github / github/spec-kit

[Bug] Windows Codex PATH can crash HTTPS updates with OPENSSL_Applink

オープン
#4,433 コメント 4 件 リアクション 0 件 担当者 0 名 GitHub で見る
author-awaiting author-needs-info author-needs-proof bug-assess severity-medium triage-can-wait
主要言語
Python
スター
137k
フォーク
12.3k
平均マージ
2日 12時間
マージ済み PR(30日)
159

説明

### Spec Kit version

`specify 1.0.4`, installed as a uv tool on Windows.

### Environment

- Codex Desktop local task on Windows
- The task PATH prepends Codex-owned native dependency directories, including Poppler and Git directories that contain their own `libssl-3-x64.dll` and `libcrypto-3-x64.dll`.
- `specify.exe` is the uv-installed launcher under `%USERPROFILE%\.local\bin`.

### Reproduction

From an initialized consumer with registered HTTPS catalogs, run either:

```powershell
specify workflow update program-kit-bootstrap
specify bundle update program-kit --integration codex
```

Both commands reproducibly exit 1 before completing the remote update with:

```text
OPENSSL_Uplink(...): no OPENSSL_Applink
```

The failure occurs specifically in the Codex Desktop process environment. A local/offline component installation can proceed because it does not enter the failing HTTPS path.

### Expected behavior

Spec Kit HTTPS/catalog operations should use the OpenSSL runtime packaged with its Python environment and must not load an ABI-incompatible DLL merely because another application prepended native tools to PATH. If the launcher cannot isolate its DLL search path, it should fail with an actionable dependency diagnostic rather than the OpenSSL applink abort.

### Impact

Documented `workflow update` and `bundle update` commands cannot run from Codex Desktop on affected Windows hosts. This blocks unattended governed upgrades and encourages consumers to use incomplete local recovery sequences.

コントリビューションガイド

コントリビューションガイドを開く

調査の方向性

Reproduce `specify workflow update program-kit-bootstrap` and `specify bundle update program-kit --integration codex` in the Codex Desktop Windows environment. Inspect how the uv-installed `specify.exe` launcher and its Python HTTPS path resolve OpenSSL DLLs when Codex prepends native directories to PATH. Done means both HTTPS updates complete successfully, or an actionable dependency diagnostic replaces the OpenSSL applink abort.

索引モデルが issue の本文から書いたものです。

評価

技術スタック
python
領域
cli, devtools, operating-systems
issue の種類
バグ
難易度
4/5
見積もり時間
3〜5日
活発さ
活発
明瞭さ
おおむね明確
初心者へのやさしさ
48/100

新しい issue をメールで受け取る

初心者向けの GitHub issue を短くまとめたダイジェスト。