✔ a first launch clones the root at its branch, with the root's path as origin (39.490182ms)
✔ the clone is not at its place until git clone has finished (26.442953ms)
✔ a later launch fast-forwards a clean clone after a commit to the root, then finds it current (89.793856ms)
✔ a clone ahead of the root keeps its commits and counts as current (55.80859ms)
▶ a dirty clone and one on another branch are fetched, and nothing but refs/remotes moves
  ✔ a modified file (68.137852ms)
  ✔ an untracked file (61.241194ms)
  ✔ a staged file (64.034506ms)
  ✔ another branch (74.986298ms)
  ✔ a detached HEAD (68.243182ms)
✔ a dirty clone and one on another branch are fetched, and nothing but refs/remotes moves (338.479434ms)
✔ a diverged clone gets the fetch into refs/remotes and is kept, not-fast-forward (62.389675ms)
▶ a clone kept before the branch check, or for a failed status, gets no fetch
  ✔ not-a-clone (32.293754ms)
  ✔ hooks-present (35.079772ms)
  ✔ submodule (48.221609ms)
  ✔ config-changed (43.221174ms)
  ✔ root-unreadable (36.394111ms)
  ✔ root-detached (42.482317ms)
  ✔ status-failed, on the root's branch and clean (41.812613ms)
  ✔ status-failed, dirty (50.43324ms)
✔ a clone kept before the branch check, or for a failed status, gets no fetch (331.594801ms)
✔ a dirty clone whose fetch fails is kept, fetch-failed, exactly as it was (48.040425ms)
✔ every git call the host makes, for a new clone and an existing one, carries maintenance.auto=false and gc.auto=0 (66.460165ms)
✔ a clone with loose objects enough for gc --auto gets no maintenance or gc from the fetch and the merge (92.149718ms)
▶ a clone with user.name or user.email in its config is kept, and git runs nothing in it
  ✔ user.name (31.413793ms)
  ✔ user.email (36.744379ms)
✔ a clone with user.name or user.email in its config is kept, and git runs nothing in it (68.95052ms)
✔ a commit git can't read after the fast-forward is null (70.48839ms)
✔ a new clone whose commit can't be read refuses the launch and leaves nothing behind (31.054608ms)
▶ a clone the session rigged is kept, and git runs nothing and writes nothing outside it
  ✔ core.fsmonitor (44.898218ms)
  ✔ core.hooksPath (42.989913ms)
  ✔ a hook file (56.442345ms)
  ✔ include.path (47.083929ms)
  ✔ includeIf (54.080995ms)
  ✔ a filter driver (47.506704ms)
  ✔ origin moved (37.951463ms)
  ✔ a second origin url (39.102078ms)
  ✔ the origin url twice, both the root (51.944344ms)
  ✔ an ext:: origin (49.148499ms)
  ✔ a branch tracking another remote (59.206422ms)
  ✔ a branch merging a tag (54.317989ms)
  ✔ a fetch line onto local branches (39.209644ms)
  ✔ no origin (42.221776ms)
  ✔ a config file over the size cap (49.779184ms)
  ✔ config a symlink to /dev/zero (42.424603ms)
  ✔ the clone a symlink to the bait (48.260595ms)
  ✔ the clone a file (41.154579ms)
  ✔ the clone a plain directory (38.49412ms)
  ✔ .git a gitdir: file (39.226082ms)
  ✔ .git a symlink (36.804959ms)
  ✔ .git/logs a symlink (37.994707ms)
  ✔ .git/refs/heads a symlink (37.001972ms)
  ✔ .git/objects a symlink (38.587833ms)
  ✔ a reflog hard-linked to a file outside (35.455272ms)
  ✔ HEAD a fifo (36.486105ms)
  ✔ a commondir file (42.592049ms)
  ✔ an alternates file (43.826695ms)
  ✔ a gitlink staged, no .gitmodules (66.60126ms)
  ✔ a gitlink and .gitmodules staged (60.84319ms)
  ✔ a gitlink to a repository with its own gitlink (67.321929ms)
  ✔ a gitlink and .gitmodules committed (65.088788ms)
  ✔ a gitlink and submodule.active in config (65.087175ms)
  ✔ a .git/modules with no gitlink (54.923305ms)
✔ a clone the session rigged is kept, and git runs nothing and writes nothing outside it (1619.966446ms)
▶ a root that can't be cloned refuses with the project id and leaves nothing behind
  ✔ missing (13.854288ms)
  ✔ not a repository (13.854304ms)
  ✔ a plain directory inside another repository (20.255048ms)
  ✔ unreadable (13.77885ms)
  ✔ on no branch (18.397146ms)
  ✔ missing an object (20.789924ms)
✔ a root that can't be cloned refuses with the project id and leaves nothing behind (102.167041ms)
✔ a clone whose root is on no branch, or gone, is kept and named (40.153227ms)
✔ no credential or forge remote of the root reaches a clone (58.803677ms)
✔ every project in the business file gets its own clone at its own branch (35.685953ms)
✔ a clone past its time gets SIGTERM and refuses the launch, with nothing left in the workspace (516.104136ms)
✔ a clone that ignores SIGTERM gets SIGKILL once the grace period is over (1026.144592ms)
✔ a timeout signals git's process group, so a process git started dies with it (514.588085ms)
✔ once a signalled git has closed, its group gets SIGKILL, so a process that ignored SIGTERM dies too (514.124018ms)
✔ RUNNER_FILES is exactly what the runner and the harness sources it starts import (2.362798ms)
✔ sandboxProblem names a missing bwrap and a bwrap that fails (10.936773ms)
✔ every bind says why; the bundle and session file stay read-only over the run directory (1.472616ms)
✔ REQ-THREAD-2 a thread store binds its session directory and Claude transcripts, and nothing more (1.014051ms)
✔ the host's git socket is bound only when given, read-only and before the writable binds (0.793908ms)
✔ the git identity is the instance's, at <instance>@<business>.mosaic.invalid, and sandboxArgv refuses without it (1.281075ms)
✔ a confined session's shell reaches its own workspace and run directory and nothing of the founder's or another session's (2007.829335ms)
✔ a bind that exposes a stand-in, or a missing workspace bind, fails the matching check (2968.105589ms)
✔ a confined session that runs tester-cli.mjs is refused as tester, and the same shim outside the sandbox binds (216.713783ms)
✔ resolveSeat: by name under --repo resolves the repo layout (1.346638ms)
✔ resolveSeat: by path resolves the fleet layout (0.369917ms)
✔ resolveSeat: refusals for missing dir, missing launch.sh, non-executable launch.sh, invalid name, and unknown layout (0.748809ms)
✔ tmuxContext: outside tmux, default socket, custom socket, and exec failure (0.669743ms)
✔ makeRegistration produces a record that validates; each shape violation throws SeatError (0.842245ms)
✔ writeRegistration/readRegistration: round trip, permissions, absence, and malformed records (1.588796ms)
✔ updateTask: changes task, taskSetBy and updatedAt only, and refuses appropriately (1.210314ms)
✔ CLI launch: registers, execs the fake launch script, and passes args through (34.522573ms)
✔ CLI launch: --harness lands in the record (34.230421ms)
✔ CLI launch: the launch script's own exit code passes through (41.331493ms)
✔ CLI launch: relaunching a seat rewrites the one registration record (79.856291ms)
✔ CLI launch: omitting --task records an empty string, not null (46.591938ms)
✔ CLI seat task: updates only the task after a launch, and refuses on an unlaunched seat (107.056955ms)
✔ CLI refusals: no args, unknown flag, missing config, already-registered env, and exec failure (193.597672ms)
✔ samePath: equal paths, symlinked dirs, distinct dirs, and non-strings (0.726632ms)
✔ resolveSetBy: explicit --by wins over the environment; absent or empty environment gives unknown; invalid explicit or environment values refuse with exit 4 (1.320537ms)
✔ validateRegistration/readRegistration: taskSetBy is optional; a record without it (written before #1511) still loads unchanged; an invalid one is refused; the version does not change (1.302566ms)
✔ updateTask: records setBy, preserves startedAt and every unrelated field, upgrades an old record in place only when the task is set, and replaces a previous attribution (1.963298ms)
✔ CLI seat task: --by beats MOSAIC_AGENT_NAME, the environment beats nothing, empty environment is unknown, invalid --by or environment refuses with exit 4 and leaves the record byte for byte (353.464284ms)
✔ REQ-LIMIT-1: family substring matching is no longer exported (0.831477ms)
✔ sessionEnv passes only the allowlist, the repo's bin on PATH, and the run id (0.739563ms)
✔ sessionExit gives a runner's signal death back as the signal; a session credential is one whole set of nonempty variables (0.315824ms)
✔ newRun: short ids, 0700 directories, and a refusal when the socket path won't fit (1.688695ms)
✔ session file and launch log: 0600, the session file written once (1.173254ms)
✔ endReason maps the runner's exit codes; a signal is killed (0.137089ms)
✔ Registry mirrors to sessions.json; readSessions marks live entries; bad files refuse (1.401749ms)
✔ REQ-THREAD-1 Registry.running keys a thread run by business, instance and thread (0.777595ms)
✔ REQ-THREAD-2 REQ-LAUNCH-1 threadStore checks both segments before the join and refuses an unsafe directory (2.110716ms)
✔ stopSession refuses an unknown run, reports a stale one, and won't signal a pid that isn't a runner (1.096671ms)
✔ a session runs in its sandbox as pid 1 of its namespace, claims, answers, and stops on mosaic stop (248.304619ms)
✔ workRef and validBranch take only what a ref name can hold (1.175478ms)
✔ a push lands as the task's work ref, a fast-forward lands after it, and main is the root's (129.577191ms)
✔ a rewritten branch refuses non-fast-forward and the work ref stays (126.201752ms)
✔ a branch with no history in common with main refuses unrelated-history (63.390755ms)
✔ a bundle that needs commits the working repository lacks refuses missing-prerequisite (53.80871ms)
✔ main is fetched from the root again before each push, so a clone of a newer root pushes (151.43061ms)
✔ a root moved back after the clone leaves the push's base unknown: missing-prerequisite (92.400228ms)
✔ a commit with a broken object refuses invalid-bundle, and only because fsck is on (83.827315ms)
✔ only a v2 bundle with the named branch is read (72.325291ms)
✔ a branch named main, or named for another task, moves only this task's work ref (93.261812ms)
✔ a record that throws moves the work ref back, or removes a new one (128.052957ms)
✔ a work ref that can't go back refuses rollback-failed, naming the ref and the commit (393.511492ms)
✔ a root that can't be read refuses root-unreadable (50.596211ms)
✔ a git past its time gets SIGTERM, leaves no ref lock, and the next push lands (2148.815618ms)
✔ a git that ignores SIGTERM gets SIGKILL once the grace period is over (1041.252188ms)
✔ a working repository path that isn't a directory refuses (35.697007ms)
✔ review bundles a pushed commit as refs/mosaic/review, leaving out what the reviewer has (103.819867ms)
✔ review of a project with no working repository refuses unknown-commit (13.910376ms)
✔ the runner's git tools hold the host's limits and branch rule (1.188606ms)
ℹ tests 135
ℹ suites 0
ℹ pass 135
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 5807.217601
