Skip to content

fix: close Windows profile isolation review findings - #2

Merged
LIghtJUNction merged 1 commit into
mainfrom
fix/windows-profile-isolation-20261006
Oct 6, 2026
Merged

LIghtJUNction merged 1 commit into
mainfrom
fix/windows-profile-isolation-20261006

Conversation

@LIghtJUNction

Copy link
Copy Markdown
Contributor

Follow-up to #1 before accepting the parent plugin update.

  • Filter all casing variants of existing provider environment overrides. Windows treats environment names case-insensitively.
  • Preserve unrelated environment settings and the caller's original environment.
  • Add exhaustive casing tests and a real child-process test. Run these on Windows with Node 22 and 24; the existing Linux/macOS suite also picks them up.
  • Override both uppercase and lowercase proxy variables in the local native-host test.

Addresses review threads discussion_r4195652941 and discussion_r4195653018, and parent TokenNotIncluded/lmm-api#601 discussion_r4195708320.

No production OAuth, inference, publication or deployment. Merge after the existing adapter/native-host and new Windows checks pass.

Copilot AI balanced review requested due to automatic review settings October 6, 2026 13:36
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 6, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
🔒 Security Review ✅ Completed 2026-10-06T13:38:30.481090Z 62eb05b PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟢 Approval recommended

The implementation addresses Windows casing behavior and is supported by focused cross-version tests.

Review effort: Balanced
Findings: None

What changed in this PR

Improves child-process environment isolation, particularly on Windows.

Changes:

  • Removes provider overrides case-insensitively without mutating the source environment.
  • Adds unit and child-process coverage on Windows with Node.js 22 and 24.
  • Blocks uppercase and lowercase proxy variants in native-host tests.
File Description
src/​provider.mjs Makes provider-variable filtering case-insensitive.
test/​child-environment.test.mjs Tests casing removal, preservation, and child isolation.
test/​native-host.mjs Overrides lowercase proxy variables.
.github/​workflows/​windows-environment.yml Runs isolation tests on Windows.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants