build-log: row 74 landed (#1568)

Co-Authored-By: Claude Opus 5.5 <[email protected]>
This commit is contained in:
2026-10-11 18:34:09 -05:00
co-authored by Claude Opus 5.5
parent b1c4acf327
commit 0c3817587e
2 changed files with 11 additions and 0 deletions
+10
View File
@@ -4272,3 +4272,13 @@ Before (df676fa1): no test covered a directory pin, a symlink default or a pin w
After: test d436fe8b, which `queue review verify-commit 72` matches to round 1 candidate e6531a53. One test in `packages/cli/tests/host.test.mjs` and one in `packages/harness/tests/claude-session.test.mjs`; `agents/rocko/work/queue-72/mutants.sh` was committed with the packet in 036afdb6 and left out of the applied patch. Rocko built it; Filbert approved round 1 (27460). No drift on the candidate paths, `bus-service.sh` or `adapter.sh` since base a0080da8. Correction recorded here: the first landing message named the gate worktree as 950a965a; it was df676fa1, and I amended the message before any push.
Gate (Sage, scratch worktree of df676fa1 plus the candidate, sequential and teed): cli 113/113, harness 58/58 with 0 skipped; test-auth 15, test-conductor 17, test-config 24, test-discord 66, test-extension-package 18, test-foundation 44, test-queue 27, test-release 14, test-task 98, all 0 failed (Docker on). Manifest OK. Network, node_modules link and worktree removed. Row 72 done at rev 532 (e4bf7d10); #1566 closed with comment 27470. Filbert's N1 is row 78, #1572, after row 73.
### 2026-10-11 — Sage, row 74 landed: a signed-in, read-only Console preview behind the edge proxy (#1568)
Before (17ea0dbc): `serve` bound loopback only and refused any nonlocal Host. There was no way to put it behind the edge proxy for Jason's sign-in.
After: feat 351464ce, which `queue review verify-commit 74 HEAD` matches to round 2 candidate 17b6d7f6 on all 4 paths. `serve --public-host NAME --auth-header HEADER --allow-user ID` (all three or none) admits a Host of NAME only with HEADER equal to ID; HEADER with any other Host is 403, which closes the Host-rewrite path Darkwing found in round 1; every method but GET and HEAD is 403 `read-only`; a repeated Host is 400 in both modes. Header and host compare case-insensitively. The README states the proxy contract. Dewey built it; Filbert (27485) and Darkwing (27486) approved round 2. Round 1 had Filbert's approval (27433) and went to round 2 on Filbert's N1 and Darkwing's finding (notes revs 521, 523).
Gate (Sage, scratch worktree of a55915f0 plus the candidate, sequential and teed, finished 23:32Z): webui 61/61, control-board 124/124, cli 113/113 node tests; test-auth 15, test-conductor 17, test-config 24, test-extension-package 18, test-foundation 44, test-queue 27, test-release 14, test-task 98, all 0 failed (Docker on). test-discord failed one timing test on the sequential run (engine: a timed-out run pi did start outlives the grace, 280 ms, load average about 30) and passed 66/66 on a solo rerun of the same worktree; the patch touches no discord file. Manifest OK. Network, node_modules link and worktree removed. Row 74 done at rev 546 (b1c4acf3); #1568 closed with comment 27489.
Not yet installed or served. The unit gets the preview flags after rev-sol-01 passes ops-01's route review and the header value is confirmed; Jason starts it himself. The two README wording notes are on row 76 (rev 547).