codex-app-server

466 Commits 3 Branches 0 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
host	1128fd3076	feat: 长任务补齐——流式进度 + 跨进程中断 + worker 超时约定 - 长等待流式进度：run_turn 改 1 秒切片轮询（_wait_turn），每满 --progress-interval（默认 30 秒，0 关闭，CLI > 配置 > 默认）往 stderr 打 turn progress 并往链路文件记 kind=progress；进度绝不走 stdout，不破坏 dispatch JSON 与 goal 结论行/用量行解析（经 cloud 真正则验过） - 跨进程中断：interrupt 直接不生效时写 <state_dir>/interrupt-requests/<task>.json，属主等 turn 时每秒轮询到后用自己的 live 连接发 turn/interrupt 并记 interrupted；10 秒内未响应也不删文件，属主下次轮询仍处理；接线覆盖 dispatch/run/goal/goal-resume/delegate/parallel/fix-review/run-due；旧 server 不接受 interrupt_file 时退回不传再跑 - cloud worker 超时约定：--task-timeout 0 归一化为 None（不限时，与 host turn_timeout 同约定，Docker 路径仍受 docker_timeout 约束），默认 1800 不变；超时仍记 failed（现有单测合同不动）测试：host 56 全过（新增 7）、cloud 526 全过（4 跳过，新增 1 个 0=不限时）。	2026-10-27 03:05:15 +08:00
host	29dcae4513	Hotfix: stale-container cleanup must not delete infra containers Worker startup cleanup previously deleted every container whose name started with codex-, including the codex-postgres database container. On the external host the first worker restart after the prod-grade deploy deleted codex-postgres, leaving the control plane unable to connect to Postgres (connection refused on 127.0.0.1:5432, server auto-restart loop). Fix: cleanup only deletes codex-<32-hex task id> containers, which is exactly the name DockerExecutor gives task containers; infrastructure names like codex-postgres never match and are never deleted. Regression test covers postgres + non-hex names.	2026-10-26 03:59:54 +08:00
host	33841355b5	Production-grade: webhook execution, Postgres backup, rate limit, worker timeout/retry GitHub webhook: delivery-id dedup persisted in webhook_deliveries, /fix-review creates a queued task with audit (no model run in the webhook itself), check_run/check_suite parsing without mutating task state (CI backfill still via pr-checks). Control plane: Postgres pg_dump backup branch + POST /admin/backup (maintainer+, password only via PGPASSWORD env), per-key/IP rate limit (default 120/min, 429), health returns backend + db_ok, metrics by_status always has all seven status keys. Worker: per-task timeout (default 1800s, --task-timeout), timeout is failed not interrupted, limited retries (default 1, backoff, fallback failures not re-retried), stale codex- container cleanup on loop/CLI start. Tests: cloud 271 (267 pass, 4 skipped are pre-existing real- Postgres tests), host 27 pass.	2026-10-26 03:55:07 +08:00

Author

SHA1

Message

Date

host

1128fd3076

feat: 长任务补齐——流式进度 + 跨进程中断 + worker 超时约定

- 长等待流式进度：run_turn 改 1 秒切片轮询（_wait_turn），每满 --progress-interval（默认 30 秒，0 关闭，CLI > 配置 > 默认）往 stderr 打 turn progress 并往链路文件记 kind=progress；进度绝不走 stdout，不破坏 dispatch JSON 与 goal 结论行/用量行解析（经 cloud 真正则验过）
- 跨进程中断：interrupt 直接不生效时写 <state_dir>/interrupt-requests/<task>.json，属主等 turn 时每秒轮询到后用自己的 live 连接发 turn/interrupt 并记 interrupted；10 秒内未响应也不删文件，属主下次轮询仍处理；接线覆盖 dispatch/run/goal/goal-resume/delegate/parallel/fix-review/run-due；旧 server 不接受 interrupt_file 时退回不传再跑
- cloud worker 超时约定：--task-timeout 0 归一化为 None（不限时，与 host turn_timeout 同约定，Docker 路径仍受 docker_timeout 约束），默认 1800 不变；超时仍记 failed（现有单测合同不动）

测试：host 56 全过（新增 7）、cloud 526 全过（4 跳过，新增 1 个 0=不限时）。

2026-10-27 03:05:15 +08:00

host

29dcae4513

Hotfix: stale-container cleanup must not delete infra containers

Worker startup cleanup previously deleted every container whose
name started with codex-, including the codex-postgres database
container. On the external host the first worker restart after
the prod-grade deploy deleted codex-postgres, leaving the
control plane unable to connect to Postgres (connection refused
on 127.0.0.1:5432, server auto-restart loop).
Fix: cleanup only deletes codex-<32-hex task id> containers,
which is exactly the name DockerExecutor gives task containers;
infrastructure names like codex-postgres never match and are
never deleted. Regression test covers postgres + non-hex names.

2026-10-26 03:59:54 +08:00

host

33841355b5

Production-grade: webhook execution, Postgres backup, rate limit, worker timeout/retry

GitHub webhook: delivery-id dedup persisted in webhook_deliveries,
/fix-review creates a queued task with audit (no model run in the
webhook itself), check_run/check_suite parsing without mutating
task state (CI backfill still via pr-checks).
Control plane: Postgres pg_dump backup branch + POST /admin/backup
(maintainer+, password only via PGPASSWORD env), per-key/IP rate
limit (default 120/min, 429), health returns backend + db_ok,
metrics by_status always has all seven status keys.
Worker: per-task timeout (default 1800s, --task-timeout), timeout
is failed not interrupted, limited retries (default 1, backoff,
fallback failures not re-retried), stale codex- container cleanup
on loop/CLI start.
Tests: cloud 271 (267 pass, 4 skipped are pre-existing real-
Postgres tests), host 27 pass.

2026-10-26 03:55:07 +08:00