Skip to content

CHANGELOG.md

Latest commit

 

History

History
162 lines (127 loc) · 6.82 KB

CHANGELOG.md

File metadata and controls

162 lines (127 loc) · 6.82 KB
Raw

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog.

[Unreleased]

Fixed

  • Codex has_user_event drift repair is now project-scoped when a --project-path is supplied. Guardian passes that cwd through both the stale row repair and slow-path wrapper install paths, so a single-folder /resume incident can be healed without backfilling unrelated global Codex threads or archiving any sessions.
  • Codex slow-path repair no longer routes normal CLI startup through an older native hotfix binary. The managed launcher wrapper now intercepts only picker-only codex resume list forms and delegates every other command to the installed upstream @openai/codex launcher, preserving codex-cli 0.130.0 and 0.130-era feature config such as [features.multi_agent_v2].
  • Codex native TUI /resume repair now preserves [mcp_servers.metamcp] and reports its enabled state, endpoint, and startup timeout as diagnostics. Guardian no longer writes enabled = false; when MCP startup blocks the picker, the repair target is the MetaMCP route or child-server health rather than disabling the configured server.
  • Codex session visibility repair now ships the title-aware v3 codex-resume-picker.js helper. It reads lightweight SQLite rows first, enriches titles in bounded chunks, includes archived session rows and archived-large-sessions manifests, displays updated time, and reinstalls the global Codex launcher wrapper when npm upgrades overwrite it. This keeps codex resume and codex resume --all --no-alt-screen usable on codex-cli 0.130.0 while preserving native --last and explicit session-id resume paths.
  • Guardian now upgrades older materialized %USERPROFILE%\.codex\tools\repair-codex-resume.ps1 copies with a backup, instead of leaving stale packaged repair scripts in place after app updates.
  • Codex C4 slow-path classification no longer treats "sessions older than 30 days are still unarchived" as a failure by itself. Native Codex can re-index old visible rows while rendering /resume, so Guardian now keeps that count informational and avoids repeatedly archiving history the user is trying to resume.

[0.1.4] - 2026-05-15

Added

  • Version-based auto-release workflow. When the workspace package version is bumped on main and the corresponding vX.Y.Z tag does not exist yet, CI builds the Windows package, creates the tag, and publishes the release.

Changed

  • Release workflow now uploads a single recommended Windows zip plus SHA256SUMS.txt; the standalone guardian.exe direct asset is no longer uploaded to avoid confusing it with the complete Windows package.
  • Windows-path test fixtures now use neutral example paths rather than local workstation paths.

[0.1.3] - 2026-05-15

Fixed

  • Packaged guardian.exe is now usable as a Windows desktop application when launched from File Explorer. Running guardian.exe with no subcommand now opens the desktop GUI instead of printing CLI usage and exiting immediately.
  • JSON automation remains explicit: guardian.exe --json without a subcommand reports an invalid invocation instead of guessing a GUI entry point.
  • GUI and tray internal command execution now use the supported --json <subcommand> argument order.

Documentation

  • README now calls out the fixed packaged-artifact behavior and includes real GUI screenshots captured from the packaged executable.

[0.1.2] - 2026-05-03

Guardian assumes the user has already installed @openai/codex via npm (that is the prerequisite for needing this tool at all). The release zip therefore ships only guardian.exe, the trusted repair script, and the project docs — never a copy of codex.exe. The slow-path (C4) launcher patch falls back to the user's own vendor/<triple>/codex/codex.exe from their npm install when no vendor-hotfix/... is present.

Fixed

  • guardian repair codex --confirm no longer aborts with trusted repair script is missing: ...\.codex\tools\repair-codex-resume.ps1 on a freshly-installed machine (GitHub issue #2). The trusted PowerShell repair script is now embedded into guardian.exe via include_str! and materialized to <codex_home>/tools/repair-codex-resume.ps1 on first launch (and defensively before the C2 repair branch). Existing operator-customised scripts at that path are preserved.

Changed

  • package-release.ps1 now stages tools/repair-codex-resume.ps1 inside the release zip as a defense-in-depth copy of the trusted script.

Added

  • guardian-repair::codex::ensure_codex_tools_deployed helper, called from apps/guardian/src/app.rs::run so every CLI / GUI / tray entry point lays the embedded repair script down idempotently.
  • apps/guardian/assets/tools/repair-codex-resume.ps1 is now the canonical source of truth for the repair script and is shipped with the source tree.

[0.1.1] - 2026-04-23

Fixed

  • guardian repair codex --confirm no longer aborts the entire run and discards successful stale-row (C2) or trusted-project (C6) repair work when the slow-path (C4) launcher hotfix step fails (for example, when no verified hotfix binary is present on the workstation, or when the launcher vendor block can no longer be located). The failure is captured as repair_slow_path_error evidence, recorded in the audit record, surfaced in CLI / GUI / tray notes, and the outcome is reported as unresolved instead of a hard error. This preserves the audit trail and any earlier successful repair work on machines where the hotfix source is not yet staged.

Documentation

  • README now states the project's creation purpose and the concrete failure classes it was built to handle.

[0.1.0] - 2026-04-19

Added

  • Rust workspace for the Windows Codex Stability Guardian main program.
  • guardian.exe command surface with:
    • check
    • repair codex
    • repair docker
    • diagnose profile
    • export bundle
    • gui
    • tray
  • Codex managed repair orchestration with:
    • pre-flight health inspection
    • backup-first SQLite repair
    • project trust drift detection for .codex/config.toml
    • confirm-gated trusted project entry append with post-write verification
    • structured confirm-mode audit output
  • Docker / WSL repair flows with guarded runtime restart behavior.
  • Profile diagnosis output with guided recovery notes.
  • Bundle export support for health, diagnosis, and audit summaries.
  • Release packaging script for Windows x64 artifacts.
  • GitHub Actions CI and tag-driven release workflow.

Security

  • Explicit --confirm gating for mutating repair actions.
  • Read-only profile diagnosis boundary.
  • Backup creation before Codex SQLite repair.

Documentation

  • Initial professional repository README.
  • Initial release-ready changelog.
  • Release packaging and verification guidance.