Skip to content

fix: installerのdigest backend選択を安定化 - #30

Open
HK227 wants to merge 3 commits into
DannyMac180:mainfrom
HK227:codex/fix-installer-digest-backend
Open

HK227 wants to merge 3 commits into
DannyMac180:mainfrom
HK227:codex/fix-installer-digest-backend

Conversation

@HK227

@HK227 HK227 commented Sep 4, 2026

Copy link
Copy Markdown

概要

installerのSHA-256 digest backend選択を安定化し、non-login shellでも利用可能な標準utilityを明示的に選択するよう修正します。

確定root cause

原因はUnicode encodingではありません。日本語pathのUTF-8 bytes、quoting、path handlingは正常でした。non-login shellではPATH差によりshasumを解決できず、stderr破棄後の空digestがdestinationのunreadable判定につながっていました。

修正内容

  • 処理開始時にdigest backendを一度だけ選択
  • shasumが利用可能なら優先
  • shasumがなくsha256sumが利用可能ならdiscovery fallback
  • 両方なければdigest取得不能としてfail-closed
  • 選択済みbackendの実行失敗後は別backendへfallbackしない
  • digest失敗、空digest、unreadable destinationの拒否および非変更を維持

確認項目

  • 日本語pathでのsha256sum fallback: PASS
  • ASCII pathの既存installer behavior: PASS
  • digest backendが両方ない場合のfail-closed: PASS
  • 選択済みbackendのexecution failure時にfallbackしないテスト: PASS
  • legacy Terra fixtureのみ更新し、Luna、Fresh Sol、対象外agent fixtureがbyte不変: PASS
  • shell syntax checks: PASS
  • git diff --check: PASS
  • WSL隔離環境のfull relevant suite: PASS
  • Windowsの直接full suite: ローカルjq不在のためfocused tests後に未完走(成功扱いしていません)

影響範囲

変更はplugins/sol-advisor/scripts/install-agents.shplugins/sol-advisor/scripts/verify.shの2ファイルだけです。実installed agent群およびconfig.tomlは変更していません。

actual Terra role更新、Terra migration policy変更、既知legacy digest allowlist追加、Astra escalation実装はこのPRのscope外です。

未検証・環境制約

upstreamには現時点でGitHub Actions workflowが存在しないため、PR CIの有無とreview状態はPR作成後にその事実を確認します。

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Sep 4, 2026

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review Completed 2026-09-04T22:08:26.747892Z 4a0db68 Manual request
🔒 Security Review Completed 2026-09-04T22:12:16.642866Z 4a0db68 Manual request
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: a8615a1d70

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread plugins/sol-advisor/scripts/verify.sh Outdated
@HK227

HK227 commented Sep 4, 2026

Copy link
Copy Markdown
Author

@codex security review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Another round soon, please!

Reviewed commit: e96a71d9c0

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@HK227

HK227 commented Sep 4, 2026

Copy link
Copy Markdown
Author

@codex security review

@chatgpt-codex-connector

Copy link
Copy Markdown

Security review completed. No security issues were found in this pull request.

Reviewed commit: e96a71d9c0

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

@HK227

HK227 commented Sep 4, 2026

Copy link
Copy Markdown
Author

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Bravo.

Reviewed commit: 4a0db68d7c

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@HK227

HK227 commented Sep 4, 2026

Copy link
Copy Markdown
Author

@codex security review

@chatgpt-codex-connector

Copy link
Copy Markdown

Security review completed. No security issues were found in this pull request.

Reviewed commit: 4a0db68d7c

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant