mosaicstack/stack
25
0
Fork 1
Code Issues 360 Pull Requests 13 Actions Packages Projects Releases 15 Wiki Activity

build-log: row 74 landed (#1568)

Browse Source 
Co-Authored-By: Claude Opus 5.5 <[email protected]>
This commit is contained in:
jason.woltje
2026-10-11 18:34:09 -05:00
co-authored by Claude Opus 5.5
parent b1c4acf327
commit 0c3817587e
2 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
BUILD-LOG.md
+10
View File
@@ -4272,3 +4272,13 @@ Before (df676fa1): no test covered a directory pin, a symlink default or a pin w
After: test d436fe8b, which `queue review verify-commit 72` matches to round 1 candidate e6531a53. One test in `packages/cli/tests/host.test.mjs` and one in `packages/harness/tests/claude-session.test.mjs`; `agents/rocko/work/queue-72/mutants.sh` was committed with the packet in 036afdb6 and left out of the applied patch. Rocko built it; Filbert approved round 1 (27460). No drift on the candidate paths, `bus-service.sh` or `adapter.sh` since base a0080da8. Correction recorded here: the first landing message named the gate worktree as 950a965a; it was df676fa1, and I amended the message before any push.
Gate (Sage, scratch worktree of df676fa1 plus the candidate, sequential and teed): cli 113/113, harness 58/58 with 0 skipped; test-auth 15, test-conductor 17, test-config 24, test-discord 66, test-extension-package 18, test-foundation 44, test-queue 27, test-release 14, test-task 98, all 0 failed (Docker on). Manifest OK. Network, node_modules link and worktree removed. Row 72 done at rev 532 (e4bf7d10); #1566 closed with comment 27470. Filbert's N1 is row 78, #1572, after row 73.
### 2026-10-11 — Sage, row 74 landed: a signed-in, read-only Console preview behind the edge proxy (#1568)
Before (17ea0dbc): `serve` bound loopback only and refused any nonlocal Host. There was no way to put it behind the edge proxy for Jason's sign-in.
After: feat 351464ce, which `queue review verify-commit 74 HEAD` matches to round 2 candidate 17b6d7f6 on all 4 paths. `serve --public-host NAME --auth-header HEADER --allow-user ID` (all three or none) admits a Host of NAME only with HEADER equal to ID; HEADER with any other Host is 403, which closes the Host-rewrite path Darkwing found in round 1; every method but GET and HEAD is 403 `read-only`; a repeated Host is 400 in both modes. Header and host compare case-insensitively. The README states the proxy contract. Dewey built it; Filbert (27485) and Darkwing (27486) approved round 2. Round 1 had Filbert's approval (27433) and went to round 2 on Filbert's N1 and Darkwing's finding (notes revs 521, 523).
Gate (Sage, scratch worktree of a55915f0 plus the candidate, sequential and teed, finished 23:32Z): webui 61/61, control-board 124/124, cli 113/113 node tests; test-auth 15, test-conductor 17, test-config 24, test-extension-package 18, test-foundation 44, test-queue 27, test-release 14, test-task 98, all 0 failed (Docker on). test-discord failed one timing test on the sequential run (engine: a timed-out run pi did start outlives the grace, 280 ms, load average about 30) and passed 66/66 on a solo rerun of the same worktree; the patch touches no discord file. Manifest OK. Network, node_modules link and worktree removed. Row 74 done at rev 546 (b1c4acf3); #1568 closed with comment 27489.
Not yet installed or served. The unit gets the preview flags after rev-sol-01 passes ops-01's route review and the header value is confirmed; Jason starts it himself. The two README wording notes are on row 76 (rev 547).
docs/SESSIONS.md
+1
View File
@@ -693,3 +693,4 @@ are never rewritten or removed; corrections are new entries.
2026-10-11T23:24:56Z | dewey | row 74 (#1568) round 2 candidate and review request, WebUI preview | candidate 17b6d7f6 on 17ea0dbc, packet fce04c15, request comment 27484, revs 540-542 in 821e183d; repeated Host 400 in both modes, HEADER with a non-NAME Host 403 proxy Host refused, HEAD/x.NAME/HEADER tests, README proxy contract (nginx Host, every hop, tunnel); 34 of 34 mutants killed (4 survive round 1's tests); gate green 23:15:06Z-23:22:54Z
2026-10-11T23:31:49Z | darkwing | row 74 (#1568) round 2 review, WebUI preview | approve, comment 27486, rev 544 in 5fbb681b, packet 3a2b0517; candidate 17b6d7f6 manifest 4 OK on 17ea0dbc, preview 11/0, serve 4/0, webui bus 8/0; 22 of 23 mutants killed (joined-value equivalent); probes: repeated Host 400, HEADER with loopback Host 403, HEAD 401/200; one README tunnel wording note, non-blocking
2026-10-11T23:32:20Z | filbert | row 74 (#1568) round 2 delta review, repeated-Host 400 and proxy-Host 403 | approve, comment 27485, rev 543 (committed in darkwing's 5fbb681b); my round 1 N1 and Darkwing's Host case fixed and tested; 9 of my 10 extra mutants killed, 1 equivalent; N1 the proxy-Host 403 detects a rewriting proxy only on signed-in requests (README wording); answer: keep the 400 unconditional; webui 61, control-board 124, cli 112 green
- 2026-10-11T23:33:58Z, Sage (lead): row 74 (#1568) landed as 351464ce after my gate on a55915f0 (webui 61, control-board 124, cli 113, scripts 0 failed; one discord timing failure under load passed 66/66 solo). Done at rev 546, #1568 closed (27489). Wording notes from Filbert and Darkwing noted on row 76 (rev 547). Also wrote the PM standup to the fleet standups lane, left for fleet-sweep.