[Bug] Windows Codex PATH can crash HTTPS updates with OPENSSL_Applink
- 主要言語
- Python
- スター
- 137k
- フォーク
- 12.3k
- 平均マージ
- 2日 12時間
- マージ済み PR(30日)
- 159
説明
### Spec Kit version
`specify 1.0.4`, installed as a uv tool on Windows.
### Environment
- Codex Desktop local task on Windows
- The task PATH prepends Codex-owned native dependency directories, including Poppler and Git directories that contain their own `libssl-3-x64.dll` and `libcrypto-3-x64.dll`.
- `specify.exe` is the uv-installed launcher under `%USERPROFILE%\.local\bin`.
### Reproduction
From an initialized consumer with registered HTTPS catalogs, run either:
```powershell
specify workflow update program-kit-bootstrap
specify bundle update program-kit --integration codex
```
Both commands reproducibly exit 1 before completing the remote update with:
```text
OPENSSL_Uplink(...): no OPENSSL_Applink
```
The failure occurs specifically in the Codex Desktop process environment. A local/offline component installation can proceed because it does not enter the failing HTTPS path.
### Expected behavior
Spec Kit HTTPS/catalog operations should use the OpenSSL runtime packaged with its Python environment and must not load an ABI-incompatible DLL merely because another application prepended native tools to PATH. If the launcher cannot isolate its DLL search path, it should fail with an actionable dependency diagnostic rather than the OpenSSL applink abort.
### Impact
Documented `workflow update` and `bundle update` commands cannot run from Codex Desktop on affected Windows hosts. This blocks unattended governed upgrades and encourages consumers to use incomplete local recovery sequences.
コントリビューションガイド
調査の方向性
Reproduce `specify workflow update program-kit-bootstrap` and `specify bundle update program-kit --integration codex` in the Codex Desktop Windows environment. Inspect how the uv-installed `specify.exe` launcher and its Python HTTPS path resolve OpenSSL DLLs when Codex prepends native directories to PATH. Done means both HTTPS updates complete successfully, or an actionable dependency diagnostic replaces the OpenSSL applink abort.
索引モデルが issue の本文から書いたものです。
評価
- 技術スタック
- python
- 領域
- cli, devtools, operating-systems
- issue の種類
- バグ
- 難易度
- 4/5
- 見積もり時間
- 3〜5日
- 活発さ
- 活発
- 明瞭さ
- おおむね明確
- 初心者へのやさしさ
- 48/100