fix(worker): close post-merge reliability gaps

[outof-place]

Scope

Closes the production-audit gaps found while validating merged PRs #280, #347, #352, and #333 on real AWP tickets.

• AWP-124 / fix(worker): prevent manual dispatch run leakage #280: reconcile terminal manual ticket runs omitted from the capped Jira snapshot, while retaining the owner on uncertain live reads.
• AWP-125 / fix(worker): recover stalled workflow steps #352: bound Sandbox.get, stop, runCommand, and stdout artifact streams with one abortable deadline; classify the stable watchdog reason as engine_stalled with message-derived low confidence.
• AWP-126 / fix(worker): surface codex provider errors instead of generic cli_exit #347: classify the curated Codex spend-limit failure as dependency_unavailable with billing-specific next actions.
• AWP-129 / CI baseline: keep the GitLab concurrency fixture inside the existing seven-day freshness window without changing production health logic.

Production evidence

• fix(worker): prevent manual dispatch run leakage #280: AWP-123, run wrun_01M13WNS43J6ZAEHNDE9V6T0XV. Repeated manual dispatch returned the same run and request IDs, exactly one run was attached, terminal cleanup returned the ticket from Ai to Todo.
• fix(worker): surface codex provider errors instead of generic cli_exit #347: AWP-121, run wrun_01M13WTS2KV1ZX7ZKAFAHM5F7J. The curated spend-limit reason appeared consistently in MCP, dashboard, logs, and Jira; the obsolete PATH warning did not leak.
• feat: add durable run analysis reports #333: AWP-122, run wrun_01M13X5HQR0H8QBC65Y5D572ZS. The durable research report survived later finalize failure and remained visible in dashboard and Jira with evidence, plan, usage, and delivery link.
• fix(worker): recover stalled workflow steps #352: healthy sandbox paths completed on AWP-122. No real AWP run with the destructive engine-stalled condition exists, so that edge is covered deterministically in focused tests rather than fabricated on production.

Additional production bugs were split into AWP-127 (verified no-op fails finalize) and AWP-128 (release label false-positive phone redaction).

Verification

• 144 focused Vitest tests passed across reconciliation, diagnosis, polling, cleanup, and system-health probes.
• Full sandbox directory passed: 465/465 tests.
• Worker TypeScript check passed.
• git diff --check passed.
• Fresh SolAdvisor final review after CI fixes: SHIP.

First CI run exposed two deterministic test-fixture defects: fake-timer/dynamic-import mock leakage in the new stdout deadline tests and an existing hardcoded webhook timestamp that crossed its seven-day cutoff. Both are fixed in the second commit; full suites remain delegated to CI per repository policy.

[chatgpt-codex-connector]

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Credits must be used to enable repository wide code reviews.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
ai-workflow-app-dashboard	Ready	Preview	Aug 28, 2026 11:05am

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 0acdba14-8a8c-49c9-9463-c264d52b1917

---

_{Comment @coderabbitai help to get the list of available commands.}