Enforce LF for SQL migrations to keep Windows and Linux checksums identical

What version of Codex CLI is running?

0.152.0

What subscription do you have?

Pro

Which model were you using?

gpt-5.6-sol

What platform is your computer?

Microsoft Windows NT 10.0.26200.0 x64

What terminal emulator and version are you using (if applicable)?

Git Bash, PowerShell

Codex doctor report

{
  "schemaVersion": 1,
  "generatedAt": "1788297264s since unix epoch",
  "overallStatus": "warning",
  "codexVersion": "0.152.0",
  "checks": {
    "app_server.status": {
      "id": "app_server.status",
      "category": "app-server",
      "status": "ok",
      "summary": "background server is not running",
      "details": {
        "control socket": "C:\\Users\\stefa\\.codex\\app-server-control\\app-server-control.sock",
        "daemon state dir": "C:\\Users\\stefa\\.codex\\app-server-daemon",
        "mode": "ephemeral",
        "pid file": "C:\\Users\\stefa\\.codex\\app-server-daemon\\app-server.pid (missing)",
        "settings": "C:\\Users\\stefa\\.codex\\app-server-daemon\\settings.json (missing)",
        "status": "not running",
        "update-loop pid file": "C:\\Users\\stefa\\.codex\\app-server-daemon\\app-server-updater.pid (missing)"
      },
      "remediation": null,
      "durationMs": 0
    },
    "auth.credentials": {
      "id": "auth.credentials",
      "category": "auth",
      "status": "ok",
      "summary": "auth is configured",
      "details": {
        "auth file": "C:\\Users\\stefa\\.codex\\auth.json",
        "auth storage mode": "File",
        "stored API key": "false",
        "stored ChatGPT tokens": "true",
        "stored agent identity": "false",
        "stored auth mode": "chatgpt"
      },
      "remediation": null,
      "durationMs": 0
    },
    "config.load": {
      "id": "config.load",
      "category": "config",
      "status": "ok",
      "summary": "config loaded",
      "details": {
        "CODEX_HOME": "C:\\Users\\stefa\\.codex",
        "config.toml": "C:\\Users\\stefa\\.codex\\config.toml",
        "config.toml parse": "ok",
        "cwd": "C:\\development\\github\\openai\\codex-container",
        "enabled feature flags": "<redacted>",
        "feature flag overrides": "none",
        "feature flags enabled": "48",
        "log dir": "C:\\Users\\stefa\\.codex\\log",
        "mcp servers": "0",
        "model": "<default>",
        "model provider": "openai",
        "sqlite home": "C:\\Users\\stefa\\.codex"
      },
      "remediation": null,
      "durationMs": 0
    },
    "git.environment": {
      "id": "git.environment",
      "category": "git",
      "status": "ok",
      "summary": "git version 2.55.0.windows.5",
      "details": {
        ".git entry": "directory",
        "PATH git #1": "C:\\Program Files\\Git\\cmd\\git.exe",
        "PATH git entries": "1",
        "git branch": "master",
        "git build options": "git version 2.55.0.windows.5; cpu: x86_64; built from commit: 32c4f7689275d233577576630e1ac5b7eb354eb0; sizeof-long: 4; sizeof-size_t: 8; shell-path: D:/git-sdk-64-build-installers/usr/bin/sh; rust: disabled; feature: fsmonitor--daemon; gettext: enabled; libcurl: 8.21.0; OpenSSL: OpenSSL 3.5.7 9 Jun 2026; zlib: 1.3.2; SHA-1: SHA1_DC; SHA-256: SHA256_BLK; default-ref-format: files; default-hash: sha1",
        "git exec path": "C:/Program Files/Git/mingw64/libexec/git-core",
        "git version": "git version 2.55.0.windows.5",
        "repo detected": "true",
        "repo root": "C:\\development\\github\\openai\\codex-container",
        "selected git": "C:\\Program Files\\Git\\cmd\\git.exe"
      },
      "remediation": null,
      "durationMs": 71
    },
    "git.worktree.dev_drive": {
      "id": "git.worktree.dev_drive",
      "category": "git",
      "status": "warning",
      "summary": "this worktree is not on a Windows Dev Drive; moving it to a trusted Dev Drive can significantly improve repository and filesystem performance",
      "details": {},
      "remediation": "create a trusted Windows Dev Drive for source repositories: https://learn.microsoft.com/en-us/<redacted>",
      "durationMs": 0
    },
    "installation": {
      "id": "installation",
      "category": "install",
      "status": "ok",
      "summary": "installation looks consistent",
      "details": {
        "PATH codex #1": "C:\\nvm4w\\nodejs\\codex",
        "PATH codex #2": "C:\\nvm4w\\nodejs\\codex.cmd",
        "PATH codex entries": "2",
        "current executable": "C:\\Users\\stefa\\AppData\\Local\\nvm\\v20.20.0\\node_modules\\@openai\\codex\\node_modules\\@openai\\codex-win32-x64\\vendor\\x86_64-pc-windows-msvc\\bin\\codex.exe",
        "install context": "npm (package C:\\Users\\stefa\\AppData\\Local\\nvm\\v20.20.0\\node_modules\\@openai\\codex\\node_modules\\@openai\\codex-win32-x64\\vendor\\x86_64-pc-windows-msvc, bin C:\\Users\\stefa\\AppData\\Local\\nvm\\v20.20.0\\node_modules\\@openai\\codex\\node_modules\\@openai\\codex-win32-x64\\vendor\\x86_64-pc-windows-msvc\\bin, resources C:\\Users\\stefa\\AppData\\Local\\nvm\\v20.20.0\\node_modules\\@openai\\codex\\node_modules\\@openai\\codex-win32-x64\\vendor\\x86_64-pc-windows-msvc\\codex-resources, path C:\\Users\\stefa\\AppData\\Local\\nvm\\v20.20.0\\node_modules\\@openai\\codex\\node_modules\\@openai\\codex-win32-x64\\vendor\\x86_64-pc-windows-msvc\\codex-path)",
        "managed by bun": "false",
        "managed by npm": "true",
        "managed by pnpm": "false",
        "managed package root": "C:\\Users\\stefa\\AppData\\Local\\nvm\\v20.20.0\\node_modules\\@openai\\codex",
        "npm update target": "C:\\nvm4w\\nodejs\\node_modules\\@openai\\codex"
      },
      "remediation": null,
      "durationMs": 1402
    },
    "mcp.config": {
      "id": "mcp.config",
      "category": "mcp",
      "status": "ok",
      "summary": "no MCP servers configured",
      "details": {},
      "remediation": null,
      "durationMs": 0
    },
    "network.env": {
      "id": "network.env",
      "category": "network",
      "status": "ok",
      "summary": "network-related environment looks readable",
      "details": {
        "managed proxy": "not configured",
        "proxy env vars": "none",
        "respect system proxy": "disabled"
      },
      "remediation": null,
      "durationMs": 0
    },
    "network.provider_reachability": {
      "id": "network.provider_reachability",
      "category": "reachability",
      "status": "ok",
      "summary": "active provider endpoints are reachable over HTTP",
      "details": {
        "ChatGPT inference URL": "https://chatgpt.com/backend-api/<redacted> reachable (HTTP 405)",
        "reachability mode": "ChatGPT auth"
      },
      "remediation": null,
      "durationMs": 146
    },
    "network.websocket_reachability": {
      "id": "network.websocket_reachability",
      "category": "websocket",
      "status": "ok",
      "summary": "Responses WebSocket handshake succeeded",
      "details": {
        "DNS": "2 IPv4, 2 IPv6, first IPv6",
        "auth mode": "chatgpt",
        "connect timeout": "15000 ms",
        "endpoint": "wss://chatgpt.com/backend-api/<redacted>",
        "handshake result": "HTTP 101 Switching Protocols",
        "model provider": "openai",
        "provider name": "OpenAI",
        "proxy env vars": "none",
        "reasoning header": "false",
        "server model present": "false",
        "supports websockets": "true",
        "wire API": "responses"
      },
      "remediation": null,
      "durationMs": 689
    },
    "runtime.provenance": {
      "id": "runtime.provenance",
      "category": "runtime",
      "status": "ok",
      "summary": "running npm on windows-x86_64",
      "details": {
        "commit": "unknown",
        "current executable": "C:\\Users\\stefa\\AppData\\Local\\nvm\\v20.20.0\\node_modules\\@openai\\codex\\node_modules\\@openai\\codex-win32-x64\\vendor\\x86_64-pc-windows-msvc\\bin\\codex.exe",
        "install method": "npm (package C:\\Users\\stefa\\AppData\\Local\\nvm\\v20.20.0\\node_modules\\@openai\\codex\\node_modules\\@openai\\codex-win32-x64\\vendor\\x86_64-pc-windows-msvc, bin C:\\Users\\stefa\\AppData\\Local\\nvm\\v20.20.0\\node_modules\\@openai\\codex\\node_modules\\@openai\\codex-win32-x64\\vendor\\x86_64-pc-windows-msvc\\bin, resources C:\\Users\\stefa\\AppData\\Local\\nvm\\v20.20.0\\node_modules\\@openai\\codex\\node_modules\\@openai\\codex-win32-x64\\vendor\\x86_64-pc-windows-msvc\\codex-resources, path C:\\Users\\stefa\\AppData\\Local\\nvm\\v20.20.0\\node_modules\\@openai\\codex\\node_modules\\@openai\\codex-win32-x64\\vendor\\x86_64-pc-windows-msvc\\codex-path)",
        "platform": "windows-x86_64",
        "version": "0.152.0"
      },
      "remediation": null,
      "durationMs": 0
    },
    "runtime.search": {
      "id": "runtime.search",
      "category": "search",
      "status": "ok",
      "summary": "search is OK (bundled)",
      "details": {
        "search command": "C:\\Users\\stefa\\AppData\\Local\\nvm\\v20.20.0\\node_modules\\@openai\\codex\\node_modules\\@openai\\codex-win32-x64\\vendor\\x86_64-pc-windows-msvc\\codex-path\\rg.exe",
        "search command readiness": "file exists",
        "search provider": "bundled"
      },
      "remediation": null,
      "durationMs": 0
    },
    "sandbox.helpers": {
      "id": "sandbox.helpers",
      "category": "sandbox",
      "status": "ok",
      "summary": "sandbox configuration is readable",
      "details": {
        "approval policy": "OnRequest",
        "codex-linux-sandbox helper": "none",
        "denied-read restrictions": "false",
        "execve wrapper helper": "none",
        "filesystem sandbox": "restricted",
        "network sandbox": "restricted",
        "sandbox backend": "<redacted>"
      },
      "remediation": null,
      "durationMs": 0
    },
    "security.endpoint": {
      "id": "security.endpoint",
      "category": "security",
      "status": "warning",
      "summary": "endpoint protection detected; Codex exclusions are unverified",
      "details": {
        "Codex exclusions": "not verified",
        "endpoint products": "Microsoft Defender",
        "exclusion targets": "signed Codex app; codex.exe; codex-windows-sandbox-setup.exe; codex-command-runner.exe; codex-code-mode-host.exe"
      },
      "issues": [
        {
          "severity": "warning",
          "cause": "Microsoft Defender can interfere with Codex. Verify Codex exclusions.",
          "measured": "not verified",
          "expected": "Codex application and helper exclusions",
          "remedy": "Microsoft Defender: Add a certificate or executable-path exclusion for Codex and its helpers. If Attack Surface Reduction blocks Codex, add a rule exclusion. If Controlled Folder Access blocks Codex, allow the app.",
          "fields": [
            "Codex exclusions"
          ]
        }
      ],
      "remediation": "ask your security administrator to verify Codex exclusions and required helper allowances",
      "durationMs": 19
    },
    "state.paths": {
      "id": "state.paths",
      "category": "state",
      "status": "ok",
      "summary": "state paths and databases are inspectable",
      "details": {
        "CODEX_HOME": "C:\\Users\\stefa\\.codex (dir)",
        "active rollout files": "3 files, 4707811 total bytes, 1569270 average bytes",
        "archived rollout files": "0 files, 0 total bytes, 0 average bytes",
        "goals DB": "C:\\Users\\stefa\\.codex\\goals_1.sqlite (file)",
        "goals DB integrity": "ok",
        "log DB": "C:\\Users\\stefa\\.codex\\logs_2.sqlite (file)",
        "log DB integrity": "ok",
        "log dir": "C:\\Users\\stefa\\.codex\\log (missing)",
        "memories DB": "C:\\Users\\stefa\\.codex\\memories_1.sqlite (file)",
        "memories DB integrity": "ok",
        "queue DB": "C:\\Users\\stefa\\.codex\\queue_1.sqlite (file)",
        "queue DB integrity": "ok",
        "sqlite home": "C:\\Users\\stefa\\.codex (dir)",
        "state DB": "C:\\Users\\stefa\\.codex\\state_5.sqlite (file)",
        "state DB integrity": "ok",
        "thread history DB": "C:\\Users\\stefa\\.codex\\thread_history_1.sqlite (file)",
        "thread history DB integrity": "ok"
      },
      "remediation": null,
      "durationMs": 123
    },
    "state.rollout_db_parity": {
      "id": "state.rollout_db_parity",
      "category": "threads",
      "status": "warning",
      "summary": "rollout files and state DB thread inventory differ",
      "details": {
        "default model provider": "openai",
        "rollout DB active files": "3",
        "rollout DB active rows": "3",
        "rollout DB archive mismatches": "0",
        "rollout DB archived files": "0",
        "rollout DB archived rows": "0",
        "rollout DB duplicate DB paths": "0",
        "rollout DB duplicate rollout thread ids": "0",
        "rollout DB malformed file names": "0",
        "rollout DB missing active rows": "3",
        "rollout DB missing active sample": [
          "C:\\Users\\stefa\\.codex\\sessions\\2026\\09\\01\\rollout-2026-09-01T16-58-11-01a05de8-2a32-7062-bbfa-ec4a4484715b.jsonl",
          "C:\\Users\\stefa\\.codex\\sessions\\2026\\09\\01\\rollout-2026-09-01T20-03-38-01a05e91-f214-7ad1-bcd1-53f0473820b0.jsonl",
          "C:\\Users\\stefa\\.codex\\sessions\\2026\\09\\01\\rollout-2026-09-01T20-34-54-01a05eae-91c7-7d83-9d08-a2b9fd4aa877.jsonl"
        ],
        "rollout DB missing archived rows": "0",
        "rollout DB model providers": "openai=3",
        "rollout DB rows": "3",
        "rollout DB scan cap reached": "false",
        "rollout DB scan errors": "0",
        "rollout DB sources": "cli=3",
        "rollout DB stale row sample": [
          "/root/.codex/sessions/2026/09/01/rollout-2026-09-01T16-58-11-01a05de8-2a32-7062-bbfa-ec4a4484715b.jsonl",
          "/root/.codex/sessions/2026/09/01/rollout-2026-09-01T20-03-38-01a05e91-f214-7ad1-bcd1-53f0473820b0.jsonl",
          "/root/.codex/sessions/2026/09/01/rollout-2026-09-01T20-34-54-01a05eae-91c7-7d83-9d08-a2b9fd4aa877.jsonl"
        ],
        "rollout DB stale rows": "3"
      },
      "issues": [
        {
          "severity": "warning",
          "cause": "rollout files are missing from the state DB",
          "measured": "3 active, 0 archived",
          "expected": "every rollout file has a matching threads row",
          "remedy": null,
          "fields": []
        },
        {
          "severity": "warning",
          "cause": "state DB rows point at missing or unusable rollout files",
          "measured": "3 stale rows",
          "expected": "every state DB rollout path is a file on disk",
          "remedy": null,
          "fields": []
        }
      ],
      "remediation": null,
      "durationMs": 44
    },
    "system.disk": {
      "id": "system.disk",
      "category": "disk",
      "status": "ok",
      "summary": "sufficient free disk space (55.3 GiB)",
      "details": {
        "CODEX_HOME available": "55.3 GiB",
        "failure threshold": "1.0 GiB",
        "warning threshold": "5.0 GiB",
        "worktree available": "55.3 GiB"
      },
      "remediation": null,
      "durationMs": 0
    },
    "system.environment": {
      "id": "system.environment",
      "category": "system",
      "status": "ok",
      "summary": "OS language en-US",
      "details": {
        "EDITOR": "not set",
        "VISUAL": "not set",
        "os": "Windows 10.0.26200 (Windows 11 Core) [64-bit]",
        "os language": "en-US",
        "os type": "Windows",
        "os version": "10.0.26200"
      },
      "remediation": null,
      "durationMs": 1
    },
    "terminal.env": {
      "id": "terminal.env",
      "category": "terminal",
      "status": "ok",
      "summary": "terminal metadata was detected",
      "details": {
        "color output": "enabled",
        "console input code page": "437",
        "console output code page": "437",
        "stderr console mode": "0x00000007 (VT processing: true)",
        "stderr is terminal": "true",
        "stdin is terminal": "true",
        "stdout console mode": "0x00000007 (VT processing: true)",
        "stdout is terminal": "true",
        "terminal": "unknown",
        "terminal size": "120x30"
      },
      "remediation": null,
      "durationMs": 0
    },
    "terminal.title": {
      "id": "terminal.title",
      "category": "title",
      "status": "ok",
      "summary": "terminal title default",
      "details": {
        "terminal title activity": "true",
        "terminal title items": "activity, project-name",
        "terminal title project source": "git repo root",
        "terminal title project value": "codex-container",
        "terminal title source": "default"
      },
      "remediation": null,
      "durationMs": 0
    },
    "updates.status": {
      "id": "updates.status",
      "category": "updates",
      "status": "ok",
      "summary": "update configuration is locally consistent",
      "details": {
        "cached latest version": "0.152.0",
        "check for update on startup": "true",
        "last checked at": "2026-09-01T16:14:59.031469521Z",
        "latest version": "0.152.0",
        "latest version status": "current version is not older",
        "npm update target": "C:\\nvm4w\\nodejs\\node_modules\\@openai\\codex",
        "update action": "npm install -g @openai/codex",
        "version cache": "C:\\Users\\stefa\\.codex\\version.json"
      },
      "remediation": null,
      "durationMs": 381
    }
  }
}

What issue are you seeing?

Problem

Official Windows and Linux Codex 0.152.0 builds embed different checksums for the same SQL migrations because sqlx::migrate! hashes the files’ raw bytes:

• Linux/LF migration 1: 627EF19164C9…78049
• Windows/CRLF migration 1: 54BBD6F47905…847D4

As a result, Windows Codex rejects a database created by Linux Codex with:

migration 1 was previously applied but has been modified

Proposed change

Add this line to the repository-root .gitattributes file:

codex-rs/app-server-protocol/schema/** linguist-generated
codex-rs/hooks/schema/generated/** linguist-generated
+codex-rs/state/**/*.sql text eol=lf

This ensures that Windows and Linux builds embed identical migration bytes and calculate identical SQLx migration checksums.

Verification

I built Codex on Windows after applying this rule. The resulting Windows binary embedded the Linux/LF migration checksum and successfully opened the shared database created by Linux Codex.

What steps can reproduce the bug?

The incompatibility between the local Codex profile on Windows with Linux can be reproduced with:

1. On Windows, start Codex CLI and authenticate (to fill ~/.codex
2. Create a file Dockerfile with this content:

   FROM ubuntu:latest
   
   ENV DEBIAN_FRONTEND=noninteractive
   
   RUN apt-get update \
     && apt-get install -y --no-install-recommends \
         ca-certificates \
         curl \
     && rm -rf /var/lib/apt/lists/*
   
   RUN curl -fsSL https://chatgpt.com/codex/install.sh \
       | CODEX_HOME=/opt/codex \
         CODEX_INSTALL_DIR=/usr/local/bin \
         CODEX_NON_INTERACTIVE=1 \
         sh
   
   CMD ["codex"]
   

3. Create a Linux image with Codex installed by running docker build -t codex-ubuntu .
4. Run Codex in the image with docker run --rm -it -v "${HOME}\.codex:/root/.codex" codex-ubuntu (in PowerShell)

An error like this should be appear:

PS C:\Windows\system32>  docker run --rm -it -v "${HOME}\.codex:/root/.codex" codex-ubuntu
╭───────────────────────────────────────╮
│ >_ OpenAI Codex (v0.152.0)            │
│                                       │
│ model:     loading   /model to change │                                                                               │ directory: /                          │
╰───────────────────────────────────────╯


› Codex couldn't start because its local database appears to be damaged.
Run `codex doctor` to check your setup and get next-step guidance.
If this keeps happening, share the technical details below when asking for help.
Technical details:
  Location: /root/.codex/state_5.sqlite
  Cause: failed to initialize state runtime at /root/.codex: failed to migrate state DB at /root/.codex/state_5.sqlite: migration 1 was previously applied but has been modified: migration 1 was previously applied but has been modified
ERROR: failed to initialize sqlite local db at /root/.codex/state_5.sqlite: failed to initialize state runtime at /root/.codex: failed to migrate state DB at /root/.codex/state_5.sqlite: migration 1 was previously applied but has been modified: migration 1 was previously applied but has been modified

What's next:
    Debug this container error with Gordon → docker ai "help me fix this container error"
PS C:\Windows\system32>

What is the expected behavior?

Codex should start just fine on Linux using a ~/.codex created on Windows.
It did so for about 6 months at least.

Additional information

No response

The issue names SQL migrations and checksum calculation but does not identify files or tests. Locate the migration-loading and checksum entry points, then inspect existing cross-platform tests; done means migrations use LF consistently and produce identical checksums on Windows and Linux.