Fix model-picker patch no-op on Codex Desktop 0.141.0+ (model-list-filter bundle; also 26.616.x)

[DevRico003]

Problem

On Codex Desktop 0.141.0 (macOS), codex-shim patch-app reports

Codex Desktop model picker allowlist filter patch is already applied.

on a fresh, unpatched app and exits successfully — but the picker filter is never actually patched, so custom/BYOK catalog entries stay hidden from the model picker.

Root cause

Two things combine:

1. Codex Desktop ≥ 0.141.0 factors the model-list filter into its own bundle, webview/assets/model-list-filter-*.js, which wasn't in the patch's glob list. The relevant code is:

   let a=[],o=null,s=i&&e!==`amazonBedrock`;
   return r.forEach(n=>{ if(s ? t.has(n.model) : !n.hidden){ ... } })

   s truthy ⇒ only server-allowlisted models (availableModels) render; custom slugs are dropped.

2. _find_js_bundle returned the first candidate matching the needle or the deliberately-loose MODEL_PICKER_APPLIED marker ((?:let )?\w+=!1[,;]…\.forEach). An unrelated minified bundle that merely contains =!1;…forEach sorts earlier and matches that marker, so it shadowed the real filter bundle. _replace_once then found the applied marker there and returned "already applied" — a false no-op.

The needle itself (…&&\w+!==\amazonBedrock``) already matches the new bundle, so once the right file is selected the existing replacement works unchanged.

Fix

• Add model-list-filter-*.js to the picker glob list.
• Make _find_js_bundle two-pass: prefer any candidate still containing the unpatched needle before falling back to an "already applied" match. An unrelated bundle can no longer shadow the real target.

Verified end-to-end against an actual Codex Desktop 0.141.0 app.asar: the filter is now correctly rewritten to s=!1 (allowlist branch off, !n.hidden branch active), ASAR integrity re-hashed and re-signed, and custom models appear in the picker. Existing test suite passes; backward-compatible with the older inline (let u=c.useHiddenModels&&o!==\amazonBedrock`,d;`) and extracted-helper bundle shapes.

---

Update — also verified on Codex Desktop 26.616.32156

The same root cause reproduces on the current Codex Desktop 26.616.32156 (macOS arm64): the allowlist guard ships in its own model-list-filter-*.js bundle (...,s=i&&e!==\amazonBedrock`;), and the loose *already-applied* regex matched an unrelated bundle first, so patch-app` exited as a no-op on a fresh app.

With the model-list-filter-*.js glob and the needle-first two-pass lookup in this PR, patch-app now resolves the correct bundle and rewrites the guard to s=!1. Verified end-to-end: the picker shows custom catalog entries again. README test matrix updated accordingly.

[nilswx]

Thank you, hope this pesky fix gets merged soon (or OpenAI drops Statsig gating altogether)!