feat: restore Linux Browser Use and upstream compatibility

.github/workflows/release.yml

@@ -60,12 +60,18 @@ jobs:
           node-version: 24
           cache: npm
 
+      - name: Install Rust target
+        run: rustup target add x86_64-unknown-linux-musl
+
       - name: Install system deps
-        run: sudo apt-get update && sudo apt-get install -y p7zip-full jq libarchive-tools xvfb x11-utils
+        run: sudo apt-get update && sudo apt-get install -y p7zip-full jq libarchive-tools musl-tools xvfb x11-utils
 
       - name: Install repo deps
         run: npm ci
 
+      - name: Run tests
+        run: npm test
+
       - name: Install browser deps
         run: npx playwright install --with-deps chromium
 
@@ -125,8 +131,11 @@ jobs:
           cache: npm
           registry-url: https://registry.npmjs.org
 
+      - name: Install Rust target
+        run: rustup target add x86_64-unknown-linux-musl
+
       - name: Install system deps
-        run: sudo apt-get update && sudo apt-get install -y p7zip-full jq libarchive-tools xvfb x11-utils
+        run: sudo apt-get update && sudo apt-get install -y p7zip-full jq libarchive-tools musl-tools xvfb x11-utils
 
       - name: Install repo deps
         run: npm ci
@@ -311,8 +320,11 @@ jobs:
           cache: npm
           registry-url: https://registry.npmjs.org
 
+      - name: Install Rust target
+        run: rustup target add x86_64-unknown-linux-musl
+
       - name: Install system deps
-        run: sudo apt-get update && sudo apt-get install -y p7zip-full jq libarchive-tools xvfb x11-utils
+        run: sudo apt-get update && sudo apt-get install -y p7zip-full jq libarchive-tools musl-tools xvfb x11-utils
 
       - name: Install repo deps
         run: npm ci

.github/workflows/upstream-canary.yml

@@ -22,12 +22,18 @@ jobs:
           node-version: 24
           cache: npm
 
+      - name: Install Rust target
+        run: rustup target add x86_64-unknown-linux-musl
+
       - name: Install system deps
-        run: sudo apt-get update && sudo apt-get install -y p7zip-full jq libarchive-tools xvfb x11-utils
+        run: sudo apt-get update && sudo apt-get install -y p7zip-full jq libarchive-tools musl-tools xvfb x11-utils
 
       - name: Install repo deps
         run: npm ci
 
+      - name: Run tests
+        run: npm test
+
       - name: Install browser deps
         run: npx playwright install --with-deps chromium
 

.gitignore

@@ -5,3 +5,4 @@ dist
 stage
 tmp
 .env
+/native/chrome-extension-host/target/

README.md

@@ -12,6 +12,11 @@ Run the Codex desktop app on Linux via npm, aur, and a nix flake.
 - downloads the matching Linux desktop binary archive on first run
 - launches the desktop app with `CODEX_CLI_PATH` wired up
 
+OpenAI now publishes the desktop archive as the combined ChatGPT app. This
+project follows those ChatGPT prod/beta archives while intentionally retaining
+the existing `codex-app-linux` npm, AUR, command, and release identities so the
+upstream rebrand does not break Linux installations.
+
 ## Quick Start
 
 ### aur
@@ -49,6 +54,9 @@ Run the Codex desktop app on Linux via npm, aur, and a nix flake.
     npx codex-app-linux web --open
     ```
 
+  `web` only serves the Codex UI in a browser. It does not install or replace
+  the ChatGPT browser extension.
+
 - Disable browser auth entirely (unsafe; only behind a trusted reverse proxy / tailnet):
     ```bash
     npx codex-app-linux web --dangerously-disable-auth true
@@ -59,6 +67,23 @@ Run the Codex desktop app on Linux via npm, aur, and a nix flake.
 - Linux x64
 - GitHub access not required for normal app launch
 
+## Browser Use
+
+Linux desktop builds support Browser Use through the official
+[ChatGPT Chrome extension](https://chromewebstore.google.com/detail/chatgpt/hehggadaopoacecdllhhajmbjkdcmajg).
+
+1. Install the extension in stable Google Chrome.
+2. Start or restart the Codex desktop app.
+3. Open the extension side panel and use Codex from there.
+
+The desktop app installs the Linux native-messaging manifest and its bundled
+extension host automatically. Current support is Linux x64 + stable Google
+Chrome. Chromium-family variants using different profile/manifest locations
+are not wired up yet.
+
+Browser Use is separate from Computer Use. This enables the extension-driven
+Chrome workflow; it does not add Linux desktop mouse/keyboard control.
+
 If `CODEX_CLI_PATH` is already set, the launcher uses it.
 Otherwise it uses the bundled `resources/codex`, then falls back to `which codex`.
 

flake.nix

@@ -12,15 +12,15 @@
         pkgs = import nixpkgs { inherit system; };
         releaseProd = pkgs.writeShellApplication {
           name = "release-prod";
-          runtimeInputs = with pkgs; [ nodejs_24 p7zip libarchive gnutar ];
+          runtimeInputs = with pkgs; [ nodejs_24 p7zip libarchive gnutar rustup ];
           text = ''
             cd ${self}
             exec node scripts/release-channel.mjs --channel prod "$@"
           '';
         };
         releaseBeta = pkgs.writeShellApplication {
           name = "release-beta";
-          runtimeInputs = with pkgs; [ nodejs_24 p7zip libarchive gnutar ];
+          runtimeInputs = with pkgs; [ nodejs_24 p7zip libarchive gnutar rustup ];
           text = ''
             cd ${self}
             exec node scripts/release-channel.mjs --channel beta "$@"
@@ -48,6 +48,7 @@
             p7zip
             libarchive
             gnutar
+            rustup
           ];
         };
       });

native/chrome-extension-host/.cargo/config.toml

@@ -0,0 +1,2 @@
+[target.aarch64-unknown-linux-musl]
+linker = "rust-lld"