex 0x000000010777d130 codex + 87511344
7 codex 0x0000000107c87a54 codex + 92797524
8 codex 0x0000000107641188 codex + 86217096
9 codex 0x00000001076412d8 codex + 86217432
10 codex 0x0000000107553908 codex + 85244168
11 codex 0x000000010465f124 codex + 36008228
12 codex 0x000000010466a0d0 codex + 36053200
13 codex 0x000000010466ce78 codex + 36064888
14 codex 0x000000010734edb0 codex + 83127728
15 libsystem_pthread.dylib 0x00000001810d3c08 _pthread_start + 136
16 libsystem_pthread.dylib 0x00000001810ceba8 thread_start + 8
zsh: trace trap target/release/codex exec --enable code_mode_only --enable code_mode --
```
With the entitlement the exec succeeds.
2026-03-21 13:43:14 -07:00
Michael Bolin
15ede607a0
fix: tighten up shell arg quoting in GitHub workflows ( #14864 )
...
Inspired by the work done over in
https://github.com/openai/codex-action/pull/74 , this tightens up our use
of GitHub expressions as shell/environment variables.
2026-03-16 22:01:16 -07:00
Celia Chen
2e5d52cb14
[release] Add a dmg target for MacOS ( #8207 )
...
Add a dmg target that bundles the codex and codex responses api proxy
binaries for MacOS. this target is signed and notarized.
Verified by triggering a build here:
https://github.com/openai/codex/actions/runs/20318136302/job/58367155205 .
Downloaded the artifact and verified that the dmg is signed and
notarized, and the codex binary contained works as expected.
2025-12-18 11:19:10 -08:00
Shijie Rao
b27c702e83
chore: mac codesign refactor ( #8085 )
...
### Summary
Similar to our linux and windows codesign, moving mac codesign logic
into its own files.
2025-12-16 11:20:44 -08:00
