queue: revs 520-521, row 74 round 2 note (sage); rev 520 row 72 started (rocko)

docs/plans/QUEUE.md

@@ -33,7 +33,7 @@ Gaps found while working go to `docs/plans/DEFERRED.md`, not here.
 
 <!-- mosaic-queue:begin -->
 
-Generated from `docs/plans/queue.json` revision 519 by `queue render`. Do not edit between the markers; change the queue with `scripts/mosaic queue`.
+Generated from `docs/plans/queue.json` revision 521 by `queue render`. Do not edit between the markers; change the queue with `scripts/mosaic queue`.
 
 | # | Piece | Owner | Issues | State | After | Gate | Brief | Note |
 |---|---|---|---|---|---|---|---|---|
@@ -108,9 +108,9 @@ Generated from `docs/plans/queue.json` revision 519 by `queue render`. Do not ed
 | 69 | Terminal app follow-up: narrow-terminal guard test, hidden-box way out and width tests | darkwing; reviewers dewey, filbert | #1562 | blocked (from briefed): deferred until after the mosaic.woltje.com dogfood cutover (lead decision 94) | 55 done | dewey and filbert approve on the issue naming the candidate manifest; cli and queue node suites plus every scripts/test-*.sh green on Sage's gate rerun (sage) | `docs/plans/2026-10-11_terminal-app-follow-up.md` § Terminal app follow-up: narrow-terminal guard test, hidden-box way out and width tests | — |
 | 70 | Docs say mosaic on PATH is the estate CLI; after Q81 it can be this one | sage; reviewers filbert | #1564 | blocked (from briefed): deferred until after the mosaic.woltje.com dogfood cutover (lead decision 94) | — | filbert approves on the issue naming the candidate manifest; cli, queue and seat node suites and every scripts/test-*.sh green on Sage's gate run (sage) | `docs/plans/2026-10-11_mosaic-on-path-docs.md` § Docs say mosaic on PATH is the estate CLI; after Q81 it can be this one | — |
 | 71 | Tree read follow-up: confirm-read tests and the fake's view 404 | darkwing; reviewers dewey, filbert | #1565 | blocked (from briefed): deferred until after the mosaic.woltje.com dogfood cutover (lead decision 94) | — | dewey and filbert approve on the issue naming the candidate manifest; tasks and bus node suites and every scripts/test-*.sh green on Sage's gate rerun (sage) | `docs/plans/2026-10-11_tree-read-follow-up.md` § Tree read follow-up: confirm-read tests and the fake's view 404 | — |
-| 72 | Claude pin tests: a directory pin, a symlink default, a pin with a space | rocko; reviewers filbert | #1566 | briefed | 68 done | filbert approves on the issue naming the candidate manifest; cli and harness node suites and every scripts/test-*.sh green on Sage's gate rerun (sage) | `docs/plans/2026-10-11_claude-pin-and-coder-grant.md` § Claude pin tests: a directory pin, a symlink default, a pin with a space | — |
+| 72 | Claude pin tests: a directory pin, a symlink default, a pin with a space | rocko; reviewers filbert | #1566 | in-progress | 68 done | filbert approves on the issue naming the candidate manifest; cli and harness node suites and every scripts/test-*.sh green on Sage's gate rerun (sage) | `docs/plans/2026-10-11_claude-pin-and-coder-grant.md` § Claude pin tests: a directory pin, a symlink default, a pin with a space | — |
 | 73 | Coder role: drop the task.reassign grant the broker always refuses | rocko; reviewers dewey | #1567 | briefed | — | dewey approves on the issue naming the candidate manifest; tasks, bus, business and harness node suites and every scripts/test-*.sh green on Sage's gate rerun (sage) | `docs/plans/2026-10-11_claude-pin-and-coder-grant.md` § Coder role: drop the task.reassign grant the broker always refuses | — |
-| 74 | WebUI preview: a signed-in, read-only Console behind the edge proxy | dewey; reviewers darkwing, filbert | #1568 | in-review, round 1, request posted | — | darkwing and filbert approve on the issue naming the candidate manifest; webui, control-board and cli node suites and every scripts/test-*.sh green on Sage's gate rerun; Sage starts it after landing once rev-sol-01 passes ops-01's route (decision 93) (sage) | `docs/plans/2026-10-11_webui-preview.md` § WebUI preview: a signed-in, read-only Console behind the edge proxy | Mos 2026-10-11: ahead of rows 64-66; Dewey takes it after the row 59 review. Waits on Jason's Q91 (amend lead decision 48). |
+| 74 | WebUI preview: a signed-in, read-only Console behind the edge proxy | dewey; reviewers darkwing, filbert | #1568 | in-review, round 1, request posted | — | darkwing and filbert approve on the issue naming the candidate manifest; webui, control-board and cli node suites and every scripts/test-*.sh green on Sage's gate rerun; Sage starts it after landing once rev-sol-01 passes ops-01's route (decision 93) (sage) | `docs/plans/2026-10-11_webui-preview.md` § WebUI preview: a signed-in, read-only Console behind the edge proxy | Round 2 by Sage's call (2026-10-11T23Z), not a follow-up: Filbert N1 (a duplicate Host header passes the NAME check; fix: headersDistinct.host length > 1 answers 400, with a test), N2 tests for the surviving gaps (Host compared exactly, HEAD refused, HEADER rejecting _ and its leading-character check), and the README sentence that every hop reaching the loopback port is bound by the proxy contract. NAME:443 refusal stays. Darkwing reviews round 2, not round 1; Filbert re-reviews the delta. |
 | 75 | Console as a user service: render, install and status, Jason starts it | rocko; reviewers filbert | #1569 | done | — | filbert approves on the issue naming the candidate manifest; webui node suite and every scripts/test-*.sh green on Sage's gate rerun (sage) | `docs/plans/2026-10-11_dogfood-cutover.md` § Console as a user service | — |
 | 76 | Console sends a human message to a role | dewey; reviewers darkwing, filbert | #1570 | briefed | 74 done | darkwing and filbert approve on the issue naming the candidate manifest; webui, bus, control-board and cli node suites and every scripts/test-*.sh green on Sage's gate rerun; Jason's Q95 recorded first (sage) | `docs/plans/2026-10-11_dogfood-cutover.md` § Console sends a message to a role | From row 74 round 1 (Dewey, point 5): the page shows 'Delivery may be unknown; check the seat before sending again.' for a 403 read-only refusal. That's wrong for a refusal. src/public/app.js is row 76's file, so row 76 fixes the message: a refusal says it was refused, and only outcome-unknown says delivery may be unknown. |
 | 77 | Console service hardening: row 75 review follow-ups N1-N5 | rocko; reviewers filbert | #1571 | queued | 75 done | filbert approves on the issue naming the candidate manifest; webui node suite and every scripts/test-*.sh green on Sage's gate rerun (sage) | `docs/plans/2026-10-11_console-service-followups.md` § Console service hardening | After the cutover (2026-10-12T21:30Z). Source: Filbert comment 27430 on #1569. |

docs/plans/queue.json

@@ -1,7 +1,7 @@
 {
   "version": 1,
   "canonicalRoot": "/mnt/storage/src/mosaic-stack",
-  "revision": 519,
+  "revision": 521,
   "rows": [
     {
       "id": 1,
@@ -5281,7 +5281,7 @@
       "closes": [
         1566
       ],
-      "state": "briefed",
+      "state": "in-progress",
       "previousState": null,
       "required": false,
       "requiredSince": null,
@@ -5302,12 +5302,15 @@
         "filbert"
       ],
       "review": null,
-      "claim": null,
+      "claim": {
+        "seat": "rocko",
+        "op": "rocko-72-start-1"
+      },
       "note": null,
       "blockedReason": null,
       "createdAt": "2026-10-11T21:47:53.131Z",
-      "updatedAt": "2026-10-11T21:48:00.787Z",
+      "updatedAt": "2026-10-11T22:56:08.638Z",
-      "updatedBy": "sage"
+      "updatedBy": "rocko"
     },
     {
       "id": 73,
@@ -5416,11 +5419,11 @@
         "seat": "dewey",
         "op": "dewey-74-start-1"
       },
-      "note": "Mos 2026-10-11: ahead of rows 64-66; Dewey takes it after the row 59 review. Waits on Jason's Q91 (amend lead decision 48).",
+      "note": "Round 2 by Sage's call (2026-10-11T23Z), not a follow-up: Filbert N1 (a duplicate Host header passes the NAME check; fix: headersDistinct.host length > 1 answers 400, with a test), N2 tests for the surviving gaps (Host compared exactly, HEAD refused, HEADER rejecting _ and its leading-character check), and the README sentence that every hop reaching the loopback port is bound by the proxy contract. NAME:443 refusal stays. Darkwing reviews round 2, not round 1; Filbert re-reviews the delta.",
       "blockedReason": null,
       "createdAt": "2026-10-11T21:53:29.970Z",
-      "updatedAt": "2026-10-11T22:49:12.918Z",
+      "updatedAt": "2026-10-11T22:56:21.953Z",
-      "updatedBy": "filbert"
+      "updatedBy": "sage"
     },
     {
       "id": 75,
@@ -20172,6 +20175,50 @@
         "receipt": "ok sage-75-done rev 519 row 75 in-review→done round 1"
       },
       "viewSha": "06f74805af0ccd244dd0b7e136e1048331d5a4d6c21e6d037d11e2119cdc8131"
+    },
+    {
+      "rev": 520,
+      "op": "rocko-72-start-1",
+      "verb": "move",
+      "args": {
+        "id": 72,
+        "to": "in-progress",
+        "reason": null,
+        "candidate": null,
+        "evidence": null,
+        "issue": null
+      },
+      "by": "rocko",
+      "at": "2026-10-11T22:56:08.638Z",
+      "semantics": 2,
+      "result": {
+        "row": 72,
+        "from": "briefed",
+        "to": "in-progress",
+        "round": null,
+        "issue": null,
+        "candidate": null,
+        "receipt": "ok rocko-72-start-1 rev 520 row 72 briefed→in-progress"
+      },
+      "viewSha": "909773c42c58637e52a07243b720fbdb27a79bb3f35a0695bc6860b7f4fc45e4"
+    },
+    {
+      "rev": 521,
+      "op": "sage-74-note-r2",
+      "verb": "note",
+      "args": {
+        "id": 74,
+        "text": "Round 2 by Sage's call (2026-10-11T23Z), not a follow-up: Filbert N1 (a duplicate Host header passes the NAME check; fix: headersDistinct.host length > 1 answers 400, with a test), N2 tests for the surviving gaps (Host compared exactly, HEAD refused, HEADER rejecting _ and its leading-character check), and the README sentence that every hop reaching the loopback port is bound by the proxy contract. NAME:443 refusal stays. Darkwing reviews round 2, not round 1; Filbert re-reviews the delta."
+      },
+      "by": "sage",
+      "at": "2026-10-11T22:56:21.953Z",
+      "semantics": 2,
+      "result": {
+        "row": 74,
+        "field": "note",
+        "receipt": "ok sage-74-note-r2 rev 521 row 74 note"
+      },
+      "viewSha": "8309df723da3d94000405d5d238ebbfb6f3ecb6966d6768f01876223fad6f77d"
     }
   ]
 }