Hacktoberfest 2026: le issue che i maintainer hanno segnato per ottobre, aperte e adatte ai principianti. Sfoglia le issue Hacktoberfest

[Tracking] #7648 follow-up: Windows updater availability findings and four review corrections

Aperta
  • Qualcosa non va?
#7,872 3 commenti 1 reazione 0 assegnatari Vedi su GitHub

I maintainer di solito rispondono entro 1 giorno

@luvs01 ci sta già lavorando.

Dal 29/10/2026.

  • #7931 di @luvs01 — aperta

Valutazione

Difficoltà
4/5
Tempo stimato
Più di una settimana
Idoneità per principianti
12/100
Tipo di issue
Bug
Chiarezza
Abbastanza chiara
Stato di attività
Attiva
Stack tecnologico
powershell, typescript
Ambito
cli, devtools

Direzione di ricerca

Start from the Windows updater files named in the thread: the lock release() path in the Codex CLI updater and cli-update-windows-observation.ts for directory identity, plus codex-cli-update.md for the structure manifest. Verify the closed-before-verifyHeld ordering statically and add the listed regression tests. Done when each of the six review threads has a linked fix or a documented disposition; native Windows runtime checks are out of scope.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Descrizione

bug platform
Client or integration

Codex CLI — Windows updater

Area

Platform (Windows / macOS / Linux)

Summary

Track the six unresolved review findings after #7648 merged as c655484d9cccf316f3da41047d508bf10d92070a (reviewed head 6618aadd6dd445001c433c86828cce8e90bee62c). Keep the integrated updater stack and superseded sibling PRs closed; do not reapply their old refusal paths. This is a bounded follow-up to the post-merge disposition request, not a replacement for the broader #2811 feature.

Reproduction

This follow-up is read-only source/review verification, not a new Windows runtime reproduction. The relevant job-store, selection-gate, recovery and ACL product-file blobs still match the merge on current dev (checked 2026-10-28). The six review threads remain unresolved. Merge/security acceptance and passing CI do not by themselves dispose of these functional/availability findings.

Availability findings
  • Major — lock release after verification failure: r4396883857. release() sets closed before verifyHeld(); an exception skips releaseLock() while finally closes pins, and later release returns early. Statically confirm and correct the conditional persistent-lock path without weakening ownership/identity checks. Add regressions for ACL-only verification failure, identity mismatch, pin cleanup, repeated release and a subsequent apply to the same prefix. Native Windows lock persistence has not been independently reproduced here.
  • Major — synchronous recovery ACL work on parent admission: r4396932202. With an existing recovery directory, beginCodexCliSelectionParentWrite() reaches synchronous recovery-store ACL checks and PowerShell spawnSync on the parent thread. The ancestry batch and directory are checked, with additional checks for record leaves; each call is bounded by up to 5 seconds. That is a per-call maximum, not a measured stall duration. Move this work off the parent event loop while preserving gate/pin ownership, fail-closed behavior and caller admission semantics; verify event-loop progress plus denial, cancellation/cleanup and concurrent parent/worker cases on Windows.
Remaining review corrections
  • Directory identity precision: r4396883860. cli-update-windows-observation.ts still builds directory identity from number-valued lstatSync dev/ino. Preserve exact identity representation and test values beyond safe-integer precision; no native identity collision was executed here.
  • Retention fixture root contract: r4396883869. The worker requires a direct drive-root child while the session creates an OS-temp child. Align validation with the intended private fixture contract and test a normal nested Windows temp path, preserving execution authorization and refusal of unsafe roots.
  • Structure source map: r4396932208. The current codex-cli-update.md manifest entry still omits src/codex/cli-windows-plan-provenance.ts, src/codex/windows-installation-files.ts, src/codex/windows-npm-execution.ts and src/lib/windows-owner-acl.ts, although the document describes them. Complete the entry, regenerate the index and run the structure checks.
  • Chinese POSIX managed condition: r4396883854. Restore the reported-version-matches-manifest condition in the zh-cn and zh-tw CLI references and corresponding agent pages, preserving the ownership and selectionAttested wording. The current four paragraphs still omit that condition; this is a targeted clause check, not a complete translation review.

Close when all six items have a linked verified fix or an explicit evidence-backed maintainer disposition. Availability fixes and documentation/test corrections may land separately. The config-root ACL-overlap work (#7815/#7869), atomic-writer timeout-memo work (#7834/#7843) and macOS execution-validation issue #7860 do not address these paths.

Version

Reviewed merge c655484d9cccf316f3da41047d508bf10d92070a (#7648); follow-up base dev@f9e7d939d125c810aa3f3d700dcb8b0cb4129a0f.

Operating system

Windows execution paths. The evidence above is source/review verification; portable follow-up tests run on Linux. Native Windows runtime acceptance remains separate.

Provider and model

Not provider-specific. No provider request is needed for these regressions.

Logs or error output

The linked original review threads and post-merge verification contain the evidence and its limits. No new product log or native platform reproduction is claimed by this issue-format correction.

Screenshots and supporting files

See the source, review and validation links above.

Redacted configuration

Not applicable; no account, credential, installed application or live service configuration was changed for this report.

Checks
  • I searched existing issues and documentation.
  • I removed secrets, tokens, account details, request credentials, and personal data.
Lingua principale
TypeScript
Stelle
16.9k
Fork
1.3k
Merge medio
15h 24m
PR unite (30g)
678

Preparare l'ambiente

Questo progetto non fornisce container di sviluppo, Dockerfile né guida per i contributori, quindi l'ambiente è a tuo carico: parti dal suo README e consulta la nostra guida al primo contributo per i passaggi generali.

Come iniziare

  1. Leggi tutta la issue e poi la guida ai contributi del progetto.
  2. Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
  3. Fai un fork del repository e lavora su un branch.
  4. Apri una pull request che faccia riferimento al numero della issue.

Altre issue di lidge-jun/opencodex

Tutte le issue di lidge-jun/opencodex

Issue simili

Altre issue su TypeScript

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.