command: ["node", "--test", "/home/jwoltje/.t3/worktrees/mosaic-stack/magica-row329/packages/cli/tests/stack-release.test.mjs"]
TMPDIR: /mnt/storage/scratch/tmp/H1AMeE
begin: {"utc": "2026-10-24T20:40:39.648+00:00", "load1": "3.19"}
launch nice: 19
✔ T1 adopt writes the pointer from the units once; a failing check refuses check-failed (1318.850038ms)
✔ T2 activate installs exactly the pointer's pm, claude and Console flags (2031.148953ms)
▶ T3 a hand-edited unit refuses unit-flags-drift, names the difference and changes nothing
  ✔ pm (890.64377ms)
  ✔ claude (877.969853ms)
  ✔ console (860.784389ms)
✔ T3 a hand-edited unit refuses unit-flags-drift, names the difference and changes nothing (2630.199636ms)
▶ T4 each item 3 refusal changes nothing and logs one line with its code
  ✔ copy-missing (776.227114ms)
  ✔ copy-unreachable (760.439975ms)
  ✔ copy-schema-unknown (765.24212ms)
  ✔ already-active (803.826572ms)
  ✔ instance-busy (another business active) (848.727861ms)
  ✔ instance-busy (this business activating) (831.61813ms)
  ✔ drop-in-override (835.298327ms)
  ✔ no-pointer (464.117952ms)
✔ T4 each item 3 refusal changes nothing and logs one line with its code (6087.004819ms)
✔ T5 an activate with no migration stops the Console then the bus, installs, starts the bus then the Console (2501.321861ms)
✔ T6 a migration without --migrate rolls back with migration-needs-flag (1975.443031ms)
✔ T7 --migrate takes the backup before the migration runs (2312.50711ms)
✔ T8 a failed migration restores the backup and keeps the store it replaced (2146.732704ms)
✔ T9 a store outside the target's chain rolls back with store-newer (1984.049299ms)
▶ T10 each gate check failing alone rolls back and puts every file back
  ✔ units-inactive (5937.713152ms)
  ✔ bus-status (6189.538107ms)
  ✔ healthz (6583.761775ms)
  ✔ copy-check (5276.800346ms)
  ✔ pm-launch-unconfirmed (5319.37088ms)
✔ T10 each gate check failing alone rolls back and puts every file back (29308.940564ms)
▶ T10b the PM check needs exactly one launched line for a live run of this start
  ✔ no launched line (5403.480937ms)
  ✔ two lines (5320.816532ms)
  ✔ a changed word (5316.724033ms)
  ✔ run not in launches list (5419.947193ms)
  ✔ run started before the start (5523.484099ms)
  ✔ a human launch with no journal line (5322.892143ms)
  ✔ run for another business (5499.451995ms)
  ✔ run not live (5681.612072ms)
  ✔ one well-formed line and a live run pass (2175.576905ms)
✔ T10b the PM check needs exactly one launched line for a live run of this start (45665.735247ms)
✔ T11 a rollback whose gate fails too: rollback-failed, exit 2, both units stopped, no retry (7296.272037ms)
✔ T12 rollback takes the previous copy from the log (3444.096443ms)
✔ T13 a rollback across a migration needs --restore, then restores and goes live (4183.851637ms)
✔ T14 events written after the backup need --events N with the right N (4587.810453ms)
✔ T14b a rollback --restore whose gate fails stops both units and skips item 6 (7275.960175ms)
✔ T14c a rollback without --restore whose gate fails runs item 6 (7661.746863ms)
✔ T15 --plan names the migration and the restore and changes nothing (3168.665988ms)
✔ T26 --plan lists the commits an activate adds, after the migration lines (1679.314822ms)
✔ T27 --plan names each migration step, or says the steps cannot be read (1265.159232ms)
✔ T25 --plan refuses copies-unrelated when neither copy is an ancestor of the other (544.44345ms)
▶ T23 --plan reads the store without changing a file, stopped or held
  ✔ stopped store (647.076303ms)
  ✔ held store (657.291566ms)
✔ T23 --plan reads the store without changing a file, stopped or held (1304.960716ms)
✔ T24 business-mismatch and capture-failed refuse with exit 3; a short id is a usage error (1543.368021ms)
✔ T16 status prints the pointer, the log, the check, bus status and drift, and writes nothing (951.882092ms)
✔ T19 a started line with no final line: status shows it and every changing verb refuses (1445.639767ms)
✔ T20 a held run lock refuses run-locked without a log line; status and --plan still run (1413.411908ms)
✔ T21 a bus unit with no MOSAIC_CLAUDE_BIN: adopt and activate refuse no-claude-pin (1542.789681ms)
▶ T22 the stopped store read: a -wal or -shm refuses store-unclean and is left alone; a clean read adds no file
  ✔ bus.sqlite-wal (1914.124676ms)
  ✔ bus.sqlite-shm (1890.321601ms)
  ✔ clean (2114.992229ms)
✔ T22 the stopped store read: a -wal or -shm refuses store-unclean and is left alone; a clean read adds no file (5920.339019ms)
▶ T28 a unit path, drop-in directory or drop-in file that cannot be read, or a relative unit path, refuses drop-in-override before any stop
  ✔ unit path (1016.33119ms)
  ✔ drop-in directory (847.19049ms)
  ✔ drop-in file (836.813703ms)
  ✔ relative unit path (844.840251ms)
✔ T28 a unit path, drop-in directory or drop-in file that cannot be read, or a relative unit path, refuses drop-in-override before any stop (3546.315484ms)
▶ T29 a bus that stops during the held-store read: --plan says so, rollback --restore refuses restore-mismatch
  ✔ --plan (880.849984ms)
  ✔ rollback --restore (2499.027287ms)
✔ T29 a bus that stops during the held-store read: --plan says so, rollback --restore refuses restore-mismatch (3380.420336ms)
✔ T30 a copy check that agrees on another copy fails the gate with copy-check and rolls back (6310.880995ms)
▶ T31 a quoted or escaped Environment= or ExecStart= is unreadable: refusals by name, nothing read from /a
  ✔ Environment double quotes (1909.530636ms)
  ✔ Environment single quotes (1912.727296ms)
  ✔ Environment backslash (2200.052835ms)
  ✔ ExecStart quotes (1924.946596ms)
  ✔ Console ExecStart quotes (1870.435852ms)
✔ T31 a quoted or escaped Environment= or ExecStart= is unreadable: refusals by name, nothing read from /a (9819.013771ms)
▶ T32 item 1: --pm-after-harness refuses a target without harness or a file that sets it, and passes without the PM
  ✔ usage: not with --pm, and only for activate (747.516391ms)
  ✔ pm-after-harness-target (975.035258ms)
  ✔ pm-after-harness-set (1424.740136ms)
  ✔ a pointer without pm (931.420746ms)
  ✔ phase 1 installs without --pm, skips pm_launched and writes the pending pointer (2160.586376ms)
✔ T32 item 1: --pm-after-harness refuses a target without harness or a file that sets it, and passes without the PM (6240.452281ms)
▶ T33 item 2: read_pointer takes pmPending only as true beside pm false; a pending pointer refuses activate and shows in status
  ✔ read_pointer (1701.842247ms)
  ✔ pm-pending, already-adopted and the status line (2917.824485ms)
✔ T33 item 2: read_pointer takes pmPending only as true beside pm false; a pending pointer refuses activate and shows in status (4620.273789ms)
▶ T34 item 3: pm-on refuses before any stop, passes with the PM, or puts the phase-1 bus back
  ✔ not-pending (928.737191ms)
  ✔ harness-unset (3257.988103ms)
  ✔ a launched line passes: the bus alone restarts with --pm (3479.214649ms)
  ✔ a failed pm_launched puts the phase-1 unit back: exit 1, still pending (6737.016682ms)
  ✔ a failed phase-1 gate too: pm-on-down, exit 2, both units stopped (8601.902325ms)
✔ T34 item 3: pm-on refuses before any stop, passes with the PM, or puts the phase-1 bus back (23006.072644ms)
▶ T35 item 4: rollback from pending installs --pm; a plug-in kind the target lacks refuses by name
  ✔ rollback from pending gates pm_launched on the old copy (3616.851038ms)
  ✔ after the harness set, rollback refuses until harness is gone (4940.749066ms)
  ✔ activate names every kind the target lacks (1317.535918ms)
✔ T35 item 4: rollback from pending installs --pm; a plug-in kind the target lacks refuses by name (9876.012177ms)
✔ T36 --plan shows the pending state and lists the row 169 refusals it can see (3760.02542ms)
✔ T37 tester-port activate writes pointer and unit, replaces the port, and supported re-pin and rollback keep it (7438.672993ms)
✔ T38 tester-port rollback to unsupported target drops flag in plan, steps, unit and pointer (4296.824566ms)
✔ T39 tester-port explicit unsupported target reads target copy and refuses before stopping either unit (896.636547ms)
✔ T40 tester-port invalid values refuse exit 4 before stopping, including tunnel and main ports (951.496564ms)
✔ T41 tester-port inherited activate to unsupported target drops it and retains drift refusal and failed-run recovery (9669.585355ms)
✔ T42 tester-port pm-on preserves pointer Console flags (3711.535002ms)
▶ T43 row 180 item 1: runs in one second get distinct activation ids, rollback sets and post-attempt stores
  ✔ activate then pm-on on the same copy (3604.81783ms)
  ✔ two restores: an old-form id and a suffixed one, each with its own post-attempt store (6882.932896ms)
  ✔ adopt takes the next free id too (673.510521ms)
  ✔ all ten names taken: capture-failed before anything stops, and the log line names no activation (1117.647228ms)
  ✔ --restore takes an id with or without -1 to -9 and nothing else (998.271248ms)
✔ T43 row 180 item 1: runs in one second get distinct activation ids, rollback sets and post-attempt stores (13278.25809ms)
▶ T44 row 180 item 2: --plan lists tester-port-invalid and tester-port-target with its other refusals
  ✔ a bad tester port (2105.991968ms)
  ✔ without --plan a bad port is usage before any pointer read (373.459434ms)
  ✔ a target Console without --tester-port (1028.09808ms)
✔ T44 row 180 item 2: --plan lists tester-port-invalid and tester-port-target with its other refusals (3508.319062ms)
▶ T45 row 181 items 2 and 3: the restore guard counts events and every COUNTED table
  ✔ both modes count events and each listed table, and a table the store lacks counts 0 (1136.126821ms)
  ✔ one instance_names row and no event refuses before any stop; --events 1 restores (4547.508762ms)
  ✔ one usage_records row and no event refuses before any stop; --events 1 restores (4566.153441ms)
  ✔ a listed table that cannot be read refuses restore-mismatch before any stop (2563.696263ms)
  ✔ the in-run recount counts the listed tables too (3479.800466ms)
✔ T45 row 181 items 2 and 3: the restore guard counts events and every COUNTED table (16294.572428ms)
✔ T46 row 181 item 4: every table in the bus schema is in exactly one of four lists (4.300581ms)
✔ T47 row 185 test 1: a same-schema activate leaves a whole backup and the log line names it (2230.348168ms)
✔ T48 row 185 test 2: a gate failure on a same-schema activate rolls back without a restore (4946.38432ms)
▶ T49 row 185 test 3: a same-schema rollback --restore restores, or refuses rows written after STAMP
  ✔ no rows after STAMP: restores and goes live (3839.129207ms)
  ✔ one instance_names row after STAMP refuses post-backup-events; --events 1 restores (4001.840612ms)
✔ T49 row 185 test 3: a same-schema rollback --restore restores, or refuses rows written after STAMP (7841.530291ms)
✔ T50 row 185 test 4: activate --plan prints the backup line and writes nothing (2578.291883ms)
✔ T51 row 185 test 5: an activate with no store file takes no backup (2099.334573ms)
▶ T52 row 186: the activate plan's backup line says what the run will do
  ✔ same schema (2303.30872ms)
  ✔ same schema with --migrate (2188.297651ms)
  ✔ in chain with --migrate (2277.69327ms)
  ✔ in chain without --migrate (2195.504915ms)
  ✔ outside the chain (2262.52646ms)
  ✔ outside the chain with --migrate (2259.921256ms)
✔ T52 row 186: the activate plan's backup line says what the run will do (13488.491419ms)
✔ T178 proxy proof header and path survive re-pin and rollback unchanged in the pointer and unit (3498.56391ms)
✔ T178 proxy proof pair survives a tester-port replacement as well (2044.518618ms)
▶ T53 row 187: activate sets, carries and drops the proof pair
  ✔ tests 1 and 9: the pair goes after the preview flags, before --send and the kept --tester-port, as the unit renders it; a new pair replaces it (5777.312928ms)
  ✔ tests 2 and 3: an activate of the live copy writes the pair; a later activate and a rollback carry it (5508.024974ms)
  ✔ test 2: only a pair change may name the live copy; the log keeps from and to, and rollback still goes to the earlier copy (7030.46225ms)
  ✔ test 2: a live-copy activate says only the Console flags change, and backs up the stopped store before it installs (4494.973654ms)
  ✔ test 3: pm-on keeps the pair (3260.430359ms)
  ✔ test 4: --no-proof drops the pair from the pointer and the unit and says so; with no pair it says so and passes (6023.276666ms)
  ✔ test 5: each refusal exits 3 before anything stops (4316.950832ms)
  ✔ tests 5 and 9: --plan lists every proof refusal with the others and writes nothing (1006.164802ms)
  ✔ test 6: usage errors (841.521549ms)
  ✔ test 7: a rollback to a copy without proof support drops the pair and says so (3726.332427ms)
  ✔ test 7: an activate to a copy without proof support refuses proof-target without --no-proof and passes with it (4279.732955ms)
✔ T53 row 187: activate sets, carries and drops the proof pair (46267.624901ms)
▶ T54 row 188: a carried pair gets the proof file checks, and a proof file inside the repository refuses
  ✔ test 1: an activate that carries the pair refuses after chmod 644, in the plan and the run, before anything stops (2473.518276ms)
  ✔ test 1: an activate that carries the pair refuses after a symlink to a mode-600 file, in the plan and the run, before anything stops (2690.116602ms)
  ✔ test 1: an activate that carries the pair refuses after removal, in the plan and the run, before anything stops (2766.584654ms)
  ✔ test 2: a rollback that carries the pair refuses after chmod 644, in the plan and the run, before anything stops (2710.070886ms)
  ✔ test 3: a proof file inside the repository refuses, in the plan and the run, before anything stops (1183.936824ms)
  ✔ test 4: a path outside the repository through a directory symlink into it refuses on its realpath (1204.008563ms)
✔ T54 row 188: a carried pair gets the proof file checks, and a proof file inside the repository refuses (13029.538833ms)
▶ T55 row 189: activate --no-send drops --send, and rollback and pm-on carry it off
  ✔ test 1: a live-copy --no-send drops --send from the pointer and the unit, keeps the rest in order, logs the step and backs up the stopped store (2433.541177ms)
  ✔ test 2: a plain live-copy activate still refuses already-active, and so does --no-send once --send is gone (3505.880017ms)
  ✔ test 3: --plan prints one send: line in each case, with the live-copy note on a same-copy run (5362.168882ms)
  ✔ test 4: after --no-send, a rollback to the earlier copy leaves --send out of the pointer and the unit (4129.070255ms)
  ✔ test 4: pm-on after --no-send keeps --send off (3790.466282ms)
  ✔ test 5: --no-send on rollback, pm-on, status, adopt or rehearse is a usage error (809.812306ms)
  ✔ test 6: with both a pair and --send in the pointer, --no-send and --no-proof each drop what they name and keep the rest (12774.243469ms)
✔ T55 row 189: activate --no-send drops --send, and rollback and pm-on carry it off (32806.771375ms)
▶ T57 row 200: activate --sso, its refusals before any stop, and the rollback to a Console without --sso
  ✔ item 1: --sso drops the preview set and the pair, puts --sso before --send and the tester port, and the plan names what it drops and carries (4972.235549ms)
  ✔ item 1: --sso may re-pin the live copy once; later activates carry it; --no-send still drops --send (11906.553678ms)
  ✔ item 1: --sso with a pair or --no-proof, or on any verb but activate, is a usage error (915.969523ms)
  ✔ item 2: a target without --sso, a missing or bad console.sso, and each slot problem refuse before any stop (8044.090584ms)
  ✔ item 3: a config whose console key the target loader refuses stops an activate or a rollback before any stop, naming the first step (5899.923763ms)
  ✔ row 203: a config whose federation key the target loader refuses stops an activate or a rollback before any stop, naming the first step (5220.167885ms)
  ✔ item 3: a rollback from --sso to a Console without it takes the flags from the set of the activation onto the copy, past a same-copy re-pin (sage-1389) (17704.700016ms)
  ✔ item 3: a rollback set that is missing, fails its sums, holds no argv or already ran --sso refuses sso-rollback-flags (6582.745414ms)
  ✔ round 2 (webby-0028 N1): run through a symlinked repository path, a slot or a proof file inside the repository still refuses (4420.089896ms)
  ✔ round 2 (webby-0028 N2): a config.json that does not parse stops the run before anything is read or stopped (3098.355302ms)
  ✔ round 3 (sage-1556): a named instance turns --sso on with its own config, slot and Console unit, and rolls back from its own set (6275.063671ms)
  ✔ row 238 (#1744): on a named instance the sso-config first step names --instance NAME in both commands (1651.043057ms)
✔ T57 row 200: activate --sso, its refusals before any stop, and the rollback to a Console without --sso (76694.812784ms)
▶ T58 row 273: activate --send and --no-sso
  ✔ T1: --sso --send turns send on after --sso and before the tester port, and the plan says so (3773.73755ms)
  ✔ T1: --send beside a carried --sso re-pins the live copy once, and the plan names the carried --sso (6208.262758ms)
  ✔ T2: --send without --sso, given or carried, refuses before any stop, and --plan lists it (2691.431181ms)
  ✔ T2 (sage-2315 B1): a rollback from an --sso --send pointer to a Console without --sso ends with neither flag (5031.018449ms)
  ✔ T2 and T4: --send with --no-send, --no-sso with --sso, --send, a pair or --no-proof, and either flag on another verb, is a usage error (2885.713923ms)
  ✔ T3: --no-sso on the same copy returns the unit and the pointer to the flags from before --sso, without --send (6986.236165ms)
  ✔ T3: the set walk passes later re-pins that ran with --sso, and the tester follows the pointer (7093.364942ms)
  ✔ T3 (sage-2305 a): after --sso, two later re-pins that carry it, then --no-sso restores the flags from before --sso byte for byte (10944.193359ms)
  ✔ T4 (sage-2305 b): a log in which every set holds a Console with --sso refuses before any unit stops (5706.330685ms)
  ✔ T4: --no-sso refuses before any stop on a pointer without --sso, a tampered or missing set, a set that ran with --sso, an ok line with no activation, and a log with no set (8758.01708ms)
✔ T58 row 273: activate --send and --no-sso (60081.264329ms)
✔ R1 rehearse passes on the same schema; the scratch root holds its files and the live files stay byte-identical (3637.754475ms)
✔ R2 rehearse runs the migration checks when the schema differs; the live store stays at 3g (3854.671073ms)
✔ R3 a failing migration gives REHEARSAL_FAIL migrate and starts nothing (570.529538ms)
✔ R4 a host that does not start, does not answer status, reports another pid, launches anyway, makes a launches directory or keeps its lock each fails by name (27102.486913ms)
✔ R5 a host that ignores SIGTERM gets SIGKILL and FAIL host-stopped (4919.250486ms)
✔ R6 a Console that does not answer /healthz gives REHEARSAL_FAIL healthz (6037.520379ms)
✔ R7 a host on another copy fails copy-match (5876.72111ms)
✔ R8 a scratch port in use or reserved refuses, and the rehearsal takes no other port (684.482225ms)
✔ R9 mos-0963: a role reference left outside placeholders/, or left on an env variable, fails credential-ref-live before the host starts (1137.596696ms)
✔ R10 mos-0962: a scratch business that still sets a tracker fails tracker-configured (483.737847ms)
✔ R11 mos-0961: a scratch config on the live data root or on any root but the scratch one, or a sessions.json naming a running pid, refuses by name (2569.9034ms)
✔ R12 mos-0962: a notifier config with a binding fails notify-off (838.177497ms)
✔ R13 the pre-checks: an old copy, a backup that fails its sums, a missing backup or pointer, and usage (806.503569ms)
✔ R14 a host that writes the live config, the live business file or the backup fails the end check by name (11228.441648ms)
✔ R15 a rehearsal stopped by TERM, INT or HUP fails signal and still stops the host and Console and runs the end checks (9904.834022ms)
✔ row 233: --backup last takes the newest backup the log records; a later line with backup null does not hide it, and the store line names it (3912.014813ms)
✔ row 233: --backup last with no backup in the log, or no log, exits 3 with no-backup and makes no rehearsal directory (437.643789ms)
✔ row 233: --backup last refuses a newest backup that is not an activation id, with exit 1 (232.307092ms)
▶ T56 row 190: named instances side by side on one unit directory, $BIN and set of stand-ins
  ✔ T-I3 each instance renders its own config, session env and Description, and nothing of another (3241.412109ms)
  ✔ T-I4 a Console port another installed Console takes refuses port-claimed, and a named instance keeps off the default ports (4012.571537ms)
  ✔ T-I6 alpha's activate and rollback reach nothing of beta's (5995.749277ms)
  ✔ T-I6 swapped: beta's reach nothing of alpha's (5224.568296ms)
  ✔ T-I7 MOSAIC_CONFIG naming alpha's config with no flag refuses instance-root-mismatch and changes nothing (916.843166ms)
  ✔ T-I9 another instance's bus active refuses nothing; one of this instance's does (10000.953723ms)
✔ T56 row 190: named instances side by side on one unit directory, $BIN and set of stand-ins (29395.165066ms)
✔ row196 explicit socket conversion refuses inherited TCP before stop and rollback disables socket (10554.5518ms)
✔ row196 SSO socket conversion pins pointer and unit argv order without send (4348.160319ms)
▶ row196 interpreter activation checks receipt, identity, plan and startup log
  ✔ plan and started log preserve the same interpreter JSON (4215.382136ms)
  ✔ interpreter-receipt-refuse fails at the gate and restores the pointer (6117.451601ms)
  ✔ interpreter-drift fails at the gate and restores the pointer (5129.265983ms)
  ✔ missing-verifier refuses before any start or stop (1740.003341ms)
  ✔ interpreter-unsafe refuses before any start or stop (1856.42482ms)
✔ row196 interpreter activation checks receipt, identity, plan and startup log (19061.608471ms)
▶ row196 rehearsal selects socket only for marked copies and uses scratch dataRoot
  ✔ socket copy (3777.907121ms)
  ✔ legacy copy (3766.889594ms)
✔ row196 rehearsal selects socket only for marked copies and uses scratch dataRoot (7545.888657ms)
✔ config-any-key: a non-console target refusal stops activate and rollback before any stop (4678.140939ms)
✔ config-any-key: a pre-270 target refuses each row 270 key on a full activate and rollback, naming the key (6793.985058ms)
✔ config-any-key: accepting loaders run validate with the selected config on activate and rollback (4565.703735ms)
✔ config-any-key: missing-loader copies accept only the four oldest keys (207.60765ms)
✔ config-any-key: missing config passes but malformed JSON refuses without calling the loader (71.691973ms)
ℹ tests 224
ℹ suites 0
ℹ pass 224
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 723416.641776
