Files
PaperClipAI/packages
Nicky LeachandPaperclip fb2e07ebdd Wait for physical authority before activating hosted warm routes (#19277)
## Thinking Path

> - Paperclip is the open source app people use to manage AI agents for
work.
> - Core can give two consecutive runs, A and B, the same hosted Runner
so B can continue A’s conversation.
> - During that handoff, Core can record that B is next while the Runner
still answers as A.
> - If Core restarts at that point and tries to connect for B, the
Runner rejects the connection. B’s next turn stalls.
> - This PR makes Core finish the handoff over A’s connection and check
which run the Runner now reports.
> - Once the Runner reports B and authenticates B’s connection, B can
continue on the same Runner.

## Linked Issues or Issue Description

- Refs #17390 for hosted Runner reuse.
- Refs #19157 for recovering a stopped Runner session before attaching
the next run.

## What Changed

- If the Runner still reports A, Core uses A’s connection to acknowledge
the result of `run.attach`. This tells the Runner that Core saved the
handoff and that it can switch to B.
- Core reads the Runner’s saved state and checks it against the recorded
handoff. If the Runner already reports B for that handoff, Core connects
for B directly. Core waits for B’s connection to authenticate before
sending its work. This applies both during an ordinary handoff and after
Core restarts.

## Verification

- Run `pnpm --filter @paperclipai/paperclip-runner exec vitest run
src/live/runnerd-staged-handoff.test.ts` with the native test binaries
built. The regression replaces Core at four points in the handoff.
Before the fix, Core tried to connect for B while the Runner still
reported A.
- With the fix, B and a third run each start and finish one turn. The
test observes one Runner process, one controlled Codex provider process,
and one conversation thread throughout.
- All seven handoff cases passed. GitHub CI passed after retrying an
unrelated port collision and interrupted jobs. Standard Greptile scored
the commit 5/5. [CI
run](https://github.com/paperclipai/paperclip/actions/runs/42070818838)

## Risks

- The host must be able to read the Runner’s state. If Core cannot
verify the switch before the existing deadline, it leaves the handoff
pending and sends no work for B. Live hosted verification is still
separate.

> For core feature work, check [`ROADMAP.md`](ROADMAP.md) first and
discuss it in `#dev` before opening the PR. Feature PRs that overlap
with planned core work may need to be redirected — check the roadmap
first. See `CONTRIBUTING.md`.

## Model Used

- OpenAI GPT-6.1 Sol (`gpt-6.1-sol`), high reasoning effort, through
Codex with repository tools and code execution.

## Checklist

- [x] I have included a thinking path that traces from project context
to this change
- [x] I have specified the model used (with version and capability
details)
- [x] I have checked ROADMAP.md and confirmed this PR does not duplicate
planned core work
- [x] I have searched GitHub for duplicate or related PRs and linked
them above
- [x] I have either (a) linked existing issues with `Fixes: #` / `Closes
#` / `Refs #` OR (b) described the issue in-PR following the relevant
issue template
- [x] I have not referenced internal/instance-local Paperclip issues or
links (only public GitHub `#NNN` / `github.com/paperclipai/paperclip`
URLs)
- [x] My branch name describes the change (e.g. `docs/...`, `fix/...`)
and contains no internal Paperclip ticket id or instance-derived details
- [x] I have run tests locally and they pass
- [x] I have added or updated tests where applicable
- [x] I have updated relevant documentation to reflect my changes
- [x] I have considered and documented any risks above
- [x] All Paperclip CI gates are green
- [x] Greptile is 5/5 with no open P2s, recommendations, or follow-ups
- [x] I will address all Greptile and reviewer comments before
requesting merge

Co-authored-by: Paperclip <noreply@paperclip.ing>
2026-11-05 13:05:56 -08:00
..