Pin Codex 0.165.0 and read its archive layout from a reviewed listing file

This commit is contained in:
Gabriel Brown committed 2026-10-29 15:29:44 -04:00
1 parent 0add5af1b9
commit 44d32d78ae
5 files changed
+125 -64

No files matched your search

+3 -1
View File
@@ -452,7 +452,9 @@ _install_codex() (
return 1
fi
listing="$(tar -tzf "$archive")" || { rm -rf -- "$stage"; return 1; }
expected_listing=$'bin/\nbin/codex\nbin/codex-code-mode-host\ncodex-package.json\ncodex-path/\ncodex-path/rg\ncodex-resources/\ncodex-resources/bwrap\ncodex-resources/zsh/\ncodex-resources/zsh/bin/\ncodex-resources/zsh/bin/zsh'
# The reviewed archive layout lives beside installers.conf and changes with it.
expected_listing="$(<"$PANAMA_PATH/setup/provenance/codex-package.listing")" \
|| { rm -rf -- "$stage"; return 1; }
[[ "$listing" == "$expected_listing" ]] || { rm -rf -- "$stage"; return 1; }
while IFS= read -r member; do
_archive_path_is_safe "$member" || { rm -rf -- "$stage"; return 1; }