Skip to content

Move live acceptance to standard streams - #6

Merged
0thernet merged 2 commits into
mainfrom
codex/harden-acceptance-filehandles
Aug 23, 2026
Merged

Move live acceptance to standard streams#6
0thernet merged 2 commits into
mainfrom
codex/harden-acceptance-filehandles

Conversation

@0thernet

@0thernet 0thernet commented Aug 23, 2026

Copy link
Copy Markdown
Contributor

BLUF: Eliminate the Bun 1.3.14 cross-owner descriptor close in release acceptance by removing every child-process stdio slot above 2, while retaining the earlier configuration-file custody hardening as defense in depth.

  • Replaces worker fds 3, 4, and 5 with one descriptor-first stdin stream for bounded controls and one typed status-only stdout stream; stderr is discarded.
  • Adds --scenario-stdin for agents: the first bounded JSONL frame is configuration, later frames are exact HITL responses, and stdout serializes awaited requests, progress, and one terminal result. Human terminal runs remain isolated under --scenario-fd.
  • Preserves bounds, buffer wiping, protected-input injection, parent-EOF shutdown, recovery receipts, close-backed lifecycle joins, and TERM-to-KILL failed-start cleanup.
  • Retains synchronous no-follow, ownership, link-count, mode, inode, size, content, fsync, and close checks for the 4 KiB configuration file plus the 64-home concurrency regression.

Cause: Bun 1.3.14 node:child_process extra pipes can retain native ownership after JavaScript teardown and later close an unrelated reused descriptor. The failure moved among config and secret-custody descriptors; the reduced upstream case is oven-sh/bun#37230. HRA remains pinned to Bun 1.3.14, so this change removes the triggering extra-pipe topology.

Validation: 33 focused tests with 477 assertions; 100/100 worker protocol stress; 100/100 JSONL abort and same-stream continuity stress; two independent adversarial reviews with no remaining P0, P1, or P2 findings; and the coordinated full gate with ESLint, TypeScript, 865 tests and 14,684 assertions across 80 files, site parity, production builds, and isolated local/global package acceptance.

@vercel

vercel Bot commented Aug 23, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
hra Ready Ready Preview Aug 23, 2026 7:17pm

Request Review

@0thernet 0thernet changed the title Harden live acceptance file custody Move live acceptance to standard streams Aug 23, 2026
@0thernet
0thernet merged commit 8d663b8 into main Aug 23, 2026
8 checks passed
@0thernet
0thernet deleted the codex/harden-acceptance-filehandles branch August 23, 2026 19:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant