Priya RamanandPaperclip e6e79f458e fix(server): refuse to archive a reopen-pending workspace ...

Close the second destructive lifecycle race. The archive route calls
archiveWorkspaceUnderLifecycleLock. That method rejected only missing or
already-closed rows, then cleared the reopen flag and archived. A reopen sets
the reopen-pending flag when it publishes a rebuilt worktree as active while the
source issue is still terminal. In that window an authorized actor could invoke
the archive control; the method archived the row and the destruction fence then
removed the rebuilt worktree.

Make archiveWorkspaceUnderLifecycleLock return a distinct "reopen_pending"
outcome for a flagged row. It does not clear the flag and does not archive. Add
the flag predicate to the update WHERE as defense in depth. Map the outcome to
HTTP 409 in the route, before any lease teardown, runtime-service stop, or
artifact cleanup.

Add a service regression: a terminal-source, active, flagged row rejects the
archive and keeps its status, generation, flag, and worktree. Add a route
regression: the archive returns 409 and never runs the destruction fence.

Co-authored-by: Paperclip <noreply@paperclip.ing>

2026-08-13 01:58:00 +00:00

..

scripts

fix(server): use stable tsx/cli entry point in dev-watch

2026-03-28 06:42:03 +07:00

src

fix(server): refuse to archive a reopen-pending workspace

2026-08-13 01:58:00 +00:00

CHANGELOG.md

chore: release v0.3.1

2026-03-12 13:09:22 -05:00

package.json

fix(server): export manual OpenTelemetry spans (#10565)

2026-07-31 12:47:57 -07:00

tsconfig.json

Fix root TypeScript solution config

2026-03-09 14:09:30 -05:00

vitest.config.ts

fix(test): stop flaky server-suite afterAll hook timeouts (#10024)

2026-07-22 11:51:30 -07:00