Skip to content

fix(workflows): preserve authored execution and artifact delivery - #261

Closed
KaiEureka wants to merge 1 commit into
mainfrom
codex/fix-audit-authored-execution-20261025
Closed

KaiEureka wants to merge 1 commit into
mainfrom
codex/fix-audit-authored-execution-20261025

Conversation

@KaiEureka

Copy link
Copy Markdown
Collaborator

Member-authored workflows failed to start in worktree isolation because the environment did not forward the standard input payload. Startup exceptions could leave the child marked running with its budget reservation retained. Completed workflows could also fail delivery when their internal result or session artifact exceeded the model-facing 4 MiB file-read limit.

Forward binary stdin through WorktreeEnvironment and include executor creation in the existing child failure and cleanup handling. Transfer internal result and session files separately from model-facing reads. Local transfers reuse anchored regular-file access and stream the bytes, preserving path, symlink and descriptor protections. Existing Docker and VM transfers retain their checked routes, and ordinary file reads keep their original size limit.

The original regression set changed from eight failures and one pass to nine passes. Author validation passed 179 related cases, with one optional real-Docker test skipped. Independent review passed 198 cases with the same optional skip. Actual Local and Git worktree runs delivered results and session artifacts larger than 4 MiB, released reservations and ended their processes. Additional probes cover binary stdin, startup errors, cancellation, path escape, symlinks, FIFOs and descriptor cleanup. Repository Ruff, import constraints and dependency checks passed.

Forward stdin through worktree commands and finalize child state and budget
reservations when executor startup fails. Retain recovery errors when process
cleanup fails.

Transfer internal results and native session artifacts independently of model
file-read limits while preserving pinned workspace and regular-file checks.

Cover real local, copied, Git worktree and Team candidate execution, large
results, startup failures, path boundaries, descriptor cleanup and bridge
compatibility.
@KaiEureka KaiEureka closed this Oct 25, 2026
@KaiEureka
KaiEureka deleted the codex/fix-audit-authored-execution-20261025 branch October 25, 2026 15:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant