docs(queue-62): row 62 candidate packet, project trees (darkwing)
Candidate manifest sha256 ec3f7a42f3bf6436634a5a83a12bb5678ca1e58a10ff4f66a23dfca7ff3f375f, 13 files onedc5de71. Gate on6ae8b844: 13 suites green. The candidate itself is not committed. Co-Authored-By: Claude Opus 5.5 <[email protected]>
This commit is contained in:
Claude Opus 5.5
@@ -0,0 +1,225 @@
|
||||
# Row 62 (#1555): the adapter reads a project tree, candidate packet
|
||||
|
||||
Author: Darkwing. Reviewers: Dewey and Filbert. Brief:
|
||||
`docs/plans/2026-10-11_multi-project-sync.md`, row A. Base: `edc5de71`
|
||||
(`base.txt`). It applies unchanged to `6ae8b844`, where the gate ran: the
|
||||
commits between the two touch no file in this candidate. The feature is
|
||||
uncommitted; only this packet is committed. I pushed nothing.
|
||||
|
||||
## Files
|
||||
|
||||
`files.txt` lists the 13 repository paths. `candidate-manifest.sha256`
|
||||
has their sha256. `build.patch` is `git diff --cached --binary edc5de71`
|
||||
over them: 13 files, +608/−73.
|
||||
|
||||
| File | Change |
|
||||
|---|---|
|
||||
| `packages/business/src/vars.mjs` | `tracker.descendants`: project layer, boolean, default false |
|
||||
| `packages/business/tests/vars.test.mjs` | accepts true, refuses `"true"`, `1` and the business layer; default false with provenance `default` |
|
||||
| `packages/cli/src/config.mjs` | one line, `descendants: v["tracker.descendants"]` in `trackerFor()` (decision 87) |
|
||||
| `packages/cli/tests/config.test.mjs` | the two tracker tests expect `descendants: false`; one more assertion that `true` reaches the boot entry |
|
||||
| `packages/cli/tests/trackers-boot.test.mjs` | line 44 expects `descendants: false`; see "Scope" |
|
||||
| `packages/tasks/src/adapter.mjs` | `settings()` takes `descendants` (absent means false, a non-boolean refuses `tracker-config`); `ctx.tree` |
|
||||
| `packages/tasks/src/startup.mjs` | `inspect(ctx, project)` is the install check for any project; new `discover(ctx)` |
|
||||
| `packages/tasks/src/sync.mjs` | tick and reconcile read each project in `ctx.tree`; watch-only reads; the leave-tree rule in `missing()` |
|
||||
| `packages/tasks/src/fake.mjs` | project trees: parents, the project list, archive, inherited access |
|
||||
| `packages/tasks/tests/tree.test.mjs` | new: 11 tests, listed below |
|
||||
| `packages/tasks/tests/shapes.test.mjs` | new test: the fake's project list against recorded shapes |
|
||||
| `packages/tasks/README.md` | new section "Project trees"; the host contract and startup notes |
|
||||
| `packages/tasks/live/README.md` | new section "Project trees" |
|
||||
|
||||
`verbs.mjs`, `vikunja.mjs`, `index.mjs` and `packages/bus/` are unchanged.
|
||||
|
||||
## Scope
|
||||
|
||||
`packages/cli/src/config.mjs` and `config.test.mjs` are outside the
|
||||
brief's files. Sage added them as lead decision 87 (commit `9277de33`), a
|
||||
decided scope addition: without the line, a host config with
|
||||
`tracker.descendants` set never reaches the adapter, and the gate read
|
||||
would need a packet script.
|
||||
|
||||
`packages/cli/tests/trackers-boot.test.mjs` is not named in decision 87.
|
||||
It follows from it. Line 44 compares `boot.trackers` with an exact
|
||||
object, so the config line breaks it: with the original line 44 and the
|
||||
candidate `config.mjs` the test fails, 0 passed and 1 failed. The change
|
||||
adds `descendants: false` to that object and nothing else. Reviewers and
|
||||
Sage should treat it as part of decision 87's addition, or tell me to
|
||||
take it out.
|
||||
|
||||
The extra `config.test.mjs` assertion, `true` reaching the boot entry, is
|
||||
mine. Decision 87 asked for the two `false` updates. Without the new
|
||||
assertion no test sent `true` through `config.mjs`, and the gate's live
|
||||
run is the first place that value is used.
|
||||
|
||||
## How it works
|
||||
|
||||
With `descendants` off, `ctx.tree` holds the root and its view from
|
||||
startup and nothing else. Every read is the v0 read with the root's
|
||||
project id. The v0 tests pass unchanged, and tree test 1 checks that no
|
||||
`GET /projects` and no read under a child happens.
|
||||
|
||||
With it on:
|
||||
|
||||
1. Startup is unchanged. The root's install check still refuses the
|
||||
business with `tracker-install`.
|
||||
2. Each reconcile, including the first one at start, calls `discover()`.
|
||||
It reads `GET /projects`, every page, and walks `parent_project_id`
|
||||
breadth-first from the root. It skips ids at or below 0 and archived
|
||||
projects. Each child gets `inspect()`. A pass gives its view, a
|
||||
`tracker-install` refusal gives `null` (watch-only), and any other
|
||||
refusal propagates. `ctx.tree` is replaced only after the walk
|
||||
finishes, so a failed reconcile keeps the previous tree.
|
||||
3. Tick and reconcile read each project in `ctx.tree`. An installed
|
||||
project is read through its board, as v0 reads the root. A watch-only
|
||||
one is read through `walk(ctx, 'done = false', {}, project)`, and each
|
||||
task gets bucket `WATCH_ONLY` (0).
|
||||
4. Gone detection in a tick uses a set of refs placed by this tick's
|
||||
reads, not task ids. A task moved from A to B shows on B's board under
|
||||
the same id; keying by id would hide the old ref's tombstone. The
|
||||
`placed-by-id` mutant below fails the move test.
|
||||
5. `missing()` takes the project from the ref (`parseRef`). If the task
|
||||
still reads 200 in the same project but that project is no longer in
|
||||
`ctx.tree`, the task gets `no-access` with its last `updated`.
|
||||
|
||||
`fieldsFor()` builds the fields of a watch-only task with
|
||||
`taskFields(task, 1)` and then sets `bucket: 0`. `taskFields` checks the
|
||||
bucket is a positive integer, so the 1 is a placeholder that never
|
||||
reaches the ledger. The bus schema accepts 0 (an integer).
|
||||
|
||||
One line in reconcile changed meaning: `if (!bucket) continue` became
|
||||
`if (bucket === undefined) continue`. The old form would skip every
|
||||
watch-only task, since 0 is falsy. `undefined` is still the case it was
|
||||
written for, an open task the board didn't show.
|
||||
|
||||
## The brief, line by line
|
||||
|
||||
| Brief | Where |
|
||||
|---|---|
|
||||
| `tracker.descendants`, project-layer boolean, default false | `vars.mjs`; `vars.test.mjs` "types" and "merge" |
|
||||
| The tree from `GET /projects` by `parent_project_id` | `discover()`; tree tests 2 and 5 |
|
||||
| Discovery at startup and each reconcile, not each tick | tree test 2 (tick has no `GET /projects`, reconcile starts with it); test 8 (a late child joins at reconcile, not tick) |
|
||||
| Archived projects are not in the tree | tree test 5 (with the list forced to include archived ones); test 9 |
|
||||
| Leave-tree rule, recorded and tested | README "Project trees"; tree test 9, three ways |
|
||||
| The ledger is never rewritten | tree test 9: snapshots read `open`, then `no-access` with the same `updated` |
|
||||
| Root install fails: refuse | tree test 4 |
|
||||
| Child passes: installed. Fails: watch-only, business ready | tree tests 2 and 3 |
|
||||
| Watch-only records title, done, assignees, comments; no bucket state | tree test 11, decision 87's bucket 0 |
|
||||
| Moves root to child, child to child, child to outside | tree test 7 |
|
||||
| Poll cost stated | README; tree test 2 counts 6 GETs per tick and 11 per reconcile; probes.md P4 |
|
||||
| Cross-project read probed | probes.md P4 and "Gate read" |
|
||||
| The fake models the tree | `fake.mjs`; probes.md "Fake"; shapes test 2 |
|
||||
| Descendants off matches v0 | tree test 1; every pre-existing tasks test unchanged |
|
||||
| verbs read-only; a child task refuses `task-project` | `verbs.mjs` unchanged; tree test 11 |
|
||||
| No change to `packages/bus/`; no Vikunja writes | `files.txt`; tree test 11 checks `sync.mjs` has no write method string |
|
||||
|
||||
## Tests
|
||||
|
||||
`packages/tasks/tests/tree.test.mjs`:
|
||||
|
||||
1. With descendants off the adapter reads no project list and no child, as in v0.
|
||||
2. A three-level tree is read per project, and a project outside it is
|
||||
not. Root, an installed child, a watch-only grandchild and an outside
|
||||
project shared with the sync bot. The tick's six requests are checked
|
||||
in order; the reconcile is `GET /projects` plus 10.
|
||||
3. A watch-only child keeps the business ready, and a failed child read
|
||||
refuses as transient (a 503 on its views).
|
||||
4. A root without the installed buckets refuses with descendants on.
|
||||
5. The project list refuses without `read_all`, and skips archived
|
||||
projects and saved filters. A fetch wrapper adds `is_archived=true`,
|
||||
so the fake returns archived projects and the adapter's own check has
|
||||
to drop them.
|
||||
6. `descendants` must be true or false.
|
||||
7. A move inside the tree is a moved tombstone plus a snapshot under the
|
||||
new ref: root to A, A to B (watch-only), A to outside.
|
||||
8. A child made after startup joins the tree at the next reconcile.
|
||||
9. A child that leaves the tree has its tasks recorded missing, and the
|
||||
ledger keeps their history: archived, reparented to the top with a
|
||||
direct share, and reparented under a project the bot can't see. The
|
||||
hidden parent's title never reaches the bus.
|
||||
10. A task in a bucket outside the five keeps its raw bucket id.
|
||||
11. Bucket 0 on a watch-only task never becomes a bucket or a state. A
|
||||
move between open buckets records nothing; done then reopen records
|
||||
`done` twice; every snapshot has bucket 0; no `task.state` event; a
|
||||
verb refuses `task-project`; the source of `sync.mjs` has no
|
||||
`.titles` or `.ids[` lookup and no write method string. This is the
|
||||
test decision 87 asked for.
|
||||
|
||||
`shapes.test.mjs` adds "the project list holds recorded project objects
|
||||
in the recorded list envelope". No recording holds a `GET /projects`
|
||||
list, so it checks the envelope against the recorded views list and each
|
||||
item against the recorded `GET /projects/{p}` body, keys and types.
|
||||
|
||||
### Mutants
|
||||
|
||||
`out/mutants.sh` edits one source file in the build worktree, runs the
|
||||
tests, and restores the file from the candidate. Each mutant fails at
|
||||
least one test (`out/mutants.txt`):
|
||||
|
||||
| Mutant | Fails |
|
||||
|---|---|
|
||||
| `no-leave-tree-check`: drop the `ctx.tree.has(project)` branch in `missing()` | tree 9 |
|
||||
| `no-watch-only-bucket`: `fieldsFor` keeps the bucket it is given | tree 2, 3, 7, 8, 11 |
|
||||
| `placed-by-id`: gone detection keyed by task id | tree 7 |
|
||||
| `keep-archived`: `discover()` keeps archived projects | tree 5 |
|
||||
| `config-drops-descendants`: `config.mjs` passes `false` | cli config "trackers come from..." |
|
||||
|
||||
## Things a reviewer should know
|
||||
|
||||
- The `p.id <= 0` skip guards shape only. The walk starts at the root
|
||||
and follows positive parent ids, so it can't reach a negative id. The
|
||||
skip stops a saved filter from failing the `parent_project_id` check.
|
||||
- The fake's `GET /projects/{p}` body now has `parent_project_id`,
|
||||
`position`, `created` and `updated`, from a shared `#projectJson`.
|
||||
Shapes test 1 still matches it to the recorded body.
|
||||
- `commentsAt` and `commentCount` stay keyed by task id. Vikunja task ids
|
||||
are global, so a moved task keeps its comment state.
|
||||
- A watch-only child's open tasks come from its task list, so a tick
|
||||
costs the same two GETs as an installed project.
|
||||
- I noticed in the v2.7.0 source that creating a project under v2 also
|
||||
creates a default kanban with a backlog bucket. A child made in the UI
|
||||
is then watch-only until someone installs the five buckets by hand.
|
||||
Nothing in this row depends on it.
|
||||
- No probe in this row touched a live Vikunja. probes.md has the source
|
||||
evidence and the exact gate read.
|
||||
|
||||
## Gate
|
||||
|
||||
The gate ran in a detached worktree of `6ae8b844` with `build.patch`
|
||||
applied and `node_modules` linked to the main checkout's
|
||||
(`out/gate/apply.txt`, `out/gate/gate.sh`). Every suite ran in order and
|
||||
each log is in `out/gate/`. test-task ran with
|
||||
`DOCKER_HOST=unix:///nonexistent`.
|
||||
|
||||
Every suite passed on this candidate (`out/gate/summary.txt`):
|
||||
|
||||
| Suite | rc | Result |
|
||||
|---|---|---|
|
||||
| `packages/tasks` | 0 | 63 passed, 0 failed |
|
||||
| `packages/business` | 0 | 60 passed, 0 failed |
|
||||
| `packages/bus` | 0 | 74 passed, 0 failed |
|
||||
| `packages/cli` | 0 | 83 passed, 0 failed |
|
||||
| test-auth | 0 | 15 passed, 0 failed |
|
||||
| test-conductor | 0 | 17 passed, 0 failed |
|
||||
| test-config | 0 | 24 passed, 0 failed |
|
||||
| test-discord | 0 | 66 passed, 0 failed |
|
||||
| test-extension-package | 0 | 18 passed, 0 failed |
|
||||
| test-foundation | 0 | 44 passed, 0 failed |
|
||||
| test-queue | 0 | 27 passed, 0 failed |
|
||||
| test-release | 0 | 14 passed, 0 failed |
|
||||
| test-task | 0 | 26 passed, 0 failed |
|
||||
|
||||
After the run I removed the gate worktree's `gate_default` Docker
|
||||
network; it had no containers.
|
||||
|
||||
Two earlier gate runs were stopped. The first had no `node_modules` link,
|
||||
so test-discord failed its "pi binary present" check, 57 passed and 1
|
||||
failed. The second I stopped to add the `true` assertion to
|
||||
`config.test.mjs`, which changed the candidate. Neither run's logs are
|
||||
in this packet; they were on the earlier candidate.
|
||||
|
||||
## Gate read for Sage
|
||||
|
||||
probes.md "Gate read" has the exact requests: `GET /api/v2/projects` and
|
||||
`GET /api/v2/tasks` with a `project in 19, 18, 20, 21` filter, sync key 9,
|
||||
GETs only. The adapter reads per project whatever read 2 answers; a 200
|
||||
there opens a follow-up row.
|
||||
@@ -0,0 +1 @@
|
||||
edc5de71663062e1e1d2dd750fd0c15e522208a5
|
||||
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,13 @@
|
||||
a15c22de43c3ca4ea80fa6141fb2b8173f5a1eb31d939bad5137e36fc131c89d packages/business/src/vars.mjs
|
||||
43ebec98d7cb474c4d65ff533c103250e10d1d5bf5530f23f3424ab5c265f73c packages/business/tests/vars.test.mjs
|
||||
fcc95afc418823416c87475de0f6fcad33d312588d22e9d6fd5784d9e2478f0e packages/cli/src/config.mjs
|
||||
1737237bbf062f83eeffeb7fb1a604bc6676be9f9db1e6b91844587f77491a1c packages/cli/tests/config.test.mjs
|
||||
4ada6f215c8fb42bc95d46121e7c61c2477f7b1b1d7120675443b91cc4574fdc packages/cli/tests/trackers-boot.test.mjs
|
||||
aad24a5db15943eba6c0bf5fd93add3f4f7b265ff5868c46e405e976bc26ce22 packages/tasks/live/README.md
|
||||
d31be986f6f5f972bb6166eee64b9ad2e3ad202c946b92af39ab69339d6225ac packages/tasks/README.md
|
||||
02a802a9bb1306bf5f82b8e56ca2064c308f1b7574eebba0f47932cdea7f41d1 packages/tasks/src/adapter.mjs
|
||||
aeb65af54d716a36bd7e790c41cad3c4ca516ab8384b288e23ecd04d82cdd366 packages/tasks/src/fake.mjs
|
||||
e0c754aacf7e82c2fe18fb0548674044ac949ffc94435b353e4bd7aebcf797c2 packages/tasks/src/startup.mjs
|
||||
4a329bc76c4909490ac064332ccd0083365a4f7fcbffcd69ef17c327a288fc82 packages/tasks/src/sync.mjs
|
||||
e8798609ec1bf7d4901f7f94b6346b37c7ea4504ee2eb781b07c634001e3bf72 packages/tasks/tests/shapes.test.mjs
|
||||
82f6a673a59dc214a65d20af597096c6c3f86ad2c4d39bb25d617ad2515a9e4b packages/tasks/tests/tree.test.mjs
|
||||
@@ -0,0 +1,13 @@
|
||||
packages/business/src/vars.mjs
|
||||
packages/business/tests/vars.test.mjs
|
||||
packages/cli/src/config.mjs
|
||||
packages/cli/tests/config.test.mjs
|
||||
packages/cli/tests/trackers-boot.test.mjs
|
||||
packages/tasks/live/README.md
|
||||
packages/tasks/README.md
|
||||
packages/tasks/src/adapter.mjs
|
||||
packages/tasks/src/fake.mjs
|
||||
packages/tasks/src/startup.mjs
|
||||
packages/tasks/src/sync.mjs
|
||||
packages/tasks/tests/shapes.test.mjs
|
||||
packages/tasks/tests/tree.test.mjs
|
||||
@@ -0,0 +1,14 @@
|
||||
applied
|
||||
packages/business/src/vars.mjs: OK
|
||||
packages/business/tests/vars.test.mjs: OK
|
||||
packages/cli/src/config.mjs: OK
|
||||
packages/cli/tests/config.test.mjs: OK
|
||||
packages/cli/tests/trackers-boot.test.mjs: OK
|
||||
packages/tasks/live/README.md: OK
|
||||
packages/tasks/README.md: OK
|
||||
packages/tasks/src/adapter.mjs: OK
|
||||
packages/tasks/src/fake.mjs: OK
|
||||
packages/tasks/src/startup.mjs: OK
|
||||
packages/tasks/src/sync.mjs: OK
|
||||
packages/tasks/tests/shapes.test.mjs: OK
|
||||
packages/tasks/tests/tree.test.mjs: OK
|
||||
@@ -0,0 +1,82 @@
|
||||
✔ launch identity is stamped, payload identity is refused and stale holder cannot send (189.205781ms)
|
||||
✔ decision classes route from policy; gated resolution is human-only, choice and target must match (438.844355ms)
|
||||
✔ claim exclusion, holder release, gated revoke and rerouting to a new holder are atomic (382.921188ms)
|
||||
✔ launch events require a human CLI capability; generic emit cannot forge authority events (389.459955ms)
|
||||
✔ within-role decisions close atomically and invalid options or blocking omissions refuse (292.529916ms)
|
||||
✔ observer capabilities read human inbox but cannot mutate or forge launch identity (219.077084ms)
|
||||
✔ task action subjects and linked decision trail are complete and ordered (390.586456ms)
|
||||
✔ launch binding is durable and reconnecting requires the identical trusted record (134.628246ms)
|
||||
✔ business isolation includes inherited object names and cross-business message references (215.705092ms)
|
||||
✔ authority never transfers between action, run, target, unresolved or replaced role holder (309.853682ms)
|
||||
✔ task projection uses schema current view, skipping earlier and equal-start polls (133.355659ms)
|
||||
✔ revocation permanently bars the old run from reclaiming first, including after broker restart (481.213654ms)
|
||||
✔ empty message references refuse before storage; refusal-evidence failure stays a typed error (180.256758ms)
|
||||
✔ both arbiters require human resolution when their cross-role route is themselves (241.16013ms)
|
||||
✔ S1 adapter takes resolved limits and refs, rejects mismatched instance, never mutates input (3.251996ms)
|
||||
✔ only validated broker references load; returned data and exceptions cannot expose a known token (7.071814ms)
|
||||
✔ bad file modes, symlinks, repository/data paths, malformed tokens and missing dates refuse (6.492665ms)
|
||||
✔ expiry refuses use and env references never become client data (1.740994ms)
|
||||
✔ S1 parsed service refs work, service mismatch refuses, Gitea rotation due is a warning state (7.820923ms)
|
||||
✔ opaque tokens shorter than 16 characters refuse before use (0.700696ms)
|
||||
✔ endLaunch writes session.ended, releases the run claim and kills its capabilities (202.757684ms)
|
||||
✔ endLaunch refuses an unknown run, a second end and a rebind of the ended run (234.939664ms)
|
||||
✔ a restarted broker refuses to rebind an ended run; a refused rebind leaves the run unbound (279.024904ms)
|
||||
✔ endLaunch leaves a claim another run took alone (253.496157ms)
|
||||
✔ refuse records action.refused against the caller with the code only (335.224505ms)
|
||||
✔ launches off refuses role.launch with launch-revoked until launches on (315.632998ms)
|
||||
✔ broker process: launch ops authorize role.launch, record refusals and end runs (429.799892ms)
|
||||
✔ human proof binds CLI entry, process start and nonce; agents and incomplete ancestry refuse (4.279809ms)
|
||||
✔ process reader gets own kernel identity without exposing environment values (0.893228ms)
|
||||
✔ EACCES ancestor environments skip only markers; commands and registered launches still refuse (1.337363ms)
|
||||
✔ real pid 1 remains inspectable when its environment is protected (0.519345ms)
|
||||
✔ within-role sends cite an open gated launch decision without spending it or naming it in grants (277.997725ms)
|
||||
✔ missing and foreign-business citations refuse and roll back message and grant (344.747497ms)
|
||||
✔ cross-role sends still need a matching resolved decision and consume it once (353.002017ms)
|
||||
✔ broker process binds trusted launches, offers reader capabilities, refuses human mutation, closes cleanly (273.37842ms)
|
||||
✔ startup token refusal returns safe code without value or partial listening broker (60.632816ms)
|
||||
✔ loaded fixture token is absent from socket replies and SQLite, including refusal evidence (356.371003ms)
|
||||
✔ killed broker leaves an explicit stale lock; another process cannot silently reclaim it (256.867864ms)
|
||||
✔ trusted host registers later launches; socket clients never have a registration verb (385.853343ms)
|
||||
✔ runtime excludes declared project roots even when host supplies no repoRoots (55.296127ms)
|
||||
✔ a refused launch binding leaves the broker and existing capabilities alive; bad protocol stops it (253.530798ms)
|
||||
✔ v3b prototype refusals, views and append-only mutations (1766.320602ms)
|
||||
✔ gated approval authorizes once, survives store reopen, and fresh approval works (386.057154ms)
|
||||
✔ another run cannot consume an approval; a failed check leaves it usable (402.945256ms)
|
||||
✔ two scheduled callers have exactly one grant and one consumed refusal (274.267909ms)
|
||||
✔ failed commit rolls consumption back; cross-role consumes and within-role stays reusable (600.084673ms)
|
||||
✔ class drift gated to cross-role refuses before consumption (391.791192ms)
|
||||
✔ class drift cross-role to gated refuses before consumption (340.330132ms)
|
||||
✔ class drift gated to within-role refuses before consumption (227.877646ms)
|
||||
✔ class drift cross-role to within-role refuses before consumption (282.209668ms)
|
||||
✔ class drift within-role to gated refuses before consumption (198.278025ms)
|
||||
✔ class drift within-role to cross-role refuses before consumption (481.680122ms)
|
||||
✔ message.send consumes approval and prevents a later send or authorize (242.199767ms)
|
||||
✔ role.revoke consumes approval and prevents a later revoke or authorize (208.064707ms)
|
||||
✔ creates private WAL store and excludes a second writer until explicit close (170.30296ms)
|
||||
✔ rollback is atomic and schema metadata is checked against trusted DDL, not just itself (294.171606ms)
|
||||
✔ existing empty database and symlink runtime directory refuse, never initialize over damage (324.314159ms)
|
||||
✔ crash during a transaction recovers no partial event after explicit fixture-only lock removal (266.274964ms)
|
||||
✔ writer refuses mixed at/read_at forms atomically, even through trusted SQL helpers (283.014865ms)
|
||||
✔ async transactions refuse before invoking their function (186.302733ms)
|
||||
✔ recordTask keeps sync reads and a role write apart (248.021791ms)
|
||||
✔ read_at must be one canonical UTC format, so the projection compares strings safely (183.061837ms)
|
||||
✔ a bad entry refuses the whole record (203.123255ms)
|
||||
✔ taskView reads the projection for one business (187.279126ms)
|
||||
✔ requestTask hands only a holder and a task verb to the handler, and records refusals (506.610296ms)
|
||||
✔ the server sends task verbs to the adapter with its own timeout; other verbs stay synchronous (511.4966ms)
|
||||
✔ without an adapter the server refuses every task verb (427.506996ms)
|
||||
✔ the runtime refuses an invalid adapter and closes a valid one (281.415721ms)
|
||||
✔ the process loads the S3 adapter from plain-data trackers (301.335615ms)
|
||||
✔ socket capability stamps launch identity; shared views use wire, no SQL client (221.529429ms)
|
||||
✔ two wire claims serialize; a lost reply never automatically retries (338.606324ms)
|
||||
✔ malformed, oversized and identity-forging envelopes refuse without echoing input (163.296596ms)
|
||||
✔ client preserves UTF-8 when a response divides a multibyte character (16.065369ms)
|
||||
✔ committed mutation followed by dropped reply reports unknown and is never retried (193.337359ms)
|
||||
ℹ tests 74
|
||||
ℹ suites 0
|
||||
ℹ pass 74
|
||||
ℹ fail 0
|
||||
ℹ cancelled 0
|
||||
ℹ skipped 0
|
||||
ℹ todo 0
|
||||
ℹ duration_ms 4202.497194
|
||||
@@ -0,0 +1,68 @@
|
||||
✔ config directory and file path follow MOSAIC_CONFIG (2.848351ms)
|
||||
✔ the fixture business validates and comes back frozen (38.438289ms)
|
||||
✔ two instances may share a definition (4.985988ms)
|
||||
✔ top-level refusals (15.573259ms)
|
||||
✔ arbiters and projects (14.939897ms)
|
||||
✔ role instances (9.446596ms)
|
||||
✔ Vikunja bots (12.111196ms)
|
||||
✔ a role without Vikunja takes no tracker block (5.556326ms)
|
||||
✔ credential references match the definition's services (18.578185ms)
|
||||
✔ launch (40.298298ms)
|
||||
✔ loadBusiness: file checks (17.280922ms)
|
||||
✔ loadBusiness: not a regular file (151.91495ms)
|
||||
✔ loading writes nothing (4.18165ms)
|
||||
✔ names that are Object.prototype properties don't count as declared (9.614905ms)
|
||||
✔ the shipped example refuses as written and validates once filled in (1.581714ms)
|
||||
✔ usage errors exit 4 (685.533424ms)
|
||||
✔ validate: a good business exits 0 and prints instance digests (100.237294ms)
|
||||
✔ validate: project files (510.346462ms)
|
||||
✔ validate: missing files and a broken system config (408.670972ms)
|
||||
✔ validate: credential reference problems exit 2 and name each one (108.704355ms)
|
||||
✔ validate: a token file inside the repository is refused (108.455448ms)
|
||||
✔ validate: role definitions come from MOSAIC_ROLES_DIR (317.775665ms)
|
||||
✔ resolve: prints one instance's record (323.99734ms)
|
||||
✔ resolve: refusals (597.461021ms)
|
||||
✔ parse: exactly one of file or env, plus the service's date (4.801613ms)
|
||||
✔ check: a good file has no problems (14.046213ms)
|
||||
✔ check never opens the file: a write-only token passes (0.660342ms)
|
||||
✔ check: file problems (1.637196ms)
|
||||
✔ check: token files can't live in the repository or dataRoot, even through a linked directory (6.311826ms)
|
||||
✔ check: dates and environment references (0.767415ms)
|
||||
✔ path and load (30.032437ms)
|
||||
✔ refusals (14.888956ms)
|
||||
✔ systemVars flattens the validated config (3.618812ms)
|
||||
✔ precedence: system, business, project, project role, agent (8.824697ms)
|
||||
✔ limits narrow the definition and never widen it (4.797614ms)
|
||||
✔ role.launch stays within-role only for the instance the launch block names (15.636871ms)
|
||||
✔ limits.authority without role.launch leaves the launcher with no launch block (6.532983ms)
|
||||
✔ limits.authority narrows cross-role actions too (3.042241ms)
|
||||
✔ classify (3.151387ms)
|
||||
✔ the record carries what the broker and launcher need (2.556793ms)
|
||||
✔ digest: key order doesn't matter, any value change does (67.721665ms)
|
||||
✔ refusals (42.31728ms)
|
||||
✔ the four shipped version 2 roles load (5.044342ms)
|
||||
✔ shipped role scopes match addendum B section 2 and the SR runbook (2.371647ms)
|
||||
✔ shipped authority follows the note's table (0.895367ms)
|
||||
✔ version 1 files keep loading with no authority (3.271035ms)
|
||||
✔ the conductor policy isn't a role (0.459604ms)
|
||||
✔ a missing role file is exit 4, a symbolic link too (0.9243ms)
|
||||
✔ version 2 refusals (2.45245ms)
|
||||
✔ authority: closed vocabulary, no gated-only action, no overlap (4.053667ms)
|
||||
✔ credentials: Gitea scopes (4.751198ms)
|
||||
✔ credentials: Vikunja scopes are a group-to-verbs map from the grantable list (2.514347ms)
|
||||
✔ credentials: services (1.082643ms)
|
||||
✔ contract: a non-empty regular Markdown file beside the role file (1.531355ms)
|
||||
✔ every key names known layers and a merge rule (2.114061ms)
|
||||
✔ unknown keys and wrong layers refuse (1.394641ms)
|
||||
✔ types (3.523914ms)
|
||||
✔ merge: defaults, then the most specific layer wins (0.571531ms)
|
||||
✔ merge: limits only narrow, and provenance lists each source (0.556813ms)
|
||||
✔ merge doesn't change its inputs (0.682966ms)
|
||||
ℹ tests 60
|
||||
ℹ suites 0
|
||||
ℹ pass 60
|
||||
ℹ fail 0
|
||||
ℹ cancelled 0
|
||||
ℹ skipped 0
|
||||
ℹ todo 0
|
||||
ℹ duration_ms 3285.96556
|
||||
@@ -0,0 +1,93 @@
|
||||
✔ inbox lists only decisions routed to the human, with what approving authorizes and how to decide (243.295827ms)
|
||||
✔ decide resolves by id prefix with --yes, and the trail shows it in broker order with the task to follow (189.071888ms)
|
||||
✔ decide refuses without a terminal or --yes, on an unknown option and on a short reference (146.01894ms)
|
||||
✔ decide prints a declining choice as declining (139.95998ms)
|
||||
✔ an unknown outcome is reported once and never resent (111.046439ms)
|
||||
✔ a decision closed before the answer arrives exits 2 and points at its trail (121.224944ms)
|
||||
✔ a prefix that matches two open decisions exits 2 and resolves neither (140.654613ms)
|
||||
✔ without --business a command uses the live host's business, and a stale host.json is not a host (102.510429ms)
|
||||
✔ every human command refuses inside an agent run before it touches the bus (81.10258ms)
|
||||
✔ usage errors exit 4; no business and no host is a usage error (117.127277ms)
|
||||
✔ agents and tasks print through the broker (216.831611ms)
|
||||
✔ notify.json: missing, loose, malformed and extra keys refuse; a binding or null passes (5.142126ms)
|
||||
✔ bootConfig builds the broker's boot message for one business, with no trackers key when no project names one (90.196977ms)
|
||||
✔ trackers come from the tracker.* variables of the one project that names a tracker project (112.216406ms)
|
||||
✔ with two projects, the one that sets tracker.project supplies the tracker and the other is no conflict (46.353189ms)
|
||||
✔ two projects that each name a tracker project refuse, since the boot shape holds one (44.703145ms)
|
||||
✔ a business without tracker.baseUrl gets no trackers entry (45.759211ms)
|
||||
✔ an unknown business and a broken system config refuse with exit 3 (97.641512ms)
|
||||
✔ empty views say so (1.390106ms)
|
||||
✔ the trail keeps the broker's order and names a decision's task without its rows (1.518535ms)
|
||||
✔ tasks print the tracker fields the snapshot carries (0.322287ms)
|
||||
✔ the host boots the broker, binds a launch in process, and the notifier DMs a blocking decision exactly once (1080.334885ms)
|
||||
✔ a notifier that dies takes the host down with exit 1, so the unit restarts the pair (277.169937ms)
|
||||
✔ a second host for the same data root refuses with exit 3 while the first runs (321.92585ms)
|
||||
✔ a broker reply that misses the wait breaks the channel: the late reply answers nothing, later requests refuse, the host exits 1 (1348.009528ms)
|
||||
✔ a broker reply with another request's id, or none, breaks the channel and the host exits 1 (394.60645ms)
|
||||
✔ a broker reply with no request waiting breaks the channel and the host exits 1 (226.991929ms)
|
||||
✔ a notifier that refuses stops the broker and the host refuses with exit 3 (292.036695ms)
|
||||
✔ a notifier that refuses after the broker died still refuses with exit 3, without a send to the dead broker (239.157285ms)
|
||||
✔ a notifier that dies before it replies, after the broker died, still refuses, without a send to the dead broker (139.568023ms)
|
||||
✔ a close send that fails with EPIPE after the notifier refuses still gives the notifier's refusal, exit 3 (208.017712ms)
|
||||
✔ a close send that fails with EPIPE after the notifier dies unanswered still gives the notifier's error (189.031877ms)
|
||||
✔ close() whose stop and close sends fail with EPIPE still finishes, with exit 1 (225.30536ms)
|
||||
✔ watchChildren reports a child that died before it was called, and one that dies later (28.891377ms)
|
||||
✔ bus stop refuses to signal a live pid that is not a bus host (203.296479ms)
|
||||
✔ bus start refuses with exit 3 and the code when the broker refuses to boot; bus status names the lock (317.654195ms)
|
||||
✔ bus start refuses with exit 3 without a notifier config (122.953483ms)
|
||||
✔ bus start runs until bus stop; status reports it while it runs (836.163088ms)
|
||||
✔ bus-service.sh renders the unit and installs it into a given directory (45.822113ms)
|
||||
✔ bus start --pm: the PM runs under its own PID namespace, registered, with a manifest (1400.86653ms)
|
||||
✔ the PM launches a coder through its launch tool; the coder answers; refusals name their code (1247.605114ms)
|
||||
✔ a runner that stops at once ends its launch with the runner's reason (248.884842ms)
|
||||
✔ a host that died hard leaves its sessions to the next host, which kills them and ends their runs so the role can be launched again (1002.975701ms)
|
||||
✔ a host that died hard leaves its sessions to the next host, which finds one already exited (23) and ends their runs so the role can be launched again (3815.570834ms)
|
||||
✔ a malformed sessions.json refuses the host start with exit 3 and stays as it was (214.061284ms)
|
||||
✔ an over-long launch request is refused at once, not at the 10 s idle timeout (150.366959ms)
|
||||
✔ a launch client that never closes its side doesn't hold the host's close (164.53907ms)
|
||||
✔ a runner that ignores SIGTERM is killed when the host closes (1317.405262ms)
|
||||
✔ zoned uses the IANA zone across DST (41.143292ms)
|
||||
✔ each open blocking decision is DM'd once, across polls and a restart; non-blocking ones are not (259.674743ms)
|
||||
✔ two blocking decisions get two DMs with different nonces (155.486762ms)
|
||||
✔ the digest nonce differs per business and per day and fits Discord's 25 characters (0.38307ms)
|
||||
✔ a failed DM is journaled, backs off, and is retried until it lands (146.199866ms)
|
||||
✔ five definite refusals stop a DM: one gave-up line, one log line, and a restart keeps the count (143.132605ms)
|
||||
✔ 429s, 5xx-style unknowns and refusals without a status never count toward the limit (124.186841ms)
|
||||
✔ a crash between the fifth refusal and its gave-up line: the next poll appends it and sends nothing (147.572487ms)
|
||||
✔ polled every POLL_MS against a permanent 403, a DM is sent at 0, 30, 60, 90 and 120 min and gives up only then (214.561955ms)
|
||||
✔ a restart after the second refusal does not send before that refusal's 30 min are up (125.378767ms)
|
||||
✔ the digest goes at 08:00 Chicago once a day, with blocking ones marked as DM'd (301.025846ms)
|
||||
✔ a late start with no digest for the day sends one at once; an empty inbox gets one line (243.748228ms)
|
||||
✔ an inbox read failure is logged and the next poll retries (1.354297ms)
|
||||
✔ no Discord id reaches the journal or the log (223.052008ms)
|
||||
✔ the journal: a torn tail is copied out and truncated, so an append after it reopens cleanly (43.903741ms)
|
||||
✔ the journal: a crash between the copy and the truncate leaves a tail the next open repairs (87.99139ms)
|
||||
✔ the journal: a whole file that is one torn line truncates to empty (134.022562ms)
|
||||
✔ the journal: a malformed complete line refuses and leaves the file and any torn tail alone (6.709958ms)
|
||||
✔ the journal: a loose file mode, a loose directory or a symlinked journal refuses (1.707582ms)
|
||||
✔ the journal: a line with a wrong type refuses with exit 3 and names the field (50.099977ms)
|
||||
✔ the journal: a symlinked directory refuses and says it is a link (0.658324ms)
|
||||
✔ the journal: a dangling directory link, a parent that is a file and a journal that is a directory each refuse with exit 3 (0.821595ms)
|
||||
✔ the journal: an append after the file was swapped for a symlink refuses and writes nothing through it (0.649684ms)
|
||||
✔ the journal: a directory it cannot write or create refuses with exit 3 and names the path (0.770337ms)
|
||||
✔ digest content stays within Discord's 2000 characters (0.5096ms)
|
||||
✔ runLoop never overlaps ticks and stops after the one in flight (110.894961ms)
|
||||
task.close {} answered: invalid-request; fake saw 18 requests, first GET /info 200, GET /projects/1 200, GET /projects/1/views 200
|
||||
task.close on a missing task answered: task-not-found; it made GET /tasks/999 404
|
||||
✔ bootConfig trackers reach the S3 adapter in the real broker child, which goes ready against a fake Vikunja (547.545108ms)
|
||||
✔ the transport writes {business, verb, args} to the child and reads its JSON (72.833567ms)
|
||||
✔ a bus code on stderr becomes the exit code; garbage and timeouts are outcome problems (2235.327071ms)
|
||||
✔ busExit and refuseInsideAgent (0.656759ms)
|
||||
✔ talk sends a REQUEST, prints and reads everything that arrives, and stops at the reply (355.542292ms)
|
||||
✔ talk --wait 0 only sends; no reply within --wait exits 1 and says where it will show (1156.500378ms)
|
||||
✔ talk, stop and launches off/on refuse inside an agent run; bad arguments are usage errors (226.331905ms)
|
||||
✔ launches off and on go to the broker and change the business's launch state (276.154196ms)
|
||||
✔ launches list reads sessions.json and marks a stale entry; stop reports it and refuses a non-runner (190.755404ms)
|
||||
ℹ tests 83
|
||||
ℹ suites 0
|
||||
ℹ pass 83
|
||||
ℹ fail 0
|
||||
ℹ cancelled 0
|
||||
ℹ skipped 0
|
||||
ℹ todo 0
|
||||
ℹ duration_ms 9694.655934
|
||||
+14
@@ -0,0 +1,14 @@
|
||||
#!/bin/bash
|
||||
export TMPDIR=~/darkwing-scratch/r62/tmp
|
||||
G=~/darkwing-scratch/r62/gate; O=~/darkwing-scratch/r62/out; mkdir -p $O; rm -f $O/summary.txt; cd $G
|
||||
# node_modules is a link to the main checkout's, as in the row 55 gate; test-discord needs node_modules/.bin/pi.
|
||||
[ -x node_modules/.bin/pi ] || { echo "node_modules not linked" >> $O/summary.txt; exit 1; }
|
||||
for s in tasks business bus cli; do
|
||||
env -u NODE_TEST_CONTEXT node --test "packages/$s/tests/*.test.mjs" > $O/$s-tests.log 2>&1; echo "$s rc=$?" >> $O/summary.txt
|
||||
done
|
||||
for s in scripts/test-*.sh; do
|
||||
n=$(basename $s .sh)
|
||||
if [ $n = test-task ]; then DOCKER_HOST=unix:///nonexistent bash $s > $O/$n.log 2>&1; else bash $s > $O/$n.log 2>&1; fi
|
||||
echo "$n rc=$?" >> $O/summary.txt
|
||||
done
|
||||
echo DONE >> $O/summary.txt
|
||||
@@ -0,0 +1,14 @@
|
||||
tasks rc=0
|
||||
business rc=0
|
||||
bus rc=0
|
||||
cli rc=0
|
||||
test-auth rc=0
|
||||
test-conductor rc=0
|
||||
test-config rc=0
|
||||
test-discord rc=0
|
||||
test-extension-package rc=0
|
||||
test-foundation rc=0
|
||||
test-queue rc=0
|
||||
test-release rc=0
|
||||
test-task rc=0
|
||||
DONE
|
||||
@@ -0,0 +1,71 @@
|
||||
✔ the boot config is checked before anything starts (104.416076ms)
|
||||
✔ a business with no tracker entry refuses task verbs (130.611086ms)
|
||||
✔ credential.expiring and .expired are recorded once per instance (279.889027ms)
|
||||
✔ a token file that changes on disk records credential.changed (208.764269ms)
|
||||
✔ autostart polls, reconciles and retries a startup the tracker was down for (246.807203ms)
|
||||
✔ a refusal a restart must clear is not retried by the poll (114.25003ms)
|
||||
✔ a poll that fires while two are queued is dropped (139.221689ms)
|
||||
✔ close waits for a running verb and refuses one that has not started (288.167564ms)
|
||||
✔ the bundled Vikunja is the pinned upstream image the runbook names (1.586814ms)
|
||||
✔ every published port is on 127.0.0.1, and no secret is in the file (0.644421ms)
|
||||
✔ the fake answers each route with the statuses and shapes Vikunja v2.7.0 sent (409.424478ms)
|
||||
✔ the project list holds recorded project objects in the recorded list envelope (157.698384ms)
|
||||
✔ the recorded task bodies pass the checks S3 applies to every read (0.763433ms)
|
||||
✔ the client works against the fake over real HTTP with the platform fetch (537.56183ms)
|
||||
✔ a correct install starts, and the first reconcile records tasks that already exist (120.574047ms)
|
||||
✔ verbs refuse while a business is starting and after startup refused it (145.811034ms)
|
||||
✔ startup refuses a token that can do more than its role needs (632.395388ms)
|
||||
✔ startup refuses an unsupported version and flags an untested one (368.034205ms)
|
||||
✔ startup refuses a board that the runbook did not install (499.056967ms)
|
||||
✔ startup refuses a project the sync bot cannot read (155.060339ms)
|
||||
✔ startup refuses a configured label the pm bot cannot see (227.668874ms)
|
||||
✔ startup refuses an expired credential and a missing sync credential (365.899809ms)
|
||||
✔ an unreachable tracker refuses with tracker-unavailable (246.733826ms)
|
||||
✔ an edit in the UI is recorded once, with the fields that changed (239.895408ms)
|
||||
✔ a move between open buckets is seen on the board, though updated does not change (213.821318ms)
|
||||
✔ a person's comment is counted and a bot's is not (483.335126ms)
|
||||
✔ the hourly reconcile catches a comment through comment_count (264.005482ms)
|
||||
✔ a task closed in the UI leaves the open view with its done bucket (570.154722ms)
|
||||
✔ a task that leaves the board is recorded as deleted, moved or out of reach (536.585697ms)
|
||||
✔ a poll that read before a verb wrote does not overwrite the verb (435.391707ms)
|
||||
✔ a tracker fault during a tick is reported and the next tick catches up (597.848081ms)
|
||||
✔ a malformed answer refuses the tick with tracker-shape (556.19897ms)
|
||||
✔ no token value reaches the database, the log or a refusal (876.126984ms)
|
||||
✔ the first look at a task counts only comments inside the window (607.031588ms)
|
||||
✔ with descendants off the adapter reads no project list and no child, as in v0 (155.493456ms)
|
||||
✔ a three-level tree is read per project, and a project outside it is not (150.614393ms)
|
||||
✔ a watch-only child keeps the business ready, and a failed child read refuses as transient (315.51776ms)
|
||||
✔ a root without the installed buckets refuses with descendants on (207.162752ms)
|
||||
✔ the project list refuses without read_all, and skips archived projects and saved filters (270.37371ms)
|
||||
✔ descendants must be true or false (128.628273ms)
|
||||
✔ a move inside the tree is a moved tombstone plus a snapshot under the new ref (246.375569ms)
|
||||
✔ a child made after startup joins the tree at the next reconcile (233.25224ms)
|
||||
✔ a child that leaves the tree has its tasks recorded missing, and the ledger keeps their history (254.204244ms)
|
||||
✔ a task in a bucket outside the five keeps its raw bucket id (295.854549ms)
|
||||
✔ bucket 0 on a watch-only task never becomes a bucket or a state (488.248057ms)
|
||||
✔ task.create needs a recorded human request and a requirement id (240.304486ms)
|
||||
✔ only labels named in the business file can be written (290.929905ms)
|
||||
✔ task.schedule sets and clears a due date and relations (517.445508ms)
|
||||
✔ assign and reassign move the role bots and record task.assigned (426.774157ms)
|
||||
✔ task.update.assigned is for the assignee and records task.state (416.845053ms)
|
||||
✔ a wrong expected digest records task.conflict and writes nothing (443.969427ms)
|
||||
✔ a cross-role verb needs a resolved decision, used once (873.662032ms)
|
||||
✔ task.close needs a verdict; after it every verb refuses with task-done (1012.441292ms)
|
||||
✔ a lost answer is settled by a re-read and never retried (877.307177ms)
|
||||
✔ a create whose answer is lost is reported uncertain, and the poll finds the task (2200.018372ms)
|
||||
✔ a task the sync bot cannot read refuses and records nothing (2699.391581ms)
|
||||
✔ verbs and polls for one business run one at a time (1530.611798ms)
|
||||
✔ a due date with milliseconds is written to the second (2348.684349ms)
|
||||
✔ every write landed and the final read failed: the verb succeeds and records what it wrote (1049.370857ms)
|
||||
✔ some writes landed and the final read failed: write-uncertain, and nothing is recorded (1037.216419ms)
|
||||
✔ a create whose final read fails succeeds and records task.created (791.827816ms)
|
||||
✔ an edit between the last write and the final read shows as external on the next poll (591.740537ms)
|
||||
✔ task.created is recorded when a later label write fails (311.053548ms)
|
||||
ℹ tests 63
|
||||
ℹ suites 0
|
||||
ℹ pass 63
|
||||
ℹ fail 0
|
||||
ℹ cancelled 0
|
||||
ℹ skipped 0
|
||||
ℹ todo 0
|
||||
ℹ duration_ms 17824.523183
|
||||
@@ -0,0 +1,17 @@
|
||||
OK status with missing harness credential exits 3 and still lists accounts
|
||||
OK status reports harness credential (read-only) + mosaic accounts
|
||||
OK api key material never reaches output
|
||||
OK oauth token material never reaches output
|
||||
OK unparseable credential file exits 2
|
||||
OK symlinked credential file exits 4
|
||||
OK env-side credential names reported
|
||||
OK env var values never reach output
|
||||
OK accounts without an accounts dir reports none and creates nothing
|
||||
OK accounts lists files and marks the active one
|
||||
OK loose account perms flagged in listing
|
||||
OK agent --auth with missing account file refuses (exit 4)
|
||||
OK agent --auth with non-0600 account file refuses
|
||||
OK agent --auth with invalid account name refuses
|
||||
OK auth.sh without valid config refuses
|
||||
|
||||
selftest: 15 passed, 0 failed
|
||||
@@ -0,0 +1,55 @@
|
||||
Note: switching to '6ae8b844231244830b8b09e0a2ef4b325644ffca'.
|
||||
|
||||
You are in 'detached HEAD' state. You can look around, make experimental
|
||||
changes and commit them, and you can discard any commits you make in this
|
||||
state without impacting any branches by switching back to a branch.
|
||||
|
||||
If you want to create a new branch to retain commits you create, you may
|
||||
do so (now or later) by using -c with the switch command. Example:
|
||||
|
||||
git switch -c <new-branch-name>
|
||||
|
||||
Or undo this operation with:
|
||||
|
||||
git switch -
|
||||
|
||||
Turn off this advice by setting config variable advice.detachedHead to false
|
||||
|
||||
Not currently on any branch.
|
||||
nothing to commit, working tree clean
|
||||
Note: switching to '6ae8b844231244830b8b09e0a2ef4b325644ffca'.
|
||||
|
||||
You are in 'detached HEAD' state. You can look around, make experimental
|
||||
changes and commit them, and you can discard any commits you make in this
|
||||
state without impacting any branches by switching back to a branch.
|
||||
|
||||
If you want to create a new branch to retain commits you create, you may
|
||||
do so (now or later) by using -c with the switch command. Example:
|
||||
|
||||
git switch -c <new-branch-name>
|
||||
|
||||
Or undo this operation with:
|
||||
|
||||
git switch -
|
||||
|
||||
Turn off this advice by setting config variable advice.detachedHead to false
|
||||
|
||||
OK dry-run: allowed change, exit 0, nothing committed (exit 0)
|
||||
OK dry-run committed nothing
|
||||
OK apply: allowed change exits 0 (exit 0)
|
||||
OK apply: attribution in commit subject
|
||||
OK apply: target tree clean after commit
|
||||
OK disallowed path refused (exit 1)
|
||||
OK disallowed path: target untouched
|
||||
OK syntax gate refused broken .mjs (exit 1)
|
||||
OK syntax gate: target untouched
|
||||
OK suite failure refused (exit 1)
|
||||
OK suite failure: target reverted to clean
|
||||
OK disabled policy refused (exit 2)
|
||||
OK disabled policy: target untouched
|
||||
OK failed run refused (exit 1)
|
||||
OK failed run: target untouched
|
||||
OK missing run exits 4 (exit 4)
|
||||
OK invalid policy exits 2 (exit 2)
|
||||
|
||||
selftest: 17 passed, 0 failed
|
||||
@@ -0,0 +1,26 @@
|
||||
OK absent adapter defaults to pi
|
||||
OK adapter mock validates (exit 0)
|
||||
OK unsupported adapter exits 2 (exit 2)
|
||||
OK env exports adapter
|
||||
OK bootstrap creates default when absent (exit 0)
|
||||
OK bootstrap wrote config file
|
||||
OK bootstrap is idempotent on existing config (exit 0)
|
||||
OK bootstrap did not rewrite existing config
|
||||
OK validate missing config exits 3 (exit 3)
|
||||
OK malformed JSON exits 2 (exit 2)
|
||||
OK unsupported configVersion exits 2 (exit 2)
|
||||
OK unknown top-level key exits 2 (exit 2)
|
||||
OK unknown execution key exits 2 (exit 2)
|
||||
OK unsupported backend exits 2 (exit 2)
|
||||
OK unsupported environment exits 2 (exit 2)
|
||||
OK relative dataRoot exits 2 (exit 2)
|
||||
OK non-canonical dataRoot exits 2 (exit 2)
|
||||
OK filesystem root dataRoot exits 2 (exit 2)
|
||||
OK home directory dataRoot exits 2 (exit 2)
|
||||
OK dataRoot containing config dir exits 2 (exit 2)
|
||||
OK control character in provider exits 2 (exit 2)
|
||||
OK symlinked config file exits 2 (exit 2)
|
||||
OK env exports resolve correctly
|
||||
OK failed validation modified nothing
|
||||
|
||||
selftest: 24 passed, 0 failed
|
||||
@@ -0,0 +1,70 @@
|
||||
toolchain: node v26.8.1
|
||||
|
||||
OK syntax: packages/discord/src/approvals.mjs
|
||||
OK syntax: packages/discord/src/authorize.mjs
|
||||
OK syntax: packages/discord/src/binding.mjs
|
||||
OK syntax: packages/discord/src/cli.mjs
|
||||
OK syntax: packages/discord/src/connector.mjs
|
||||
OK syntax: packages/discord/src/context.mjs
|
||||
OK syntax: packages/discord/src/engine-pi.mjs
|
||||
OK syntax: packages/discord/src/errors.mjs
|
||||
OK syntax: packages/discord/src/gateway.mjs
|
||||
OK syntax: packages/discord/src/git.mjs
|
||||
OK syntax: packages/discord/src/journal.mjs
|
||||
OK syntax: packages/discord/src/notify.mjs
|
||||
OK syntax: packages/discord/src/rest.mjs
|
||||
OK syntax: packages/discord/src/setspark.mjs
|
||||
OK syntax: packages/discord/src/tools.mjs
|
||||
OK syntax: packages/discord/src/web.mjs
|
||||
OK syntax: packages/discord/bin/git-credential.mjs
|
||||
OK syntax: packages/discord/extension/tools.mjs
|
||||
OK syntax: packages/discord/tests/approvals.test.mjs
|
||||
OK syntax: packages/discord/tests/authorize.test.mjs
|
||||
OK syntax: packages/discord/tests/binding.test.mjs
|
||||
OK syntax: packages/discord/tests/connector.test.mjs
|
||||
OK syntax: packages/discord/tests/context.test.mjs
|
||||
OK syntax: packages/discord/tests/engine.test.mjs
|
||||
OK syntax: packages/discord/tests/fake-pi.mjs
|
||||
OK syntax: packages/discord/tests/gateway.test.mjs
|
||||
OK syntax: packages/discord/tests/git.test.mjs
|
||||
OK syntax: packages/discord/tests/helpers.mjs
|
||||
OK syntax: packages/discord/tests/journal.test.mjs
|
||||
OK syntax: packages/discord/tests/notify.test.mjs
|
||||
OK syntax: packages/discord/tests/recover.test.mjs
|
||||
OK syntax: packages/discord/tests/rest.test.mjs
|
||||
OK syntax: packages/discord/tests/setspark.test.mjs
|
||||
OK syntax: packages/discord/tests/tools.test.mjs
|
||||
OK syntax: packages/discord/tests/web.test.mjs
|
||||
OK syntax: packages/discord/fixtures/claim-worker.mjs
|
||||
OK syntax: packages/discord/fixtures/legacy-owner-worker.mjs
|
||||
OK syntax: scripts/discord.sh
|
||||
OK syntax: scripts/discord-service.sh
|
||||
OK packages/discord declares no dependencies
|
||||
OK no bot-token-shaped string in packages/discord
|
||||
OK fixture binding uses placeholder ids only
|
||||
OK fixture binding validates
|
||||
OK real pi with the extension exposes exactly list_dir, read_file, search and no built-in tool
|
||||
OK real pi with a writable root exposes exactly the three reads plus write_file and edit_file, and writes nothing at start
|
||||
OK real pi with a web key exposes the three reads plus web_fetch and web_search, and no write tool without a writable root
|
||||
OK real pi with a git root exposes the reads, writes and the four git verbs, commits nothing at start, and never shows the token
|
||||
OK real pi with protocol vault adds reserve_id to the git verbs
|
||||
OK real pi with a setspark key exposes the reads and the eight record verbs, no counters, and never shows the key
|
||||
OK real pi refuses a git key on a read-only root (fail closed)
|
||||
OK real pi with the pilot flags (--no-tools) exposes no tool at all
|
||||
OK real pi exits non-zero without MOSAIC_DISCORD_TOOLS: no session, no tools (fail closed)
|
||||
OK a failing nested test fails the run under a parent runner's NODE_TEST_CONTEXT
|
||||
OK node --test packages/discord/tests/ (ℹ pass 178)
|
||||
OK scripts/discord.sh --help exits 0
|
||||
OK scripts/discord.sh check without a binding exits 4
|
||||
OK scripts/discord.sh recover without a binding exits 4
|
||||
OK scripts/discord.sh reload without a binding exits 4
|
||||
OK scripts/discord-service.sh without a command exits 4
|
||||
OK service unit renders with the repository path, a supervised run as the main process, exit 3 never retried, and reload as SIGHUP
|
||||
OK service install writes the rendered unit (0644) and leaves no temp file
|
||||
OK service install a second time reports unchanged
|
||||
OK systemd-analyze verify accepts the rendered unit
|
||||
OK service uninstall removes the unit file
|
||||
OK service install with an unknown flag exits 4
|
||||
OK service install with USER unset finishes and names the account for lingering
|
||||
|
||||
discord suite: 66 passed, 0 failed
|
||||
@@ -0,0 +1,21 @@
|
||||
OK initial ordinary-file install
|
||||
OK installed tree matches canonical source
|
||||
OK installed tree has no symlinks
|
||||
OK check detects installation drift
|
||||
OK sync refuses to overwrite installation drift
|
||||
OK check detects an extra destination file
|
||||
OK check detects an extra destination directory
|
||||
OK check rejects a destination symlink
|
||||
OK sync accepts a canonical source update
|
||||
OK updated installation matches canonical source
|
||||
scripts/test-extension-package.sh: line 14: 2151932 Killed "$@" > /dev/null 2>&1
|
||||
OK forced interruption kills the replacing process
|
||||
OK next invocation recovers old consistent installation
|
||||
OK interrupted replacement rolled back
|
||||
OK sync succeeds after interruption recovery
|
||||
OK unlocked stale lock file does not block
|
||||
OK active lock refuses a concurrent sync
|
||||
OK source symlink fails closed
|
||||
OK nested second entrypoint fails closed
|
||||
|
||||
extension package selftest: 18 passed, 0 failed
|
||||
@@ -0,0 +1,53 @@
|
||||
toolchain: node v26.8.1, python 3.12.8, jsonschema 4.26.0
|
||||
|
||||
OK syntax: scripts/foundation-inspect.mjs
|
||||
OK syntax: scripts/foundation/strict-json.mjs
|
||||
OK syntax: scripts/foundation/canonical.mjs
|
||||
OK syntax: scripts/foundation/resolve.mjs
|
||||
OK syntax: scripts/foundation/validate-record.mjs
|
||||
OK syntax: scripts/foundation/fixtures/build-fixtures.mjs
|
||||
OK syntax: scripts/foundation/canonical.test.mjs
|
||||
OK syntax: scripts/foundation/cli.test.mjs
|
||||
OK syntax: scripts/foundation/fixtures.test.mjs
|
||||
OK syntax: scripts/foundation/resolve.test.mjs
|
||||
OK syntax: scripts/foundation/strict-json.test.mjs
|
||||
OK syntax: scripts/foundation/verify-schema.py (ast only; no bytecode written)
|
||||
OK fixture generator runs
|
||||
OK checked-in fixtures/bundles equal a fresh generation
|
||||
OK checked-in fixtures/raw equal a fresh generation
|
||||
OK checked-in fixtures/index.json equal a fresh generation
|
||||
OK checked-in demo bundles equal a fresh generation
|
||||
OK a failing nested test fails the run under a parent runner's NODE_TEST_CONTEXT
|
||||
OK node --test scripts/foundation/ (ℹ pass 80)
|
||||
OK differential schema oracle: PASS: differential schema oracle (finite corpus; compatibility evidence, not equivalence proof)
|
||||
platform witness: strftime('%Y') for year 999 -> '999' (pinned checker refuses years 0001..0999)
|
||||
node v26.8.1; corpus 1568 records (38 pinned fixtures, 478 unique bundle records, 1052 typeCase/mutation/lexical cases)
|
||||
schema column: agree-valid 540, agree-invalid 991, DISAGREEMENTS 0; strict-only (parser-bound) cases: 27; unsupported-kind records not schema-assessed by the inspector: 10
|
||||
profile column (schema-valid records only): profile-valid 510, profile-invalid 30
|
||||
profile refusals asserted: 30 schema-agreed-valid records refused only by the strict typed-string profile (rule profile-pattern-mismatch), 12 declared by name; 73 named probes verified against declared schema/profile columns
|
||||
OK oracle: zero schema-column disagreements with the pinned checker
|
||||
OK oracle: strict-only profile refusals are counted and asserted
|
||||
OK demo: permitted read preview exits 0 (exit 0)
|
||||
OK demo: permitted file.change preview exits 0 (exit 0)
|
||||
OK demo: assignment.change proposal is unresolved (exit 3) (exit 3)
|
||||
OK demo: revoked registration is refused (exit 3) (exit 3)
|
||||
OK demo: message is not authority (exit 3) (exit 3)
|
||||
OK usage: no arguments exits 2 (exit 2)
|
||||
OK io: missing file exits 4 (exit 4)
|
||||
OK io: directory exits 4 (exit 4)
|
||||
OK io: symlink exits 4 (O_NOFOLLOW) (exit 4)
|
||||
OK bound: oversize fixture exits 2 (exit 2)
|
||||
OK profile: one final LF in a typed selection id is refused before admission (exit 2) (exit 2)
|
||||
OK profile: two final LFs fail the schema pattern itself (exit 2) (exit 2)
|
||||
OK profile: escaped newlines in free-form text stay allowed (exit 0) (exit 0)
|
||||
OK profile refusal is invalid-request/profile-pattern-mismatch with selection and operation withheld, value not echoed
|
||||
OK text output starts with the disclaimer
|
||||
OK json output is valid JSON with result allowed and exactly the charter §7 fields
|
||||
OK json golden matches byte-for-byte
|
||||
OK sandboxed bundle run (env -i, PATH=/nonexistent) produced the unresolved proposal
|
||||
OK sandbox inventory (path/type/size/mode/uid/gid/inode/mtime/sha256) unchanged by runs
|
||||
OK canary never printed (bundle run and credential-file run)
|
||||
OK a non-bundle JSON file is refused at the shape gate, not read into output
|
||||
OK no field of the non-bundle file is echoed
|
||||
|
||||
selftest: 44 passed, 0 failed
|
||||
@@ -0,0 +1,35 @@
|
||||
toolchain: node v26.8.1, git version 2.55.0
|
||||
|
||||
OK syntax: packages/queue/src/cli.mjs
|
||||
OK syntax: packages/queue/src/errors.mjs
|
||||
OK syntax: packages/queue/src/io.mjs
|
||||
OK syntax: packages/queue/src/lock.mjs
|
||||
OK syntax: packages/queue/src/queue.mjs
|
||||
OK syntax: packages/queue/src/review.mjs
|
||||
OK syntax: packages/queue/src/store.mjs
|
||||
OK syntax: packages/queue/tests/commit.test.mjs
|
||||
OK syntax: packages/queue/tests/data.test.mjs
|
||||
OK syntax: packages/queue/tests/dispatch.test.mjs
|
||||
OK syntax: packages/queue/tests/helpers.mjs
|
||||
OK syntax: packages/queue/tests/lock.test.mjs
|
||||
OK syntax: packages/queue/tests/migration.test.mjs
|
||||
OK syntax: packages/queue/tests/review.test.mjs
|
||||
OK syntax: packages/queue/tests/store.test.mjs
|
||||
OK syntax: packages/queue/tests/write.test.mjs
|
||||
OK syntax: packages/queue/tests/fixtures/fake-gitea.mjs
|
||||
OK syntax: packages/queue/tests/fixtures/kill-at.mjs
|
||||
OK syntax: packages/queue/tests/fixtures/lock-child.mjs
|
||||
OK syntax: packages/queue/tests/fixtures/mosaic-pre-a2.sh
|
||||
OK syntax: scripts/queue-commit.sh
|
||||
OK syntax: scripts/git-hooks/pre-commit
|
||||
OK syntax: scripts/mosaic
|
||||
OK queue-commit.sh, the guard and scripts/mosaic are executable
|
||||
OK packages/queue declares no dependencies
|
||||
ℹ tests 149
|
||||
ℹ pass 149
|
||||
ℹ fail 0
|
||||
OK node --test packages/queue/tests/
|
||||
OK scripts/mosaic queue help
|
||||
skip queue verify and render --check: this checkout (/home/jwoltje/darkwing-scratch/r62/gate) is not the queue's canonical root (/mnt/storage/src/mosaic-stack)
|
||||
|
||||
queue suite: 27 passed, 0 failed
|
||||
@@ -0,0 +1,16 @@
|
||||
OK valid RELEASE resolves (exit 0)
|
||||
OK invalid RELEASE exits 1 (exit 1)
|
||||
OK missing RELEASE exits 1 (exit 1)
|
||||
OK valid RELEASE leaves image tag consistent with version
|
||||
OK status safe on empty state (exit 0)
|
||||
OK status created no pointer
|
||||
OK fault-injected activation refuses (exit 1)
|
||||
OK refused activation wrote no pointer
|
||||
OK refusal logged exactly once with valid fields
|
||||
OK healthy activation succeeds (exit 0)
|
||||
OK pointer written with valid fields
|
||||
OK repeat activation succeeds (log grows) (exit 0)
|
||||
OK log is append-only across activations
|
||||
OK rollback without previous refuses (exit 1)
|
||||
|
||||
selftest: 14 passed, 0 failed
|
||||
@@ -0,0 +1,32 @@
|
||||
OK valid task validates (exit 0)
|
||||
OK unknown task key exits 2 (exit 2)
|
||||
OK unsupported taskVersion exits 2 (exit 2)
|
||||
OK invalid task id exits 2 (exit 2)
|
||||
OK empty prompt exits 2 (exit 2)
|
||||
OK NUL in expectExact exits 2 (exit 2)
|
||||
OK out-of-range timeout exits 2 (exit 2)
|
||||
OK missing mission file exits 4 (exit 4)
|
||||
OK task with valid mission validates (exit 0)
|
||||
OK invalid mission exits 2 (exit 2)
|
||||
OK validate missing task exits 4 (exit 4)
|
||||
OK validation does not modify the task file
|
||||
OK prune dry-run exits 0 (exit 0)
|
||||
OK dry-run deleted nothing
|
||||
OK prune --keep=2 --yes removes oldest (exit 0)
|
||||
OK kept exactly 2 newest runs
|
||||
OK newest run kept, oldest pruned
|
||||
OK append-only receipt written (3 entries)
|
||||
OK sessions/workspaces untouched by prune
|
||||
OK prune with invalid keep exits 4 (exit 4)
|
||||
skip adapter seam cases (docker daemon unavailable)
|
||||
skip workspace/capability cases (docker daemon unavailable)
|
||||
skip live task cases (docker unavailable)
|
||||
OK onboard without name exits 4 (non-interactive) (exit 4)
|
||||
OK onboard --name renders profile (exit 0)
|
||||
OK profile written
|
||||
OK canon structure: required filled, optional placeholdered
|
||||
OK canon sections present
|
||||
skip live recall pair: user recall run, recalled user name (docker daemon unavailable)
|
||||
OK no agent identity on headless run
|
||||
|
||||
selftest: 26 passed, 0 failed
|
||||
@@ -0,0 +1,21 @@
|
||||
#!/bin/bash
|
||||
# Each mutant edits one source file in the build worktree, runs the tasks tests, then restores
|
||||
# the file from the worktree index (the candidate). Expect every mutant to fail at least one test.
|
||||
# The tasks tests run for each mutant; the cli tests too for the config.mjs one.
|
||||
export TMPDIR=~/darkwing-scratch/r62/tmp
|
||||
cd ~/darkwing-scratch/r62/build
|
||||
S=packages/tasks/src/sync.mjs; U=packages/tasks/src/startup.mjs
|
||||
run() { # name file sed-expr [test glob]
|
||||
sed -i "$3" "$2"
|
||||
if git diff --quiet -- "$2"; then echo "$1: MUTATION DID NOT APPLY"; return; fi
|
||||
node --test "${4:-packages/tasks/tests/*.test.mjs}" > ~/darkwing-scratch/r62/tmp/mut-$1.log 2>&1
|
||||
echo "$1: rc=$? $(grep -E '^ℹ (pass|fail) ' ~/darkwing-scratch/r62/tmp/mut-$1.log | tr '\n' ' ')"
|
||||
grep -E '^not ok|^# Subtest|✖ ' ~/darkwing-scratch/r62/tmp/mut-$1.log | grep -v '^ℹ' | sed 's/^/ /' | sort -u | head -8
|
||||
git checkout -q -- "$2"
|
||||
}
|
||||
run no-leave-tree-check $S 's/} else if (!ctx.tree.has(project)) {/} else if (false) {/'
|
||||
run no-watch-only-bucket $S 's/^const fieldsFor = .*/const fieldsFor = (task, bucket) => taskFields(task, bucket);/'
|
||||
run placed-by-id $S 's/placed.add(ref(project, id));/placed.add(id);/; s/.filter((r) => !placed.has(r));/.filter((r) => !placed.has(parseRef(r).task));/'
|
||||
run keep-archived $U 's/if (p.is_archived || p.id === ctx.project) continue;/if (p.id === ctx.project) continue;/'
|
||||
run config-drops-descendants packages/cli/src/config.mjs 's/ descendants: v\["tracker.descendants"\],/ descendants: false,/' 'packages/cli/tests/*.test.mjs'
|
||||
git diff --quiet -- $S $U packages/cli/src/config.mjs && echo "restored: sources match the candidate index"
|
||||
@@ -0,0 +1,20 @@
|
||||
no-leave-tree-check: rc=1 ℹ pass 62 ℹ fail 1
|
||||
✖ a child that leaves the tree has its tasks recorded missing, and the ledger keeps their history (160.370577ms)
|
||||
✖ failing tests:
|
||||
no-watch-only-bucket: rc=1 ℹ pass 58 ℹ fail 5
|
||||
✖ a child made after startup joins the tree at the next reconcile (149.827337ms)
|
||||
✖ a move inside the tree is a moved tombstone plus a snapshot under the new ref (162.487755ms)
|
||||
✖ a three-level tree is read per project, and a project outside it is not (149.484335ms)
|
||||
✖ a watch-only child keeps the business ready, and a failed child read refuses as transient (162.164514ms)
|
||||
✖ bucket 0 on a watch-only task never becomes a bucket or a state (133.187732ms)
|
||||
✖ failing tests:
|
||||
placed-by-id: rc=1 ℹ pass 62 ℹ fail 1
|
||||
✖ a move inside the tree is a moved tombstone plus a snapshot under the new ref (163.981091ms)
|
||||
✖ failing tests:
|
||||
keep-archived: rc=1 ℹ pass 62 ℹ fail 1
|
||||
✖ failing tests:
|
||||
✖ the project list refuses without read_all, and skips archived projects and saved filters (434.524613ms)
|
||||
config-drops-descendants: rc=1 ℹ pass 82 ℹ fail 1
|
||||
✖ failing tests:
|
||||
✖ trackers come from the tracker.* variables of the one project that names a tracker project (178.137587ms)
|
||||
restored: sources match the candidate index
|
||||
@@ -0,0 +1,165 @@
|
||||
# Row 62 probes: reading a Vikunja project tree
|
||||
|
||||
Row 62 (#1555) has the tasks adapter read a project and its descendants.
|
||||
No probe in this row touched a live Vikunja. Sage told me not to touch any
|
||||
board or project, live or scratch, during the build. The evidence below is
|
||||
the v2.7.0 source, Sage's live records, and the fake. Sage runs the reads
|
||||
in "Gate read" with the sync key at the gate.
|
||||
|
||||
## Source
|
||||
|
||||
Vikunja tag `v2.7.0`, commit `a16be96aa454671fdf213b0fbe411dd38a098418`,
|
||||
read from a local checkout. Paths are relative to the repository root.
|
||||
|
||||
### P1. The project list
|
||||
|
||||
`pkg/routes/api/v2/projects.go:39-46` registers `GET /projects`
|
||||
(`projects-list`). Its description: "Returns the projects the
|
||||
authenticated user has access to (owned plus shared, with child projects
|
||||
of accessible parents), paginated. Archived projects are excluded unless
|
||||
is_archived=true." The adapter reads it with the standard envelope
|
||||
(`items`, `total`, `page`, `per_page`, `total_pages`), every page.
|
||||
|
||||
`pkg/models/project.go:620-651`: `getArchived` false adds
|
||||
`is_archived = false` to the query.
|
||||
`pkg/models/project.go:154-158`: pseudo-project ids are negative. -1 is
|
||||
Favorites, -2 and below are saved filters. The adapter skips any id at or
|
||||
below 0.
|
||||
|
||||
The recorded `GET /projects/{p}` body in
|
||||
`packages/tasks/tests/fixtures/v2-shapes.json` has `parent_project_id`
|
||||
and `is_archived`, so the field names and types come from a v2.7.0
|
||||
answer, not only from source. No recording holds a `GET /projects` list.
|
||||
`shapes.test.mjs` checks the fake's list items against the recorded
|
||||
project object and its envelope against the recorded views list.
|
||||
|
||||
### P2. Archive state reaches every descendant
|
||||
|
||||
`pkg/models/project.go:884-888`: "is_archived is materialized down the
|
||||
tree". `pkg/models/project.go:1216-1217` calls
|
||||
`SetArchiveStateForProjectDescendants` when the flag changes, and
|
||||
`:1634` is the update that writes it. An archived parent's children come
|
||||
back with `is_archived: true` too, so skipping archived items drops the
|
||||
whole subtree. The adapter also checks the flag itself, in case a list
|
||||
ever includes archived projects.
|
||||
|
||||
### P3. Access inherits down the tree
|
||||
|
||||
`pkg/models/project_access.go:31-75`. `projectAccess` holds every project
|
||||
a user can reach. The query joins each grant to `project_ancestors`, so
|
||||
a share on a parent reaches every descendant. An inherited admin wins
|
||||
anywhere in the chain. Below admin, the nearest grant wins. The sync bot
|
||||
needs one share on the root. The fake's `#access` follows the same rule.
|
||||
|
||||
### P4. One task read across projects
|
||||
|
||||
`pkg/routes/api/v2/task_collection.go:134-141` registers `GET /tasks`
|
||||
(`tasks-list`): "Returns the tasks the authenticated user can see across
|
||||
every project they have access to, paginated and flat."
|
||||
|
||||
`pkg/models/api_routes.go:495-501`, in `tokenAuthorizesRoute`: a token
|
||||
with `tasks` `read_all` may call `GET /api/v2/tasks` as well as
|
||||
`/api/v2/projects/:project/tasks`. The sync key already has that scope.
|
||||
|
||||
`pkg/models/task_collection.go:220-230`: with no project id, the project
|
||||
set is `getRawProjectsForUser` with the default options, so archived
|
||||
projects are left out (P1).
|
||||
|
||||
`pkg/models/task_collection_filter.go:157-158` maps a filter field
|
||||
`project` to `project_id`, so `project in 19, 18, 20, 21` filters by
|
||||
project.
|
||||
|
||||
The adapter doesn't use this read. It reads per project, as the brief
|
||||
says, until Sage's live read shows the cross-project read works for the
|
||||
sync key. If it does, a tick is two GETs whatever the tree's size, and a
|
||||
switch is a follow-up row.
|
||||
|
||||
### P5. Writes on buckets and views
|
||||
|
||||
The adapter writes no project, view or bucket. Sage's first install
|
||||
attempt on #19
|
||||
(`agents/sage/work/vikunja-setup/2026-10-11_install-19-attempt1.json`)
|
||||
found that on v2.7.0 bucket and view writes answer 405 under `/api/v2` and work only
|
||||
under `/api/v1`. Nothing in this row depends on that. It matters for the
|
||||
runbook, which installs boards by hand.
|
||||
|
||||
## Live facts used
|
||||
|
||||
From Sage, with the records under `agents/sage/work/vikunja-setup/`:
|
||||
|
||||
- The bus is on project #19. Its kanban view is 76. The five buckets are
|
||||
todo 159, in-progress 161, in-review 248, blocked 162, done 57.
|
||||
- View 76 has four more buckets: 55, 56, 158 (`Backlog`) and 160
|
||||
(`Pending`). The install check ignores extra buckets. A task in one is
|
||||
recorded with that raw bucket id (`tree.test.mjs`, "a task in a bucket
|
||||
outside the five keeps its raw bucket id").
|
||||
- #19's children are 18, 20 and 21. None has the five buckets, so all
|
||||
three are watch-only.
|
||||
- Sync key 9 has `projects` `read_all` and lists 29 projects
|
||||
(`2026-10-11_shares-read.json`).
|
||||
|
||||
## Fake
|
||||
|
||||
`packages/tasks/src/fake.mjs` models:
|
||||
|
||||
- `parent_project_id` on every project, set by `project(..., {parent})`
|
||||
and changed by `reparent()`
|
||||
- `GET /projects` with `projects` `read_all`, archived projects left out
|
||||
unless `is_archived=true`, saved filters and Favorites as negative ids
|
||||
(`pseudoProject()`)
|
||||
- `archive()`, which marks the project and every descendant
|
||||
- access through an ancestor's share, as in P3, and `unshare()`
|
||||
|
||||
`packages/tasks/tests/tree.test.mjs` runs the adapter against it. The
|
||||
three-level test counts requests. A quiet tick on a root, one installed
|
||||
child and one watch-only grandchild is 6 GETs, two per project. A
|
||||
reconcile is 11: the project list, views and buckets for each of the two
|
||||
children, and two per project. For #19 (root plus three watch-only
|
||||
children) a quiet tick is 8 GETs, plus one per extra page of 50 tasks.
|
||||
|
||||
## Gate read
|
||||
|
||||
Two GETs, sync key 9, against the live instance. Record the status, the
|
||||
item count on the page and `total`. Record no titles. Spaces in a filter
|
||||
go as `%20`.
|
||||
|
||||
1. The tree.
|
||||
|
||||
```
|
||||
GET /api/v2/projects
|
||||
query: per_page=50&page=1
|
||||
key: sync key 9
|
||||
```
|
||||
|
||||
Expect 200 and `total` 29 (Sage's earlier read). Also record, for ids
|
||||
19, 18, 20 and 21 only, `parent_project_id` and `is_archived`. Expect
|
||||
18, 20 and 21 to have parent 19, and all four `is_archived: false`.
|
||||
This is the read `discover()` makes at startup and at each reconcile.
|
||||
|
||||
2. One task read across the tree.
|
||||
|
||||
```
|
||||
GET /api/v2/tasks
|
||||
query: filter=project in 19, 18, 20, 21&sort_by=id&order_by=asc&per_page=50&page=1
|
||||
key: sync key 9
|
||||
```
|
||||
|
||||
A 200 means the cross-project read works for the sync key, and a
|
||||
follow-up row can move a tick to it. 401 or 403 means the scope check
|
||||
in P4 doesn't hold for this key, and the adapter keeps reading per
|
||||
project. For comparison, the per-project open counts are what the
|
||||
adapter reads today, one per project:
|
||||
|
||||
```
|
||||
GET /api/v2/projects/{19,18,20,21}/tasks
|
||||
query: filter=done = false&sort_by=id&order_by=asc&per_page=50&page=1
|
||||
key: sync key 9
|
||||
```
|
||||
|
||||
These four are optional. They let the gate compare `total` from read 2
|
||||
with the sum the adapter would see. Read 2 has no `done` filter, so
|
||||
its `total` counts closed tasks too.
|
||||
|
||||
The host config with `tracker.descendants` set reaches the adapter
|
||||
through `packages/cli/src/config.mjs` (lead decision 87), so the gate
|
||||
needs no packet script.
|
||||
Reference in New Issue
Block a user