Files
hermes-agent/tests/cron/test_recurring_eagain_redispatch.py
devops 122bfad535 fix(cron): persisted-state recovery re-arms recurring job stuck in stale last_status=error (t_8b5480b3)
The 2026-08-14 incident (t_20e23f84): 4 recurring no_agent interval jobs
EAGAIN-failed at 12:50 and recorded ZERO executions for ~1h47m, surviving a
gateway restart, cleared only by operator `cron resume` / force-run. The
in-memory stale-claim sweep (t_3778a491, already on origin/main) heals a
leaked `_running_job_ids` claim in-process, but a recurring job whose
PERSISTED state shows last_status=error and whose next_run_at was re-armed
into the future by mark_job_run is invisible to that sweep: it is not in the
running set and not due, so it just sits — the restart-surviving half.

cron/jobs.py::_get_due_jobs_locked now re-arms such a recurring job to
next_run_at=now when all hold: persisted last_status==error, last_run_at older
than cadence+grace (so it is a real wedge, not a normal transient-error retry),
next_run_at in the future, and not running in this process. The scheduler then
re-dispatches it on the next tick without force-run/resume. Logs
cron.persisted_error.recovered, bumps a probe-visible counter, appends a JSONL
row. Within-cadence errors are never force-re-armed.

Tests: tests/cron/test_recurring_persisted_error_recovery.py (clean behavioral
RED on unfixed main / GREEN here; 2 consecutive auto-fires; within-cadence not
re-armed). Full tests/cron/: 713 passed, 1 skipped.
2026-08-17 16:55:00 +05:30

175 lines
7.1 KiB
Python

"""Deterministic reproduction of the recurring-cron EAGAIN in-memory wedge (t_8b5480b3).
Scenario modelled on the 2026-08-14 incident: a recurring no_agent interval job
whose script subprocess raises EAGAIN ([Errno 11] Resource temporarily
unavailable) during a substrate thread-exhaustion spike. After the failure is
recorded (terminal 'failed' execution row), the job must be re-dispatched on
the NEXT tick once the substrate recovers — with no force-run.
SCOPE NOTE (honest): this file exercises the in-memory EAGAIN-release class —
the claim taken by ``_submit_with_guard`` is released when the submit/init
path fails, so the NEXT tick re-dispatches. It passes on unfixed base because
a terminal ``failed`` execution row does not itself suppress a recurring job's
next due fire; that is pre-existing behavior, not the fix. The persisted-state
(restart-surviving) half of the incident — a recurring job whose persisted
``last_status=error`` and ``next_run_at`` parked in the future is never
re-dispatched without force-run/resume — is covered by
``test_recurring_persisted_error_recovery.py``, which provides the clean
behavioral RED (unfixed: no execution) / GREEN (fixed: re-dispatched) for the
new recovery path.
This file drives the REAL `tick()` end-to-end against a throwaway HERMES_HOME:
tick 1 -> script EAGAINs (subprocess.run raises OSError 11) -> failed exec row
tick 2 -> substrate recovered (script runs clean) -> job MUST fire again
"""
from __future__ import annotations
import json
import os
import subprocess
from datetime import datetime, timedelta, timezone
from pathlib import Path
from unittest import mock
import pytest
# Ensure project root importable
import sys
sys.path.insert(0, str(Path(__file__).parent.parent.parent))
@pytest.fixture
def wedge_env(tmp_path, monkeypatch):
"""Isolated cron env + a recurring no_agent interval job, due NOW."""
hermes_home = tmp_path / ".hermes"
hermes_home.mkdir()
(hermes_home / "cron").mkdir()
(hermes_home / "cron" / "output").mkdir()
(hermes_home / "scripts").mkdir()
monkeypatch.setenv("HERMES_HOME", str(hermes_home))
import cron.jobs as jobs_mod
monkeypatch.setattr(jobs_mod, "HERMES_DIR", hermes_home)
monkeypatch.setattr(jobs_mod, "CRON_DIR", hermes_home / "cron")
monkeypatch.setattr(jobs_mod, "JOBS_FILE", hermes_home / "cron" / "jobs.json")
monkeypatch.setattr(jobs_mod, "OUTPUT_DIR", hermes_home / "cron" / "output")
# Create a recurring no_agent interval job.
job = jobs_mod.create_job(
prompt="probe",
schedule="every 10m",
no_agent=True,
script="probe.py",
)
# Force it due now.
now = datetime.now(timezone.utc)
jobs_mod.update_job(job["id"], {"next_run_at": (now - timedelta(minutes=1)).isoformat()})
script = hermes_home / "scripts" / "probe.py"
script.write_text("print('ok')\n")
return {"home": hermes_home, "job_id": job["id"]}
class TestEAGAINRecurringRedispatches:
def _make_script_eagain(self, env, monkeypatch):
"""Make the next subprocess.Popen raise EAGAIN once, then pass.
The script runner spawns via Popen (polling loop for cancel/timeout),
so the substrate-failure injection point is the Popen constructor.
"""
import cron.scheduler as sched_mod
state = {"n": 0}
class _OkProc:
def __init__(self, argv, **kwargs):
self.returncode = 0
def poll(self):
return self.returncode
def communicate(self, timeout=None):
return ("ok\n", "")
def wait(self, timeout=None):
return 0
def fake_popen(argv, **kwargs):
state["n"] += 1
if state["n"] == 1:
raise OSError(11, "Resource temporarily unavailable")
return _OkProc(argv, **kwargs)
monkeypatch.setattr(sched_mod.subprocess, "Popen", fake_popen)
return state
def test_eagain_then_redispatched_on_next_tick(self, wedge_env, monkeypatch, tmp_path):
"""Tick 1 records a failed execution (EAGAIN); tick 2 must re-fire."""
from cron import scheduler as S
from cron import executions as E
env = wedge_env
# Point the executions ledger at the throwaway home.
monkeypatch.setattr(E, "EXECUTIONS_FILE", env["home"] / "cron" / "executions.db")
monkeypatch.setattr(S, "_hermes_home", env["home"])
monkeypatch.setattr(S, "get_due_jobs", S.get_due_jobs) # no-op, keep real
state = self._make_script_eagain(env, monkeypatch)
# Tick 1: EAGAIN failure.
n1 = S.tick(verbose=False, sync=True)
# Assert the failure was recorded.
latest = E.latest_execution(env["job_id"])
assert latest is not None, "tick 1 must create an execution"
assert latest["status"] == "failed", f"expected failed, got {latest['status']}"
# The job must still be scheduled (recurring), next_run_at advanced.
import cron.jobs as J
job = J.get_job(env["job_id"])
assert job["enabled"] is True
assert job["state"] == "scheduled"
assert job["next_run_at"] is not None
# Force next_run_at due again (simulate the substrate recovery tick).
now = datetime.now(timezone.utc)
J.update_job(env["job_id"], {"next_run_at": (now - timedelta(minutes=1)).isoformat()})
# Tick 2: script passes -> job must fire (completed execution).
n2 = S.tick(verbose=False, sync=True)
latest2 = E.latest_execution(env["job_id"])
assert latest2 is not None
assert latest2["status"] == "completed", (
f"job must be re-dispatched after EAGAIN recovery, got {latest2['status']}"
)
assert state["n"] >= 2
def test_trigger_job_unwedges_persisted_state(self, wedge_env, monkeypatch, tmp_path):
"""The incident force-run (`cron run <id>` -> trigger_job) resets the
persisted due state so the next tick fires the job. This is the
operator escape that cleared each wedge."""
from cron import scheduler as S
from cron import executions as E
from cron.jobs import trigger_job, update_job
env = wedge_env
monkeypatch.setattr(E, "EXECUTIONS_FILE", env["home"] / "cron" / "executions.db")
monkeypatch.setattr(S, "_hermes_home", env["home"])
self._make_script_eagain(env, monkeypatch)
n1 = S.tick(verbose=False, sync=True)
# Simulate the persisted non-dispatch state: next_run_at far in the
# future (job not due) but still enabled/scheduled — the observed
# wedge where get_due_jobs never returns it.
from datetime import timezone as tz
far = datetime.now(tz.utc) + timedelta(days=1)
update_job(env["job_id"], {"next_run_at": far.isoformat()})
n2 = S.tick(verbose=False, sync=True) # not due -> no dispatch
# Force-run (trigger_job) sets next_run_at = now -> due again.
triggered = trigger_job(env["job_id"])
assert triggered is not None
n3 = S.tick(verbose=False, sync=True)
latest = E.latest_execution(env["job_id"])
assert latest["status"] == "completed", "force-run must clear the wedge"