chore(nix): add codex app flake

.gitattributes

@@ -1 +1,6 @@
 desktop/resources/bin/linux-x64/codex filter=lfs diff=lfs merge=lfs -text
+codex/app/Codex.exe filter=lfs diff=lfs merge=lfs -text
+codex/app/resources/codex filter=lfs diff=lfs merge=lfs -text
+codex/app/resources/codex.exe filter=lfs diff=lfs merge=lfs -text
+desktop/out/release-assets/*.AppImage filter=lfs diff=lfs merge=lfs -text
+desktop/out/release-assets/*.deb filter=lfs diff=lfs merge=lfs -text

.github/workflows/linux-release.yml

@@ -16,6 +16,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          lfs: true
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
@@ -32,39 +34,25 @@ jobs:
         working-directory: desktop
         run: |
           set -euo pipefail
+          npm run test:linux
           npm run package
           npm run make:linux -- --skip-package
-          mv out/make out/make-current
-
-      - name: Build legacy 3-12 Linux installers (.deb + AppImage)
-        working-directory: desktop
-        run: |
-          set -euo pipefail
-          npm run build:legacy-3-12:linux -- --output ./out/Codex-linux-x64-legacy-release --assembled-root ./tmp/legacy-3-12-runtime-release
-          mv out/Codex-linux-x64 out/Codex-linux-x64-current-release
-          mv out/Codex-linux-x64-legacy-release out/Codex-linux-x64
-          npm run make:linux -- --skip-package
 
       - name: Normalize public artifact names and include release note
         run: |
           set -euo pipefail
           CURRENT_VERSION="${GITHUB_REF_NAME#v}"
-          LEGACY_VERSION="3.12"
+          CURRENT_APPIMAGE_NAME="codex-app-linux-v${CURRENT_VERSION}.AppImage"
+          CURRENT_DEB_NAME="codex-app-linux-v${CURRENT_VERSION}.deb"
           mkdir -p desktop/out/release-assets
-          CURRENT_APPIMAGE_SOURCE="$(find desktop/out/make-current -type f -name '*.AppImage' | head -n 1)"
-          CURRENT_DEB_SOURCE="$(find desktop/out/make-current -type f -name '*.deb' | head -n 1)"
-          LEGACY_APPIMAGE_SOURCE="$(find desktop/out/make -type f -name '*.AppImage' | head -n 1)"
-          LEGACY_DEB_SOURCE="$(find desktop/out/make -type f -name '*.deb' | head -n 1)"
-          cp "$CURRENT_APPIMAGE_SOURCE" "desktop/out/release-assets/codex-current-v${CURRENT_VERSION}.AppImage"
-          cp "$CURRENT_DEB_SOURCE" "desktop/out/release-assets/codex-current-v${CURRENT_VERSION}.deb"
-          cp "$LEGACY_APPIMAGE_SOURCE" "desktop/out/release-assets/codex-legacy-v${LEGACY_VERSION}.AppImage"
-          cp "$LEGACY_DEB_SOURCE" "desktop/out/release-assets/codex-legacy-v${LEGACY_VERSION}.deb"
-          cat > "desktop/out/release-assets/RELEASE_NOTES_LINUX.txt" <<'EOF'
+          CURRENT_APPIMAGE_SOURCE="$(find desktop/out/make -type f -name '*.AppImage' | head -n 1)"
+          CURRENT_DEB_SOURCE="$(find desktop/out/make -type f -name '*.deb' | head -n 1)"
+          cp "$CURRENT_APPIMAGE_SOURCE" "desktop/out/release-assets/${CURRENT_APPIMAGE_NAME}"
+          cp "$CURRENT_DEB_SOURCE" "desktop/out/release-assets/${CURRENT_DEB_NAME}"
+          cat > "desktop/out/release-assets/RELEASE_NOTES_LINUX.txt" <<EOF
           Linux installers in this release:
-          - current: codex-current-v<current-version>.AppImage and codex-current-v<current-version>.deb
-          - legacy-3-12: codex-legacy-v3.12.AppImage and codex-legacy-v3.12.deb
-
-          Note: the newer version was lagging for some workspaces, so both versions are published.
+          - ${CURRENT_APPIMAGE_NAME}
+          - ${CURRENT_DEB_NAME}
           EOF
 
       - name: Upload Linux build artifacts

README.md

@@ -9,12 +9,12 @@ This repo tracks the Linux packaging pipeline for Codex and publishes installabl
 ## Layout
 
 - `desktop/`: Electron Forge workspace used to build Linux release packages
-- `codex-3-12/`: legacy 3-12 payload used for legacy package variants
+- `codex/`: canonical current upstream payload root used for the active Linux refresh line
 
 GitHub release artifacts:
 - Install from GitHub Releases using packaged artifacts (`.AppImage` / `.deb`).
-- Release tags like `v26.311.21342` trigger `.github/workflows/linux-release.yml`.
-- The workflow publishes both current and `legacy-3-12` Linux installer variants.
+- Current Linux artifact versioning follows the embedded Electron app version `26.325.21211`; the imported Windows package manifest remains `26.325.2171.0` and the embedded build number is `1255`.
+- Release tags like `v26.325.21211` trigger `.github/workflows/linux-release.yml`.
 
 ## Notes
 

codex/AppxManifest.xml

@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Package xmlns="http://schemas.microsoft.com/appx/manifest/foundation/windows10" xmlns:uap="http://schemas.microsoft.com/appx/manifest/uap/windows10" xmlns:rescap="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities" xmlns:desktop="http://schemas.microsoft.com/appx/manifest/desktop/windows10" xmlns:uap3="http://schemas.microsoft.com/appx/manifest/uap/windows10/3" xmlns:desktop2="http://schemas.microsoft.com/appx/manifest/desktop/windows10/2" IgnorableNamespaces="uap uap3 desktop2" xmlns:mp="http://schemas.microsoft.com/appx/2014/phone/manifest">
+  <Identity Name="OpenAI.Codex" ProcessorArchitecture="x64" Version="26.325.2171.0" Publisher="CN=50BDFD77-8903-4850-9FFE-6E8522F64D5B" />
+  <Properties>
+    <DisplayName>Codex</DisplayName>
+    <PublisherDisplayName>OpenAI</PublisherDisplayName>
+    <Logo>assets\icon.png</Logo>
+  </Properties>
+  <Dependencies>
+    <TargetDeviceFamily Name="Windows.Desktop" MinVersion="10.0.19041.0" MaxVersionTested="10.0.19041.0" />
+  </Dependencies>
+  <Resources>
+    <Resource Language="en-US" />
+  </Resources>
+  <Capabilities>
+    <rescap:Capability Name="runFullTrust" />
+    <Capability Name="internetClient" />
+  </Capabilities>
+  <Applications>
+    <Application Id="App" Executable="app\Codex.exe" EntryPoint="Windows.FullTrustApplication">
+      <uap:VisualElements DisplayName="Codex" Description="Codex" Square44x44Logo="assets\Square44x44Logo.png" Square150x150Logo="assets\Square150x150Logo.png" BackgroundColor="#3143FF"></uap:VisualElements>
+    </Application>
+  </Applications>
+  <mp:PhoneIdentity PhoneProductId="53bf120e-f20a-474e-892d-d87c803a0e39" PhonePublisherId="7d1e4745-d434-4fde-a9ef-c9c97f199413" />
+</Package>

codex/app/LICENSE

@@ -0,0 +1,21 @@
+Copyright (c) Electron contributors
+Copyright (c) 2013-2020 GitHub Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.