Codex Rescue v0.1.0-alpha.7 — Reality Gate Hardening

Codex Rescue v0.1.0-alpha.7

Experimental alpha release — the "Reality Gate" hardening milestone.

Highlights

• New auto unified autopilot controller across CLI, Desktop and IDE
  surfaces, with explicit --repair-safe confirmation gates.
• New self-test capability, environment, privacy-engine and trust-verdict
  self-test.
• New desktop inspection command (status, doctor, sessions, diff, paths,
  writer, logs).
• New portable export / inspect / import for portable session packages
  (--dry-run supported).
• New compatibility, share and simulate-plan commands.
• Transactional derived-state recovery engine and derived index
  reconstruction.
• Bounded storage health diagnostics, streaming storage profiling and peak
  RSS monitoring under large-file stress.
• Compaction 404 resiliency and forensic tail salvage.
• Canonical thread identity enforced everywhere; Windows extended-path
  normalization hardened.
• Incident trust fails closed; unverified portable import and mutation are
  blocked; writer probes never match Rescue itself.

Safety

Read-only-first remains the core guarantee: source rollouts and SQLite stores
are never mutated in place, unknown actions are never replayed, and every
unsafe path fails closed. Invariant P1 (source immutability) is verified in
the E2E harness on every release candidate.

Install

npx --yes codex-rescue doctor --latest
# or
npm install -g codex-rescue
# or (Python)
pipx install codex-rescue==0.1.0a7
pip install codex-rescue==0.1.0a7

Requires Python 3.11+ for the Python distribution. The npm package ships
pre-compiled standalone binaries for linux-x64, windows-x64, darwin-arm64 and
darwin-x64 with zero runtime downloads.

Limitations

This release does not repair Codex HTTP 400 responses, automatically
reconstruct corrupted tool names, replay unknown calls, or claim broad
compaction recovery. Recovery actions remain explicit, planned and reversible.

Privacy

Codex Rescue is local-first with zero telemetry. Do not share raw Codex
rollout files: they can contain source code, credentials, or private prompts.
Use codex-rescue share / codex-rescue bundle + redact-check to produce
sanitized reports.

Codex Rescue Alpha6 — Field Fix Batches 1–3

Codex Rescue Alpha6 — Field Fix Batches 1–3

Public forward-only field fix release for Codex Rescue Alpha6, consolidating qualification-proven stabilization work across platform distribution, Windows identity forensics, and session lifecycle truth.

Note

Build Provenance & Source Identity:

• Tag Target: 7e0884d9c94f9a7efe888d43b363aba66660c068
• Artifact Build Run: 32276964693
• Artifact Build Workflow HEAD: b811c687f0bb3a8129f940c07bab5dd913359109
• Provenance Details: Public release artifacts were built from the qualified product tree at b811c687f0bb3a8129f940c07bab5dd913359109; the final tag commit (7e0884d9c94f9a7efe888d43b363aba66660c068) adds release infrastructure only (.github/workflows/alpha6-publish-npm.yml) with zero product or runtime code differences.

Included Fix Batches

Batch 1 — Windows npm Distribution Hardening

• Windows launcher prioritizes the supported codex-rescue-windows-x64 platform package.
• Missing historical package names fail closed without blocking supported fallback resolution.
• Native standalone executables embedded directly; zero runtime downloader, zero Python requirements, zero shell execution for npm users.

Batch 2 — Windows Thread and Path Identity

• Diagnoses path identity divergence between C:\... and \\?\C:\... rollout paths.
• Distinguishes healthy source transcripts from diverged thread-store state without modifying databases.
• Prevents false missing rollout classifications from raw OS file access errors.
• Canonical real Codex ThreadId parsing and correct handling of unindexed rollouts.

Batch 3 — Lifecycle & State Truth

• Read-only thread_spawn_edges state analysis.
• Closed spawn edge without active runtime is never treated as WORKING.
• Desktop presentation state is not treated as authoritative runtime truth.
• Generic archive errors do not fabricate causal root causes.

Installation

Run instantly without installation:

npx --yes codex-rescue doctor --latest

Or install globally:

npm install -g codex-rescue

Checksums (SHA256)

a7dfa98dd65f59e6c7aeb2376e59e2829888ab60897c2e237e86aaee49c9f88a  codex-rescue-0.1.0-alpha.6-3.tgz
ca830391766e0c4d7f30003900336889c0b94bd1c219f6d9027843d6363c41ca  codex-rescue-darwin-arm64
091bb613c8746522eaf1bab3abc699e2f1fe145ff20047dfb0ca945a01cfac7d  codex-rescue-darwin-arm64-0.1.0-alpha.6-3.tgz
cb665e8f028190ab6d9851c8b42144cc7b938d9ed3d30a28c00ff9150eff43cb  codex-rescue-darwin-x64
9ca1fedab745b71d013ee6b50a59d3ff09910456508fbd824e9ae124c1abaaaf  codex-rescue-darwin-x64-0.1.0-alpha.6-3.tgz
e5d4d5e587177f26a34a72f10aacc4acf8f49a48b7ecf75f96d0606bdbe447d2  codex-rescue-linux-x64
2b71226e8b264548aee0733305a0131f96be02892eaed5513f6c613a8ec32f75  codex-rescue-linux-x64-0.1.0-alpha.6-3.tgz
3f2784e5faccd88c1878b1aea73de1f728047463ab8b037c7c8897eae0543d01  codex-rescue-windows-x64-0.1.0-alpha.6-3.tgz
c3bb7fb6465fddae5d1181408cf75ef288129658bddbf83d2fdc4f146218dba2  codex-rescue.exe

Codex Rescue 0.1.0 Alpha 6

Codex Rescue 0.1.0 Alpha 6

Major Highlights & Diagnostics Expansion

• Oversized Record Fail-Closed Safety (>16 MiB): Bounded streaming reader prevents memory exhaustion and distinguishes VALID_BUT_OVERSIZED, MALFORMED_RECORD, and TRUNCATED_TRANSCRIPT. Prohibits reporting healthy status and refuses mutation on unparsed source records.
• Unified Projection Divergence Model: Consolidated canonical rollout vs SQLite derived projection layers. Supported safe derived cursor realignment with atomic verification and strict rollout immutability.
• Diagnostics & Product Tools:
  • doctor --all and doctor --changed for scalable batch/incremental session inspection.
  • diff for layer comparison across rollout, SQLite state DB, and git working directory.
  • timeline for privacy-safe forensic event chronology.
  • graph for parent-child subagent session tree visualization.
  • storage for disk footprint inspection and anomaly detection.
  • schema for persisted schema generations and coverage analysis.
  • workspace for cross-platform and runtime path portability checks.
  • writer for active Win32/POSIX process lock inspection.
  • plan & apply-plan for reproducible, reversible recovery operations with dry-run and backup guarantees.
  • bundle, redact-check, and report for offline privacy-safe HTML support reports.
• Local-First & Privacy: Zero telemetry, zero external network dependencies, strictly local diagnostics.

Codex Rescue 0.1.0 Alpha 5

Experimental local-first Alpha5 prerelease. Includes projection and discovery diagnostics, conservative schema and lifecycle evidence, standalone native binaries, thin npm platform packages, and exact-source release verification. Rescue preserves source rollouts and SQLite state, keeps salvage forked, does not replay unknown side effects, and does not claim to repair upstream transport, Desktop/UI, remote/mobile hydration, or persistence failures. See CHANGELOG.md and docs/alpha5-field-validation.md for scope and limitations.

Codex Rescue v0.1.0-alpha.4

Codex Rescue v0.1.0-alpha.4

Alpha 4 is a conservative diagnostic and recovery update for Codex session rollouts.

Highlights & Fixes

• Schema Recognition (A3-SCHEMA): Correctly recognizes valid mcp_tool_call_end and custom_tool_call_output operational events without false unknown schema classifications.
• VCS State Handling (A3-VCS): Non-Git and SVN workspaces are handled cleanly without raising false repository divergence alerts.
• Future Schema Protection (P4-FUTURE-SCHEMA): Unrecognized operational event types in active streams fail closed as UNKNOWN_OPERATIONAL_SCHEMA to prevent false HEALTHY diagnostics.
• Turn & Ordinal Analysis: Conservative detection of persisted paginated ordinal reuse across compaction boundaries.

Non-Negotiable Safety Invariants

• Source Byte Immutability: Original session rollouts are strictly read-only.
• Database State: Codex internal SQLite databases, WAL, and SHM files are never modified.
• Forked Handoff: salvage --fork produces an immutable, content-addressed recovery artifact.
• Zero Telemetry: Purely local-first execution with no cloud dependencies or data uploads.

Codex Rescue v0.1.0-alpha.3

Codex Rescue v0.1.0-alpha.3

Experimental alpha release focused on a real persisted tool-call corruption case.

Highlights

• Added CORRUPTED_TOOL_CALL detection for persisted tool-call names containing
  NUL or other ASCII control characters.
• Derived from real-world openai/codex#24369.
• Corrupted names are represented with bounded metadata and are never guessed
  or automatically repaired.
• The original rollout remains untouched and unknown calls are never replayed.
• Verification remains fail-closed with REVIEW_REQUIRED.
• Retained regression coverage for #14824 (orphaned/missing tool output) and
  #37719 (oversized persisted tool output).

Limitations

This release does not repair Codex HTTP 400 responses, automatically
reconstruct corrupted tool names, replay unknown calls, repair arbitrary
malformed arguments, or claim broad compaction recovery.

Install

pipx install codex-rescue==0.1.0a3
# or
pip install codex-rescue==0.1.0a3

Requires Python 3.11+.

Privacy

Codex Rescue is local-first. Do not share raw Codex rollout files: they can
contain source code, credentials, or private prompts. Sanitize any report before
sharing.

v0.1.0-alpha.2

Codex Rescue v0.1.0-alpha.2

Experimental alpha release focused on fail-closed recovery and evidence integrity.

Highlights

• Recovery now treats compaction state loss, ambiguous tool-call correlation, and unknown operational records as review-required evidence.
• Source snapshot checks, Git-state fingerprinting, bounded parsing and hashing, redaction, artifact writing, and continuation rendering have been hardened.
• Fixture materialization avoids transient Git lock files, improving clean-clone portability.
• Source distributions exclude the default local rescue-artifact directory.

Validation

• Windows and Linux complete validation passed for the exact release candidate.
• The strict real-macOS GitHub Actions evidence gate passed for the same 105-file candidate archive.
• The wheel and sdist are built, inspected for unwanted content, and installed in fresh isolated environments for CLI and import smoke checks during release preparation.

Install

pipx install codex-rescue
# or
pip install codex-rescue

Requires Python 3.11+.

Alpha limitations

Codex Rescue remains experimental alpha software. It never automatically replays unknown work; review the handoff and repository state before continuing. See the README and CHANGELOG for compatibility limits and the full safety posture.

Privacy

Codex Rescue is local-first. Do not share raw Codex rollout files: they can contain source code, credentials, or private prompts. Sanitize any report before sharing.

Codex Rescue v0.1.0-alpha

Codex Rescue v0.1.0-alpha

Experimental first release of a local recovery tool for interrupted and damaged OpenAI Codex sessions.

What it does

Codex Rescue diagnoses broken Codex CLI sessions, verifies the repository state, and creates an evidence-backed continuation handoff — all without modifying the original rollout.

Command	Purpose
sessions	Find recent Codex sessions
doctor	Diagnose an interrupted or damaged session (read-only)
salvage	Create an immutable evidence-backed recovery handoff
verify	Detect repository divergence before continuation

Every recovered fact is labeled with a confidence level: VERIFIED, RECONSTRUCTED, or UNKNOWN. Unknown state remains unknown — Rescue never guesses.

Install

# Recommended global installation via pipx
pipx install codex-rescue

# Or via pip
pip install codex-rescue

Requires Python 3.11+.

Quick demo

codex-rescue doctor --latest
codex-rescue salvage --latest --fork
codex-rescue verify <rescue-id>

What has been proven

• 5 synthetic failure types diagnosed and recovered correctly
• 2 real-origin sanitized cases (interrupted session, induced truncation)
• Source rollout immutability verified via SHA-256 before/after
• 43 automated tests pass, 1 skipped (real-session test requires live Codex)
• Git state verification detects HEAD, worktree, and diff divergence

Validated Codex versions

• Codex CLI 0.147.0 — real interrupted session recovery demonstrated
• Codex CLI 0.146.1 — isolated and smoke-tested
• Codex 0.145.0-alpha.18 — sanitized format compatibility observed

Alpha limitations

Warning

This is experimental alpha software.

• Broad real compaction recovery is not yet validated — only synthetic fixtures
• Interactive continuation depends on terminal/TTY environment
• Previous Codex version recovery coverage is limited
• Not every arbitrary corruption type is supported
• No Linux/macOS real-failure validation yet

Privacy

• Local-only — no telemetry, no analytics, no cloud upload, no account
• Codex rollout files can contain secrets, API keys, and private code
• Sanitize all data before sharing in issue reports
• Built-in secret redaction is bounded and not a complete DLP system

Submit recovery reports

The main goal of this alpha is collecting real broken Codex sessions.

Open a Recovery Report →

⚠️ Do NOT upload raw rollout files containing secrets. Sanitize first.

License

MIT