Refresh Linux port to ChatGPT/Codex 26.707.31123

[siraht]

Summary

Refresh the Linux port from the production ChatGPT desktop payload that now contains
the Codex experience. This moves the packaged app from 26.623.101652 to
26.707.31123 / build 5042 and includes the renderer support for GPT-5.6.

Version streams in this refresh:

Component	Version
Desktop payload	26.707.31123
Desktop build	5042
App brand	chatgpt
Electron	42.1.0
Codex app-server helper	0.144.0-alpha.4
Main entry	.vite/build/early-bootstrap.js

0.144.0-alpha.4 is intentional: it is the exact helper version bundled with this
desktop payload, rather than the independently published stable CLI version.

What Changed

• Refresh the recovered app payload and metadata to 26.707.31123 / build 5042.
• Discover the new hashed bootstrap chunk behind early-bootstrap.js.
• Add ChatGPT-brand-aware patching for the combined app layout.
• Preserve the current upstream function provider in the Linux X11 bootstrap rewrite.
• Retarget Linux browser handoff, git-origin filtering, title-bar controls, application
  submenus, window focus, and startup-surface patches to the current minified bundles.
• Skip retired standalone-only patch surfaces explicitly when the payload brand is
  chatgpt.
• Package the complete Codex helper layout instead of only codex and rg:
  • app-server executable
  • code-mode host
  • package metadata
  • bundled ripgrep
  • bubblewrap
  • bundled zsh
• Add a stable top-level resources/codex launcher that resolves the helper relative
  to resources/codex-vendor.
• Add a deterministic local/CI hydrator keyed to desktop/package.json's exact
  codexCliVersion, with staged validation before replacing an existing helper tree.
• Remove the obsolete tracked single-binary Codex LFS artifact.
• Make refresh manifests portable by excluding contributor-specific absolute paths.
• Preserve generated task fields, asset paths, and the public Mapbox token through
  no-op source interpolation so GitHub push protection does not misclassify adjacent
  sk./pk. text as a secret.
• Update the Linux contract and build docs for the ChatGPT payload and helper layout.

GPT-5.6 And Protocol Matching

The refreshed renderer contains both gpt-5.6-sol and gpt-5.6-terra. The final
package verifier requires both model markers and the Linux window-control/application
menu markers.

The packaged resources/codex reports codex-cli 0.144.0-alpha.4. Runtime smoke
testing completed the app-server initialize handshake and a model/list request with
that helper. This avoids mixing the new renderer with the older 0.142.4 app-server
protocol.

Validation

Passed locally:

cd desktop
npm run hydrate:codex:linux
npm run test:linux
npm run package
node scripts/verify-linux-package-contract.mjs \
  --package-root out/Codex-linux-x64
TERM=xterm-256color NO_COLOR=1 \
  ./out/Codex-linux-x64/resources/codex doctor --summary
git diff --check

Results:

• 10 Linux test suites passed
• 66 tests passed, 3 intentionally skipped
• the normally optional refresh-from-source test passed against the 26.707 archive
• clean x64 Forge packaging passed through the new hydrator
• the final package contract passed with codex-cli 0.144.0-alpha.4
• Codex doctor reported the packaged vendor layout and install as consistent

Graphical smoke validation reached:

• window ready-to-show
• successful app-server initialize handshake
• Codex CLI initialized
• renderer app routes mounted
• successful model/list
• an ephemeral gpt-5.6-sol turn completed with the expected response
• browser-use native pipe ready
• release 26.707.31123

Review Notes

• Large generated asset churn is expected because the recovered upstream payload is
  replaced as a unit.
• The ignored desktop/resources/bin/linux-*/codex-vendor trees are generated from the
  pinned npm package by the hydrator and are not committed.
• Release CI still needs to exercise the x64 AppImage/deb/rpm and arm64 deb jobs before
  tagging a release.

[siraht]

This was gpt-5.6-sol xhigh in codex cli working for 1h 33m 57s