command: ["node", "--test", "/home/jwoltje/.t3/worktrees/mosaic-stack/magica-row329/packages/bus/tests/user-principal.test.mjs"]
TMPDIR: /mnt/storage/scratch/tmp/oEntjx
launch nice: 19
✔ R3: bindUser binds a granted user and refuses one with no live grant (18.604167ms)
✔ R3: a user named like the business human, the tester or a principal word is refused, whatever the grants say (12.324674ms)
✔ R3: each collaborator verb is allowed to a granted user (24.245708ms)
✔ R3: every verb off the collaborator list refuses a user access-refused before its own checks (143.218133ms)
✔ R3: task, web and host verbs refuse a user access-refused (31.970976ms)
✔ R3 leak: project.list shows granted projects only (19.51554ms)
✔ R3 leak: thread.create needs the project and the thread instance granted, and an ungranted id reads as one that does not exist (21.844708ms)
✔ R3 leak: thread.list shows the user its own threads that are still granted, never others (50.98665ms)
✔ R3 leak: names shows granted instances only (20.659882ms)
✔ R3: thread.send is from user:<id> and writes no human.input (20.321333ms)
✔ R3: a reply-chain message.send into another user thread is refused (24.950336ms)
✔ R3: the run reply to a user message reaches that user thread.messages, with no waiting and no notice (27.787141ms)
✔ R3: a reply to: user without a matching in_reply_to is refused user-reply-required (49.762622ms)
✔ R3: a non-thread run, the human and the tester cannot send to: user (25.951263ms)
✔ R3: a user thread run cannot message the owner, while its uncited gated raise reaches only the owner inbox, B9 (35.272763ms)
✔ R3: a removed or expired grant refuses the next request access-revoked, and the file is read per request (39.234979ms)
✔ R3: a user refusal is recorded as action.refused by user:<id> (21.732008ms)
✔ R3: a business with a role keyed user refuses invalid-business (15.44901ms)
✔ R3: name.set refuses the name user (17.921223ms)
✔ R3 r4: while halted, a granted user's thread.send refuses processing-halted and thread.messages still answers (23.785038ms)
✔ R3 r4: the chief's hire refuses an instance named user with the code it gives human and tester (30.503167ms)
✔ R3 r4: a non-function access throws before the store is read (0.526252ms)
✔ C2-09a: naming an instance cannot bypass its collaborator grant or disclose an ungranted project (65.258863ms)
✔ 264e deferred B6: a reply cannot cite the same user in a sibling session (95.013574ms)
ℹ tests 24
ℹ suites 0
ℹ pass 24
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 962.123151
