docs(row 333 follow-ups R2): BUILD-LOG and SESSIONS lines (Vikunja #779)

BUILD-LOG.md

@@ -5963,3 +5963,5 @@ Owner directed static-only fallback after actual nativepriority drift: no new pr
 2026-11-03T01:27:26Z | Claude Opus 5.5 implementation sub-agent (lead T3 c5c1e8ba) | row 333 (#1831) R4 since carry fix on t3/row333-r4-fix, product commit f65faf9df on fe3ef5128, BUILD.md R4 section a13050012 | Ruling 1: the bus runtime passes launchSettings a key lineage lookup read from its own credential records (ids only); a new daily key quota takes the earliest stored since among the old document's daily key quotas in its key's lineage, now only when there is none, so a quota moved from a rotated or re-issued key keeps its count; a reset still sets now, a caller since still refuses, a quota removed and added back later is new, and a failed or malformed lookup refuses proxy-key-refused. Ruling 2: every limits refresh updates the remembered orphan set, empty when no daily key quota is left, so remove then re-add logs again; in memory only, a restart observes afresh. Ruling 3: the poll barrier's last yield is on the captured real setImmediate inside the deadline. Ruling 4: BUILD.md records the 64-id bound as a limit and corrects R3 departure 4 (a late queued event loses telemetry attribution to the reconcile log; not a quota bypass). Runs: bus 1397/1397, plugins 132/132, business 295/295, webui 499/499 (run 1 498/499 with editor-browser.test.mjs:93 timed out under load, the file 16/16 alone, then 499/499 twice), cli stack-release 225/225, stack-release-external 25/25, stack-upgrade 25/25, launch-limit-checks 5/5, harness tools 23/23; no skips, the model-final-completion flake did not appear; mutants M1 to M4, M4b and M5 each killed. Not run: 19 cli files that import bus runtime.mjs without pinning it. No migration, push, queue or PR action.
 
 2026-11-03T02:41:07Z | Claude Sonnet 5.5 implementation sub-agent (lead T3 c5c1e8ba) | row 333 (#1831) follow-ups on t3/row333-followups, base 1ff45c4ad, commits 3dc824ea1 (#783), 38cfa7233 (#778), 0e7e203db (#779), 5fbf3d2b5 (#782) | #783: a failed lineage lookup now keeps only the remembered orphan ids the refreshed document still holds and adds none, so a leaf removed and added back during the failure logs again; quota decisions are unchanged and a failed lookup still refuses. #778: createProxyUsage counts, per business and in memory, a batch the proxy gave up and the bus did not write; the Console shows the count only above 0 and the log code stays proxy-usage-read-failed. Departure from the brief rule (a read that throws drained nothing): a proxy-client-response error counts as a drop, because the client had already taken a 2xx answer off the queue; down, redirected and non-2xx answers do not. #779: the business-imports helper reads imports with a scanner, no parser dependency; comments are blanked, string and regular-expression contents are not matched, a spaced dynamic import counts; a non-literal dynamic import, an unterminated construct, a missing or non-file target and a real path outside the repository throw; 13 tests on small trees, 8 fail on the old helper; the real-tree output is unchanged. #782: the control-board refusal test holds its own listener for the whole test; stack-release T-I4 takes a closed lease because its port only reaches refused installs. The other 22 freePort callers hand a port to stack-release.sh rehearse, which probes it and starts a Console later; that needs a script change (accept --port 0, start serve on port 0, read the bound port from the Console line, run the reserved and holder checks after that), so it is a design, not built, and no retry was added. The remaining window is a process outside the lanes taking the probed port between probe and listen; lanes use 61000-61255, outside the ephemeral range. Runs: bus 1402/1402 plus its 1-test file, webui 500/500, control-board 130/130, cli stack-release 225/225, stack-release-external 25/25, stack-upgrade 25/25, launch-limit-checks 5/5, business-imports 13/13; no skips; neither known flake appeared. Mutants: keep the whole remembered set killed by the #783 test in p5-key-lineage; count a pre-read failure as a drop killed by two proxy-usage tests; drop the containment check killed by the #779 outside-repository test; startServer opening a loopback socket before refusing passes the old control-board test and fails the new one with EADDRINUSE. No push, queue or PR action.
+
+2026-11-03T03:00:17Z | Claude Sonnet 5.5 implementation sub-agent (lead T3 c5c1e8ba) | row 333 (#1831) follow-ups R2 fix on t3/row333-followups-r2-fix, product commit d3b6ab11d on 2ba22b4cb | #779 scanner findings: a dynamic import inside a template substitution (${...}) now throws "unsupported import inside a template substitution" naming the file, so the existence and containment checks no longer miss it; a substitution is read as code to its closing brace (strings, comments, nested templates and braces handled), refused only if it holds a dynamic import, `${import.meta.url}` and `${x.import}` stay allowed, and a substitution with no import is dropped as before; a template nested in a substitution is now read to its end instead of misread. A slash after `++` or `--` is division when the character before the pair ends an operand (`n++ / 2`) and a regular expression when it does not (`x = ++/re/.lastIndex`); the one rare form still misread, a prefix `++` applied to a regular expression member right after `)`, `]`, a word or a line break, is named in the header. Real-tree output byte-identical (6 files, sha256 b5772c3a). 6 new tests: 4 fail on 2ba22b4cb (two substitution refusal tests, the unterminated-substitution test, the postfix test) and 2 guard tests (allowed substitutions, regular expressions after operators and prefix ++) pass on both. Runs: business-imports 19/19, stack-release-external 25/25, no skips; M1 (no import check) and M2 (no postfix rule) killed, extra M3 on the prefix guard killed. Not run: stack-release and stack-upgrade (they import the helper, no pin on it; the landing gate runs them). No push, queue or PR action.

docs/SESSIONS.md

@@ -1972,3 +1972,4 @@ are never rewritten or removed; corrections are new entries.
 2026-11-03 | Claude (sub-agent of Mosaic Stack lead c5c1e8ba) | row333 R3 rotation fix (#1831) | 3692fca52 on t3/row333-r3-fix (base b37cc5087): key quota follows the agent's key lineage across rotation and re-issue, orphaned leaves listed and logged, key-quota-no-model-key, usage module gets readUsageQueue only, fixture deadlines; bus 1393, plugins 132, business 293, webui 499, cli stack-release 225, stack-release-external 25, stack-upgrade 25, launch-limit-checks 5, no skips; 5 mutants killed; no push, queue or PR action.
 2026-11-03 | Claude (sub-agent of Mosaic Stack lead c5c1e8ba) | row 333 R4 since carry fix (#1831) | f65faf9df on t3/row333-r4-fix (on R3 tip fe3ef5128): a moved key quota keeps its count through the bus's lineage lookup, orphan set updated on every refresh, real-timer barrier yield, BUILD.md R4 section a13050012; bus 1397, plugins 132, business 295, webui 499, cli stack-release 225, stack-release-external 25, stack-upgrade 25, launch-limit-checks 5, harness tools 23, no skips; 6 mutants killed; no push, queue or PR action.
 2026-11-03T02:41:07Z | Claude Sonnet 5.5 sub-agent of Mosaic Stack lead c5c1e8ba | row 333 follow-ups (#1831) | 3dc824ea1 #783, 38cfa7233 #778, 0e7e203db #779, 5fbf3d2b5 #782 on t3/row333-followups (base 1ff45c4ad): lineage-failure orphan set, dropped proxy batch count, import scanner, test ports held or leased; 22 rehearsal port callers left as a design; bus 1402, webui 500, control-board 130, stack-release 225, external 25, upgrade 25, launch-limit-checks 5, business-imports 13, no skips; 4 mutants killed; no push, queue or PR action.
+2026-11-03T03:00:17Z | Claude Sonnet 5.5 sub-agent of Mosaic Stack lead c5c1e8ba | row 333 follow-ups R2 fix (#1831) | d3b6ab11d on t3/row333-followups-r2-fix (base 2ba22b4cb): business-imports helper refuses a dynamic import inside a template substitution and reads division after ++ and --; real-tree output unchanged; business-imports 19, stack-release-external 25, no skips; 3 mutants killed; no push, queue or PR action.