feat(craft): receipt deep links, provider verdicts, and upload coalescing

[nmgarza5]

Description

Why. After #14341, a receipt proves an action left the sandbox, but says nothing a user can act on: no link to the thing that was created, a Slack failure inside a 200 still shows CONFIRMED, and one file upload shows as three receipts. This PR makes receipts user-grade proof.

What.

• New receipt_extractors.py: pure per-provider refinement. Request side names the destination (#exec-team, JSON or form-encoded bodies) and keys the upload flow's final step. Response side builds deep links from shape-checked provider ids (Slack permalink, Drive by mime type, Gmail message), and overrides the verdict when the provider hides failure inside a 200 (Slack ok:false, Linear GraphQL errors). Linear is the one provider whose canonical URL is accepted, behind an anchored shape check. Everything else is constructed from validated ids, never trusted from payloads.
• Slack's three-request upload flow coalesces into one receipt: step three keys in from its request, step one from its response, and the raw-bytes step through a short-lived session-scoped Redis token map. A later step's failure downgrades the coalesced receipt's early CONFIRMED, and coalesced repeats never re-announce (insert/finalize now report created/changed).
• The gate buffers a recorded flow's response unless declared oversize and reads it Content-Encoding decoded, with the 1 MiB cap applied to the decoded length.

Example receipt after this PR: slack.messages.write → #exec-team, CONFIRMED, https://slack.com/archives/C0123/p17123456.

How Has This Been Tested?

• 22 extractor unit tests (links, verdict overrides, coalescing keys, form-encoded bodies, malformed/unsafe input refusal, anchored Linear shapes).
• 14 gate wiring unit tests, including the gzip decode path, the small-compressed/huge-decoded cap, and chunked-response buffering.
• Ext-dep tests against real Postgres+Redis: the full three-step upload coalescing to one receipt with exactly two announcements, failure downgrade of a coalesced CONFIRMED, link and verdict persistence, destination-from-request.
• Full sweeps: tests/unit/sandbox_proxy + external_apps + server 791 passed, craft ext-dep suite 377 passed + 1 xfailed, ty check and ruff clean.

Additional Options

• This PR should be considered for cherry-picking to the release branch
• Override Linear Check

[github-actions]

Full-stack Preview (frontend + backend)

Status	Preview	Commit	Updated
✅	https://b8e1ff6-onyx.preview.onyxcorp.dev/	b8e1ff6	2026-08-28 01:44:23 UTC

[greptile-apps]

Greptile Summary

The PR enriches Craft action receipts with provider-aware destinations, deep links, provider-level verdicts, and Slack upload coalescing while bounding recorded response capture.

• Adds request and response extractors for Slack, Google Drive, Gmail, and Linear.
• Coalesces Slack’s multi-request upload sequence into one persisted receipt and announces only meaningful transitions.
• Streams recorded responses through capped capture and bounded content decoding before refinement.
• Extends DAL and integration coverage for coalescing, verdict downgrades, links, and response-size boundaries.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains.

Important Files Changed

Filename	Overview
backend/onyx/sandbox_proxy/addons/gate.py	Streams every production recorded response through capped capture and performs bounded decoding before receipt refinement.
backend/onyx/sandbox_proxy/receipt_extractors.py	Adds provider-specific destination, identifier, deep-link, verdict, and upload-correlation extraction with shape validation.
backend/onyx/sandbox_proxy/receipt_recorder.py	Integrates extracted facts into receipt creation, Slack upload coalescing, finalization, and transition announcements.
backend/onyx/server/features/build/db/receipt.py	Adds conflict-aware receipt insertion, operation-key assignment, and controlled terminal-state transitions.
backend/tests/external_dependency_unit/craft/test_artifact_receipt_dal.py	Exercises database receipt insertion, coalescing, and state-transition behavior.
backend/tests/external_dependency_unit/craft/test_receipt_recording.py	Covers end-to-end recording, upload coalescing, persistence, announcements, links, and verdict downgrades.
backend/tests/unit/sandbox_proxy/test_gate_receipts.py	Covers gate metadata wiring, capped streaming capture, bounded decoding, and response finalization.
backend/tests/unit/sandbox_proxy/test_receipt_extractors.py	Covers provider response shapes, safe links, verdict overrides, form payloads, and Slack upload keys.

Sequence Diagram

sequenceDiagram
    participant Agent
    participant Gate as Sandbox Gate
    participant Provider
    participant Recorder
    participant DB
    participant Redis

    Agent->>Gate: Provider write request
    Gate->>Recorder: Record pending receipt + request facts
    Recorder->>DB: Insert or coalesce receipt
    Recorder-->>Redis: Announce newly created receipt
    Gate->>Provider: Forward approved request
    Provider-->>Gate: Stream response
    Gate->>Gate: Capped capture and bounded decode
    Gate->>Recorder: Finalize with response facts
    Recorder->>DB: Set operation key, link, and verdict
    Recorder-->>Redis: Announce changed receipt
    Gate-->>Agent: Forward provider response

Loading

_{Reviews (5): Last reviewed commit: "fix(craft): capped observer for every re..." | Re-trigger Greptile}

[nmgarza5]

@greptile

[nmgarza5]

@greptile

[nmgarza5]

@greptile

[nmgarza5]

@greptile