Skip to content

Implement durable agent-job identity and fenced execution (D05/D09) - #12

Merged
AyobamiH merged 2 commits into
OneClickPostFactory:mainfrom
AyobamiH:codex/durable-agent-jobs-20260928
Sep 29, 2026
Merged

AyobamiH merged 2 commits into
OneClickPostFactory:mainfrom
AyobamiH:codex/durable-agent-jobs-20260928

Conversation

@AyobamiH

@AyobamiH AyobamiH commented Sep 28, 2026 •

Copy link
Copy Markdown
Collaborator

Merged source integration — 29 September 2026

Merged as 6e8ac018d4db4ebb726bd69c3a99569adad50a5d, preserving reviewed Worker head 2c875143c67ce7ec37e219e40015ed21dcfa5dcc. Paired application/schema PR AyobamiH/oneclickpostfactory#14 is merged as cabca400770392559a552f113465ce32464c6a4d. Both merge commits have zero file differences from their reviewed heads.

This integrates durable enqueue identity, leased/fenced job ownership, replay-safe completion and reconciliation-only recovery. Existing publication/source/angle ledgers remain responsible for their own effects; job fencing does not provide generation-budget accounting or recall an external request already sent.

Fresh canonical main CI 36503467623 passed. The paired schema repository's main integration run 36503477910 also passed full Worker CI, 122 database assertions, forward migration/restart, 18 publication scenarios and 13 job-ownership scenarios (180 real database requests; external transport forbidden; zero live posts). Detailed evidence remains in paired PR #14. Recorded technical reviews are implementation reviews, not independent approvals.

Before merge, the existing production-build trigger was changed to npx wrangler versions upload with independent readback. Uploading source no longer automatically activates it through that trigger. Post-merge verification confirmed both active Workers unchanged, one allowlisted tenant, generation and publishing disabled.

This merge is not a production rollout. A fixed hosted post-reset experiment passed its first trial but failed its second authenticated tick with HTTP 500; the third trial was not attempted. Temporary resources were removed. The intermittent hosted failure, current persistent-staging proof and authoritative production-database preflight remain release gates. Do not infer acceptance from a previous successful empty-database smoke.

Drain incompatible raw-writing consumers before applying migration 20260928220000; apply schema first and then a compatible reviewed consumer. Preserve unknown publications and legacy holds. Rollback must remain lease-aware or stop processing, never restore broad job-table mutation grants. No production migration/deployment, paid generation or live publication was performed by this integration.

No deployment or provider calls. Verify source mutations before publishing
content-addressed candidate blobs; the helper is removed from the final tree.
…iation-only recovery

Promote the fully tested Worker source tree and remove assembly tooling.
Add an isolated real-Postgres fault suite for paired schema verification.
Requires agent-jobs-v1 before processing; no production deployment.

@AyobamiH AyobamiH left a comment

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Technical implementation review for Worker 2c87514, paired with application/schema PR AyobamiH/oneclickpostfactory#14 at e1c14e16b2a8d40dcefd4818c78487ab1bb9fc29. This records the implementation agent's review, not independent approval.

The recorded paired validation run 36492595603 passed the full Worker suite, 122 database assertions, forward migration/restart, 18 publication failure scenarios and 13 durable-job scenarios with external transport intercepted or forbidden and zero live posts. The application-side review fixed hosted rehearsal's migration-identity comparison and made the durable-job evidence mandatory in persistent staging. These results are recorded in paired PR #14; this access-verification attempt has not rerun those jobs.

The Worker retains permanent enqueue identities, exact token/version terminal ownership and reconciliation-only recovery. Existing source, angle and publication ledgers remain authoritative for their own effects. Job fencing cannot recall an in-flight external request and is not durable generation-budget accounting.

Integration and deployment are separate gates. Before production: establish automatic deployment configuration and source provenance, verify persistent/hosted exact-pair staging and actual database/queue/hold state, drain old raw-writing workers, apply schema first, then deploy the compatible reviewed consumer with generation/provider dispatch disabled and the existing restricted cohort. Do not restore broad job-table grants or resend unknown outcomes. Dependency security triage remains outstanding.

@AyobamiH
AyobamiH marked this pull request as ready for review September 28, 2026 22:54

Copy link
Copy Markdown
Collaborator Author

GitHub access is now resolved: the connected AyobamiH identity has upstream write access. The implementation head remains 2c875143c67ce7ec37e219e40015ed21dcfa5dcc, paired with schema/application head e1c14e16b2a8d40dcefd4818c78487ab1bb9fc29 in AyobamiH/oneclickpostfactory#14.

A real isolated Cloudflare runtime smoke now has one successful receipt: run 36500754391, two authenticated ticks, four schema RPC requests against disposable Supabase, no cron, no live posts, and independently verified temporary Worker deletion. This is not tenant processing or persistent staging acceptance. The earlier full rehearsal failed at authenticated database ticks; the later diagnostic used a fresh empty database rather than the original test/reset sequence, so the earlier fault remains unassigned and must not be erased by a green rerun.

Do not merge as a substitute for the release gates: the existing Cloudflare credentials can deploy Workers but cannot read Builds trigger configuration (403), so automatic production deployment on merge remains unverified. The private app-side release tooling supports a dedicated user-scoped Builds credential without replacing the functioning Worker deployment token. No production Worker/database change or provider activation occurred.

Current detailed handover evidence is recorded in the paired schema PR: https://github.com/AyobamiH/oneclickpostfactory/pull/14#issuecomment-5881056963 .

@AyobamiH
AyobamiH merged commit 6e8ac01 into OneClickPostFactory:main Sep 29, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant