Codex Desktop on macOS cannot trigger Calendar/Reminders TCC prompts for EventKit CLIs

Summary

Codex Desktop on macOS cannot trigger or obtain Calendar/Reminders TCC permissions for EventKit-based CLI tools launched from the Codex app terminal/tool context.

The same third-party CLIs work from iTerm after macOS prompts for access, but fail from Codex with immediate access-denied errors and no permission prompt.

Environment

• Codex Desktop app: 26.429.61741 (CFBundleIdentifier = com.openai.codex)
• Codex CLI: codex-cli 0.128.0-alpha.1
• macOS: 26.4.1 (25E253)
• EventKit CLIs:
• rem-cli 0.10.2
• ical 0.9.0
• Codex.app path: /Applications/Codex.app

Reproduction

1. Install EventKit-based Calendar/Reminders CLIs:

``sh
brew tap BRO3886/tap
brew install rem-cli ical
``

1. From iTerm, run the tools:

``sh
rem lists
ical today
``

macOS prompts for Reminders/Calendar access and the tools can be authorized.

1. From Codex Desktop's app terminal/tool context, run:

``sh
rem lists
ical today
``

Actual behavior

rem lists fails immediately:

Error: failed to initialize Reminders access: reminders: access denied: reminders access denied

ical today fails immediately:

Calendar access denied. Grant access in System Settings > Privacy & Security > Calendars

No macOS permission prompt appears for Codex.

Resetting Codex's TCC entries does not change the behavior:

tccutil reset Reminders com.openai.codex
tccutil reset Calendar com.openai.codex

Running with broader Codex filesystem sandbox permissions also does not change the behavior, so this does not appear to be the Codex workspace/filesystem sandbox.

Expected behavior

When an EventKit-based child process launched by Codex requests Calendar or Reminders access, macOS should either:

• show a TCC prompt for Codex so the user can grant access, or
• allow Codex Desktop to declare/support the required Calendar/Reminders usage descriptions so EventKit tools can be authorized like they can under Terminal/iTerm.

Local app metadata

/Applications/Codex.app/Contents/Info.plist contains usage descriptions for Apple Events, audio, camera, and microphone, but does not appear to contain Calendar/Reminders usage descriptions:

NSCalendarsUsageDescription: not present
NSRemindersUsageDescription: not present
NSCalendarsFullAccessUsageDescription: not present
NSRemindersFullAccessUsageDescription: not present

codesign -d --entitlements - /Applications/Codex.app shows:

com.apple.security.app-sandbox = false
com.apple.security.automation.apple-events = true
com.apple.security.cs.allow-jit = true
com.apple.security.cs.allow-unsigned-executable-memory = true
com.apple.security.device.audio-input = true
com.apple.security.files.user-selected.read-write = true
com.apple.security.network.client = true

Notes

This seems related in class to other macOS TCC/entitlement issues, but I could not find an existing Calendar/Reminders/EventKit-specific issue in openai/codex.