Windows CLI: orchestrator_helper_launch_failed reports "program not found" even though helper exists and repository operations succeed

What version of Codex CLI is running?

codex-cli 0.145.0

What subscription do you have?

ChatGPT Pro

Which model were you using?

gpt-5.6-sol xhigh

What platform is your computer?

Microsoft Windows NT 10.0.26200.0 x64

What terminal emulator and version are you using (if applicable)?

Windows PowerShell 5.1

Codex doctor report

PS C:\Users\inevi> codex doctor --json
{
  "schemaVersion": 1,
  "generatedAt": "1784924755s since unix epoch",
  "overallStatus": "ok",
  "codexVersion": "0.145.0",
  "checks": {
    "app_server.status": {
      "id": "app_server.status",
      "category": "app-server",
      "status": "ok",
      "summary": "background server is not running",
      "details": {
        "control socket": "C:\\Users\\inevi\\.codex\\app-server-control\\app-server-control.sock",
        "daemon state dir": "C:\\Users\\inevi\\.codex\\app-server-daemon",
        "mode": "ephemeral",
        "pid file": "C:\\Users\\inevi\\.codex\\app-server-daemon\\app-server.pid (missing)",
        "settings": "C:\\Users\\inevi\\.codex\\app-server-daemon\\settings.json (missing)",
        "status": "not running",
        "update-loop pid file": "C:\\Users\\inevi\\.codex\\app-server-daemon\\app-server-updater.pid (missing)"
      },
      "remediation": null,
      "durationMs": 0
    },
    "auth.credentials": {
      "id": "auth.credentials",
      "category": "auth",
      "status": "ok",
      "summary": "auth is configured",
      "details": {
        "auth file": "C:\\Users\\inevi\\.codex\\auth.json",
        "auth storage mode": "File",
        "stored API key": "false",
        "stored ChatGPT tokens": "true",
        "stored agent identity": "false",
        "stored auth mode": "chatgpt"
      },
      "remediation": null,
      "durationMs": 0
    },
    "config.load": {
      "id": "config.load",
      "category": "config",
      "status": "ok",
      "summary": "config loaded",
      "details": {
        "CODEX_HOME": "C:\\Users\\inevi\\.codex",
        "config.toml": "C:\\Users\\inevi\\.codex\\config.toml",
        "config.toml parse": "ok",
        "cwd": "C:\\Users\\inevi",
        "enabled feature flags": "<redacted>",
        "feature flag overrides": "none",
        "feature flags enabled": "36",
        "log dir": "C:\\Users\\inevi\\.codex\\log",
        "mcp servers": "2",
        "model": "gpt-5.6-sol",
        "model provider": "openai",
        "sqlite home": "C:\\Users\\inevi\\.codex"
      },
      "remediation": null,
      "durationMs": 0
    },
    "git.environment": {
      "id": "git.environment",
      "category": "git",
      "status": "ok",
      "summary": "git version 2.53.0.windows.1",
      "details": {
        "PATH git #1": "C:\\Program Files\\Git\\cmd\\git.exe",
        "PATH git entries": "1",
        "git build options": "git version 2.53.0.windows.1; cpu: x86_64; built from commit: a5512bdee37ed7142c233d21e2d347ffc4860ff3; sizeof-long: 4; sizeof-size_t: 8; shell-path: D:/git-sdk-64-build-installers/usr/bin/sh; rust: disabled; feature: fsmonitor--daemon; gettext: enabled; libcurl: 8.18.0; OpenSSL: OpenSSL 3.5.5 27 Jan 2026; zlib: 1.3.1; SHA-1: SHA1_DC; SHA-256: SHA256_BLK; default-ref-format: files; default-hash: sha1",
        "git exec path": "C:/Program Files/Git/mingw64/libexec/git-core",
        "git version": "git version 2.53.0.windows.1",
        "repo detected": "false",
        "selected git": "C:\\Program Files\\Git\\cmd\\git.exe"
      },
      "remediation": null,
      "durationMs": 40
    },
    "installation": {
      "id": "installation",
      "category": "install",
      "status": "ok",
      "summary": "installation looks consistent",
      "details": {
        "PATH codex #1": "C:\\Users\\inevi\\AppData\\Local\\Programs\\OpenAI\\Codex\\bin\\codex.exe",
        "current executable": "C:\\Users\\inevi\\AppData\\Local\\Programs\\OpenAI\\Codex\\bin\\codex.exe",
        "install context": "standalone (windows, package C:\\Users\\inevi\\.codex\\packages\\standalone\\releases\\0.145.0-x86_64-pc-windows-msvc, bin C:\\Users\\inevi\\.codex\\packages\\standalone\\releases\\0.145.0-x86_64-pc-windows-msvc\\bin, resources C:\\Users\\inevi\\.codex\\packages\\standalone\\releases\\0.145.0-x86_64-pc-windows-msvc\\codex-resources, path C:\\Users\\inevi\\.codex\\packages\\standalone\\releases\\0.145.0-x86_64-pc-windows-msvc\\codex-path)",
        "managed by bun": "false",
        "managed by npm": "false",
        "managed by pnpm": "false",
        "managed package root": "not set"
      },
      "remediation": null,
      "durationMs": 39
    },
    "mcp.config": {
      "id": "mcp.config",
      "category": "mcp",
      "status": "ok",
      "summary": "MCP configuration is locally consistent",
      "details": {
        "configured servers": "2",
        "disabled servers": "0",
        "stdio servers": "1",
        "streamable_http servers": "1"
      },
      "remediation": null,
      "durationMs": 3271
    },
    "network.env": {
      "id": "network.env",
      "category": "network",
      "status": "ok",
      "summary": "network-related environment looks readable",
      "details": {
        "proxy env vars": "none"
      },
      "remediation": null,
      "durationMs": 0
    },
    "network.provider_reachability": {
      "id": "network.provider_reachability",
      "category": "reachability",
      "status": "ok",
      "summary": "active provider endpoints are reachable over HTTP",
      "details": {
        "ChatGPT base URL": "https://chatgpt.com/backend-api/ reachable (HTTP 403)",
        "reachability mode": "ChatGPT auth"
      },
      "remediation": null,
      "durationMs": 140
    },
    "network.websocket_reachability": {
      "id": "network.websocket_reachability",
      "category": "websocket",
      "status": "ok",
      "summary": "Responses WebSocket handshake succeeded",
      "details": {
        "DNS": "2 IPv4, 2 IPv6, first IPv6",
        "auth mode": "chatgpt",
        "connect timeout": "15000 ms",
        "endpoint": "wss://chatgpt.com/backend-api/<redacted>",
        "handshake result": "HTTP 101 Switching Protocols",
        "model provider": "openai",
        "models etag present": "true",
        "provider name": "OpenAI",
        "proxy env vars": "none",
        "reasoning header": "false",
        "server model present": "false",
        "supports websockets": "true",
        "wire API": "responses"
      },
      "remediation": null,
      "durationMs": 621
    },
    "runtime.provenance": {
      "id": "runtime.provenance",
      "category": "runtime",
      "status": "ok",
      "summary": "running standalone on windows-x86_64",
      "details": {
        "commit": "unknown",
        "current executable": "C:\\Users\\inevi\\AppData\\Local\\Programs\\OpenAI\\Codex\\bin\\codex.exe",
        "install method": "standalone (windows, package C:\\Users\\inevi\\.codex\\packages\\standalone\\releases\\0.145.0-x86_64-pc-windows-msvc, bin C:\\Users\\inevi\\.codex\\packages\\standalone\\releases\\0.145.0-x86_64-pc-windows-msvc\\bin, resources C:\\Users\\inevi\\.codex\\packages\\standalone\\releases\\0.145.0-x86_64-pc-windows-msvc\\codex-resources, path C:\\Users\\inevi\\.codex\\packages\\standalone\\releases\\0.145.0-x86_64-pc-windows-msvc\\codex-path)",
        "platform": "windows-x86_64",
        "version": "0.145.0"
      },
      "remediation": null,
      "durationMs": 0
    },
    "runtime.search": {
      "id": "runtime.search",
      "category": "search",
      "status": "ok",
      "summary": "search is OK (bundled)",
      "details": {
        "search command": "C:\\Users\\inevi\\.codex\\packages\\standalone\\releases\\0.145.0-x86_64-pc-windows-msvc\\codex-path\\rg.exe",
        "search command readiness": "file exists",
        "search provider": "bundled"
      },
      "remediation": null,
      "durationMs": 0
    },
    "sandbox.helpers": {
      "id": "sandbox.helpers",
      "category": "sandbox",
      "status": "ok",
      "summary": "sandbox configuration is readable",
      "details": {
        "approval policy": "OnRequest",
        "codex-linux-sandbox helper": "none",
        "execve wrapper helper": "none",
        "filesystem sandbox": "restricted",
        "network sandbox": "restricted"
      },
      "remediation": null,
      "durationMs": 0
    },
    "state.paths": {
      "id": "state.paths",
      "category": "state",
      "status": "ok",
      "summary": "state paths and databases are inspectable",
      "details": {
        "CODEX_HOME": "C:\\Users\\inevi\\.codex (dir)",
        "active rollout files": "194 files, 1870298388 total bytes, 9640713 average bytes",
        "archived rollout files": "0 files, 0 total bytes, 0 average bytes",
        "goals DB": "C:\\Users\\inevi\\.codex\\goals_1.sqlite (file)",
        "goals DB integrity": "ok",
        "log DB": "C:\\Users\\inevi\\.codex\\logs_2.sqlite (file)",
        "log DB integrity": "ok",
        "log dir": "C:\\Users\\inevi\\.codex\\log (dir)",
        "memories DB": "C:\\Users\\inevi\\.codex\\memories_1.sqlite (file)",
        "memories DB integrity": "ok",
        "sqlite home": "C:\\Users\\inevi\\.codex (dir)",
        "standalone release cache": "13 entries in C:\\Users\\inevi\\.codex\\packages\\standalone\\releases",
        "state DB": "C:\\Users\\inevi\\.codex\\state_5.sqlite (file)",
        "state DB integrity": "ok",
        "thread history DB": "C:\\Users\\inevi\\.codex\\thread_history_1.sqlite (missing)",
        "thread history DB integrity": "skipped (missing)"
      },
      "remediation": null,
      "durationMs": 5730
    },
    "state.rollout_db_parity": {
      "id": "state.rollout_db_parity",
      "category": "threads",
      "status": "ok",
      "summary": "rollout files and state DB thread inventory agree",
      "details": {
        "default model provider": "openai",
        "rollout DB active files": "194",
        "rollout DB active rows": "194",
        "rollout DB archive mismatches": "0",
        "rollout DB archived files": "0",
        "rollout DB archived rows": "0",
        "rollout DB duplicate DB paths": "0",
        "rollout DB duplicate rollout thread ids": "0",
        "rollout DB malformed file names": "0",
        "rollout DB missing active rows": "0",
        "rollout DB missing archived rows": "0",
        "rollout DB model providers": "openai=194",
        "rollout DB rows": "194",
        "rollout DB scan cap reached": "false",
        "rollout DB scan errors": "0",
        "rollout DB sources": "cli=170, subagent:thread_spawn=21, vscode=2, subagent:other=1",
        "rollout DB stale rows": "0"
      },
      "remediation": null,
      "durationMs": 1569
    },
    "system.environment": {
      "id": "system.environment",
      "category": "system",
      "status": "ok",
      "summary": "OS language en-US",
      "details": {
        "EDITOR": "not set",
        "VISUAL": "not set",
        "os": "Windows 10.0.26200 (Windows 11 Core) [64-bit]",
        "os language": "en-US",
        "os type": "Windows",
        "os version": "10.0.26200"
      },
      "remediation": null,
      "durationMs": 0
    },
    "terminal.env": {
      "id": "terminal.env",
      "category": "terminal",
      "status": "ok",
      "summary": "terminal metadata was detected",
      "details": {
        "WT_SESSION": "present",
        "color output": "enabled",
        "console input code page": "437",
        "console output code page": "437",
        "stderr console mode": "0x00000007 (VT processing: true)",
        "stderr is terminal": "true",
        "stdin is terminal": "true",
        "stdout console mode": "0x00000007 (VT processing: true)",
        "stdout is terminal": "true",
        "terminal": "Windows Terminal",
        "terminal size": "120x30"
      },
      "remediation": null,
      "durationMs": 0
    },
    "terminal.title": {
      "id": "terminal.title",
      "category": "title",
      "status": "ok",
      "summary": "terminal title default",
      "details": {
        "terminal title activity": "true",
        "terminal title items": "activity, project-name",
        "terminal title project source": "cwd",
        "terminal title project value": "inevi",
        "terminal title source": "default"
      },
      "remediation": null,
      "durationMs": 0
    },
    "updates.status": {
      "id": "updates.status",
      "category": "updates",
      "status": "ok",
      "summary": "update configuration is locally consistent",
      "details": {
        "cached latest version": "0.145.0",
        "check for update on startup": "true",
        "last checked at": "2026-07-24T19:33:34.484878900Z",
        "latest version": "0.145.0",
        "latest version status": "current version is not older",
        "update action": "standalone installer",
        "version cache": "C:\\Users\\inevi\\.codex\\version.json"
      },
      "remediation": null,
      "durationMs": 594
    }
  }
}
PS C:\Users\inevi>

What issue are you seeing?

Codex CLI intermittently reports the following during normal repository operations:

orchestrator_helper_launch_failed:
setup refresh failed to launch helper:
helper=codex-windows-sandbox-setup.exe
error=program not found

However, the repository operations themselves still succeed.

I verified this by creating, reading, updating, and deleting a temporary file.

The helper executable exists and matches the installed Codex version.

The issue appears to occur only during the automatic Windows sandbox refresh/bootstrap path.

Additional diagnostics show:

• codex doctor --json reports overallStatus: ok
• installation: ok
• sandbox.helpers: ok
• runtime.provenance: ok
• updates.status: ok

This appears inconsistent because Codex Doctor reports the sandbox as healthy while runtime execution reports that the helper cannot be launched.

Repository operations ultimately succeed through what appears to be a fallback execution path.

What steps can reproduce the bug?

1. Install the standalone Windows Codex CLI 0.145.0.

1. Open a repository on Windows.

1. Launch Codex inside the repository.

1. Ask Codex to:

• create a temporary file
• read the file
• update the file
• delete the file

Example request:

Perform a sandbox reliability test.

Create a temporary file.

Read it.

Update it.

Read it again.

Delete it.

1. Observe that Codex reports:

orchestrator_helper_launch_failed:
setup refresh failed to launch helper:
helper=codex-windows-sandbox-setup.exe
error=program not found

Despite the error, the requested file operations still complete successfully.

The helper executable is present on disk.

Codex Doctor also reports the sandbox configuration as healthy.

What is the expected behavior?

Codex should launch and use the Windows sandbox helper successfully without reporting:

orchestrator_helper_launch_failed

or

helper=codex-windows-sandbox-setup.exe
error=program not found

Repository operations (create, read, update, delete, patch, and validation) should execute through the normal sandbox path without requiring a fallback implementation.

The behavior should also be consistent with the output of:

codex doctor --json

which reports:

• overallStatus: ok
• installation: ok
• sandbox.helpers: ok

If the sandbox configuration is healthy, runtime operations should not report that the helper cannot be launched.

The helper should be discovered, launched, and refreshed correctly on every operation without intermittent bootstrap failures.

Additional information

Additional diagnostics

codex doctor --json reports the installation as healthy.

Relevant diagnostics:

• overallStatus: ok
• installation: ok
• sandbox.helpers: ok
• runtime.provenance: ok
• updates.status: current (0.145.0)

The helper executable exists.

The helper hash matches.

The helper executes correctly when invoked manually.

Repository operations ultimately succeed.

The only failure occurs during the automatic sandbox refresh, which reports:

orchestrator_helper_launch_failed:
setup refresh failed to launch helper:
helper=codex-windows-sandbox-setup.exe
error=program not found

This appears inconsistent with the diagnostics because Codex Doctor reports the sandbox configuration as healthy while runtime execution reports the helper cannot be launched.

This may indicate a Windows sandbox bootstrap or refresh bug rather than an installation problem.