review(53): Darkwing round 1, request changes (#1542 comment 27148)

Refusal leaves board data in the inspector, project tree, footer and scan line, and bus data in the Inbox count and the Ctrl+K palette. Gate green, 13 of 20 mutants killed, fonts match the upstream archive. Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-10 12:59:06 -05:00
parent 71af13092b
commit 70768fe548
63 changed files with 2057 additions and 0 deletions
@@ -0,0 +1,16 @@
+d7b2b6958857eb97902c46480bf7e3786966cae9436e3763512da526fa256da3  packages/webui/README.md
+b9b162ebf6ff1c690d2731c4b63ebfb36d12d3176a0be8fdc1a449b706432fd8  packages/webui/src/public/app.js
+a9cb1cd82332b23a47e3a1239d25d13c86d16c4220695e34b243effa999f45f2  packages/webui/src/public/assets/fonts/jetbrains-mono-400.woff2
+086c48dfbea9ddaff1320f7e09399b8e2924e88ce67453721255db3bdbb5a353  packages/webui/src/public/assets/fonts/jetbrains-mono-500.woff2
+c503cc5ec5f8b2c7666b7ecda1adf44bd45f2e6579b2eba0fc292150416588a2  packages/webui/src/public/assets/fonts/jetbrains-mono-700.woff2
+30f0c136e3c88e422d0791acd97238870f9054a9729bc34cf2ff0d4ed8cac4ad  packages/webui/src/public/assets/fonts/jetbrains-mono-OFL.txt
+f6f89aaaa6a02e9a16020de26fb6a664f1da152e0b0413248da2d9f6b68395cc  packages/webui/src/public/assets/fonts/jetbrains-mono-sources.txt
+65d4ea9386aca7ed57107695e13cf91c29d15ba44d87cc085d2a05732201b03e  packages/webui/src/public/bus.js
+01b456c1ca685e69e2974d66a615b7b8736abbd51aef7a3f014bca3783710430  packages/webui/src/public/icons.svg
+fbbb51e5669a1f559015e0fdebf6f450b63383070472d2461f0bce9b9723d890  packages/webui/src/public/index.html
+b3ae07918fced7b0323835bc35e73fffb3c3fb0921a36e22dd2eb167997c1e69  packages/webui/src/public/shell.css
+4fdb72ec24c7245584c89280415e10113dba1c4cb03d98f5570ac745ba2e95cb  packages/webui/src/public/tokens.css
+5a65fea95e6225f812c196b0199f3f6562a60e523da685b255f749f63b480c64  packages/webui/src/serve.mjs
+6f68f67e99d5e832c0ba219911201b8adf08505e234647f2d9eac7292d55f50f  packages/webui/tests/browser.mjs
+713c86bd6b1d1b27949bbae071f1bdf1f7d744f84b723ad5a1bdbd1e8adc5fb6  packages/webui/tests/serve.test.mjs
+f0ce4368cf0f0caab11aeb0f603c90d12066a40c33c51a20b53badd451d66cef  packages/webui/tests/shell.test.mjs
@@ -0,0 +1,9 @@
+# 2026-10-10T17:40:36Z font provenance check (Darkwing)
+archive sha256: 6f6376c6ed2960ea8a963cd7387ec9d76e3f629125bc33d1fdcd7eb7012f7bbf
+Archive sha256: 6f6376c6ed2960ea8a963cd7387ec9d76e3f629125bc33d1fdcd7eb7012f7bbf
+fonts/webfonts/JetBrainsMono-Regular.woff2 archive=a9cb1cd82332b23a47e3a1239d25d13c86d16c4220695e34b243effa999f45f2 shipped=a9cb1cd82332b23a47e3a1239d25d13c86d16c4220695e34b243effa999f45f2 match
+fonts/webfonts/JetBrainsMono-Medium.woff2 archive=086c48dfbea9ddaff1320f7e09399b8e2924e88ce67453721255db3bdbb5a353 shipped=086c48dfbea9ddaff1320f7e09399b8e2924e88ce67453721255db3bdbb5a353 match
+fonts/webfonts/JetBrainsMono-Bold.woff2 archive=c503cc5ec5f8b2c7666b7ecda1adf44bd45f2e6579b2eba0fc292150416588a2 shipped=c503cc5ec5f8b2c7666b7ecda1adf44bd45f2e6579b2eba0fc292150416588a2 match
+OFL.txt archive=30f0c136e3c88e422d0791acd97238870f9054a9729bc34cf2ff0d4ed8cac4ad shipped=30f0c136e3c88e422d0791acd97238870f9054a9729bc34cf2ff0d4ed8cac4ad match
+tokens.css equal to docs/design
+icons.svg equal to docs/design
@@ -0,0 +1,18 @@
+#!/bin/bash
+# Row 53 gate: packages/webui node suite, build-tokens --check, then every scripts/test-*.sh with Docker unreachable.
+export TMPDIR=~/darkwing-scratch/r53a/tmp DOCKER_HOST=unix:///nonexistent.sock
+cd ~/darkwing-scratch/r53a/cand
+O=~/darkwing-scratch/r53a/out
+: > $O/summary.txt
+echo "start $(date -u +%FT%TZ)" >> $O/summary.txt
+(cd packages/webui && env -u NODE_TEST_CONTEXT node --test 'tests/*.test.mjs') > $O/node-webui.txt 2>&1; e=$?
+echo "node-webui exit=$e $(grep -E '^ℹ (pass|fail)' $O/node-webui.txt | tr '\n' ' ')" >> $O/summary.txt
+node docs/design/tools/build-tokens.mjs --check > $O/build-tokens.txt 2>&1; e=$?
+echo "build-tokens --check exit=$e $(tail -1 $O/build-tokens.txt)" >> $O/summary.txt
+for f in scripts/test-*.sh; do
+  s=$(basename $f .sh)
+  $f > $O/$s.txt 2>&1; e=$?
+  echo "$s exit=$e $(grep -E 'passed, [0-9]+ failed' $O/$s.txt | tail -1)" >> $O/summary.txt
+done
+echo "end $(date -u +%FT%TZ)" >> $O/summary.txt
+echo DONE >> $O/summary.txt
@@ -0,0 +1,13 @@
+diff --git a/packages/webui/src/public/bus.js b/packages/webui/src/public/bus.js
+index f5389ee6..5ea891ad 100644
+--- a/packages/webui/src/public/bus.js
+++ b/packages/webui/src/public/bus.js
+@@ -368,7 +368,7 @@
+   }
+   const failTitle = err => err.status === 403 ? 'Bus refused the read' : ['not-configured', 'no-bus-host'].includes(err.code) ? 'No bus to read' : 'The read failed';
+   // A refusal fails closed: no kept data, the code in mono. Any other failure keeps the last read, labelled with its time.
+-  const refusal = err => err.status === 403 || ['not-configured', 'no-bus-host'].includes(err.code);
+  const refusal = err => err.status === 403;
+   const failedView = err => `${head(failTitle(err))}<div class="banner ${refusal(err) ? 'ref' : 'err'}" role="alert"><p>${refusal(err) ? `<b>refused: <code>${txt(err.code)}</code>.</b> ` : ''}${why(err)} Console shows nothing rather than a guess. Nothing was written.</p>${retry}</div>${empty('Nothing to show.', refusal(err) ? 'The view stays empty until the problem above is fixed.' : 'Read again, or come back when the bus answers.')}`;
+   const staleBanner = err => `<div class="banner err s1-stale" role="alert"><p><b>The last read failed.</b> ${why(err)} This is what was read before, ${when(readAt)}. Nothing was changed.</p>${retry}</div>`;
+   // Freshness line in the command bar for bus pages.
@@ -0,0 +1,36 @@
+✔ browser edge states: loading, empty, malformed, stale, hostile/long values, in-flight reply and appearance fallback (7051.173711ms)
+Rendered contrast: {"failures":[],"count":330,"lowest":4.504658476260286}
+✔ served Console browser: real board fixtures, keyboard, drafts, receipts, themes, 320px and failures (7270.330094ms)
+✔ S5 pages in a browser: real broker rows, inert text, Copy, routes, failures, layout and no writes (8305.819932ms)
+✔ bus routes serve the four reads from the reader view, unescaped JSON for the page to escape (465.310562ms)
+✔ bus routes are GET-only, have no write verb, and keep the same-origin checks (142.624471ms)
+✔ bus refusals map to statuses and never carry a path or a stack (60.934334ms)
+✔ humanCall speaks the human transport protocol without blocking the server (2813.055778ms)
+✔ busReader takes --business, else the live bus host, else refuses (488.166908ms)
+✔ humanCall kills a transport that runs past its timeout (538.051321ms)
+✔ serve refuses a --business value that is not a business id (500.293546ms)
+✔ conversation view: full history, collapsed tools, hidden thinking, inert hostile content, malformed and reconcile markers (5952.997676ms)
+✔ conversation view: a fork keeps the open branch, says so, and opens the new one on request (3085.264687ms)
+✔ conversation view: a newer session with no readable history keeps the marker (1717.994807ms)
+✔ conversation view: seats without history say so and offer no reply (1097.051106ms)
+✔ Discord row through real board/WebUI: independent brake/liveness, no Reply, literal content (6156.19174ms)
+✔ return flow through the conversation view: send, tool call, delayed result, peer message, exact long answers, relaunch (56811.320882ms)
+✔ both presentations replace old activity with relaunch notice, label retained history, then resume after new activity (6077.150559ms)
+✔ reported return flow and relative Age: reply sent from the inspector, then the new answer appears there without manual refresh (25388.059358ms)
+✔ loopback host and board origin fail closed (10.456016ms)
+✔ real board fixture passes through WebUI; assets and isolated seen/reply work (214.245672ms)
+✔ proxy preserves exact request bytes, status and receipt, rejects forms and malformed JSON, never follows redirect (234.702735ms)
+✔ unreachable board reports URL; CLI rejects unsupported options (1644.897153ms)
+✔ tokens.css and icons.svg are byte copies of docs/design (3.908141ms)
+✔ JetBrains Mono files match the digests in their sources file, with the OFL text (3.212866ms)
+✔ shipped strings are unchanged, and the web keeps its write boundary (2.272588ms)
+✔ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (7192.367132ms)
+✔ five states on Board, Inbox, Tasks, Agents and Trail (3294.146704ms)
+ℹ tests 27
+ℹ suites 0
+ℹ pass 27
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 57463.713678
@@ -0,0 +1,13 @@
+diff --git a/packages/webui/src/public/app.js b/packages/webui/src/public/app.js
+index 1bd88cf2..c941e531 100644
+--- a/packages/webui/src/public/app.js
+++ b/packages/webui/src/public/app.js
+@@ -303,7 +303,7 @@
+   // A refusal (403) fails closed: the last data is hidden, not shown as current. Any other failure keeps the last data with its scan time.
+   function error(err) {
+     failed = true; $('error').hidden = false;
+-    const refused = err.status === 403;
+    const refused = false;
+     $('error').className = refused ? 'banner ref' : 'banner err';
+     $('board-refused').hidden = !refused; document.body.classList.toggle('board-refused', refused);
+     $('error').innerHTML = refused
@@ -0,0 +1,59 @@
+✔ browser edge states: loading, empty, malformed, stale, hostile/long values, in-flight reply and appearance fallback (5906.359439ms)
+Rendered contrast: {"failures":[],"count":330,"lowest":4.504658476260286}
+✔ served Console browser: real board fixtures, keyboard, drafts, receipts, themes, 320px and failures (6421.571921ms)
+✔ S5 pages in a browser: real broker rows, inert text, Copy, routes, failures, layout and no writes (7790.380244ms)
+✔ bus routes serve the four reads from the reader view, unescaped JSON for the page to escape (319.811693ms)
+✔ bus routes are GET-only, have no write verb, and keep the same-origin checks (141.932338ms)
+✔ bus refusals map to statuses and never carry a path or a stack (135.266704ms)
+✔ humanCall speaks the human transport protocol without blocking the server (2526.57828ms)
+✔ busReader takes --business, else the live bus host, else refuses (389.079573ms)
+✔ humanCall kills a transport that runs past its timeout (531.702165ms)
+✔ serve refuses a --business value that is not a business id (225.100624ms)
+✔ conversation view: full history, collapsed tools, hidden thinking, inert hostile content, malformed and reconcile markers (5885.859729ms)
+✔ conversation view: a fork keeps the open branch, says so, and opens the new one on request (2943.465302ms)
+✔ conversation view: a newer session with no readable history keeps the marker (1599.972822ms)
+✔ conversation view: seats without history say so and offer no reply (1304.01305ms)
+✔ Discord row through real board/WebUI: independent brake/liveness, no Reply, literal content (5738.474826ms)
+✔ return flow through the conversation view: send, tool call, delayed result, peer message, exact long answers, relaunch (56134.123141ms)
+✔ both presentations replace old activity with relaunch notice, label retained history, then resume after new activity (5780.259394ms)
+✔ reported return flow and relative Age: reply sent from the inspector, then the new answer appears there without manual refresh (24979.223692ms)
+✔ loopback host and board origin fail closed (11.709394ms)
+✔ real board fixture passes through WebUI; assets and isolated seen/reply work (216.387749ms)
+✔ proxy preserves exact request bytes, status and receipt, rejects forms and malformed JSON, never follows redirect (108.234726ms)
+✔ unreachable board reports URL; CLI rejects unsupported options (1702.907874ms)
+✔ tokens.css and icons.svg are byte copies of docs/design (1.588661ms)
+✔ JetBrains Mono files match the digests in their sources file, with the OFL text (3.421399ms)
+✔ shipped strings are unchanged, and the web keeps its write boundary (2.1794ms)
+✖ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (4814.72897ms)
+✔ five states on Board, Inbox, Tasks, Agents and Trail (3632.166067ms)
+ℹ tests 27
+ℹ suites 0
+ℹ pass 26
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 56812.431306
+
+✖ failing tests:
+
+test at tests/shell.test.mjs:84:1
+✖ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (4814.72897ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  + actual - expected
+  
+  + 'banner err'
+  - 'banner ref'
+            ^
+  
+      at TestContext.<anonymous> (file:///home/jwoltje/darkwing-scratch/r53a/mutwt/packages/webui/tests/shell.test.mjs:140:12)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 'banner err',
+    expected: 'banner ref',
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
@@ -0,0 +1,13 @@
+diff --git a/packages/webui/src/public/app.js b/packages/webui/src/public/app.js
+index 1bd88cf2..a5cf03b4 100644
+--- a/packages/webui/src/public/app.js
+++ b/packages/webui/src/public/app.js
+@@ -305,7 +305,7 @@
+     failed = true; $('error').hidden = false;
+     const refused = err.status === 403;
+     $('error').className = refused ? 'banner ref' : 'banner err';
+-    $('board-refused').hidden = !refused; document.body.classList.toggle('board-refused', refused);
+    $('board-refused').hidden = !refused; 
+     $('error').innerHTML = refused
+       ? `<p><b>The board refused the read.</b> refused: <code>${esc(err.message)}</code> Board: ${esc(board)}. Console shows nothing rather than a guess. Use Refresh to try again.</p>`
+       : `<p><b>${esc(err.message)}</b> Board: ${esc(board)}. ${data ? `Showing last known data.${data.generatedAt ? ` Scanned ${esc(data.generatedAt)}.` : ''}` : 'No board data loaded.'} Use Refresh to try again.</p>`;
@@ -0,0 +1,56 @@
+✔ browser edge states: loading, empty, malformed, stale, hostile/long values, in-flight reply and appearance fallback (5843.810902ms)
+Rendered contrast: {"failures":[],"count":330,"lowest":4.504658476260286}
+✔ served Console browser: real board fixtures, keyboard, drafts, receipts, themes, 320px and failures (6581.265927ms)
+✔ S5 pages in a browser: real broker rows, inert text, Copy, routes, failures, layout and no writes (8986.282108ms)
+✔ bus routes serve the four reads from the reader view, unescaped JSON for the page to escape (1059.307807ms)
+✔ bus routes are GET-only, have no write verb, and keep the same-origin checks (207.046686ms)
+✔ bus refusals map to statuses and never carry a path or a stack (70.701032ms)
+✔ humanCall speaks the human transport protocol without blocking the server (2229.666935ms)
+✔ busReader takes --business, else the live bus host, else refuses (349.885509ms)
+✔ humanCall kills a transport that runs past its timeout (528.250357ms)
+✔ serve refuses a --business value that is not a business id (216.252848ms)
+✔ conversation view: full history, collapsed tools, hidden thinking, inert hostile content, malformed and reconcile markers (6331.227648ms)
+✔ conversation view: a fork keeps the open branch, says so, and opens the new one on request (3044.074164ms)
+✔ conversation view: a newer session with no readable history keeps the marker (1387.057031ms)
+✔ conversation view: seats without history say so and offer no reply (1032.915675ms)
+✔ Discord row through real board/WebUI: independent brake/liveness, no Reply, literal content (6249.684157ms)
+✔ return flow through the conversation view: send, tool call, delayed result, peer message, exact long answers, relaunch (56312.695193ms)
+✔ both presentations replace old activity with relaunch notice, label retained history, then resume after new activity (5805.305368ms)
+✔ reported return flow and relative Age: reply sent from the inspector, then the new answer appears there without manual refresh (23253.279537ms)
+✔ loopback host and board origin fail closed (9.249748ms)
+✔ real board fixture passes through WebUI; assets and isolated seen/reply work (148.461303ms)
+✔ proxy preserves exact request bytes, status and receipt, rejects forms and malformed JSON, never follows redirect (182.583553ms)
+✔ unreachable board reports URL; CLI rejects unsupported options (1604.6308ms)
+✔ tokens.css and icons.svg are byte copies of docs/design (1.446228ms)
+✔ JetBrains Mono files match the digests in their sources file, with the OFL text (2.794556ms)
+✔ shipped strings are unchanged, and the web keeps its write boundary (1.912476ms)
+✖ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (6098.431393ms)
+✔ five states on Board, Inbox, Tasks, Agents and Trail (3104.411072ms)
+ℹ tests 27
+ℹ suites 0
+ℹ pass 26
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 56801.360852
+
+✖ failing tests:
+
+test at tests/shell.test.mjs:84:1
+✖ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (6098.431393ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  
+  'block' !== 'none'
+  
+      at TestContext.<anonymous> (file:///home/jwoltje/darkwing-scratch/r53a/mutwt/packages/webui/tests/shell.test.mjs:142:12)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 'block',
+    expected: 'none',
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
@@ -0,0 +1,13 @@
+diff --git a/packages/webui/src/public/bus.js b/packages/webui/src/public/bus.js
+index f5389ee6..5496a305 100644
+--- a/packages/webui/src/public/bus.js
+++ b/packages/webui/src/public/bus.js
+@@ -369,7 +369,7 @@
+   const failTitle = err => err.status === 403 ? 'Bus refused the read' : ['not-configured', 'no-bus-host'].includes(err.code) ? 'No bus to read' : 'The read failed';
+   // A refusal fails closed: no kept data, the code in mono. Any other failure keeps the last read, labelled with its time.
+   const refusal = err => err.status === 403 || ['not-configured', 'no-bus-host'].includes(err.code);
+-  const failedView = err => `${head(failTitle(err))}<div class="banner ${refusal(err) ? 'ref' : 'err'}" role="alert"><p>${refusal(err) ? `<b>refused: <code>${txt(err.code)}</code>.</b> ` : ''}${why(err)} Console shows nothing rather than a guess. Nothing was written.</p>${retry}</div>${empty('Nothing to show.', refusal(err) ? 'The view stays empty until the problem above is fixed.' : 'Read again, or come back when the bus answers.')}`;
+  const failedView = err => `${head(failTitle(err))}<div class="banner ${refusal(err) ? 'ref' : 'err'}" role="alert"><p>${refusal(err) ? `<b>refused: ${txt(err.code)}.</b> ` : ''}${why(err)} Console shows nothing rather than a guess. Nothing was written.</p>${retry}</div>${empty('Nothing to show.', refusal(err) ? 'The view stays empty until the problem above is fixed.' : 'Read again, or come back when the bus answers.')}`;
+   const staleBanner = err => `<div class="banner err s1-stale" role="alert"><p><b>The last read failed.</b> ${why(err)} This is what was read before, ${when(readAt)}. Nothing was changed.</p>${retry}</div>`;
+   // Freshness line in the command bar for bus pages.
+   const stamp = iso => { const t = Date.parse(iso); return Number.isFinite(t) ? `${new Date(t).toISOString().slice(11, 19)} UTC` : 'unknown'; };
@@ -0,0 +1,36 @@
+✔ browser edge states: loading, empty, malformed, stale, hostile/long values, in-flight reply and appearance fallback (5248.350804ms)
+Rendered contrast: {"failures":[],"count":330,"lowest":4.504658476260286}
+✔ served Console browser: real board fixtures, keyboard, drafts, receipts, themes, 320px and failures (6871.236761ms)
+✔ S5 pages in a browser: real broker rows, inert text, Copy, routes, failures, layout and no writes (9267.987367ms)
+✔ bus routes serve the four reads from the reader view, unescaped JSON for the page to escape (970.658233ms)
+✔ bus routes are GET-only, have no write verb, and keep the same-origin checks (316.969409ms)
+✔ bus refusals map to statuses and never carry a path or a stack (258.400443ms)
+✔ humanCall speaks the human transport protocol without blocking the server (2432.255818ms)
+✔ busReader takes --business, else the live bus host, else refuses (184.834293ms)
+✔ humanCall kills a transport that runs past its timeout (528.843918ms)
+✔ serve refuses a --business value that is not a business id (199.945476ms)
+✔ conversation view: full history, collapsed tools, hidden thinking, inert hostile content, malformed and reconcile markers (5325.287046ms)
+✔ conversation view: a fork keeps the open branch, says so, and opens the new one on request (3880.82363ms)
+✔ conversation view: a newer session with no readable history keeps the marker (1896.347832ms)
+✔ conversation view: seats without history say so and offer no reply (1341.397952ms)
+✔ Discord row through real board/WebUI: independent brake/liveness, no Reply, literal content (7915.59178ms)
+✔ return flow through the conversation view: send, tool call, delayed result, peer message, exact long answers, relaunch (57016.635343ms)
+✔ both presentations replace old activity with relaunch notice, label retained history, then resume after new activity (6078.323228ms)
+✔ reported return flow and relative Age: reply sent from the inspector, then the new answer appears there without manual refresh (23058.579464ms)
+✔ loopback host and board origin fail closed (13.230744ms)
+✔ real board fixture passes through WebUI; assets and isolated seen/reply work (310.414402ms)
+✔ proxy preserves exact request bytes, status and receipt, rejects forms and malformed JSON, never follows redirect (150.209364ms)
+✔ unreachable board reports URL; CLI rejects unsupported options (1760.353157ms)
+✔ tokens.css and icons.svg are byte copies of docs/design (1.913986ms)
+✔ JetBrains Mono files match the digests in their sources file, with the OFL text (3.340836ms)
+✔ shipped strings are unchanged, and the web keeps its write boundary (2.36321ms)
+✔ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (7850.747047ms)
+✔ five states on Board, Inbox, Tasks, Agents and Trail (2933.64496ms)
+ℹ tests 27
+ℹ suites 0
+ℹ pass 27
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 57785.087003
@@ -0,0 +1,13 @@
+diff --git a/packages/webui/src/public/bus.js b/packages/webui/src/public/bus.js
+index f5389ee6..60995f29 100644
+--- a/packages/webui/src/public/bus.js
+++ b/packages/webui/src/public/bus.js
+@@ -375,7 +375,7 @@
+   const stamp = iso => { const t = Date.parse(iso); return Number.isFinite(t) ? `${new Date(t).toISOString().slice(11, 19)} UTC` : 'unknown'; };
+   function freshBus(state) {
+     $('fresh-bus').innerHTML = state === 'failed' ? 'Bus <span class="warn">not read: the read failed</span>'
+-      : `Bus read <b>${esc(stamp(readAt))}</b>${readAt ? ` (${esc(ago(readAt))})` : ''}${state === 'stale' ? ' · <span class="warn">stale: the last read failed</span>' : ''}`;
+      : `Bus read <b>${esc(stamp(readAt))}</b>${readAt ? ` (${esc(ago(readAt))})` : ''}`;
+   }
+ 
+   // ---------------------------------------------------------------- router
@@ -0,0 +1,71 @@
+✔ browser edge states: loading, empty, malformed, stale, hostile/long values, in-flight reply and appearance fallback (5791.84315ms)
+Rendered contrast: {"failures":[],"count":330,"lowest":4.504658476260286}
+✔ served Console browser: real board fixtures, keyboard, drafts, receipts, themes, 320px and failures (5931.424696ms)
+✔ S5 pages in a browser: real broker rows, inert text, Copy, routes, failures, layout and no writes (8208.335483ms)
+✔ bus routes serve the four reads from the reader view, unescaped JSON for the page to escape (288.745639ms)
+✔ bus routes are GET-only, have no write verb, and keep the same-origin checks (95.589345ms)
+✔ bus refusals map to statuses and never carry a path or a stack (43.548131ms)
+✔ humanCall speaks the human transport protocol without blocking the server (3157.970328ms)
+✔ busReader takes --business, else the live bus host, else refuses (182.605399ms)
+✔ humanCall kills a transport that runs past its timeout (528.453388ms)
+✔ serve refuses a --business value that is not a business id (173.453275ms)
+✔ conversation view: full history, collapsed tools, hidden thinking, inert hostile content, malformed and reconcile markers (5913.007381ms)
+✔ conversation view: a fork keeps the open branch, says so, and opens the new one on request (2826.523101ms)
+✔ conversation view: a newer session with no readable history keeps the marker (1818.54918ms)
+✔ conversation view: seats without history say so and offer no reply (1217.464307ms)
+✔ Discord row through real board/WebUI: independent brake/liveness, no Reply, literal content (5971.136144ms)
+✔ return flow through the conversation view: send, tool call, delayed result, peer message, exact long answers, relaunch (55587.199523ms)
+✔ both presentations replace old activity with relaunch notice, label retained history, then resume after new activity (5785.97143ms)
+✔ reported return flow and relative Age: reply sent from the inspector, then the new answer appears there without manual refresh (22792.773591ms)
+✔ loopback host and board origin fail closed (7.422204ms)
+✔ real board fixture passes through WebUI; assets and isolated seen/reply work (114.173784ms)
+✔ proxy preserves exact request bytes, status and receipt, rejects forms and malformed JSON, never follows redirect (46.336575ms)
+✔ unreachable board reports URL; CLI rejects unsupported options (921.432069ms)
+✔ tokens.css and icons.svg are byte copies of docs/design (8.890882ms)
+✔ JetBrains Mono files match the digests in their sources file, with the OFL text (2.17736ms)
+✔ shipped strings are unchanged, and the web keeps its write boundary (1.56056ms)
+✖ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (5850.038936ms)
+✖ five states on Board, Inbox, Tasks, Agents and Trail (2552.965234ms)
+ℹ tests 27
+ℹ suites 0
+ℹ pass 25
+ℹ fail 2
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 55919.285318
+
+✖ failing tests:
+
+test at tests/shell.test.mjs:84:1
+✖ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (5850.038936ms)
+  AssertionError [ERR_ASSERTION]: The input did not match the regular expression /stale: the last read failed/. Input:
+  
+  'Bus read 17:41:19 UTC (0 s ago)'
+  
+      at TestContext.<anonymous> (file:///home/jwoltje/darkwing-scratch/r53a/mutwt/packages/webui/tests/shell.test.mjs:187:12)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 'Bus read 17:41:19 UTC (0 s ago)',
+    expected: /stale: the last read failed/,
+    operator: 'match',
+    diff: 'simple'
+  }
+
+test at tests/shell.test.mjs:278:1
+✖ five states on Board, Inbox, Tasks, Agents and Trail (2552.965234ms)
+  AssertionError [ERR_ASSERTION]: #/inbox
+      at TestContext.<anonymous> (file:///home/jwoltje/darkwing-scratch/r53a/mutwt/packages/webui/tests/shell.test.mjs:333:14)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: 'Bus read 17:41:23 UTC (0 s ago)',
+    expected: /stale: the last read failed/,
+    operator: 'match',
+    diff: 'simple'
+  }
@@ -0,0 +1,13 @@
+diff --git a/packages/webui/src/public/app.js b/packages/webui/src/public/app.js
+index 1bd88cf2..78a1bf8d 100644
+--- a/packages/webui/src/public/app.js
+++ b/packages/webui/src/public/app.js
+@@ -41,7 +41,7 @@
+     palette = p.id;
+     if (!['system', 'light', 'dim', 'dark'].includes(mode)) mode = 'system';
+     document.documentElement.dataset.palette = palette;
+-    if (mode === 'system') delete document.documentElement.dataset.mode; else document.documentElement.dataset.mode = mode;
+    document.documentElement.dataset.mode = mode;
+     $('palette').value = palette; $('mode').value = mode;
+     try { localStorage.setItem('mosaic-console-appearance', JSON.stringify({ palette, mode })); } catch {}
+   }
@@ -0,0 +1,56 @@
+✔ browser edge states: loading, empty, malformed, stale, hostile/long values, in-flight reply and appearance fallback (5268.206473ms)
+Rendered contrast: {"failures":[],"count":330,"lowest":4.504658476260286}
+✔ served Console browser: real board fixtures, keyboard, drafts, receipts, themes, 320px and failures (5667.727448ms)
+✔ S5 pages in a browser: real broker rows, inert text, Copy, routes, failures, layout and no writes (6423.223294ms)
+✔ bus routes serve the four reads from the reader view, unescaped JSON for the page to escape (397.075731ms)
+✔ bus routes are GET-only, have no write verb, and keep the same-origin checks (126.647007ms)
+✔ bus refusals map to statuses and never carry a path or a stack (50.303543ms)
+✔ humanCall speaks the human transport protocol without blocking the server (2065.282756ms)
+✔ busReader takes --business, else the live bus host, else refuses (206.772468ms)
+✔ humanCall kills a transport that runs past its timeout (536.593624ms)
+✔ serve refuses a --business value that is not a business id (216.440541ms)
+✔ conversation view: full history, collapsed tools, hidden thinking, inert hostile content, malformed and reconcile markers (5279.816257ms)
+✔ conversation view: a fork keeps the open branch, says so, and opens the new one on request (2768.013147ms)
+✔ conversation view: a newer session with no readable history keeps the marker (1710.014915ms)
+✔ conversation view: seats without history say so and offer no reply (955.788723ms)
+✔ Discord row through real board/WebUI: independent brake/liveness, no Reply, literal content (5054.287458ms)
+✔ return flow through the conversation view: send, tool call, delayed result, peer message, exact long answers, relaunch (54831.221513ms)
+✔ both presentations replace old activity with relaunch notice, label retained history, then resume after new activity (4747.666103ms)
+✔ reported return flow and relative Age: reply sent from the inspector, then the new answer appears there without manual refresh (23326.297774ms)
+✔ loopback host and board origin fail closed (9.530125ms)
+✔ real board fixture passes through WebUI; assets and isolated seen/reply work (132.775432ms)
+✔ proxy preserves exact request bytes, status and receipt, rejects forms and malformed JSON, never follows redirect (129.121734ms)
+✔ unreachable board reports URL; CLI rejects unsupported options (813.942492ms)
+✔ tokens.css and icons.svg are byte copies of docs/design (1.744558ms)
+✔ JetBrains Mono files match the digests in their sources file, with the OFL text (2.122253ms)
+✔ shipped strings are unchanged, and the web keeps its write boundary (1.750309ms)
+✖ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (5320.290317ms)
+✔ five states on Board, Inbox, Tasks, Agents and Trail (2836.644907ms)
+ℹ tests 27
+ℹ suites 0
+ℹ pass 26
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 55294.850895
+
+✖ failing tests:
+
+test at tests/shell.test.mjs:84:1
+✖ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (5320.290317ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  
+  true !== false
+  
+      at TestContext.<anonymous> (file:///home/jwoltje/darkwing-scratch/r53a/mutwt/packages/webui/tests/shell.test.mjs:104:12)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: true,
+    expected: false,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
@@ -0,0 +1,13 @@
+diff --git a/packages/webui/src/public/bus.js b/packages/webui/src/public/bus.js
+index f5389ee6..e7305cbf 100644
+--- a/packages/webui/src/public/bus.js
+++ b/packages/webui/src/public/bus.js
+@@ -477,7 +477,7 @@
+     const t = $('toast'); clearTimeout(toastTimer);
+     if (text === null) { t.className = 'toast'; t.textContent = ''; return; }
+     t.className = `toast on${error ? ' err' : ''}`;
+-    t.innerHTML = `<span>${esc(text)}</span>${error ? '<button type="button" data-dismiss>Dismiss</button>' : ''}`;
+    t.innerHTML = `<span>${text}</span>${error ? '<button type="button" data-dismiss>Dismiss</button>' : ''}`;
+     if (!error) toastTimer = setTimeout(() => toast(null), 2600);
+   }
+ 
@@ -0,0 +1,36 @@
+✔ browser edge states: loading, empty, malformed, stale, hostile/long values, in-flight reply and appearance fallback (3498.424498ms)
+Rendered contrast: {"failures":[],"count":330,"lowest":4.504658476260286}
+✔ served Console browser: real board fixtures, keyboard, drafts, receipts, themes, 320px and failures (5073.27053ms)
+✔ S5 pages in a browser: real broker rows, inert text, Copy, routes, failures, layout and no writes (5860.251528ms)
+✔ bus routes serve the four reads from the reader view, unescaped JSON for the page to escape (316.037593ms)
+✔ bus routes are GET-only, have no write verb, and keep the same-origin checks (106.598219ms)
+✔ bus refusals map to statuses and never carry a path or a stack (85.782079ms)
+✔ humanCall speaks the human transport protocol without blocking the server (2200.847869ms)
+✔ busReader takes --business, else the live bus host, else refuses (239.201748ms)
+✔ humanCall kills a transport that runs past its timeout (533.279441ms)
+✔ serve refuses a --business value that is not a business id (256.027601ms)
+✔ conversation view: full history, collapsed tools, hidden thinking, inert hostile content, malformed and reconcile markers (3551.87569ms)
+✔ conversation view: a fork keeps the open branch, says so, and opens the new one on request (2463.641056ms)
+✔ conversation view: a newer session with no readable history keeps the marker (1169.125934ms)
+✔ conversation view: seats without history say so and offer no reply (841.998568ms)
+✔ Discord row through real board/WebUI: independent brake/liveness, no Reply, literal content (3608.632384ms)
+✔ return flow through the conversation view: send, tool call, delayed result, peer message, exact long answers, relaunch (54356.685952ms)
+✔ both presentations replace old activity with relaunch notice, label retained history, then resume after new activity (3674.33323ms)
+✔ reported return flow and relative Age: reply sent from the inspector, then the new answer appears there without manual refresh (22885.872246ms)
+✔ loopback host and board origin fail closed (9.397593ms)
+✔ real board fixture passes through WebUI; assets and isolated seen/reply work (128.255402ms)
+✔ proxy preserves exact request bytes, status and receipt, rejects forms and malformed JSON, never follows redirect (105.743453ms)
+✔ unreachable board reports URL; CLI rejects unsupported options (1209.792727ms)
+✔ tokens.css and icons.svg are byte copies of docs/design (1.322274ms)
+✔ JetBrains Mono files match the digests in their sources file, with the OFL text (2.723359ms)
+✔ shipped strings are unchanged, and the web keeps its write boundary (1.811832ms)
+✔ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (4370.26785ms)
+✔ five states on Board, Inbox, Tasks, Agents and Trail (2285.134171ms)
+ℹ tests 27
+ℹ suites 0
+ℹ pass 27
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 54819.589769
@@ -0,0 +1,13 @@
+diff --git a/packages/webui/src/public/bus.js b/packages/webui/src/public/bus.js
+index f5389ee6..8911ba97 100644
+--- a/packages/webui/src/public/bus.js
+++ b/packages/webui/src/public/bus.js
+@@ -496,7 +496,7 @@
+     const q = $('cmdk-input').value.trim().toLowerCase();
+     pkShown = pkAll.filter(i => !q || `${i.label} ${i.group}`.toLowerCase().includes(q)).slice(0, 50);
+     pkAt = Math.min(pkAt, Math.max(0, pkShown.length - 1));
+-    $('cmdk-list').innerHTML = pkShown.length ? pkShown.map((i, n) => `<li role="option" id="cmdk-opt-${n}" data-href="${esc(i.href)}" aria-selected="${n === pkAt}"><span>${txt(i.label)}</span><span class="g">${txt(i.group)}</span></li>`).join('')
+    $('cmdk-list').innerHTML = pkShown.length ? pkShown.map((i, n) => `<li role="option" id="cmdk-opt-${n}" data-href="${esc(i.href)}" aria-selected="${n === pkAt}"><span>${i.label}</span><span class="g">${txt(i.group)}</span></li>`).join('')
+       : '<li class="pk-none" role="option" aria-disabled="true" aria-selected="false">No view, decision or task matches.</li>';
+     if (pkShown.length) { $('cmdk-input').setAttribute('aria-activedescendant', `cmdk-opt-${pkAt}`); $(`cmdk-opt-${pkAt}`)?.scrollIntoView({ block: 'nearest' }); }
+     else $('cmdk-input').removeAttribute('aria-activedescendant');
@@ -0,0 +1,36 @@
+✔ browser edge states: loading, empty, malformed, stale, hostile/long values, in-flight reply and appearance fallback (5754.334404ms)
+Rendered contrast: {"failures":[],"count":330,"lowest":4.504658476260286}
+✔ served Console browser: real board fixtures, keyboard, drafts, receipts, themes, 320px and failures (6557.501052ms)
+✔ S5 pages in a browser: real broker rows, inert text, Copy, routes, failures, layout and no writes (8416.074858ms)
+✔ bus routes serve the four reads from the reader view, unescaped JSON for the page to escape (574.930974ms)
+✔ bus routes are GET-only, have no write verb, and keep the same-origin checks (797.089799ms)
+✔ bus refusals map to statuses and never carry a path or a stack (302.286778ms)
+✔ humanCall speaks the human transport protocol without blocking the server (1995.597872ms)
+✔ busReader takes --business, else the live bus host, else refuses (228.695172ms)
+✔ humanCall kills a transport that runs past its timeout (528.891783ms)
+✔ serve refuses a --business value that is not a business id (167.030411ms)
+✔ conversation view: full history, collapsed tools, hidden thinking, inert hostile content, malformed and reconcile markers (5671.033678ms)
+✔ conversation view: a fork keeps the open branch, says so, and opens the new one on request (3129.076355ms)
+✔ conversation view: a newer session with no readable history keeps the marker (1801.429431ms)
+✔ conversation view: seats without history say so and offer no reply (899.175464ms)
+✔ Discord row through real board/WebUI: independent brake/liveness, no Reply, literal content (6209.788072ms)
+✔ return flow through the conversation view: send, tool call, delayed result, peer message, exact long answers, relaunch (55273.916567ms)
+✔ both presentations replace old activity with relaunch notice, label retained history, then resume after new activity (6379.070681ms)
+✔ reported return flow and relative Age: reply sent from the inspector, then the new answer appears there without manual refresh (24135.002505ms)
+✔ loopback host and board origin fail closed (9.440587ms)
+✔ real board fixture passes through WebUI; assets and isolated seen/reply work (152.276494ms)
+✔ proxy preserves exact request bytes, status and receipt, rejects forms and malformed JSON, never follows redirect (124.824653ms)
+✔ unreachable board reports URL; CLI rejects unsupported options (1771.062865ms)
+✔ tokens.css and icons.svg are byte copies of docs/design (1.492243ms)
+✔ JetBrains Mono files match the digests in their sources file, with the OFL text (2.818143ms)
+✔ shipped strings are unchanged, and the web keeps its write boundary (1.856825ms)
+✔ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (6039.027572ms)
+✔ five states on Board, Inbox, Tasks, Agents and Trail (3366.746341ms)
+ℹ tests 27
+ℹ suites 0
+ℹ pass 27
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 55726.493145
@@ -0,0 +1,13 @@
+diff --git a/packages/webui/src/public/shell.css b/packages/webui/src/public/shell.css
+index ae98ebd5..1d0049e5 100644
+--- a/packages/webui/src/public/shell.css
+++ b/packages/webui/src/public/shell.css
+@@ -18,7 +18,7 @@ body{font:400 14px/1.5 var(--font);color:var(--text);background:var(--canvas)}
+ code,kbd,pre,.mono{font-family:var(--mono);font-size:12.5px}
+ kbd{border:1px solid var(--line);border-bottom-width:2px;border-radius:4px;padding:0 .35em;background:var(--surface);color:var(--strong);white-space:nowrap;font-size:11.5px}
+ .count,td,.s1-twhen,time,.fresh,.kv dd{font-variant-numeric:tabular-nums}
+-:focus-visible{outline:2px solid var(--focus);outline-offset:2px}
+:focus-visible{outline:2px solid var(--focus);outline-offset:0}
+ table.sessions tbody tr:focus-visible,table.s1-table tbody tr:focus-visible{outline:2px solid var(--focus);outline-offset:-2px}
+ svg.i{width:18px;height:18px;flex:none;fill:none;stroke:currentColor;stroke-width:1.75;stroke-linecap:round;stroke-linejoin:round}
+ 
@@ -0,0 +1,36 @@
+✔ browser edge states: loading, empty, malformed, stale, hostile/long values, in-flight reply and appearance fallback (4400.430089ms)
+Rendered contrast: {"failures":[],"count":330,"lowest":4.504658476260286}
+✔ served Console browser: real board fixtures, keyboard, drafts, receipts, themes, 320px and failures (4300.640965ms)
+✔ S5 pages in a browser: real broker rows, inert text, Copy, routes, failures, layout and no writes (5301.127984ms)
+✔ bus routes serve the four reads from the reader view, unescaped JSON for the page to escape (276.547118ms)
+✔ bus routes are GET-only, have no write verb, and keep the same-origin checks (103.39068ms)
+✔ bus refusals map to statuses and never carry a path or a stack (65.485599ms)
+✔ humanCall speaks the human transport protocol without blocking the server (2151.965579ms)
+✔ busReader takes --business, else the live bus host, else refuses (163.976348ms)
+✔ humanCall kills a transport that runs past its timeout (528.285651ms)
+✔ serve refuses a --business value that is not a business id (172.181607ms)
+✔ conversation view: full history, collapsed tools, hidden thinking, inert hostile content, malformed and reconcile markers (4371.961867ms)
+✔ conversation view: a fork keeps the open branch, says so, and opens the new one on request (2840.647816ms)
+✔ conversation view: a newer session with no readable history keeps the marker (1998.086292ms)
+✔ conversation view: seats without history say so and offer no reply (1131.857592ms)
+✔ Discord row through real board/WebUI: independent brake/liveness, no Reply, literal content (4574.654406ms)
+✔ return flow through the conversation view: send, tool call, delayed result, peer message, exact long answers, relaunch (53632.384811ms)
+✔ both presentations replace old activity with relaunch notice, label retained history, then resume after new activity (4727.108522ms)
+✔ reported return flow and relative Age: reply sent from the inspector, then the new answer appears there without manual refresh (22586.932856ms)
+✔ loopback host and board origin fail closed (7.712823ms)
+✔ real board fixture passes through WebUI; assets and isolated seen/reply work (138.907671ms)
+✔ proxy preserves exact request bytes, status and receipt, rejects forms and malformed JSON, never follows redirect (128.085616ms)
+✔ unreachable board reports URL; CLI rejects unsupported options (1065.673871ms)
+✔ tokens.css and icons.svg are byte copies of docs/design (1.242354ms)
+✔ JetBrains Mono files match the digests in their sources file, with the OFL text (2.442883ms)
+✔ shipped strings are unchanged, and the web keeps its write boundary (1.419635ms)
+✔ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (4421.026726ms)
+✔ five states on Board, Inbox, Tasks, Agents and Trail (2740.769195ms)
+ℹ tests 27
+ℹ suites 0
+ℹ pass 27
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 54058.53995
@@ -0,0 +1,13 @@
+diff --git a/packages/webui/src/public/shell.css b/packages/webui/src/public/shell.css
+index ae98ebd5..a410b866 100644
+--- a/packages/webui/src/public/shell.css
+++ b/packages/webui/src/public/shell.css
+@@ -18,7 +18,7 @@ body{font:400 14px/1.5 var(--font);color:var(--text);background:var(--canvas)}
+ code,kbd,pre,.mono{font-family:var(--mono);font-size:12.5px}
+ kbd{border:1px solid var(--line);border-bottom-width:2px;border-radius:4px;padding:0 .35em;background:var(--surface);color:var(--strong);white-space:nowrap;font-size:11.5px}
+ .count,td,.s1-twhen,time,.fresh,.kv dd{font-variant-numeric:tabular-nums}
+-:focus-visible{outline:2px solid var(--focus);outline-offset:2px}
+:focus-visible{outline:1px solid var(--focus);outline-offset:2px}
+ table.sessions tbody tr:focus-visible,table.s1-table tbody tr:focus-visible{outline:2px solid var(--focus);outline-offset:-2px}
+ svg.i{width:18px;height:18px;flex:none;fill:none;stroke:currentColor;stroke-width:1.75;stroke-linecap:round;stroke-linejoin:round}
+ 
@@ -0,0 +1,53 @@
+✔ browser edge states: loading, empty, malformed, stale, hostile/long values, in-flight reply and appearance fallback (3859.095965ms)
+Rendered contrast: {"failures":[],"count":330,"lowest":4.504658476260286}
+✔ served Console browser: real board fixtures, keyboard, drafts, receipts, themes, 320px and failures (4343.268551ms)
+✔ S5 pages in a browser: real broker rows, inert text, Copy, routes, failures, layout and no writes (6605.907754ms)
+✔ bus routes serve the four reads from the reader view, unescaped JSON for the page to escape (526.606027ms)
+✔ bus routes are GET-only, have no write verb, and keep the same-origin checks (153.465165ms)
+✔ bus refusals map to statuses and never carry a path or a stack (55.167495ms)
+✔ humanCall speaks the human transport protocol without blocking the server (2288.47965ms)
+✔ busReader takes --business, else the live bus host, else refuses (261.219118ms)
+✔ humanCall kills a transport that runs past its timeout (531.076935ms)
+✔ serve refuses a --business value that is not a business id (384.431269ms)
+✔ conversation view: full history, collapsed tools, hidden thinking, inert hostile content, malformed and reconcile markers (3856.193842ms)
+✔ conversation view: a fork keeps the open branch, says so, and opens the new one on request (3060.373427ms)
+✔ conversation view: a newer session with no readable history keeps the marker (1167.486824ms)
+✔ conversation view: seats without history say so and offer no reply (944.374404ms)
+✔ Discord row through real board/WebUI: independent brake/liveness, no Reply, literal content (3875.563993ms)
+✔ return flow through the conversation view: send, tool call, delayed result, peer message, exact long answers, relaunch (56587.254808ms)
+✔ both presentations replace old activity with relaunch notice, label retained history, then resume after new activity (3876.724799ms)
+✔ reported return flow and relative Age: reply sent from the inspector, then the new answer appears there without manual refresh (23324.969843ms)
+✔ loopback host and board origin fail closed (8.786574ms)
+✔ real board fixture passes through WebUI; assets and isolated seen/reply work (146.934201ms)
+✔ proxy preserves exact request bytes, status and receipt, rejects forms and malformed JSON, never follows redirect (134.739961ms)
+✔ unreachable board reports URL; CLI rejects unsupported options (1346.776736ms)
+✔ tokens.css and icons.svg are byte copies of docs/design (0.958173ms)
+✔ JetBrains Mono files match the digests in their sources file, with the OFL text (1.776603ms)
+✔ shipped strings are unchanged, and the web keeps its write boundary (1.395916ms)
+✖ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (3843.314767ms)
+✔ five states on Board, Inbox, Tasks, Agents and Trail (2988.092ms)
+ℹ tests 27
+ℹ suites 0
+ℹ pass 26
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 57019.428623
+
+✖ failing tests:
+
+test at tests/shell.test.mjs:84:1
+✖ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (3843.314767ms)
+  AssertionError [ERR_ASSERTION]: #cmdk outline 1px
+      at TestContext.<anonymous> (file:///home/jwoltje/darkwing-scratch/r53a/mutwt/packages/webui/tests/shell.test.mjs:163:69)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: false,
+    expected: true,
+    operator: '==',
+    diff: 'simple'
+  }
@@ -0,0 +1,13 @@
+diff --git a/packages/webui/src/public/shell.css b/packages/webui/src/public/shell.css
+index ae98ebd5..473b94fe 100644
+--- a/packages/webui/src/public/shell.css
+++ b/packages/webui/src/public/shell.css
+@@ -165,7 +165,7 @@ body.on-bus #board-refused{display:none}
+   .cmd-right label{flex:1 1 0;min-width:0}
+   .cmd-right .btn{flex:none}
+   /* The section list wraps rather than scrolling, so a blocking count never hides a section. */
+-  .s1-sections{display:flex;flex-wrap:wrap;overflow-x:visible;flex-basis:100%;gap:2px;padding-bottom:2px}
+  .s1-sections{display:flex;flex-basis:100%;gap:2px;padding-bottom:2px}
+   .s1-section{border-radius:var(--r);padding:5px 8px;white-space:nowrap;flex:none}
+   .inspector{inset:0;top:0;width:100%;z-index:40;box-shadow:none}
+ }
@@ -0,0 +1,36 @@
+✔ browser edge states: loading, empty, malformed, stale, hostile/long values, in-flight reply and appearance fallback (7740.004399ms)
+Rendered contrast: {"failures":[],"count":330,"lowest":4.504658476260286}
+✔ served Console browser: real board fixtures, keyboard, drafts, receipts, themes, 320px and failures (15045.20497ms)
+✔ S5 pages in a browser: real broker rows, inert text, Copy, routes, failures, layout and no writes (15277.238224ms)
+✔ bus routes serve the four reads from the reader view, unescaped JSON for the page to escape (1915.102997ms)
+✔ bus routes are GET-only, have no write verb, and keep the same-origin checks (37.390122ms)
+✔ bus refusals map to statuses and never carry a path or a stack (16.731727ms)
+✔ humanCall speaks the human transport protocol without blocking the server (1654.594624ms)
+✔ busReader takes --business, else the live bus host, else refuses (229.623851ms)
+✔ humanCall kills a transport that runs past its timeout (528.322018ms)
+✔ serve refuses a --business value that is not a business id (173.324632ms)
+✔ conversation view: full history, collapsed tools, hidden thinking, inert hostile content, malformed and reconcile markers (11063.547959ms)
+✔ conversation view: a fork keeps the open branch, says so, and opens the new one on request (4337.313117ms)
+✔ conversation view: a newer session with no readable history keeps the marker (1973.678474ms)
+✔ conversation view: seats without history say so and offer no reply (1440.938589ms)
+✔ Discord row through real board/WebUI: independent brake/liveness, no Reply, literal content (8131.126692ms)
+✔ return flow through the conversation view: send, tool call, delayed result, peer message, exact long answers, relaunch (51061.883178ms)
+✔ both presentations replace old activity with relaunch notice, label retained history, then resume after new activity (7907.667489ms)
+✔ reported return flow and relative Age: reply sent from the inspector, then the new answer appears there without manual refresh (28815.695414ms)
+✔ loopback host and board origin fail closed (8.80561ms)
+✔ real board fixture passes through WebUI; assets and isolated seen/reply work (302.179616ms)
+✔ proxy preserves exact request bytes, status and receipt, rejects forms and malformed JSON, never follows redirect (203.376087ms)
+✔ unreachable board reports URL; CLI rejects unsupported options (867.064023ms)
+✔ tokens.css and icons.svg are byte copies of docs/design (0.895645ms)
+✔ JetBrains Mono files match the digests in their sources file, with the OFL text (1.910895ms)
+✔ shipped strings are unchanged, and the web keeps its write boundary (1.387285ms)
+✔ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (8972.170949ms)
+✔ five states on Board, Inbox, Tasks, Agents and Trail (6074.516516ms)
+ℹ tests 27
+ℹ suites 0
+ℹ pass 27
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 51415.549688
@@ -0,0 +1,13 @@
+diff --git a/packages/webui/src/public/bus.js b/packages/webui/src/public/bus.js
+index f5389ee6..7dc2fb2c 100644
+--- a/packages/webui/src/public/bus.js
+++ b/packages/webui/src/public/bus.js
+@@ -209,7 +209,7 @@
+     const items = [['/', 'Board', '', 'board'], ['/inbox', 'Inbox', inboxCount ? `<span class="count" aria-label="${inboxCount.open} open for you">${inboxCount.open}</span>${inboxCount.blocking ? ` ${blockChip(`${inboxCount.blocking} blocking`)}` : ''}` : '', 'inbox'], ['/tasks', 'Tasks', '', 'tasks'], ['/agents', 'Agents', '', 'agents']];
+     $('sections').innerHTML = items.map(([h, l, extra, icon]) => {
+       const cur = h === '/' ? route === '/' : route.startsWith(h) || (h === '/tasks' && route.startsWith('/trail/task')) || (h === '/inbox' && route.startsWith('/trail/decision'));
+-      return `<li><a href="#${h}" class="s1-section"${cur ? ' aria-current="page"' : ''}><svg class="i" aria-hidden="true"><use href="/icons.svg#i-${icon}"/></svg>${l}${extra ? ` ${extra}` : ''}</a></li>`;
+      return `<li><a href="#${h}" class="s1-section"${cur ? ' aria-current="page"' : ''}>${l}${extra ? ` ${extra}` : ''}</a></li>`;
+     }).join('');
+   }
+   function countInbox(rows) { inboxCount = { open: rows.length, blocking: rows.filter(d => d.blocking).length }; }
@@ -0,0 +1,56 @@
+✔ browser edge states: loading, empty, malformed, stale, hostile/long values, in-flight reply and appearance fallback (9498.845618ms)
+Rendered contrast: {"failures":[],"count":330,"lowest":4.504658476260286}
+✔ served Console browser: real board fixtures, keyboard, drafts, receipts, themes, 320px and failures (14178.704126ms)
+✔ S5 pages in a browser: real broker rows, inert text, Copy, routes, failures, layout and no writes (14655.718816ms)
+✔ bus routes serve the four reads from the reader view, unescaped JSON for the page to escape (1567.119707ms)
+✔ bus routes are GET-only, have no write verb, and keep the same-origin checks (44.104039ms)
+✔ bus refusals map to statuses and never carry a path or a stack (20.542495ms)
+✔ humanCall speaks the human transport protocol without blocking the server (1704.198859ms)
+✔ busReader takes --business, else the live bus host, else refuses (193.649625ms)
+✔ humanCall kills a transport that runs past its timeout (529.634379ms)
+✔ serve refuses a --business value that is not a business id (195.352905ms)
+✔ conversation view: full history, collapsed tools, hidden thinking, inert hostile content, malformed and reconcile markers (13040.964383ms)
+✔ conversation view: a fork keeps the open branch, says so, and opens the new one on request (3460.713697ms)
+✔ conversation view: a newer session with no readable history keeps the marker (1590.068006ms)
+✔ conversation view: seats without history say so and offer no reply (1041.528275ms)
+✔ Discord row through real board/WebUI: independent brake/liveness, no Reply, literal content (7155.666046ms)
+✔ return flow through the conversation view: send, tool call, delayed result, peer message, exact long answers, relaunch (61163.295912ms)
+✔ both presentations replace old activity with relaunch notice, label retained history, then resume after new activity (8768.9756ms)
+✔ reported return flow and relative Age: reply sent from the inspector, then the new answer appears there without manual refresh (30593.233514ms)
+✔ loopback host and board origin fail closed (10.042054ms)
+✔ real board fixture passes through WebUI; assets and isolated seen/reply work (317.593824ms)
+✔ proxy preserves exact request bytes, status and receipt, rejects forms and malformed JSON, never follows redirect (158.705182ms)
+✔ unreachable board reports URL; CLI rejects unsupported options (1128.252253ms)
+✔ tokens.css and icons.svg are byte copies of docs/design (0.836867ms)
+✔ JetBrains Mono files match the digests in their sources file, with the OFL text (1.649855ms)
+✔ shipped strings are unchanged, and the web keeps its write boundary (1.204314ms)
+✖ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (7835.16493ms)
+✔ five states on Board, Inbox, Tasks, Agents and Trail (5311.153032ms)
+ℹ tests 27
+ℹ suites 0
+ℹ pass 26
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 61560.528856
+
+✖ failing tests:
+
+test at tests/shell.test.mjs:84:1
+✖ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (7835.16493ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  
+  0 !== 4
+  
+      at TestContext.<anonymous> (file:///home/jwoltje/darkwing-scratch/r53a/mutwt/packages/webui/tests/shell.test.mjs:174:12)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 0,
+    expected: 4,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
@@ -0,0 +1,12 @@
+diff --git a/packages/webui/src/public/app.js b/packages/webui/src/public/app.js
+index 1bd88cf2..05a6089e 100644
+--- a/packages/webui/src/public/app.js
+++ b/packages/webui/src/public/app.js
+@@ -296,7 +296,6 @@
+   function accept(value) {
+     if (!value || !Array.isArray(value.sessions) || value.sessions.some(r => !r || typeof r.project !== 'string' || typeof r.agent !== 'string')) throw new Error('Invalid board session data');
+     data = value; failed = false; $('error').hidden = true; $('error').className = 'banner err';
+-    $('board-refused').hidden = true; document.body.classList.remove('board-refused');
+     for (const id of awaiting.keys()) { const r = row(id); if (r && !pending(r)) awaiting.delete(id); }
+     render();
+   }
@@ -0,0 +1,55 @@
+✔ browser edge states: loading, empty, malformed, stale, hostile/long values, in-flight reply and appearance fallback (7188.855809ms)
+Rendered contrast: {"failures":[],"count":330,"lowest":4.504658476260286}
+✔ served Console browser: real board fixtures, keyboard, drafts, receipts, themes, 320px and failures (7271.704177ms)
+✔ S5 pages in a browser: real broker rows, inert text, Copy, routes, failures, layout and no writes (8077.985604ms)
+✔ bus routes serve the four reads from the reader view, unescaped JSON for the page to escape (532.536088ms)
+✔ bus routes are GET-only, have no write verb, and keep the same-origin checks (239.548482ms)
+✔ bus refusals map to statuses and never carry a path or a stack (25.479189ms)
+✔ humanCall speaks the human transport protocol without blocking the server (2707.003302ms)
+✔ busReader takes --business, else the live bus host, else refuses (368.432283ms)
+✔ humanCall kills a transport that runs past its timeout (532.75841ms)
+✔ serve refuses a --business value that is not a business id (253.697624ms)
+✔ conversation view: full history, collapsed tools, hidden thinking, inert hostile content, malformed and reconcile markers (7156.651219ms)
+✔ conversation view: a fork keeps the open branch, says so, and opens the new one on request (2332.626421ms)
+✔ conversation view: a newer session with no readable history keeps the marker (1564.440958ms)
+✔ conversation view: seats without history say so and offer no reply (1088.29525ms)
+✔ Discord row through real board/WebUI: independent brake/liveness, no Reply, literal content (7330.458092ms)
+✔ return flow through the conversation view: send, tool call, delayed result, peer message, exact long answers, relaunch (57918.906247ms)
+✔ both presentations replace old activity with relaunch notice, label retained history, then resume after new activity (7193.459074ms)
+✔ reported return flow and relative Age: reply sent from the inspector, then the new answer appears there without manual refresh (24552.102054ms)
+✔ loopback host and board origin fail closed (9.968967ms)
+✔ real board fixture passes through WebUI; assets and isolated seen/reply work (200.59317ms)
+✔ proxy preserves exact request bytes, status and receipt, rejects forms and malformed JSON, never follows redirect (312.379414ms)
+✔ unreachable board reports URL; CLI rejects unsupported options (1496.667453ms)
+✔ tokens.css and icons.svg are byte copies of docs/design (1.404264ms)
+✔ JetBrains Mono files match the digests in their sources file, with the OFL text (2.784097ms)
+✔ shipped strings are unchanged, and the web keeps its write boundary (1.975862ms)
+✖ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (7313.200709ms)
+✔ five states on Board, Inbox, Tasks, Agents and Trail (2852.110982ms)
+ℹ tests 27
+ℹ suites 0
+ℹ pass 26
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 58512.874055
+
+✖ failing tests:
+
+test at tests/shell.test.mjs:84:1
+✖ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (7313.200709ms)
+  AssertionError [ERR_ASSERTION]: Expected "actual" to be strictly unequal to:
+  
+  'none'
+      at TestContext.<anonymous> (file:///home/jwoltje/darkwing-scratch/r53a/mutwt/packages/webui/tests/shell.test.mjs:147:12)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 'none',
+    expected: 'none',
+    operator: 'notStrictEqual',
+    diff: 'simple'
+  }
@@ -0,0 +1,13 @@
+diff --git a/packages/webui/src/public/bus.js b/packages/webui/src/public/bus.js
+index f5389ee6..24750eb1 100644
+--- a/packages/webui/src/public/bus.js
+++ b/packages/webui/src/public/bus.js
+@@ -525,7 +525,7 @@
+     const a = e.target.closest?.('#bus-view table.s1-table td.s1-title a');
+     if (!a || (e.key !== 'ArrowDown' && e.key !== 'ArrowUp')) return;
+     const links = [...a.closest('table').querySelectorAll('td.s1-title a')], i = links.indexOf(a);
+-    e.preventDefault(); links[i + (e.key === 'ArrowDown' ? 1 : -1)]?.focus();
+    e.preventDefault(); links[i + (e.key === 'ArrowDown' ? -1 : 1)]?.focus();
+   });
+   window.addEventListener('hashchange', () => render(true));
+   $('refresh').addEventListener('click', () => render(false));
@@ -0,0 +1,56 @@
+✔ browser edge states: loading, empty, malformed, stale, hostile/long values, in-flight reply and appearance fallback (7435.806805ms)
+Rendered contrast: {"failures":[],"count":330,"lowest":4.504658476260286}
+✔ served Console browser: real board fixtures, keyboard, drafts, receipts, themes, 320px and failures (7593.581724ms)
+✔ S5 pages in a browser: real broker rows, inert text, Copy, routes, failures, layout and no writes (7674.576199ms)
+✔ bus routes serve the four reads from the reader view, unescaped JSON for the page to escape (288.355604ms)
+✔ bus routes are GET-only, have no write verb, and keep the same-origin checks (177.319585ms)
+✔ bus refusals map to statuses and never carry a path or a stack (56.443497ms)
+✔ humanCall speaks the human transport protocol without blocking the server (2392.104767ms)
+✔ busReader takes --business, else the live bus host, else refuses (283.865828ms)
+✔ humanCall kills a transport that runs past its timeout (530.708861ms)
+✔ serve refuses a --business value that is not a business id (293.569333ms)
+✔ conversation view: full history, collapsed tools, hidden thinking, inert hostile content, malformed and reconcile markers (7220.28677ms)
+✔ conversation view: a fork keeps the open branch, says so, and opens the new one on request (2322.290614ms)
+✔ conversation view: a newer session with no readable history keeps the marker (1306.780472ms)
+✔ conversation view: seats without history say so and offer no reply (977.03291ms)
+✔ Discord row through real board/WebUI: independent brake/liveness, no Reply, literal content (7074.876596ms)
+✔ return flow through the conversation view: send, tool call, delayed result, peer message, exact long answers, relaunch (56183.087593ms)
+✔ both presentations replace old activity with relaunch notice, label retained history, then resume after new activity (6068.013766ms)
+✔ reported return flow and relative Age: reply sent from the inspector, then the new answer appears there without manual refresh (25233.057689ms)
+✔ loopback host and board origin fail closed (9.354686ms)
+✔ real board fixture passes through WebUI; assets and isolated seen/reply work (147.853081ms)
+✔ proxy preserves exact request bytes, status and receipt, rejects forms and malformed JSON, never follows redirect (132.817076ms)
+✔ unreachable board reports URL; CLI rejects unsupported options (1234.273937ms)
+✔ tokens.css and icons.svg are byte copies of docs/design (1.454396ms)
+✔ JetBrains Mono files match the digests in their sources file, with the OFL text (2.999574ms)
+✔ shipped strings are unchanged, and the web keeps its write boundary (1.794182ms)
+✖ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (7048.453702ms)
+✔ five states on Board, Inbox, Tasks, Agents and Trail (2437.068864ms)
+ℹ tests 27
+ℹ suites 0
+ℹ pass 26
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 56798.36445
+
+✖ failing tests:
+
+test at tests/shell.test.mjs:84:1
+✖ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (7048.453702ms)
+  AssertionError [ERR_ASSERTION]: The input did not match the regular expression /Second task/. Input:
+  
+  '#7 Kept task'
+  
+      at TestContext.<anonymous> (file:///home/jwoltje/darkwing-scratch/r53a/mutwt/packages/webui/tests/shell.test.mjs:190:38)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: '#7 Kept task',
+    expected: /Second task/,
+    operator: 'match',
+    diff: 'simple'
+  }
@@ -0,0 +1,13 @@
+diff --git a/packages/webui/src/serve.mjs b/packages/webui/src/serve.mjs
+index 280a228f..93a1958f 100644
+--- a/packages/webui/src/serve.mjs
+++ b/packages/webui/src/serve.mjs
+@@ -22,7 +22,7 @@ const files = new Map([
+   ['/', ['index.html', 'text/html; charset=utf-8']],
+   ...['app.js', 'brand.js', 'bus.js'].map(f => ['/' + f, [f, 'text/javascript; charset=utf-8']]),
+   ...['shared/app.css', 'tokens.css', 'console.css', 'live.css', 'bus.css', 'shell.css'].map(f => ['/' + f, [f, 'text/css; charset=utf-8']]),
+-  ['/icons.svg', ['icons.svg', 'image/svg+xml']],
+  ['/icons.svg', ['icons.svg', 'text/plain']],
+   ...[400, 500, 600, 700].map(w => [`/assets/fonts/manrope-${w}.woff2`, [`assets/fonts/manrope-${w}.woff2`, 'font/woff2']]),
+   ...[400, 500, 700].map(w => [`/assets/fonts/jetbrains-mono-${w}.woff2`, [`assets/fonts/jetbrains-mono-${w}.woff2`, 'font/woff2']]),
+ ]);
@@ -0,0 +1,53 @@
+✔ browser edge states: loading, empty, malformed, stale, hostile/long values, in-flight reply and appearance fallback (5198.663054ms)
+Rendered contrast: {"failures":[],"count":330,"lowest":4.504658476260286}
+✔ served Console browser: real board fixtures, keyboard, drafts, receipts, themes, 320px and failures (5584.343092ms)
+✔ S5 pages in a browser: real broker rows, inert text, Copy, routes, failures, layout and no writes (7086.448634ms)
+✔ bus routes serve the four reads from the reader view, unescaped JSON for the page to escape (267.907334ms)
+✔ bus routes are GET-only, have no write verb, and keep the same-origin checks (134.094408ms)
+✔ bus refusals map to statuses and never carry a path or a stack (114.691386ms)
+✔ humanCall speaks the human transport protocol without blocking the server (2562.538599ms)
+✔ busReader takes --business, else the live bus host, else refuses (332.854133ms)
+✔ humanCall kills a transport that runs past its timeout (537.451045ms)
+✔ serve refuses a --business value that is not a business id (322.845795ms)
+✔ conversation view: full history, collapsed tools, hidden thinking, inert hostile content, malformed and reconcile markers (5397.416668ms)
+✔ conversation view: a fork keeps the open branch, says so, and opens the new one on request (2651.201165ms)
+✔ conversation view: a newer session with no readable history keeps the marker (1371.821427ms)
+✔ conversation view: seats without history say so and offer no reply (1038.855758ms)
+✔ Discord row through real board/WebUI: independent brake/liveness, no Reply, literal content (5467.101437ms)
+✔ return flow through the conversation view: send, tool call, delayed result, peer message, exact long answers, relaunch (54944.465486ms)
+✔ both presentations replace old activity with relaunch notice, label retained history, then resume after new activity (5191.271543ms)
+✔ reported return flow and relative Age: reply sent from the inspector, then the new answer appears there without manual refresh (24030.373521ms)
+✔ loopback host and board origin fail closed (11.434928ms)
+✖ real board fixture passes through WebUI; assets and isolated seen/reply work (119.713354ms)
+✔ proxy preserves exact request bytes, status and receipt, rejects forms and malformed JSON, never follows redirect (86.02832ms)
+✔ unreachable board reports URL; CLI rejects unsupported options (1407.454964ms)
+✔ tokens.css and icons.svg are byte copies of docs/design (1.624361ms)
+✔ JetBrains Mono files match the digests in their sources file, with the OFL text (3.168129ms)
+✔ shipped strings are unchanged, and the web keeps its write boundary (1.840078ms)
+✔ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (5147.231405ms)
+✔ five states on Board, Inbox, Tasks, Agents and Trail (2781.962804ms)
+ℹ tests 27
+ℹ suites 0
+ℹ pass 26
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 55451.838299
+
+✖ failing tests:
+
+test at tests/serve.test.mjs:22:1
+✖ real board fixture passes through WebUI; assets and isolated seen/reply work (119.713354ms)
+  AssertionError [ERR_ASSERTION]: /icons.svg
+      at TestContext.<anonymous> (file:///home/jwoltje/darkwing-scratch/r53a/mutwt/packages/webui/tests/serve.test.mjs:41:101)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: false,
+    expected: true,
+    operator: '==',
+    diff: 'simple'
+  }
@@ -0,0 +1,13 @@
+diff --git a/packages/webui/src/public/shell.css b/packages/webui/src/public/shell.css
+index ae98ebd5..ef259cfa 100644
+--- a/packages/webui/src/public/shell.css
+++ b/packages/webui/src/public/shell.css
+@@ -17,7 +17,7 @@ body{font:400 14px/1.5 var(--font);color:var(--text);background:var(--canvas)}
+ .tree-title,.label{font:700 11px/1.3 var(--font);letter-spacing:.06em;text-transform:uppercase;color:var(--muted)}
+ code,kbd,pre,.mono{font-family:var(--mono);font-size:12.5px}
+ kbd{border:1px solid var(--line);border-bottom-width:2px;border-radius:4px;padding:0 .35em;background:var(--surface);color:var(--strong);white-space:nowrap;font-size:11.5px}
+-.count,td,.s1-twhen,time,.fresh,.kv dd{font-variant-numeric:tabular-nums}
+
+ :focus-visible{outline:2px solid var(--focus);outline-offset:2px}
+ table.sessions tbody tr:focus-visible,table.s1-table tbody tr:focus-visible{outline:2px solid var(--focus);outline-offset:-2px}
+ svg.i{width:18px;height:18px;flex:none;fill:none;stroke:currentColor;stroke-width:1.75;stroke-linecap:round;stroke-linejoin:round}
@@ -0,0 +1,36 @@
+✔ browser edge states: loading, empty, malformed, stale, hostile/long values, in-flight reply and appearance fallback (5815.739101ms)
+Rendered contrast: {"failures":[],"count":330,"lowest":4.504658476260286}
+✔ served Console browser: real board fixtures, keyboard, drafts, receipts, themes, 320px and failures (6306.605756ms)
+✔ S5 pages in a browser: real broker rows, inert text, Copy, routes, failures, layout and no writes (6556.920755ms)
+✔ bus routes serve the four reads from the reader view, unescaped JSON for the page to escape (230.898299ms)
+✔ bus routes are GET-only, have no write verb, and keep the same-origin checks (124.363066ms)
+✔ bus refusals map to statuses and never carry a path or a stack (99.788074ms)
+✔ humanCall speaks the human transport protocol without blocking the server (2290.268607ms)
+✔ busReader takes --business, else the live bus host, else refuses (512.295669ms)
+✔ humanCall kills a transport that runs past its timeout (532.334409ms)
+✔ serve refuses a --business value that is not a business id (378.3221ms)
+✔ conversation view: full history, collapsed tools, hidden thinking, inert hostile content, malformed and reconcile markers (5862.379595ms)
+✔ conversation view: a fork keeps the open branch, says so, and opens the new one on request (2207.341974ms)
+✔ conversation view: a newer session with no readable history keeps the marker (1319.855887ms)
+✔ conversation view: seats without history say so and offer no reply (945.392215ms)
+✔ Discord row through real board/WebUI: independent brake/liveness, no Reply, literal content (5845.529279ms)
+✔ return flow through the conversation view: send, tool call, delayed result, peer message, exact long answers, relaunch (55253.928142ms)
+✔ both presentations replace old activity with relaunch notice, label retained history, then resume after new activity (5750.276641ms)
+✔ reported return flow and relative Age: reply sent from the inspector, then the new answer appears there without manual refresh (23895.725251ms)
+✔ loopback host and board origin fail closed (11.74274ms)
+✔ real board fixture passes through WebUI; assets and isolated seen/reply work (138.324612ms)
+✔ proxy preserves exact request bytes, status and receipt, rejects forms and malformed JSON, never follows redirect (125.990286ms)
+✔ unreachable board reports URL; CLI rejects unsupported options (1148.873598ms)
+✔ tokens.css and icons.svg are byte copies of docs/design (1.610914ms)
+✔ JetBrains Mono files match the digests in their sources file, with the OFL text (2.83ms)
+✔ shipped strings are unchanged, and the web keeps its write boundary (2.108441ms)
+✔ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (6080.959306ms)
+✔ five states on Board, Inbox, Tasks, Agents and Trail (2551.546835ms)
+ℹ tests 27
+ℹ suites 0
+ℹ pass 27
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 55753.3057
@@ -0,0 +1,13 @@
+diff --git a/packages/webui/src/public/app.js b/packages/webui/src/public/app.js
+index 1bd88cf2..889f9b50 100644
+--- a/packages/webui/src/public/app.js
+++ b/packages/webui/src/public/app.js
+@@ -43,7 +43,7 @@
+     document.documentElement.dataset.palette = palette;
+     if (mode === 'system') delete document.documentElement.dataset.mode; else document.documentElement.dataset.mode = mode;
+     $('palette').value = palette; $('mode').value = mode;
+-    try { localStorage.setItem('mosaic-console-appearance', JSON.stringify({ palette, mode })); } catch {}
+    try { localStorage.setItem('mosaic-console-look', JSON.stringify({ palette, mode })); } catch {}
+   }
+   $('palette').innerHTML = Brand.palettes.map(p => `<option value="${p.id}">${p.name}</option>`).join('');
+   try { const saved = JSON.parse(localStorage.getItem('mosaic-console-appearance')); if (saved) { palette = saved.palette; mode = saved.mode; } } catch {}
@@ -0,0 +1,48 @@
+✔ browser edge states: loading, empty, malformed, stale, hostile/long values, in-flight reply and appearance fallback (6509.180091ms)
+Rendered contrast: {"failures":[],"count":330,"lowest":4.504658476260286}
+✔ served Console browser: real board fixtures, keyboard, drafts, receipts, themes, 320px and failures (6694.384219ms)
+✔ S5 pages in a browser: real broker rows, inert text, Copy, routes, failures, layout and no writes (8448.50645ms)
+✔ bus routes serve the four reads from the reader view, unescaped JSON for the page to escape (283.095687ms)
+✔ bus routes are GET-only, have no write verb, and keep the same-origin checks (94.261689ms)
+✔ bus refusals map to statuses and never carry a path or a stack (171.22577ms)
+✔ humanCall speaks the human transport protocol without blocking the server (3166.486182ms)
+✔ busReader takes --business, else the live bus host, else refuses (634.294634ms)
+✔ humanCall kills a transport that runs past its timeout (546.416392ms)
+✔ serve refuses a --business value that is not a business id (277.920278ms)
+✔ conversation view: full history, collapsed tools, hidden thinking, inert hostile content, malformed and reconcile markers (5843.479393ms)
+✔ conversation view: a fork keeps the open branch, says so, and opens the new one on request (2979.713955ms)
+✔ conversation view: a newer session with no readable history keeps the marker (1525.00909ms)
+✔ conversation view: seats without history say so and offer no reply (1119.901705ms)
+✔ Discord row through real board/WebUI: independent brake/liveness, no Reply, literal content (5907.046805ms)
+✔ return flow through the conversation view: send, tool call, delayed result, peer message, exact long answers, relaunch (56798.491522ms)
+✔ both presentations replace old activity with relaunch notice, label retained history, then resume after new activity (5982.963587ms)
+✔ reported return flow and relative Age: reply sent from the inspector, then the new answer appears there without manual refresh (23060.663865ms)
+✔ loopback host and board origin fail closed (9.911459ms)
+✔ real board fixture passes through WebUI; assets and isolated seen/reply work (151.827716ms)
+✔ proxy preserves exact request bytes, status and receipt, rejects forms and malformed JSON, never follows redirect (120.177257ms)
+✔ unreachable board reports URL; CLI rejects unsupported options (1888.294464ms)
+✔ tokens.css and icons.svg are byte copies of docs/design (1.461055ms)
+✔ JetBrains Mono files match the digests in their sources file, with the OFL text (3.105203ms)
+✔ shipped strings are unchanged, and the web keeps its write boundary (1.844539ms)
+✖ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (5599.305116ms)
+✔ five states on Board, Inbox, Tasks, Agents and Trail (3190.605625ms)
+ℹ tests 27
+ℹ suites 0
+ℹ pass 26
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 57257.534522
+
+✖ failing tests:
+
+test at tests/shell.test.mjs:84:1
+✖ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (5599.305116ms)
+  Error: Uncaught: TypeError: Cannot read properties of null (reading 'mode')
+      at <anonymous>:1:62
+      at Object.evaluate (file:///home/jwoltje/darkwing-scratch/r53a/mutwt/packages/webui/tests/browser.mjs:44:35)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async TestContext.<anonymous> (file:///home/jwoltje/darkwing-scratch/r53a/mutwt/packages/webui/tests/shell.test.mjs:117:18)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
@@ -0,0 +1,13 @@
+diff --git a/packages/webui/src/public/shell.css b/packages/webui/src/public/shell.css
+index ae98ebd5..618e1126 100644
+--- a/packages/webui/src/public/shell.css
+++ b/packages/webui/src/public/shell.css
+@@ -97,7 +97,7 @@ table.s1-table td code{font-size:12.5px;white-space:nowrap}
+ .skel{display:block;height:12px;border-radius:4px;background:var(--raised);animation:skel 1.4s ease-in-out infinite}
+ .skel:nth-child(odd){width:82%}
+ @keyframes skel{50%{opacity:.45}}
+-body.board-refused #board-view{display:none}
+
+ body.on-bus #board-refused{display:none}
+ 
+ /* Toast: one line, polite, bottom centre. */
@@ -0,0 +1,56 @@
+✔ browser edge states: loading, empty, malformed, stale, hostile/long values, in-flight reply and appearance fallback (4795.15073ms)
+Rendered contrast: {"failures":[],"count":330,"lowest":4.504658476260286}
+✔ served Console browser: real board fixtures, keyboard, drafts, receipts, themes, 320px and failures (5559.593964ms)
+✔ S5 pages in a browser: real broker rows, inert text, Copy, routes, failures, layout and no writes (7776.997828ms)
+✔ bus routes serve the four reads from the reader view, unescaped JSON for the page to escape (1077.378774ms)
+✔ bus routes are GET-only, have no write verb, and keep the same-origin checks (172.941475ms)
+✔ bus refusals map to statuses and never carry a path or a stack (171.347229ms)
+✔ humanCall speaks the human transport protocol without blocking the server (2180.586418ms)
+✔ busReader takes --business, else the live bus host, else refuses (290.631709ms)
+✔ humanCall kills a transport that runs past its timeout (528.862733ms)
+✔ serve refuses a --business value that is not a business id (172.199777ms)
+✔ conversation view: full history, collapsed tools, hidden thinking, inert hostile content, malformed and reconcile markers (5528.326861ms)
+✔ conversation view: a fork keeps the open branch, says so, and opens the new one on request (3194.267668ms)
+✔ conversation view: a newer session with no readable history keeps the marker (1843.504674ms)
+✔ conversation view: seats without history say so and offer no reply (1433.153552ms)
+✔ Discord row through real board/WebUI: independent brake/liveness, no Reply, literal content (6538.626521ms)
+✔ return flow through the conversation view: send, tool call, delayed result, peer message, exact long answers, relaunch (55681.83814ms)
+✔ both presentations replace old activity with relaunch notice, label retained history, then resume after new activity (6466.894866ms)
+✔ reported return flow and relative Age: reply sent from the inspector, then the new answer appears there without manual refresh (22981.556096ms)
+✔ loopback host and board origin fail closed (10.31224ms)
+✔ real board fixture passes through WebUI; assets and isolated seen/reply work (151.493703ms)
+✔ proxy preserves exact request bytes, status and receipt, rejects forms and malformed JSON, never follows redirect (131.02258ms)
+✔ unreachable board reports URL; CLI rejects unsupported options (1643.650438ms)
+✔ tokens.css and icons.svg are byte copies of docs/design (1.118919ms)
+✔ JetBrains Mono files match the digests in their sources file, with the OFL text (2.164409ms)
+✔ shipped strings are unchanged, and the web keeps its write boundary (1.524389ms)
+✖ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (4961.827843ms)
+✔ five states on Board, Inbox, Tasks, Agents and Trail (3334.087324ms)
+ℹ tests 27
+ℹ suites 0
+ℹ pass 26
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 56099.695862
+
+✖ failing tests:
+
+test at tests/shell.test.mjs:84:1
+✖ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (4961.827843ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  
+  'block' !== 'none'
+  
+      at TestContext.<anonymous> (file:///home/jwoltje/darkwing-scratch/r53a/mutwt/packages/webui/tests/shell.test.mjs:142:12)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 'block',
+    expected: 'none',
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
@@ -0,0 +1,13 @@
+diff --git a/packages/webui/src/public/bus.js b/packages/webui/src/public/bus.js
+index f5389ee6..c40651fd 100644
+--- a/packages/webui/src/public/bus.js
+++ b/packages/webui/src/public/bus.js
+@@ -430,7 +430,7 @@
+     try { html = await view(live, path, new URLSearchParams(query)); readAt = live.oldest(); }
+     catch (err) {
+       const kept = reader(false);
+-      try { if (refusal(err)) throw err; html = await view(kept, path, new URLSearchParams(query)); readAt = kept.oldest(); html = staleBanner(err) + html; state = 'stale'; }
+      try { html = await view(kept, path, new URLSearchParams(query)); readAt = kept.oldest(); html = staleBanner(err) + html; state = 'stale'; }
+       catch { html = failedView(err); state = 'failed'; }
+     }
+     if (g !== gen) return;
@@ -0,0 +1,56 @@
+✔ browser edge states: loading, empty, malformed, stale, hostile/long values, in-flight reply and appearance fallback (5189.150978ms)
+Rendered contrast: {"failures":[],"count":330,"lowest":4.504658476260286}
+✔ served Console browser: real board fixtures, keyboard, drafts, receipts, themes, 320px and failures (4797.468611ms)
+✔ S5 pages in a browser: real broker rows, inert text, Copy, routes, failures, layout and no writes (7333.317174ms)
+✔ bus routes serve the four reads from the reader view, unescaped JSON for the page to escape (293.313629ms)
+✔ bus routes are GET-only, have no write verb, and keep the same-origin checks (270.398019ms)
+✔ bus refusals map to statuses and never carry a path or a stack (46.997252ms)
+✔ humanCall speaks the human transport protocol without blocking the server (2498.469401ms)
+✔ busReader takes --business, else the live bus host, else refuses (561.937736ms)
+✔ humanCall kills a transport that runs past its timeout (529.448403ms)
+✔ serve refuses a --business value that is not a business id (158.123778ms)
+✔ conversation view: full history, collapsed tools, hidden thinking, inert hostile content, malformed and reconcile markers (5165.831607ms)
+✔ conversation view: a fork keeps the open branch, says so, and opens the new one on request (2318.690956ms)
+✔ conversation view: a newer session with no readable history keeps the marker (1214.295855ms)
+✔ conversation view: seats without history say so and offer no reply (858.950234ms)
+✔ Discord row through real board/WebUI: independent brake/liveness, no Reply, literal content (5772.38394ms)
+✔ return flow through the conversation view: send, tool call, delayed result, peer message, exact long answers, relaunch (56013.500976ms)
+✔ both presentations replace old activity with relaunch notice, label retained history, then resume after new activity (5767.671969ms)
+✔ reported return flow and relative Age: reply sent from the inspector, then the new answer appears there without manual refresh (22044.47108ms)
+✔ loopback host and board origin fail closed (8.098491ms)
+✔ real board fixture passes through WebUI; assets and isolated seen/reply work (116.266396ms)
+✔ proxy preserves exact request bytes, status and receipt, rejects forms and malformed JSON, never follows redirect (149.164044ms)
+✔ unreachable board reports URL; CLI rejects unsupported options (1526.468607ms)
+✔ tokens.css and icons.svg are byte copies of docs/design (1.016667ms)
+✔ JetBrains Mono files match the digests in their sources file, with the OFL text (2.453188ms)
+✔ shipped strings are unchanged, and the web keeps its write boundary (1.576672ms)
+✖ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (10536.386855ms)
+✖ five states on Board, Inbox, Tasks, Agents and Trail (6210.0518ms)
+ℹ tests 27
+ℹ suites 0
+ℹ pass 25
+ℹ fail 2
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 56442.086324
+
+✖ failing tests:
+
+test at tests/shell.test.mjs:84:1
+✖ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (10536.386855ms)
+  Error: Uncaught (in promise) Error: Condition timed out: !!document.querySelector("#bus-view .banner.ref"): undefined
+      at Object.evaluate (file:///home/jwoltje/darkwing-scratch/r53a/mutwt/packages/webui/tests/browser.mjs:44:35)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async TestContext.<anonymous> (file:///home/jwoltje/darkwing-scratch/r53a/mutwt/packages/webui/tests/shell.test.mjs:196:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+
+test at tests/shell.test.mjs:278:1
+✖ five states on Board, Inbox, Tasks, Agents and Trail (6210.0518ms)
+  Error: Uncaught (in promise) Error: Condition timed out: !!document.querySelector("#bus-view .banner.ref"): undefined
+      at Object.evaluate (file:///home/jwoltje/darkwing-scratch/r53a/mutwt/packages/webui/tests/browser.mjs:44:35)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async TestContext.<anonymous> (file:///home/jwoltje/darkwing-scratch/r53a/mutwt/packages/webui/tests/shell.test.mjs:337:7)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
@@ -0,0 +1,13 @@
+diff --git a/packages/webui/src/public/app.js b/packages/webui/src/public/app.js
+index 1bd88cf2..560b6b11 100644
+--- a/packages/webui/src/public/app.js
+++ b/packages/webui/src/public/app.js
+@@ -304,7 +304,7 @@
+   function error(err) {
+     failed = true; $('error').hidden = false;
+     const refused = err.status === 403;
+-    $('error').className = refused ? 'banner ref' : 'banner err';
+    $('error').className = 'banner err';
+     $('board-refused').hidden = !refused; document.body.classList.toggle('board-refused', refused);
+     $('error').innerHTML = refused
+       ? `<p><b>The board refused the read.</b> refused: <code>${esc(err.message)}</code> Board: ${esc(board)}. Console shows nothing rather than a guess. Use Refresh to try again.</p>`
@@ -0,0 +1,59 @@
+✔ browser edge states: loading, empty, malformed, stale, hostile/long values, in-flight reply and appearance fallback (4106.705441ms)
+Rendered contrast: {"failures":[],"count":330,"lowest":4.504658476260286}
+✔ served Console browser: real board fixtures, keyboard, drafts, receipts, themes, 320px and failures (4897.321923ms)
+✔ S5 pages in a browser: real broker rows, inert text, Copy, routes, failures, layout and no writes (7067.560106ms)
+✔ bus routes serve the four reads from the reader view, unescaped JSON for the page to escape (240.258586ms)
+✔ bus routes are GET-only, have no write verb, and keep the same-origin checks (133.598704ms)
+✔ bus refusals map to statuses and never carry a path or a stack (67.321441ms)
+✔ humanCall speaks the human transport protocol without blocking the server (3115.331024ms)
+✔ busReader takes --business, else the live bus host, else refuses (181.812826ms)
+✔ humanCall kills a transport that runs past its timeout (527.655765ms)
+✔ serve refuses a --business value that is not a business id (166.522998ms)
+✔ conversation view: full history, collapsed tools, hidden thinking, inert hostile content, malformed and reconcile markers (4231.728036ms)
+✔ conversation view: a fork keeps the open branch, says so, and opens the new one on request (2973.78925ms)
+✔ conversation view: a newer session with no readable history keeps the marker (1229.737715ms)
+✔ conversation view: seats without history say so and offer no reply (730.936985ms)
+✔ Discord row through real board/WebUI: independent brake/liveness, no Reply, literal content (4274.78806ms)
+✔ return flow through the conversation view: send, tool call, delayed result, peer message, exact long answers, relaunch (55233.84178ms)
+✔ both presentations replace old activity with relaunch notice, label retained history, then resume after new activity (4670.272359ms)
+✔ reported return flow and relative Age: reply sent from the inspector, then the new answer appears there without manual refresh (22574.934461ms)
+✔ loopback host and board origin fail closed (7.615952ms)
+✔ real board fixture passes through WebUI; assets and isolated seen/reply work (131.841633ms)
+✔ proxy preserves exact request bytes, status and receipt, rejects forms and malformed JSON, never follows redirect (99.940777ms)
+✔ unreachable board reports URL; CLI rejects unsupported options (1879.694356ms)
+✔ tokens.css and icons.svg are byte copies of docs/design (1.434754ms)
+✔ JetBrains Mono files match the digests in their sources file, with the OFL text (2.048983ms)
+✔ shipped strings are unchanged, and the web keeps its write boundary (1.308296ms)
+✖ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (4582.403832ms)
+✔ five states on Board, Inbox, Tasks, Agents and Trail (3147.731873ms)
+ℹ tests 27
+ℹ suites 0
+ℹ pass 26
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 55736.314772
+
+✖ failing tests:
+
+test at tests/shell.test.mjs:84:1
+✖ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (4582.403832ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  + actual - expected
+  
+  + 'banner err'
+  - 'banner ref'
+            ^
+  
+      at TestContext.<anonymous> (file:///home/jwoltje/darkwing-scratch/r53a/mutwt/packages/webui/tests/shell.test.mjs:140:12)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 'banner err',
+    expected: 'banner ref',
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
@@ -0,0 +1,16 @@
+packages/webui/README.md: OK
+packages/webui/src/public/app.js: OK
+packages/webui/src/public/assets/fonts/jetbrains-mono-400.woff2: OK
+packages/webui/src/public/assets/fonts/jetbrains-mono-500.woff2: OK
+packages/webui/src/public/assets/fonts/jetbrains-mono-700.woff2: OK
+packages/webui/src/public/assets/fonts/jetbrains-mono-OFL.txt: OK
+packages/webui/src/public/assets/fonts/jetbrains-mono-sources.txt: OK
+packages/webui/src/public/bus.js: OK
+packages/webui/src/public/icons.svg: OK
+packages/webui/src/public/index.html: OK
+packages/webui/src/public/shell.css: OK
+packages/webui/src/public/tokens.css: OK
+packages/webui/src/serve.mjs: OK
+packages/webui/tests/browser.mjs: OK
+packages/webui/tests/serve.test.mjs: OK
+packages/webui/tests/shell.test.mjs: OK
@@ -0,0 +1,31 @@
+# mutate.py <id>: apply one named mutant to the candidate (exact text, must match once). Run from the tree root.
+import sys
+B, A, C, S, H = "packages/webui/src/public/bus.js", "packages/webui/src/public/app.js", "packages/webui/src/public/shell.css", "packages/webui/src/serve.mjs", "packages/webui/src/public/index.html"
+M = {
+ "M01": [(B, "err.status === 403 || ['not-configured', 'no-bus-host'].includes(err.code);", "err.status === 403;")],
+ "M02": [(A, "const refused = err.status === 403;", "const refused = false;")],
+ "M03": [(A, "document.body.classList.toggle('board-refused', refused);", "")],
+ "M04": [(B, "<b>refused: <code>${txt(err.code)}</code>.</b> ", "<b>refused: ${txt(err.code)}.</b> ")],
+ "M05": [(B, "${state === 'stale' ? ' · <span class=\"warn\">stale: the last read failed</span>' : ''}", "")],
+ "M06": [(A, "if (mode === 'system') delete document.documentElement.dataset.mode; else document.documentElement.dataset.mode = mode;", "document.documentElement.dataset.mode = mode;")],
+ "M07": [(B, "t.innerHTML = `<span>${esc(text)}</span>", "t.innerHTML = `<span>${text}</span>")],
+ "M08": [(B, "<span>${txt(i.label)}</span><span class=\"g\">", "<span>${i.label}</span><span class=\"g\">")],
+ "M09": [(C, ":focus-visible{outline:2px solid var(--focus);outline-offset:2px}", ":focus-visible{outline:2px solid var(--focus);outline-offset:0}")],
+ "M10": [(C, ":focus-visible{outline:2px solid var(--focus);outline-offset:2px}", ":focus-visible{outline:1px solid var(--focus);outline-offset:2px}")],
+ "M11": [(C, "  .s1-sections{display:flex;flex-wrap:wrap;overflow-x:visible;flex-basis:100%;gap:2px;padding-bottom:2px}", "  .s1-sections{display:flex;flex-basis:100%;gap:2px;padding-bottom:2px}")],
+ "M12": [(B, "<svg class=\"i\" aria-hidden=\"true\"><use href=\"/icons.svg#i-${icon}\"/></svg>", "")],
+ "M13": [(A, "    $('board-refused').hidden = true; document.body.classList.remove('board-refused');\n", "")],
+ "M14": [(B, "links[i + (e.key === 'ArrowDown' ? 1 : -1)]?.focus();", "links[i + (e.key === 'ArrowDown' ? -1 : 1)]?.focus();")],
+ "M15": [(S, "['/icons.svg', ['icons.svg', 'image/svg+xml']],", "['/icons.svg', ['icons.svg', 'text/plain']],")],
+ "M16": [(C, ".count,td,.s1-twhen,time,.fresh,.kv dd{font-variant-numeric:tabular-nums}", "")],
+ "M17": [(A, "try { localStorage.setItem('mosaic-console-appearance',", "try { localStorage.setItem('mosaic-console-look',")],
+ "M18": [(C, "body.board-refused #board-view{display:none}", "")],
+ "M19": [(B, "if (refusal(err)) throw err; html = await view(kept,", "html = await view(kept,")],
+ "M20": [(A, "$('error').className = refused ? 'banner ref' : 'banner err';", "$('error').className = 'banner err';")],
+}
+for f, old, new in M[sys.argv[1]]:
+    s = open(f).read()
+    n = s.count(old)
+    if n != 1: sys.exit(f"{sys.argv[1]}: {n} matches in {f}")
+    open(f, "w").write(s.replace(old, new))
+print(sys.argv[1], "applied")
@@ -0,0 +1,15 @@
+#!/bin/bash
+# Each mutant against the packages/webui suite in a candidate worktree, then restores from the index.
+export TMPDIR=~/darkwing-scratch/r53a/tmp
+S=~/darkwing-scratch/r53a; M=$S/mut; W=$S/mutwt
+: > $M/summary.txt
+echo "start $(date -u +%FT%TZ)" >> $M/summary.txt
+for v in $(python3 -c 'import re;print(" ".join(sorted(set(re.findall(r"\"(M\d\d)\"", open("'$M'/mutate.py").read())))))'); do
+  (cd $W && git checkout -q -- packages/webui && python3 $M/mutate.py $v > /dev/null && git diff > $M/$v.diff) || { echo "$v APPLY-FAILED" >> $M/summary.txt; continue; }
+  (cd $W/packages/webui && env -u NODE_TEST_CONTEXT node --test 'tests/*.test.mjs' > $M/$v.txt 2>&1); e=$?
+  r=killed; [ $e = 0 ] && r=SURVIVED
+  echo "$v $r exit=$e $(grep -E '^ℹ (pass|fail)' $M/$v.txt | tr '\n' ' ')" >> $M/summary.txt
+done
+(cd $W && git checkout -q -- packages/webui && sha256sum -c $S/pkt/candidate-manifest.sha256) > $M/manifest-after.txt 2>&1
+echo "end $(date -u +%FT%TZ)" >> $M/summary.txt
+echo DONE >> $M/summary.txt
@@ -0,0 +1,23 @@
+start 2026-10-10T17:37:26Z
+M01 SURVIVED exit=0 ℹ pass 27 ℹ fail 0 
+M02 killed exit=1 ℹ pass 26 ℹ fail 1 
+M03 killed exit=1 ℹ pass 26 ℹ fail 1 
+M04 SURVIVED exit=0 ℹ pass 27 ℹ fail 0 
+M05 killed exit=1 ℹ pass 25 ℹ fail 2 
+M06 killed exit=1 ℹ pass 26 ℹ fail 1 
+M07 SURVIVED exit=0 ℹ pass 27 ℹ fail 0 
+M08 SURVIVED exit=0 ℹ pass 27 ℹ fail 0 
+M09 SURVIVED exit=0 ℹ pass 27 ℹ fail 0 
+M10 killed exit=1 ℹ pass 26 ℹ fail 1 
+M11 SURVIVED exit=0 ℹ pass 27 ℹ fail 0 
+M12 killed exit=1 ℹ pass 26 ℹ fail 1 
+M13 killed exit=1 ℹ pass 26 ℹ fail 1 
+M14 killed exit=1 ℹ pass 26 ℹ fail 1 
+M15 killed exit=1 ℹ pass 26 ℹ fail 1 
+M16 SURVIVED exit=0 ℹ pass 27 ℹ fail 0 
+M17 killed exit=1 ℹ pass 26 ℹ fail 1 
+M18 killed exit=1 ℹ pass 26 ℹ fail 1 
+M19 killed exit=1 ℹ pass 25 ℹ fail 2 
+M20 killed exit=1 ℹ pass 26 ℹ fail 1 
+end 2026-10-10T17:56:15Z
+DONE
@@ -0,0 +1 @@
+tokens.css is current
@@ -0,0 +1,36 @@
+✔ browser edge states: loading, empty, malformed, stale, hostile/long values, in-flight reply and appearance fallback (3254.037973ms)
+Rendered contrast: {"failures":[],"count":330,"lowest":4.504658476260286}
+✔ served Console browser: real board fixtures, keyboard, drafts, receipts, themes, 320px and failures (4707.01393ms)
+✔ S5 pages in a browser: real broker rows, inert text, Copy, routes, failures, layout and no writes (6741.095235ms)
+✔ bus routes serve the four reads from the reader view, unescaped JSON for the page to escape (341.416961ms)
+✔ bus routes are GET-only, have no write verb, and keep the same-origin checks (180.268473ms)
+✔ bus refusals map to statuses and never carry a path or a stack (112.024139ms)
+✔ humanCall speaks the human transport protocol without blocking the server (2572.17701ms)
+✔ busReader takes --business, else the live bus host, else refuses (222.163707ms)
+✔ humanCall kills a transport that runs past its timeout (535.12865ms)
+✔ serve refuses a --business value that is not a business id (197.661373ms)
+✔ conversation view: full history, collapsed tools, hidden thinking, inert hostile content, malformed and reconcile markers (3213.259707ms)
+✔ conversation view: a fork keeps the open branch, says so, and opens the new one on request (3818.250352ms)
+✔ conversation view: a newer session with no readable history keeps the marker (1561.547729ms)
+✔ conversation view: seats without history say so and offer no reply (1241.12093ms)
+✔ Discord row through real board/WebUI: independent brake/liveness, no Reply, literal content (5596.096268ms)
+✔ return flow through the conversation view: send, tool call, delayed result, peer message, exact long answers, relaunch (55064.519411ms)
+✔ both presentations replace old activity with relaunch notice, label retained history, then resume after new activity (4872.400872ms)
+✔ reported return flow and relative Age: reply sent from the inspector, then the new answer appears there without manual refresh (23577.983738ms)
+✔ loopback host and board origin fail closed (9.569663ms)
+✔ real board fixture passes through WebUI; assets and isolated seen/reply work (138.151914ms)
+✔ proxy preserves exact request bytes, status and receipt, rejects forms and malformed JSON, never follows redirect (103.234277ms)
+✔ unreachable board reports URL; CLI rejects unsupported options (1667.864763ms)
+✔ tokens.css and icons.svg are byte copies of docs/design (1.458809ms)
+✔ JetBrains Mono files match the digests in their sources file, with the OFL text (2.787806ms)
+✔ shipped strings are unchanged, and the web keeps its write boundary (2.003515ms)
+✔ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (4887.914731ms)
+✔ five states on Board, Inbox, Tasks, Agents and Trail (3288.045605ms)
+ℹ tests 27
+ℹ suites 0
+ℹ pass 27
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 55485.658358
@@ -0,0 +1,14 @@
+start 2026-10-10T17:31:49Z
+node-webui exit=0 ℹ pass 27 ℹ fail 0 
+build-tokens --check exit=0 tokens.css is current
+test-auth exit=0 selftest: 15 passed, 0 failed
+test-conductor exit=0 selftest: 17 passed, 0 failed
+test-config exit=0 selftest: 24 passed, 0 failed
+test-discord exit=0 discord suite: 66 passed, 0 failed
+test-extension-package exit=0 extension package selftest: 18 passed, 0 failed
+test-foundation exit=0 selftest: 44 passed, 0 failed
+test-queue exit=0 queue suite: 27 passed, 0 failed
+test-release exit=0 selftest: 4 passed, 0 failed
+test-task exit=0 selftest: 26 passed, 0 failed
+end 2026-10-10T17:34:30Z
+DONE
@@ -0,0 +1,17 @@
+OK    status with missing harness credential exits 3 and still lists accounts
+OK    status reports harness credential (read-only) + mosaic accounts
+OK    api key material never reaches output
+OK    oauth token material never reaches output
+OK    unparseable credential file exits 2
+OK    symlinked credential file exits 4
+OK    env-side credential names reported
+OK    env var values never reach output
+OK    accounts without an accounts dir reports none and creates nothing
+OK    accounts lists files and marks the active one
+OK    loose account perms flagged in listing
+OK    agent --auth with missing account file refuses (exit 4)
+OK    agent --auth with non-0600 account file refuses
+OK    agent --auth with invalid account name refuses
+OK    auth.sh without valid config refuses
+
+selftest: 15 passed, 0 failed
@@ -0,0 +1,55 @@
+Note: switching to '8a7871ff00f35f943054f5beb68b19f31ed1a3bd'.
+
+You are in 'detached HEAD' state. You can look around, make experimental
+changes and commit them, and you can discard any commits you make in this
+state without impacting any branches by switching back to a branch.
+
+If you want to create a new branch to retain commits you create, you may
+do so (now or later) by using -c with the switch command. Example:
+
+  git switch -c <new-branch-name>
+
+Or undo this operation with:
+
+  git switch -
+
+Turn off this advice by setting config variable advice.detachedHead to false
+
+Not currently on any branch.
+nothing to commit, working tree clean
+Note: switching to '8a7871ff00f35f943054f5beb68b19f31ed1a3bd'.
+
+You are in 'detached HEAD' state. You can look around, make experimental
+changes and commit them, and you can discard any commits you make in this
+state without impacting any branches by switching back to a branch.
+
+If you want to create a new branch to retain commits you create, you may
+do so (now or later) by using -c with the switch command. Example:
+
+  git switch -c <new-branch-name>
+
+Or undo this operation with:
+
+  git switch -
+
+Turn off this advice by setting config variable advice.detachedHead to false
+
+OK    dry-run: allowed change, exit 0, nothing committed (exit 0)
+OK    dry-run committed nothing
+OK    apply: allowed change exits 0 (exit 0)
+OK    apply: attribution in commit subject
+OK    apply: target tree clean after commit
+OK    disallowed path refused (exit 1)
+OK    disallowed path: target untouched
+OK    syntax gate refused broken .mjs (exit 1)
+OK    syntax gate: target untouched
+OK    suite failure refused (exit 1)
+OK    suite failure: target reverted to clean
+OK    disabled policy refused (exit 2)
+OK    disabled policy: target untouched
+OK    failed run refused (exit 1)
+OK    failed run: target untouched
+OK    missing run exits 4 (exit 4)
+OK    invalid policy exits 2 (exit 2)
+
+selftest: 17 passed, 0 failed
@@ -0,0 +1,26 @@
+OK    absent adapter defaults to pi
+OK    adapter mock validates (exit 0)
+OK    unsupported adapter exits 2 (exit 2)
+OK    env exports adapter
+OK    bootstrap creates default when absent (exit 0)
+OK    bootstrap wrote config file
+OK    bootstrap is idempotent on existing config (exit 0)
+OK    bootstrap did not rewrite existing config
+OK    validate missing config exits 3 (exit 3)
+OK    malformed JSON exits 2 (exit 2)
+OK    unsupported configVersion exits 2 (exit 2)
+OK    unknown top-level key exits 2 (exit 2)
+OK    unknown execution key exits 2 (exit 2)
+OK    unsupported backend exits 2 (exit 2)
+OK    unsupported environment exits 2 (exit 2)
+OK    relative dataRoot exits 2 (exit 2)
+OK    non-canonical dataRoot exits 2 (exit 2)
+OK    filesystem root dataRoot exits 2 (exit 2)
+OK    home directory dataRoot exits 2 (exit 2)
+OK    dataRoot containing config dir exits 2 (exit 2)
+OK    control character in provider exits 2 (exit 2)
+OK    symlinked config file exits 2 (exit 2)
+OK    env exports resolve correctly
+OK    failed validation modified nothing
+
+selftest: 24 passed, 0 failed
@@ -0,0 +1,70 @@
+toolchain: node v26.8.1
+
+OK    syntax: packages/discord/src/approvals.mjs
+OK    syntax: packages/discord/src/authorize.mjs
+OK    syntax: packages/discord/src/binding.mjs
+OK    syntax: packages/discord/src/cli.mjs
+OK    syntax: packages/discord/src/connector.mjs
+OK    syntax: packages/discord/src/context.mjs
+OK    syntax: packages/discord/src/engine-pi.mjs
+OK    syntax: packages/discord/src/errors.mjs
+OK    syntax: packages/discord/src/gateway.mjs
+OK    syntax: packages/discord/src/git.mjs
+OK    syntax: packages/discord/src/journal.mjs
+OK    syntax: packages/discord/src/notify.mjs
+OK    syntax: packages/discord/src/rest.mjs
+OK    syntax: packages/discord/src/setspark.mjs
+OK    syntax: packages/discord/src/tools.mjs
+OK    syntax: packages/discord/src/web.mjs
+OK    syntax: packages/discord/bin/git-credential.mjs
+OK    syntax: packages/discord/extension/tools.mjs
+OK    syntax: packages/discord/tests/approvals.test.mjs
+OK    syntax: packages/discord/tests/authorize.test.mjs
+OK    syntax: packages/discord/tests/binding.test.mjs
+OK    syntax: packages/discord/tests/connector.test.mjs
+OK    syntax: packages/discord/tests/context.test.mjs
+OK    syntax: packages/discord/tests/engine.test.mjs
+OK    syntax: packages/discord/tests/fake-pi.mjs
+OK    syntax: packages/discord/tests/gateway.test.mjs
+OK    syntax: packages/discord/tests/git.test.mjs
+OK    syntax: packages/discord/tests/helpers.mjs
+OK    syntax: packages/discord/tests/journal.test.mjs
+OK    syntax: packages/discord/tests/notify.test.mjs
+OK    syntax: packages/discord/tests/recover.test.mjs
+OK    syntax: packages/discord/tests/rest.test.mjs
+OK    syntax: packages/discord/tests/setspark.test.mjs
+OK    syntax: packages/discord/tests/tools.test.mjs
+OK    syntax: packages/discord/tests/web.test.mjs
+OK    syntax: packages/discord/fixtures/claim-worker.mjs
+OK    syntax: packages/discord/fixtures/legacy-owner-worker.mjs
+OK    syntax: scripts/discord.sh
+OK    syntax: scripts/discord-service.sh
+OK    packages/discord declares no dependencies
+OK    no bot-token-shaped string in packages/discord
+OK    fixture binding uses placeholder ids only
+OK    fixture binding validates
+OK    real pi with the extension exposes exactly list_dir, read_file, search and no built-in tool
+OK    real pi with a writable root exposes exactly the three reads plus write_file and edit_file, and writes nothing at start
+OK    real pi with a web key exposes the three reads plus web_fetch and web_search, and no write tool without a writable root
+OK    real pi with a git root exposes the reads, writes and the four git verbs, commits nothing at start, and never shows the token
+OK    real pi with protocol vault adds reserve_id to the git verbs
+OK    real pi with a setspark key exposes the reads and the eight record verbs, no counters, and never shows the key
+OK    real pi refuses a git key on a read-only root (fail closed)
+OK    real pi with the pilot flags (--no-tools) exposes no tool at all
+OK    real pi exits non-zero without MOSAIC_DISCORD_TOOLS: no session, no tools (fail closed)
+OK    a failing nested test fails the run under a parent runner's NODE_TEST_CONTEXT
+OK    node --test packages/discord/tests/ (ℹ pass 178)
+OK    scripts/discord.sh --help exits 0
+OK    scripts/discord.sh check without a binding exits 4
+OK    scripts/discord.sh recover without a binding exits 4
+OK    scripts/discord.sh reload without a binding exits 4
+OK    scripts/discord-service.sh without a command exits 4
+OK    service unit renders with the repository path, a supervised run as the main process, exit 3 never retried, and reload as SIGHUP
+OK    service install writes the rendered unit (0644) and leaves no temp file
+OK    service install a second time reports unchanged
+OK    systemd-analyze verify accepts the rendered unit
+OK    service uninstall removes the unit file
+OK    service install with an unknown flag exits 4
+OK    service install with USER unset finishes and names the account for lingering
+
+discord suite: 66 passed, 0 failed
@@ -0,0 +1,21 @@
+OK    initial ordinary-file install
+OK    installed tree matches canonical source
+OK    installed tree has no symlinks
+OK    check detects installation drift
+OK    sync refuses to overwrite installation drift
+OK    check detects an extra destination file
+OK    check detects an extra destination directory
+OK    check rejects a destination symlink
+OK    sync accepts a canonical source update
+OK    updated installation matches canonical source
+scripts/test-extension-package.sh: line 14: 1734733 Killed                     "$@" > /dev/null 2>&1
+OK    forced interruption kills the replacing process
+OK    next invocation recovers old consistent installation
+OK    interrupted replacement rolled back
+OK    sync succeeds after interruption recovery
+OK    unlocked stale lock file does not block
+OK    active lock refuses a concurrent sync
+OK    source symlink fails closed
+OK    nested second entrypoint fails closed
+
+extension package selftest: 18 passed, 0 failed
@@ -0,0 +1,53 @@
+toolchain: node v26.8.1, python 3.12.8, jsonschema 4.26.0
+
+OK    syntax: scripts/foundation-inspect.mjs
+OK    syntax: scripts/foundation/strict-json.mjs
+OK    syntax: scripts/foundation/canonical.mjs
+OK    syntax: scripts/foundation/resolve.mjs
+OK    syntax: scripts/foundation/validate-record.mjs
+OK    syntax: scripts/foundation/fixtures/build-fixtures.mjs
+OK    syntax: scripts/foundation/canonical.test.mjs
+OK    syntax: scripts/foundation/cli.test.mjs
+OK    syntax: scripts/foundation/fixtures.test.mjs
+OK    syntax: scripts/foundation/resolve.test.mjs
+OK    syntax: scripts/foundation/strict-json.test.mjs
+OK    syntax: scripts/foundation/verify-schema.py (ast only; no bytecode written)
+OK    fixture generator runs
+OK    checked-in fixtures/bundles equal a fresh generation
+OK    checked-in fixtures/raw equal a fresh generation
+OK    checked-in fixtures/index.json equal a fresh generation
+OK    checked-in demo bundles equal a fresh generation
+OK    a failing nested test fails the run under a parent runner's NODE_TEST_CONTEXT
+OK    node --test scripts/foundation/ (ℹ pass 80)
+OK    differential schema oracle: PASS: differential schema oracle (finite corpus; compatibility evidence, not equivalence proof)
+      platform witness: strftime('%Y') for year 999 -> '999' (pinned checker refuses years 0001..0999)
+      node v26.8.1; corpus 1568 records (38 pinned fixtures, 478 unique bundle records, 1052 typeCase/mutation/lexical cases)
+      schema column: agree-valid 540, agree-invalid 991, DISAGREEMENTS 0; strict-only (parser-bound) cases: 27; unsupported-kind records not schema-assessed by the inspector: 10
+      profile column (schema-valid records only): profile-valid 510, profile-invalid 30
+      profile refusals asserted: 30 schema-agreed-valid records refused only by the strict typed-string profile (rule profile-pattern-mismatch), 12 declared by name; 73 named probes verified against declared schema/profile columns
+OK    oracle: zero schema-column disagreements with the pinned checker
+OK    oracle: strict-only profile refusals are counted and asserted
+OK    demo: permitted read preview exits 0 (exit 0)
+OK    demo: permitted file.change preview exits 0 (exit 0)
+OK    demo: assignment.change proposal is unresolved (exit 3) (exit 3)
+OK    demo: revoked registration is refused (exit 3) (exit 3)
+OK    demo: message is not authority (exit 3) (exit 3)
+OK    usage: no arguments exits 2 (exit 2)
+OK    io: missing file exits 4 (exit 4)
+OK    io: directory exits 4 (exit 4)
+OK    io: symlink exits 4 (O_NOFOLLOW) (exit 4)
+OK    bound: oversize fixture exits 2 (exit 2)
+OK    profile: one final LF in a typed selection id is refused before admission (exit 2) (exit 2)
+OK    profile: two final LFs fail the schema pattern itself (exit 2) (exit 2)
+OK    profile: escaped newlines in free-form text stay allowed (exit 0) (exit 0)
+OK    profile refusal is invalid-request/profile-pattern-mismatch with selection and operation withheld, value not echoed
+OK    text output starts with the disclaimer
+OK    json output is valid JSON with result allowed and exactly the charter §7 fields
+OK    json golden matches byte-for-byte
+OK    sandboxed bundle run (env -i, PATH=/nonexistent) produced the unresolved proposal
+OK    sandbox inventory (path/type/size/mode/uid/gid/inode/mtime/sha256) unchanged by runs
+OK    canary never printed (bundle run and credential-file run)
+OK    a non-bundle JSON file is refused at the shape gate, not read into output
+OK    no field of the non-bundle file is echoed
+
+selftest: 44 passed, 0 failed
@@ -0,0 +1,35 @@
+toolchain: node v26.8.1, git version 2.55.0
+
+OK    syntax: packages/queue/src/cli.mjs
+OK    syntax: packages/queue/src/errors.mjs
+OK    syntax: packages/queue/src/io.mjs
+OK    syntax: packages/queue/src/lock.mjs
+OK    syntax: packages/queue/src/queue.mjs
+OK    syntax: packages/queue/src/review.mjs
+OK    syntax: packages/queue/src/store.mjs
+OK    syntax: packages/queue/tests/commit.test.mjs
+OK    syntax: packages/queue/tests/data.test.mjs
+OK    syntax: packages/queue/tests/dispatch.test.mjs
+OK    syntax: packages/queue/tests/helpers.mjs
+OK    syntax: packages/queue/tests/lock.test.mjs
+OK    syntax: packages/queue/tests/migration.test.mjs
+OK    syntax: packages/queue/tests/review.test.mjs
+OK    syntax: packages/queue/tests/store.test.mjs
+OK    syntax: packages/queue/tests/write.test.mjs
+OK    syntax: packages/queue/tests/fixtures/fake-gitea.mjs
+OK    syntax: packages/queue/tests/fixtures/kill-at.mjs
+OK    syntax: packages/queue/tests/fixtures/lock-child.mjs
+OK    syntax: packages/queue/tests/fixtures/mosaic-pre-a2.sh
+OK    syntax: scripts/queue-commit.sh
+OK    syntax: scripts/git-hooks/pre-commit
+OK    syntax: scripts/mosaic
+OK    queue-commit.sh, the guard and scripts/mosaic are executable
+OK    packages/queue declares no dependencies
+ℹ tests 148
+ℹ pass 148
+ℹ fail 0
+OK    node --test packages/queue/tests/
+OK    scripts/mosaic queue help
+skip  queue verify and render --check: this checkout (/home/jwoltje/darkwing-scratch/r53a/cand) is not the queue's canonical root (/mnt/storage/src/mosaic-stack)
+
+queue suite: 27 passed, 0 failed
@@ -0,0 +1,18 @@
+start 2026-10-10T17:56:30Z
+OK    valid RELEASE resolves (exit 0)
+OK    invalid RELEASE exits 1 (exit 1)
+OK    missing RELEASE exits 1 (exit 1)
+OK    valid RELEASE leaves image tag consistent with version
+OK    status safe on empty state (exit 0)
+OK    status created no pointer
+OK    fault-injected activation refuses (exit 1)
+OK    refused activation wrote no pointer
+OK    refusal logged exactly once with valid fields
+OK    healthy activation succeeds (exit 0)
+OK    pointer written with valid fields
+OK    repeat activation succeeds (log grows) (exit 0)
+OK    log is append-only across activations
+OK    rollback without previous refuses (exit 1)
+
+selftest: 14 passed, 0 failed
+rc=0 end 2026-10-10T17:56:43Z
@@ -0,0 +1,7 @@
+OK    valid RELEASE resolves (exit 0)
+OK    invalid RELEASE exits 1 (exit 1)
+OK    missing RELEASE exits 1 (exit 1)
+OK    valid RELEASE leaves image tag consistent with version
+skip state-machine cases (docker daemon unavailable)
+
+selftest: 4 passed, 0 failed
@@ -0,0 +1,32 @@
+OK    valid task validates (exit 0)
+OK    unknown task key exits 2 (exit 2)
+OK    unsupported taskVersion exits 2 (exit 2)
+OK    invalid task id exits 2 (exit 2)
+OK    empty prompt exits 2 (exit 2)
+OK    NUL in expectExact exits 2 (exit 2)
+OK    out-of-range timeout exits 2 (exit 2)
+OK    missing mission file exits 4 (exit 4)
+OK    task with valid mission validates (exit 0)
+OK    invalid mission exits 2 (exit 2)
+OK    validate missing task exits 4 (exit 4)
+OK    validation does not modify the task file
+OK    prune dry-run exits 0 (exit 0)
+OK    dry-run deleted nothing
+OK    prune --keep=2 --yes removes oldest (exit 0)
+OK    kept exactly 2 newest runs
+OK    newest run kept, oldest pruned
+OK    append-only receipt written (3 entries)
+OK    sessions/workspaces untouched by prune
+OK    prune with invalid keep exits 4 (exit 4)
+skip adapter seam cases (docker daemon unavailable)
+skip workspace/capability cases (docker daemon unavailable)
+skip live task cases (docker unavailable)
+OK    onboard without name exits 4 (non-interactive) (exit 4)
+OK    onboard --name renders profile (exit 0)
+OK    profile written
+OK    canon structure: required filled, optional placeholdered
+OK    canon sections present
+skip live recall pair: user recall run, recalled user name (docker daemon unavailable)
+OK    no agent identity on headless run
+
+selftest: 26 passed, 0 failed
@@ -0,0 +1,74 @@
+// Darkwing row 53 probes: does kept data show anywhere while the board or the bus refuses?
+// Run from a worktree's packages/webui: node --test <this file> with WT set to that worktree.
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { createServer } from 'node:http';
+import { pathToFileURL } from 'node:url';
+const WT = process.env.WT;
+const u = p => pathToFileURL(`${WT}/packages/webui/${p}`).href;
+const { browser } = await import(u('tests/browser.mjs'));
+const { close } = await import(u('tests/fixture.mjs'));
+const { startServer } = await import(u('src/serve.mjs'));
+const { BusReadError } = await import(u('src/bus.mjs'));
+const out = [];
+const note = (k, v) => { out.push(`${k}: ${JSON.stringify(v)}`); };
+
+test('probes', { timeout: 120000 }, async () => {
+  let reply = null;
+  const one = { agent: 'agent1', project: 'secretproj', state: 'waiting', waitingOnYou: true, task: 'Kept fixture task', lastActivity: '2026-10-10T00:00:00Z', lastAssistantText: 'Input needed: kept text', registered: null };
+  const ok = () => { reply = { status: 200, body: { sessions: [one, { ...one, agent: 'agent2', state: 'working', waitingOnYou: false }], counts: { waiting: 1, working: 1 }, generatedAt: new Date().toISOString() } }; };
+  ok();
+  const brd = createServer(async (req, res) => { for await (const c of req) void c; res.writeHead(reply.status, { 'content-type': 'application/json' }); res.end(JSON.stringify(reply.body)); });
+  await new Promise(r => brd.listen(0, '127.0.0.1', r));
+  const rows = { inbox: [{ id: 'd'.repeat(32), question: 'Kept question?', class: 'gated', action: 'git.push.protected', blocking: true, options: [{ key: 'yes', text: 'Yes' }], at: new Date().toISOString(), raised_by: 'coder' }], tasks: [{ task_ref: 'vikunja:32/7', fields: { title: 'Kept task title', bucket: 2, done: false, assignees: [] }, source: 'self' }], agents: [], trail: [] };
+  let fail = null;
+  const verb = n => async () => { if (fail) throw new BusReadError(fail, `fixture ${fail}`); return structuredClone(rows[n]); };
+  const web = await startServer({ port: 0, board: `http://127.0.0.1:${brd.address().port}`, bus: { inbox: verb('inbox'), tasks: verb('tasks'), agents: verb('agents'), trail: verb('trail') } });
+  const base = `http://127.0.0.1:${web.address().port}/`, b = await browser();
+  const wait = expr => b.evaluate(`(async()=>{for(let i=0;i<100;i++){if(${expr})return true;await new Promise(r=>setTimeout(r,50))}throw new Error('timed out: '+${JSON.stringify(expr)})})()`);
+  const vis = sel => b.evaluate(`(()=>{const e=document.querySelector(${JSON.stringify(sel)});if(!e)return null;return {shown:!!(e.offsetWidth||e.offsetHeight||e.getClientRects().length)&&!e.closest('[hidden]'),text:e.innerText.slice(0,200)}})()`);
+  const refresh = async () => { await b.evaluate('document.querySelector("#refresh").click()'); await wait('!document.querySelector("#refresh").disabled'); };
+  try {
+    await b.viewport(1440, 900);
+    await b.navigate(base); await wait('document.querySelectorAll("table.sessions tbody tr").length===2');
+    // P1/P2: open the inspector on agent1, then the board refuses.
+    await b.evaluate('document.querySelector("table.sessions [data-open]").click()');
+    await wait('document.querySelector("#inspector-title")?.textContent==="agent1"');
+    reply = { status: 403, body: { error: 'non-local Host refused' } };
+    await refresh();
+    await wait('document.querySelector("#error").className==="banner ref"');
+    note('P1 board refused: board-view display', await b.evaluate('getComputedStyle(document.querySelector("#board-view")).display'));
+    note('P1 board refused: inspector', await vis('#inspector'));
+    note('P2 board refused: projects tree', await vis('#projects'));
+    note('P2 board refused: footer', await vis('#footer'));
+    note('P2 board refused: #status', await vis('#status'));
+    // P1b: Escape from the inspector while refused.
+    ok(); await refresh(); await wait('document.querySelector("#error").hidden');
+    // P3/P4: bus pages read once, then the bus refuses.
+    await b.evaluate('location.hash="#/tasks"'); await wait('document.querySelectorAll("#bus-view td.s1-title a").length===1');
+    await b.evaluate('location.hash="#/inbox"'); await wait('!!document.querySelector("#bus-view .s1-dec-open")');
+    fail = 'human-required'; await refresh(); await wait('!!document.querySelector("#bus-view .banner.ref")');
+    note('P4 bus refused: section list', await vis('#sections'));
+    await b.evaluate('document.querySelector("#cmdk").click()'); await wait('document.querySelector("#cmdk-dialog").open');
+    await new Promise(r => setTimeout(r, 500));
+    note('P3 bus refused: palette list', await b.evaluate('[...document.querySelectorAll("#cmdk-list li")].map(l=>l.innerText.replace(/\\n/g," | "))'));
+    await b.key('Escape');
+    // P3b: from the board page while the bus refuses, the Inbox count.
+    await b.evaluate('location.hash="#/"'); await wait('document.querySelectorAll("table.sessions tbody tr").length===2');
+    await new Promise(r => setTimeout(r, 500));
+    note('P4b board page, bus refused: section list', await vis('#sections'));
+    // P6: not-configured on a page read before.
+    fail = 'not-configured'; await b.evaluate('location.hash="#/tasks"'); await wait('!!document.querySelector("#bus-view .banner")');
+    note('P6 not-configured: banner class, task links', await b.evaluate('[document.querySelector("#bus-view .banner").className, document.querySelectorAll("#bus-view td.s1-title a").length]'));
+    // P7: after a refusal, a non-refusal failure: are rows from before the refusal shown as stale?
+    fail = 'outcome-unknown'; await refresh(); await wait('!!document.querySelector("#bus-view .banner")');
+    note('P7 refusal then outcome-unknown: banner class, task links, banner text', await b.evaluate('[document.querySelector("#bus-view .banner").className, document.querySelectorAll("#bus-view td.s1-title a").length, document.querySelector("#bus-view .banner").innerText.slice(0,160)]'));
+    // P8: toast in the accessibility tree before any copy.
+    const ax = await b.call('Accessibility.getFullAXTree', {});
+    note('P8 status/live nodes before any toast', ax.nodes.filter(n => ['status'].includes(n.role?.value)).map(n => n.name?.value ?? ''));
+    note('P8 toast display', await b.evaluate('getComputedStyle(document.querySelector("#toast")).display'));
+  } finally {
+    console.log(out.join('\n'));
+    await b.close(); await close(web); await new Promise(r => brd.close(r));
+  }
+});
@@ -0,0 +1,21 @@
+P1 board refused: board-view display: "none"
+P1 board refused: inspector: {"shown":true,"text":"agent1\nClose\nState\nwaiting\nProject\nsecretproj\nTask\nKept fixture task\nTask source\nunknown\nTask set by\nnot applicable (task is not from a registration)\nActive project\nunknown\nWorkspace\nunknown\nModel\nunk"}
+P2 board refused: projects tree: {"shown":true,"text":"All projects 2\nsecretproj 2"}
+P2 board refused: footer: {"shown":true,"text":"waiting 1 · working 1"}
+P2 board refused: #status: {"shown":true,"text":"Scanned 2026-10-10T17:35:07.220Z · refresh every 10s"}
+P4 bus refused: section list: {"shown":true,"text":"Board\nInbox\n1\n1 BLOCKING\nTasks\nAgents"}
+P3 bus refused: palette list: ["Board | view","Inbox | view","Tasks | view","Agents | view","Kept question? | decision dddddddd","#7 Kept task title | task"]
+P4b board page, bus refused: section list: {"shown":true,"text":"Board\nInbox\n1\n1 BLOCKING\nTasks\nAgents"}
+P6 not-configured: banner class, task links: ["banner ref",0]
+P7 refusal then outcome-unknown: banner class, task links, banner text: ["banner err s1-stale",1,"The last read failed. The bus did not answer in time. (outcome-unknown) This is what was read before, 1 s ago. Nothing was changed.\n\nRead again"]
+P8 status/live nodes before any toast: []
+P8 toast display: "none"
+✔ probes (3409.079539ms)
+ℹ tests 1
+ℹ suites 0
+ℹ pass 1
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 3480.865928
@@ -0,0 +1,204 @@
+# Row 53, console tokens and shell restyle, round 1 review (Darkwing)
+
+Issue #1542, request comment 27138, packet comment 27139, queue revs
+358-359. Base `8a7871ff`. Candidate manifest sha256
+`75569953c1a2cd7b7266208d6e6607290335f1bfe0cf94d96ed224e480a1dda8`, 16
+files under `packages/webui`. The packet manifest and the snapshot I took
+from the checkout both check 16 OK.
+
+Verdict: **request changes**. The restyle itself is good. Tokens and the
+sprite are byte copies, the fonts match the upstream archive, every suite
+is green, and 13 of 20 mutants die on assertions. The problem is the
+refusal state. The packet says a board 403 "fails closed (kept rows
+hidden)" and a bus refusal never shows kept rows. The main table and the
+bus view do that. Five other places still show data read before the
+refusal: the inspector, the project tree, the footer and the scan line on
+the board, and the Inbox count and the Ctrl+K palette on the bus. The
+fix is small and listed under "Required".
+
+## Method
+
+- Detached worktrees at `8a7871ff`: `base`, `cand` and `mutwt`. The last
+  two hold the 16 candidate files, staged, and check 16 OK. `mutwt` still
+  checks 16 OK after the mutant runs (`r1/mut/manifest-after.txt`).
+- `r1/gate.sh`: the `packages/webui` suite, `build-tokens.mjs --check`,
+  then every `scripts/test-*.sh` with `DOCKER_HOST=unix:///nonexistent.sock`,
+  17:31:49Z to 17:34:30Z.
+- 20 mutants (`r1/mut/mutate.py`, `r1/mut/run.sh`), each against the full
+  webui suite, 17:37:26Z to 17:56:15Z.
+- `test-release` with Docker, finished 17:56:43Z.
+- Font provenance: I downloaded `JetBrainsMono-2.304.zip` from the URL in
+  `jetbrains-mono-sources.txt` into an empty directory and compared hashes
+  (`r1/fonts/check.txt`).
+- Probes in Chromium through the candidate's own `tests/browser.mjs`,
+  with a fake board and fake bus verbs, no tracker request
+  (`r1/probes/probe.test.mjs`, output `r1/probes/probes-cand.txt`).
+- Read through `bus.js`, `app.js`, `index.html`, `shell.css`, `serve.mjs`
+  and `shell.test.mjs` against the brief and `IMPLEMENTING.md`.
+
+Node v26.8.1, `TMPDIR=~/darkwing-scratch/r53a/tmp`.
+
+## Suites
+
+| Suite | Result |
+|---|---|
+| packages/webui (node) | 27/0 |
+| build-tokens --check | rc 0, "tokens.css is current" |
+| test-auth | 15/0 |
+| test-conductor | 17/0 |
+| test-config | 24/0 |
+| test-discord | 66/0 |
+| test-extension-package | 18/0 |
+| test-foundation | 44/0 |
+| test-queue | 27/0 |
+| test-release | 4/0 without Docker, 14/0 with it |
+| test-task, Docker unreachable | 26/0 |
+
+I didn't run test-task with real Docker, because it makes live model
+calls. The candidate changes nothing outside `packages/webui`, and
+Dewey's run gave 98/0.
+
+## Copies and fonts
+
+`tokens.css` and `icons.svg` are byte-equal to `docs/design`. The archive
+hashes to `6f6376c6…7bbf`, the value in the sources file. The Regular,
+Medium and Bold woff2 files and `OFL.txt` from the archive hash the same
+as the shipped files (`a9cb1cd8…`, `086c48df…`, `c503cc5e…`, `30f0c136…`).
+
+## Probes
+
+Fixture: one board with two sessions (project `secretproj`, task
+"Kept fixture task"), one inbox decision ("Kept question?") and one task
+("Kept task title"). Each probe reads once, then makes the read refuse.
+
+| Probe | Candidate |
+|---|---|
+| P1 board 403 with the inspector open | `#board-view` is `display:none`, but the inspector stays open with agent1's state, project `secretproj` and task "Kept fixture task" |
+| P2 board 403 | the project tree shows "All projects 2 / secretproj 2"; the footer shows "waiting 1 · working 1"; `#status` shows "Scanned <time> · refresh every 10s" |
+| P3 bus `human-required` on `#/inbox`, after `#/tasks` was read | the palette lists "Kept question?" and "#7 Kept task title" |
+| P4 the same refusal | the section list shows Inbox "1" and "1 BLOCKING" |
+| P4b the same on the board page | same as P4 |
+| P6 `not-configured` after a good read | `banner ref`, no task rows. Correct |
+| P7 refusal, then `outcome-unknown` | the rows from before the refusal come back under the stale banner, "1 s ago". Fine by the brief, see note 6 |
+| P8 the toast before any copy | `display:none` |
+
+P1 and P2 come from `body.board-refused #board-view{display:none}`: it
+hides the table and nothing else. The inspector, the tree, the footer and
+`#status` are outside `#board-view`. P3 and P4 come from the kept cache.
+`pkItems()` builds from `last.get('inbox')` and `last.get('tasks')`, and
+`pkOpen` refetches with `Promise.allSettled`, so a refused refetch leaves
+the old rows in `last`. The Inbox count keeps its last value, because on
+the board route a failed `fetchRead('inbox')` lands in `catch {}`.
+
+Base does none of this either. There, every failure showed kept data
+under a stale banner, so this isn't a regression. It does contradict the
+row's own claim and `IMPLEMENTING.md` line 122 ("refusal (fail closed: the
+refusal code in mono and the file or rule that is missing)"). The project
+name and the task title in P1 are exactly what a refusal is supposed to
+stop showing.
+
+## Mutants
+
+13 of 20 killed (`r1/mut/summary.txt`). Every kill is an assertion or a
+wait timeout in the new tests, not a load error.
+
+| Mutant | Change | Result |
+|---|---|---|
+| M01 | `refusal()` drops `not-configured` and `no-bus-host` | **survived** |
+| M02 | `app.js` `error()`: `refused = false` | killed |
+| M03 | no `body.board-refused` toggle | killed |
+| M04 | the `refused:` code not in `<code>` | survived, equivalent: `why()` still puts the same code in `<code>` |
+| M05 | no stale words in the bus freshness line | killed |
+| M06 | System sets `data-mode` | killed |
+| M07 | toast text not escaped | **survived** |
+| M08 | palette label not escaped | **survived** |
+| M09 | `:focus-visible` offset 0 | survived |
+| M10 | focus outline 1px | killed |
+| M11 | the section list below 760px loses `flex-wrap` and `overflow-x` | survived |
+| M12 | no section icons | killed |
+| M13 | `accept()` doesn't clear `board-refused` | killed |
+| M14 | task-link ↑/↓ reversed | killed |
+| M15 | `/icons.svg` served as `text/plain` | killed |
+| M16 | no `tabular-nums` | survived |
+| M17 | storage key changed | killed |
+| M18 | no `body.board-refused #board-view` rule | killed |
+| M19 | refusal shows kept rows (Dewey's "refusal") | killed |
+| M20 | board refusal uses `banner err` | killed |
+
+M01 matters most. Both browser tests refuse with `human-required` only,
+so nothing checks that `not-configured` or `no-bus-host` fail closed over
+kept rows. My P6 shows the candidate does it, but no test holds it.
+
+M08 is the palette label, which is bus text (`d.question`, the task
+title). The code escapes it; no test feeds it markup. M07 is the toast,
+whose text is `Copied: <command>`; the commands come from validated refs,
+so M07 is lower risk.
+
+## Required
+
+1. Board refusal hides everything read from the board, not only
+   `#board-view`: close the inspector (or hide it under
+   `body.board-refused`), and hide or blank the project tree counts, the
+   footer counts and the "Scanned" line in `#status`.
+2. Bus refusal drops the kept bus data outside the view: the Inbox count
+   and BLOCKING chip in the section list, and the palette's decisions and
+   tasks. Clearing `last` for `inbox` and `tasks` on a refused read
+   would cover both, including a refused refetch in `pkOpen` and the
+   board route's `fetchRead('inbox')`.
+3. Tests for 1 and 2, with the inspector open when the board refuses.
+4. A refusal over kept rows with `not-configured` or `no-bus-host`, so M01
+   dies.
+5. A palette test whose question or task title holds markup, so M08 dies.
+
+## Notes (not blocking)
+
+1. Below 760px the section list wraps. `IMPLEMENTING.md` asks for "a
+   horizontal strip that scrolls inside itself". The packet lists it as a
+   deviation; Sage should rule on it, and M11 shows no test pins either
+   form.
+2. Below 760px the freshness line is `display:none`, so a phone shows no
+   read time in the command bar. The stale banner still says it in the
+   view.
+3. No test checks the focus offset (M09), and table rows use
+   `outline-offset:-2px`. Inset rings on rows are reasonable; the brief
+   says 2px offset.
+4. The toast is the only live region for copy, and it is `display:none`
+   until the first copy. A live region that is out of the accessibility
+   tree when its text arrives may not be announced the first time. I
+   couldn't confirm it with a screen reader, so treat it as a risk. The
+   usual fix is to keep the region rendered and empty, and hide it with
+   the visually-hidden pattern.
+5. The board refusal sets the server's message in `<code>` ("refused:
+   <code>board-refused</code>" in the test, "non-local Host refused" from
+   control-board). That is prose in mono. A Seen POST that fails also
+   goes through `error()`, so a 403 on Seen would say "The board refused
+   the read". That 403 only comes from control-board's Host/Origin check,
+   which refuses the read too, so the wording is wrong only in name.
+6. After a refusal, the next non-refusal failure shows the rows from
+   before the refusal as stale (P7). They carry their read time, which is
+   what the brief asks of the error state. Clearing `last` (Required 2)
+   would remove them too; either is fine.
+7. No `tabular-nums` test (M16), no business pill (row 54), and
+   `#copy-status` lost `role="status"` (the packet explains why).
+
+## Filbert's review
+
+Filbert posted request changes in comment 27143 at 17:52Z, while my
+mutants ran. I read it after writing the above and before posting. Their
+C1 and C2 are my Required 1 and 2, found separately with their own probe,
+and their T1 is my Required 4 (my M01, their `refusal-403-only`). I agree
+with their C3: the board freshness line should say the board wasn't read,
+not "stale", which fits under Required 1. I didn't check their N1
+(board time local, bus time UTC). It is cheap to settle in the same
+round. My Required 5 (M08, the palette escape) isn't in their list.
+
+## Files
+
+- `r1/candidate-manifest.sha256`: copy of Dewey's.
+- `r1/gate.sh`, `r1/out/`: suite runs, `summary.txt` and
+  `test-release-docker.txt`.
+- `r1/mut/`: mutant definitions, runner, diffs, outputs, `summary.txt` and
+  the manifest check after the runs.
+- `r1/probes/`: the probe test and its output.
+- `r1/fonts/check.txt`: the archive and file hashes, and the two copy
+  checks.