Repository navigation
estafeta 3.2.0: provider policy, takeover guard, Windows, live checks across hosts - #5
Merged
Merged
Conversation
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…nose failed CLI workers - Windows: keep the index file mode for changed files (os.access reports every file executable), so commits no longer stale DONE evidence; stop workers with CTRL_BREAK before taskkill so a running check can record itself. - collect reports a CLI worker's exit code and stderr tail when no result block exists (seen live: gemini without login exits 41). - scripts/golden/live_cli.py replays consult/write golden paths with a real provider CLI; codex exec 0.162.1 passed both live. - Adapters: Codex must always pass --sandbox (user config may default to danger-full-access); Gemini lowers approval mode in untrusted folders. - CI runs every suite even after a failure. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
On Windows the supervisor tracked only the leader, so a timed-out worker counted as exited while its check runner was still recording, leaving the check 'running' and its lock held. A job object now plays the role of the POSIX process group: the supervisor waits for every descendant, sends CTRL_BREAK first and terminates the job after the grace period. The runtime descendant test now runs on Windows too, with a non-signalling PID probe. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
… file - A solo begin no longer supersedes a session in the same checkout that acted within SESSION_WORKFLOW_TAKEOVER_IDLE_MINUTES (default 30) or has open delegations; it joins in parallel and warns. Observed live: a separate T3 thread's session-start took over the orchestrator and its claims. - Supervisors pass SESSION_WORKFLOW_STOP_FILE to workers and write it before any signal, so a worker's check run stops its own check and records it abandoned even where signals cannot reach it (Windows without a console). - The golden stub reports blocked when a required check does not pass, as the packet asks; no_process patterns are unique per run. - Plan extended to 3.2.0 (provider policy, orchestrator hosts). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…elegate - PROJECT.md gets a marked 'AI providers' table (provider, allowed modes, models). session-start asks the user once when status reports provider_policy: missing and records the answer; the template has the section. - delegate start refuses without the table (providers_unset) and refuses any provider, mode or model outside it (provider_not_allowed); delegate providers shows the policy. Account-level IDs such as claude-pricefx are supported. - Golden scenario provider-policy plays the first-use path end to end. - This project's table: all available providers except the Claude (Pricefx) work account (user, 2026-10-15). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- scripts/golden/live_orchestrator.py gives a real orchestrator a plain agent-relay request in a fixture with project-local skills. Passed live: Claude Code -> codex exec, Codex (workspace-write + network) -> claude -p, Claude Code -> Agent subagent, Codex -> multi_agent subagent. - Adapters document orchestrator hosts and their sandbox needs; native subagents are recorded as host tasks with --model. - A newer state schema now tells an outdated (often shadowing global) copy how to update, as seen live with a 2.4.1 global session-end. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
pashbel
marked this pull request as ready for review
October 16, 2026 14:18
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Supersedes #4: #4 was merged into its stale base branch
agent-relay-3.1.0after #3 had already landed, so none of this reachedmain.Draft while the third Codex review round runs. The full description follows at release.
delegate.codex exec;Plan:
docs/plans/relay-hardening.md.🤖 Generated with Claude Code