fix(macos): run signed Node across Rosetta launchers

TASK_PROGRESS.md

@@ -1,6 +1,37 @@
 # Task Progress
 
-Updated: 2026-07-25 08:31 HKT (Asia/Hong_Kong)
+Updated: 2026-07-27 02:35 CST (Asia/Shanghai)
+
+## macOS Rosetta Launcher Architecture Fix (2026-07-27)
+
+- [in progress] Branch `lt_fix_dream_skin_app_startup` is based on the exact
+  public `v1.5.6` commit `611c101`. The user's primary checkout and its
+  untracked `output/` directory remain untouched.
+- [fact] The legacy clickable App exits before launch because its x86_64 shell
+  context is compared with the official ChatGPT `26.721.41059` arm64-only
+  bundled Node. The signed ChatGPT app and Node are arm64, while the existing
+  theme bytes remain intact.
+- [complete] Replaced the parent-shell `uname -m` / Mach-O header comparison
+  with an actual execution check after the existing fixed-path code-signature
+  and OpenAI Team ID gates. An independent read-only review confirmed this is
+  the smallest cross-architecture fix and does not weaken runtime trust.
+- [verified] A real Rosetta x86_64 shell now validates and executes the official
+  arm64-only Node `v24.14.0`, records the validated runtime identity, and passes
+  the focused candidate-payload check. Bash syntax, the new static regression,
+  renderer, Safe CSS, staging, package and ZIP-boundary tests passed.
+- [blocked] The complete repository wrapper later reached an unrelated Swift
+  bounded-HTTP fixture and stopped because the installed Command Line Tools
+  compiler does not match its macOS SDK and the sandbox cannot write the Clang
+  module cache. Per the local no-compile rule, do not repair or rerun Swift
+  locally; leave that fixture to PR CI.
+- [complete] Synced only the reviewed `common-macos.sh` fix into the installed
+  legacy engine. The prior script and clickable App executable are recoverably
+  backed up under the Dream Skin Application Support repair-backups directory;
+  the App bundle and official ChatGPT bundle were not modified.
+- [pending] Launch through the repaired App and require exact live renderer,
+  loopback CDP and unchanged-theme verification before reporting success.
+- [pending] Commit, push and open a focused PR only after local and installed
+  acceptance pass. No version bump, tag or Release publication is in scope.
 
 ## v1.5.1 Version Release (2026-07-25 08:28 HKT)
 

macos/references/runtime-notes.md

@@ -1,7 +1,7 @@
 # Runtime notes
 
 - Discover the official `com.openai.codex` bundle on every launch; do not assume an upgrade keeps the same executable internals.
-- Use `Contents/Resources/cua_node/bin/node` from that bundle. Require Node.js 20+, a valid strict code signature, matching architecture, and OpenAI Team ID `2DC432GLL2` on both app and runtime.
+- Use `Contents/Resources/cua_node/bin/node` from that bundle. Require Node.js 20+, a valid strict code signature, successful execution on the current Mac, and OpenAI Team ID `2DC432GLL2` on both app and runtime.
 - State readers that can run before a validated launch must establish this runtime identity at their own execution boundary; never treat an inherited `NODE` value as proof of trust.
 - Do not ship a Node binary and do not depend on a globally installed `node` or `npm`.
 - Launch the official executable through a per-user `launchd` job with `--remote-debugging-address=127.0.0.1` and a selected port. LaunchServices may discard Chromium flags.

macos/scripts/common-macos.sh

@@ -299,12 +299,9 @@ require_signed_node_runtime() {
   [ "$NODE_TEAM_ID" = "$EXPECTED_CODEX_TEAM_ID" ] \
     || fail "Unexpected bundled Node.js signing team: ${NODE_TEAM_ID:-missing}."
 
-  local machine_arch
   local node_major
-  machine_arch="$(/usr/bin/uname -m)"
-  /usr/bin/file "$RUNTIME_NODE" | /usr/bin/grep -q "$machine_arch" \
-    || fail "The ChatGPT Node.js runtime does not match this Mac architecture ($machine_arch)."
-  NODE_VERSION="$($RUNTIME_NODE --version)"
+  NODE_VERSION="$("$RUNTIME_NODE" --version 2>/dev/null)" \
+    || fail "The signed ChatGPT Node.js runtime could not be executed on this Mac."
   node_major="${NODE_VERSION#v}"
   node_major="${node_major%%.*}"
   case "$node_major" in ''|*[!0-9]*) fail "Could not parse bundled Node.js version: $NODE_VERSION" ;; esac

macos/tests/run-tests.sh

@@ -54,6 +54,14 @@ if /usr/bin/grep -F -q 'CODEX_EXPECTED_TEAM_ID' "$ROOT/scripts/common-macos.sh"
   printf 'macOS runtime identity must use the fixed OpenAI signing requirement.\n' >&2
   exit 1
 fi
+SIGNED_RUNTIME_BODY="$(
+  /usr/bin/sed -n '/^require_signed_node_runtime() {/,/^}/p' "$ROOT/scripts/common-macos.sh"
+)"
+if /usr/bin/printf '%s\n' "$SIGNED_RUNTIME_BODY" |
+    /usr/bin/grep -E -q 'uname[[:space:]]+-m|/usr/bin/(file|lipo)|/usr/sbin/sysctl'; then
+  printf 'Signed Node compatibility must be proven by execution, not the launcher architecture.\n' >&2
+  exit 1
+fi
 
 # The native menu bar control plane and XCTest require a complete, matching
 # Xcode platform. CommandLineTools-only hosts report this platform blocker;
@@ -467,10 +475,27 @@ run_signed_runtime_switch_test() {
   [ -z "$(/usr/bin/find "$switch_state" -maxdepth 1 -name '.theme-switch.*' -print -quit)" ]
 }
 
+run_translated_signed_runtime_test() {
+  if [ "$(/usr/bin/uname -m)" != "arm64" ] ||
+      ! /usr/bin/arch -x86_64 /usr/bin/true >/dev/null 2>&1; then
+    printf 'SKIP: Rosetta signed-runtime regression requires Apple Silicon with Rosetta.\n'
+    return 0
+  fi
+  /usr/bin/arch -x86_64 /bin/bash -c '
+    . "$1/scripts/common-macos.sh"
+    [ "$(/usr/bin/uname -m)" = "x86_64" ]
+    discover_codex_app
+    require_signed_node_runtime
+    [ "$NODE_VERSION" = "$("$NODE" --version)" ]
+    [ "$DREAM_SKIN_VALIDATED_RUNTIME_PID" = "$$" ]
+  ' _ "$ROOT"
+}
+
 if [ "${CODEX_DREAM_SKIN_SKIP_SIGNED_RUNTIME_TESTS:-0}" = "1" ]; then
   printf 'SKIP: switch-theme integration requires an installed, signed Codex app.\n'
   SWITCH_RUNTIME_RESULT="skipped"
 else
+  run_translated_signed_runtime_test
   run_signed_runtime_switch_test
   SWITCH_RUNTIME_RESULT="passed"
 fi