Commit Graph
143 Commits
Author SHA1 Message Date
DottaandPaperclip 647e4adf27 fix(native): bind operator Stop to caller cancellation intent
Reserve an optional board request UUID under the run lock and retain it
through default Stop joins and native dispatch. Reject prior or competing
intents and require the same actor for idempotent retries.

Bind the Copilot denial fixture to its exact request and audited intent,
with versioned causal receipts and negative controls for earlier Stop.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 12:03:34 -05:00
DottaandPaperclip 8040aa903c test(runner-e2e): reject coerced observation clock fields
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 11:33:41 -05:00
DottaandPaperclip eecd64509a fix(runner-e2e): require causal pre-Stop denial observations
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 11:33:41 -05:00
DottaandPaperclip 20154268be fix(runner-e2e): await durable denial evidence before Stop and sampling
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 10:58:35 -05:00
DottaandPaperclip 72cbc3503d fix(runner-e2e): distinguish Copilot denial settlement from Stop
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 10:58:35 -05:00
DottaandPaperclip 0499513435 fix(runner-e2e): bound inspection failure and graceful delivery races
Keep direct-child fallback bounded when process inspection fails, preserve incomplete cleanup evidence, and select graceful owners from the delivery snapshot without signaling already-covered descendants again.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 10:58:35 -05:00
DottaandPaperclip 0ad2173bc1 fix(runner-e2e): retain shutdown ownership across launcher cleanup
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 10:58:35 -05:00
DottaandPaperclip a8ecf41cb1 fix(runner-e2e): preserve graceful server shutdown
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 10:58:35 -05:00
DottaandPaperclip a8df2064d6 fix(e2e): retain transient classification for admission socket drops
Recognize socket hang up only in transport errors. Test plain and prefixed drops plus HTTP bodies with misleading network text.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 08:56:23 -05:00
DottaandPaperclip 812b9e1a65 fix(e2e): normalize remote admission failures without private diagnostics
Preserve typed HTTP and transport timeout classification while removing raw response bodies and causes from admission reports. Reject unknown failures and malformed JSON without weakening ownership or deadline checks.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 08:48:21 -05:00
DottaandPaperclip 6ed490ee43 fix(e2e): reject stopped bootstrap runs without awaiting slow reads
Bound outstanding admission reads, preserve successful stop and ownership proof immediately, and retain API failure causes and classification at the existing deadline.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 08:23:19 -05:00
DottaandPaperclip 868c35e95c fix(e2e): preserve startup stop evidence and setup budget
Retain successful ownership and terminal reads when another endpoint fails. Reserve the existing fixture setup allowance inside the authored case deadline and capture binder failures with startup state.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 08:17:03 -05:00
DottaandPaperclip 1d3f237235 fix(e2e): bound remote bootstrap by the case deadline
Wait through cold snapshot provisioning while rechecking exact task/run ownership and active lease admission. Fail promptly on terminal runs and retain bounded startup state.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 07:58:24 -05:00
DottaandPaperclip a1145db4d8 test(runner-e2e): require observer startup readiness
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 04:51:08 -05:00
DottaandPaperclip 5c98f04299 fix(runner-e2e): bound remote observer startup requests
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 04:33:09 -05:00
DottaandPaperclip 72a88e124d Keep accepted Cursor plans waiting for explicit continuation
Bind normal native plan acceptance to its durable request, delivered answer, admitted run and completion contract. Commit a passive in-progress result with a visible next-message summary, preserve semantic finish priority, and suppress recovery until task-specific continuation without changing modes.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 01:56:28 -05:00
DottaandPaperclip c9a0aaffa1 Bound Copilot fixture command prefix equivalence
Keep raw native command digests and exact execution origins while admitting at most eight leading ASCII space or tab bytes. Verify the relation in the settlement grader and retain independent local observations before a command mismatch aborts grading.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 00:58:04 -05:00
DottaandPaperclip 05d8b40a06 fix(evals): correlate denied Copilot tool target by origin
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 23:13:23 -05:00
DottaandPaperclip 951b06d08a fix(runner): fence warm ACPX owners on runtime contract changes
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 21:40:17 -05:00
DottaandPaperclip d6ff17fd0d test(runner-e2e): isolate denied-target watchers from startup churn
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 21:40:17 -05:00
DottaandPaperclip 4376dbe0be fix(evals): recognize native ACPX sidecar requests
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 21:40:17 -05:00
DottaandPaperclip a1ccf64737 test: clarify runnerd bootstrap ID correlation
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 19:13:40 -05:00
DottaandPaperclip 794e90a258 test: require exact attested bootstrap reads in native qualification
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 17:54:12 -05:00
DottaandPaperclip 1597325184 test(runner): bound remote receipts by the cell deadline
Reserve 15 seconds for public teardown, share remaining time across SDK/socket/host waits, subtract setup time from observer TTL, and bound close independently without extending qualification.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 17:27:54 -05:00
DottaandPaperclip fe92554788 Wire native Daytona qualification and warm ACP journeys
Withhold native tasks until exact owned observers are armed, preserve sealed retirement proof before environment teardown, and register explicit local and Daytona warm continuity cases.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 17:26:29 -05:00
DottaandPaperclip 133793b419 test(runner): scope remote evidence around verified runtime state
Admit the actual staged runtime layout, retain sentinel and sibling mutation coverage, distinguish observed PRP identity from the sandbox lease, and bound setup readiness inside the caller deadline.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 17:22:19 -05:00
DottaandPaperclip 63eae696e7 test: bind Copilot remote protection to sealed sandbox evidence
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 17:20:13 -05:00
DottaandPaperclip 522ab2d002 Fix canonical Cursor plan delivery expectations
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 17:18:14 -05:00
DottaandPaperclip 04e9e9aacc test: count all Copilot origins and verify marker after cleanup
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 17:17:56 -05:00
DottaandPaperclip 9da7a7be62 test(runner): bind remote native evidence to exact run leases
Arm bounded filesystem and process observers before publishing native actions, retain sealed file and retirement receipts before ephemeral lease teardown, and provide an independent attached-command fixture.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 17:15:25 -05:00
DottaandPaperclip d1bb5729f9 Add Pi remote native evidence and browser denial fixtures
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 17:13:41 -05:00
DottaandPaperclip fce6e109ad Prepare Cursor native Daytona flows with owned remote evidence
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 17:13:41 -05:00
DottaandPaperclip 95faa1ee8b Prove Cursor native denial command and cancellation boundaries
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 16:45:15 -05:00
DottaandPaperclip c22526c266 test(runner): register native Cursor interactions and cleanup proof gates
Add four explicit candidate cells with mode-specific native callback evidence. Run independent cleanup assertions before grading and preserve failures while closing every observer.

Co-authored-by: Paperclip <noreply@paperclip.ing>
2026-09-29 16:41:43 -05:00
DottaandPaperclip 96ca6ce1e7 Clarify native fixture evidence requirements
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 16:41:43 -05:00
DottaandPaperclip 879eecdbb1 Prepare native Cursor callback and durable denial Product flows
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 16:41:43 -05:00
DottaandPaperclip 6ea2b49d88 fix(evals): bind interpreter build probe to Daytona image identity
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 16:06:39 -05:00
DottaandPaperclip 54dfc1bc8e fix(runner): preserve Copilot evidence in the direct driver
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 16:05:55 -05:00
DottaandPaperclip d3077a061f test(e2e): add Copilot denial and attached settlement cases
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 16:01:39 -05:00
DottaandPaperclip 76672efbeb test(runner-e2e): prepare Copilot denial and attached settlement oracles
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 15:56:52 -05:00
DottaandPaperclip a0d916a8c9 fix(evals): retain Pi native terminal API evidence
Capture the required final issue, runs, comments, interactions and paginated run events before native fixture success. Regress the real flow through evidence packaging and fail closed when terminal capture is unavailable.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 15:32:30 -05:00
DottaandPaperclip 23614d28c8 merge: integrate reviewed Copilot and Cursor runtime repairs into Pi
Preserve Pi v6 and bounded startup pools, admit current Cursor and Copilot v4 identities, and combine additive Product flows and catalog assertions.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 11:33:28 -05:00
DottaandPaperclip 95dfde7c5c Merge current Cursor ACP runtime into Copilot v4
Preserve both profile-specific guards and complete terminal diagnostics; bind Copilot v4 to the regenerated ACPX patch.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 11:28:38 -05:00
DottaandPaperclip 3a08122558 Merge current master into Cursor ACP provider branch
Preserve upstream ACPX terminal diagnostics and rich extension delivery hooks.

Co-Authored-By: Paperclip <hello@paperclip.ing>
2026-09-29 10:36:20 -05:00
DottaandPaperclip 83076d7e7c feat: return completed handoffs to Agent Chat (#14408)
Return completed Agent Chat handoffs through a durable outbox and scope each generated update to its supplied tasks. Add recovery, browser delivery, result access, and calibrated quality coverage.

Validated with two consecutive ten-case Claude/Codex campaigns, all CI checks, and a 5/5 review.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 10:25:52 -05:00
Dotta 6766b9128e Merge branch 'codex/runner-copilot-acp' into codex/runner-pi-acp
* codex/runner-copilot-acp:
  Admit the verified Copilot v3 identity in Rust
  Admit the verified Cursor v3 identity in Rust
  Admit current ACP profiles and verify cross-language pin agreement
  Follow current Copilot profile identity in native installation admission
  Preserve authoritative Copilot guard errors for pending ACP requests
  Preserve Copilot policy rejection codes across sidecar transport
  Bind Copilot v3 identity to native detached-work admission
  Deny native Copilot detached work before permission dispatch
  Prove Cursor SDK interactions and retain profile v3 build evidence
  Bind Daytona image identity to Cursor isolation patch
  Retain Copilot detached-command early completion regression
  Prove Copilot permission recovery after provider death without replay

# Conflicts:
#	packages/paperclip-runner/src/drivers/acpx/qualified-profiles.ts
2026-09-29 10:10:17 -05:00
Dotta 304472946d Merge commit 'abad2bd0d' into codex/runner-copilot-acp
* commit 'abad2bd0d':
  Bind Daytona image identity to Cursor isolation patch
2026-09-29 09:58:05 -05:00
DottaandPaperclip 6f163033a4 test(runner): add explicit Pi native product boundaries
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 09:56:30 -05:00
DottaandPaperclip abad2bd0da Bind Daytona image identity to Cursor isolation patch
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 09:53:20 -05:00
DottaandPaperclip 3f4f8b37ba fix: grade Codex clarification and refusal outcomes from evidence (#14570)
Grade clarification lists, obsolete unstarted wakes, and refusal cancellation from persisted evidence. Preserve execution and ownership assertions, add boundary regressions, and version the affected eval definitions.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 09:40:55 -05:00