Add isolated Repository setup client - #4
Conversation
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 1d1d14071d
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
Deploying pie-menu-editor-website with
|
| Latest commit: |
6bdcd54
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://4a7f0310.pie-menu-editor-website.pages.dev |
| Branch Preview URL: | https://website-dedicated-setup-clie.pie-menu-editor-website.pages.dev |
|
@codex security review Please re-review exact implementation HEAD |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: a4464c822b
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
|
@codex security review Please re-review exact implementation HEAD |
|
Codex Review: Didn't find any major issues. Hooray! Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
|
@codex security review |
|
Security review completed. No security issues were found in this pull request. Reviewed commit: Only the user who started this review can view the report in Codex. ℹ️ About Codex security reviews in GitHubThis is an experimental Codex feature. Security reviews are triggered when:
Once complete, Codex will leave suggestions, or a comment if no findings are found. |
|
@codex security review |
|
Security review completed. No security issues were found in this pull request. Reviewed commit: Only the user who started this review can view the report in Codex. ℹ️ About Codex security reviews in GitHubThis is an experimental Codex feature. Security reviews are triggered when:
Once complete, Codex will leave suggestions, or a comment if no findings are found. |
1 participant
目的
購入証明とRepository credentialを通常websiteから分離し、専用originで既存serviceのclaim／ack authorityへ接続する静的browser clientを追加します。
変更
pie-menu-editor.com/setup/をpurchase dataを扱わないhandoffページへ置換dist/setupへbuildするsource／build commandを追加website-requiredCIを追加Service側のexact-origin CORSは pie-menu-editor/pie-menu-editor-service#19 にあります。
Security Review follow-up
検証
npm test— 13 tests greengit diff --check外部環境
このPRのコード自体はCloudflare Pages project、DNS、Worker、Neon、Gumroadをprovisionしません。review後のstaging acceptanceで、productionとは分離した専用originだけを別receiptとして配備・検証しました。
Staging acceptance receipt（2026-08-10）
https://setup-staging.pie-menu-editor.com（専用Pages project、TLS active）https://extensions-staging.pie-menu-editor.com（staging Worker Custom Domain）connect-srcへ許可し、private, no-store, no-transform／HSTS／COOPを確認acknowledged、server側ciphertext／nonce破棄をread-only SQLで確認