mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-11-04 19:28:46 +01:00
## Thinking Path > - Paperclip is the open source app people use to manage AI agents for work. > - Required CI checks protect changes to its native Runner and control plane. > - Recent Runner jobs restored a Rust cache but still rebuilt dependencies for 74–92 seconds. > - New workspace install hooks disabled the materialized JavaScript dependency cache. > - A single transport file also kept 326 test cases on one worker. > - This pull request corrects the cache inputs, replays known install hooks, and separates independent transport test groups. > - The same checks can finish sooner without removing test cases or widening runner access. ## Linked Issues or Issue Description Refs #18794 and #18544. Related dependency-action version update: #17698; this change fixes the cache input contract used by the currently pinned action. **What happened?** Recent PR jobs such as #18783 and #18825 restored an exact Rust dependency cache from October 16. The virtual workspace's development profile changed on October 30. Rust Cache 2.9.2 hashes member manifests but omits that virtual manifest. Rebuilding cannot replace an immutable exact cache entry. The JavaScript cache also rejected the new server and Runner Copilot postinstall hooks. **Expected behavior** Changing a Cargo profile selects a new dependency cache. An exact JavaScript dependency restore still performs required workspace install hooks. Independent transport fixtures use the existing file workers while retaining all assertions and real deadlines. **Steps to reproduce** Inspect the Rust dependency cache hit and following `build:rust` in the recent Runner package jobs. Run `node scripts/ci-dependency-cache.mjs` on the previous revision to see `cacheable: false`. Run the original transport file to measure the serial test work. ## What Changed - Add the virtual workspace manifest and ancestor Cargo configuration to all shared Rust dependency keys. Keep reader/writer identities aligned and preserve master-only cache writes and CODEOWNERS-only AWS routing. - Recognize only the exact reviewed root, server, and Runner postinstall commands. Include the server/Runner installer scripts in the dependency key. Replay workspace postinstall hooks after a materialized restore. Unknown lifecycle hooks still disable reuse. - Move attachment recovery, warm attachment, live adoption, and suspension fixtures into separate files. Keep the large event-backlog cases in the original file to avoid starting another expensive fixture group at the same time. Share five stateless test helpers outside production source. - Extend the opt-in `profile-ci` benchmark with a PR-scoped Rust cache producer and a fresh-host consumer. Require exact dependency/workspace hits and reject any Cargo unit that is rebuilt. Retain the JSON build evidence. Existing setup qualification checks real JavaScript cache restores. - Schedule the ten measured files over 50 seconds first, in approximate duration order. Package CI uses up to four workers, bounded by available CPUs; local runs retain Vitest defaults. The AWS runner has four CPUs and 16 GiB RAM; the three-worker run averaged 44% CPU and peaked at 15% memory. Preserve Vitest selection and shard membership and default ordering for other files. Job count and AWS authorization are unchanged. - Scope the optional paired server benchmark to changes in its measured inputs. Cache-only changes qualify exact restores and run the shared package tests using restored dependencies. - Update the cache and test documentation and the existing native cache contract guard. ## Verification - All 586 `.github/scripts/tests/*.test.mjs` policy tests passed, including cache trust and runner routing guards. Actionlint passed for all three changed workflows. - All 169 original top-level transport test definitions remain byte-identical. The original file passed all 326 cases in 317.99 seconds on this macOS host. A clean preliminary split passed the exact same named cases in 183.01 seconds with the same four-worker cap. - Preserve the first failed experiment: its parallel run overlapped the policy suite and timed out in the 1,024-event settled backlog case at 60 seconds; 325 cases passed. A clean repeat passed, but that does not establish the earlier failure's sole cause. The final layout keeps the backlog cases in the original file. The final layout passed the same 326 cases in 186.35 seconds (41.4% faster than the 317.99-second baseline). The original test bodies and all timeouts remain unchanged. - Fresh-host Rust qualification passed: all 308 compilation units were fresh, and Cargo completed in 1.59 seconds on a new runner ([final-head run](https://github.com/paperclipai/paperclip/actions/runs/41745082837/job/126296908816)). JavaScript setup dropped from 46 seconds cold to 23 seconds with exact dependency/build restores; all 1,052 shared-package cases passed against the restored tree ([final-head job](https://github.com/paperclipai/paperclip/actions/runs/41745082837/job/126295937797)). The previous qualification also passed (43 to 19 seconds) and confirmed all three postinstall hooks replayed. These are qualification results, not an end-to-end PR timing claim. - Initial full AWS package run passed 4,907 cases with 10 existing skips. The original-file remainder fell to 118.7 seconds, but the 100-second deadline file started last, leaving the full package at 417.43 seconds. Starting only three long files first passed 4,911 cases (including four new sequencer guards) in 422.54 seconds, so reordering alone did not improve full-package time. Summed file execution was 1,202 seconds across three busy workers. The final four-worker configuration passed **4,912 cases, with the same 10 existing skips**, in **324.99 seconds**, a **23.1% reduction** from 422.54 seconds. The five added cases guard ordering, selection, sharding, and path handling. Peak memory was 17.95% of the 16 GiB runner; average CPU was 49.14% ([final-head package job](https://github.com/paperclipai/paperclip/actions/runs/41745082974/job/126296339480)). - Local workspace typecheck and build passed. The complete local `pnpm test:run` passed all six chat partitions but reported failures in one existing OAuth redirect case and one gateway authority case in the general-server group. Both focused repetitions passed (three OAuth cases and one gateway case), and a complete repeat of both files passed all 593 cases in 42.89 seconds; that does not explain the original failures. The broad local run was stopped after 61 minutes once full final-head CI had passed; its remaining general/workspace/serialized work was not completed locally, and it is not reported as a pass. Original failure logs were retained. Full final-head CI provides the complete suite validation. Sequencer selection/shard guards and the 11-case transport suspension smoke passed. The corrected release workflow guard passed all 71 tests. - The first CI run failed only the policy guard that still expected the old native cache key; downstream aggregate checks also failed. That guard now checks the new profile/config prefix and existing host/target/protocol suffix. A second policy run found that the new sequencer test imported Vitest in the dependency-free policy lane; it now runs in the Runner package lane, where all four cases pass. Greptile reviewed final head `8011f84189` at 5/5 with no actionable findings and confirmed this issue fixed. Final-head policy, typecheck, build, and review passed. At 23:52:46 UTC on November 3, several AWS jobs were terminated together: the Runner package process received SIGTERM and browser logs recorded a runner shutdown signal. The failed/cancelled jobs passed on the same-head retry, including required `ci / verify`; no assertion or timeout was changed in response. The final concurrency adjustment at `fe5a69bb0b` also received Greptile 5/5 with no actionable findings. Final-head required CI, including `ci / verify`, passed ([aggregate](https://github.com/paperclipai/paperclip/actions/runs/41745082974/job/126300554711)). Local timings exclude install, build, cache transfer, and CI queue time. ## Risks A new Rust key needs one successful canonical master build before ordinary PRs can hit it. The fresh-host qualification uses separate PR-scoped entries. Parallel test files can increase I/O contention; case execution inside each file, timeouts, and assertions are unchanged. Two extracted suites exceed 1,000 lines because they retain existing multi-stage recovery fixtures unchanged; one parameterized fixture alone is 1,059 lines. No production execution logic, lockfile, credentials, runner trust gates, or required check is removed. ## Model Used OpenAI GPT-6 through Codex, with reasoning, repository editing, command execution, and GitHub inspection. The host does not expose a more precise model snapshot or context-window size. ## Checklist - [x] I have included a thinking path that traces from project context to this change - [x] I have specified the model used (with version and capability details) - [x] I have checked ROADMAP.md and confirmed this PR does not duplicate planned core work - [x] I have searched GitHub for duplicate or related PRs and linked them above - [x] I have either (a) linked existing issues with `Fixes: #` / `Closes #` / `Refs #` OR (b) described the issue in-PR following the relevant issue template - [x] I have not referenced internal/instance-local Paperclip issues or links (only public GitHub `#NNN` / `github.com/paperclipai/paperclip` URLs) - [x] My branch name describes the change (e.g. `docs/...`, `fix/...`) and contains no internal Paperclip ticket id or instance-derived details - [x] I have run tests locally and they pass — targeted checks passed; the broad-run failures and repetitions are documented above - [x] I have added or updated tests where applicable - [x] I have updated relevant documentation to reflect my changes - [x] I have considered and documented any risks above - [x] All Paperclip CI gates are green - [x] Greptile is 5/5 with no open P2s, recommendations, or follow-ups - [x] I will address all Greptile and reviewer comments before requesting merge --------- Co-authored-by: Paperclip <noreply@paperclip.ing>
92 lines
4.3 KiB
JavaScript
92 lines
4.3 KiB
JavaScript
import { execFileSync } from "node:child_process";
|
|
import { createHash } from "node:crypto";
|
|
import { appendFileSync, existsSync, readFileSync, realpathSync } from "node:fs";
|
|
import path from "node:path";
|
|
import { fileURLToPath } from "node:url";
|
|
import { readPluginsUnder } from "./link-plugin-dev-sdk.mjs";
|
|
|
|
const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
|
|
|
|
const postinstallHooks = new Map([
|
|
[".", "node scripts/link-plugin-dev-sdk.mjs"],
|
|
["server", "node scripts/install-copilot-assets.mjs"],
|
|
["packages/paperclip-runner", "node scripts/install-copilot-assets.mjs"],
|
|
]);
|
|
|
|
export function cachePlan({ files, read, scope, packageDirs }) {
|
|
const dependencyInputs = files.filter((file) =>
|
|
/(^|\/)package\.json$/.test(file)
|
|
|| ["pnpm-lock.yaml", "pnpm-workspace.yaml", ".npmrc", ".pnpmfile.cjs", "pnpmfile.cjs"].includes(file)
|
|
|| file.startsWith("scripts/")
|
|
|| file.startsWith("server/scripts/")
|
|
|| file.startsWith("packages/paperclip-runner/scripts/")
|
|
|| file.startsWith("patches/"));
|
|
const digest = (inputs, salt) => {
|
|
const hash = createHash("sha256").update(JSON.stringify(salt));
|
|
for (const file of [...inputs].sort()) {
|
|
const bytes = read(file);
|
|
hash.update(JSON.stringify([file, bytes === null ? null : bytes.length]));
|
|
if (bytes !== null) hash.update(bytes);
|
|
}
|
|
return hash.digest("hex");
|
|
};
|
|
const dependencyKey = `ci-dependencies-v1-${digest(dependencyInputs, scope)}`;
|
|
const cacheable = packageDirs.every((directory) => {
|
|
const manifest = read(path.posix.join(directory, 'package.json'));
|
|
if (manifest === null) return false;
|
|
const scripts = JSON.parse(manifest).scripts ?? {};
|
|
return ['preinstall', 'install', 'postinstall', 'prepare'].every((hook) =>
|
|
scripts[hook] === undefined || (hook === 'postinstall'
|
|
&& scripts[hook] === postinstallHooks.get(directory)));
|
|
});
|
|
const buildInputs = files.filter((file) =>
|
|
file.startsWith("packages/shared/") || file.startsWith("packages/plugins/sdk/")
|
|
|| /^tsconfig[^/]*\.json$/.test(file)
|
|
|| file === "scripts/ensure-plugin-build-deps.mjs");
|
|
return {
|
|
cacheable,
|
|
dependencyKey,
|
|
buildKey: `ci-build-dependencies-v1-${digest(buildInputs, dependencyKey)}`,
|
|
dependencyPaths: [...new Set(packageDirs.map((directory) => {
|
|
if (path.isAbsolute(directory) || directory.split('/').includes('..')) throw new Error('Package directory escapes the checkout');
|
|
return path.posix.join(directory, 'node_modules');
|
|
}))].sort(),
|
|
};
|
|
}
|
|
|
|
if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
|
|
const files = execFileSync("git", ["ls-files", "-z"], { cwd: root }).toString().split("\0").filter(Boolean);
|
|
const command = (args) => execFileSync("pnpm", args, { cwd: root, encoding: "utf8" }).trim();
|
|
const workspaces = JSON.parse(command(['-r', 'list', '--depth=-1', '--json']));
|
|
const packageDirs = ['.',
|
|
...workspaces.map((workspace) => path.relative(root, workspace.path).split(path.sep).join('/') || '.'),
|
|
...readPluginsUnder(path.join(root, 'packages/plugins/sandbox-providers')).map((directory) => path.relative(root, directory).split(path.sep).join('/')),
|
|
'packages/plugins/examples/plugin-orchestration-smoke-example',
|
|
];
|
|
const plan = cachePlan({
|
|
files,
|
|
read: (file) => existsSync(path.join(root, file)) ? readFileSync(path.join(root, file)) : null,
|
|
packageDirs,
|
|
scope: {
|
|
root: realpathSync(root), node: process.version, abi: process.versions.modules,
|
|
platform: process.platform, arch: process.arch,
|
|
libc: process.report.getReport().header.glibcVersionRuntime ?? null,
|
|
pnpm: command(["--version"]), store: command(["store", "path", "--silent"]),
|
|
},
|
|
});
|
|
const output = [
|
|
`cacheable=${plan.cacheable}`,
|
|
`dependency-key=${plan.dependencyKey}`,
|
|
`build-key=${plan.buildKey}`,
|
|
"dependency-paths<<PAPERCLIP_CACHE_PATHS",
|
|
...plan.dependencyPaths.map((file) => path.join(root, file)),
|
|
"PAPERCLIP_CACHE_PATHS",
|
|
"build-paths<<PAPERCLIP_BUILD_PATHS",
|
|
path.join(root, "packages/shared/dist"),
|
|
path.join(root, "packages/plugins/sdk/dist"),
|
|
"PAPERCLIP_BUILD_PATHS",
|
|
].join("\n") + "\n";
|
|
if (process.env.GITHUB_OUTPUT) appendFileSync(process.env.GITHUB_OUTPUT, output);
|
|
else console.log(JSON.stringify(plan, null, 2));
|
|
}
|