Merge remote-tracking branch 'origin/master' into fix/exact-detail-blocker-attention

This commit is contained in:
Engineer 2026-09-11 18:32:47 -05:00
commit 7b96b26e71
18 changed files with 824 additions and 220 deletions

View File

@ -417,6 +417,19 @@ configs with `database.mode: postgres`, suppresses the invocation directory's
guard. The selected instance's own environment file still loads. The command
selects the first available loopback port at or above `3100`.
Source-checkout startup builds the shared and plugin SDK packages when needed.
It prints build progress and any wait for another build. Interrupted builds
release their lock after the compiler stops; later startups recover locks whose
owner and compiler have exited. Empty locks from older versions are recovered
once they are at least two minutes old. The command remains in the foreground
after printing its ready URL to serve the instance; use Ctrl-C to stop it.
Each package gets a completion marker only after a successful build. A hard
kill leaves that marker absent, so the next startup rebuilds partial output.
The marker records source and output content fingerprints, so recovery does
not depend on filesystem timestamp precision. Direct `tsc` builds that produce
identical output reuse the marker. Changed or partial output is rebuilt once
before later startups reuse the completed build.
Claude uses `ANTHROPIC_API_KEY`; Codex uses `OPENAI_API_KEY`; OpenCode uses
`OPENROUTER_API_KEY` and requires an `openrouter/...` model. `--api-key-env`
can name a different source variable while the agent still receives the

View File

@ -357,6 +357,8 @@ A board comment can be an interrupt, an ownership change, both, or neither. Pape
An interrupt stops the current live execution path for the issue. It does not, by itself, select the next owner. If an active run is interrupted by the board, the run may still terminate with the underlying `cancelled` status, but the issue activity and wake context should make the operator intent visible as an interruption rather than an unexplained runtime failure.
For legacy runners, **Interrupt** on a queued message stops the active run and explicitly continues the pending queue after execution cleanup. It validates the queue revision and target run, then dispatches the requested queues current message bodies in their saved order. Other actors queues cannot consume that interrupt. The persisted interrupt intent is retried by the scheduler after a promotion error or server restart until that queue is dispatched or discarded. Edits and discards remain authoritative until dispatch; deleting the final message must not create an empty continuation. Pending messages remain visible after a run stops. Cancelling only the run preserves the queue for a later explicit wake; pausing the task retains its separate queue-cancellation behavior. Native same-turn steering keeps its separate acknowledgement protocol. Legacy Codex uses Ctrl-C to stop its tool sessions and cannot retry a missing-session fallback after the provider has confirmed that the session started.
An ownership change selects who owns the issue after the comment is committed:
- setting `assigneeAgentId` makes the named agent the owner

View File

@ -1546,6 +1546,10 @@ export async function execute(ctx: AdapterExecutionContext): Promise<AdapterExec
if (
sessionId &&
!initial.proc.timedOut &&
!initial.proc.signal &&
// A started session can emit stale-rollout warnings for other threads.
// After Ctrl-C those warnings must not restart the cancelled turn.
!initial.parsed.sessionId &&
(initial.proc.exitCode ?? 0) !== 0 &&
isCodexUnknownSessionError(initial.proc.stdout, initial.rawStderr)
) {

View File

@ -0,0 +1,238 @@
import assert from "node:assert/strict";
import { spawn, spawnSync } from "node:child_process";
import { once } from "node:events";
import fs from "node:fs";
import os from "node:os";
import path from "node:path";
import { setTimeout as sleep } from "node:timers/promises";
import test from "node:test";
function fixture(t) {
const root = fs.mkdtempSync(path.join(os.tmpdir(), "paperclip-build-lock-"));
t.after(() => fs.rmSync(root, { recursive: true, force: true }));
fs.mkdirSync(path.join(root, "scripts"));
fs.copyFileSync(new URL("../ensure-plugin-build-deps.mjs", import.meta.url), path.join(root, "scripts/ensure-plugin-build-deps.mjs"));
const compiler = path.join(root, "node_modules/typescript/bin/tsc");
fs.mkdirSync(path.dirname(compiler), { recursive: true });
fs.writeFileSync(compiler, `
const fs = require("node:fs");
const path = require("node:path");
const target = path.dirname(process.argv[3]);
const active = path.resolve("compiler-active");
try { fs.mkdirSync(active); } catch { process.exit(42); }
process.on("exit", () => fs.rmSync(active, { recursive: true, force: true }));
process.on("SIGTERM", () => process.exit(143));
process.on("SIGINT", () => process.exit(130));
fs.appendFileSync("builds", target + "\\n");
fs.mkdirSync(path.join(target, "dist"), { recursive: true });
// Deliberately write index.js before the compiler finishes emitting the rest.
fs.writeFileSync(path.join(target, "dist/index.js"), "export {};\\n");
setTimeout(() => {
if (fs.existsSync("fail")) process.exit(2);
fs.writeFileSync(path.join(target, "dist/complete"), "done");
}, Number(process.env.BUILD_DELAY ?? 20));
`);
for (const target of ["packages/shared", "packages/plugins/sdk"]) {
fs.mkdirSync(path.join(root, target, "src"), { recursive: true });
fs.writeFileSync(path.join(root, target, "src/index.ts"), "export {};\n");
fs.writeFileSync(path.join(root, target, "tsconfig.json"), "{}");
}
const lock = path.join(root, "node_modules/.cache/paperclip-plugin-build-deps.lock");
const launch = (env = {}) => {
const child = spawn(process.execPath, ["scripts/ensure-plugin-build-deps.mjs"], {
cwd: root, env: { ...process.env, ...env }, stdio: ["ignore", "pipe", "pipe"],
});
let output = "";
child.stdout.on("data", (data) => { output += data; });
child.stderr.on("data", (data) => { output += data; });
const done = once(child, "close").then(([code]) => ({ code, output }));
t.after(() => { if (child.exitCode === null) child.kill("SIGTERM"); });
return { child, done };
};
return { root, lock, launch };
}
async function until(predicate) {
const deadline = Date.now() + 5000;
while (!predicate()) {
assert.ok(Date.now() < deadline, "condition timed out");
await sleep(10);
}
}
test("recovers the old empty lock left by interrupted startup", async (t) => {
const f = fixture(t);
fs.mkdirSync(f.lock, { recursive: true });
const old = new Date(Date.now() - 180_000);
fs.utimesSync(f.lock, old, old);
const result = await f.launch().done;
assert.equal(result.code, 0, result.output);
assert.match(result.output, /Recovered abandoned/);
assert.match(result.output, /Building @paperclipai\/shared/);
assert.equal(fs.existsSync(f.lock), false);
});
test("concurrent startups recover a dead owner and build only once", async (t) => {
const f = fixture(t);
const dead = spawnSync(process.execPath, ["-e", "" ]).pid;
fs.mkdirSync(f.lock, { recursive: true });
fs.writeFileSync(path.join(f.lock, `owner-${dead}-old.json`), JSON.stringify({ pid: dead }));
const results = await Promise.all(Array.from({ length: 4 }, () => f.launch({ BUILD_DELAY: "150" }).done));
for (const result of results) assert.equal(result.code, 0, result.output);
assert.equal(fs.readFileSync(path.join(f.root, "builds"), "utf8").trim().split("\n").length, 2);
});
test("does not accept partially emitted output while another compiler holds the lock", async (t) => {
const f = fixture(t);
const first = f.launch({ BUILD_DELAY: "200" });
await until(() => fs.existsSync(path.join(f.root, "packages/plugins/sdk/dist/index.js")));
const second = await f.launch().done;
assert.equal(second.code, 0, second.output);
assert.match(second.output, /Waiting for another workspace build/);
assert.equal(fs.existsSync(path.join(f.root, "packages/plugins/sdk/dist/complete")), true);
assert.equal((await first.done).code, 0);
});
test("preserves a live compiler's lock even when its parent has exited", async (t) => {
const f = fixture(t);
const dead = spawnSync(process.execPath, ["-e", ""]).pid;
fs.mkdirSync(f.lock, { recursive: true });
fs.writeFileSync(path.join(f.lock, `owner-${dead}-old.json`), JSON.stringify({ pid: dead, childPid: process.pid }));
const run = f.launch();
await sleep(200);
assert.equal(fs.existsSync(path.join(f.root, "builds")), false);
run.child.kill("SIGTERM");
assert.equal((await run.done).code, 143);
assert.equal(fs.existsSync(f.lock), true);
});
test("termination stops the compiler and releases the lock for the next startup", async (t) => {
const f = fixture(t);
const run = f.launch({ BUILD_DELAY: "10000" });
await until(() => fs.existsSync(path.join(f.root, "compiler-active")));
run.child.kill("SIGTERM");
assert.equal((await run.done).code, 143);
assert.equal(fs.existsSync(f.lock), false);
assert.equal(fs.existsSync(path.join(f.root, "compiler-active")), false);
const retry = await f.launch().done;
assert.equal(retry.code, 0, retry.output);
assert.equal(fs.existsSync(path.join(f.root, "packages/shared/dist/complete")), true);
});
test("failed compilation releases the lock and is rebuilt on retry", async (t) => {
const f = fixture(t);
fs.writeFileSync(path.join(f.root, "fail"), "");
assert.equal((await f.launch().done).code, 2);
assert.equal(fs.existsSync(f.lock), false);
fs.unlinkSync(path.join(f.root, "fail"));
const retry = await f.launch().done;
assert.equal(retry.code, 0, retry.output);
assert.equal(fs.existsSync(path.join(f.root, "packages/shared/dist/complete")), true);
});
test("hard-killed compilation cannot leave partial output accepted on recovery", async (t) => {
const f = fixture(t);
// First establish valid completion markers, then start a rebuild.
assert.equal((await f.launch().done).code, 0);
const output = path.join(f.root, "packages/shared/dist/index.js");
const complete = path.join(f.root, "packages/shared/dist/complete");
fs.unlinkSync(output);
fs.unlinkSync(complete);
const run = f.launch({ BUILD_DELAY: "10000" });
await until(() => fs.existsSync(output));
const owner = JSON.parse(fs.readFileSync(path.join(f.lock, fs.readdirSync(f.lock)[0]), "utf8"));
run.child.kill("SIGKILL");
process.kill(owner.childPid, "SIGKILL");
await run.done;
await until(() => {
try { process.kill(owner.childPid, 0); return false; }
catch (error) { return error.code === "ESRCH"; }
});
// SIGKILL cannot run the fixture compiler's exit hook either.
fs.rmSync(path.join(f.root, "compiler-active"), { recursive: true, force: true });
const retry = await f.launch().done;
assert.equal(retry.code, 0, retry.output);
assert.match(retry.output, /Recovered abandoned/);
assert.equal(fs.existsSync(complete), true);
});
test("rebuilds changed direct output once, then reuses the completed build", async (t) => {
const f = fixture(t);
assert.equal((await f.launch().done).code, 0);
const builds = fs.readFileSync(path.join(f.root, "builds"), "utf8");
// A successful or interrupted direct tsc invocation updates index.js without
// changing our marker. Neither can certify that all output was emitted.
for (const target of ["packages/shared", "packages/plugins/sdk"]) {
fs.appendFileSync(path.join(f.root, target, "dist/index.js"), "// direct build changed output\n");
}
const retry = await f.launch().done;
assert.equal(retry.code, 0, retry.output);
const rebuilt = fs.readFileSync(path.join(f.root, "builds"), "utf8");
assert.equal(rebuilt.trim().split("\n").length, builds.trim().split("\n").length + 2);
const next = await f.launch().done;
assert.equal(next.code, 0, next.output);
assert.equal(fs.readFileSync(path.join(f.root, "builds"), "utf8"), rebuilt);
assert.doesNotMatch(next.output, /Building/);
});
test("rejects partial output from an interrupted direct compiler", async (t) => {
const f = fixture(t);
assert.equal((await f.launch().done).code, 0);
const target = path.join(f.root, "packages/shared");
fs.unlinkSync(path.join(target, "dist/complete"));
const completionTime = fs.statSync(path.join(target, "dist/.paperclip-build-complete")).mtimeMs;
await sleep(20);
const compiler = spawn(process.execPath, ["node_modules/typescript/bin/tsc", "-p", path.join(target, "tsconfig.json")], {
cwd: f.root, env: { ...process.env, BUILD_DELAY: "10000" }, stdio: "ignore",
});
const closed = once(compiler, "close");
t.after(() => { if (compiler.exitCode === null) compiler.kill("SIGKILL"); });
await until(() => fs.statSync(path.join(target, "dist/index.js")).mtimeMs > completionTime);
compiler.kill("SIGKILL");
await closed;
fs.rmSync(path.join(f.root, "compiler-active"), { recursive: true, force: true });
const retry = await f.launch().done;
assert.equal(retry.code, 0, retry.output);
assert.equal(fs.existsSync(path.join(target, "dist/complete")), true);
});
test("detects partial output even when all modification times are unchanged", async (t) => {
const f = fixture(t);
assert.equal((await f.launch().done).code, 0);
const target = path.join(f.root, "packages/shared");
const output = path.join(target, "dist/index.js");
const oldTime = fs.statSync(output).mtime;
fs.writeFileSync(output, "// incomplete direct build\n");
fs.utimesSync(output, oldTime, oldTime);
const retry = await f.launch().done;
assert.equal(retry.code, 0, retry.output);
assert.equal(fs.readFileSync(output, "utf8"), "export {};\n");
});
test("reuses identical direct output regardless of its timestamps", async (t) => {
const f = fixture(t);
assert.equal((await f.launch().done).code, 0);
const builds = fs.readFileSync(path.join(f.root, "builds"), "utf8");
const output = path.join(f.root, "packages/shared/dist/index.js");
fs.writeFileSync(output, fs.readFileSync(output));
const newer = new Date(Date.now() + 1000);
fs.utimesSync(output, newer, newer);
const retry = await f.launch().done;
assert.equal(retry.code, 0, retry.output);
assert.equal(fs.readFileSync(path.join(f.root, "builds"), "utf8"), builds);
assert.doesNotMatch(retry.output, /Building/);
});
test("shared source changes invalidate both shared and dependent SDK output", async (t) => {
const f = fixture(t);
assert.equal((await f.launch().done).code, 0);
const source = path.join(f.root, "packages/shared/src/index.ts");
const oldTime = fs.statSync(source).mtime;
fs.appendFileSync(source, "export const changed = true;\n");
fs.utimesSync(source, oldTime, oldTime);
const retry = await f.launch().done;
assert.equal(retry.code, 0, retry.output);
assert.match(retry.output, /Building @paperclipai\/shared/);
assert.match(retry.output, /Building @paperclipai\/plugin-sdk/);
assert.equal(fs.readFileSync(path.join(f.root, "builds"), "utf8").trim().split("\n").length, 4);
});

View File

@ -1,9 +1,11 @@
#!/usr/bin/env node
import { spawnSync } from "node:child_process";
import { spawn } from "node:child_process";
import fs from "node:fs";
import path from "node:path";
import { fileURLToPath } from "node:url";
import { createHash, randomUUID } from "node:crypto";
import { setTimeout as sleep } from "node:timers/promises";
const scriptDir = path.dirname(fileURLToPath(import.meta.url));
const rootDir = path.resolve(scriptDir, "..");
@ -16,14 +18,18 @@ const buildTargets = [
{
name: "@paperclipai/shared",
output: path.join(rootDir, "packages/shared/dist/index.js"),
completion: path.join(rootDir, "packages/shared/dist/.paperclip-build-complete"),
sourceDir: path.join(rootDir, "packages/shared/src"),
tsconfig: path.join(rootDir, "packages/shared/tsconfig.json"),
dependencies: [],
},
{
name: "@paperclipai/plugin-sdk",
output: path.join(rootDir, "packages/plugins/sdk/dist/index.js"),
completion: path.join(rootDir, "packages/plugins/sdk/dist/.paperclip-build-complete"),
sourceDir: path.join(rootDir, "packages/plugins/sdk/src"),
tsconfig: path.join(rootDir, "packages/plugins/sdk/tsconfig.json"),
dependencies: [0],
},
];
@ -31,102 +37,212 @@ if (!fs.existsSync(tscCliPath)) {
throw new Error(`TypeScript CLI not found at ${tscCliPath}`);
}
function newestSourceMtimeMs(sourceDir) {
let newest = 0;
function directoryFingerprint(directory, exclude) {
const hash = createHash("sha256");
function visit(dir) {
for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
for (const entry of fs.readdirSync(dir, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
const entryPath = path.join(dir, entry.name);
if (entryPath === exclude) continue;
if (entry.isDirectory()) {
visit(entryPath);
continue;
} else if (entry.isFile()) {
const content = fs.readFileSync(entryPath);
hash.update(JSON.stringify([path.relative(directory, entryPath), content.length]));
hash.update(content);
}
if (!/\.(tsx?|json)$/.test(entry.name)) continue;
newest = Math.max(newest, fs.statSync(entryPath).mtimeMs);
}
}
visit(directory);
return hash.digest("hex");
}
visit(sourceDir);
return newest;
function sourceFingerprint(target) {
const hash = createHash("sha256");
hash.update(directoryFingerprint(target.sourceDir));
for (const config of [
target.tsconfig,
path.join(path.dirname(target.tsconfig), "package.json"),
path.join(rootDir, "tsconfig.json"),
path.join(rootDir, "tsconfig.base.json"),
path.join(rootDir, "node_modules/typescript/package.json"),
]) {
if (fs.existsSync(config)) hash.update(fs.readFileSync(config));
}
for (const dependency of target.dependencies) hash.update(sourceFingerprint(buildTargets[dependency]));
return hash.digest("hex");
}
function outputFingerprint(target) {
return directoryFingerprint(path.dirname(target.output), target.completion);
}
function needsBuild(target) {
if (!fs.existsSync(target.output)) return true;
const outputMtime = fs.statSync(target.output).mtimeMs;
return newestSourceMtimeMs(target.sourceDir) > outputMtime;
try {
const completed = JSON.parse(fs.readFileSync(target.completion, "utf8"));
// Content fingerprints detect partial direct builds even on filesystems
// with coarse timestamps, while identical successful direct builds reuse
// the certified output without another compile.
return completed.sources !== sourceFingerprint(target)
|| completed.outputs !== outputFingerprint(target);
} catch (error) {
if (error.code === "ENOENT" || error instanceof SyntaxError) return true;
throw error;
}
}
function allOutputsCurrent() {
return buildTargets.every((target) => !needsBuild(target));
}
function sleep(ms) {
Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
}
function waitForLockRelease() {
const startedAt = Date.now();
while (Date.now() - startedAt < lockTimeoutMs) {
if (!fs.existsSync(lockDir)) {
return;
}
if (allOutputsCurrent()) {
return;
}
sleep(lockPollMs);
}
throw new Error(`Timed out waiting for plugin build dependency lock at ${lockDir}`);
}
if (allOutputsCurrent()) {
process.exit(0);
}
fs.mkdirSync(path.dirname(lockDir), { recursive: true });
// Publish an already-populated directory so another contender never mistakes a
// newly acquired lock for an abandoned, ownerless lock. Never recursively remove
// the shared path: another process may have acquired it since we last read it.
const ownerFile = `owner-${process.pid}-${randomUUID()}.json`;
let child = null;
let stoppingSignal = null;
let holdsLock = false;
let exitCode = 0;
try {
function processAlive(pid) {
if (!Number.isInteger(pid) || pid <= 0) return true;
try {
fs.mkdirSync(lockDir);
holdsLock = true;
process.kill(pid, 0);
return true;
} catch (error) {
if (error && typeof error === "object" && "code" in error && error.code === "EEXIST") {
waitForLockRelease();
if (!allOutputsCurrent()) {
throw new Error("Plugin build dependency lock released before all outputs were created");
}
process.exit(0);
}
return error.code !== "ESRCH";
}
}
function removeOwner(file) {
try {
fs.unlinkSync(path.join(lockDir, file));
} catch (error) {
if (error.code === "ENOENT") return;
throw error;
}
try {
fs.rmdirSync(lockDir);
} catch (error) {
if (!["ENOENT", "ENOTEMPTY", "EEXIST"].includes(error.code)) throw error;
}
}
for (const target of buildTargets) {
if (!needsBuild(target)) {
continue;
function releaseLock() {
if (!holdsLock) return;
removeOwner(ownerFile);
holdsLock = false;
}
function recoverAbandonedLock() {
try {
const entries = fs.readdirSync(lockDir);
if (entries.length === 0) {
// Older versions wrote no owner. Allow their bounded CLI build to finish
// before reclaiming an empty directory left by interruption or timeout.
if (Date.now() - fs.statSync(lockDir).mtimeMs < 120_000) return;
fs.rmdirSync(lockDir);
} else if (entries.length === 1 && /^owner-.*\.json$/.test(entries[0])) {
const owner = JSON.parse(fs.readFileSync(path.join(lockDir, entries[0]), "utf8"));
if (processAlive(owner.pid) || (owner.childPid && processAlive(owner.childPid))) return;
removeOwner(entries[0]);
} else {
return;
}
console.log("[paperclip] Recovered abandoned workspace build lock.");
} catch (error) {
if (["ENOENT", "ENOTEMPTY", "EEXIST"].includes(error.code) || error instanceof SyntaxError) return;
throw error;
}
}
const result = spawnSync(process.execPath, [tscCliPath, "-p", target.tsconfig], {
async function acquireLock() {
fs.mkdirSync(path.dirname(lockDir), { recursive: true });
const candidate = fs.mkdtempSync(`${lockDir}.candidate-`);
fs.writeFileSync(path.join(candidate, ownerFile), JSON.stringify({ pid: process.pid }));
const startedAt = Date.now();
let reportedWait = false;
try {
while (!stoppingSignal) {
// Do not replace a fresh empty lock held by an older script.
recoverAbandonedLock();
if (!fs.existsSync(lockDir)) {
try {
fs.renameSync(candidate, lockDir);
holdsLock = true;
return;
} catch (error) {
if (!["ENOTEMPTY", "EEXIST", "EPERM"].includes(error.code)) throw error;
}
}
if (!reportedWait) {
console.log(`[paperclip] Waiting for another workspace build (${lockDir})...`);
reportedWait = true;
}
if (Date.now() - startedAt >= lockTimeoutMs) {
throw new Error(`Timed out waiting for workspace build lock at ${lockDir}. Another build may still be running.`);
}
await sleep(lockPollMs);
}
} finally {
fs.rmSync(candidate, { recursive: true, force: true });
}
}
async function build(target) {
console.log(`[paperclip] Building ${target.name}...`);
// A hard kill bypasses cleanup. Only a completed compile may restore this
// marker, so recovery never trusts index.js emitted partway through a build.
fs.rmSync(target.completion, { force: true });
const sources = sourceFingerprint(target);
const code = await new Promise((resolve, reject) => {
child = spawn(process.execPath, [tscCliPath, "-p", target.tsconfig], {
cwd: rootDir,
stdio: "inherit",
});
// A hard-killed parent must not let a successor race its surviving compiler.
fs.writeFileSync(path.join(lockDir, ownerFile), JSON.stringify({ pid: process.pid, childPid: child.pid }));
child.once("error", (error) => {
fs.rmSync(target.output, { force: true });
reject(error);
});
child.once("close", (code) => {
child = null;
resolve(code ?? 1);
});
});
// tsc emits index.js before it finishes the package. A failed or interrupted
// compile must not make the next startup accept that partial build as current.
if (code !== 0) fs.rmSync(target.output, { force: true });
else fs.writeFileSync(target.completion, JSON.stringify({ sources, outputs: outputFingerprint(target) }) + "\n");
return code;
}
if (result.error) {
throw result.error;
}
if (allOutputsCurrent() && !fs.existsSync(lockDir)) {
process.exit(0);
}
if (result.status !== 0) {
exitCode = result.status ?? 1;
break;
// Keep the lock until the compiler has stopped, including when the foreground
// CLI's build timeout terminates this helper.
for (const signal of ["SIGINT", "SIGTERM"]) {
process.on(signal, () => {
stoppingSignal = signal;
child?.kill(signal);
});
}
process.once("exit", releaseLock);
let exitCode = 0;
try {
await acquireLock();
if (holdsLock) {
for (const target of buildTargets) {
if (stoppingSignal) break;
if (!needsBuild(target)) continue;
exitCode = await build(target);
if (exitCode !== 0) break;
}
}
} finally {
if (holdsLock) {
fs.rmSync(lockDir, { recursive: true, force: true });
}
}
if (exitCode !== 0) {
process.exit(exitCode);
releaseLock();
}
process.exitCode = stoppingSignal === "SIGINT" ? 130 : stoppingSignal ? 143 : exitCode;

View File

@ -698,6 +698,39 @@ describe("codex execute", () => {
}
});
it.each([true, false])("retries missing resume only before a session starts (started=%s)", async (started) => {
const root = await fs.mkdtemp(path.join(os.tmpdir(), "paperclip-codex-resume-stop-"));
const commandPath = path.join(root, "codex");
const attemptsPath = path.join(root, "attempts");
await seedSharedCodexAuth(root);
await fs.writeFile(commandPath, `#!/usr/bin/env node
const fs = require("node:fs");
fs.appendFileSync(${JSON.stringify(attemptsPath)}, "attempt\\n");
if (process.argv.includes("resume")) {
console.error("state db missing rollout path for thread unrelated-old-thread");
${started ? 'console.log(JSON.stringify({ type: "thread.started", thread_id: "existing-session" }));' : ''}
process.exitCode = 1;
} else {
console.log(JSON.stringify({ type: "thread.started", thread_id: "fresh-session" }));
console.log(JSON.stringify({ type: "turn.completed", usage: { input_tokens: 1, output_tokens: 1 } }));
}
`, "utf8");
await fs.chmod(commandPath, 0o755);
try {
const result = await execute({
runId: `resume-stop-${started}`,
agent: { id: "agent-1", companyId: "company-1", name: "Codex", adapterType: "codex_local", adapterConfig: { engine: "cli" } },
runtime: { sessionId: "existing-session", sessionParams: null, sessionDisplayId: "existing-session", taskKey: null },
config: { engine: "cli", command: commandPath, cwd: root, promptTemplate: "Test resume." },
context: {}, onLog: async () => {},
});
expect((await fs.readFile(attemptsPath, "utf8")).trim().split("\n")).toHaveLength(started ? 1 : 2);
expect(result.sessionId).toBe(started ? "existing-session" : "fresh-session");
} finally {
await fs.rm(root, { recursive: true, force: true });
}
});
it("classifies mid-turn harness crashes as retryable transient upstream errors", async () => {
const root = await fs.mkdtemp(path.join(os.tmpdir(), "paperclip-codex-execute-harness-crash-"));
const workspace = path.join(root, "workspace");

View File

@ -6699,6 +6699,126 @@ describeEmbeddedPostgres("heartbeat orphaned process recovery", () => {
expect(repairWakeups).toHaveLength(0);
});
it("dispatches interrupted CLI input after the executor releases its lease", async () => {
const actualProcess = await vi.importActual<typeof import("../adapters/process/execute.js")>("../adapters/process/execute.js");
const { companyId, agentId, issueId, runId } = await seedRunFixture({
runtimeMode: "legacy", adapterType: "codex_local", agentStatus: "idle", runStatus: "queued",
});
await db.update(agents).set({ adapterConfig: {
command: process.execPath, args: ["-e", "console.log('ready');setInterval(() => {}, 1000)"], graceSec: 1,
} }).where(eq(agents.id, agentId));
mockAdapterExecute.mockImplementationOnce((async (input: unknown) =>
actualProcess.execute(input as Parameters<typeof actualProcess.execute>[0])) as typeof mockAdapterExecute);
const heartbeat = heartbeatService(db);
await heartbeat.resumeQueuedRuns();
expect(await waitForValue(async () => runningProcesses.get(runId))).toBeTruthy();
const [comment] = await db.insert(issueComments).values({ companyId, issueId, authorUserId: "responsible-user", body: "continue" }).returning();
const [wake] = await db.insert(agentWakeupRequests).values({
companyId, agentId, source: "automation", reason: "issue_commented", status: "deferred_issue_execution",
requestedByActorType: "user", requestedByActorId: "responsible-user",
payload: { issueId, commentId: comment!.id, _paperclipWakeContext: { issueId, wakeReason: "issue_commented", wakeCommentIds: [comment!.id] } },
}).returning();
await heartbeat.cancelRun(runId, "Interrupt queued input", {
errorCode: "operator_interrupted", suppressImmediateRecovery: true,
resultJson: { operatorInterrupted: true, queuedCommentInterruptQueueId: wake!.id },
});
await heartbeat.drainActiveRunExecutions();
const [updated] = await db.select().from(agentWakeupRequests).where(eq(agentWakeupRequests.id, wake!.id));
expect(updated!.runId).toBeTruthy();
expect(updated!.runId).not.toBe(runId);
expect((await heartbeat.getRun(updated!.runId!))!.contextSnapshot?.wakeCommentIds).toEqual([comment!.id]);
});
it("retries durable queue interruption after a promotion failure on a fresh service", async () => {
const { companyId, agentId, issueId, runId } = await seedRunFixture({
runtimeMode: "legacy", adapterType: "codex_local", agentStatus: "idle", runStatus: "cancelled",
});
const [comment] = await db.insert(issueComments).values({ companyId, issueId, authorUserId: "responsible-user", body: "retry this input" }).returning();
const [wake] = await db.insert(agentWakeupRequests).values({
companyId, agentId, source: "automation", reason: "issue_commented", status: "deferred_issue_execution",
requestedByActorType: "user", requestedByActorId: "responsible-user",
payload: { issueId, commentId: comment!.id, _paperclipWakeContext: { issueId, wakeReason: "issue_commented", wakeCommentIds: [comment!.id] } },
}).returning();
await db.update(heartbeatRuns).set({ resultJson: {
queuedCommentInterruptQueueId: wake!.id,
executionCancellation: { state: "acknowledged" },
conversationContinuation: "continue_conversation_v1",
} }).where(eq(heartbeatRuns.id, runId));
const failedPromotion = vi.spyOn(db, "transaction").mockRejectedValueOnce(new Error("temporary queue promotion outage"));
try {
await heartbeatService(db).resumeQueuedRuns();
expect(failedPromotion).toHaveBeenCalled();
expect((await db.select().from(agentWakeupRequests).where(eq(agentWakeupRequests.id, wake!.id)))[0]!.status).toBe("deferred_issue_execution");
} finally {
failedPromotion.mockRestore();
}
const restarted = heartbeatService(db);
await restarted.resumeQueuedRuns();
await restarted.drainActiveRunExecutions();
const [updated] = await db.select().from(agentWakeupRequests).where(eq(agentWakeupRequests.id, wake!.id));
expect(updated!.runId).toBeTruthy();
expect((await restarted.getRun(updated!.runId!))!.contextSnapshot?.wakeCommentIds).toEqual([comment!.id]);
await restarted.resumeQueuedRuns();
expect(await db.select().from(heartbeatRuns).where(eq(heartbeatRuns.agentId, agentId))).toHaveLength(2);
});
it.each(["pending", "discarded", "wrong queue"] as const)(
"resumes only the authorized %s queue after an acknowledged legacy interrupt",
async (state) => {
const { companyId, agentId, issueId, runId } = await seedRunFixture({
runtimeMode: "legacy", adapterType: "codex_local", agentStatus: "running",
});
const heartbeat = heartbeatService(db);
const comments = await db.insert(issueComments).values([
{ companyId, issueId, authorUserId: "responsible-user", body: "First, edited" },
{ companyId, issueId, authorUserId: "responsible-user", body: "Deleted" },
{ companyId, issueId, authorUserId: "responsible-user", body: "Third, moved first" },
]).returning();
const commentIds = [comments[2]!.id, comments[0]!.id];
const [deferred] = await db.insert(agentWakeupRequests).values({
companyId, agentId, source: "automation", reason: "issue_commented",
status: state === "discarded" ? "cancelled" : "deferred_issue_execution",
requestedByActorType: "user", requestedByActorId: "responsible-user",
payload: { issueId, commentId: commentIds[0], _paperclipWakeContext: {
issueId, wakeReason: "issue_commented", wakeCommentIds: commentIds,
} },
}).returning();
// A different actor's older queue must not consume this interrupt.
const [otherComment] = await db.insert(issueComments).values({
companyId, issueId, authorUserId: "other-user", body: "Other actor's input",
}).returning();
await db.insert(agentWakeupRequests).values({
companyId, agentId, source: "automation", reason: "issue_commented",
status: "deferred_issue_execution", requestedAt: new Date(0),
requestedByActorType: "user", requestedByActorId: "other-user",
payload: { issueId, commentId: otherComment!.id, _paperclipWakeContext: {
issueId, wakeReason: "issue_commented", wakeCommentIds: [otherComment!.id],
} },
});
await heartbeat.cancelRun(runId, "Interrupt queued messages", {
suppressImmediateRecovery: true, errorCode: "operator_interrupted",
resultJson: {
operatorInterrupted: true,
queuedCommentInterruptQueueId: state === "wrong queue" ? randomUUID() : deferred!.id,
executionCancellation: { state: "acknowledged" },
executionRecovery: { kind: "interrupted", providerStopped: true, sessionPreserved: true, actionOutcomes: "settled" },
},
});
await heartbeat.drainActiveRunExecutions();
const runs = await db.select().from(heartbeatRuns).where(eq(heartbeatRuns.agentId, agentId));
const successors = runs.filter((run) => run.id !== runId)
.sort((left, right) => left.createdAt.getTime() - right.createdAt.getTime());
expect(successors).toHaveLength(state === "pending" ? 2 : 0);
if (state === "pending") {
expect(successors[0]!.contextSnapshot?.wakeCommentIds).toEqual(commentIds);
// Only the requested turn's normal completion can drain the other queue.
expect(successors[1]!.contextSnapshot?.wakeCommentIds).toEqual([otherComment!.id]);
await heartbeat.cancelRun(runId, "Duplicate interrupt");
expect(await db.select().from(heartbeatRuns).where(eq(heartbeatRuns.agentId, agentId))).toHaveLength(3);
}
},
);
it("preserves deferred input on a clean Stop and adopts it once on the next explicit comment", async () => {
const { companyId, agentId, issueId, runId } = await seedRunFixture({ runtimeMode: "legacy", agentStatus: "running" });
const heartbeat = heartbeatService(db);
@ -7090,7 +7210,7 @@ describeEmbeddedPostgres("heartbeat orphaned process recovery", () => {
);
});
it.each([
it.each(([
{ mode: "signal", graceful: false, failure: null },
{ mode: "graceful exit", graceful: true, failure: null },
{ mode: "adapter exception", graceful: false, failure: null },
@ -7111,9 +7231,12 @@ describeEmbeddedPostgres("heartbeat orphaned process recovery", () => {
graceful: true,
failure: "write",
},
] as const)(
"settles an owned process Stop before classifying its $mode",
async ({ mode, graceful, failure }) => {
] as const).flatMap((scenario) =>
(["process", "codex_local"] as const).map((adapterType) => ({ ...scenario, adapterType })),
))(
"settles an owned $adapterType Stop before classifying its $mode",
async ({ mode, graceful, failure, adapterType }) => {
const stopSignal = adapterType === "codex_local" ? "SIGINT" : "SIGTERM";
const actualProcess = await vi.importActual<
typeof import("../adapters/process/execute.js")
>("../adapters/process/execute.js");
@ -7163,7 +7286,7 @@ describeEmbeddedPostgres("heartbeat orphaned process recovery", () => {
throw new Error("owned termination unconfirmed");
});
const { runId, agentId } = await seedRunFixture({
adapterType: "process",
adapterType,
agentStatus: "idle",
runStatus: "queued",
includeIssue: false,
@ -7175,7 +7298,7 @@ describeEmbeddedPostgres("heartbeat orphaned process recovery", () => {
command: process.execPath,
args: [
"-e",
`${graceful ? "process.on('SIGTERM', () => process.exit(0));" : ""} console.log('stop ready'); setInterval(() => {}, 1000)`,
`${graceful ? `process.on('${stopSignal}', () => process.exit(0));` : ""} console.log('stop ready'); setInterval(() => {}, 1000)`,
],
graceSec: 1,
},
@ -7204,7 +7327,7 @@ describeEmbeddedPostgres("heartbeat orphaned process recovery", () => {
expect(await waitForValue(async () => observedResult)).toMatchObject(
graceful
? { exitCode: 0, signal: null }
: { exitCode: null, signal: "SIGTERM" },
: { exitCode: null, signal: stopSignal },
);
// The process utility already removed its child record on close. A new
// service instance must still join the original cancellation owner.
@ -7227,11 +7350,10 @@ describeEmbeddedPostgres("heartbeat orphaned process recovery", () => {
expect((await heartbeat.getRun(runId))?.status).toBe("running");
expect(duplicateSettled).toBe(false);
if (failure === "write") {
writeSpy = vi
.spyOn(db, "transaction")
.mockRejectedValueOnce(
new Error("owned cancellation write unavailable"),
);
const error = new Error("owned cancellation write unavailable");
writeSpy = adapterType === "codex_local"
? vi.spyOn(db, "update").mockImplementationOnce(() => { throw error; })
: vi.spyOn(db, "transaction").mockRejectedValueOnce(error);
}
} finally {
releaseTermination();
@ -7446,7 +7568,7 @@ describeEmbeddedPostgres("heartbeat orphaned process recovery", () => {
);
expect(mockTerminateLocalService).toHaveBeenCalledWith(
expect.objectContaining({ pid: 12345, processGroupId: null }),
{ forceAfterMs: 1000 },
{ forceAfterMs: 1000, signal: "SIGINT" },
);
expect(runningProcesses.has(runId)).toBe(false);
} finally {
@ -7479,7 +7601,7 @@ describeEmbeddedPostgres("heartbeat orphaned process recovery", () => {
expect(mockTerminateLocalService).toHaveBeenCalledWith(
expect.objectContaining({ pid: 12_346, processGroupId: null }),
{ forceAfterMs: 2_000 },
{ forceAfterMs: 2_000, signal: "SIGINT" },
);
expect(runningProcesses.has(runId)).toBe(false);
});
@ -7515,7 +7637,7 @@ describeEmbeddedPostgres("heartbeat orphaned process recovery", () => {
expect(outcome).toMatchObject({ status: "succeeded", errorCode: null });
expect(mockTerminateLocalService).toHaveBeenCalledWith(
expect.objectContaining({ pid: 12_347, processGroupId: null }),
{ forceAfterMs: 2_000 },
{ forceAfterMs: 2_000, signal: "SIGINT" },
);
await expect(heartbeat.getRun(runId)).resolves.toMatchObject({
status: "succeeded",

View File

@ -175,6 +175,27 @@ describeEmbeddedPostgres("issue queued-comment routes", () => {
return { companyId, agentId, issueId, runId, wakeId, commentIds };
}
it.each(["stale revision", "native run", "different issue"] as const)(
"rejects queued interruption for a %s without stopping the run",
async (scenario) => {
const seeded = await seedQueue();
if (scenario !== "native run") {
await db.update(agents).set({ adapterType: "codex_local" }).where(eq(agents.id, seeded.agentId));
await db.update(heartbeatRuns).set({ runtimeMode: "legacy" }).where(eq(heartbeatRuns.id, seeded.runId));
}
const client = app(seeded.companyId);
const queue = await request(client).get(`/api/issues/${seeded.issueId}/queued-comments`).expect(200);
if (scenario === "different issue") {
await db.update(heartbeatRuns).set({ contextSnapshot: { issueId: randomUUID() } }).where(eq(heartbeatRuns.id, seeded.runId));
}
await request(client).post(`/api/issues/${seeded.issueId}/queued-comments/interrupt`).send({
queueId: seeded.wakeId, targetRunId: seeded.runId,
revision: scenario === "stale revision" ? "stale" : queue.body.revision,
}).expect(409);
expect((await db.select().from(heartbeatRuns).where(eq(heartbeatRuns.id, seeded.runId)))[0]!.status).toBe("running");
},
);
async function promoteQueue(seeded: Awaited<ReturnType<typeof seedQueue>>) {
const queueRunId = randomUUID();
const wake = await db

View File

@ -176,6 +176,9 @@ function buildHost(_tx: Db, deps: WakeQueuePostgresAdapterDeps): WakeQueueHost {
function buildTransaction(tx: Db, deps: WakeQueuePostgresAdapterDeps, db: Db, run: HeartbeatRunRow): WakeQueueTransaction {
const treeControlSvc = issueTreeControlService(tx);
const issuesSvc = issueService(tx);
const interruptQueueId = run.runtimeMode !== "native" && run.status === "cancelled"
? readNonEmptyString(run.resultJson?.queuedCommentInterruptQueueId)
: null;
return {
async findInvokableAgent({ companyId, agentId }): Promise<InvokableAgentSnapshot | null> {
@ -199,6 +202,8 @@ function buildTransaction(tx: Db, deps: WakeQueuePostgresAdapterDeps, db: Db, ru
eq(agentWakeupRequests.companyId, companyId),
eq(agentWakeupRequests.status, DEFERRED_WAKE_STATUS),
sql`${agentWakeupRequests.payload} ->> 'issueId' = ${issueId}`,
interruptQueueId ? eq(agentWakeupRequests.id, interruptQueueId) : undefined,
interruptQueueId ? eq(agentWakeupRequests.agentId, run.agentId) : undefined,
),
)
.orderBy(asc(agentWakeupRequests.requestedAt))
@ -1000,6 +1005,20 @@ export function createPostgresWakeQueueAdapter(db: Db, deps: WakeQueuePostgresAd
const issueRow =
(contextIssueId ? candidateIssues.find((candidate) => candidate.id === contextIssueId) : candidateIssues[0]) ?? null;
// A queue interrupt authorizes only its original pending queue. Replays
// after dispatch or deleting the final message cannot launch other work.
const interruptQueueId = run.runtimeMode !== "native"
? readNonEmptyString(run.resultJson?.queuedCommentInterruptQueueId)
: null;
const [interruptedQueue] = interruptQueueId && issueRow
? await tx.select({ id: agentWakeupRequests.id }).from(agentWakeupRequests).where(and(
eq(agentWakeupRequests.id, interruptQueueId),
eq(agentWakeupRequests.companyId, run.companyId),
eq(agentWakeupRequests.agentId, run.agentId),
eq(agentWakeupRequests.status, "deferred_issue_execution"),
sql`${agentWakeupRequests.payload}->>'issueId' = ${issueRow.id}`,
)).limit(1)
: [];
const preDrainFacts: PreDrainFacts = {
issueRowPresent: issueRow !== null,
executionRunIdMatchesRun: !issueRow || !issueRow.executionRunId || issueRow.executionRunId === run.id,
@ -1013,7 +1032,9 @@ export function createPostgresWakeQueueAdapter(db: Db, deps: WakeQueuePostgresAd
// next explicit wake adopts those messages atomically when it
// queues a run.
executionCancellationAcknowledged:
run.status === "cancelled" && parseObject(run.resultJson?.executionCancellation).state === "acknowledged",
run.status === "cancelled" &&
parseObject(run.resultJson?.executionCancellation).state === "acknowledged" &&
!interruptedQueue,
};
const preDrain = decidePreDrain(preDrainFacts);

View File

@ -15201,6 +15201,47 @@ export function issueRoutes(
},
);
router.post(
"/issues/:id/queued-comments/interrupt",
validate(queuedCommentSteeringTargetSchema),
async (req, res) => {
assertBoard(req);
if (!req.actor.userId) throw forbidden("Board user context required");
const issue = await getAccessibleResource(req, res, svc.getById(req.params.id as string), "Issue not found");
if (!issue) return;
const actor = getActorInfo(req);
await db.transaction(async (tx) => {
const locked = await lockQueuedCommentState({
tx, issue, actor, queueId: req.body.queueId, targetRunId: req.body.targetRunId,
});
assertQueueMutationTarget({ queue: locked.queue, queueId: req.body.queueId, revision: req.body.revision });
if (locked.queue.protocol !== "legacy" || locked.activeRun?.agentId !== issue.assigneeAgentId) {
throw conflict("This queue does not support legacy interruption");
}
});
// Never hold the issue lock while joining the adapter. Queue edits and
// discards stay authoritative until the dispatcher claims the successor.
const options = operatorInterruptCancelOptions({ issueId: issue.id, actor });
await heartbeat.cancelRun(req.body.targetRunId, "Interrupted to send queued messages", {
...options,
suppressImmediateRecovery: true,
resultJson: { ...options.resultJson, queuedCommentInterruptQueueId: req.body.queueId },
});
await logActivity(db, {
companyId: issue.companyId, actorType: actor.actorType, actorId: actor.actorId,
agentId: actor.agentId, runId: actor.runId, agentApiKeyId: actor.agentApiKeyId,
action: "issue.queued_comments_interrupted", entityType: "issue", entityId: issue.id,
details: { queueId: req.body.queueId, targetRunId: req.body.targetRunId },
});
const currentIssue = await svc.getById(issue.id);
const queue = await buildQueuedCommentQueue({
executor: db, issue: currentIssue ?? issue,
activeRun: await resolveActiveIssueRun(currentIssue ?? issue), actor,
});
res.json(await runRedactions.redactForIssue(issue.companyId, issue.id, queue));
},
);
router.post(
"/issues/:id/queued-comments/:commentId/steer",
validate(queuedCommentSteeringTargetSchema),

View File

@ -6527,6 +6527,31 @@ registry.registerPath({
},
});
registry.registerPath({
method: "post",
path: "/api/issues/{id}/queued-comments/interrupt",
tags: ["issues"],
summary: "Interrupt the active legacy run and continue its queued comments",
request: {
params: z.object({ id: z.string() }),
body: jsonBody(
z.object({
queueId: z.string().min(1),
revision: z.string().min(1),
targetRunId: z.string().min(1),
}),
),
},
responses: {
200: r.ok(),
400: r.badRequest,
401: r.unauthorized,
403: r.forbidden,
404: r.notFound,
409: r.conflict,
},
});
registry.registerPath({
method: "post",
path: "/api/issues/{id}/queued-comments/{commentId}/steer",

View File

@ -1210,11 +1210,11 @@ const SESSIONED_LOCAL_ADAPTERS = new Set([
// Routes and the scheduler construct separate heartbeatService instances, but
// they must agree on in-process adapter executions when reaping stale runs.
const activeRunExecutions = new Set<string>();
// A process adapter's signal exit can race the operator cancellation CAS while
// A legacy process adapter's signal exit can race the operator cancellation CAS while
// its owned process group is still being joined. Keep that exit from becoming
// a successful result (or a competing failure) before Stop settles. This is an
// in-process ordering barrier, not durable cancellation or provider authority.
// Other adapters can have independently proven terminal results after a signal.
// Embedded adapters use their own cancellation control and acknowledgement.
const processRunCancellationSettlements = new Map<
string,
{
@ -8631,6 +8631,7 @@ async function terminateHeartbeatRunProcess(input: {
pid: number | null | undefined;
processGroupId: number | null | undefined;
graceMs?: number;
signal?: NodeJS.Signals;
}) {
const pid = input.pid ?? null;
const processGroupId = input.processGroupId ?? null;
@ -8649,7 +8650,7 @@ async function terminateHeartbeatRunProcess(input: {
? processGroupId
: null,
},
input.graceMs ? { forceAfterMs: input.graceMs } : undefined,
{ forceAfterMs: input.graceMs, signal: input.signal },
);
}
@ -18577,6 +18578,31 @@ export function heartbeatService(
await resumeExecutionWaitComments();
const cutoff = await getWorktreeExecutionCutoff();
// The cancellation marker is durable intent. Retry while its exact queue
// is still deferred, including after a failed cleanup promotion or restart.
// Normal admission still checks process ownership, leases, pauses, and scope.
const interruptedQueues = await db
.select({ id: heartbeatRuns.id, companyId: heartbeatRuns.companyId })
.from(agentWakeupRequests)
.innerJoin(heartbeatRuns, and(
sql`${heartbeatRuns.resultJson}->>'queuedCommentInterruptQueueId' = ${agentWakeupRequests.id}::text`,
eq(heartbeatRuns.companyId, agentWakeupRequests.companyId),
eq(heartbeatRuns.agentId, agentWakeupRequests.agentId),
))
.innerJoin(companies, eq(companies.id, heartbeatRuns.companyId))
.where(and(
eq(agentWakeupRequests.status, "deferred_issue_execution"),
eq(heartbeatRuns.status, "cancelled"),
eq(heartbeatRuns.runtimeMode, "legacy"),
eq(companies.status, "active"),
cutoff ? gte(heartbeatRuns.createdAt, cutoff) : undefined,
));
for (const run of interruptedQueues) {
await releaseIssueExecutionAndPromote(run, { suppressImmediateRecovery: true }).catch((err) => {
logger.error({ err, runId: run.id }, "failed to retry interrupted comment queue");
});
}
const queuedRuns = await db
.select({ agentId: heartbeatRuns.agentId })
.from(heartbeatRuns)
@ -23562,10 +23588,8 @@ export function heartbeatService(
}
}
const processCancellation =
agent.adapterType === "process"
? (processRunCancellationSettlements.get(run.id) ??
failedProcessRunCancellations.get(run.id))
: undefined;
processRunCancellationSettlements.get(run.id) ??
failedProcessRunCancellations.get(run.id);
await processCancellation?.settled;
let outcome: RunSessionOutcome;
const latestRun = await getRun(run.id);
@ -23587,7 +23611,7 @@ export function heartbeatService(
} else if (
(adapterResult.exitCode ?? 0) === 0 &&
!adapterResult.errorMessage &&
!(agent.adapterType === "process" && adapterResult.signal) &&
!adapterResult.signal &&
!processCancellation?.failed
) {
outcome = "succeeded";
@ -23784,9 +23808,11 @@ export function heartbeatService(
// adapter's semantic result, usage, logs, or presentation decision.
// Only complete the late metadata write when the reconciler chose the
// same terminal status; a conflicting terminal outcome remains owned
// by the path that won the compare-and-set.
// by the path that won the compare-and-set. Owned legacy cancellation
// likewise keeps the provider session, logs, and usage after Stop wins.
if (
adapterResult.nativeFinalization &&
(adapterResult.nativeFinalization ||
(processCancellation && !processCancellation.failed && status === "cancelled")) &&
persistedRunWrite.run?.status === status
) {
persistedRun = await db
@ -24279,9 +24305,7 @@ export function heartbeatService(
}
// A process adapter may throw while its owned Stop is joining the
// child. Let the cancellation write settle before attempting failure.
if (agent.adapterType === "process") {
await processRunCancellationSettlements.get(run.id)?.settled;
}
await processRunCancellationSettlements.get(run.id)?.settled;
const message = redactCurrentUserText(
err instanceof Error ? err.message : "Unknown adapter failure",
await getCurrentUserRedactionOptions(),
@ -24886,6 +24910,18 @@ export function heartbeatService(
});
}
}
// Interrupting a queued message explicitly authorizes the pending queue.
// Retry its normal promotion after leases and adapter cleanup have settled;
// the earlier terminal write can still have an execution blocker here.
if (
latestRun?.status === "cancelled" &&
latestRun.runtimeMode !== "native" &&
readNonEmptyString(latestRun.resultJson?.queuedCommentInterruptQueueId)
) {
await releaseIssueExecutionAndPromote(latestRun, { suppressImmediateRecovery: true }).catch((err) => {
logger.error({ err, runId: run.id }, "failed to promote interrupted comment queue after cleanup");
});
}
activeRunExecutions.delete(run.id);
// A failed owned Stop remains visible until this exact executor settles,
// including a graceful exit result arriving after the cancellation error.
@ -24909,7 +24945,7 @@ export function heartbeatService(
}
async function releaseIssueExecutionAndPromote(
run: typeof heartbeatRuns.$inferSelect,
run: Pick<typeof heartbeatRuns.$inferSelect, "id" | "companyId">,
options: { suppressImmediateRecovery?: boolean } = {},
) {
try {
@ -27468,8 +27504,8 @@ export function heartbeatService(
try {
let releaseProcessCancellation: (() => void) | undefined;
const processCancellationSettlement =
agent?.adapterType === "process" &&
run.runtimeMode !== "native" &&
!control &&
running
? {
settled: new Promise<void>((resolve) => {
@ -27528,6 +27564,9 @@ export function heartbeatService(
await terminateHeartbeatRunProcess({
pid: running.child.pid,
processGroupId: running.processGroupId,
// Codex handles Ctrl-C by cancelling its tool sessions. SIGTERM
// can leave commands in their separate process groups alive.
signal: !control && agent?.adapterType === "codex_local" ? "SIGINT" : undefined,
graceMs: cancellationTerminationGraceMs(
running.graceSec,
options.terminationGraceMs,
@ -27585,6 +27624,21 @@ export function heartbeatService(
resultJson: {
...persistedCancellationResult,
...(resultJson ?? {}),
// A scheduler placeholder has no process to acknowledge.
// Preserve its normal release policy instead of treating
// it as an operator stop of provider work.
...(processCancellationSettlement && agent && running && (
(Number.isInteger(running.child.pid) && (running.child.pid ?? 0) > 0) ||
(Number.isInteger(running.processGroupId) && (running.processGroupId ?? 0) > 0)
)
? mergeRunStopMetadataForAgent(agent, "cancelled", {
resultJson: {
...resultJson,
executionCancellation: { state: "acknowledged", acknowledgedAt: finishedAt.toISOString() },
},
errorCode, errorMessage: reason,
})
: {}),
// The native cancellation helper may have advanced a durable
// pending intent to its acknowledged state after `run` was
// first read. Never let that stale snapshot overwrite the

View File

@ -10,7 +10,7 @@ async function json(response: APIResponse) {
}
for (const { unfinishedWrite, pause } of [{ unfinishedWrite: false, pause: false }, { unfinishedWrite: true, pause: false }, { unfinishedWrite: false, pause: true }]) {
test(`embedded ACP Stop: ${unfinishedWrite ? "unknown action continues without replaying the write" : pause ? "composer pause requires Resume before continuation" : "go continues the same session with queued input"}`, async ({ page, request }) => {
test(`embedded ACP Stop: ${unfinishedWrite ? "Interrupt continues without replaying the write" : pause ? "composer pause requires Resume before continuation" : "Interrupt delivers queued input in the same session"}`, async ({ page, request }) => {
test.setTimeout(120_000);
const root = await mkdtemp(path.join(os.tmpdir(), "paperclip-stop-browser-"));
const company = await json(await request.post("/api/companies", { data: { name: `ACP Stop ${Date.now()}` } }));
@ -38,7 +38,7 @@ for (const { unfinishedWrite, pause } of [{ unfinishedWrite: false, pause: false
await expect.poll(async () => JSON.stringify(await json(await request.get(`/api/issues/${issue.id}/queued-comments`))))
.toContain("List my recent Drive files.");
// Run-level Stop leaves the task unpaused; composer Stop additionally pauses the task.
// Interrupt sends the queue immediately; composer Stop pauses the task.
let stopped;
if (pause) {
await page.getByRole("button", { name: "Stop", exact: true }).click();
@ -65,19 +65,15 @@ for (const { unfinishedWrite, pause } of [{ unfinishedWrite: false, pause: false
const dialog = page.getByRole("dialog");
await dialog.getByRole("checkbox").check();
await dialog.getByRole("button", { name: "Resume work", exact: true }).click();
} else {
await editor.fill("go");
await page.getByRole("button", { name: "Send", exact: true }).click();
}
await expect(page.getByText("Answered the pending follow-up once.", { exact: false })).toBeVisible({ timeout: 30_000 });
await expect.poll(async () => (await json(await request.get(`/api/issues/${issue.id}/live-runs`))).length).toBe(0);
const prompts = (await readFile(path.join(root, "prompts"), "utf8")).trim().split("\n").map(line => JSON.parse(line));
expect(prompts).toHaveLength(2);
expect(new Set(prompts.map(prompt => prompt.sessionId)).size).toBe(1);
// Resume delivers the queued follow-up in the same provider session.
// Interrupt or Resume delivers the queued follow-up without another message.
const continuationPrompts = pause ? prompts.slice(1) : [prompts.at(-1)];
expect(JSON.stringify(continuationPrompts)).toContain("List my recent Drive files.");
if (!pause) expect(JSON.stringify(continuationPrompts)).toContain("go");
expect(await readFile(path.join(root, "completed"), "utf8")).toBe("follow-up\n");
const completedIssue = await json(await request.get(`/api/issues/${issue.id}`));
expect(completedIssue.executionBlocker).toBeNull();

View File

@ -384,6 +384,10 @@ export const issuesApi = {
`/issues/${id}/queued-comments/order`,
data,
),
interruptQueuedComments: (
id: string,
data: { queueId: string; targetRunId: string; revision: string },
) => api.post<IssueQueuedCommentQueue>(`/issues/${id}/queued-comments/interrupt`, data),
steerQueuedComment: (
id: string,
commentId: string,

View File

@ -324,7 +324,7 @@ describe("TaskChatQueuedMessages", () => {
),
).not.toBeNull();
expect(container.textContent).toContain(
"Active turn interrupted. Message remains queued.",
"Interruption requested. Queued messages will continue after the active turn stops.",
);
});
});

View File

@ -147,7 +147,7 @@ function SortableQueuedMessage({
type="button"
onClick={onInterrupt}
disabled={busy || !queue.targetRunId || !onInterrupt}
title="Interrupt the active turn; this message stays queued"
title="Interrupt the active turn and send queued messages"
className="flex h-7 shrink-0 items-center gap-1.5 rounded-md px-2 text-xs font-medium text-muted-foreground transition-colors hover:bg-accent hover:text-foreground disabled:opacity-40"
data-testid={`task-chat-queued-interrupt-${entry.comment.id}`}
>
@ -334,7 +334,7 @@ export function TaskChatQueuedMessages({
action === "steer"
? "Message steered into the active turn."
: action === "interrupt"
? "Active turn interrupted. Message remains queued."
? "Interruption requested. Queued messages will continue after the active turn stops."
: "Queued message discarded.",
);
} catch (error) {

View File

@ -52,6 +52,7 @@ const mockIssuesApi = vi.hoisted(() => ({
listFeedbackVotes: vi.fn(),
listInteractions: vi.fn(),
getQueuedComments: vi.fn(),
interruptQueuedComments: vi.fn(),
editQueuedComment: vi.fn(),
reorderQueuedComments: vi.fn(),
steerQueuedComment: vi.fn(),
@ -1320,6 +1321,7 @@ describe("IssueDetail", () => {
entries: [],
}),
);
mockIssuesApi.interruptQueuedComments.mockReset().mockResolvedValue(createQueuedCommentQueue());
mockIssuesApi.editQueuedComment.mockResolvedValue(
createQueuedCommentQueue(),
);
@ -3674,14 +3676,19 @@ describe("IssueDetail", () => {
body: "Queued run message",
});
mockIssuesApi.getQueuedComments.mockResolvedValue(createQueuedCommentQueue({
targetRunId: "run-queued", protocol: "legacy", steeringDisposition: "unsupported",
}));
await act(async () => {
await persistedProps.onInterruptQueued(
persistedComment!.queueTargetRunId!,
);
});
expect(mockHeartbeatsApi.cancel).toHaveBeenCalledWith("run-queued");
mockHeartbeatsApi.cancel.mockClear();
expect(mockIssuesApi.interruptQueuedComments).toHaveBeenCalledWith("PAP-1", {
queueId: "wake-queue-1", revision: "queue-revision-1", targetRunId: "run-queued",
});
expect(mockHeartbeatsApi.cancel).not.toHaveBeenCalled();
});
it("projects a native follow-up into the steering well before the post resolves", async () => {
@ -3876,15 +3883,16 @@ describe("IssueDetail", () => {
queueTargetRunId: "run-original",
});
mockIssuesApi.getQueuedComments.mockResolvedValue(createQueuedCommentQueue({
targetRunId: "run-replacement", protocol: "legacy", steeringDisposition: "unsupported",
}));
await act(async () => {
await replacementProps.onInterruptQueued(
await expect(replacementProps.onInterruptQueued(
optimisticComment!.queueTargetRunId!,
);
)).rejects.toThrow("The queued messages changed");
});
expect(mockHeartbeatsApi.cancel).toHaveBeenCalledWith("run-original");
expect(mockHeartbeatsApi.cancel).not.toHaveBeenCalledWith(
"run-replacement",
);
expect(mockIssuesApi.interruptQueuedComments).not.toHaveBeenCalled();
expect(mockHeartbeatsApi.cancel).not.toHaveBeenCalled();
await act(async () => {
postedComment.resolve(

View File

@ -1485,7 +1485,7 @@ const IssueDetailChatTab = memo(function IssueDetailChatTab({
const queuedCommentQueueEnabled =
!classicTaskInterfaceEnabled &&
runtimeSelectionKnown &&
Boolean(liveRuntimeRun || assigneeUsesPaperclipRunner);
Boolean(liveRuntimeRun || issueAssigneeAgentId);
const { data: authoritativeQueuedCommentQueue } = useQuery({
queryKey: queryKeys.issues.queuedComments(issueId),
queryFn: async () =>
@ -1494,7 +1494,8 @@ const IssueDetailChatTab = memo(function IssueDetailChatTab({
issueId,
),
enabled: queuedCommentQueueEnabled,
refetchInterval: queuedCommentQueueEnabled ? 1000 : false,
refetchInterval: (query) => queuedCommentQueueEnabled &&
(liveRuntimeRun || query.state.data?.entries.length) ? 1000 : false,
});
const [consumedQueuedCommentIds, setConsumedQueuedCommentIds] = useState<
ReadonlySet<string>
@ -4925,93 +4926,14 @@ export function IssueDetail({ tasksTab }: { tasksTab?: TaskSidePanelProps["tasks
});
const interruptQueuedComment = useMutation({
mutationFn: (runId: string) => heartbeatsApi.cancel(runId),
onMutate: async (runId) => {
await Promise.all(
issueCacheRefs.flatMap((ref) => [
queryClient.cancelQueries({ queryKey: queryKeys.issues.runs(ref) }),
queryClient.cancelQueries({
queryKey: queryKeys.issues.liveRuns(ref),
}),
queryClient.cancelQueries({
queryKey: queryKeys.issues.activeRun(ref),
}),
queryClient.cancelQueries({ queryKey: queryKeys.issues.detail(ref) }),
]),
);
const previousRunState = issueCacheRefs.map((ref) => ({
ref,
runs: queryClient.getQueryData<RunForIssue[]>(
queryKeys.issues.runs(ref),
),
liveRuns: queryClient.getQueryData<LiveRunForIssue[]>(
queryKeys.issues.liveRuns(ref),
),
activeRun: queryClient.getQueryData<ActiveRunForIssue | null>(
queryKeys.issues.activeRun(ref),
),
issue: queryClient.getQueryData<Issue>(queryKeys.issues.detail(ref)),
}));
const previousLocalQueuedCommentRunIds = locallyQueuedCommentRunIds;
const cachedActiveRun =
previousRunState.find((state) => state.activeRun?.id === runId)
?.activeRun ??
previousRunState.find((state) => state.activeRun)?.activeRun ??
null;
const liveRunList = dedupeLiveRunsById(
previousRunState.flatMap((state) => state.liveRuns ?? []),
);
const interruptibleIssueRun = resolveInterruptibleIssueRun(
cachedActiveRun,
liveRunList,
);
const targetRun =
cachedActiveRun?.id === runId
? cachedActiveRun
: (liveRunList?.find((run) => run.id === runId) ??
interruptibleIssueRun ??
null);
if (targetRun) {
const interruptedAt = new Date().toISOString();
for (const ref of issueCacheRefs) {
queryClient.setQueryData<RunForIssue[] | undefined>(
queryKeys.issues.runs(ref),
(current) =>
upsertInterruptedRun(current, targetRun, interruptedAt),
);
}
mutationFn: async (runId: string) => {
const queue = await issuesApi.getQueuedComments(issueId!);
if (!queue.queueId || queue.targetRunId !== runId) {
throw new Error("The queued messages changed. Refresh and try again.");
}
for (const ref of issueCacheRefs) {
queryClient.setQueryData(
queryKeys.issues.liveRuns(ref),
(current: LiveRunForIssue[] | undefined) =>
removeLiveRunById(current, runId),
);
queryClient.setQueryData(
queryKeys.issues.activeRun(ref),
(current: ActiveRunForIssue | null | undefined) =>
current?.id === runId ? null : current,
);
queryClient.setQueryData(
queryKeys.issues.detail(ref),
(current: Issue | undefined) =>
clearIssueExecutionRun(current, runId),
);
}
setLocallyQueuedCommentRunIds((current) => {
const next = new Map(
[...current].filter(([, targetRunId]) => targetRunId !== runId),
);
return next.size === current.size ? current : next;
return issuesApi.interruptQueuedComments(issueId!, {
queueId: queue.queueId, revision: queue.revision, targetRunId: runId,
});
return {
previousRunState,
previousLocalQueuedCommentRunIds,
};
},
onSuccess: () => {
invalidateIssueDetail();
@ -5022,25 +4944,9 @@ export function IssueDetail({ tasksTab }: { tasksTab?: TaskSidePanelProps["tasks
tone: "success",
});
},
onError: (err, _runId, context) => {
for (const state of context?.previousRunState ?? []) {
queryClient.setQueryData(queryKeys.issues.runs(state.ref), state.runs);
queryClient.setQueryData(
queryKeys.issues.liveRuns(state.ref),
state.liveRuns,
);
queryClient.setQueryData(
queryKeys.issues.activeRun(state.ref),
state.activeRun,
);
queryClient.setQueryData(
queryKeys.issues.detail(state.ref),
state.issue,
);
}
if (context?.previousLocalQueuedCommentRunIds) {
setLocallyQueuedCommentRunIds(context.previousLocalQueuedCommentRunIds);
}
onError: (err) => {
invalidateIssueDetail();
invalidateIssueRunState();
pushToast({
title: "Interrupt failed",
body: