Skip to content

fix(hooks): deduplicate multi-scope hook invocations in the daemon worker #927

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Nitjsefnie wants to merge 6 commits into
base: main
Choose a base branch
from
Open

fix(hooks): deduplicate multi-scope hook invocations in the daemon worker #927

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
5e0f8af
Deduplicate daemon worker hook invocations
Nitjsefnie Oct 22, 2026
7eb920c
Complete policy loader fixtures in dedup tests
Nitjsefnie Oct 22, 2026
ca11c42
Preserve the worker evaluator import contract
Nitjsefnie Oct 22, 2026
3394019
Keep invocation reuse aligned with runtime and queue ownership
Nitjsefnie Oct 22, 2026
46cf5c8
Reserve fallback evaluation time within the daemon response budget
Nitjsefnie Oct 22, 2026
0480e7e
Remove the worker-dedup test's temp root in teardown
Nitjsefnie Oct 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,10 @@

## 1.0.12-beta.0 — 2026-10-22

### Fixes

- Deduplicate hook invocations in the daemon worker when the same tool call arrives from multiple installation scopes. Matching invocations share one policy evaluation, activity record and telemetry event, and receive the same reply; changed source graphs or enforcement metadata invalidate reuse. Waiting duplicates release the registry queue and reload before retrying failed owners, so unrelated calls keep running. Calls without stable invocation IDs continue to evaluate independently.

### Dependencies

- Combine the open Dependabot PRs (#921, #922, #923) into one: `certifi` 2026.7.22 → 2026.10.19 (GHSA-6q48-6c7w-9gw2) in `fp-cloud-cli` and the Python SDK's test lockfile, and `vite` 8.3.0 → 8.3.4 in the TypeScript SDK's dev lockfile. The Supply Chain gate scans every lockfile, so none of the three could pass on its own (#926)
Expand Down
Loading
Loading