v0.1.4

Download for Windows users

Download guardian-v0.1.4-windows-x64.zip from Assets. This is the complete Windows package and includes guardian.exe, documentation, license, and the trusted repair script.

SHA256SUMS.txt is only for checking the recommended zip.

Do not download Source code (zip) or Source code (tar.gz) unless you want to build from source. GitHub adds those two source archives automatically for every tagged release; they are not runnable Windows packages.

Release automation

This release was produced by the automatic version-based release workflow.

v0.1.3

Download for Windows users

Download guardian-v0.1.3-windows-x64.zip from Assets. This is the complete Windows package and includes guardian.exe, documentation, license, and the trusted repair script.

SHA256SUMS.txt is only for checking the recommended zip.

Do not download Source code (zip) or Source code (tar.gz) unless you want to build from source. GitHub adds those two source archives automatically for every tagged release; they are not runnable Windows packages.

Fixed

• Packaged guardian.exe can now be launched directly from File Explorer. No-argument startup opens the desktop GUI instead of printing CLI usage and exiting.
• JSON automation remains explicit: guardian.exe --json without a subcommand reports an invalid invocation instead of guessing GUI.
• GUI/tray internal commands use the supported --json <subcommand> ordering.

Verified

• GitHub Actions release workflow completed successfully for v0.1.3.
• Local package smoke passed against dist/v0.1.3/guardian.exe using the no-argument GUI entrypoint.
• cargo test --workspace and cargo clippy --workspace --all-targets -- -D warnings passed before tagging.

v0.1.2 — fix #2 missing repair script + restore C4 hotfix bundling

Premise

Guardian assumes the user has already installed @openai/codex via
npm install -g @openai/codex (that is the prerequisite for needing
this tool at all). The release zip therefore ships only guardian.exe,
the trusted repair script, and the project docs — never a copy of
codex.exe. The slow-path (C4) launcher patch falls back to the user's
own vendor/<triple>/codex/codex.exe from the npm install when no
vendor-hotfix/... is staged.

Fixes

• Closes #2 — guardian repair codex --confirm no longer aborts with
  trusted repair script is missing: ...\.codex\tools\repair-codex-resume.ps1
  on a freshly-installed machine. The trusted PowerShell repair script is
  now embedded into guardian.exe via include_str! and materialized to
  <codex_home>/tools/repair-codex-resume.ps1 on first launch (and
  defensively before the C2 repair branch). Existing operator-customised
  scripts at that path are preserved.

Changes

• package-release.ps1 now stages tools/repair-codex-resume.ps1 inside
  the release zip as a defense-in-depth copy of the trusted script.

What's in the zip

guardian-v0.1.2-windows-x64.zip (~2.21 MB) contains:

• guardian.exe
• README.md, CHANGELOG.md, LICENSE
• tools/repair-codex-resume.ps1

Verifying the download

sha256sum -c SHA256SUMS.txt

Expected hashes (see SHA256SUMS.txt asset):

• guardian.exe — e3e394737609ef481b07dde070409f3bb6227951ef0008882b7b8d672d67848a
• guardian-v0.1.2-windows-x64.zip — 74140395014d5617b0831570c6544f7b326acc3f56cc85300cb32a1fcac48e64

Quickstart

1. Make sure codex is installed: npm install -g @openai/codex
2. Download guardian-v0.1.2-windows-x64.zip, extract anywhere
3. Run guardian.exe repair codex --confirm (or guardian.exe gui /
   guardian.exe tray for the windowed experience). The trusted repair
   script is laid down automatically — no manual setup required.

v0.1.1

v0.1.1: codex slow-path repair keeps audit + prior work on failure

v0.1.0

[0.1.0] - 2026-04-19

Added

• Rust workspace for the Windows Codex Stability Guardian main program.
• guardian.exe command surface with:
  • check
  • repair codex
  • repair docker
  • diagnose profile
  • export bundle
  • gui
  • tray
• Codex stale-row repair orchestration with:
  • pre-flight health inspection
  • backup-first SQLite repair
  • structured confirm-mode audit output
• Docker / WSL repair flows with guarded runtime restart behavior.
• Profile diagnosis output with guided recovery notes.
• Bundle export support for health, diagnosis, and audit summaries.
• Release packaging script for Windows x64 artifacts.
• GitHub Actions CI and tag-driven release workflow.

Security

• Explicit --confirm gating for mutating repair actions.
• Read-only profile diagnosis boundary.
• Backup creation before Codex SQLite repair.

Documentation

• Initial professional repository README.
• Initial release-ready changelog.
• Release packaging and verification guidance.