Codex App main process SIGSEGV after Browser Use IAB sidebar teardown

What version of the Codex App are you using (From About Codex dialog)?

26.513.31313, build 2867.

The packaged Crashpad command also reported Electron 42.0.1.

What subscription do you have?

ChatGPT account in Codex App. Exact plan omitted from this public report.

What platform is your computer?

Darwin 25.4.0 arm64 arm

macOS 26.4.1, build 25E253.

What issue are you seeing?

Codex App crashed completely. This was not just a renderer reload or a Browser Use command failure: macOS reported the Codex Desktop main process exiting with SIGSEGV.

Sanitized system log evidence:

2026-05-18 15:28:30.931 AMFI: Denying core dump for pid 740 (Codex)
2026-05-18 15:28:30.933 chrome_crashpad_handler: mach_vm_read(...): (os/kern) invalid address (1)
2026-05-18 15:28:31.426 launchd: [application.com.openai.codex ... [740]:] exited due to SIGSEGV | sent by exc handler[740]
2026-05-18 15:28:31.469 ControlCenter: Process exited: status domain:signal(2) code:SIGSEGV(11)
2026-05-18 15:28:31.482 loginwindow: kLSNotifyApplicationAbnormalDeath, app must have crashed

There was no useful crash artifact available locally after the crash:

• the Codex Crashpad directory contained only settings.dat
• no matching Codex .ips crash report was present in DiagnosticReports
• macOS denied the core dump

The strongest app-log correlation immediately before the native crash is Browser Use / in-app-browser lifecycle churn. In the old main-process desktop log, one Browser Use conversation emitted a very large number of route-resolution events, then its browser sidebar guest was torn down shortly before the SIGSEGV:

2026-05-18T07:25:30.388Z IAB_LIFECYCLE registered debugger listener ... conversationId=<redacted-conversation> webContentsId=4
2026-05-18T07:27:26Z-07:28:13Z many repeated IAB_LIFECYCLE resolved browser use route entries for the same conversation/window/turn
2026-05-18T07:28:13.657Z warning [browser-session-registry] IAB_LIFECYCLE browser sidebar guest torn down conversationId=<redacted-conversation> guestWebContentsId=4 windowId=1
2026-05-18T07:28:13.657Z info [browser-use-iab-api] IAB_LIFECYCLE unregistered debugger listener reason=webcontents-destroyed ... webContentsDestroyed=true webContentsId=4
2026-05-18T07:28:23.559Z info [browser-sidebar-manager] browser sidebar console message ... message="[vite] server connection lost. Polling for restart..." sourceId=http://127.0.0.1:4321/@vite/client
2026-05-18T07:28:30.931Z native SIGSEGV reported by macOS

Counts from the same desktop log:

IAB_LIFECYCLE resolved browser use route: 26353
same conversation route-resolution entries: 23230
browser sidebar guest torn down: 1
webcontents-destroyed unregister: 1
Vite server connection lost console messages: 64

The server connection lost messages came from local webview console output and may only be a symptom of the teardown/reload state. The crash signature itself is the main Electron/Codex process SIGSEGV.

What steps can reproduce the bug?

I do not yet have a minimal deterministic repro, but this is the observed sequence:

1. Run Codex App 26.513.31313 on macOS arm64.
2. Use Browser Use with the in-app browser against local localhost development pages over a long Desktop session.
3. Let several Browser Use turns connect and disconnect from the in-app browser.
4. In the failing run, the same Browser Use conversation repeatedly resolved the same IAB route thousands of times.
5. The browser sidebar guest for that conversation was torn down and the debugger listener was unregistered because the webContents was destroyed.
6. A few seconds later, the Codex Desktop main process crashed with SIGSEGV.

What is the expected behavior?

The in-app browser and Browser Use route lifecycle should recover from sidebar guest teardown, local dev-server reconnects, and stale webContents destruction without crashing the Codex Desktop main process.

At minimum, Browser Use should fail gracefully with a structured error and leave the app alive.

Additional information

This looks related to the Browser Use / IAB lifecycle class tracked in #22172, but this report is for a hard native main-process crash rather than only an in-app browser hang or discovery failure.

I inspected the open-source repository and could not find the packaged Desktop Browser Use/IAB implementation strings such as browser-session-registry, browser-use-iab-api, or IAB_LIFECYCLE, so I do not have a source-level patch to propose from this checkout.

Root-cause confidence from local evidence:

• high confidence: the immediate crash was a native Codex main-process SIGSEGV
• medium confidence: the trigger was related to Browser Use / IAB webContents lifecycle handling after sidebar guest teardown
• low confidence: the exact native function can be identified without a minidump, core file, or source for the packaged Desktop IAB implementation