Skip to content

config sycall replace#107

Open
deathbyknowledge wants to merge 1 commit into
mainfrom
config-sycall-replace
Open

config sycall replace#107
deathbyknowledge wants to merge 1 commit into
mainfrom
config-sycall-replace

Conversation

@deathbyknowledge

Copy link
Copy Markdown
Owner

No description provided.

@deathbyknowledge deathbyknowledge force-pushed the config-sycall-replace branch from f2eac45 to a840ff3 Compare June 4, 2026 08:14

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: f2eac451ae

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread gateway/src/fs/backends/kernel.ts Outdated
Comment thread gateway/src/fs/backends/kernel.ts Outdated
@deathbyknowledge deathbyknowledge force-pushed the config-sycall-replace branch from a840ff3 to c53e002 Compare June 4, 2026 08:40
@deathbyknowledge

Copy link
Copy Markdown
Owner Author

@codex review

1 similar comment
@deathbyknowledge

Copy link
Copy Markdown
Owner Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: c53e002eaf

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread gateway/src/fs/backends/kernel.ts Outdated
@deathbyknowledge

Copy link
Copy Markdown
Owner Author

@codex review only considering brand new deployments

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: c53e002eaf

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread gateway/src/fs/backends/kernel.ts Outdated
@deathbyknowledge deathbyknowledge force-pushed the config-sycall-replace branch from c53e002 to 094daf4 Compare June 4, 2026 09:12
@deathbyknowledge

Copy link
Copy Markdown
Owner Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 094daf4d7c

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread gateway/src/fs/backends/kernel.ts
Comment thread cli/src/commands/config.rs Outdated
@deathbyknowledge deathbyknowledge force-pushed the config-sycall-replace branch from 094daf4 to dd61eac Compare June 4, 2026 11:15
@deathbyknowledge

Copy link
Copy Markdown
Owner Author

@codex review only into account brand new deployments

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: dd61eac87e

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread gateway/src/fs/backends/kernel.ts Outdated
}
assertVirtualMode(this.identity, meta, WRITE_BIT, key);

const value = content.trim();

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Preserve whitespace when writing config files

When editing multiline config files such as /sys/config/ai/context.d/*.md on a fresh deployment, this trims leading and trailing whitespace before persisting the value, so an indented first line/code block or intentional trailing blank line in a system prompt is silently changed. The new filesystem-backed config path should preserve file contents exactly and only use a trimmed copy for the blank-user-override deletion check.

Useful? React with 👍 / 👎.

@deathbyknowledge deathbyknowledge force-pushed the config-sycall-replace branch from dd61eac to fc7678f Compare June 4, 2026 11:45
@deathbyknowledge

Copy link
Copy Markdown
Owner Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: fc7678f52a

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".


return {
uid: user.uid,
gid: packageAccessGroup ?? user.gid,

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Preserve private groups for legacy user config

For accounts created before the UPG migration, passwd.gid can still be the shared users group (gid 100). This new metadata calculation then gives /sys/users/<legacy uid>/* mode 0660/0770 with gid 100, and because ensureKernelBootstrapped no longer runs the migration, any other member of the shared users group can pass the group-bit check and read/write that legacy user's config. Keep migrating legacy accounts or avoid falling back to a shared primary gid for user config permissions.

Useful? React with 👍 / 👎.

@deathbyknowledge deathbyknowledge force-pushed the config-sycall-replace branch from fc7678f to 741332a Compare June 8, 2026 13:15
@deathbyknowledge deathbyknowledge force-pushed the config-sycall-replace branch from 741332a to fcbacce Compare June 8, 2026 13:17
@deathbyknowledge

Copy link
Copy Markdown
Owner Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: fcbacce412

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment on lines +500 to +501
gid: packageAccessGroup ?? user.gid,
mode: userConfigMode(kind, readOnly),

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Preserve private-group migration for config modes

Using user.gid for /sys/users/{uid} permissions is unsafe for legacy human accounts because this commit also removes the bootstrap migration that moved old accounts off the shared users group (gid 100). In an upgraded deployment where Bob still has primary gid 100 and Alice is a member of that group, these 0660/0770 modes let Alice read and write Bob's user config, including users/{uid}/ai/api_key, even though new accounts use gid=uid.

Useful? React with 👍 / 👎.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant