Codex Trajectory v0.4.0

Codex Trajectory v0.4.0

This release upgrades the trajectory contract, adds local cost estimates and compressed-rollout support, and closes the release-blocking CDP, session-reading, protocol, UI, and packaging issues found during the full project review.

• Move current trajectory and MCP Apps responses to the closed Schema v2 contract, with the published Schema v1 file enforced byte-for-byte for existing validators.
• Estimate standard-API-equivalent USD cost at task, turn, and Token-usage-record level, including cache discounts and explicit complete, partial, or unavailable pricing coverage.
• Read bounded .jsonl.zst rollouts and paginated lineage offsets safely on Python 3.10–3.14; reject decompression bombs, truncation, trailing garbage, link escapes, invalid dual UUIDs, and inconsistent boundaries.
• Correct Token reset accumulation, duplicate snapshots, late-model samples, overview/detail alignment, strict model pricing, and safe Decimal aggregation.
• Enforce strict MCP initialization, stable sanitized errors, cancellation observation, unknown-resource handling, and an 8 MiB encoded response limit.
• Serialize CDP settings and recovery across processes, preserve newer user choices, use safe Windows process checks, apply absolute network deadlines, and prevent disabled status probes.
• Restore the token-bearing Codex in-app Browser shortcut on macOS and Windows only after the exact CDP TCP connection is bound to the authenticated Codex desktop host with process-creation and platform signing/package checks, including the outer OpenAI.Codex Windows ancestor that owns the listener. Authentication failures and unsupported platforms stay fail-closed; app-private direct stop remains available after explicit opt-in.
• Serve MCP requests immediately while recovering an already enabled authenticated watcher and prewarming bounded safe-summary caches in the background; authenticated runtime upgrades bind the replacement viewer before stopping the verified old watcher.
• Remove the lifecycle command hook and use one portable relative MCP launcher: Unix executes uv directly, while Windows uses a reviewed GUI-subsystem shim for uvw.exe or a no-window uv.exe fallback and starts the optional watcher under pythonw.exe.
• Improve initial CDP status retries, stale-response handling, bilingual fail-closed messaging, semantic table/group accessibility, and exact rendering of very large Token values in native PiP.
• Expand release gates to Python 3.10, 3.12, 3.13, and 3.14 across Linux, macOS, and Windows; add Windows mypy, focused coverage floors, archive completeness/version checks, and extracted ZIP/TAR MCP smoke tests.

After upgrading, open a new Codex task so the Schema v2 resource, updated private tools, and authenticated Browser shortcut capability are loaded. The experimental CDP setting remains off by default. On macOS and Windows, enabling it can recreate View trajectory after peer authentication succeeds; unsupported platforms keep that shortcut unavailable.

Codex Trajectory v0.3.0

Codex Trajectory v0.3.0

This release adds a lightweight live view for following an active Codex task without launching a standalone application.

• Open the new Live window from the trajectory viewer: Codex uses its supported full-height side-panel presentation, while regular Chromium pages can fall back to native video picture-in-picture.
• See a compact 32-frame mining mascot animate once inside the newest live-record card when a new record arrives, while unchanged polls and reduced-motion preferences keep it still.
• Keep whole-task Token totals frozen at the top while a chronological safe-summary event stream scrolls independently below and follows the newest record.
• Inspect each record's Total, Input, and Output Token delta, including uncached/cache input and visible/reasoning output breakdowns.
• Refresh active tasks serially every second, pause while hidden or after exit, and back off automatically after failures.
• Skip projection work when the rollout lineage is unchanged; changed tasks return only a bounded 50-record safe-summary tail through an app-only update tool.
• Update the mounted side-panel shell in place so unchanged checks do not recreate the layout or move the status row.
• Keep live surfaces privacy-safe: tool input, tool output, raw metadata, base instructions, and encrypted reasoning are excluded, and entry still requires an explicit click.

After installing or upgrading, open a new Codex task so the updated plugin tools and Skill are loaded.

Codex Trajectory v0.2.0

Codex Trajectory v0.2.0

This release makes current Codex history compatible, Token inspection more accurate, release artifacts safer, and the interactive ledger easier to scan.

• Inspect input, cache reads, uncached input, output, reasoning output, cache-hit rate, and per-turn totals in the new Token details panel; unsupported Cache writes are no longer exposed.
• Display exact Token totals—even tens or hundreds of billions—using responsive numeric sizing instead of truncating them with an ellipsis.
• Load complete long trajectories page by page with the bilingual “Load earlier records” control, while preserving stable record indexes and the current ledger viewport.
• See the active model and compact uncached-input, cache-read, and output totals directly on each turn header and ledger row.
• Expand only the latest turn by default, reveal earlier turns lazily, and keep each expanded turn's column header scoped and sticky.
• Avoid double-counting repeated cumulative Token snapshots while preserving compatibility with older logs that omit cumulative usage.
• Resolve exact task IDs immediately and reuse unchanged task overviews to reduce repeated scans of large local logs.
• Read legacy and paginated Codex rollouts, validate every inherited identity/ordinal/byte boundary, and exclude copied parent context from child-agent trajectories.
• Keep filesystem failures and path-redaction edge cases from exposing absolute local paths; reject descendant symlinks, file hardlinks, path selectors, ambiguous ID prefixes, and inconsistent lineage.
• Strictly reject ambiguous or unbounded JSON/RPC inputs with deterministic limits across Python 3.10–3.14, while tolerating only genuinely incomplete active-log tails.
• Keep overview and detail statistics consistent across canonical turn items, duplicate terminal events, partial Token snapshots, aborted turns, and empty successful MCP results.
• Harden the viewer with escaped dynamic markup, a restrictive CSP, bounded rendering, and host-request timeouts.
• Validate all 0.2.0 version sources, release notes, runtime handshakes, plugin assets, required files, safe archive permissions, and byte-identical ZIP/tar contents before publishing.
• Gate CI on Linux, macOS, Windows, Python 3.10/3.12/3.14, the browser acceptance suite, schema validation, static analysis, and locked dependencies; release builds do not consume shared dependency caches and grant write permission only to the publishing job.

After installing or upgrading, open a new Codex task so the updated plugin tools and Skill are loaded.

Codex Trajectory v0.1.0

Codex Trajectory v0.1.0

The first public release provides a privacy-aware trajectory ledger and timeline for local Codex tasks.

• Safe summaries are the default; bounded tool input and output require explicit full-detail consent.
• Three read-only MCP tools cover task discovery, structured analysis, and the interactive viewer.
• Session file access is contained to active and archived Codex session roots without following symlinks.
• The zero-dependency Python 3.10+ runtime launches through uv run --script on macOS, Linux, and Windows.
• The responsive English and Chinese viewer supports search, filters, keyboard access, time selection, pan, and zoom.

After installing or upgrading, open a new Codex task so the plugin tools and Skill are loaded.