OpenAI's Self-Hosted Executor Only Dials Out. So Does Our Daemon, Which Is Why the Stop Button We Added Today Is a Queue

Описание и применение

Внутренний клиент‑экзекьютор и демон подключаются только к серверу, поэтому остановка сеанса из веб‑UI отсутствовала. Добавлена кнопка "Stop", которая отправляет команду kill, проверяет права владельца и ставит её в очередь, после чего демон выполняет сигнал SIGTERM/SIGKILL.

Задача

Self‑hosted executors and daemons only initiate outbound connections, so there is no built‑in way to stop a running session from the web UI.

Результат

Adding a stop button provides a safe, owner‑controlled way to terminate remote sessions without opening inbound ports, while keeping the outbound‑only design intact.

Рабочий процесс

• 1. User clicks "Stop" on the session UI.
• 2. Client sends POST /api/commands with kind=kill.
• 3. Server verifies ownership, writes audit entry, resolves target device, checks daemon online, queues command or returns 409.
• 4. Daemon polls /api/agent/commands every 2s.
• 5. Daemon receives kill command, runs "shell kill <id>", which sends SIGTERM then SIGKILL to the session process group.
• 6. Daemon posts completion; server deletes session row.

Доказательства

Pressing Stop sends a POST to /api/commands with kind kill.

Источник

The daemon refuses to start unless the machine was signed in with shell login --allow-remote-start.

Источник