macOS Codex Desktop leaks ~1.3GB code_sign_clone cache on every app launch

What version of the Codex App are you using (From “About Codex” dialog)?

26.616.81150 (CFBundleVersion 4306)

What subscription do you have?

plus

What platform is your computer?

macOS 26.5.1 (Build 25F80); uname -mprs: Darwin 25.5.0 arm64 arm

What issue are you seeing?

Codex Desktop on macOS appears to create and retain a full app bundle clone on each launch/relaunch.

Observed path pattern:

/private/var/folders/.../X/com.openai.codex.code_sign_clone/code_sign_clone.*/Codex.app.bundle

Each code_sign_clone.* directory contains a full Codex.app.bundle and is about 1.3GB, matching the size of /Applications/Codex.app.

Observed on 2026-06-25:

• Before relaunch: 12 code_sign_clone.* directories, total about 16GB
• After one quit/reopen: 13 code_sign_clone.* directories, total about 17GB
• Newly created directory: code_sign_clone.UEfOEw, timestamp Jun 25 21:58
• Every clone is about 1.3GB
• AppCleaner reports Codex using about 18-19GB, mostly from this cache

This does not appear to be the SQLite logs issue:

• ~/.codex is about 774MB
• ~/.codex/logs_2.sqlite is about 89MB
• ~/.codex/logs_2.sqlite-wal is about 12MB
• Normal cache/log locations such as ~/Library/Caches/com.openai.codex and ~/Library/Logs/com.openai.codex are only a few MB

Impact: disk usage grows by about 1.3GB per Codex Desktop launch/relaunch.

What steps can reproduce the bug?

1. Open Codex Desktop on macOS.
2. Check the temporary clone directory size/count:

du -sh /private/var/folders/.../X/com.openai.codex.code_sign_clone
find /private/var/folders/.../X/com.openai.codex.code_sign_clone -maxdepth 1 -type d -name 'code_sign_clone.*' | wc -l

1. Quit Codex Desktop.
2. Reopen Codex Desktop.
3. Check the same directory again.

Actual result: one new code_sign_clone.* directory appears, containing Codex.app.bundle, and total disk usage increases by about 1.3GB.

In my case, the count increased from 12 to 13 after one relaunch.

What is the expected behavior?

Temporary code_sign_clone.* directories should be cleaned up after launch / signing verification, or reused instead of accumulating. Relaunching Codex Desktop should not permanently add another full 1.3GB copy of the app bundle.

Additional information

This looks like a code-signing / app-bundle clone cleanup bug in the macOS desktop app. I have not manually deleted or modified the directories while collecting this report.