Skip to content

refactor(cloud-agent): remove legacy Cloudflare sandbox runtime - #9689

Merged
eshurakov merged 3 commits into
mainfrom
kilo/hollow-port-b5f
Nov 4, 2026
Merged

eshurakov merged 3 commits into
mainfrom
kilo/hollow-port-b5f

Conversation

@eshurakov

Copy link
Copy Markdown
Contributor

Summary

  • Remove the legacy Cloudflare Sandbox SDK adapter, dependency, images, namespace bindings, privileged Docker tooling, and SDK-only tests.
  • Keep native Cloudflare Containers and customer-owned Vercel BYOC as the only active runtimes; native containers are the unconditional platform/code-review default.
  • Preserve historical metadata/allocation decoding and Durable Object migration history via non-executable tombstones. Existing legacy sessions remain readable/deletable, but new work fails promptly with a retirement reason rather than silently changing provider.
  • Preserve shared credential containment and billing behavior, move provider-ref decoding into a neutral module, port E2E/configuration fixtures to native containers, and drop retired saved webhook preferences to the native default.

Verification

  • Full Cloud Agent unit suite: 6,201 tests passed.
  • Focused migrated integration batches: 485 passed, 2 skipped.
  • Final sandbox control integration suite: 143 passed; session control suite: 84 passed.
  • Worker-utils allocation tests: 68 passed; webhook queue tests: 40 passed.
  • Cloud Agent TypeScript check, focused lint, formatting, and git diff --check passed.
  • Environment snapshot integration suite: 44 passed, 1 failed in does not launch the image after cleanup consumes the original launch deadline (allocation-ID assertion); this remains a known validation gap.
  • Full Docker/image E2E and database-backed web router suites were not run.

Rollout

  • Do not deploy until legacy container instances are drained and external bindings are checked. Removing the legacy container applications stops any remaining legacy compute. No deployment was performed.
  • Historical DO storage is preserved: no deleted_classes migration. Legacy runtime execution is intentionally retired, not migrated in place.
  • The disposable deployed E2E Worker must be reset before the first native-only deployment because its older renderer omitted native class migrations.

@kilo-code-bot

kilo-code-bot Bot commented Nov 3, 2026 •

Copy link
Copy Markdown
Contributor

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Executive Summary

The full PR diff was re-reviewed because the previous review commit is no longer an ancestor: the legacy Cloudflare Sandbox retirement, provider tombstones, allocation alias/retirement handling, retirement settlement, and the migrated tests and deployment configs reconcile with current source, and no new defects were found on changed lines.

Assumptions: [INFERENCE] Changed tests were verified statically against current implementations but were not executed in this review; the PR body documents that full Docker/image E2E, database-backed web router suites, and one environment-snapshot integration case remain unrun. The deploy-drain prerequisite for retired sandbox classes is documented in the PR and README rather than enforced by code, and the known environment-snapshot failure is outside the reviewed behavior. No memory-retention regression was introduced by the deleted runtime or the no-op tombstones.

Files Reviewed (127 files)
  • .github/workflows/ci.yml
  • .kilo/cloud-agent-setup.sh
  • ENVIRONMENT.md
  • apps/web/src/components/cloud-agent-next/sandbox-selection.test.ts
  • apps/web/src/components/cloud-agent-next/settings/settings-options.test.ts
  • apps/web/src/lib/cloud-agent-next/cloud-agent-client.test.ts
  • apps/web/src/routers/cloud-agent-next-router.test.ts
  • apps/web/src/routers/cloud-agent-next-schemas.test.ts
  • apps/web/src/routers/cloud-agent-settings-router.test.ts
  • apps/web/src/routers/cloud-environments-router.test.ts
  • apps/web/src/routers/organizations/organization-cloud-agent-next-router.test.ts
  • apps/web/src/routers/webhook-triggers-router.schema.test.ts
  • apps/ai-gateway/src/app/api/v1/model-validation.integration.test.ts
  • dev/local/services.ts
  • packages/worker-utils/src/cloud-agent-next-client.ts
  • packages/worker-utils/src/sandbox-allocation.test.ts
  • packages/worker-utils/src/sandbox-allocation.ts
  • pnpm-lock.yaml
  • services/cloud-agent-next/AGENTS.md
  • services/cloud-agent-next/DEBUG.md
  • services/cloud-agent-next/Dockerfile
  • services/cloud-agent-next/Dockerfile.containers
  • services/cloud-agent-next/Dockerfile.dev
  • services/cloud-agent-next/README.md
  • services/cloud-agent-next/cloud-agent-build.sh
  • services/cloud-agent-next/docs/runtime-rollout.md
  • services/cloud-agent-next/package.json
  • services/cloud-agent-next/src/container-usage-context.test.ts
  • services/cloud-agent-next/src/container-usage-context.ts
  • services/cloud-agent-next/src/container-usage.test.ts
  • services/cloud-agent-next/src/container-usage.ts
  • services/cloud-agent-next/src/control-plane/sandbox/preview-target.test.ts
  • services/cloud-agent-next/src/control-plane/sandbox/preview-target.ts
  • services/cloud-agent-next/src/control-plane/sandbox/sandbox-do.ts
  • services/cloud-agent-next/src/control-plane/session/native-read.test.ts
  • services/cloud-agent-next/src/control-plane/session/preview.test.ts
  • services/cloud-agent-next/src/control-plane/session/session-do.ts
  • services/cloud-agent-next/src/control-plane/session/terminals.test.ts
  • services/cloud-agent-next/src/e2e-entry.ts
  • services/cloud-agent-next/src/environment-build/builder-provider.ts
  • services/cloud-agent-next/src/index.ts
  • services/cloud-agent-next/src/kilo-facade/user-kilo-facade.test.ts
  • services/cloud-agent-next/src/legacy-runtime-tombstones.ts
  • services/cloud-agent-next/src/middleware/balance.test.ts
  • services/cloud-agent-next/src/persistence/session-metadata.test.ts
  • services/cloud-agent-next/src/persistence/session-metadata.ts
  • services/cloud-agent-next/src/persistence/types.ts
  • services/cloud-agent-next/src/preview/route.test.ts
  • services/cloud-agent-next/src/preview/route.ts
  • services/cloud-agent-next/src/router/handlers/session-egress-audit.test.ts
  • services/cloud-agent-next/src/router/handlers/session-queue.test.ts
  • services/cloud-agent-next/src/router/handlers/session-worktree-changes.test.ts
  • services/cloud-agent-next/src/router/handlers/session-worktree.test.ts
  • services/cloud-agent-next/src/router/handlers/session-worktree.ts
  • services/cloud-agent-next/src/sandbox-containers/containers-billing.test.ts
  • services/cloud-agent-next/src/sandbox-containers/sandbox-containers.test.ts
  • services/cloud-agent-next/src/sandbox-control/cloudflare-containers-provider.ts
  • services/cloud-agent-next/src/sandbox-control/cloudflare-provider.ts
  • services/cloud-agent-next/src/sandbox-control/cloudflare-retirement.test.ts
  • services/cloud-agent-next/src/sandbox-control/provider-contract.test.ts
  • services/cloud-agent-next/src/sandbox-control/provider-creation.test.ts
  • services/cloud-agent-next/src/sandbox-control/provider-ref.test.ts
  • services/cloud-agent-next/src/sandbox-control/provider-ref.ts
  • services/cloud-agent-next/src/sandbox-control/retired-cloudflare-provider.test.ts
  • services/cloud-agent-next/src/sandbox-control/retired-cloudflare-provider.ts
  • services/cloud-agent-next/src/sandbox-control/session-credentials.ts
  • services/cloud-agent-next/src/sandbox-id.test.ts
  • services/cloud-agent-next/src/sandbox-id.ts
  • services/cloud-agent-next/src/sandbox-image-versions.test.ts
  • services/cloud-agent-next/src/sandbox-outbound.test.ts
  • services/cloud-agent-next/src/sandbox-outbound.ts
  • services/cloud-agent-next/src/sandbox-placement.test.ts
  • services/cloud-agent-next/src/sandbox-placement.ts
  • services/cloud-agent-next/src/sandbox-selection.test.ts
  • services/cloud-agent-next/src/sandbox-selection.ts
  • services/cloud-agent-next/src/server-stream-ticket.test.ts
  • services/cloud-agent-next/src/server.test.ts
  • services/cloud-agent-next/src/server.ts
  • services/cloud-agent-next/src/session-prepare.test.ts
  • services/cloud-agent-next/src/session/model-preflight.test.ts
  • services/cloud-agent-next/src/session/model-preflight.ts
  • services/cloud-agent-next/src/session/sandbox-allocation-resolution.test.ts
  • services/cloud-agent-next/src/session/session-prepare.test.ts
  • services/cloud-agent-next/src/session/session-registration-metadata.test.ts
  • services/cloud-agent-next/src/session/session-registration.ts
  • services/cloud-agent-next/src/types.ts
  • services/cloud-agent-next/test/e2e/deploy/README.md
  • services/cloud-agent-next/test/e2e/deploy/render-e2e-worker-config.mjs
  • services/cloud-agent-next/test/e2e/sandbox-control.ts
  • services/cloud-agent-next/test/integration/control-plane-scope-handle.test.ts
  • services/cloud-agent-next/test/integration/control-plane-session-v2-child-registry.test.ts
  • services/cloud-agent-next/test/integration/control-plane-session-v2-interactions.test.ts
  • services/cloud-agent-next/test/integration/control-plane-session-v2-management.test.ts
  • services/cloud-agent-next/test/integration/control-plane-session-v2-reports.test.ts
  • services/cloud-agent-next/test/integration/control-plane-session-v2-rpc.test.ts
  • services/cloud-agent-next/test/integration/control-plane-session-v2-transport.test.ts
  • services/cloud-agent-next/test/integration/control-plane-session-v2.test.ts
  • services/cloud-agent-next/test/integration/control-plane-status-badge-v2.test.ts
  • services/cloud-agent-next/test/integration/control-plane-terminal-v2.test.ts
  • services/cloud-agent-next/test/integration/control-plane-worktree-changes-v2.test.ts
  • services/cloud-agent-next/test/integration/control-plane-worktree-deletion-v2.test.ts
  • services/cloud-agent-next/test/integration/egress-audit.test.ts
  • services/cloud-agent-next/test/integration/helpers/fake-credentials.ts
  • services/cloud-agent-next/test/integration/helpers/fake-sandbox-peer.ts
  • services/cloud-agent-next/test/integration/kilo-facade-cold-runtime.test.ts
  • services/cloud-agent-next/test/integration/kilo-facade-native-fence.test.ts
  • services/cloud-agent-next/test/integration/kilo-facade-system-feed.test.ts
  • services/cloud-agent-next/test/integration/preview-port-fetch.test.ts
  • services/cloud-agent-next/test/integration/sandbox-control-v2-credentials.test.ts
  • services/cloud-agent-next/test/integration/sandbox-control-v2-environment-snapshots.test.ts
  • services/cloud-agent-next/test/integration/sandbox-control-v2-runtime-proxy.test.ts
  • services/cloud-agent-next/test/integration/sandbox-control-v2.test.ts
  • services/cloud-agent-next/test/integration/sandbox-runtime-startup.test.ts
  • services/cloud-agent-next/test/sdk-provenance/diagnostic.test.ts
  • services/cloud-agent-next/test/sdk-provenance/reconciliation.test.ts
  • services/cloud-agent-next/test/sdk-provenance/vitest.config.ts
  • services/cloud-agent-next/test/sdk-provenance/worker.ts
  • services/cloud-agent-next/test/unit/hosted-workspace-contract-fixture.test.ts
  • services/cloud-agent-next/test/unit/kilo-native-contract-fixture.test.ts
  • services/cloud-agent-next/test/unit/render-e2e-worker-config.test.ts
  • services/cloud-agent-next/vitest.config.ts
  • services/cloud-agent-next/vitest.workers.config.ts
  • services/cloud-agent-next/worker-configuration.d.ts
  • services/cloud-agent-next/wrangler.jsonc
  • services/kilo-mcp/catalog.json
  • services/webhook-agent-ingest/src/queue-consumer.test.ts
  • services/webhook-agent-ingest/src/queue-consumer.ts
Previous Review Summaries (4 snapshots, latest commit 40d64a9)

Current summary above is authoritative. Previous snapshots are kept for context only.

Previous review (commit 40d64a9)

Status: No Issues Found | Recommendation: Merge

Executive Summary

The branch was rebased since the last review, so I re-reviewed the full PR diff: the legacy Cloudflare sandbox retirement, allocation/alias handling, retirement settlement, provider tombstones, and the latest test-only fixture commits all reconcile with current source, and no new defects were found on changed lines.

Assumptions: [INFERENCE] Changed tests were verified statically against current implementations but were not executed here; the PR notes that full Docker/image E2E, database-backed web router suites, and one environment-snapshot integration case remain unrun. The prior review commit is no longer an ancestor, so previous findings were re-verified against HEAD rather than assumed fixed.

Files Reviewed (127 files)
  • .github/workflows/ci.yml
  • .kilo/cloud-agent-setup.sh
  • ENVIRONMENT.md
  • apps/web/src/components/cloud-agent-next/sandbox-selection.test.ts
  • apps/web/src/components/cloud-agent-next/settings/settings-options.test.ts
  • apps/web/src/lib/cloud-agent-next/cloud-agent-client.test.ts
  • apps/web/src/routers/cloud-agent-next-router.test.ts
  • apps/web/src/routers/cloud-agent-settings-router.test.ts
  • apps/web/src/routers/cloud-environments-router.test.ts
  • apps/web/src/routers/organizations/organization-cloud-agent-next-router.test.ts
  • apps/web/src/routers/webhook-triggers-router.schema.test.ts
  • apps/ai-gateway/src/app/api/v1/model-validation.integration.test.ts
  • apps/web/src/routers/cloud-agent-next-schemas.test.ts
  • dev/local/services.ts
  • packages/worker-utils/src/cloud-agent-next-client.ts
  • packages/worker-utils/src/sandbox-allocation.test.ts
  • packages/worker-utils/src/sandbox-allocation.ts
  • pnpm-lock.yaml
  • services/cloud-agent-next/AGENTS.md
  • services/cloud-agent-next/DEBUG.md
  • services/cloud-agent-next/Dockerfile
  • services/cloud-agent-next/Dockerfile.containers
  • services/cloud-agent-next/Dockerfile.dev
  • services/cloud-agent-next/README.md
  • services/cloud-agent-next/cloud-agent-build.sh
  • services/cloud-agent-next/docs/runtime-rollout.md
  • services/cloud-agent-next/package.json
  • services/cloud-agent-next/src/container-usage-context.test.ts
  • services/cloud-agent-next/src/container-usage-context.ts
  • services/cloud-agent-next/src/container-usage.test.ts
  • services/cloud-agent-next/src/container-usage.ts
  • services/cloud-agent-next/src/control-plane/sandbox/preview-target.test.ts
  • services/cloud-agent-next/src/control-plane/sandbox/preview-target.ts
  • services/cloud-agent-next/src/control-plane/sandbox/sandbox-do.ts
  • services/cloud-agent-next/src/control-plane/session/native-read.test.ts
  • services/cloud-agent-next/src/control-plane/session/preview.test.ts
  • services/cloud-agent-next/src/control-plane/session/session-do.ts
  • services/cloud-agent-next/src/control-plane/session/terminals.test.ts
  • services/cloud-agent-next/src/e2e-entry.ts
  • services/cloud-agent-next/src/environment-build/builder-provider.ts
  • services/cloud-agent-next/src/index.ts
  • services/cloud-agent-next/src/kilo-facade/user-kilo-facade.test.ts
  • services/cloud-agent-next/src/legacy-runtime-tombstones.ts
  • services/cloud-agent-next/src/middleware/balance.test.ts
  • services/cloud-agent-next/src/persistence/session-metadata.test.ts
  • services/cloud-agent-next/src/persistence/session-metadata.ts
  • services/cloud-agent-next/src/persistence/types.ts
  • services/cloud-agent-next/src/preview/route.test.ts
  • services/cloud-agent-next/src/preview/route.ts
  • services/cloud-agent-next/src/router/handlers/session-egress-audit.test.ts
  • services/cloud-agent-next/src/router/handlers/session-queue.test.ts
  • services/cloud-agent-next/src/router/handlers/session-worktree-changes.test.ts
  • services/cloud-agent-next/src/router/handlers/session-worktree.test.ts
  • services/cloud-agent-next/src/router/handlers/session-worktree.ts
  • services/cloud-agent-next/src/sandbox-containers/containers-billing.test.ts
  • services/cloud-agent-next/src/sandbox-containers/sandbox-containers.test.ts
  • services/cloud-agent-next/src/sandbox-control/cloudflare-containers-provider.ts
  • services/cloud-agent-next/src/sandbox-control/cloudflare-provider.ts
  • services/cloud-agent-next/src/sandbox-control/cloudflare-retirement.test.ts
  • services/cloud-agent-next/src/sandbox-control/provider-contract.test.ts
  • services/cloud-agent-next/src/sandbox-control/provider-creation.test.ts
  • services/cloud-agent-next/src/sandbox-control/provider-ref.test.ts
  • services/cloud-agent-next/src/sandbox-control/provider-ref.ts
  • services/cloud-agent-next/src/sandbox-control/retired-cloudflare-provider.test.ts
  • services/cloud-agent-next/src/sandbox-control/retired-cloudflare-provider.ts
  • services/cloud-agent-next/src/sandbox-control/session-credentials.ts
  • services/cloud-agent-next/src/sandbox-id.test.ts
  • services/cloud-agent-next/src/sandbox-id.ts
  • services/cloud-agent-next/src/sandbox-image-versions.test.ts
  • services/cloud-agent-next/src/sandbox-outbound.test.ts
  • services/cloud-agent-next/src/sandbox-outbound.ts
  • services/cloud-agent-next/src/sandbox-placement.test.ts
  • services/cloud-agent-next/src/sandbox-placement.ts
  • services/cloud-agent-next/src/sandbox-selection.test.ts
  • services/cloud-agent-next/src/sandbox-selection.ts
  • services/cloud-agent-next/src/server-stream-ticket.test.ts
  • services/cloud-agent-next/src/server.test.ts
  • services/cloud-agent-next/src/server.ts
  • services/cloud-agent-next/src/session-prepare.test.ts
  • services/cloud-agent-next/src/session/model-preflight.test.ts
  • services/cloud-agent-next/src/session/model-preflight.ts
  • services/cloud-agent-next/src/session/sandbox-allocation-resolution.test.ts
  • services/cloud-agent-next/src/session/session-prepare.test.ts
  • services/cloud-agent-next/src/session/session-registration-metadata.test.ts
  • services/cloud-agent-next/src/session/session-registration.ts
  • services/cloud-agent-next/src/types.ts
  • services/cloud-agent-next/test/e2e/deploy/README.md
  • services/cloud-agent-next/test/e2e/deploy/render-e2e-worker-config.mjs
  • services/cloud-agent-next/test/e2e/sandbox-control.ts
  • services/cloud-agent-next/test/integration/control-plane-scope-handle.test.ts
  • services/cloud-agent-next/test/integration/control-plane-session-v2-child-registry.test.ts
  • services/cloud-agent-next/test/integration/control-plane-session-v2-interactions.test.ts
  • services/cloud-agent-next/test/integration/control-plane-session-v2-management.test.ts
  • services/cloud-agent-next/test/integration/control-plane-session-v2-reports.test.ts
  • services/cloud-agent-next/test/integration/control-plane-session-v2-rpc.test.ts
  • services/cloud-agent-next/test/integration/control-plane-session-v2-transport.test.ts
  • services/cloud-agent-next/test/integration/control-plane-session-v2.test.ts
  • services/cloud-agent-next/test/integration/control-plane-status-badge-v2.test.ts
  • services/cloud-agent-next/test/integration/control-plane-terminal-v2.test.ts
  • services/cloud-agent-next/test/integration/control-plane-worktree-changes-v2.test.ts
  • services/cloud-agent-next/test/integration/control-plane-worktree-deletion-v2.test.ts
  • services/cloud-agent-next/test/integration/egress-audit.test.ts
  • services/cloud-agent-next/test/integration/helpers/fake-credentials.ts
  • services/cloud-agent-next/test/integration/helpers/fake-sandbox-peer.ts
  • services/cloud-agent-next/test/integration/kilo-facade-cold-runtime.test.ts
  • services/cloud-agent-next/test/integration/kilo-facade-native-fence.test.ts
  • services/cloud-agent-next/test/integration/kilo-facade-system-feed.test.ts
  • services/cloud-agent-next/test/integration/preview-port-fetch.test.ts
  • services/cloud-agent-next/test/integration/sandbox-control-v2-credentials.test.ts
  • services/cloud-agent-next/test/integration/sandbox-control-v2-environment-snapshots.test.ts
  • services/cloud-agent-next/test/integration/sandbox-control-v2-runtime-proxy.test.ts
  • services/cloud-agent-next/test/integration/sandbox-control-v2.test.ts
  • services/cloud-agent-next/test/integration/sandbox-runtime-startup.test.ts
  • services/cloud-agent-next/test/sdk-provenance/diagnostic.test.ts
  • services/cloud-agent-next/test/sdk-provenance/reconciliation.test.ts
  • services/cloud-agent-next/test/sdk-provenance/vitest.config.ts
  • services/cloud-agent-next/test/sdk-provenance/worker.ts
  • services/cloud-agent-next/test/unit/hosted-workspace-contract-fixture.test.ts
  • services/cloud-agent-next/test/unit/kilo-native-contract-fixture.test.ts
  • services/cloud-agent-next/test/unit/render-e2e-worker-config.test.ts
  • services/cloud-agent-next/vitest.config.ts
  • services/cloud-agent-next/vitest.workers.config.ts
  • services/cloud-agent-next/worker-configuration.d.ts
  • services/cloud-agent-next/wrangler.jsonc
  • services/kilo-mcp/catalog.json
  • services/webhook-agent-ingest/src/queue-consumer.test.ts
  • services/webhook-agent-ingest/src/queue-consumer.ts

Previous review (commit 0e30363)

Status: No Issues Found | Recommendation: Merge

Executive Summary

The incremental commit is test-only fixture alignment: it reconciles the generated-title RPC fixture, webhook trigger allocation cases, V1/V2 environment cases, and the effective-destination test with the retired-allocation behavior, and each change matches the current implementation.

Assumptions: [INFERENCE] The changed tests were verified statically against current source but not executed in this review. The PR's stated known gap (one environment-snapshot integration case) and the unrun full Docker/E2E and database-backed web suites are outside this incremental diff and unchanged by it.

Files Reviewed (4 files)
  • apps/web/src/routers/cloud-environments-router.test.ts
  • apps/web/src/routers/webhook-triggers-router.schema.test.ts
  • services/cloud-agent-next/src/session-prepare.test.ts
  • services/cloud-agent-next/test/integration/control-plane-session-v2-rpc.test.ts

Previous review (commit fbbd7bf)

Status: 4 Issues Found | Recommendation: Address before merge

Executive Summary

The retirement settlement and webhook alias fixes verify clean at HEAD, but the cloudflare-shared/isolated-standard availability changes and the metadata provider-default change were not reconciled with existing fixtures, leaving four generated-title integration cases and the DB-backed environment-router cases failing.

Assumptions: [INFERENCE] The failing tests were confirmed statically by reading current source and test fixtures, but were not executed here; the PR notes state the database-backed web router suites and the full integration matrix were not run. No production defect was found in the retirement path (failRetiredPendingMessages now settles queued and accepted rows) or in the webhook cloudflare-single alias normalization.

Overview

Severity Count
CRITICAL 0
WARNING 3
SUGGESTION 1
Issue Details (click to expand)

WARNING

File Line Issue
services/cloud-agent-next/test/integration/control-plane-session-v2-rpc.test.ts 126 metadata() now defaults to cloudflare-containers while setupGeneratedTitleSession() still registers provider: 'cloudflare', so four generated-title tests return BAD_REQUEST.
packages/worker-utils/src/sandbox-allocation.ts 282 Removing the retired-allocation bypass makes isolated-standard/cloudflare-single fails when the picker returns no options; four webhook-trigger retention cases now throw.
packages/worker-utils/src/sandbox-allocation.ts 30 Dropping cloudflare-shared from SELECTABLE_SANDBOX_ALLOCATIONS makes the environment input enum reject it; two V1 environment test cases still expect acceptance.

SUGGESTION

File Line Issue
services/cloud-agent-next/src/session-prepare.test.ts 361 The assertion was weakened to defaultDestination while both saved fixtures are retired, so the repository-over-context preference is no longer exercised.
Files Reviewed (130 files)
  • .github/workflows/ci.yml - no issues
  • .kilo/cloud-agent-setup.sh - no issues
  • ENVIRONMENT.md - no issues
  • apps/web/src/components/cloud-agent-next/sandbox-selection.test.ts - no issues
  • apps/web/src/components/cloud-agent-next/settings/settings-options.test.ts - no issues
  • apps/web/src/lib/cloud-agent-next/cloud-agent-client.test.ts - no issues
  • apps/web/src/routers/cloud-agent-next-router.test.ts - no issues
  • apps/web/src/routers/cloud-agent-settings-router.test.ts - no issues
  • apps/web/src/routers/cloud-environments-router.test.ts - no issues
  • apps/web/src/routers/organizations/organization-cloud-agent-next-router.test.ts - no issues
  • apps/web/src/routers/webhook-triggers-router.schema.test.ts - no issues
  • dev/local/services.ts - no issues
  • packages/worker-utils/src/cloud-agent-next-client.ts - no issues
  • packages/worker-utils/src/sandbox-allocation.test.ts - no issues
  • packages/worker-utils/src/sandbox-allocation.ts - 2 issues
  • pnpm-lock.yaml - no issues
  • services/cloud-agent-next/AGENTS.md - no issues
  • services/cloud-agent-next/DEBUG.md - no issues
  • services/cloud-agent-next/Dockerfile - no issues
  • services/cloud-agent-next/Dockerfile.containers - no issues
  • services/cloud-agent-next/Dockerfile.dev - no issues
  • services/cloud-agent-next/Dockerfile.dind - no issues
  • services/cloud-agent-next/README.md - no issues
  • services/cloud-agent-next/cloud-agent-build.sh - no issues
  • services/cloud-agent-next/docs/runtime-rollout.md - no issues
  • services/cloud-agent-next/package.json - no issues
  • services/cloud-agent-next/scripts/dev-native.sh - no issues
  • services/cloud-agent-next/scripts/dev-with-docker-proxy.sh - no issues
  • services/cloud-agent-next/scripts/docker-privileged-proxy.mjs - no issues
  • services/cloud-agent-next/src/container-usage-context.test.ts - no issues
  • services/cloud-agent-next/src/container-usage-context.ts - no issues
  • services/cloud-agent-next/src/container-usage.test.ts - no issues
  • services/cloud-agent-next/src/container-usage.ts - no issues
  • services/cloud-agent-next/src/control-plane/sandbox/preview-target.test.ts - no issues
  • services/cloud-agent-next/src/control-plane/sandbox/preview-target.ts - no issues
  • services/cloud-agent-next/src/control-plane/sandbox/sandbox-do.ts - no issues
  • services/cloud-agent-next/src/control-plane/session/native-read.test.ts - no issues
  • services/cloud-agent-next/src/control-plane/session/preview.test.ts - no issues
  • services/cloud-agent-next/src/control-plane/session/session-do.ts - no issues
  • services/cloud-agent-next/src/control-plane/session/terminals.test.ts - no issues
  • services/cloud-agent-next/src/dev-native-script.test.ts - no issues
  • services/cloud-agent-next/src/docker-privileged-proxy-script.test.ts - no issues
  • services/cloud-agent-next/src/e2e-entry.ts - no issues
  • services/cloud-agent-next/src/environment-build/builder-provider.ts - no issues
  • services/cloud-agent-next/src/index.ts - no issues
  • services/cloud-agent-next/src/kilo-facade/user-kilo-facade.test.ts - no issues
  • services/cloud-agent-next/src/legacy-runtime-tombstones.ts - no issues
  • services/cloud-agent-next/src/middleware/balance.test.ts - no issues
  • services/cloud-agent-next/src/persistence/session-metadata.test.ts - no issues
  • services/cloud-agent-next/src/persistence/session-metadata.ts - no issues
  • services/cloud-agent-next/src/persistence/types.ts - no issues
  • services/cloud-agent-next/src/preview/route.test.ts - no issues
  • services/cloud-agent-next/src/preview/route.ts - no issues
  • services/cloud-agent-next/src/router/handlers/session-egress-audit.test.ts - no issues
  • services/cloud-agent-next/src/router/handlers/session-queue.test.ts - no issues
  • services/cloud-agent-next/src/router/handlers/session-worktree-changes.test.ts - no issues
  • services/cloud-agent-next/src/router/handlers/session-worktree.test.ts - no issues
  • services/cloud-agent-next/src/router/handlers/session-worktree.ts - no issues
  • services/cloud-agent-next/src/sandbox-containers/containers-billing.test.ts - no issues
  • services/cloud-agent-next/src/sandbox-containers/sandbox-containers.test.ts - no issues
  • services/cloud-agent-next/src/sandbox-control/cloudflare-containers-provider.ts - no issues
  • services/cloud-agent-next/src/sandbox-control/cloudflare-provider.ts - no issues
  • services/cloud-agent-next/src/sandbox-control/provider-contract.test.ts - no issues
  • services/cloud-agent-next/src/sandbox-control/provider-creation.test.ts - no issues
  • services/cloud-agent-next/src/sandbox-control/provider-ref.test.ts - no issues
  • services/cloud-agent-next/src/sandbox-control/provider-ref.ts - no issues
  • services/cloud-agent-next/src/sandbox-control/retired-cloudflare-provider.test.ts - no issues
  • services/cloud-agent-next/src/sandbox-control/retired-cloudflare-provider.ts - no issues
  • services/cloud-agent-next/src/sandbox-control/session-credentials.ts - no issues
  • services/cloud-agent-next/src/sandbox-id.test.ts - no issues
  • services/cloud-agent-next/src/sandbox-id.ts - no issues
  • services/cloud-agent-next/src/sandbox-image-versions.test.ts - no issues
  • services/cloud-agent-next/src/sandbox-outbound.test.ts - no issues
  • services/cloud-agent-next/src/sandbox-outbound.ts - no issues
  • services/cloud-agent-next/src/sandbox-placement.test.ts - no issues
  • services/cloud-agent-next/src/sandbox-placement.ts - no issues
  • services/cloud-agent-next/src/sandbox-selection.test.ts - no issues
  • services/cloud-agent-next/src/sandbox-selection.ts - no issues
  • services/cloud-agent-next/src/server-stream-ticket.test.ts - no issues
  • services/cloud-agent-next/src/server.test.ts - no issues
  • services/cloud-agent-next/src/server.ts - no issues
  • services/cloud-agent-next/src/session-prepare.test.ts - 1 issue
  • services/cloud-agent-next/src/session/model-preflight.test.ts - no issues
  • services/cloud-agent-next/src/session/model-preflight.ts - no issues
  • services/cloud-agent-next/src/session/sandbox-allocation-resolution.test.ts - no issues
  • services/cloud-agent-next/src/session/session-prepare.test.ts - no issues
  • services/cloud-agent-next/src/session/session-registration-metadata.test.ts - no issues
  • services/cloud-agent-next/src/session/session-registration.ts - no issues
  • services/cloud-agent-next/src/types.ts - no issues
  • services/cloud-agent-next/test/e2e/deploy/README.md - no issues
  • services/cloud-agent-next/test/e2e/deploy/render-e2e-worker-config.mjs - no issues
  • services/cloud-agent-next/test/e2e/sandbox-control.ts - no issues
  • services/cloud-agent-next/test/integration/control-plane-scope-handle.test.ts - no issues
  • services/cloud-agent-next/test/integration/control-plane-session-v2-child-registry.test.ts - no issues
  • services/cloud-agent-next/test/integration/control-plane-session-v2-interactions.test.ts - no issues
  • services/cloud-agent-next/test/integration/control-plane-session-v2-management.test.ts - no issues
  • services/cloud-agent-next/test/integration/control-plane-session-v2-reports.test.ts - no issues
  • services/cloud-agent-next/test/integration/control-plane-session-v2-rpc.test.ts - 1 issue
  • services/cloud-agent-next/test/integration/control-plane-session-v2-transport.test.ts - no issues
  • services/cloud-agent-next/test/integration/control-plane-session-v2.test.ts - no issues
  • services/cloud-agent-next/test/integration/control-plane-status-badge-v2.test.ts - no issues
  • services/cloud-agent-next/test/integration/control-plane-terminal-v2.test.ts - no issues
  • services/cloud-agent-next/test/integration/control-plane-worktree-changes-v2.test.ts - no issues
  • services/cloud-agent-next/test/integration/control-plane-worktree-deletion-v2.test.ts - no issues
  • services/cloud-agent-next/test/integration/egress-audit.test.ts - no issues
  • services/cloud-agent-next/test/integration/helpers/fake-credentials.ts - no issues
  • services/cloud-agent-next/test/integration/helpers/fake-sandbox-peer.ts - no issues
  • services/cloud-agent-next/test/integration/kilo-facade-cold-runtime.test.ts - no issues
  • services/cloud-agent-next/test/integration/kilo-facade-native-fence.test.ts - no issues
  • services/cloud-agent-next/test/integration/kilo-facade-system-feed.test.ts - no issues
  • services/cloud-agent-next/test/integration/preview-port-fetch.test.ts - no issues
  • services/cloud-agent-next/test/integration/sandbox-control-v2-credentials.test.ts - no issues
  • services/cloud-agent-next/test/integration/sandbox-control-v2-environment-snapshots.test.ts - no issues
  • services/cloud-agent-next/test/integration/sandbox-control-v2-runtime-proxy.test.ts - no issues
  • services/cloud-agent-next/test/integration/sandbox-control-v2.test.ts - no issues
  • services/cloud-agent-next/test/integration/sandbox-runtime-startup.test.ts - no issues
  • services/cloud-agent-next/test/sdk-provenance/diagnostic.test.ts - no issues
  • services/cloud-agent-next/test/sdk-provenance/reconciliation.test.ts - no issues
  • services/cloud-agent-next/test/sdk-provenance/vitest.config.ts - no issues
  • services/cloud-agent-next/test/sdk-provenance/worker.ts - no issues
  • services/cloud-agent-next/test/unit/hosted-workspace-contract-fixture.test.ts - no issues
  • services/cloud-agent-next/test/unit/kilo-native-contract-fixture.test.ts - no issues
  • services/cloud-agent-next/test/unit/render-e2e-worker-config.test.ts - no issues
  • services/cloud-agent-next/vitest.config.ts - no issues
  • services/cloud-agent-next/vitest.workers.config.ts - no issues
  • services/cloud-agent-next/worker-configuration.d.ts - no issues
  • services/cloud-agent-next/wrangler.jsonc - no issues
  • services/kilo-mcp/catalog.json - no issues
  • services/webhook-agent-ingest/src/queue-consumer.test.ts - no issues
  • services/webhook-agent-ingest/src/queue-consumer.ts - no issues

Fix these issues in Kilo Cloud

Previous review (commit 3ddf5c3)

Status: 3 Issues Found | Recommendation: Address before merge

Executive Summary

The retirement wiring is broadly consistent, but retired sessions can leave in-flight messages permanently unsettled and the webhook consumer drops the cloudflare-single alias instead of normalizing it, which can silently change a trigger's provider.

Assumptions: [INFERENCE] The reachability of the unsettled-accepted path depends on a session having in-flight work when its runtime is retired by this deploy; that state was not reproducible from the repo alone. The cloudflare-single fallback behavior assumes owners may have a saved allocation different from the native default. Operational risk that still-running legacy containers cannot b

[Snapshot truncated.]

Additional previous summary content was truncated to keep this comment within platform limits.


Reviewed by deepseek-flash-latest · Input: 153.2K · Output: 24.7K · Cached: 4.4M

Review guidance: REVIEW.md from base branch main

@eshurakov
eshurakov force-pushed the kilo/hollow-port-b5f branch from 3ddf5c3 to 64f710a Compare November 3, 2026 13:43
@eshurakov
eshurakov force-pushed the kilo/hollow-port-b5f branch from 0e30363 to 8572f57 Compare November 4, 2026 11:01
@eshurakov
eshurakov force-pushed the kilo/hollow-port-b5f branch from 40d64a9 to 9901bfc Compare November 4, 2026 11:33
@eshurakov
eshurakov added this pull request to the merge queue Nov 4, 2026
Merged via the queue into main with commit 213f11c Nov 4, 2026
86 checks passed
@eshurakov
eshurakov deleted the kilo/hollow-port-b5f branch November 4, 2026 11:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants