Row 287: record first-review documentation corrections

Row 287: grant library collaborators with declared scopes
row225: record rebased gate, review delta and verified mutation retries
2026-10-24 10:55:31 -05:00 · 2026-10-24 10:55:31 -05:00 · 2026-10-24 10:12:34 -05:00 · 2026-10-24 10:12:34 -05:00 · 2026-10-24 10:12:34 -05:00 · 2026-10-24 10:12:34 -05:00
1114 changed files with 99565 additions and 357 deletions
@@ -5476,6 +5476,22 @@ remain; no live state, schema or bus policy change.

 2026-10-24 | Goldie | Row265 / #1770 verified (mos-1567, sage-3942) | Approved correction adds solely address import pin + Row265 comment to project-runtime.test and one pure-source RUNNER_FILES mount; new block checks parser has no imports. Serialized fresh-short-TMP timeout-k10: unchanged sandbox10/10, parser15/15, rooms18/18, full bus957/957, twelve named refusal mutants killed (each Node1, driver0), restored parser15/15 + rooms18/18. All positives zero fail/skip/cancel; every mutation restored full broker SHA71b32ee4. Old first-red evidence retained, no other old-test change. Slot returned goldie-0034; Boyd packet explicitly includes mount-list review, candidate push next.
 2026-10-24T07:18:53Z | Sage | Row 327 (#1825, Bradford, Poe and Dewey) LANDED 68c08b4e7. Before: refactor at 94d9e90a6; the push guard was a scratch script with no reviewed-binary check. After: scripts/push-check.sh and scripts/test-push-check.sh on refactor, 3 commits cherry-picked onto 6a5e12511 with blobs equal to the round 3 tip d858c9f8b, plus doc commits 76f84465f and 68c08b4e7. Binaries are found by numstat or a NUL in the first 8000 committed bytes, regardless of attributes; each needs its sha256 and path in an approved latest-round candidate; an unconfirmed queue tail exits 2. Reviews: Poe c31525 rev 3882, Dewey c31526 rev 3883. Gate: 1st run 06:57Z RED, not the candidate: canonical node_modules was empty from 05:45:15Z (sage-4023). Rerun with its own root npm ci GREEN 07:15:49Z: 17 package suites 0 failures (cli 986, plugins 119, webui 418), 11 scripts exit 0, push-check 6 mutants KILLED; skips are the queue canonical-root check and the row 244 live provider cases. The landed push-check.sh passed its own push (NO_BINARY, NO_ATTRIBUTION, PUSH_READY). mos-1575: gates install their own node_modules; canonical restored with npm ci (128 packages).
+
+## 2026-10-23 — Lena, row 296 / #1802 FED R7 start
+
+Before: R4 and R6 landed in base 45dca69f6; no scratch two-instance acceptance script.
+Plan: preserve Quackerjack handoff c6ab9bdc9, add isolated script/CLI test harness with real
+Console proof in transient user services, map assertions and two mutants for Filbert.
+Untested: all Node/tests and shared gate wait for Sage CLEAR; no production or live state changes.
+
+## 2026-10-24 — Lena, row 296 / #1802 scoped acceptance verified
+
+After: lena/row296-r2 rebased onto e0c6142f3 with both append logs preserved and row source
+unchanged. Own root/webui npm ci (128/2 packages), canonical dependencies untouched. Sage-4035
+slot: plain acceptance 1/1, killed-driver cleanup expected exit1 with cleanup verified, M1/M2
+both killed by named assertions with product hashes restored, whole new file intentionally
+skips outside its script. No unexpected first-run red, no old test change, no full/shared gate
+claim. Receipts and limitations in agents/lena/work/queue-296/BUILD.md and run-r2/.
 2026-10-23 | Beakley (88b97f65) | Row 217 #1718 takeover, before implementation | Clean base 45dca69f6 on beakley/row217. Recovering Launchpad handoff for citation guard, live settings, page store and runner retry. Acceptance is C2-06/design 5.2 plus sage-3595/3599/3602. Tracking agents/beakley/work/queue-217/BUILD.md; no product changes or Node/tests; Sage CLEAR required.

 2026-10-23 | Beakley (88b97f65) | Row 217 #1718 untested draft checkpoint | Continued Launchpad e25ef0373; added runner retry/text/note implementation, pure protocol constants and sage-3640 approved single read-only mount, CLI documentation and new acceptance test files. Static checks caught missing projects compatibility, async request mutation and Git pathspec matching; bounded fixes and regression tests authored. git diff --check clean. No Node/test/mutant executed; Sage holds CLEAR. 283/216/285 dependency checks and all acceptance execution remain open. Packet agents/beakley/work/queue-217/MANIFEST.md.
@@ -5485,3 +5501,52 @@ remain; no live state, schema or bus policy change.
 2026-10-24 | Beakley (88b97f65) | Row 217 round 2, sage-4037 | Rebased published dde5b8496 onto e0c6142f3 on new beakley/row217-r2; both append-log histories retained. Conflicts preserve landed grant dispatch, revocation hook and lookup exports. Added E4 citation-unavailable product path and real supporting-scope/index comparison tests after row283 8d2856ee3. Untested: no Node/npm/tests/mutants/build; ready for Sage CLEAR after Lena296. Full range-diff and honest discarded local rebase correction in agents/beakley/work/queue-217/BUILD.md.

 2026-10-24T10:21Z | Beakley (88b97f65) | Row 217 round2 slot verified, sage-4042/4043 | Source 2d274a5b6: touched57/57, whole library142/142 business270/270 bus974/974 cli988/988 harness172/172 seat218/218, all zero fail/skip/cancel. M1-M5 killed, controls/restored controls green, product hashes restored after each; E4 RED stand-in observed. Only first-red was new runtime fixture invalid-authority, corrected and retained in receipts; no old test failed/edited. Local root/webui npm ci, short TMPDIR, timeout-k10; no canonical npm/rm or module link. Full evidence agents/beakley/work/queue-217/run-r2; Sage owns scripts landing gate and formal review.
+2026-10-24T11:15:29Z | Sage | Rows 296 (#1802, Lena, Filbert) and 217 (#1718, Beakley, Webby) LANDED d0a6a87cd. Before: refactor at e0c6142f3 (local 98235fdb3). After: 296's 5 commits (range-diff 5 =, blobs equal b43156fd9 on 28 paths) and 217's 9 commits (5 = and 4 !, the ! are BUILD-LOG/SESSIONS append conflicts kept both sides; blobs equal 96659ccf4 on 79 paths) on 98235fdb3, with doc commits b19ffa04f and 98235fdb3. Reviews: Filbert c31547 rev 3896, Webby c31549 rev 3901. Gate: 1st run 10:57:16Z RED on one rule only, the gate's "cli skipped 0": 296's FED R7 test skips in the cli suite by design and runs only through scripts/test-federation-acceptance.sh, which passed 1/1 in the same run. Mos ruled that a RED gate doesn't land (mos-1583). The gate now allows a cli skip only from an explicit list (test file, test name, runner script) whose runner ran in the same gate with rc 0, at least 1 pass, 0 skipped and the named test passed; any unlisted skip stays RED; checked against a wrong-file and a runner-skip control, both RED. Rerun GREEN 11:14:53Z with its own npm ci: 17 package suites 0 failures (cli 989/988 pass, the allowed FED R7 skip; plugins 119; webui 418), every scripts/test-*.sh rc 0, federation-acceptance cleanup line present; skips otherwise are the queue canonical-root check and the row 244 live provider cases. push-check SECRETS_CLEAN, NO_ATTRIBUTION, PUSH_READY. #1802 closed c31557, #1718 closed c31559, Vikunja 533 comment 1054 (design task, left open for Q29). Row 286's approved manifest shares broker.mjs, runtime.mjs and library/src/index.mjs with 217, so 286 needs a rebase round before its gate. Brief template gains the skip-list rule.
+2026-10-24T10:02Z | Magica | Row 285 / #1790 r3 before/after (sage-4039, mos-1542) | Before: assigned magica/row285-r3 at b19ffa04f, Scrooge r2 untested at 53db6b7ca. After: seven commits cherry-picked through 644bcaa16; five named overlaps auto-merge preserving newer base changes. Range-diff six '=', one context-only '!'; six patch IDs identical, fixture patch ID differs with upstream import context, exact test added/removed-line comparison identical for all changed tests. business.mjs equals base; Scrooge BUILD equals r2. CREATIVE_KINDS absent in packages/roles/scripts; no 64-hex changed-path pin; 291 conservative reader candidates recorded. No npm or tests before Sage CLEAR; N1 remains follow-up. Own-branch evidence push next, not accepted/green or landed.
+
+2026-10-24T09:58:36Z | Magica | Row 285 timestamp correction | The preceding Magica entry marked 10:02Z used an incorrect timestamp; replay/evidence commit 87b7547f8 occurred before the measured 09:58:22Z push start. Technical evidence is unchanged.
+
+2026-10-24T10:32:02Z | Magica | Row285 / #1790 gate STOP (sage-4048) | Before: pushed66a800e15, no tests. After: own root/webui npm ci, short scratch TMPDIR, whole files serial timeout-k10; bus958/958 green (108 files), business partial80pass/4fail, first red old row323 case1-business-file tests57/86/95/105 because committed Case1 chief lacks required gitea ref. No more tests/mutants or source edits. Static diagnosis also finds old empty-credential assertions81/112/114, requiring a specific owner ruling. Sage notified magica-0002. No in-review move or green claim.
+
+2026-10-24T10:42:28Z | Magica | Row285 / #1790 Amendment1 before/after | Before: unconditional chief gitea broke row323. After: chief-only library conditional plus named required-reference refusal, checkCredentialMap unchanged; new three-case test file; own helper/resolve fixture hunks restored to base, own chief/business/identity hunks reconciled under sage-4060. Case1 doc/test byte-identical. M10 planned against new no-library positive and old Case1 doc test. No tests run under held slot; not green/accepted. Residual base library fixture references need authority alignment before re-CLEAR.
+
+2026-10-24T10:59:43Z | Magica | Row285 / #1790 B1 before/after | Before: Amendment1 candidatebabae6adc with missing refs in base library/creative fixtures. After: 26 data-only credential insertions across13 direct-reader files; original callback lines preserved, one expressly allowed credentials?.vikunja setup guard. Every other byte reconstructs prior candidate exactly; no base assertion edits. Base and candidate put role set is pm,cto,coder,reviewer; chief lacks vikunja. Literal e0c6142f3 word diffs and known preexisting r2 hunks recorded. No tests, green claim or queue move; next whole gate +M10 waits for Sage CLEAR.
+
+2026-10-24T11:24:17Z | Magica | Row285 / #1790 r4 before/after | Before: r3 eee8ad776 on b19ffa04f, gate unverified after amendments. After: new r4 from landed296+217 base d0a6a87cd, twelve commits replayed; only append logs conflicted, complete base prefixes preserved. Product/test patch lines identical across assigned bases; tests byte-equal r3; replyLimits and broker citation work retained. Regenerated range-diff and e0c6142f3 base word/line diffs. No npm/tests or queue moves; own-branch push explicitly authorized by sage-4078.
+
+2026-10-24T12:09:17Z | Magica | Row285 / #1790 r4 C1 diagnostic result | Before: valid landed-base candidate0f6cdc861; first old citation-runtime red. After: mos-1584/sage-4086 full unchanged collection, six suites2950 tests2937pass/12fail/1skip/0cancel; WebUI418 and plugins119 green, all12 script suites exit0, dedicated federation1/1. CLI release300s runner cap interrupted; retained and resolved via unchanged1800s retry224/224 in599.6s. Failures: citation-runtime1, instance-settings2, lifecycle-settings1, launcher1, harnesscreative7. Static root causes/fix classes and r3 parity in agents/magica/work/queue-285/BUILD.md. No source/test edits or fix round/mutants; no final manifest or in-review; owner ruling required.
+
+2026-10-24T13:02:03Z | Magica | Row285 / #1790 r4 VERIFIED | Before: C1 collection12 failures. After: approved three data corrections, actual-bound-ref guard, duplicate-before-eligibility hire, data-derived creative equal-service retention/listing with validator first; no old assertion edits. Own fresh128/2 installs, editor-required shortTMP serialized final gate: bus975/975 business282/282 cli988pass/1expectedskip webui418/418 harness172/172 plugins119/119, all12 scripts exit0.13 mutations14 independent checks killed; each SHA256/Git blob restored; restored controls136/136. Case1 doc/test/helper base-identical; N1 deferred. Own r4 candidate for Poe/Webby review, no landing/live action.
+
+2026-10-24T13:33:42Z | Sage | Row 285 (#1790, C2-08b, Magica on Codex, Poe and Webby) LANDED 1f3d0350f. Before: refactor at 25874bc86. After: r4 candidate 2e4503dc7's 14 commits cherry-picked onto 25874bc86. The one conflict (9f7adb03e, BUILD-LOG.md and SESSIONS.md) is append-only and kept both sides, with 0 lines removed against either parent. Apart from the logs, the tree equals the candidate except on the 7 paths 25874bc86 and 4c6190645 had changed. Reviews: Poe first review c31568 rev 3919, Webby landing review c31569 rev 3920, both static. Sage posted both because neither seat has a token. Gate GREEN 13:28:46Z with its own root and webui npm ci (mos-1575): 17 package suites, 4236 tests, 0 fail, 1 skip, which is the allowed FED R7 entry whose runner passed 1/1 (mos-1583). All 12 scripts/test-*.sh rc 0. The other skips are the queue canonical-root check and the row 244 live provider cases. Brief gate: no CREATIVE_KINDS in packages, roles or scripts; no test or script pins the old or new sha256 or blob of a changed role file (positive control found chief-of-staff.json readers); role JSONs match mos-1309 item 5 design 4, with gitea scopes added (read for the chief, read:user and write:repository for the creative roles). Before the push, the in-review overlap sweep found only row 286 (broker.mjs), which rebases as r5. push-check FF_OK, NO_BINARY, SECRETS_CLEAN, NO_ATTRIBUTION. #1790 closed with c31580, Vikunja 546 c1056 (already done). Queue note rev 3921, done rev 3922. Correction to my own rulings: sage-2921 (285's #giteaRole refuses the chief) and sage-2947 (286's T7/T9 mint the chief's grant through the real raise, no SQL staging) conflict now that 285 has landed (rockerduck-0008). sage-4100 keeps the refusal and has T7/T9 seed a read-only chief grant as labeled fixture data, with an assertion that the real path refuses and with revoke and fire still on the real verbs. The tradeoff is that the chief mint goes untested until C2-21 (row 287), whose brief now replaces the seeds. Dewey confirms in 286's round-2 delta. Brief template gains the mos-1584 businessDoc library chief-ref line. The C2-02 brief gains webby-0282 N1 (tool names match the creative contracts). Follow-up webby-0282 N3: business.mjs uses the literal "chief-of-staff" instead of STAFF_TO. The live stack is not re-pinned.
+- 2026-10-24 (rockerduck, row 286 / #1791, r3 before gate): transplanted Ludwig 45dca69f6..573fa0be0 onto b19ffa04f, preserved newer exports in sole index.mjs conflict; plain-text range-diff, patch IDs and reader/pin drift inventory in agents/rockerduck/work/queue-286/BUILD.md. UNTESTED by sage-4040: no setup or tests until CLEAR.
+
+- 2026-10-24 (rockerduck, row 286 / #1791, r3 after sage-4054 CLEAR): own-worktree installs; library 140/140 and bus 963/963; M1 forced-refspec and M2 missing-inode-compare killed at semantic assertions, restored before final suites; all gate-output fixture searches zero. Four first-run reds only in new credential test; setup corrections and intermediate findings recorded in agents/rockerduck/work/queue-286/BUILD.md. No old test edited during gate; shell/CLI suites remain Sage landing gate.
+
+- 2026-10-24 (rockerduck, row286 / #1791, r4 before gate, sage-4079): all 15 r3 commits transplanted to d0a6a87cd on new rockerduck/row286-r4. Three product overlaps auto-merged with row217 preserved; two append-log conflicts retain both histories. Range-diff and adjacent hunk evidence in agents/rockerduck/work/queue-286/BUILD.md. UNTESTED r4: Git-only until own-branch push, library/bus rerun waits for CLEAR after row285.
+
+- 2026-10-24 (rockerduck, row286 / #1791, r5 before gate, sage-4097/4100): transplanted r4 onto 1f3d0350f; kept row285 library.write routing and chief write-grant refusal plus both append-log histories. Chief fixture refs added; T7/T9 mint setup now pins real refusal then seeds read-only fixture as explicitly ruled, keeping real revoke/fire assertions. Scratch role declaration mutation removed; range-diff/drift evidence recorded. No r5 tests yet; CLEAR starts after own-branch push.
+
+- 2026-10-24 (rockerduck, row286 / #1791 r5 gate, sage-4097/4100): own-worktree installs; touched credential6/6 and sync24/24; whole library151/151 and bus981/981, zero fail/skip/cancel. P1 forced refspec, P2 missing inode compare and B285-M1 chief write-grant guard each killed on ERR_ASSERTION with green before/after controls and exact restoration hashes. All gate-output fixture searches zero. No normal red; source unchanged after pre-gate push045eec61a. Plain text evidence in agents/rockerduck/work/queue-286/BUILD.md and gate-r5; round2 candidate push follows.
+
+- 2026-10-24 (rockerduck, row286 / #1791 r6, sage-4112 / #1825): corrected only two fixture constants to unique19-character values after the landing secrets check refused r5. No waiver/guard/assertion/product change. Added-package-lines secrets grep empty; touched6/6+24/24, library151/151, bus981/981 on fresh shortTMP timeout-k10; both exact new values absent from all four outputs. Mutants not rerun as directed. Plain evidence in agents/rockerduck/work/queue-286/BUILD.md and gate-r6; new manifest/push and round3 follow.
+
+2026-10-24T14:37:02Z | Sage | Row 286 (#1791, C2-03b, Rockerduck on Codex, Boyd and Dewey) LANDED 5d7801dc1. Before: refactor at d55944edb. After: r6 candidate 75f6d56b1's 19 commits cherry-picked onto d55944edb. The one conflict (64f1ff950, BUILD-LOG.md and SESSIONS.md) is append-only and kept both sides, with 0 lines removed against either parent. Apart from the logs, the tree equals the candidate except on the 6 paths of my doc commit d55944edb. Reviews: round 2 (r5 ec8cb10c0) Boyd c31584 rev 3928, Dewey c31585 rev 3929; round 3 (r6) Boyd c31587 rev 3942, Dewey c31588 rev 3943. Sage posted the requests (c31583, c31586) because Rockerduck has no token. Gate GREEN on r5's tree e9c73ab96 at 14:14:11Z, then the push stopped at push-check STOP secrets. The guard came in today with #1825. Two added fixture constants (SLOT_TOKEN in library-credential.test.mjs, SEAT_TOKEN in sync.test.mjs) were 31 characters and matched its token-assignment pattern. sage-4112: no waiver (mos-1570) and no guard edit; r6 shortened only those two values to 19 characters, with reviewers confirming the delta. Gate GREEN again on 5d7801dc1 at 14:36:42Z with its own npm ci: 17 package suites, 4251 tests, 0 fail, 1 skip, which is the allowed FED R7 entry whose runner passed 1/1. All 12 scripts/test-*.sh rc 0. Neither old nor new fixture values appear in any of the 29 run outputs. Mutants: Rockerduck killed P1, P2 and B285-M1 (gitea-grant X-G1). For Dewey's N1 I also ran B285-M1 against library-credential.test.mjs; T7 and T9 failed (4/6) and passed after the restore. sage-4100 (chief grant seeded as fixture until C2-21) is recorded in the 285 entry. Overlap sweep found no in-review row on the 9 code paths. push-check FF_OK, NO_BINARY, SECRETS_CLEAN, NO_ATTRIBUTION. #1791 closed with c31591. No P19 task names row 286, so there is no Vikunja task to close. Brief template gains a sage-4112 line: test credentials stay under 24 characters. The live stack is not re-pinned.
+
+2026-10-24T14:55:11Z | Sage | Row 290 (#1795, C2-12b, the setup sheet rewrite, Louie on Codex, Webby) LANDED 3d7dff345. Before: refactor at 18334d713. After: Louie's r2 candidate 22510988d (four doc commits on 963303403) cherry-picked onto 18334d713. The commits match by patch-id and range-diff, and docs/case2/SETUP-SHEET.md is blob 37b451c6, the text Webby approved in rounds 2-3 (42b75e484) and again on the rebase (round 4, webby/reviews 0006f03f4). Sage posted the request (c31595, revs 3952-3953) because Louie has no token; Webby's verdict is c31596, recorded at rev 3954. Gate from the brief, doc only: a grep of packages/*/tests, scripts/test-*.sh and tests/ for SETUP-SHEET finds nothing, and a positive-control grep does find matches. Louie checked that the sheet's two setting names match broker.mjs:5341. No suite ran: no test reads the file (decision 137), so the mos-1455 all-suites gate, which covers code rows, doesn't apply, and Fethry's slot for row 225 stays untouched. push-check FF_OK, SECRETS_CLEAN, NO_ATTRIBUTION. #1795 closed with c31597. No P19 task names row 290. The live stack is not re-pinned.
+2026-10-23 | Fethry | Row 225 C2-10b (#1726), handoff recovery. Before: Morgana's untested candidate 9a131e956 replaces renderItems with renderReply and adds Console citation/notice/status rendering and status/revert routes. Continuing that exact history on fethry/row225; preserving A1-A5 and the accepted file deviations. Remaining: confirm limits contract, review/test candidate under Sage CLEAR, obtain Mos OK through Sage for inherited old-test changes, manifest and Dewey review. No Node/tests run in this session and no green claim.
+
+2026-10-23 | Fethry | Row 225 T1 lane A (sage-3641/3647). Before: nested replyLimits fallback/problem omitted, wrong-project revert receipt accepted, invalid library mapping hidden. After RED: these three local behaviors corrected; three assertions in the new handoff test files corrected against existing route/mapping/Boolean behavior, each explained in BUILD.md. Whole-file GREEN: renderer 9/0, routes 13/0, browser 9/0; full library 81/0, channel-proof 2/0. Approved old-test numstats remain 80/66 and 3/1. Full webui/build and full integration gate have not run. Isolated mutants next within the authorized 19:38Z hard stop; no completion claim.
+
+2026-10-23 | Fethry | Row 225 T1 expanded evidence complete (sage-3647). Full library81/0 and channel-proof2/0; final targeted renderer9/0, routes13/0, browser9/0. Isolated kit14/14 assertion kills on507901277, every target restored/hash-checked, candidate hashes unchanged. First attempt stopped at a wait-based failure, recorded as not killed; corrected the new test's repaint wait, baseline9/0, and reran the whole kit. No processes left; lane A returned around19:29Z. Source manifest for Dewey prepared; full webui/build and Sage's integration/scripts gate still pending. Raw logs preserved in scratch, normalized display copies and raw SHA256 provenance in agent evidence.
+
+2026-10-23 | Fethry | Row225 review follow-up (dewey-0937/0939, sage-3669). Before: a notice-shaped checked agent body could misrepresent another agent's real commit/path, and a403 owner-only lacking sent looked uncertain. Regression browser cases and two isolated mutants authored first; corrected own BUILD.md's forgery explanation and stated Sage's accepted pre217 no-check residual. No production change or Node/test run yet. Existing renderer tests, including the unchecked notice case, stay exactly at Mos1510's80/66; channel-proof stays3/1. RED/GREEN and full webui wait for explicit T3 CLEAR after217; no broker marker or row288 change.
+
+2026-10-24 | Fethry | Row225 round2 resumed under sage4119/4120. Before: reviewed source94128f73f had blocking checked-message notice forgery and a misleading owner-only refusal; prepared tests7590cf633 awaited the slot. Rebased onto963303403 on new fethry/row225-r2 preserving sharing/chatGrants, upstream exports and both log histories; approved test deltas remain80/66 and3/1 with the combined bus pin. Queue start rev3946; local root/webui npm ci, no canonical dependency links. New browser RED8/3 then GREEN11/0 after only B1/N1 fixes. Editor build unchanged; whole webui442/0 and library149/0 (no skip/cancel); bus gate in progress. No old-test edit or second RED; full results and isolated-mutant evidence follow.
+
+2026-10-24 | Fethry | Row225 round2 worktree gate and review correction complete on sourcec010dfd85 over963303403. B1/N1 RED8/3→GREEN11/0. Local editor build unchanged; webui442/0, library149/0, bus981/0, whole channel-proof2/0, all zero skips/cancels. Isolated16 unique clean assertion kills (14 originals+B1+N1); one M3 missing-file attempt timed out during a status after-hook, was not counted, was reported to Sage before any change, and passed unchanged retry with the remaining9.17 attempts total, timeout retained. Per-mutant restored hashes and final13 pins verified; scratch Node/Chromium sweep zero, no signals. New fethry/row225-r2 preserves original published branch, approved old tests80/66 and3/1, all landed sharing/exports/log histories. MANIFEST.r2.md and manifest.r2.sha256 to Dewey; source review/lead integration remain separate, no live action.
+- 2026-10-24 — steelbeak — #1792 / row 287 C2-21 before: library grants still fork; creative and chief grants refuse. Recovered Megavolt's binding design on 18334d713 and documented current-code delta in agents/steelbeak/work/queue-287/BUILD.md. No tests or implementation yet; Sage holds test clearance, scope delta reported in steelbeak-0001.
+
+- 2026-10-24 — steelbeak — #1792 / row 287 C2-21 after: library grants use admin collaborator PUT, creative write/chief read levels, definition scopes, exact publish-wide reach and kind/level binding; business fence and chief install identity/publish updated; T7/T9 seeds replaced by real minting. Scratch Gitea F-A/F-B pass, F-C owner control negative recorded, F-D normal/force control positive. Verified bus 998, business 283, CLI 989 plus dedicated FED 1 (one expected CLI skip), Docker 2, install 27, all 12 shell gates, M1-M11 killed and restored; token audit hits0 and owned-process/container cleanup clean. Test fixture corrections approved under mos-1590/sage-4139; non-executable land-work launcher rc126 resolved by sage-4141 bash invocation. Evidence and manifest at agents/steelbeak/work/queue-287/; handing off to Boyd, then Dewey, with no live change or landing.
+
+- 2026-10-24 — steelbeak — #1792 / row 287 first-review correction, boyd-0034: frozen candidate c2338ed58 approved, no blocking code findings. Product/test diff-check is clean; the full committed diff has trailing whitespace in preserved raw RED/mutant logs, correcting the earlier unqualified claim. Added verified old-test numstats in BUILD.md as a separate doc-only follow-up under lead137. Queue round1 opened at rev3963; automatic request failed at rev3964 for missing Steelbeak credential, reported to Sage without workaround. No product edits, tests or slot use.
@@ -6,3 +6,6 @@ No launcher in this directory. The seat runs as a T3 thread (thread 88b97f65) an
 credentials of its own; it pushes only its own `beakley/*` branches through the repository credential helper (mos-0981),
 never `refactor`, `main` or another seat's branch. Claude seats orchestrate and review (Q245). Registered by Sage on
 2026-10-23 so the queue can name the seat as row owner (store.mjs isSeatDir).
+
+Reports go to Sage's T3 thread (1ef1e4f8-3ead-4208-beca-38f9f1add079) and the next seat's, per the brief's Handoffs.
+Mos's thread gets a copy only when Mos has a step (mos-1579, 2026-10-24).
@@ -0,0 +1,473 @@
+# Row 225 (C2-10b) Console chat: replies, citations, write notices, status line
+
+Owner: Morgana, from sage-3582 (18:53Z 10-23). Base: origin/refactor 45dca69f6. Branch: morgana/row225.
+Brief: docs/plans/2026-10-20_case2-rows.md, C2-10b. Design: agents/gosalyn/work/case2/DESIGN.md 7.4,
+5.2 (the reply schema and the check result) and the write notice and `library.revert` (about line 286).
+
+## Ruling on the dependency gap (sage-3591)
+
+225 builds against the design contracts. `renderReply` stays pure, and the caller supplies the answers
+it can't know. The revert route proxies to the bus verb and shows the refusal code until the verb
+exists. Landing order: 225 lands after 217 (C2-06), not after 288 (C2-02). Sage adds `after 217` to
+row 225. Before 288 lands, the Revert button gets the bus's refusal and shows its code, as the brief
+allows.
+
+## A1. The check result I assume (to 217, Launchpad)
+
+The broker stores one check result with each agent-to-human message the guard passes. The Console reads
+it on the message row that `/api/chat/threads/<id>/messages` returns, under the key `check`:
+
+```json
+{
+  "check": {
+    "citations": [
+      { "scope": "canon", "agent": null },
+      { "scope": "supporting", "agent": "acme/scribe" },
+      { "scope": "web", "agent": null }
+    ]
+  }
+}
+```
+
+- `check` is `null` or absent on a message the guard didn't check: a human's message, a free-text reply,
+  a notice, or a message from before 217.
+- `check.citations` has one entry per entry of the body's `citations`, in the same order.
+- `scope` is one of `canon`, `playground`, `supporting` and `web`. A url cite is `web`.
+- `agent` is the `Mosaic-Agent` trailer value, `<business>/<instance>`, from
+  `git log -1 --format=%(trailers:key=Mosaic-Agent,valueonly) <commit> -- <path>`, or `null` when the
+  file's last commit at `commit` carries none. A url cite has `agent: null`. The Console shows the
+  agent-written label when `agent` is a nonempty string, and names the agent.
+
+The Console trusts nothing in the body for scope or label. A cite with no matching check entry renders
+with no badge and no label. It doesn't fall back to a scope it worked out itself.
+
+If 217 uses other names, I change mine to theirs before either of us pushes (sage-3591 item 1).
+
+## A2. The revert verb I assume (to 288, Honker)
+
+- Verb: `library.revert`. A human verb (design M4): from an agent session it refuses `human-required`,
+  like `library.status` (`broker.mjs:5133`).
+- Args: `{ "project": <business project name>, "commit": <40 lowercase hex> }`. The design writes
+  `library.revert {commit}`. `project` is added to match the other library verbs, and like theirs it is the
+  key of `business.projects` (`mirror.mjs:31`), which is the chat project's `repo` link, not its UUID. Both are required, and no other key
+  is allowed (`invalid-request`), as the other library verbs check with `keys(args, ...)`.
+- Result: `{ "project", "path", "reverted": <the commit given>, "commit": <the new commit> }`.
+- Refusal codes the Console shows by name:
+  - `library-revert-not-agent`: `commit` has no `Mosaic-Agent` trailer for this business, or isn't
+    reachable from the served commit.
+  - `stale-base`: a later commit changed that path.
+  - `human-required`, `invalid-request`, `project-not-configured`.
+  - Before 288 lands, the bus refuses the verb (expected `unknown-verb`, `broker.mjs:6578`), and the Console
+    shows that code.
+- HTTP status in the Console (`packages/webui/src/bus.mjs` `busStatus`): `stale-base` and
+  `library-revert-not-agent` map to 409. Every other code keeps the existing mapping.
+
+## A3. The status line
+
+`GET /api/library/status?project=<id>` proxies `library.status {project}` through the existing
+`libraryStatus` option. `cli.mjs:110` already passes that option, but `startServer` doesn't read it.
+The status line shows:
+
+- the served commit (7 characters) and its age;
+- `library-diverged` when the sync state names it;
+- the fetch error code;
+- the reply limits in force, and the keys that fell back;
+- the count of R-problems, linking to the list.
+
+It reads the fields `readSyncState` returns at the base (`packages/library/src/mirror.mjs:232`). It shows
+any field 217 adds (the limits) only when present.
+
+## A4. "Changed since" (ruled sage-3596)
+
+Sage ruled that 217 supplies `last`. On a `thread.messages` row that carries `check`, each path cite's
+entry gets `last`, the file's last commit at the served tip, read when the message is read. When `last`
+is absent the Console marks nothing changed, and a test pins that.
+
+One more field is needed, raised in morgana-0200. The cited `commit` is a library commit, not the
+file's own last commit, so a cite made at a commit that didn't touch the file would differ from `last`
+while the file is unchanged. I asked 217 to also store `file`, the file's last commit at the cited
+commit. That's `%H` from the same `git log -1 <commit> -- <path>` call that reads the trailer, so it
+costs no extra git call. The Console marks a cite changed when both `file` and `last` are 40-hex and
+differ. The cited commit is reachable from the served one (5.2), so `file` is an ancestor of `last`,
+and differing means newer. A missing or malformed `file` or `last` marks nothing.
+
+The entry the Console reads, in full: `{ scope, agent, file?, last? }`.
+
+## A5. `no-cited-answer` retires
+
+`renderItems` and its `NOTICES` (`no-cited-answer`, `no-answer`, `turn-failed`) go. 217 sends the
+runner's fixed texts as plain bodies (design 5.2, "Runner texts"), and renderReply shows those as free
+text. Design 7.4 names no other notice than `library-write`, so nothing is lost (sage-3596 item 3).
+
+## Files
+
+Both deviations below were accepted in sage-3596 and are named in the manifest for Dewey. The brief owns these:
+
+- `packages/library/src/render.mjs`: `renderReply` replaces `renderItems`.
+- `packages/library/src/index.mjs`: the export.
+- `packages/library/README.md`: the section.
+- `packages/library/tests/render.test.mjs`.
+
+It also owns `bus.js`, its stylesheet, `serve.mjs` (only the two routes) and new webui tests. Two
+deviations, both recorded here:
+
+- The chat view's message list is `packages/webui/src/public/chat.js:85` (`window.MosaicChat`), not
+  `bus.js`. The reply, notice and Revert rendering goes in `chat.js` and `chat.css`. The status line
+  goes in the chat thread view, so it is also in `chat.js`.
+- `packages/webui/src/console-bus.mjs` and `cli.mjs` each get one `libraryRevert` line, beside the
+  existing `libraryStatus` wiring.
+
+## Overlap with row 220 (C2-10a, Researcher, 3ef6da90d)
+
+220 changes one line each in the webui tests discord.test.mjs, fixture.mjs, history-fixture.mjs,
+relaunch.test.mjs and return-flow.test.mjs. Its other paths are in control-board, conversation, discord
+and business. 225 doesn't touch those five files or those packages. Its webui tests are new files.
+
+## Handoff to Fethry (mos-1501, Q245)
+
+The row moved to Fethry (Codex, fethry/row225). Everything below is **untested**: no suite or single file
+has run on it, since a run needs Sage's CLEAR. Each changed file passes `node --check`.
+
+Done in the handoff commit:
+
+- `render.mjs` `renderReply(body, {check, changed, name})`; index export; README section;
+  `render.test.mjs` rewritten. `renderItems` is gone from every package.
+- `serve.mjs`: `/render.mjs` static entry (owner and user file maps), `GET /api/library/status`
+  (one `project` query, answer must name that project), `POST /api/library/revert` (save's boundary,
+  strict `{project, commit}`, refusal shows the code, lost or unusable answer is `outcome-unknown`,
+  never retried). Both are nulled for a granted user, and `userRoute` keeps them owner-only. The tester
+  listener refuses `libraryRevert`.
+- `bus.mjs`: `library-revert-not-agent: 409`. That re-pins `packages/webui/src/bus.mjs` in
+  `packages/bus/tests/channel-proof.test.mjs`, with a comment line, as row 254 did. It's a third deviation,
+  in another package's test.
+- `console-bus.mjs` and `cli.mjs`: `libraryRevert`, beside `libraryStatus`.
+- `chat.js`: dynamic `import('/render.mjs')` (CSP is `script-src 'self'`); body text until it loads.
+  Cites with a scope badge, the agent-written label, "changed since" from `file`/`last`, links only for
+  https with `rel="noopener noreferrer"`. A notice gets a Revert button behind `confirm()`. The library
+  status line goes under the thread heading.
+- `chat.css`: cite, badge, notice and status styles.
+- New tests: `packages/webui/tests/library-routes.test.mjs` and
+  `packages/webui/tests/chat-replies-browser.test.mjs`. 220's five files are untouched.
+
+Decisions made in the build:
+
+- The library name is the chat project's `repo`. A project with no repo reads no status and its
+  Revert does nothing.
+- These codes hide the status line: `project-not-declared`, `library-mapping-invalid`,
+  `project-not-configured`, `not-configured` and `owner-only`.
+  - Otherwise every code-repo thread, and every granted user, would show "unavailable".
+  - Cost: a broken library mapping also hides the line. `library.status` from the CLI still shows it.
+- "Age" is the time since `lastFetch` ("fetched 5 min ago"), not the served commit's age, which the
+  status doesn't carry.
+- The limits fields are assumed to be `replyLimits {requireCitation, citationsPerReply}` and
+  `replyLimitsFallback [keys]`, and are shown only when present. **Not agreed with 217.** Confirm with
+  Beakley and rename.
+- Correction (dewey-0937 B1, sage-3669): shape alone cannot authenticate a notice. An agent in a
+  library business could name another agent's real reachable commit while claiming a fake path,
+  misleading the human into reverting a different file. The renderer must require no stored check
+  result before treating a notice-shaped body as a broker notice. A checked body stays plain text.
+  Pre-217 messages have no check, so a notice-shaped legacy body still renders as a notice; Sage
+  accepts that residual in this test system with no real agent history and owns the later positive
+  broker-marker follow-up after10-27. No marker or row288 dependency is added by225.
+
+Left:
+
+1. Get CLEAR and run the webui and library suites, `channel-proof.test.mjs`, and the two new files whole.
+   The browser test's selectors and waits have never run.
+2. Agree the limits field names with 217 (Beakley).
+3. Granted-user R6 G5 (`granted-user.test.mjs:252`) lists owner verbs by hand. Add `library.revert`
+   once 288 lands.
+4. BUILD.md: the mutant list and the mos-1275 timeout plan.
+5. The manifest names the three deviations: chat.js and chat.css in place of bus.js, the console-bus and
+   cli lines, and the channel-proof re-pin.
+
+## Fethry continuation (2026-10-23, Q245)
+
+Owner: Fethry, thread 14f80e3c-ace7-4793-a577-e1275ca09b0b. Branch fethry/row225.
+This file carries Morgana's complete BUILD.md above unchanged, recovered from 9a131e956
+(base 45dca69f6). Morgana stopped editing 225 at that handoff. Issue #1726; Dewey reviews.
+Sage owns queue moves, test slots, gate and landing. No Node/tests until Sage CLEAR
+(sage-3611); commits/pushes before the gate are explicitly Untested. No credential files read.
+
+### Confirmed interfaces and rulings
+
+- Beakley beakley-0004 confirms ordered check.citations {scope, agent, file, last}; a missing
+  or malformed file/last means no changed marker. Fetched age accurately describes lastFetch.
+- Beakley's concrete library.status shape is replyLimits:
+  {requireCitation, citationsPerReply, fallback: [keys], problem: 'reply-limits-unreadable' | null}.
+  The inherited top-level replyLimitsFallback assumption is superseded. Show nested fallback and
+  problem, with a browser regression test for each. No broker or policy change in this row.
+- Bubba bubba-0002 confirms A2 and the exact broker notice shape. fethry-0005 forwards the
+  project-key correction: project is chat project.repo, not the chat UUID.
+- Keep the inherited ordinary-code-repo/granted-user status hiding behavior for now, but a
+  library-mapping-invalid error should stay visible: hiding an invalid mapping hides diagnosis.
+  Confirm this local UI choice through regression coverage and tell Sage/Dewey.
+
+### Continuation plan and acceptance evidence
+
+Spec: docs/plans/2026-10-20_case2-rows.md C2-10b; design 5.2 and 7.4;
+standing rulings sage-3591, sage-3596 and sage-3611. Implement inline in this existing isolated
+T3 worktree; use the existing candidate and tests, never restart the implementation.
+
+1. Static audit the handoff against the contracts and inherited tests. Add failing coverage for
+   nested limits fallback/problem, wrong-project revert receipts, missing file/last and invalid
+   mapping visibility. Existing tests require Mos approval through Sage before further edits.
+2. On Sage CLEAR, run the new files whole and library renderer tests with per-test deadlines;
+   record RED before changing uncovered behavior. Fix only demonstrated local defects. Run
+   targeted GREEN, then the full relevant suites only within the authorized slot.
+3. Record exact commands, timings and output paths. Prepare mutant kill list below; run only on
+   CLEAR, using isolated copies so the candidate is never temporarily changed for mutation.
+4. Freeze a manifest containing all source/test/doc changes and all three handoff deviations.
+   Push only fethry/*, as additional commits. Send exact head/results to Dewey and Sage; cc Mos
+   on pushes/blockers. Sage performs queue moves, gate and landing. No merge/release/live changes.
+
+### Existing test changes requiring Mos OK through Sage (mos-1272)
+
+Diff against 45dca69f6, inherited from Morgana 9a131e956:
+
+| File | Added | Removed | Reason |
+| --- | ---: | ---: | --- |
+| packages/library/tests/render.test.mjs | 80 | 66 | Brief requires retiring renderItems and replacing its tests with renderReply coverage |
+| packages/bus/tests/channel-proof.test.mjs | 3 | 1 | bus.mjs gains library-revert-not-agent:409; refresh that source hash and document why |
+
+No further edits to these files pending approval. No edits to row220's five tests.
+The new webui test files are additions against the row base.
+
+### Timeout plan (mos-1275)
+
+Every Node test run uses --test-concurrency=1 and --test-timeout=30000, under an outer timeout.
+New library/route files: outer 120s each; new browser file: outer 240s. Full library and channel-proof:
+outer 180s; full webui: outer 900s, MOSAIC_REQUIRE_EDITOR_BUILD=1. Full webui requires its own
+packages/webui npm ci per agents/README.md and Sage CLEAR. Output redirects to an evidence log;
+inspect tail, failure names and summary, never claim green from an exit alone. A timeout is a
+failed run: stop, report the exact command/phase/last output, and diagnose before retrying.
+Sage's gate owns every scripts/test-*.sh; no implicit slot or test authority from this plan.
+
+### Mutant plan (pending CLEAR)
+
+- M1: drop a path badge or the supporting label; cite browser assertions must fail.
+- M2: allow http/javascript links; renderer and browser safe-link assertions must fail.
+- M3: compare cited library commit to last instead of file to last, or treat a missing file/last as
+  changed; changed-since assertions must fail, including same-file/different-library-commit.
+- M4: ignore nested fallback/problem; status browser tests must fail.
+- M5: remove a revert fence (send, identity, exact Origin or Fetch Metadata), strict key/commit
+  validation or wrong-project receipt validation; route tests must fail with zero unexpected calls.
+- M6: retry a refused/unknown revert; single-call route/browser assertions must fail.
+- M7: remove granted-user library-route fence; owner-only route coverage must fail.
+
+Progress: handoff and interfaces recovered; candidate untested. No completion claim.
+
+Static evidence correction: the first pushed patch artifact used ordinary context lines, whose
+single-space blank context lines make git diff --check report whitespace in the artifact. Regenerated
+inherited-old-tests.patch with --unified=0; it is the same exact two-file change, applicable with
+git apply --unidiff-zero. No source or existing test changed for this correction.
+
+Mutation kit authored at mutants.py (11 concrete mutations across M1-M7), Python AST parse only.
+It archives the committed packages plus their tracked fixture dependencies into disposable snapshots,
+links the existing dependency install read-only in practice (tests do not install), enforces exactly
+one mutation anchor and requires an assertion failure for a kill. It records source hashes before
+and after. It has not run; anchors for the planned fixes intentionally require those fixes first.
+No Node/tests/build/browser work has run in Fethry's session pending Sage CLEAR.
+
+### Old-test approval and preservation condition (mos-1510, sage-3623)
+
+Mos approves render.test.mjs +80/-66 and channel-proof.test.mjs +3/-1 exactly. No additional edits
+are permitted to either file without a new Mos OK through Sage. The condition on the renderer:
+
+- The old malformed-body fixed-line behavior no longer applies. Design 5.2 now says any body
+  outside the cited-object schema is free text whose text is the whole body. Rejecting it into a
+  fixed line would hide human/free-text/older messages and the four fixed runner texts. The new
+  render.test.mjs tests “free text renders as itself with no citations” and “a body without the
+  reply or notice shape is free text: the whole body, no citations” explicitly cover this new rule.
+- The old no-options path-badge behavior still applies. The new render.test.mjs test “without a
+  check result a path cite has no badge, no label and is never changed” covers it, and the browser
+  test checks an unchecked path cite has no badge/label. No path inference fallback was added.
+
+Dewey checks both against the frozen old-test delta. The two numstats remain 80/66 and 3/1.
+
+### Test slot and shared protocol (sage-3623, beakley-0006)
+
+Targeted lane A slot is planned around 19:47Z, after Gosalyn's 226 run and Sage's queue gap.
+Wait for explicit CLEAR; the scheduled time alone grants nothing. Hard stop 20:00Z for Sage's
+226 gate. Boyd's lane B bus/cli/business work is disjoint and does not count as a busy lane A.
+The three requested files are the library renderer test and the two new webui files, whole/serial.
+
+Beakley confirms reply-protocol.mjs exports only GUARD_CODES (the seven guard refusal codes) and
+FIXED_TEXTS {empty, failed, uncited, tooLong}. It has no scope/notice constants or validator.
+renderReply defines none of those codes or runner texts: it already renders the fixed bodies as free
+text. It therefore needs no protocol import and no extra browser module route (beakley-0006).
+Do not add unused imports or redefine those shared codes/texts later.
+
+2026-10-23T19:21:07Z dependency update (bubba-0006): Bubba's first static row288 push is
+origin/bubba/row288 c867cada9, explicitly Untested with no Node run. A2 library.revert uses the
+business.projects key; broker notice retains the exact agreed body. Bubba adds librarySave only
+in console-bus.mjs/cli.mjs and leaves libraryRevert wiring owned by 225. Preserve both callback
+changes when Sage integrates. No dependency merge or test run performed here; 225 still lands
+after 217 and may show unknown-verb until 288 lands.
+
+## T1 targeted RED to GREEN (sage-3641, 2026-10-23T19:23Z)
+
+All three files ran whole and serial, with TMPDIR=/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2,
+--test-concurrency=1 --test-timeout=30000 and outer timeout -k 10 (120s renderer, 120s routes,
+240s browser). Initial renderer 9/0 (0.105s), routes 9/3 (0.226s), browser 5/3 (5.630s).
+Final renderer 9/0 (0.105s), routes 12/0 (0.212s), browser 8/0 (5.284s). Logs in evidence/.
+
+Production fixes after RED:
+- Reject a library.revert receipt with the wrong project as outcome-unknown; no retry.
+- Read replyLimits.fallback and display replyLimits.problem per beakley-0004/0006.
+- Show library-mapping-invalid in the status line; its hidden-status branch is covered by the
+  browser refusal matrix once the nested-limits assertion passes. This diagnosis was made statically;
+  the first RED exits that matrix at the preceding fallback assertion, so visibility itself has only
+  a GREEN run, unlike the fallback/problem and wrong-project fixes.
+
+Three assertion corrections in NEW handoff files (not pre-existing tests, per sage-3647):
+1. library-routes.test.mjs: POST /api/library/status in preview mode expects 403, because the existing
+   global preview write fence runs before the GET-only route and returns read-only. The route remains
+   GET-only and no callback fires on that POST. Do not weaken or bypass the fence to get 405.
+2. library-routes.test.mjs: project-not-declared expects 400, which busStatus already maps at the
+   row base. The inherited 502 expectation contradicted that existing map. No production map change.
+3. chat-replies-browser.test.mjs: coerce the whole “img element OR window.injected” expression to a
+   Boolean. With no injected node/code the old expression returns undefined, not false. Assertions
+   still require neither DOM injection nor executed handler. All preceding cite/link assertions pass.
+
+Frozen pre-existing test deltas still render.test.mjs 80/66 and channel-proof.test.mjs 3/1.
+No Node/Chromium process with this slot TMPDIR remained after targeted tests (checked /proc).
+
+Expanded CLEAR sage-3647: full library, then channel-proof whole, then isolated mutants that fit;
+still hard stop 19:38Z. No full webui suite, npm ci or editor build authorized in this window.
+
+Expanded-slot evidence: full library 81/0 (9.179s), channel-proof 2/0 (0.573s), whole/serial,
+--test-timeout=30000, outer timeout -k 10 180, same TMPDIR. Logs copied to evidence/.
+To exercise invalid-mapping visibility independently, added its own browser case and temporarily
+restored only the hidden-mapping branch. Whole browser RED: 7/2 (8.810s); the direct assertion sees
+null instead of the diagnostic, and the refusal-matrix wait also fails. Finally restored the exact
+corrected source before the next run. This supersedes the earlier visibility “GREEN only” note.
+
+Final targeted coverage before mutation: browser 9/0 (6014.970ms runner duration), routes 13/0.
+Added an independent send-off test with a configured libraryRevert callback: absence of --send
+still refuses with zero callback calls. This makes the send fence independently mutation-testable.
+The kit now has 14 concrete mutations, including agent-label, unreadable-limits problem and send.
+Each isolated target is restored to its candidate SHA256, and worktree hashes are checked before
+continuing to the next mutant (sage-3647). Runner uses TAP so assertion failures can be distinguished
+from timeouts/import/process failures. Full webui/build and the integration gate remain pending.
+
+Dependency update beakley-0008: row217 first push origin/beakley/row217 c25f5b8da is UNTESTED,
+continued from Launchpad e25ef0373. No dependency merge here; its protocol/module mount belongs to
+217 and renderReply needs none of those codes/texts. Integration acceptance remains Sage's gate.
+
+First isolated-mutant attempt stopped honestly at M3-wrong-commit: M1 badge, M1 agent label and M2
+https-only link mutants were killed by assertions; M3 failed via the browser's expected-state wait,
+so the strict runner did NOT count it as a kill. Every target restored/hash-checked and candidate
+hashes unchanged. Logs retained in evidence/mutants-attempt1/. Corrected the new browser test to wait
+for a completed repaint (independent of desired output), then assert changed-marker count. Whole
+browser baseline remains 9/0. No production change. Re-run the whole isolated kit against this test.
+
+## T1 complete: isolated mutants and source-review handoff
+
+sage-3647 final kit on source candidate 507901277: 14/14 assertion kills, no timeout/import/process
+failure counted. Each mutant matched one anchor, restored the target SHA256 and checked the three
+candidate source hashes before the next. evidence/mutants-final/summary.json records every result;
+final worktreeUnchanged=true. Logs name the failing tests, including M3's direct assertion after the
+refresh wait correction. /proc inspection found no remaining Node/Chromium process with the slot
+TMPDIR. Returned lane A to Sage as fethry-0016 at about19:29Z, before the19:38Z hard stop.
+
+Checked-in TAP display copies remove trailing whitespace so the diff is clean. Their raw SHA256
+values are recorded in evidence/raw-log-provenance.json; original byte-for-byte logs remain under
+/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2. This changes evidence presentation only, never tests.
+
+MANIFEST.md and manifest.r1.sha256 freeze the13 changed package files for Dewey. All three handoff
+deviations and Mos1510's two preservation conditions are explicit. Old-test numstats remain80/66 and3/1.
+No full webui/npm ci/build was run; Sage explicitly reserved it for a later window. Full package/script
+and dependency integration gate remains required before landing. No queue move, merge or live action.
+
+
+## Dewey static CHANGES B1, N1 (dewey-0937; ruling sage-3669)
+
+Static verification confirms renderReply currently takes exact notice shape as sufficient provenance.
+The previous handoff explanation above is corrected: a reachable agent commit can be reverted while
+its body claims another path. Sage directs a row225 fix, not a broker marker in288.
+
+Regression tests authored first in the NEW chat-replies-browser.test.mjs:
+- A checked agent notice-shaped body names the genuine notice's commit with an invented delete path.
+  It must render the whole body as plain text and have no notice styling or Revert, while the real
+  unchecked broker notice remains actionable.
+- A403 owner-only receipt with no sent field must say Not reverted (owner-only), exactly one POST.
+
+Planned B1 production change after RED: pure renderReply recognizes a notice only when options.check
+is null/absent; chat already supplies the stored check. This protects the shared renderer rather than
+only one DOM caller. Planned mutant: remove that check condition; browser B1 must assert-fail.
+N1 is small: treat a4xx refusal with a code as definite without requiring a sent field, preserving
+401 sign-out and503/network outcome-unknown behavior. Add its missing-condition mutant too.
+No pre-existing test edit is needed; keep approved80/66 and3/1. No production fixes or Node runs yet.
+
+Test window: after217 in T3, roughly20:25-20:55Z (sage-3663/3669). Wait for explicit CLEAR; then
+worktree-local packages/webui npm ci, editor build, whole webui suite with
+MOSAIC_REQUIRE_EDITOR_BUILD=1, and Chromium cleanup sweep. Stay out of library/bus/cli runs during
+Researcher's216 lane. Ask Sage to include the browser RED/GREEN and two new mutants before that
+whole-suite run. T1 slot was already returned; no further tests under its old CLEAR.
+
+## Round2 recovery and review fixes (2026-10-24, sage-4119/4120)
+
+CLEAR resumed this row after217/285/286 landed; new base963303403. Created fethry/row225-r2 from
+7590cf633; original fethry/row225 and all published history retained. Rebased all nine commits.
+Conflicts resolved in chat.js/serve.mjs by preserving sharing, threadWrites, chatGrants and225's
+render/status/revert callbacks. Both append-only logs retain963303403 byte-for-byte as their prefix.
+The channel-proof conflict retains239's comments/transport changes and re-pins the merged bus.mjs
+hash4ebf6c2b5d71c23d85cbde83f69aa671058dc2195c9ae4bdda624f6940729d1b; delta still3/1.
+render.test.mjs remains80/66 relative the new base. No published commit amended or force-pushed.
+The first local conflict-resolution attempt hit a script assertion; aborted that unfinished rebase
+and restarted before any publication, then checked all conflict markers were gone.
+
+Canonical start op fethry-225-start by fethry completed rev3946 (briefed→in-progress), no timeout.
+Removed our canonical node_modules symlink only; root and packages/webui now each have local
+npm ci --ignore-scripts --no-audit --no-fund installs (mos1575). TMPDIR from mktemp is
+/mnt/storage/scratch/tmp/rbCdM2. MOSAIC_REQUIRE_EDITOR_BUILD=1 throughout gate.
+
+Whole NEW browser file first RED8/3,6755.602ms: B1 forged notice fails its own whole-body assertion
+and the existing one-Revert count (2vs1); N1 sees outcome-unknown instead of definite refusal.
+Placed all three as expected first-run failures (fethry0021); no old test red. Then changed
+renderReply to recognize a notice only when options.check is null/absent, and chat's4xx coded
+refusal path to be definite even without sent.401 still signs out;503/network remains unknown.
+Whole-file GREEN11/0,7244.663ms. Approved existing renderer test is unchanged, including unchecked
+notice text. The pre217 no-check residual remains accepted under sage3669, with positive-marker
+follow-up owned by Sage after10-27. No288 dependency/marker introduced.
+
+Next: whole webui/library/bus and channel-proof, then all14 original mutants and new B1/N1 mutants;
+all serialized under timeout -k10 with per-test30s deadlines. Any old-test red or second red must
+reach Sage before changing it, per sage4119. Full gate results and replacement manifest to follow.
+
+Round2 worktree gate GREEN (sage4119): editor-build0/0.288s, webui442/0/274.272s,
+library149/0/14.981s, bus981/0/125.727s, whole channel-proof2/0/0.503s. No skip/cancel in any suite.
+Each command runs serially with TMPDIR=/mnt/storage/scratch/tmp/rbCdM2,
+MOSAIC_REQUIRE_EDITOR_BUILD=1, --test-concurrency=1 --test-timeout=30000, outer timeout -k10
+(editor120s, webui900s, library300s, bus1200s, channel120s). Exact commands/timings recorded in
+ evidence/r2/gate-summary.json. Root/webui installs and editor source/assets are worktree-local;
+generated editor.js/editor.css/BUILD.json stayed identical to the base. Raw scratch logs retained;
+display copies trim trailing whitespace, with raw SHA256 provenance in evidence/r2/raw-provenance.json.
+No old-test red and no unexpected second red; no additional existing-test edits. All requested source
+suites passed before committing this B1/N1 source candidate. Isolated16-mutant run follows (14 originals
+plus B1 and N1); no final mutation claim yet.
+
+## Round2 final mutation evidence and slot return
+
+Sourcec010dfd85; all16 unique mutants now have clean assertion kills (14 originals plus B1 and N1).
+Initial run produced6 clean kills, then M3-missing-file exited124 at the240s outer deadline. Its
+new-file status-case after-hook failed at30643ms; the intended missing-file assertion1!=0 did fail,
+but the process never exited normally. NOT counted as a kill. Reported to Sage as fethry0022 before
+any change, verified13 candidate hashes/restoration and no scratch-owned leftover processes.
+Retried only that mutant unchanged, plus the remaining9; all10 clean assertion kills. No source,
+test or helper edit, no weakened deadline/kill criterion.17 attempts total;1 timeout retained and
+excluded,16 clean unique kills. Final selected logs have zero cancellations/skips and no hook/timeout
+failures. Both attempt sets and combined result are in evidence/r2/.
+
+Final sweep at2026-10-24T15:02:21Z found no scratch-owned Node/Chromium descendants, no signals needed.
+Both dependency roots are real local directories, not symlinks. All13 package pins reverified.
+manifest.r2.sha256 file digest:517af41b26cd44abe4a103a048cac8ec3a4fd2a9dc0f2f3f74b5699af7289d64.
+MANIFEST.r2.md describes the B1/N1/rebase delta, preserves the accepted pre217 residual, and names
+this timeout/retry honestly. Original packet, old source branch and evidence retained.
+
+Requested worktree gate: webui442/0, library149/0, bus981/0, channel-proof2/0, editor-build exit0;
+new review browser RED8/3→GREEN11/0; isolated16/16 clean unique kills. Existing-test deltas unchanged
+at80/66 and3/1 relative963303403. No old-test failure. No queue move after the owner start, no merge,
+release, deployment or real library write/revert. Ready to return the slot and send Dewey the new
+branch pin/manifest delta; his formal record and Sage's integration/landing remain separate gates.
@@ -0,0 +1,67 @@
+# Row 225 review packet — C2-10b (#1726)
+
+Owner Fethry (14f80e3c), reviewer Dewey (84fb346c). Base 45dca69f6.
+Source candidate 507901277 continues Morgana 66f7becf2 and 9a131e956; no rewritten history.
+Status: targeted tests and full library green; full webui/build and Sage's full gate still pending.
+This packet requests source/manifest review, not landing or a full-green claim.
+
+## Behavior and contracts
+
+The Console shows reply text and citations with path/line/quote, scope and agent-written labels,
+marks a changed file only with valid differing check.file/check.last, links only https URLs, shows
+write/delete notices and explicit Revert results, and displays library status, fetch age, divergence,
+fetch errors, nested replyLimits metadata and R-problems. Invalid library mappings remain visible.
+Revert validates {project,commit}, preserves refusal codes and reports uncertain/wrong-project
+receipts as outcome-unknown without retry. The project is chat project.repo (business.projects key).
+
+A1-A5 are in BUILD.md. Dependency contracts: row217 ordered check.citations and nested replyLimits;
+row288 A2 revert result/notice. No dependency merge in this candidate. Landing order is 217 then225;
+unknown-verb is expected until288 lands. Beakley's GUARD_CODES/FIXED_TEXTS need no renderer import:
+renderReply defines neither and renders those fixed bodies as free text.
+
+## Frozen implementation and tests
+
+manifest.r1.sha256 freezes the 13 changed package paths, including the two approved existing-test
+changes. Check from repository root with `sha256sum -c agents/fethry/work/queue-225/manifest.r1.sha256`.
+All other changed files are BUILD/session records, handoff/approval evidence and this review packet.
+No role, policy, schema, secret, live instance, deployment or queue change is included.
+
+Three departures from the brief, carried from Morgana's handoff:
+
+1. Chat rendering/status live in public/chat.js and chat.css, where the message list is, instead of
+   bus.js and its stylesheet (sage-3596). serve.mjs serves the same pure render.mjs module to owner
+   and granted-user pages; no duplicated browser renderer and no generated asset.
+2. console-bus.mjs and cli.mjs wire libraryRevert beside libraryStatus (sage-3596). --send still
+   independently gates Revert. Preserve row288's separate librarySave wiring at integration.
+3. webui/src/bus.mjs maps library-revert-not-agent to409; bus/tests/channel-proof.test.mjs re-pins
+   only that source's hash and documents why. Mos read and approved this exact +3/-1 (mos-1510).
+
+Existing-test authority: Mos1510 via Sage3623 approves render.test.mjs +80/-66 and channel-proof +3/-1.
+Both exact numstats are unchanged. The malformed-body fixed-line rule is superseded by design5.2's
+whole-body free text, covered by two replacement renderer tests. The old no-options path-badge rule
+is retained and covered by the replacement test plus unchecked-cite browser coverage. BUILD.md
+explains these two preservation conditions and the three new-file assertion corrections in detail.
+
+## Verification and remaining gate
+
+Evidence logs are under evidence/; commands, deadlines, failures and corrections are in BUILD.md.
+Targeted whole-file tests: renderer9/0, routes13/0, browser9/0. Full library81/0, channel-proof2/0.
+No skips/cancellations. Invalid-mapping visibility also has an independent RED then GREEN.
+All 14 isolated mutants were killed by assertions on source candidate507901277; each mutation
+matched one anchor, restored its source hash, and verified unchanged candidate hashes before the next
+mutation. Summary: evidence/mutants-final/summary.json. The first attempt stopped at an expected-state
+wait (not counted as a kill), then the new browser test was improved and the whole kit rerun.
+Raw logs remain under the scratch root; checked-in display copies trim trailing whitespace and record
+raw digests in evidence/raw-log-provenance.json.
+
+Before landing, Sage still runs full webui with MOSAIC_REQUIRE_EDITOR_BUILD=1 after the worktree-local
+webui npm ci, every applicable package/script suite and integration against217. No full webui/build
+in T1 (sage-3647). Dewey approval and Sage's gate/landing remain required; queue moves belong to Sage.
+
+Static audit: the channel-proof source pin matches webui bus.mjs; no hash pin of bus.js, serve.mjs
+or library render.mjs was found. packages' only remaining renderItems match is an explanatory comment
+in the frozen replacement test; no runtime export, import or call remains. No no-cited-answer match.
+
+Review focus: stored check metadata versus untrusted body, missing/malformed file/last, https-only
+links and inert hostile text, Revert authority/receipt uncertainty, async route/sign-out isolation,
+and status diagnostics without owner transport leakage to a granted user.
@@ -0,0 +1,64 @@
+# Row225 round2 — C2-10b (#1726), Dewey B1/N1 delta
+
+Owner Fethry14f80e3c; reviewer Dewey84fb346c. New base963303403.
+Branch fethry/row225-r2; source candidatec010dfd85. Original fethry/row225 is untouched.
+This replaces the pending round1 source packet at94128f73f; old packet/evidence remain historical.
+
+## Delta for Dewey (dewey0937/0939, sage3669/4119)
+
+- B1: renderReply recognizes the exact notice shape only when options.check is null or absent.
+  An ordinary checked agent body shaped as a notice is whole-body free text, with no notice styling
+  or Revert. New browser coverage for a forged delete path naming another agent's genuine commit
+  went RED, then GREEN; genuine unchecked broker notice remains actionable. The existing renderer
+  test “a write notice renders its fixed line” is unchanged. README documents the condition.
+- N1: a coded4xx is shown as Not reverted even if sent is absent.403 owner-only is definite;
+  401 still signs out,503/network remain outcome-unknown and no request is retried. Separate browser
+  case went RED then GREEN. No route, policy, broker marker or row288 dependency was added.
+- Accepted residual (sage3669): pre217 history carries no check, so a notice-shaped old body still
+  renders as a notice. Sage accepts this test-system residual with no real agent history and owns a
+  positive broker-marker follow-up after10-27. This condition is not a positive provenance marker.
+- Rebase: retained landed thread sharing/threadWrites/chatGrants, new library supporting/query/guard/
+  push exports, row239 transport behavior and both append-only log histories. The handoff commit's
+  three source conflicts combine those changes with225; other package commits replay unchanged.
+- channel-proof re-pin now matches merged webui bus.mjs4ebf6c2b5d71c23d85cbde83f69aa671058dc2195c9ae4bdda624f6940729d1b.
+  Relative the new base its delta is still exactly3/1; renderer test remains exactly80/66 (mos1510).
+  No additional existing test changes. Approved preservation conditions are in BUILD.md.
+
+## Frozen package manifest
+
+manifest.r2.sha256 freezes exactly the13 changed package paths relative963303403; verify from repo
+root with `sha256sum -c agents/fethry/work/queue-225/manifest.r2.sha256`. The manifest's SHA256 is sent
+with the final pushed pin. Source remains the tested c010dfd85; later commits are evidence/records only.
+
+The three accepted brief departures remain: chat.js/chat.css instead of bus.js/styles, libraryRevert
+wiring in console-bus.mjs/cli.mjs, and the bus.mjs409 map plus channel-proof pin. Serving the pure
+/render.mjs module to both page types remains the same. No dependency protocol constants are
+redefined: renderReply has no guard codes/fixed texts to import from217's reply-protocol.mjs.
+No generated editor file, role, policy, schema, queue-data file or live-state file is in the delta.
+
+## Verification
+
+Root and packages/webui each used worktree-local npm ci --ignore-scripts --no-audit --no-fund.
+No canonical dependency link. MOSAIC_REQUIRE_EDITOR_BUILD=1; TMPDIR=/mnt/storage/scratch/tmp/rbCdM2.
+Every command is serial under timeout -k10, Node suites use --test-timeout=30000.
+
+- New browser whole-file RED8/3 (B1 own assertion, one-Revert count and N1), then GREEN11/0.
+- Editor build: exit0; generated editor.js/editor.css/BUILD.json match the base.
+- Whole webui442/0, library149/0, bus981/0, channel-proof2/0; zero skipped/cancelled.
+- All16 unique isolated mutants have clean assertion kills on c010dfd85:14 original plus B1/N1.
+  Six initial clean kills, then M3-missing-file timed out (exit124, not counted) with an unrelated
+  status-case after-hook failure. The intended M3 assertion also failed, but the process stayed alive.
+  Reported to Sage as fethry0022 before any change; retried that exact mutant unchanged and ran the
+  remaining nine. All ten completed with clean kills. No source, test or helper edit for the retry.
+  Both attempt sets are retained;17 attempts total,16 unique clean kills,1 timeout attempt excluded.
+  Combined receipt: evidence/r2/mutants-combined.json. All candidate hashes unchanged/restored.
+- Final scratch-owned Node/Chromium sweep found zero processes; no signals needed. Dependency roots
+  are real local directories. Receipt: evidence/r2/cleanup.json.
+
+Exact commands/timings and raw log digests: evidence/r2/gate-summary.json and raw-provenance.json.
+Raw logs remain in the unique scratch root; checked-in display copies trim trailing whitespace only.
+No old-test failure occurred. The only unexpected later result was the recorded mutation cleanup
+timeout above; it was reported before an unchanged retry. No test/helper was patched around it.
+
+Dewey's B1 review and formal record remain pending; Sage owns integration/landing and any broader
+scripts gate. No force push, merge, deployment, real library write/revert or release action occurred.
@@ -0,0 +1,64 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 704.129155
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 690.249337
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 595.036289
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 627.082447
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 787.799722
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 587.311743
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 618.209773
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 633.838649
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 619.313248
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 9
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6014.970062
@@ -0,0 +1,64 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 636.096036
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 741.239029
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 568.879998
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 641.929005
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 870.041985
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 648.87451
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 566.725897
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 611.150846
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 618.488891
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 9
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6014.364529
@@ -0,0 +1,16 @@
+✔ chat replies: free text, cites with badges, the agent label, changed since and safe links (583.234335ms)
+✔ chat replies: a write notice reads as its line with a Revert; a refused revert shows its code (634.71741ms)
+✔ chat replies: a read-only Console shows the notice with Revert disabled (574.836149ms)
+✔ chat status line: served commit and age, divergence, fetch error and the problems one click away (607.74749ms)
+✔ chat status line: limits when the status carries them, no problems, and refusals (861.034669ms)
+✔ chat status line: a project with no repository link reads no library status (611.433469ms)
+✔ chat status line: unreadable reply limits show their problem and both fallback keys (606.380675ms)
+✔ chat replies: unchanged file at a different library commit and incomplete checks stay unmarked (650.947719ms)
+ℹ tests 8
+ℹ suites 0
+ℹ pass 8
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 5251.735356
@@ -0,0 +1,78 @@
+✖ chat replies: free text, cites with badges, the agent label, changed since and safe links (980.914799ms)
+✔ chat replies: a write notice reads as its line with a Revert; a refused revert shows its code (753.988771ms)
+✔ chat replies: a read-only Console shows the notice with Revert disabled (672.814814ms)
+✔ chat status line: served commit and age, divergence, fetch error and the problems one click away (622.859977ms)
+✖ chat status line: limits when the status carries them, no problems, and refusals (583.956229ms)
+✔ chat status line: a project with no repository link reads no library status (635.758222ms)
+✖ chat status line: unreadable reply limits show their problem and both fallback keys (581.636121ms)
+✔ chat replies: unchanged file at a different library commit and incomplete checks stay unmarked (653.788881ms)
+ℹ tests 8
+ℹ suites 0
+ℹ pass 5
+ℹ fail 3
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 5597.371605
+
+✖ failing tests:
+
+test at packages/webui/tests/chat-replies-browser.test.mjs:81:1
+✖ chat replies: free text, cites with badges, the agent label, changed since and safe links (980.914799ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  + actual - expected
+
+  + undefined
+  - false
+
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:102:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: undefined,
+    expected: false,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at packages/webui/tests/chat-replies-browser.test.mjs:152:1
+✖ chat status line: limits when the status carries them, no problems, and refusals (583.956229ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  + actual - expected
+
+  + 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · no problems'
+  - 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · limits fell back: citationsPerReply · no problems'
+
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:156:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · no problems',
+    expected: 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · limits fell back: citationsPerReply · no problems',
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at packages/webui/tests/chat-replies-browser.test.mjs:173:1
+✖ chat status line: unreadable reply limits show their problem and both fallback keys (581.636121ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  + actual - expected
+
+  + 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · no problems'
+  - 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
+
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:179:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · no problems',
+    expected: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems',
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
@@ -0,0 +1,22 @@
+TAP version 13
+# Subtest: channel conversion preserves the four proof/transport byte baselines and modules cannot import a proof caller
+ok 1 - channel conversion preserves the four proof/transport byte baselines and modules cannot import a proof caller
+  ---
+  duration_ms: 4.280459
+  type: 'test'
+  ...
+# Subtest: channel recovery still requires the same shim path and rejects an absent or forged proof
+ok 2 - channel recovery still requires the same shim path and rejects an absent or forged proof
+  ---
+  duration_ms: 413.032186
+  type: 'test'
+  ...
+1..2
+# tests 2
+# suites 0
+# pass 2
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 539.602759
@@ -0,0 +1,496 @@
+TAP version 13
+# Subtest: resolver step 1: a path from the repo root, with or without .md
+ok 1 - resolver step 1: a path from the repo root, with or without .md
+  ---
+  duration_ms: 1.051208
+  type: 'test'
+  ...
+# Subtest: resolver step 2: the same path with vaultPrefix/ stripped
+ok 2 - resolver step 2: the same path with vaultPrefix/ stripped
+  ---
+  duration_ms: 0.164795
+  type: 'test'
+  ...
+# Subtest: resolver step 3: a path relative to the linking file, never above the repo root
+ok 3 - resolver step 3: a path relative to the linking file, never above the repo root
+  ---
+  duration_ms: 0.192765
+  type: 'test'
+  ...
+# Subtest: resolver step 4: a base name that matches exactly one indexed file
+ok 4 - resolver step 4: a base name that matches exactly one indexed file
+  ---
+  duration_ms: 0.201611
+  type: 'test'
+  ...
+# Subtest: a link into another of her repos resolves to nothing
+ok 5 - a link into another of her repos resolves to nothing
+  ---
+  duration_ms: 0.130282
+  type: 'test'
+  ...
+# Subtest: wikilink forms, embeds, and links skipped inside code
+ok 6 - wikilink forms, embeds, and links skipped inside code
+  ---
+  duration_ms: 1.445011
+  type: 'test'
+  ...
+# Subtest: only a body embed whose target has an extension other than .md, in any case, is an attachment
+ok 7 - only a body embed whose target has an extension other than .md, in any case, is an attachment
+  ---
+  duration_ms: 0.25003
+  type: 'test'
+  ...
+# Subtest: the fixture mapping checks and comes back frozen
+ok 8 - the fixture mapping checks and comes back frozen
+  ---
+  duration_ms: 1.772928
+  type: 'test'
+  ...
+# Subtest: C2-01c: a prefix inside or holding another entry's book refuses library-playground-other-universe
+ok 9 - C2-01c: a prefix inside or holding another entry's book refuses library-playground-other-universe
+  ---
+  duration_ms: 0.735312
+  type: 'test'
+  ...
+# Subtest: C2-01c: a prefix equal to a book folder, or holding its own, refuses library-mapping-invalid
+ok 10 - C2-01c: a prefix equal to a book folder, or holding its own, refuses library-mapping-invalid
+  ---
+  duration_ms: 0.532498
+  type: 'test'
+  ...
+# Subtest: C2-01c: universe-level prefixes lie outside every book, in a plain universe and in a hybrid with no books
+ok 11 - C2-01c: universe-level prefixes lie outside every book, in a plain universe and in a hybrid with no books
+  ---
+  duration_ms: 0.668173
+  type: 'test'
+  ...
+# Subtest: C2-01c: a draft takes kind, name and playground only, and comes back frozen with books []
+ok 12 - C2-01c: a draft takes kind, name and playground only, and comes back frozen with books []
+  ---
+  duration_ms: 1.032507
+  type: 'test'
+  ...
+# Subtest: no playground prefix holds another, and no book folder holds another
+ok 13 - no playground prefix holds another, and no book folder holds another
+  ---
+  duration_ms: 0.507943
+  type: 'test'
+  ...
+# Subtest: shape refusals: kind, remote, branch, unknown keys, types, manuscript, folder names
+ok 14 - shape refusals: kind, remote, branch, unknown keys, types, manuscript, folder names
+  ---
+  duration_ms: 0.740368
+  type: 'test'
+  ...
+# Subtest: C2-03a sage-2021: user is optional, kept when given, and must be a plain account name
+ok 15 - C2-03a sage-2021: user is optional, kept when given, and must be a plain account name
+  ---
+  duration_ms: 0.659277
+  type: 'test'
+  ...
+# Subtest: a hybrid universe is a shape the query code can take (1.4), with sources that must exist
+ok 16 - a hybrid universe is a shape the query code can take (1.4), with sources that must exist
+  ---
+  duration_ms: 0.695117
+  type: 'test'
+  ...
+# Subtest: a caller-supplied fail receives the code, as business file loading will pass it (C2-04)
+ok 17 - a caller-supplied fail receives the code, as business file loading will pass it (C2-04)
+  ---
+  duration_ms: 0.392362
+  type: 'test'
+  ...
+# Subtest: scope comes from the path alone (design 1.2)
+ok 18 - scope comes from the path alone (design 1.2)
+  ---
+  duration_ms: 0.466406
+  type: 'test'
+  ...
+# Subtest: C2-04 mirror: exact default path, bare without checkout or remote, and idempotent initialization
+ok 19 - C2-04 mirror: exact default path, bare without checkout or remote, and idempotent initialization
+  ---
+  duration_ms: 46.645994
+  type: 'test'
+  ...
+# Subtest: C2-04 mirror: simultaneous creators publish one intact mirror and leave no staging paths
+ok 20 - C2-04 mirror: simultaneous creators publish one intact mirror and leave no staging paths
+  ---
+  duration_ms: 32.763959
+  type: 'test'
+  ...
+# Subtest: C2-04 mirror: skipped publication accepts both coreutils statuses without removing the winner
+ok 21 - C2-04 mirror: skipped publication accepts both coreutils statuses without removing the winner
+  ---
+  duration_ms: 109.751094
+  type: 'test'
+  ...
+# Subtest: C2-04 mirror: preserve occupied directories and reject symlink ancestors and code overlaps
+ok 22 - C2-04 mirror: preserve occupied directories and reject symlink ancestors and code overlaps
+  ---
+  duration_ms: 20.129293
+  type: 'test'
+  ...
+# Subtest: C2-04 mirror: existing metadata accepts only bare Git plus state and the precreated lock
+ok 23 - C2-04 mirror: existing metadata accepts only bare Git plus state and the precreated lock
+  ---
+  duration_ms: 24.021555
+  type: 'test'
+  ...
+# Subtest: C2-04 state: missing state is empty only while the served ref is absent
+ok 24 - C2-04 state: missing state is empty only while the served ref is absent
+  ---
+  duration_ms: 37.436349
+  type: 'test'
+  ...
+# Subtest: C2-04 state: valid problems and sync metadata return no content and change no state bytes
+ok 25 - C2-04 state: valid problems and sync metadata return no content and change no state bytes
+  ---
+  duration_ms: 37.681315
+  type: 'test'
+  ...
+# Subtest: C2-04 state: strict keys, types, times, branch, commit and fixed R messages fail closed
+ok 26 - C2-04 state: strict keys, types, times, branch, commit and fixed R messages fail closed
+  ---
+  duration_ms: 105.483341
+  type: 'test'
+  ...
+# Subtest: C2-04 state: symlink, hardlink, non-private state and missing lock refuse without replacement
+ok 27 - C2-04 state: symlink, hardlink, non-private state and missing lock refuse without replacement
+  ---
+  duration_ms: 29.562786
+  type: 'test'
+  ...
+# Subtest: C2-04 file: served commit, not HEAD or a caller commit, owns the exact returned text
+ok 28 - C2-04 file: served commit, not HEAD or a caller commit, owns the exact returned text
+  ---
+  duration_ms: 74.057232
+  type: 'test'
+  ...
+# Subtest: C2-04 file: R1, R2 and R7 exclusions and never-synced mirrors cannot return file bodies
+ok 29 - C2-04 file: R1, R2 and R7 exclusions and never-synced mirrors cannot return file bodies
+  ---
+  duration_ms: 80.573844
+  type: 'test'
+  ...
+# Subtest: C2-04 lock: a first-sync and fast-forward reader wait for a consistent pair across processes
+ok 30 - C2-04 lock: a first-sync and fast-forward reader wait for a consistent pair across processes
+  ---
+  duration_ms: 253.247948
+  type: 'test'
+  ...
+# Subtest: C2-04 lock: same-process waits, timeout code, callback expiry and throw release
+ok 31 - C2-04 lock: same-process waits, timeout code, callback expiry and throw release
+  ---
+  duration_ms: 5031.462795
+  type: 'test'
+  ...
+# Subtest: C2-04 lock: owner death releases the kernel lock without replacing its file
+ok 32 - C2-04 lock: owner death releases the kernel lock without replacing its file
+  ---
+  duration_ms: 61.533295
+  type: 'test'
+  ...
+# Subtest: C2-04 lock: a missing flock binary becomes a handled refusal
+ok 33 - C2-04 lock: a missing flock binary becomes a handled refusal
+  ---
+  duration_ms: 57.176644
+  type: 'test'
+  ...
+# Subtest: C2-04 lock: an unawaited scoped read drains before the lock is released
+ok 34 - C2-04 lock: an unawaited scoped read drains before the lock is released
+  ---
+  duration_ms: 22.766874
+  type: 'test'
+  ...
+# Subtest: the fixture reads clean: every resolver step, appears_in and relationships wikilinks indexed
+ok 35 - the fixture reads clean: every resolver step, appears_in and relationships wikilinks indexed
+  ---
+  duration_ms: 33.888061
+  type: 'test'
+  ...
+# Subtest: R1: executables, symlinks, gitlinks, blobs over 1 MiB and non-UTF-8 text are not indexed
+ok 36 - R1: executables, symlinks, gitlinks, blobs over 1 MiB and non-UTF-8 text are not indexed
+  ---
+  duration_ms: 68.951498
+  type: 'test'
+  ...
+# Subtest: R2: unmapped paths are reported and not indexed
+ok 37 - R2: unmapped paths are reported and not indexed
+  ---
+  duration_ms: 25.70771
+  type: 'test'
+  ...
+# Subtest: R3: front matter not fully parsed stays raw, with the line where parsing stopped
+ok 38 - R3: front matter not fully parsed stays raw, with the line where parsing stopped
+  ---
+  duration_ms: 26.059427
+  type: 'test'
+  ...
+# Subtest: front matter forms the reader accepts and refuses
+ok 39 - front matter forms the reader accepts and refuses
+  ---
+  duration_ms: 0.448293
+  type: 'test'
+  ...
+# Subtest: R4: a link to no file, to more than one, or into another repo is reported and not followed
+ok 40 - R4: a link to no file, to more than one, or into another repo is reported and not followed
+  ---
+  duration_ms: 26.225692
+  type: 'test'
+  ...
+# Subtest: a block list link carries its item line, a scalar or flow link its key line, and problems follow
+ok 41 - a block list link carries its item line, a scalar or flow link its key line, and problems follow
+  ---
+  duration_ms: 22.565103
+  type: 'test'
+  ...
+# Subtest: an unresolved attachment embed gives no problem; a link or front matter value to one is R4; a note embed resolves
+ok 42 - an unresolved attachment embed gives no problem; a link or front matter value to one is R4; a note embed resolves
+  ---
+  duration_ms: 20.903777
+  type: 'test'
+  ...
+# Subtest: an indexed Dr.Quinn.md resolves as a body link, a block list link and an embed
+ok 43 - an indexed Dr.Quinn.md resolves as a body link, a block list link and an embed
+  ---
+  duration_ms: 25.42747
+  type: 'test'
+  ...
+# Subtest: R5: a canon file that refers into the playground is reported, and the link still goes by path
+ok 44 - R5: a canon file that refers into the playground is reported, and the link still goes by path
+  ---
+  duration_ms: 27.37119
+  type: 'test'
+  ...
+# Subtest: R6: a canon file that refers into another universe is reported; a hybrid may refer into its sources
+ok 45 - R6: a canon file that refers into another universe is reported; a hybrid may refer into its sources
+  ---
+  duration_ms: 30.585458
+  type: 'test'
+  ...
+# Subtest: R7: two paths that differ only in case are both left out
+ok 46 - R7: two paths that differ only in case are both left out
+  ---
+  duration_ms: 40.709509
+  type: 'test'
+  ...
+# Subtest: the reader reads the commit, never the working tree, and refuses a bad commit id
+ok 47 - the reader reads the commit, never the working tree, and refuses a bad commit id
+  ---
+  duration_ms: 33.579454
+  type: 'test'
+  ...
+# Subtest: a bare mirror reads the same as the clone
+ok 48 - a bare mirror reads the same as the clone
+  ---
+  duration_ms: 38.368686
+  type: 'test'
+  ...
+# Subtest: free text renders as itself with no citations
+ok 49 - free text renders as itself with no citations
+  ---
+  duration_ms: 1.571777
+  type: 'test'
+  ...
+# Subtest: a cited reply renders its text, then each cite with the badge from the check result
+ok 50 - a cited reply renders its text, then each cite with the badge from the check result
+  ---
+  duration_ms: 0.537429
+  type: 'test'
+  ...
+# Subtest: a parsed body renders as its string does
+ok 51 - a parsed body renders as its string does
+  ---
+  duration_ms: 0.304068
+  type: 'test'
+  ...
+# Subtest: without a check result a path cite has no badge, no label and is never changed
+ok 52 - without a check result a path cite has no badge, no label and is never changed
+  ---
+  duration_ms: 0.184363
+  type: 'test'
+  ...
+# Subtest: the label and the badge come from the check result only, never from a bad entry
+ok 53 - the label and the badge come from the check result only, never from a bad entry
+  ---
+  duration_ms: 0.180581
+  type: 'test'
+  ...
+# Subtest: a web cite is a link only for https
+ok 54 - a web cite is a link only for https
+  ---
+  duration_ms: 0.293669
+  type: 'test'
+  ...
+# Subtest: a write notice renders its fixed line
+ok 55 - a write notice renders its fixed line
+  ---
+  duration_ms: 0.277197
+  type: 'test'
+  ...
+# Subtest: a body without the reply or notice shape is free text: the whole body, no citations
+ok 56 - a body without the reply or notice shape is free text: the whole body, no citations
+  ---
+  duration_ms: 0.345807
+  type: 'test'
+  ...
+# Subtest: an empty citations list is a reply with no cites
+ok 57 - an empty citations list is a reply with no cites
+  ---
+  duration_ms: 0.187354
+  type: 'test'
+  ...
+# Subtest: C2-01c: each level gives its universe, and its book or null
+ok 58 - C2-01c: each level gives its universe, and its book or null
+  ---
+  duration_ms: 3.363132
+  type: 'test'
+  ...
+# Subtest: C2-01c: prefixes come first: in a book that holds a prefix, a file outside it is canon and one under it playground
+ok 59 - C2-01c: prefixes come first: in a book that holds a prefix, a file outside it is canon and one under it playground
+  ---
+  duration_ms: 0.480483
+  type: 'test'
+  ...
+# Subtest: C2-01c: a canon file linking into a draft gives R6, and into its own universe-level prefix gives R5
+ok 60 - C2-01c: a canon file linking into a draft gives R6, and into its own universe-level prefix gives R5
+  ---
+  duration_ms: 44.606565
+  type: 'test'
+  ...
+# Subtest: the survey prints folder names, counts, key sets and link-form counts, and never text
+ok 61 - the survey prints folder names, counts, key sets and link-form counts, and never text
+  ---
+  duration_ms: 37.28555
+  type: 'test'
+  ...
+# Subtest: folder names print DEL, C1 and bidi controls, U+061C among them, as escapes
+ok 62 - folder names print DEL, C1 and bidi controls, U+061C among them, as escapes
+  ---
+  duration_ms: 26.222951
+  type: 'test'
+  ...
+# Subtest: an embed of an attachment counts as an embed and as an attachment; a plain link to one does not
+ok 63 - an embed of an attachment counts as an embed and as an attachment; a plain link to one does not
+  ---
+  duration_ms: 26.23793
+  type: 'test'
+  ...
+# Subtest: with --mapping the survey adds scope, resolver step and problem counts
+ok 64 - with --mapping the survey adds scope, resolver step and problem counts
+  ---
+  duration_ms: 41.437066
+  type: 'test'
+  ...
+# Subtest: survey exit codes: usage 4, bad mapping 3, unreadable repo 2
+ok 65 - survey exit codes: usage 4, bad mapping 3, unreadable repo 2
+  ---
+  duration_ms: 17.463059
+  type: 'test'
+  ...
+# Subtest: scripts/mosaic library survey reaches the survey
+ok 66 - scripts/mosaic library survey reaches the survey
+  ---
+  duration_ms: 77.634947
+  type: 'test'
+  ...
+# Subtest: C2-03a argv: the fixed sequence, one https allow, no other protocol key
+ok 67 - C2-03a argv: the fixed sequence, one https allow, no other protocol key
+  ---
+  duration_ms: 1.605597
+  type: 'test'
+  ...
+# Subtest: C2-03a argv: only an https URL with a plain host, no userinfo, and a plain user
+ok 68 - C2-03a argv: only an https URL with a plain host, no userinfo, and a plain user
+  ---
+  duration_ms: 0.713147
+  type: 'test'
+  ...
+# Subtest: C2-03a helper: answers only the exact prompts for the configured host and user (dewey-0765)
+ok 69 - C2-03a helper: answers only the exact prompts for the configured host and user (dewey-0765)
+  ---
+  duration_ms: 31.590474
+  type: 'test'
+  ...
+# Subtest: C2-03a first sync: served is the fetched tip, HEAD is served, the survey reads it, and the token stays in the slot
+ok 70 - C2-03a first sync: served is the fetched tip, HEAD is served, the survey reads it, and the token stays in the slot
+  ---
+  duration_ms: 135.075159
+  type: 'test'
+  ...
+# Subtest: C2-03a fast-forward: served moves, problems are rebuilt, and a repeat changes only lastFetch
+ok 71 - C2-03a fast-forward: served moves, problems are rebuilt, and a repeat changes only lastFetch
+  ---
+  duration_ms: 225.707972
+  type: 'test'
+  ...
+# Subtest: C2-03a Filbert N2: a read that took served before a sync still finds its objects after served moves
+ok 72 - C2-03a Filbert N2: a read that took served before a sync still finds its objects after served moves
+  ---
+  duration_ms: 205.10431
+  type: 'test'
+  ...
+# Subtest: C2-03a overlap: a reader during a sync sees the old pair or the new one, never a mix
+ok 73 - C2-03a overlap: a reader during a sync sees the old pair or the new one, never a mix
+  ---
+  duration_ms: 175.907929
+  type: 'test'
+  ...
+# Subtest: C2-03a diverged: a non-fast-forward keeps serving and holds until a human accepts the tip
+ok 74 - C2-03a diverged: a non-fast-forward keeps serving and holds until a human accepts the tip
+  ---
+  duration_ms: 431.553812
+  type: 'test'
+  ...
+# Subtest: C2-03a accept starts the record over, so a changed branch gets a fresh state
+ok 75 - C2-03a accept starts the record over, so a changed branch gets a fresh state
+  ---
+  duration_ms: 195.011432
+  type: 'test'
+  ...
+# Subtest: C2-03a fetch failure: a wrong token keeps serving and records the error, lastFetch unchanged
+ok 76 - C2-03a fetch failure: a wrong token keeps serving and records the error, lastFetch unchanged
+  ---
+  duration_ms: 192.898644
+  type: 'test'
+  ...
+# Subtest: C2-03a a failed first fetch records the error with nothing served
+ok 77 - C2-03a a failed first fetch records the error with nothing served
+  ---
+  duration_ms: 61.594695
+  type: 'test'
+  ...
+# Subtest: C2-03a a 302 to another host fails the fetch and the other host sees nothing
+ok 78 - C2-03a a 302 to another host fails the fetch and the other host sees nothing
+  ---
+  duration_ms: 64.82991
+  type: 'test'
+  ...
+# Subtest: C2-03a the slot: missing or unsafe refuses before git, and sync never opens it
+ok 79 - C2-03a the slot: missing or unsafe refuses before git, and sync never opens it
+  ---
+  duration_ms: 59.167725
+  type: 'test'
+  ...
+# Subtest: C2-03a sage-2021: an entry with no user refuses library-remote-invalid and runs no git
+ok 80 - C2-03a sage-2021: an entry with no user refuses library-remote-invalid and runs no git
+  ---
+  duration_ms: 35.37205
+  type: 'test'
+  ...
+# Subtest: C2-03a one sync per mirror: an overlapping call refuses library-sync-busy
+ok 81 - C2-03a one sync per mirror: an overlapping call refuses library-sync-busy
+  ---
+  duration_ms: 118.260687
+  type: 'test'
+  ...
+1..81
+# tests 81
+# suites 0
+# pass 81
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 9149.325891
@@ -0,0 +1,48 @@
+✔ chat replies: free text, cites with badges, the agent label, changed since and safe links (633.807074ms)
+✔ chat replies: a write notice reads as its line with a Revert; a refused revert shows its code (621.95095ms)
+✔ chat replies: a read-only Console shows the notice with Revert disabled (577.638161ms)
+✔ chat status line: served commit and age, divergence, fetch error and the problems one click away (555.847899ms)
+✖ chat status line: limits when the status carries them, no problems, and refusals (3725.696272ms)
+✔ chat status line: a project with no repository link reads no library status (657.572856ms)
+✔ chat status line: unreadable reply limits show their problem and both fallback keys (663.163445ms)
+✔ chat replies: unchanged file at a different library commit and incomplete checks stay unmarked (616.184063ms)
+✖ chat status line: an invalid library mapping remains visible for diagnosis (597.976623ms)
+ℹ tests 9
+ℹ suites 0
+ℹ pass 7
+ℹ fail 2
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 8782.679569
+
+✖ failing tests:
+
+test at packages/webui/tests/chat-replies-browser.test.mjs:152:1
+✖ chat status line: limits when the status carries them, no problems, and refusals (3725.696272ms)
+  Error: Uncaught (in promise) Error: window.__statusReads.length && document.querySelector(".chat-conversation") && document.querySelector(".chat-library")?.textContent==="Library status unavailable (library-mapping-invalid).": undefined
+      at Object.evaluate (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/browser.mjs:49:35)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:162:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+
+test at packages/webui/tests/chat-replies-browser.test.mjs:200:1
+✖ chat status line: an invalid library mapping remains visible for diagnosis (597.976623ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  + actual - expected
+
+  + null
+  - 'Library status unavailable (library-mapping-invalid).'
+
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:203:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: null,
+    expected: 'Library status unavailable (library-mapping-invalid).',
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
@@ -0,0 +1,4 @@
+{"mutant": "M1-badges", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M1-badges.tap"}
+{"mutant": "M1-agent-label", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M1-agent-label.tap"}
+{"mutant": "M2-http-links", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M2-http-links.tap"}
+{"mutant": "M3-wrong-commit", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": false, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M3-wrong-commit.tap"}
@@ -0,0 +1,192 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 627.180675
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M1-agent-label/packages/webui/tests/chat-replies-browser.test.mjs:81:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+    ... Skipped lines
+
+      [
+        {
+          agent: null,
+          badge: 'canon',
+          changed: false,
+    ...
+        {
+    +     agent: null,
+    -     agent: 'agent-written: acme/scribe',
+          badge: 'supporting',
+          changed: false,
+          href: null,
+          quote: 'green eyes',
+          ref: 'Notes/Eyes.md:9-10 @aaaaaaa',
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  actual:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: ~
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M1-agent-label/packages/webui/tests/chat-replies-browser.test.mjs:90:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 778.572201
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 641.728604
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 629.327348
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 837.886073
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 613.037186
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 651.026507
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 735.546636
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 712.174542
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6353.090574
@@ -0,0 +1,206 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 638.589537
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M1-badges/packages/webui/tests/chat-replies-browser.test.mjs:81:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+    ... Skipped lines
+
+      [
+        {
+          agent: null,
+    +     badge: null,
+    -     badge: 'canon',
+          changed: false,
+          href: null,
+          quote: 'her grey eyes',
+          ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa',
+          rel: null
+    ...
+          agent: null,
+    +     badge: null,
+    -     badge: 'playground',
+          changed: true,
+          href: null,
+          quote: 'a storm',
+          ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa',
+          rel: null
+    ...
+          agent: 'agent-written: acme/scribe',
+    +     badge: null,
+    -     badge: 'supporting',
+          changed: false,
+          href: null,
+          quote: 'green eyes',
+          ref: 'Notes/Eyes.md:9-10 @aaaaaaa',
+          rel: null
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  actual:
+    0:
+      badge: ~
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: ~
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: ~
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M1-badges/packages/webui/tests/chat-replies-browser.test.mjs:90:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 770.070531
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 519.328288
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 647.667301
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 999.237447
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 676.088845
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 634.472637
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 655.963182
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 578.819646
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6239.022812
@@ -0,0 +1,204 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 655.901619
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M2-http-links/packages/webui/tests/chat-replies-browser.test.mjs:81:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+    ... Skipped lines
+
+      [
+        {
+          agent: null,
+          badge: 'canon',
+          changed: false,
+    ...
+          changed: false,
+    +     href: 'http://example.invalid/plain',
+    -     href: null,
+          quote: 'plain http',
+          ref: 'http://example.invalid/plain',
+    +     rel: 'noopener noreferrer'
+    -     rel: null
+        },
+        {
+          agent: null,
+          badge: 'web',
+          changed: false,
+    +     href: 'javascript:window.injected=2',
+    -     href: null,
+          quote: 'script',
+          ref: 'javascript:window.injected=2',
+    +     rel: 'noopener noreferrer'
+    -     rel: null
+        }
+      ]
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  actual:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: 'http://example.invalid/plain'
+      rel: 'noopener noreferrer'
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: 'javascript:window.injected=2'
+      rel: 'noopener noreferrer'
+      quote: 'script'
+      agent: ~
+      changed: false
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M2-http-links/packages/webui/tests/chat-replies-browser.test.mjs:90:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 741.122544
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 616.728572
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 625.818493
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 867.033773
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 655.587703
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 615.997516
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 648.263681
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 624.323397
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6168.633364
@@ -0,0 +1,74 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 640.32042
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 694.233373
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 611.500508
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 606.581119
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 896.462474
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 666.798177
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 629.105559
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+not ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 3654.057789
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M3-wrong-commit/packages/webui/tests/chat-replies-browser.test.mjs:184:1'
+  failureType: 'testCodeFailure'
+  error: 'Uncaught (in promise) Error: document.querySelectorAll(".chat-changed").length===0: undefined'
+  code: 'ERR_TEST_FAILURE'
+  stack: |-
+    Object.evaluate (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M3-wrong-commit/packages/webui/tests/browser.mjs:49:35)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M3-wrong-commit/packages/webui/tests/chat-replies-browser.test.mjs:195:3)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 656.44095
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 9179.328916
@@ -0,0 +1,47 @@
+{
+  "head": "77172ce3b46eb289409068518b7022fc7be47ebe",
+  "clear": "sage-3647",
+  "worktreeUnchanged": true,
+  "results": [
+    {
+      "mutant": "M1-badges",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M1-badges.tap"
+    },
+    {
+      "mutant": "M1-agent-label",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M1-agent-label.tap"
+    },
+    {
+      "mutant": "M2-http-links",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M2-http-links.tap"
+    },
+    {
+      "mutant": "M3-wrong-commit",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": false,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M3-wrong-commit.tap"
+    }
+  ]
+}
@@ -0,0 +1,14 @@
+{"mutant": "M1-badges", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M1-badges.tap"}
+{"mutant": "M1-agent-label", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M1-agent-label.tap"}
+{"mutant": "M2-http-links", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M2-http-links.tap"}
+{"mutant": "M3-wrong-commit", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M3-wrong-commit.tap"}
+{"mutant": "M3-missing-file", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M3-missing-file.tap"}
+{"mutant": "M4-fallback", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M4-fallback.tap"}
+{"mutant": "M4-problem", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M4-problem.tap"}
+{"mutant": "M5-send", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-send.tap"}
+{"mutant": "M5-project-receipt", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-project-receipt.tap"}
+{"mutant": "M5-commit-input", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-commit-input.tap"}
+{"mutant": "M5-origin", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-origin.tap"}
+{"mutant": "M5-fetch-metadata", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-fetch-metadata.tap"}
+{"mutant": "M6-duplicate-call", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M6-duplicate-call.tap"}
+{"mutant": "M7-user-fence", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M7-user-fence.tap"}
@@ -0,0 +1,192 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 646.851404
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M1-agent-label/packages/webui/tests/chat-replies-browser.test.mjs:81:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+    ... Skipped lines
+
+      [
+        {
+          agent: null,
+          badge: 'canon',
+          changed: false,
+    ...
+        {
+    +     agent: null,
+    -     agent: 'agent-written: acme/scribe',
+          badge: 'supporting',
+          changed: false,
+          href: null,
+          quote: 'green eyes',
+          ref: 'Notes/Eyes.md:9-10 @aaaaaaa',
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  actual:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: ~
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M1-agent-label/packages/webui/tests/chat-replies-browser.test.mjs:90:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 667.90945
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 588.346681
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 485.882289
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 709.847041
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 544.885551
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 514.410016
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 542.746154
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 582.608663
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 5409.980177
@@ -0,0 +1,206 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 621.562133
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M1-badges/packages/webui/tests/chat-replies-browser.test.mjs:81:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+    ... Skipped lines
+
+      [
+        {
+          agent: null,
+    +     badge: null,
+    -     badge: 'canon',
+          changed: false,
+          href: null,
+          quote: 'her grey eyes',
+          ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa',
+          rel: null
+    ...
+          agent: null,
+    +     badge: null,
+    -     badge: 'playground',
+          changed: true,
+          href: null,
+          quote: 'a storm',
+          ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa',
+          rel: null
+    ...
+          agent: 'agent-written: acme/scribe',
+    +     badge: null,
+    -     badge: 'supporting',
+          changed: false,
+          href: null,
+          quote: 'green eyes',
+          ref: 'Notes/Eyes.md:9-10 @aaaaaaa',
+          rel: null
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  actual:
+    0:
+      badge: ~
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: ~
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: ~
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M1-badges/packages/webui/tests/chat-replies-browser.test.mjs:90:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 731.101767
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 633.163696
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 637.761161
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 847.929653
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 635.512979
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 645.427688
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 672.272209
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 629.043251
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6169.954716
@@ -0,0 +1,204 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 582.248796
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M2-http-links/packages/webui/tests/chat-replies-browser.test.mjs:81:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+    ... Skipped lines
+
+      [
+        {
+          agent: null,
+          badge: 'canon',
+          changed: false,
+    ...
+          changed: false,
+    +     href: 'http://example.invalid/plain',
+    -     href: null,
+          quote: 'plain http',
+          ref: 'http://example.invalid/plain',
+    +     rel: 'noopener noreferrer'
+    -     rel: null
+        },
+        {
+          agent: null,
+          badge: 'web',
+          changed: false,
+    +     href: 'javascript:window.injected=2',
+    -     href: null,
+          quote: 'script',
+          ref: 'javascript:window.injected=2',
+    +     rel: 'noopener noreferrer'
+    -     rel: null
+        }
+      ]
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  actual:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: 'http://example.invalid/plain'
+      rel: 'noopener noreferrer'
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: 'javascript:window.injected=2'
+      rel: 'noopener noreferrer'
+      quote: 'script'
+      agent: ~
+      changed: false
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M2-http-links/packages/webui/tests/chat-replies-browser.test.mjs:90:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 640.769563
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 572.506418
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 519.031091
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 743.513043
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 676.282756
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 595.166769
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 626.475981
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 596.828198
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 5658.889854
@@ -0,0 +1,81 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 639.027823
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 693.772757
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 683.094789
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 637.029355
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 772.100011
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 599.342035
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 574.320042
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+not ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 621.466015
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M3-missing-file/packages/webui/tests/chat-replies-browser.test.mjs:184:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    1 !== 0
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 0
+  actual: 1
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M3-missing-file/packages/webui/tests/chat-replies-browser.test.mjs:196:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 590.165121
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 5921.651346
@@ -0,0 +1,81 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 704.141588
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 816.229452
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 697.826745
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 638.579753
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 850.914117
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 634.004327
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 585.469632
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+not ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 673.386968
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M3-wrong-commit/packages/webui/tests/chat-replies-browser.test.mjs:184:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    1 !== 0
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 0
+  actual: 1
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M3-wrong-commit/packages/webui/tests/chat-replies-browser.test.mjs:196:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 579.53998
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6292.579267
@@ -0,0 +1,102 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 683.334532
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 686.685624
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 612.757087
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 584.651483
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+not ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 637.405759
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M4-fallback/packages/webui/tests/chat-replies-browser.test.mjs:152:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+    + actual - expected
+
+    + 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · no problems'
+    - 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · limits fell back: citationsPerReply · no problems'
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · limits fell back: citationsPerReply · no problems'
+  actual: 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · no problems'
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M4-fallback/packages/webui/tests/chat-replies-browser.test.mjs:156:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 626.790802
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+not ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 643.680732
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M4-fallback/packages/webui/tests/chat-replies-browser.test.mjs:173:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+    + actual - expected
+
+    + 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · reply-limits-unreadable · no problems'
+    - 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
+  actual: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · reply-limits-unreadable · no problems'
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M4-fallback/packages/webui/tests/chat-replies-browser.test.mjs:179:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 645.032205
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 616.242947
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 7
+# fail 2
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 5845.226677
@@ -0,0 +1,83 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 663.005514
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 662.360161
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 620.68694
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 744.825035
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 826.418848
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 549.365993
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+not ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 589.776762
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M4-problem/packages/webui/tests/chat-replies-browser.test.mjs:173:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+    + actual - expected
+
+    + 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · no problems'
+    - 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
+  actual: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · no problems'
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M4-problem/packages/webui/tests/chat-replies-browser.test.mjs:179:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 590.919434
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 545.326381
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 5914.325706
@@ -0,0 +1,105 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 16.128237
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 5.987607
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+not ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 4.805637
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-commit-input/packages/webui/tests/library-routes.test.mjs:64:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    {"project":"books","commit":"abc"}
+
+    200 !== 400
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 400
+  actual: 200
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-commit-input/packages/webui/tests/library-routes.test.mjs:69:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.383811
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.000988
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.487122
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 4.9292
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.266317
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.443059
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.048018
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 0.864934
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.064626
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.803048
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 12
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 153.3549
@@ -0,0 +1,105 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 20.271342
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+not ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 5.700968
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-fetch-metadata/packages/webui/tests/library-routes.test.mjs:48:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    sec-fetch-site
+
+    200 !== 403
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 403
+  actual: 200
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-fetch-metadata/packages/webui/tests/library-routes.test.mjs:57:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 6.427935
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 7.39929
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 5.425467
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.634037
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 5.727409
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.317954
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.583799
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.207375
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 0.956772
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.147745
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.819337
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 12
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 166.134058
@@ -0,0 +1,105 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 16.249491
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+not ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 5.463985
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-origin/packages/webui/tests/library-routes.test.mjs:48:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    origin
+
+    200 !== 403
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 403
+  actual: 200
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-origin/packages/webui/tests/library-routes.test.mjs:57:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 6.035196
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 5.621744
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.928333
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.455282
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 4.838747
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.235209
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.436399
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.100574
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 0.943474
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.176957
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.861834
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 12
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 150.969641
@@ -0,0 +1,105 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 18.918199
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 7.26916
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 5.352342
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.134713
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.288914
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.745385
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 5.739155
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.264793
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.471965
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.045204
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+not ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 1.531252
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-project-receipt/packages/webui/tests/library-routes.test.mjs:145:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    200 !== 503
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 503
+  actual: 200
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-project-receipt/packages/webui/tests/library-routes.test.mjs:148:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.60161
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.816068
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 12
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 171.289003
@@ -0,0 +1,106 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 18.930067
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 7.470645
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 6.646929
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.637697
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.174441
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.513131
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 5.145692
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.182362
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.471806
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.064814
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 0.910004
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.16191
+  type: 'test'
+  ...
+# 2026-10-23T19:28:51.488Z library-revert user="jason" project="books" commit="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" commit=bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb
+# Subtest: a configured revert callback remains unreachable when send is off
+not ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 1.624909
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-send/packages/webui/tests/library-routes.test.mjs:175:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    200 !== 403
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 403
+  actual: 200
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-send/packages/webui/tests/library-routes.test.mjs:181:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 12
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 165.919088
@@ -0,0 +1,177 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+not ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 17.922489
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:40:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+
+      [
+        {
+          commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
+          project: 'books'
+        },
+    +   {
+    +     commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
+    +     project: 'books'
+    +   }
+      ]
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+  actual:
+    0:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+    1:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:43:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 7.053366
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 5.869486
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.852952
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+not ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 2.870452
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:88:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    2 !== 1
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 1
+  actual: 2
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:96:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.904694
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 5.7962
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.518332
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.563294
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.17446
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+not ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 1.258633
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:145:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+
+      [
+        {
+          commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
+          project: 'books'
+        },
+    +   {
+    +     commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
+    +     project: 'books'
+    +   }
+      ]
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+  actual:
+    0:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+    1:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:151:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.362877
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.848309
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 10
+# fail 3
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 169.162917
@@ -0,0 +1,126 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 18.215173
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 6.416847
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 5.529629
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.92431
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.588509
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.817257
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 6.020444
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.377224
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+not ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 1.015984
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M7-user-fence/packages/webui/tests/library-routes.test.mjs:132:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    /api/library/status
+
+    true !== false
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: false
+  actual: true
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M7-user-fence/packages/webui/tests/library-routes.test.mjs:133:106)
+    Test.runInAsyncScope (node:async_hooks:226:14)
+    Test.run (node:internal/test_runner/test:1402:25)
+    Test.processPendingSubtests (node:internal/test_runner/test:974:18)
+    Test.postRun (node:internal/test_runner/test:1542:19)
+    Test.run (node:internal/test_runner/test:1467:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.695555
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 1.378325
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+not ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.178045
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M7-user-fence/packages/webui/tests/library-routes.test.mjs:155:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    503 !== 403
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 403
+  actual: 503
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M7-user-fence/packages/webui/tests/library-routes.test.mjs:167:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 1.057394
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 11
+# fail 2
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 176.864112
@@ -0,0 +1,147 @@
+{
+  "head": "50790127716002f97154800ecbfb968690a9d644",
+  "clear": "sage-3647",
+  "worktreeUnchanged": true,
+  "results": [
+    {
+      "mutant": "M1-badges",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M1-badges.tap"
+    },
+    {
+      "mutant": "M1-agent-label",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M1-agent-label.tap"
+    },
+    {
+      "mutant": "M2-http-links",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M2-http-links.tap"
+    },
+    {
+      "mutant": "M3-wrong-commit",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M3-wrong-commit.tap"
+    },
+    {
+      "mutant": "M3-missing-file",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M3-missing-file.tap"
+    },
+    {
+      "mutant": "M4-fallback",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M4-fallback.tap"
+    },
+    {
+      "mutant": "M4-problem",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M4-problem.tap"
+    },
+    {
+      "mutant": "M5-send",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-send.tap"
+    },
+    {
+      "mutant": "M5-project-receipt",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-project-receipt.tap"
+    },
+    {
+      "mutant": "M5-commit-input",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-commit-input.tap"
+    },
+    {
+      "mutant": "M5-origin",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-origin.tap"
+    },
+    {
+      "mutant": "M5-fetch-metadata",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-fetch-metadata.tap"
+    },
+    {
+      "mutant": "M6-duplicate-call",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M6-duplicate-call.tap"
+    },
+    {
+      "mutant": "M7-user-fence",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M7-user-fence.tap"
+    }
+  ]
+}
@@ -0,0 +1,22 @@
+TAP version 13
+# Subtest: channel conversion preserves the four proof/transport byte baselines and modules cannot import a proof caller
+ok 1 - channel conversion preserves the four proof/transport byte baselines and modules cannot import a proof caller
+  ---
+  duration_ms: 0.97881
+  type: 'test'
+  ...
+# Subtest: channel recovery still requires the same shim path and rejects an absent or forged proof
+ok 2 - channel recovery still requires the same shim path and rejects an absent or forged proof
+  ---
+  duration_ms: 376.310279
+  type: 'test'
+  ...
+1..2
+# tests 2
+# suites 0
+# pass 2
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 473.296901
@@ -0,0 +1,8 @@
+{
+  "at": "2026-10-24T15:02:21.827084+00:00",
+  "scratch": "/mnt/storage/scratch/tmp/rbCdM2",
+  "scratchOwnedNodeChromium": [],
+  "signalsNeeded": false,
+  "rootDependencySymlink": false,
+  "webuiDependencySymlink": false
+}
@@ -0,0 +1,16 @@
+npm notice run @mosaic/[email protected] build:editor
+npm notice run node editor/build.mjs
+▲ [WARNING] Ignoring this import because "third_party/editor/prosemirror-transform/src/mark.ts" was marked as having no side effects [ignored-bare-import]
+
+    third_party/editor/prosemirror-transform/src/index.ts:10:7:
+      10 │ import "./mark"
+         ╵        ~~~~~~~~
+
+  "sideEffects" is false in the enclosing "package.json" file:
+
+    third_party/editor/prosemirror-transform/package.json:13:2:
+      13 │   "sideEffects": false,
+         ╵   ~~~~~~~~~~~~~
+
+editor.js 9c881b13740fae2408717ad75fa1d85bfcfe3fa8b3af0f1b3f2e706c90e80fee (133 inputs)
+editor.css 8654ac57d1e7a561110138ecd7f701c34a074017ff8c4cd2768d8083908ee61f
@@ -0,0 +1,69 @@
+[
+  {
+    "step": "editor-build",
+    "exit": 0,
+    "seconds": 0.288,
+    "command": [
+      "npm",
+      "run",
+      "build:editor"
+    ],
+    "cwd": "packages/webui"
+  },
+  {
+    "step": "webui-full",
+    "exit": 0,
+    "seconds": 274.272,
+    "command": [
+      "node",
+      "--test",
+      "--test-reporter=tap",
+      "--test-concurrency=1",
+      "--test-timeout=30000",
+      "packages/webui/tests/"
+    ],
+    "cwd": "."
+  },
+  {
+    "step": "library-full",
+    "exit": 0,
+    "seconds": 14.981,
+    "command": [
+      "node",
+      "--test",
+      "--test-reporter=tap",
+      "--test-concurrency=1",
+      "--test-timeout=30000",
+      "packages/library/tests/"
+    ],
+    "cwd": "."
+  },
+  {
+    "step": "bus-full",
+    "exit": 0,
+    "seconds": 125.727,
+    "command": [
+      "node",
+      "--test",
+      "--test-reporter=tap",
+      "--test-concurrency=1",
+      "--test-timeout=30000",
+      "packages/bus/tests/"
+    ],
+    "cwd": "."
+  },
+  {
+    "step": "channel-proof",
+    "exit": 0,
+    "seconds": 0.503,
+    "command": [
+      "node",
+      "--test",
+      "--test-reporter=tap",
+      "--test-concurrency=1",
+      "--test-timeout=30000",
+      "packages/bus/tests/channel-proof.test.mjs"
+    ],
+    "cwd": "."
+  }
+]
@@ -0,0 +1,905 @@
+TAP version 13
+# Subtest: C2-06 reply schema: free bodies, exact objects and safe refusal reasons
+ok 1 - C2-06 reply schema: free bodies, exact objects and safe refusal reasons
+  ---
+  duration_ms: 17.189459
+  type: 'test'
+  ...
+# Subtest: C2-06 citation setting and all four exact fixed texts
+ok 2 - C2-06 citation setting and all four exact fixed texts
+  ---
+  duration_ms: 12.53954
+  type: 'test'
+  ...
+# Subtest: C2-06 default citation cap passes 20 and refuses 21, even with optional citations
+ok 3 - C2-06 default citation cap passes 20 and refuses 21, even with optional citations
+  ---
+  duration_ms: 93.810117
+  type: 'test'
+  ...
+# Subtest: C2-06 real Git citation scope, reachability, lines and normalized quotes
+ok 4 - C2-06 real Git citation scope, reachability, lines and normalized quotes
+  ---
+  duration_ms: 50.779918
+  type: 'test'
+  ...
+# Subtest: C2-06 playground cites pass but cannot state canon
+ok 5 - C2-06 playground cites pass but cannot state canon
+  ---
+  duration_ms: 29.160097
+  type: 'test'
+  ...
+# Subtest: C2-06 independent universes refuse; a hybrid and only its sources pass
+ok 6 - C2-06 independent universes refuse; a hybrid and only its sources pass
+  ---
+  duration_ms: 50.655113
+  type: 'test'
+  ...
+# Subtest: C2-06 web cites require allowed definition, this session fetch and kept quote
+ok 7 - C2-06 web cites require allowed definition, this session fetch and kept quote
+  ---
+  duration_ms: 13.192112
+  type: 'test'
+  ...
+# Subtest: C2-06 file origin is the path commit and trailer, while last follows served changes
+ok 8 - C2-06 file origin is the path commit and trailer, while last follows served changes
+  ---
+  duration_ms: 40.750304
+  type: 'test'
+  ...
+# Subtest: C2-06 origin uses literal paths even when a filename contains a glob
+ok 9 - C2-06 origin uses literal paths even when a filename contains a glob
+  ---
+  duration_ms: 25.953804
+  type: 'test'
+  ...
+# Subtest: C2-06 cited-commit guard reads exactly the C2-05a indexed file set with supporting scope
+ok 10 - C2-06 cited-commit guard reads exactly the C2-05a indexed file set with supporting scope
+  ---
+  duration_ms: 55.312833
+  type: 'test'
+  ...
+# Subtest: C2-06 reply limits fall back independently without coercion or inherited keys
+ok 11 - C2-06 reply limits fall back independently without coercion or inherited keys
+  ---
+  duration_ms: 0.577179
+  type: 'test'
+  ...
+# Subtest: the same commit, repo path and mapping return the same index, and only mapped files are in it
+ok 12 - the same commit, repo path and mapping return the same index, and only mapped files are in it
+  ---
+  duration_ms: 27.069716
+  type: 'test'
+  ...
+# Subtest: a different repo path, mapping or commit gets its own index
+ok 13 - a different repo path, mapping or commit gets its own index
+  ---
+  duration_ms: 44.766781
+  type: 'test'
+  ...
+# Subtest: the cache holds at most eight indexes and evicts the least recently used
+ok 14 - the cache holds at most eight indexes and evicts the least recently used
+  ---
+  duration_ms: 65.786114
+  type: 'test'
+  ...
+# Subtest: a failed read is not kept in the cache
+ok 15 - a failed read is not kept in the cache
+  ---
+  duration_ms: 13.289447
+  type: 'test'
+  ...
+# Subtest: a missing or unchecked mapping is refused before any read
+ok 16 - a missing or unchecked mapping is refused before any read
+  ---
+  duration_ms: 11.613882
+  type: 'test'
+  ...
+# Subtest: a 3,000-file rebuild completes and its time is reported
+ok 17 - a 3,000-file rebuild completes and its time is reported
+  ---
+  duration_ms: 2747.108654
+  type: 'test'
+  ...
+# 3,000-file index rebuild: 2583 ms
+# Subtest: resolver step 1: a path from the repo root, with or without .md
+ok 18 - resolver step 1: a path from the repo root, with or without .md
+  ---
+  duration_ms: 1.045058
+  type: 'test'
+  ...
+# Subtest: resolver step 2: the same path with vaultPrefix/ stripped
+ok 19 - resolver step 2: the same path with vaultPrefix/ stripped
+  ---
+  duration_ms: 0.17514
+  type: 'test'
+  ...
+# Subtest: resolver step 3: a path relative to the linking file, never above the repo root
+ok 20 - resolver step 3: a path relative to the linking file, never above the repo root
+  ---
+  duration_ms: 0.184944
+  type: 'test'
+  ...
+# Subtest: resolver step 4: a base name that matches exactly one indexed file
+ok 21 - resolver step 4: a base name that matches exactly one indexed file
+  ---
+  duration_ms: 0.191037
+  type: 'test'
+  ...
+# Subtest: a link into another of her repos resolves to nothing
+ok 22 - a link into another of her repos resolves to nothing
+  ---
+  duration_ms: 0.135053
+  type: 'test'
+  ...
+# Subtest: wikilink forms, embeds, and links skipped inside code
+ok 23 - wikilink forms, embeds, and links skipped inside code
+  ---
+  duration_ms: 0.747412
+  type: 'test'
+  ...
+# Subtest: only a body embed whose target has an extension other than .md, in any case, is an attachment
+ok 24 - only a body embed whose target has an extension other than .md, in any case, is an attachment
+  ---
+  duration_ms: 0.275738
+  type: 'test'
+  ...
+# Subtest: the fixture mapping checks and comes back frozen
+ok 25 - the fixture mapping checks and comes back frozen
+  ---
+  duration_ms: 1.690568
+  type: 'test'
+  ...
+# Subtest: C2-01c: a prefix inside or holding another entry's book refuses library-playground-other-universe
+ok 26 - C2-01c: a prefix inside or holding another entry's book refuses library-playground-other-universe
+  ---
+  duration_ms: 0.709762
+  type: 'test'
+  ...
+# Subtest: C2-01c: a prefix equal to a book folder, or holding its own, refuses library-mapping-invalid
+ok 27 - C2-01c: a prefix equal to a book folder, or holding its own, refuses library-mapping-invalid
+  ---
+  duration_ms: 0.417767
+  type: 'test'
+  ...
+# Subtest: C2-01c: universe-level prefixes lie outside every book, in a plain universe and in a hybrid with no books
+ok 28 - C2-01c: universe-level prefixes lie outside every book, in a plain universe and in a hybrid with no books
+  ---
+  duration_ms: 0.658449
+  type: 'test'
+  ...
+# Subtest: C2-01c: a draft takes kind, name and playground only, and comes back frozen with books []
+ok 29 - C2-01c: a draft takes kind, name and playground only, and comes back frozen with books []
+  ---
+  duration_ms: 1.070571
+  type: 'test'
+  ...
+# Subtest: C2-01d: supporting prefixes at book level, universe level, in a hybrid and in a draft, [] when absent
+ok 30 - C2-01d: supporting prefixes at book level, universe level, in a hybrid and in a draft, [] when absent
+  ---
+  duration_ms: 0.331996
+  type: 'test'
+  ...
+# Subtest: C2-01d: each supporting prefix rule refuses with its code
+ok 31 - C2-01d: each supporting prefix rule refuses with its code
+  ---
+  duration_ms: 1.524906
+  type: 'test'
+  ...
+# Subtest: C2-01d: between the lists, a supporting prefix may equal its own playground, and a playground may hold its own supporting
+ok 32 - C2-01d: between the lists, a supporting prefix may equal its own playground, and a playground may hold its own supporting
+  ---
+  duration_ms: 0.595392
+  type: 'test'
+  ...
+# Subtest: C2-01d: editor is optional, kept when given, and refuses anything but a plain name and email
+ok 33 - C2-01d: editor is optional, kept when given, and refuses anything but a plain name and email
+  ---
+  duration_ms: 2.763196
+  type: 'test'
+  ...
+# Subtest: C2-01d: an accepted editor round-trips through a real git commit unchanged
+ok 34 - C2-01d: an accepted editor round-trips through a real git commit unchanged
+  ---
+  duration_ms: 10.253061
+  type: 'test'
+  ...
+# Subtest: no playground prefix holds another, and no book folder holds another
+ok 35 - no playground prefix holds another, and no book folder holds another
+  ---
+  duration_ms: 0.575878
+  type: 'test'
+  ...
+# Subtest: shape refusals: kind, remote, branch, unknown keys, types, manuscript, folder names
+ok 36 - shape refusals: kind, remote, branch, unknown keys, types, manuscript, folder names
+  ---
+  duration_ms: 0.715513
+  type: 'test'
+  ...
+# Subtest: C2-03a sage-2021: user is optional, kept when given, and must be a plain account name
+ok 37 - C2-03a sage-2021: user is optional, kept when given, and must be a plain account name
+  ---
+  duration_ms: 0.499903
+  type: 'test'
+  ...
+# Subtest: a hybrid universe is a shape the query code can take (1.4), with sources that must exist
+ok 38 - a hybrid universe is a shape the query code can take (1.4), with sources that must exist
+  ---
+  duration_ms: 0.887001
+  type: 'test'
+  ...
+# Subtest: a caller-supplied fail receives the code, as business file loading will pass it (C2-04)
+ok 39 - a caller-supplied fail receives the code, as business file loading will pass it (C2-04)
+  ---
+  duration_ms: 0.215772
+  type: 'test'
+  ...
+# Subtest: scope comes from the path alone (design 1.2)
+ok 40 - scope comes from the path alone (design 1.2)
+  ---
+  duration_ms: 0.380641
+  type: 'test'
+  ...
+# Subtest: C2-04 mirror: exact default path, bare without checkout or remote, and idempotent initialization
+ok 41 - C2-04 mirror: exact default path, bare without checkout or remote, and idempotent initialization
+  ---
+  duration_ms: 36.752555
+  type: 'test'
+  ...
+# Subtest: C2-04 mirror: simultaneous creators publish one intact mirror and leave no staging paths
+ok 42 - C2-04 mirror: simultaneous creators publish one intact mirror and leave no staging paths
+  ---
+  duration_ms: 28.683571
+  type: 'test'
+  ...
+# Subtest: C2-04 mirror: skipped publication accepts both coreutils statuses without removing the winner
+ok 43 - C2-04 mirror: skipped publication accepts both coreutils statuses without removing the winner
+  ---
+  duration_ms: 106.133994
+  type: 'test'
+  ...
+# Subtest: C2-04 mirror: preserve occupied directories and reject symlink ancestors and code overlaps
+ok 44 - C2-04 mirror: preserve occupied directories and reject symlink ancestors and code overlaps
+  ---
+  duration_ms: 12.154398
+  type: 'test'
+  ...
+# Subtest: C2-04 mirror: existing metadata accepts only bare Git plus state and the precreated lock
+ok 45 - C2-04 mirror: existing metadata accepts only bare Git plus state and the precreated lock
+  ---
+  duration_ms: 21.554021
+  type: 'test'
+  ...
+# Subtest: C2-04 state: missing state is empty only while the served ref is absent
+ok 46 - C2-04 state: missing state is empty only while the served ref is absent
+  ---
+  duration_ms: 36.680415
+  type: 'test'
+  ...
+# Subtest: C2-04 state: valid problems and sync metadata return no content and change no state bytes
+ok 47 - C2-04 state: valid problems and sync metadata return no content and change no state bytes
+  ---
+  duration_ms: 37.530513
+  type: 'test'
+  ...
+# Subtest: C2-04 state: strict keys, types, times, branch, commit and fixed R messages fail closed
+ok 48 - C2-04 state: strict keys, types, times, branch, commit and fixed R messages fail closed
+  ---
+  duration_ms: 102.20466
+  type: 'test'
+  ...
+# Subtest: C2-04 state: symlink, hardlink, non-private state and missing lock refuse without replacement
+ok 49 - C2-04 state: symlink, hardlink, non-private state and missing lock refuse without replacement
+  ---
+  duration_ms: 29.713255
+  type: 'test'
+  ...
+# Subtest: C2-04 file: served commit, not HEAD or a caller commit, owns the exact returned text
+ok 50 - C2-04 file: served commit, not HEAD or a caller commit, owns the exact returned text
+  ---
+  duration_ms: 75.482761
+  type: 'test'
+  ...
+# Subtest: C2-04 file: R1, R2 and R7 exclusions and never-synced mirrors cannot return file bodies
+ok 51 - C2-04 file: R1, R2 and R7 exclusions and never-synced mirrors cannot return file bodies
+  ---
+  duration_ms: 81.31492
+  type: 'test'
+  ...
+# Subtest: C2-04 lock: a first-sync and fast-forward reader wait for a consistent pair across processes
+ok 52 - C2-04 lock: a first-sync and fast-forward reader wait for a consistent pair across processes
+  ---
+  duration_ms: 247.180363
+  type: 'test'
+  ...
+# Subtest: C2-04 lock: same-process waits, timeout code, callback expiry and throw release
+ok 53 - C2-04 lock: same-process waits, timeout code, callback expiry and throw release
+  ---
+  duration_ms: 5031.333528
+  type: 'test'
+  ...
+# Subtest: C2-04 lock: owner death releases the kernel lock without replacing its file
+ok 54 - C2-04 lock: owner death releases the kernel lock without replacing its file
+  ---
+  duration_ms: 60.37894
+  type: 'test'
+  ...
+# Subtest: C2-04 lock: a missing flock binary becomes a handled refusal
+ok 55 - C2-04 lock: a missing flock binary becomes a handled refusal
+  ---
+  duration_ms: 52.707661
+  type: 'test'
+  ...
+# Subtest: C2-04 lock: an unawaited scoped read drains before the lock is released
+ok 56 - C2-04 lock: an unawaited scoped read drains before the lock is released
+  ---
+  duration_ms: 20.968604
+  type: 'test'
+  ...
+# Subtest: the query reply cap equals the harness reply cap
+ok 57 - the query reply cap equals the harness reply cap
+  ---
+  duration_ms: 0.764136
+  type: 'test'
+  ...
+# Subtest: find is bound to its universe and refuses a call without one
+ok 58 - find is bound to its universe and refuses a call without one
+  ---
+  duration_ms: 32.208658
+  type: 'test'
+  ...
+# Subtest: every result carries its scope, and playground appears only when asked for
+ok 59 - every result carries its scope, and playground appears only when asked for
+  ---
+  duration_ms: 22.460169
+  type: 'test'
+  ...
+# Subtest: unmapped files never appear in any reply
+ok 60 - unmapped files never appear in any reply
+  ---
+  duration_ms: 21.117277
+  type: 'test'
+  ...
+# Subtest: a hybrid sees its sources canon, minus exclusions, and no playground
+ok 61 - a hybrid sees its sources canon, minus exclusions, and no playground
+  ---
+  duration_ms: 21.479685
+  type: 'test'
+  ...
+# Subtest: a hybrid gets a source file it can see, and not an excluded or foreign one
+ok 62 - a hybrid gets a source file it can see, and not an excluded or foreign one
+  ---
+  duration_ms: 30.779213
+  type: 'test'
+  ...
+# Subtest: get lists visible links both ways and drops a target another universe cannot see
+ok 63 - get lists visible links both ways and drops a target another universe cannot see
+  ---
+  duration_ms: 30.529291
+  type: 'test'
+  ...
+# Subtest: a long list pages by position, never cuts an item, and returns 50 per page
+ok 64 - a long list pages by position, never cuts an item, and returns 50 per page
+  ---
+  duration_ms: 124.407539
+  type: 'test'
+  ...
+# Subtest: a page stays under the reply cap when items are large
+ok 65 - a page stays under the reply cap when items are large
+  ---
+  duration_ms: 57.810337
+  type: 'test'
+  ...
+# Subtest: a search line too long to fit alone comes back marked, with no excerpt, and the other hits still return
+ok 66 - a search line too long to fit alone comes back marked, with no excerpt, and the other hits still return
+  ---
+  duration_ms: 23.581956
+  type: 'test'
+  ...
+# Subtest: a find item that cannot fit alone is refused, not cut
+ok 67 - a find item that cannot fit alone is refused, not cut
+  ---
+  duration_ms: 22.252458
+  type: 'test'
+  ...
+# Subtest: get pages its lines, and the next line picks up where the page stopped
+ok 68 - get pages its lines, and the next line picks up where the page stopped
+  ---
+  duration_ms: 23.912496
+  type: 'test'
+  ...
+# Subtest: get refuses a file whose front matter alone is over the cap, and a line alone is over the cap
+ok 69 - get refuses a file whose front matter alone is over the cap, and a line alone is over the cap
+  ---
+  duration_ms: 24.150899
+  type: 'test'
+  ...
+# Subtest: get pages the links of a hub note, every page carries the front matter, and the pages add up
+ok 70 - get pages the links of a hub note, every page carries the front matter, and the pages add up
+  ---
+  duration_ms: 813.956135
+  type: 'test'
+  ...
+# Subtest: get rejects a bad links_from
+ok 71 - get rejects a bad links_from
+  ---
+  duration_ms: 31.267213
+  type: 'test'
+  ...
+# Subtest: search returns scoped line hits, case-insensitively, and refuses empty text
+ok 72 - search returns scoped line hits, case-insensitively, and refuses empty text
+  ---
+  duration_ms: 27.15274
+  type: 'test'
+  ...
+# Subtest: a manuscript call returns one chapter, at most 400 lines, and names its next line
+ok 73 - a manuscript call returns one chapter, at most 400 lines, and names its next line
+  ---
+  duration_ms: 44.387645
+  type: 'test'
+  ...
+# Subtest: a manuscript call without a chapter returns the first chapter in path order and names the next
+ok 74 - a manuscript call without a chapter returns the first chapter in path order and names the next
+  ---
+  duration_ms: 26.076613
+  type: 'test'
+  ...
+# Subtest: a chapter name that matches two visible files is refused
+ok 75 - a chapter name that matches two visible files is refused
+  ---
+  duration_ms: 27.921747
+  type: 'test'
+  ...
+# Subtest: a hybrid reads a source chapter through its declared sources only
+ok 76 - a hybrid reads a source chapter through its declared sources only
+  ---
+  duration_ms: 33.188323
+  type: 'test'
+  ...
+# Subtest: universe info reports a hybrid sources, constraints and notes, and refuses an unknown universe
+ok 77 - universe info reports a hybrid sources, constraints and notes, and refuses an unknown universe
+  ---
+  duration_ms: 11.456952
+  type: 'test'
+  ...
+# Subtest: an exclusion hides what it names from a hybrid and from nothing else
+ok 78 - an exclusion hides what it names from a hybrid and from nothing else
+  ---
+  duration_ms: 33.694035
+  type: 'test'
+  ...
+# Subtest: PRD 1.14: a lookup that names a book leaves book-null files out
+ok 79 - PRD 1.14: a lookup that names a book leaves book-null files out
+  ---
+  duration_ms: 27.623969
+  type: 'test'
+  ...
+# Subtest: PRD 1.14: library_manuscript never reads a book-null file
+ok 80 - PRD 1.14: library_manuscript never reads a book-null file
+  ---
+  duration_ms: 27.898096
+  type: 'test'
+  ...
+# Subtest: PRD 1.14: a draft universe has no canon, so its lookups return files only with scope playground
+ok 81 - PRD 1.14: a draft universe has no canon, so its lookups return files only with scope playground
+  ---
+  duration_ms: 28.714694
+  type: 'test'
+  ...
+# Subtest: PRD 1.14: library_universe on a draft returns its kind, name and prefixes
+ok 82 - PRD 1.14: library_universe on a draft returns its kind, name and prefixes
+  ---
+  duration_ms: 12.925425
+  type: 'test'
+  ...
+# Subtest: a hybrid gets a source playground file as null, while the source gets it with scope playground
+ok 83 - a hybrid gets a source playground file as null, while the source gets it with scope playground
+  ---
+  duration_ms: 36.485028
+  type: 'test'
+  ...
+# Subtest: the fixture reads clean: every resolver step, appears_in and relationships wikilinks indexed
+ok 84 - the fixture reads clean: every resolver step, appears_in and relationships wikilinks indexed
+  ---
+  duration_ms: 32.126786
+  type: 'test'
+  ...
+# Subtest: R1: executables, symlinks, gitlinks, blobs over 1 MiB and non-UTF-8 text are not indexed
+ok 85 - R1: executables, symlinks, gitlinks, blobs over 1 MiB and non-UTF-8 text are not indexed
+  ---
+  duration_ms: 63.320394
+  type: 'test'
+  ...
+# Subtest: R2: unmapped paths are reported and not indexed
+ok 86 - R2: unmapped paths are reported and not indexed
+  ---
+  duration_ms: 22.853724
+  type: 'test'
+  ...
+# Subtest: R3: front matter not fully parsed stays raw, with the line where parsing stopped
+ok 87 - R3: front matter not fully parsed stays raw, with the line where parsing stopped
+  ---
+  duration_ms: 26.562606
+  type: 'test'
+  ...
+# Subtest: front matter forms the reader accepts and refuses
+ok 88 - front matter forms the reader accepts and refuses
+  ---
+  duration_ms: 0.477813
+  type: 'test'
+  ...
+# Subtest: R4: a link to no file, to more than one, or into another repo is reported and not followed
+ok 89 - R4: a link to no file, to more than one, or into another repo is reported and not followed
+  ---
+  duration_ms: 26.972666
+  type: 'test'
+  ...
+# Subtest: a block list link carries its item line, a scalar or flow link its key line, and problems follow
+ok 90 - a block list link carries its item line, a scalar or flow link its key line, and problems follow
+  ---
+  duration_ms: 21.295185
+  type: 'test'
+  ...
+# Subtest: an unresolved attachment embed gives no problem; a link or front matter value to one is R4; a note embed resolves
+ok 91 - an unresolved attachment embed gives no problem; a link or front matter value to one is R4; a note embed resolves
+  ---
+  duration_ms: 21.454013
+  type: 'test'
+  ...
+# Subtest: an indexed Dr.Quinn.md resolves as a body link, a block list link and an embed
+ok 92 - an indexed Dr.Quinn.md resolves as a body link, a block list link and an embed
+  ---
+  duration_ms: 22.801844
+  type: 'test'
+  ...
+# Subtest: R5: a canon file that refers into the playground is reported, and the link still goes by path
+ok 93 - R5: a canon file that refers into the playground is reported, and the link still goes by path
+  ---
+  duration_ms: 22.401093
+  type: 'test'
+  ...
+# Subtest: R6: a canon file that refers into another universe is reported; a hybrid may refer into its sources
+ok 94 - R6: a canon file that refers into another universe is reported; a hybrid may refer into its sources
+  ---
+  duration_ms: 24.828236
+  type: 'test'
+  ...
+# Subtest: R7: two paths that differ only in case are both left out
+ok 95 - R7: two paths that differ only in case are both left out
+  ---
+  duration_ms: 30.835692
+  type: 'test'
+  ...
+# Subtest: the reader reads the commit, never the working tree, and refuses a bad commit id
+ok 96 - the reader reads the commit, never the working tree, and refuses a bad commit id
+  ---
+  duration_ms: 27.202779
+  type: 'test'
+  ...
+# Subtest: a bare mirror reads the same as the clone
+ok 97 - a bare mirror reads the same as the clone
+  ---
+  duration_ms: 37.932953
+  type: 'test'
+  ...
+# Subtest: free text renders as itself with no citations
+ok 98 - free text renders as itself with no citations
+  ---
+  duration_ms: 1.253839
+  type: 'test'
+  ...
+# Subtest: a cited reply renders its text, then each cite with the badge from the check result
+ok 99 - a cited reply renders its text, then each cite with the badge from the check result
+  ---
+  duration_ms: 0.490254
+  type: 'test'
+  ...
+# Subtest: a parsed body renders as its string does
+ok 100 - a parsed body renders as its string does
+  ---
+  duration_ms: 0.28413
+  type: 'test'
+  ...
+# Subtest: without a check result a path cite has no badge, no label and is never changed
+ok 101 - without a check result a path cite has no badge, no label and is never changed
+  ---
+  duration_ms: 0.208475
+  type: 'test'
+  ...
+# Subtest: the label and the badge come from the check result only, never from a bad entry
+ok 102 - the label and the badge come from the check result only, never from a bad entry
+  ---
+  duration_ms: 0.189041
+  type: 'test'
+  ...
+# Subtest: a web cite is a link only for https
+ok 103 - a web cite is a link only for https
+  ---
+  duration_ms: 0.237273
+  type: 'test'
+  ...
+# Subtest: a write notice renders its fixed line
+ok 104 - a write notice renders its fixed line
+  ---
+  duration_ms: 0.197996
+  type: 'test'
+  ...
+# Subtest: a body without the reply or notice shape is free text: the whole body, no citations
+ok 105 - a body without the reply or notice shape is free text: the whole body, no citations
+  ---
+  duration_ms: 0.282125
+  type: 'test'
+  ...
+# Subtest: an empty citations list is a reply with no cites
+ok 106 - an empty citations list is a reply with no cites
+  ---
+  duration_ms: 0.159547
+  type: 'test'
+  ...
+# Subtest: C2-01c: each level gives its universe, and its book or null
+ok 107 - C2-01c: each level gives its universe, and its book or null
+  ---
+  duration_ms: 2.300917
+  type: 'test'
+  ...
+# Subtest: C2-01c: prefixes come first: in a book that holds a prefix, a file outside it is canon and one under it playground
+ok 108 - C2-01c: prefixes come first: in a book that holds a prefix, a file outside it is canon and one under it playground
+  ---
+  duration_ms: 0.360816
+  type: 'test'
+  ...
+# Subtest: C2-01c: a canon file linking into a draft gives R6, and into its own universe-level prefix gives R5
+ok 109 - C2-01c: a canon file linking into a draft gives R6, and into its own universe-level prefix gives R5
+  ---
+  duration_ms: 35.645755
+  type: 'test'
+  ...
+# Subtest: C2-01d: each supporting level gives its universe, and its book or null
+ok 110 - C2-01d: each supporting level gives its universe, and its book or null
+  ---
+  duration_ms: 0.595486
+  type: 'test'
+  ...
+# Subtest: C2-01d: supporting comes before playground; a folder in both lists is supporting, one in the playground only stays playground
+ok 111 - C2-01d: supporting comes before playground; a folder in both lists is supporting, one in the playground only stays playground
+  ---
+  duration_ms: 0.44191
+  type: 'test'
+  ...
+# Subtest: C2-01d: only .md files are supporting; a .canvas or .base under a supporting prefix is unmapped
+ok 112 - C2-01d: only .md files are supporting; a .canvas or .base under a supporting prefix is unmapped
+  ---
+  duration_ms: 0.369161
+  type: 'test'
+  ...
+# Subtest: C2-01d: a path passes at book level, universe level, in a draft and in a folder in both lists
+ok 113 - C2-01d: a path passes at book level, universe level, in a draft and in a folder in both lists
+  ---
+  duration_ms: 1.328362
+  type: 'test'
+  ...
+# Subtest: C2-01d: a path of exactly 1024 bytes passes, and 1025 bytes made of multi-byte characters refuses
+ok 114 - C2-01d: a path of exactly 1024 bytes passes, and 1025 bytes made of multi-byte characters refuses
+  ---
+  duration_ms: 0.594019
+  type: 'test'
+  ...
+# Subtest: C2-01d: a path outside the universe's supporting folders refuses
+ok 115 - C2-01d: a path outside the universe's supporting folders refuses
+  ---
+  duration_ms: 0.437884
+  type: 'test'
+  ...
+# Subtest: C2-01d: malformed paths refuse by class, in order
+ok 116 - C2-01d: malformed paths refuse by class, in order
+  ---
+  duration_ms: 0.420203
+  type: 'test'
+  ...
+# Subtest: C2-01d: a symlink or gitlink on the way, or at the path itself, refuses
+ok 117 - C2-01d: a symlink or gitlink on the way, or at the path itself, refuses
+  ---
+  duration_ms: 0.202607
+  type: 'test'
+  ...
+# Subtest: C2-01d: a name that differs from a tree name only in case or Unicode form refuses, at the file or any folder
+ok 118 - C2-01d: a name that differs from a tree name only in case or Unicode form refuses, at the file or any folder
+  ---
+  duration_ms: 0.558793
+  type: 'test'
+  ...
+# Subtest: the survey prints folder names, counts, key sets and link-form counts, and never text
+ok 119 - the survey prints folder names, counts, key sets and link-form counts, and never text
+  ---
+  duration_ms: 33.052885
+  type: 'test'
+  ...
+# Subtest: folder names print DEL, C1 and bidi controls, U+061C among them, as escapes
+ok 120 - folder names print DEL, C1 and bidi controls, U+061C among them, as escapes
+  ---
+  duration_ms: 22.169779
+  type: 'test'
+  ...
+# Subtest: an embed of an attachment counts as an embed and as an attachment; a plain link to one does not
+ok 121 - an embed of an attachment counts as an embed and as an attachment; a plain link to one does not
+  ---
+  duration_ms: 17.59261
+  type: 'test'
+  ...
+# Subtest: with --mapping the survey adds scope, resolver step and problem counts
+ok 122 - with --mapping the survey adds scope, resolver step and problem counts
+  ---
+  duration_ms: 34.016719
+  type: 'test'
+  ...
+# Subtest: C2-01d: with --mapping the survey counts supporting files
+ok 123 - C2-01d: with --mapping the survey counts supporting files
+  ---
+  duration_ms: 31.833311
+  type: 'test'
+  ...
+# Subtest: survey exit codes: usage 4, bad mapping 3, unreadable repo 2
+ok 124 - survey exit codes: usage 4, bad mapping 3, unreadable repo 2
+  ---
+  duration_ms: 13.805614
+  type: 'test'
+  ...
+# Subtest: scripts/mosaic library survey reaches the survey
+ok 125 - scripts/mosaic library survey reaches the survey
+  ---
+  duration_ms: 71.695919
+  type: 'test'
+  ...
+# Subtest: C2-03a argv: the fixed sequence, one https allow, no other protocol key
+ok 126 - C2-03a argv: the fixed sequence, one https allow, no other protocol key
+  ---
+  duration_ms: 1.585018
+  type: 'test'
+  ...
+# Subtest: C2-03a argv: only an https URL with a plain host, no userinfo, and a plain user
+ok 127 - C2-03a argv: only an https URL with a plain host, no userinfo, and a plain user
+  ---
+  duration_ms: 0.654433
+  type: 'test'
+  ...
+# Subtest: C2-03a helper: answers only the exact prompts for the configured host and user (dewey-0765)
+ok 128 - C2-03a helper: answers only the exact prompts for the configured host and user (dewey-0765)
+  ---
+  duration_ms: 32.692311
+  type: 'test'
+  ...
+# Subtest: C2-03a first sync: served is the fetched tip, HEAD is served, the survey reads it, and the token stays in the slot
+ok 129 - C2-03a first sync: served is the fetched tip, HEAD is served, the survey reads it, and the token stays in the slot
+  ---
+  duration_ms: 144.525261
+  type: 'test'
+  ...
+# Subtest: C2-03a fast-forward: served moves, problems are rebuilt, and a repeat changes only lastFetch
+ok 130 - C2-03a fast-forward: served moves, problems are rebuilt, and a repeat changes only lastFetch
+  ---
+  duration_ms: 208.035662
+  type: 'test'
+  ...
+# Subtest: C2-03a Filbert N2: a read that took served before a sync still finds its objects after served moves
+ok 131 - C2-03a Filbert N2: a read that took served before a sync still finds its objects after served moves
+  ---
+  duration_ms: 188.320449
+  type: 'test'
+  ...
+# Subtest: C2-03a overlap: a reader during a sync sees the old pair or the new one, never a mix
+ok 132 - C2-03a overlap: a reader during a sync sees the old pair or the new one, never a mix
+  ---
+  duration_ms: 152.46365
+  type: 'test'
+  ...
+# Subtest: C2-03a diverged: a non-fast-forward keeps serving and holds until a human accepts the tip
+ok 133 - C2-03a diverged: a non-fast-forward keeps serving and holds until a human accepts the tip
+  ---
+  duration_ms: 346.553644
+  type: 'test'
+  ...
+# Subtest: C2-03a accept starts the record over, so a changed branch gets a fresh state
+ok 134 - C2-03a accept starts the record over, so a changed branch gets a fresh state
+  ---
+  duration_ms: 157.372553
+  type: 'test'
+  ...
+# Subtest: C2-03a fetch failure: a wrong token keeps serving and records the error, lastFetch unchanged
+ok 135 - C2-03a fetch failure: a wrong token keeps serving and records the error, lastFetch unchanged
+  ---
+  duration_ms: 190.982068
+  type: 'test'
+  ...
+# Subtest: C2-03a a failed first fetch records the error with nothing served
+ok 136 - C2-03a a failed first fetch records the error with nothing served
+  ---
+  duration_ms: 57.408738
+  type: 'test'
+  ...
+# Subtest: C2-03a a 302 to another host fails the fetch and the other host sees nothing
+ok 137 - C2-03a a 302 to another host fails the fetch and the other host sees nothing
+  ---
+  duration_ms: 57.729072
+  type: 'test'
+  ...
+# Subtest: C2-03a the slot: missing or unsafe refuses before git, and sync never opens it
+ok 138 - C2-03a the slot: missing or unsafe refuses before git, and sync never opens it
+  ---
+  duration_ms: 54.266964
+  type: 'test'
+  ...
+# Subtest: C2-03a sage-2021: an entry with no user refuses library-remote-invalid and runs no git
+ok 139 - C2-03a sage-2021: an entry with no user refuses library-remote-invalid and runs no git
+  ---
+  duration_ms: 29.954005
+  type: 'test'
+  ...
+# Subtest: C2-03a one sync per mirror: an overlapping call refuses library-sync-busy
+ok 140 - C2-03a one sync per mirror: an overlapping call refuses library-sync-busy
+  ---
+  duration_ms: 128.369485
+  type: 'test'
+  ...
+# Subtest: C2-03b argv: a push sends one full commit to the branch, fast-forward only, with the fetch prefix
+ok 141 - C2-03b argv: a push sends one full commit to the branch, fast-forward only, with the fetch prefix
+  ---
+  duration_ms: 0.531101
+  type: 'test'
+  ...
+# Subtest: C2-03b T1 push: a fast-forward lands with the seat's own user and file, and moves no local ref
+ok 142 - C2-03b T1 push: a fast-forward lands with the seat's own user and file, and moves no local ref
+  ---
+  duration_ms: 112.627778
+  type: 'test'
+  ...
+# Subtest: C2-03b T2 and T3: a moved tip reports the race after one fetch, and a second race refuses stale-base
+ok 143 - C2-03b T2 and T3: a moved tip reports the race after one fetch, and a second race refuses stale-base
+  ---
+  duration_ms: 179.764475
+  type: 'test'
+  ...
+# Subtest: C2-03b race fetch: while a sync of the mirror runs, the race refuses library-sync-busy
+ok 144 - C2-03b race fetch: while a sync of the mirror runs, the race refuses library-sync-busy
+  ---
+  duration_ms: 224.956189
+  type: 'test'
+  ...
+# Subtest: C2-03b T4: a dead remote, a hook refusal and a wrong token each refuse library-push-failed
+ok 145 - C2-03b T4: a dead remote, a hook refusal and a wrong token each refuse library-push-failed
+  ---
+  duration_ms: 162.398803
+  type: 'test'
+  ...
+# Subtest: C2-03b push: a refused, missing or unsafe credential runs no git
+ok 146 - C2-03b push: a refused, missing or unsafe credential runs no git
+  ---
+  duration_ms: 91.370083
+  type: 'test'
+  ...
+# Subtest: C2-03b T10 humanCredential: her login and a 0600 slot library-human, or library-human-missing
+ok 147 - C2-03b T10 humanCredential: her login and a 0600 slot library-human, or library-human-missing
+  ---
+  duration_ms: 0.971487
+  type: 'test'
+  ...
+# Subtest: C2-03b fetch credential: the state names the kind and user, a refusal runs no git, and a pre-286 state still reads
+ok 148 - C2-03b fetch credential: the state names the kind and user, a refusal runs no git, and a pre-286 state still reads
+  ---
+  duration_ms: 156.457827
+  type: 'test'
+  ...
+# Subtest: C2-03b T5 helper: the named seat's user and file, never a link, 0644, another uid, or a swapped file
+ok 149 - C2-03b T5 helper: the named seat's user and file, never a link, 0644, another uid, or a swapped file
+  ---
+  duration_ms: 30.094801
+  type: 'test'
+  ...
+1..149
+# tests 149
+# suites 0
+# pass 149
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 14939.169237
@@ -0,0 +1,182 @@
+{
+  "source": "c010dfd856e901f9fef26c34449901b6b5d3cc36",
+  "clear": "sage-4119",
+  "uniqueMutants": 16,
+  "cleanAssertionKills": 16,
+  "attempts": 17,
+  "timeoutAttempts": [
+    {
+      "mutant": "M3-missing-file",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 124,
+      "killed": false,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M3-missing-file.tap"
+    }
+  ],
+  "unchangedRetry": "M3-missing-file",
+  "results": [
+    {
+      "mutant": "B1-forged-notice",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/B1-forged-notice.tap"
+    },
+    {
+      "mutant": "N1-definite-refusal",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/N1-definite-refusal.tap"
+    },
+    {
+      "mutant": "M1-badges",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M1-badges.tap"
+    },
+    {
+      "mutant": "M1-agent-label",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M1-agent-label.tap"
+    },
+    {
+      "mutant": "M2-http-links",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M2-http-links.tap"
+    },
+    {
+      "mutant": "M3-wrong-commit",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M3-wrong-commit.tap"
+    },
+    {
+      "mutant": "M3-missing-file",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M3-missing-file.tap"
+    },
+    {
+      "mutant": "M4-fallback",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M4-fallback.tap"
+    },
+    {
+      "mutant": "M4-problem",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M4-problem.tap"
+    },
+    {
+      "mutant": "M5-send",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-send.tap"
+    },
+    {
+      "mutant": "M5-project-receipt",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-project-receipt.tap"
+    },
+    {
+      "mutant": "M5-commit-input",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-commit-input.tap"
+    },
+    {
+      "mutant": "M5-origin",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-origin.tap"
+    },
+    {
+      "mutant": "M5-fetch-metadata",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-fetch-metadata.tap"
+    },
+    {
+      "mutant": "M6-duplicate-call",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M6-duplicate-call.tap"
+    },
+    {
+      "mutant": "M7-user-fence",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M7-user-fence.tap"
+    }
+  ]
+}
@@ -0,0 +1,93 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 470.412331
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 550.51872
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 451.18881
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 446.434285
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 696.017669
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 515.453329
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 460.122939
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+not ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 497.760992
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M3-missing-file/packages/webui/tests/chat-replies-browser.test.mjs:185:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    1 !== 0
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 0
+  actual: 1
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M3-missing-file/packages/webui/tests/chat-replies-browser.test.mjs:197:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 457.914136
+  type: 'test'
+  ...
+# Subtest: chat replies: a checked notice-shaped agent message is plain text with no Revert
+ok 10 - chat replies: a checked notice-shaped agent message is plain text with no Revert
+  ---
+  duration_ms: 538.649147
+  type: 'test'
+  ...
+# Subtest: chat replies: owner-only without a sent field is a definite Revert refusal
+ok 11 - chat replies: owner-only without a sent field is a definite Revert refusal
+  ---
+  duration_ms: 466.517968
+  type: 'test'
+  ...
+1..11
+# tests 11
+# suites 0
+# pass 10
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 5659.33282
@@ -0,0 +1,114 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 500.950616
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 550.660245
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 439.867813
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 547.524931
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+not ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 513.132708
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M4-fallback/packages/webui/tests/chat-replies-browser.test.mjs:153:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+    + actual - expected
+
+    + 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · no problems'
+    - 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · limits fell back: citationsPerReply · no problems'
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · limits fell back: citationsPerReply · no problems'
+  actual: 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · no problems'
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M4-fallback/packages/webui/tests/chat-replies-browser.test.mjs:157:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 556.420869
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+not ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 484.307032
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M4-fallback/packages/webui/tests/chat-replies-browser.test.mjs:174:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+    + actual - expected
+
+    + 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · reply-limits-unreadable · no problems'
+    - 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
+  actual: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · reply-limits-unreadable · no problems'
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M4-fallback/packages/webui/tests/chat-replies-browser.test.mjs:180:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 555.045885
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 533.809937
+  type: 'test'
+  ...
+# Subtest: chat replies: a checked notice-shaped agent message is plain text with no Revert
+ok 10 - chat replies: a checked notice-shaped agent message is plain text with no Revert
+  ---
+  duration_ms: 574.763022
+  type: 'test'
+  ...
+# Subtest: chat replies: owner-only without a sent field is a definite Revert refusal
+ok 11 - chat replies: owner-only without a sent field is a definite Revert refusal
+  ---
+  duration_ms: 490.762497
+  type: 'test'
+  ...
+1..11
+# tests 11
+# suites 0
+# pass 9
+# fail 2
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 5854.19283
@@ -0,0 +1,95 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 485.046449
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 655.676431
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 510.339561
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 567.942203
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 704.366439
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 469.717825
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+not ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 497.165447
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M4-problem/packages/webui/tests/chat-replies-browser.test.mjs:174:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+    + actual - expected
+
+    + 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · no problems'
+    - 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
+  actual: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · no problems'
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M4-problem/packages/webui/tests/chat-replies-browser.test.mjs:180:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 513.866228
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 569.647355
+  type: 'test'
+  ...
+# Subtest: chat replies: a checked notice-shaped agent message is plain text with no Revert
+ok 10 - chat replies: a checked notice-shaped agent message is plain text with no Revert
+  ---
+  duration_ms: 551.194753
+  type: 'test'
+  ...
+# Subtest: chat replies: owner-only without a sent field is a definite Revert refusal
+ok 11 - chat replies: owner-only without a sent field is a definite Revert refusal
+  ---
+  duration_ms: 574.069655
+  type: 'test'
+  ...
+1..11
+# tests 11
+# suites 0
+# pass 10
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6206.901243
@@ -0,0 +1,105 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 17.56187
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 6.573454
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+not ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 5.102558
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M5-commit-input/packages/webui/tests/library-routes.test.mjs:64:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    {"project":"books","commit":"abc"}
+
+    200 !== 400
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 400
+  actual: 200
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M5-commit-input/packages/webui/tests/library-routes.test.mjs:69:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.799299
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.120395
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.602233
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 5.100082
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.257159
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.469608
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.102224
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 0.904624
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.144651
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.859099
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 12
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 160.00624
@@ -0,0 +1,105 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 17.39585
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+not ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 5.265876
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M5-fetch-metadata/packages/webui/tests/library-routes.test.mjs:48:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    sec-fetch-site
+
+    200 !== 403
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 403
+  actual: 200
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M5-fetch-metadata/packages/webui/tests/library-routes.test.mjs:57:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 6.437656
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.440243
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.17516
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.649503
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 7.072294
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.692884
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.597525
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.276025
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 1.100885
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.386573
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.982966
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 12
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 164.308483
@@ -0,0 +1,105 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 16.327596
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+not ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 5.549357
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M5-origin/packages/webui/tests/library-routes.test.mjs:48:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    origin
+
+    200 !== 403
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 403
+  actual: 200
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M5-origin/packages/webui/tests/library-routes.test.mjs:57:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 5.885835
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 5.968744
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.127358
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.477278
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 4.992417
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.319805
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.463829
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 0.97695
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 0.84946
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.075946
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.790109
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 12
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 153.089261
@@ -0,0 +1,105 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 16.594256
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 6.357671
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 5.436157
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.396789
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.542251
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.555592
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 5.664535
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.246607
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.473064
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.033065
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+not ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 1.50603
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M5-project-receipt/packages/webui/tests/library-routes.test.mjs:145:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    200 !== 503
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 503
+  actual: 200
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M5-project-receipt/packages/webui/tests/library-routes.test.mjs:148:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.515154
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.808881
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 12
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 159.002473
@@ -0,0 +1,106 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 17.33747
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 6.461375
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 5.304369
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.105248
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.101878
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.480254
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 5.228483
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.215538
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.425662
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.109755
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 0.944956
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.128453
+  type: 'test'
+  ...
+# 2026-10-24T15:01:18.477Z library-revert user="jason" project="books" commit="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" commit=bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb
+# Subtest: a configured revert callback remains unreachable when send is off
+not ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 1.518536
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M5-send/packages/webui/tests/library-routes.test.mjs:175:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    200 !== 403
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 403
+  actual: 200
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M5-send/packages/webui/tests/library-routes.test.mjs:181:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 12
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 156.535885
@@ -0,0 +1,177 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+not ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 17.505752
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:40:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+
+      [
+        {
+          commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
+          project: 'books'
+        },
+    +   {
+    +     commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
+    +     project: 'books'
+    +   }
+      ]
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+  actual:
+    0:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+    1:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:43:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 6.797321
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 5.344889
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.013322
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+not ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 2.535793
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:88:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    2 !== 1
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 1
+  actual: 2
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:96:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.723459
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 5.149924
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.316788
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.449534
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.00664
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+not ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 1.09366
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:145:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+
+      [
+        {
+          commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
+          project: 'books'
+        },
+    +   {
+    +     commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
+    +     project: 'books'
+    +   }
+      ]
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+  actual:
+    0:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+    1:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:151:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.301123
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.794848
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 10
+# fail 3
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 151.811146
@@ -0,0 +1,126 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 16.2397
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 6.215727
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 5.186689
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.315391
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.12887
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.445585
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 5.067822
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.189039
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+not ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.811819
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M7-user-fence/packages/webui/tests/library-routes.test.mjs:132:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    /api/library/status
+
+    true !== false
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: false
+  actual: true
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M7-user-fence/packages/webui/tests/library-routes.test.mjs:133:106)
+    Test.runInAsyncScope (node:async_hooks:226:14)
+    Test.run (node:internal/test_runner/test:1402:25)
+    Test.processPendingSubtests (node:internal/test_runner/test:974:18)
+    Test.postRun (node:internal/test_runner/test:1542:19)
+    Test.run (node:internal/test_runner/test:1467:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.518953
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 0.929821
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+not ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.005143
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M7-user-fence/packages/webui/tests/library-routes.test.mjs:155:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    503 !== 403
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 403
+  actual: 503
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M7-user-fence/packages/webui/tests/library-routes.test.mjs:167:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.971308
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 11
+# fail 2
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 151.216862
@@ -0,0 +1,119 @@
+{
+  "head": "c010dfd856e901f9fef26c34449901b6b5d3cc36",
+  "clear": "sage-4119",
+  "worktreeUnchanged": true,
+  "selected": [
+    "M3-missing-file",
+    "M4-fallback",
+    "M4-problem",
+    "M5-commit-input",
+    "M5-fetch-metadata",
+    "M5-origin",
+    "M5-project-receipt",
+    "M5-send",
+    "M6-duplicate-call",
+    "M7-user-fence"
+  ],
+  "results": [
+    {
+      "mutant": "M3-missing-file",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M3-missing-file.tap"
+    },
+    {
+      "mutant": "M4-fallback",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M4-fallback.tap"
+    },
+    {
+      "mutant": "M4-problem",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M4-problem.tap"
+    },
+    {
+      "mutant": "M5-send",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-send.tap"
+    },
+    {
+      "mutant": "M5-project-receipt",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-project-receipt.tap"
+    },
+    {
+      "mutant": "M5-commit-input",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-commit-input.tap"
+    },
+    {
+      "mutant": "M5-origin",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-origin.tap"
+    },
+    {
+      "mutant": "M5-fetch-metadata",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-fetch-metadata.tap"
+    },
+    {
+      "mutant": "M6-duplicate-call",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M6-duplicate-call.tap"
+    },
+    {
+      "mutant": "M7-user-fence",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M7-user-fence.tap"
+    }
+  ]
+}
@@ -0,0 +1,112 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 544.756403
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+not ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 483.041116
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/B1-forged-notice/packages/webui/tests/chat-replies-browser.test.mjs:106:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    only the notice has a Revert
+
+    2 !== 1
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 1
+  actual: 2
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/B1-forged-notice/packages/webui/tests/chat-replies-browser.test.mjs:110:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 487.861146
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 576.65596
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 758.253819
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 580.933574
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 549.597856
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 580.62745
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 469.541186
+  type: 'test'
+  ...
+# Subtest: chat replies: a checked notice-shaped agent message is plain text with no Revert
+not ok 10 - chat replies: a checked notice-shaped agent message is plain text with no Revert
+  ---
+  duration_ms: 495.344894
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/B1-forged-notice/packages/webui/tests/chat-replies-browser.test.mjs:210:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+    + actual - expected
+
+    + 'forger deleted Fake/Claim.md @ddddddd Revert '
+    - '{"notice":"library-write","op":"delete","path":"Fake/Claim.md","commit":"dddddddddddddddddddddddddddddddddddddddd"}'
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: '{"notice":"library-write","op":"delete","path":"Fake/Claim.md","commit":"dddddddddddddddddddddddddddddddddddddddd"}'
+  actual: 'forger deleted Fake/Claim.md @ddddddd Revert '
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/B1-forged-notice/packages/webui/tests/chat-replies-browser.test.mjs:212:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat replies: owner-only without a sent field is a definite Revert refusal
+ok 11 - chat replies: owner-only without a sent field is a definite Revert refusal
+  ---
+  duration_ms: 515.280849
+  type: 'test'
+  ...
+1..11
+# tests 11
+# suites 0
+# pass 9
+# fail 2
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6162.536117
@@ -0,0 +1,204 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 484.616144
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/M1-agent-label/packages/webui/tests/chat-replies-browser.test.mjs:82:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+    ... Skipped lines
+
+      [
+        {
+          agent: null,
+          badge: 'canon',
+          changed: false,
+    ...
+        {
+    +     agent: null,
+    -     agent: 'agent-written: acme/scribe',
+          badge: 'supporting',
+          changed: false,
+          href: null,
+          quote: 'green eyes',
+          ref: 'Notes/Eyes.md:9-10 @aaaaaaa',
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  actual:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: ~
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/M1-agent-label/packages/webui/tests/chat-replies-browser.test.mjs:91:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 611.589668
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 482.064897
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 573.34379
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 796.399021
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 638.969425
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 568.777894
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 606.788104
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 596.778582
+  type: 'test'
+  ...
+# Subtest: chat replies: a checked notice-shaped agent message is plain text with no Revert
+ok 10 - chat replies: a checked notice-shaped agent message is plain text with no Revert
+  ---
+  duration_ms: 499.723103
+  type: 'test'
+  ...
+# Subtest: chat replies: owner-only without a sent field is a definite Revert refusal
+ok 11 - chat replies: owner-only without a sent field is a definite Revert refusal
+  ---
+  duration_ms: 586.755654
+  type: 'test'
+  ...
+1..11
+# tests 11
+# suites 0
+# pass 10
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6554.596959
@@ -0,0 +1,218 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 499.554453
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/M1-badges/packages/webui/tests/chat-replies-browser.test.mjs:82:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+    ... Skipped lines
+
+      [
+        {
+          agent: null,
+    +     badge: null,
+    -     badge: 'canon',
+          changed: false,
+          href: null,
+          quote: 'her grey eyes',
+          ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa',
+          rel: null
+    ...
+          agent: null,
+    +     badge: null,
+    -     badge: 'playground',
+          changed: true,
+          href: null,
+          quote: 'a storm',
+          ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa',
+          rel: null
+    ...
+          agent: 'agent-written: acme/scribe',
+    +     badge: null,
+    -     badge: 'supporting',
+          changed: false,
+          href: null,
+          quote: 'green eyes',
+          ref: 'Notes/Eyes.md:9-10 @aaaaaaa',
+          rel: null
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  actual:
+    0:
+      badge: ~
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: ~
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: ~
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/M1-badges/packages/webui/tests/chat-replies-browser.test.mjs:91:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 693.355837
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 576.242264
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 547.841732
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 773.844258
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 474.500226
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 480.389084
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 545.252207
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 533.150946
+  type: 'test'
+  ...
+# Subtest: chat replies: a checked notice-shaped agent message is plain text with no Revert
+ok 10 - chat replies: a checked notice-shaped agent message is plain text with no Revert
+  ---
+  duration_ms: 609.996528
+  type: 'test'
+  ...
+# Subtest: chat replies: owner-only without a sent field is a definite Revert refusal
+ok 11 - chat replies: owner-only without a sent field is a definite Revert refusal
+  ---
+  duration_ms: 568.521082
+  type: 'test'
+  ...
+1..11
+# tests 11
+# suites 0
+# pass 10
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6410.790935
@@ -0,0 +1,216 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 578.622263
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/M2-http-links/packages/webui/tests/chat-replies-browser.test.mjs:82:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+    ... Skipped lines
+
+      [
+        {
+          agent: null,
+          badge: 'canon',
+          changed: false,
+    ...
+          changed: false,
+    +     href: 'http://example.invalid/plain',
+    -     href: null,
+          quote: 'plain http',
+          ref: 'http://example.invalid/plain',
+    +     rel: 'noopener noreferrer'
+    -     rel: null
+        },
+        {
+          agent: null,
+          badge: 'web',
+          changed: false,
+    +     href: 'javascript:window.injected=2',
+    -     href: null,
+          quote: 'script',
+          ref: 'javascript:window.injected=2',
+    +     rel: 'noopener noreferrer'
+    -     rel: null
+        }
+      ]
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  actual:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: 'http://example.invalid/plain'
+      rel: 'noopener noreferrer'
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: 'javascript:window.injected=2'
+      rel: 'noopener noreferrer'
+      quote: 'script'
+      agent: ~
+      changed: false
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/M2-http-links/packages/webui/tests/chat-replies-browser.test.mjs:91:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 674.037314
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 539.674498
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 549.929961
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 733.508052
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 558.882096
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 482.305039
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 589.360501
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 553.483841
+  type: 'test'
+  ...
+# Subtest: chat replies: a checked notice-shaped agent message is plain text with no Revert
+ok 10 - chat replies: a checked notice-shaped agent message is plain text with no Revert
+  ---
+  duration_ms: 511.343958
+  type: 'test'
+  ...
+# Subtest: chat replies: owner-only without a sent field is a definite Revert refusal
+ok 11 - chat replies: owner-only without a sent field is a definite Revert refusal
+  ---
+  duration_ms: 663.342458
+  type: 'test'
+  ...
+1..11
+# tests 11
+# suites 0
+# pass 10
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6557.795577
@@ -0,0 +1,89 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 526.348261
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 678.242429
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 544.685022
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 565.614317
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+not ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 30643.498109
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/M3-missing-file/packages/webui/tests/chat-replies-browser.test.mjs:153:1'
+  failureType: 'hookFailed'
+  error: 'failed running after hook'
+  code: 'ERR_TEST_FAILURE'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 543.239455
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 462.141017
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+not ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 504.908041
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/M3-missing-file/packages/webui/tests/chat-replies-browser.test.mjs:185:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    1 !== 0
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 0
+  actual: 1
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/M3-missing-file/packages/webui/tests/chat-replies-browser.test.mjs:197:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 481.183489
+  type: 'test'
+  ...
+# Subtest: chat replies: a checked notice-shaped agent message is plain text with no Revert
+ok 10 - chat replies: a checked notice-shaped agent message is plain text with no Revert
+  ---
+  duration_ms: 498.770059
+  type: 'test'
+  ...
+# Subtest: chat replies: owner-only without a sent field is a definite Revert refusal
+ok 11 - chat replies: owner-only without a sent field is a definite Revert refusal
+  ---
+  duration_ms: 593.529689
+  type: 'test'
+  ...
+# Interrupted while running: packages/webui/tests/chat-replies-browser.test.mjs at /mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/M3-missing-file/packages/webui/tests/chat-replies-browser.test.mjs:1:1
@@ -0,0 +1,93 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 553.345242
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 671.584475
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 607.441285
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 585.588732
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 723.130889
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 564.849791
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 581.272663
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+not ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 614.17879
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/M3-wrong-commit/packages/webui/tests/chat-replies-browser.test.mjs:185:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    1 !== 0
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 0
+  actual: 1
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/M3-wrong-commit/packages/webui/tests/chat-replies-browser.test.mjs:197:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 583.398144
+  type: 'test'
+  ...
+# Subtest: chat replies: a checked notice-shaped agent message is plain text with no Revert
+ok 10 - chat replies: a checked notice-shaped agent message is plain text with no Revert
+  ---
+  duration_ms: 499.868946
+  type: 'test'
+  ...
+# Subtest: chat replies: owner-only without a sent field is a definite Revert refusal
+ok 11 - chat replies: owner-only without a sent field is a definite Revert refusal
+  ---
+  duration_ms: 591.187308
+  type: 'test'
+  ...
+1..11
+# tests 11
+# suites 0
+# pass 10
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6698.063711
@@ -0,0 +1,95 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 570.514399
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 573.899667
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 599.462257
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 496.486604
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 723.860259
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 500.307511
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 473.78958
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 497.240455
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 567.260206
+  type: 'test'
+  ...
+# Subtest: chat replies: a checked notice-shaped agent message is plain text with no Revert
+ok 10 - chat replies: a checked notice-shaped agent message is plain text with no Revert
+  ---
+  duration_ms: 492.906452
+  type: 'test'
+  ...
+# Subtest: chat replies: owner-only without a sent field is a definite Revert refusal
+not ok 11 - chat replies: owner-only without a sent field is a definite Revert refusal
+  ---
+  duration_ms: 519.51415
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/N1-definite-refusal/packages/webui/tests/chat-replies-browser.test.mjs:219:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+    + actual - expected
+
+    + 'Outcome unknown. Read the library status before trying again; nothing was retried.'
+    - 'Not reverted (owner-only).'
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 'Not reverted (owner-only).'
+  actual: 'Outcome unknown. Read the library status before trying again; nothing was retried.'
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/N1-definite-refusal/packages/webui/tests/chat-replies-browser.test.mjs:223:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+1..11
+# tests 11
+# suites 0
+# pass 10
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6130.725439
@@ -0,0 +1,95 @@
+{
+  "head": "c010dfd856e901f9fef26c34449901b6b5d3cc36",
+  "clear": "sage-4119",
+  "worktreeUnchanged": true,
+  "selected": [
+    "B1-forged-notice",
+    "M1-agent-label",
+    "M1-badges",
+    "M2-http-links",
+    "M3-missing-file",
+    "M3-wrong-commit",
+    "M4-fallback",
+    "M4-problem",
+    "M5-commit-input",
+    "M5-fetch-metadata",
+    "M5-origin",
+    "M5-project-receipt",
+    "M5-send",
+    "M6-duplicate-call",
+    "M7-user-fence",
+    "N1-definite-refusal"
+  ],
+  "results": [
+    {
+      "mutant": "B1-forged-notice",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/B1-forged-notice.tap"
+    },
+    {
+      "mutant": "N1-definite-refusal",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/N1-definite-refusal.tap"
+    },
+    {
+      "mutant": "M1-badges",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M1-badges.tap"
+    },
+    {
+      "mutant": "M1-agent-label",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M1-agent-label.tap"
+    },
+    {
+      "mutant": "M2-http-links",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M2-http-links.tap"
+    },
+    {
+      "mutant": "M3-wrong-commit",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M3-wrong-commit.tap"
+    },
+    {
+      "mutant": "M3-missing-file",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 124,
+      "killed": false,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M3-missing-file.tap"
+    }
+  ]
+}
@@ -0,0 +1,10 @@
+{"mutant": "M3-missing-file", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M3-missing-file.tap"}
+{"mutant": "M4-fallback", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M4-fallback.tap"}
+{"mutant": "M4-problem", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M4-problem.tap"}
+{"mutant": "M5-send", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-send.tap"}
+{"mutant": "M5-project-receipt", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-project-receipt.tap"}
+{"mutant": "M5-commit-input", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-commit-input.tap"}
+{"mutant": "M5-origin", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-origin.tap"}
+{"mutant": "M5-fetch-metadata", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-fetch-metadata.tap"}
+{"mutant": "M6-duplicate-call", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M6-duplicate-call.tap"}
+{"mutant": "M7-user-fence", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M7-user-fence.tap"}
@@ -0,0 +1,7 @@
+{"mutant": "B1-forged-notice", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/B1-forged-notice.tap"}
+{"mutant": "N1-definite-refusal", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/N1-definite-refusal.tap"}
+{"mutant": "M1-badges", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M1-badges.tap"}
+{"mutant": "M1-agent-label", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M1-agent-label.tap"}
+{"mutant": "M2-http-links", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M2-http-links.tap"}
+{"mutant": "M3-wrong-commit", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M3-wrong-commit.tap"}
+{"mutant": "M3-missing-file", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 124, "killed": false, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M3-missing-file.tap"}
@@ -0,0 +1,3 @@
+npm warn deprecated [email protected]: Use your platform's native DOMException instead
+
+added 128 packages in 2s
@@ -0,0 +1,2 @@
+
+added 2 packages in 211ms
@@ -0,0 +1,188 @@
+[
+  {
+    "file": "npm-root.log",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/npm-root.log",
+    "rawSha256": "862418d3d4124871ca5fcaf35e16c318a04e2888da83836751ddfea110efeb06",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "npm-webui.log",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/npm-webui.log",
+    "rawSha256": "9325fac313c872e8d9a567e783f9e0fc443cf1b67d01fa757c84e264b3c53253",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "review-red.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/review-red.tap",
+    "rawSha256": "3e5b386f7c8709fe8c7cb47c96595d1519f73a78fcc89bd19a50189aa7d2f372",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "review-green.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/review-green.tap",
+    "rawSha256": "ab71a12a07c73117642ead8bb1322ab22e4ae4094f27cbdcd1d144f90b79c087",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "editor-build.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/editor-build.tap",
+    "rawSha256": "6e4fb4cbdd36ff817c8246e727f382ada773d4667f314e0a5a187369c2c994ba",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "webui-full.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/webui-full.tap",
+    "rawSha256": "351d2b0b29d70156d774e2efb7839eaaed6fc68218e4211333d1d11c3b5f10c7",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "library-full.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/library-full.tap",
+    "rawSha256": "efd5475b1135285bf717b753e3f9f32a862bfc98d6b949830c7f97037136f92e",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "bus-full.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/bus-full.tap",
+    "rawSha256": "db5d52d312533972816c6dd421b883fd5ecc9e4783e9d7ff3565795d5afa52d6",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "channel-proof.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/channel-proof.tap",
+    "rawSha256": "791262a919fbb5ea870d48ef44c8b6cc41b58319ee808cf83a51c872821c082a",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "gate-summary.json",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/gate-summary.json",
+    "rawSha256": "c87ab2352c0a464b14b79cabe2a75c5309dbd0c8f37a77cc5487b4536b541154",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2/B1-forged-notice.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/B1-forged-notice.tap",
+    "rawSha256": "5b26968bccb36e71a03b27b5108e177ade0fb1a6d8737675738898c37e48b1ad",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2/M1-agent-label.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M1-agent-label.tap",
+    "rawSha256": "b591ca07b9f19193ff241703d36cb37514496c2256d044cab8e1fb0f6ffbd468",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2/M1-badges.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M1-badges.tap",
+    "rawSha256": "ef934b609780a19a55fe6d758824c4efdac97eebd016022f7fe6a217fa119f34",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2/M2-http-links.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M2-http-links.tap",
+    "rawSha256": "0a8e7adeb2d836d3c4d2f1689da90aac5b50be0fdb828ab7957df35172c8a0f5",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2/M3-missing-file.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M3-missing-file.tap",
+    "rawSha256": "93abedbf5f096587255230f3ae2c867ce812c21480227fac4ebbcbb485485aa2",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2/M3-wrong-commit.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M3-wrong-commit.tap",
+    "rawSha256": "caef00e48c17091d27f7d82eb4ff02205220dac8257db5735ca31eb7341ff090",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2/N1-definite-refusal.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/N1-definite-refusal.tap",
+    "rawSha256": "7033ab1ad4d8d4863cebe2b22b21f1a662a18b6b98cfe78c81791b6c7fcf8107",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2/summary.json",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/summary.json",
+    "rawSha256": "85e174a06a0c85b4038c254f80b47d2bddb978351935dd26467d1192366f9570",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2-retry/M3-missing-file.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M3-missing-file.tap",
+    "rawSha256": "80da526cee76c67bcb20f3c9cb523dd4ac7eb5ef0ae6eb6e5a723a2467808d6d",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2-retry/M4-fallback.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M4-fallback.tap",
+    "rawSha256": "248454011e559e602ab0cc95bcbe95ef02f73c214bbc4bca613defba5ff7b5b6",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2-retry/M4-problem.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M4-problem.tap",
+    "rawSha256": "fd8c902209eaf6bd35bf5955092ee9868eacb38d4dc376b999c38fc96acdef4c",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2-retry/M5-commit-input.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-commit-input.tap",
+    "rawSha256": "e3849805310c068fbb943cbeacb79111ea13aaec502e4a6988fd4e00387c6a98",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2-retry/M5-fetch-metadata.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-fetch-metadata.tap",
+    "rawSha256": "5f2c96a1b87c5a9c15291af9bd316f4c48a6a3d3e22a4374b4cc71bac447a496",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2-retry/M5-origin.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-origin.tap",
+    "rawSha256": "49e1c810d04b4fec76a160229ab4dc83cb0375d7f8b0d44ac069e81fb0b93d93",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2-retry/M5-project-receipt.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-project-receipt.tap",
+    "rawSha256": "712506f1fac052c1d871a8e893227b758cf9f0f5a774679a1015913355a8bf8b",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2-retry/M5-send.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-send.tap",
+    "rawSha256": "44ac7828e5393d9c3851d47de750ed5f0ad2bc086d90e6a6077e9576b86baed2",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2-retry/M6-duplicate-call.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M6-duplicate-call.tap",
+    "rawSha256": "4ac6b81d08d43e7dfae129ed8a0a6bb1f93f4a43da62d280c1287ad08b799968",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2-retry/M7-user-fence.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M7-user-fence.tap",
+    "rawSha256": "bcbc30902e4b83ea945832a02fd44f7c9b8fe43046dc04a5d3337d7ab78128e8",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2-retry/summary.json",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/summary.json",
+    "rawSha256": "791cae959f674c664169d757e3e8a4b6a47cc0f0c8876a5ae9be59c2c31a4d62",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-run.log",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-run.log",
+    "rawSha256": "5d45d68a1fa06758f5f6040fcabb62ac04f60dd2728010447040388717ee99ea",
+    "displayCopy": "byte for byte"
+  },
+  {
+    "file": "mutants-retry-run.log",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-retry-run.log",
+    "rawSha256": "54f3885633b8468832bf92709ad186788be14af5ef63ce8162945ae057fbae7f",
+    "displayCopy": "byte for byte"
+  }
+]
@@ -0,0 +1,76 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 531.792852
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 753.297454
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 664.142742
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 529.724858
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 829.621742
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 524.335317
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 584.886616
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 735.402668
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 661.171998
+  type: 'test'
+  ...
+# Subtest: chat replies: a checked notice-shaped agent message is plain text with no Revert
+ok 10 - chat replies: a checked notice-shaped agent message is plain text with no Revert
+  ---
+  duration_ms: 672.740521
+  type: 'test'
+  ...
+# Subtest: chat replies: owner-only without a sent field is a definite Revert refusal
+ok 11 - chat replies: owner-only without a sent field is a definite Revert refusal
+  ---
+  duration_ms: 623.613852
+  type: 'test'
+  ...
+1..11
+# tests 11
+# suites 0
+# pass 11
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 7244.663147
@@ -0,0 +1,131 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 698.471827
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+not ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 602.729245
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:106:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    only the notice has a Revert
+
+    2 !== 1
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 1
+  actual: 2
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:110:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 498.595004
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 593.636624
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 749.382833
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 560.931828
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 565.061041
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 610.320333
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 586.964647
+  type: 'test'
+  ...
+# Subtest: chat replies: a checked notice-shaped agent message is plain text with no Revert
+not ok 10 - chat replies: a checked notice-shaped agent message is plain text with no Revert
+  ---
+  duration_ms: 569.041184
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:210:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+    + actual - expected
+
+    + 'forger deleted Fake/Claim.md @ddddddd Revert '
+    - '{"notice":"library-write","op":"delete","path":"Fake/Claim.md","commit":"dddddddddddddddddddddddddddddddddddddddd"}'
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: '{"notice":"library-write","op":"delete","path":"Fake/Claim.md","commit":"dddddddddddddddddddddddddddddddddddddddd"}'
+  actual: 'forger deleted Fake/Claim.md @ddddddd Revert '
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:212:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat replies: owner-only without a sent field is a definite Revert refusal
+not ok 11 - chat replies: owner-only without a sent field is a definite Revert refusal
+  ---
+  duration_ms: 589.707404
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:219:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+    + actual - expected
+
+    + 'Outcome unknown. Read the library status before trying again; nothing was retried.'
+    - 'Not reverted (owner-only).'
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 'Not reverted (owner-only).'
+  actual: 'Outcome unknown. Read the library status before trying again; nothing was retried.'
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:223:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+1..11
+# tests 11
+# suites 0
+# pass 8
+# fail 3
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6755.602249
@@ -0,0 +1,155 @@
+{
+  "rawRoot": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2",
+  "logs": [
+    {
+      "path": "evidence/browser-final.tap",
+      "rawSha256": "4e6d5874786aa5d407b59d0b701652d419d0fecda5402ede40f52b313def12b0",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/browser-final2.tap",
+      "rawSha256": "194b3150e59868aab023d9ccfc75c69b82e43afba38c1b12e87a1fb3d68fe821",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/browser-green.tap",
+      "rawSha256": "030d7a5c9af70d4a7ade177906fb971b29fa4cf1fc5efd39f35643ed1969cd01",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/browser-red.tap",
+      "rawSha256": "db00bee89b4353efe7d324b17417347b30964f79ad4469a5dc98c6d125691f55",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/channel-proof.tap",
+      "rawSha256": "cb7c0398af2a2a0e7cae24ee2c8167601cbf7e3f9cf3ed7479b2a6ef65f5da8a",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/library-full.tap",
+      "rawSha256": "5447e3fce497a0dfb03ddd3eb2795dc2a179554f794e4c37458219c70736a645",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mapping-red.tap",
+      "rawSha256": "8ca7310e46df2d35fa96e3aba378721ad388dce41f003ee133b684eeb7eaf245",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-attempt1/M1-agent-label.tap",
+      "rawSha256": "db7ab1c64bc05b719e5164ed4ce1dd8b79ad53309d9b8e3e1ca0cc8867bca70f",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-attempt1/M1-badges.tap",
+      "rawSha256": "08351b9061351812008ebd7067a9aed24a9e5386d8f6284fb44ae0f59c8f2eca",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-attempt1/M2-http-links.tap",
+      "rawSha256": "69921707c219d19fb2c33a3995268b6442d783ec702050b32f78d8d2db6fb581",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-attempt1/M3-wrong-commit.tap",
+      "rawSha256": "fe9fb027efae26799e2dfac539e0986402cefe806ca31479f52420e67a8df423",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M1-agent-label.tap",
+      "rawSha256": "afbab60cbc12348c4d0c4be1a8c4590dd157c71f9ffc7375bbde82facb9868bb",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M1-badges.tap",
+      "rawSha256": "3bb9fb9dcf74a398934d6de48c2ca99ab2eab618fb944297b3d7db00eec0e69f",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M2-http-links.tap",
+      "rawSha256": "8909921fcf602fcafa94edd19c1167a8f91ed970a3e649110e3503836690e567",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M3-missing-file.tap",
+      "rawSha256": "3fd2749ea5bc4245f7d49f585b82eae60f61ed150ab4dd22e8148a1e9467c8c7",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M3-wrong-commit.tap",
+      "rawSha256": "85696c155f0a2844ee903c8fb38cab0a0fb6b0610c8b9ee8aa77a08cb6012ca2",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M4-fallback.tap",
+      "rawSha256": "6f59f2845e0130d4d2fe1cb4aa7a435502f6043e11ed4efd67339c12e986103a",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M4-problem.tap",
+      "rawSha256": "61ab08b823eb08cbb9c9eeaac82b297ea5d1272bb5dc64e9598734688b55eb80",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M5-commit-input.tap",
+      "rawSha256": "b703ee5ca47e5c64749aab3edfb5ae2e085367921ffa75337f4f0e5c7b3dc404",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M5-fetch-metadata.tap",
+      "rawSha256": "6951725340e4d74764552e7e406e0fc4bafeec35172de56d13bca852b92daa1a",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M5-origin.tap",
+      "rawSha256": "95fcb5a92e82fa7de2972fd8f78c4f0f6d1c5f49885123e01fb1b69c3b62ba21",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M5-project-receipt.tap",
+      "rawSha256": "a86806a189ef73f61ddd88479336321964eadef0793c7b45da6573ccd3e38801",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M5-send.tap",
+      "rawSha256": "4cce523356a3e2041197156412eb35088f8b6d38fcceca2d9b76b6098ad17627",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M6-duplicate-call.tap",
+      "rawSha256": "6dda962389fbc7379ac7e7bc79cc24b68db00d4f9bb649ab73e75eaa87a5da00",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M7-user-fence.tap",
+      "rawSha256": "abec36c65c3ece6e7d0c4dfd41eede62c9a585f07b3ed4cb3b8d05f0dbabaed3",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/render-green.tap",
+      "rawSha256": "98463ac3d1262f84758def8bbdc27c46fa7c674bb8e8c20b9c752083163d0864",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/render-red.tap",
+      "rawSha256": "03645c7a5ba0c3d285e58e1d6fd05dc58a1174b463a258b01bcf258b2141a85e",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/routes-final.tap",
+      "rawSha256": "f2b58a97c301dc9e57458d82785bd50debb2254df5d411d8e8c4e6b9c0aa00d2",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/routes-green.tap",
+      "rawSha256": "c34451a0eef5f82fe6ddcbbf370179d8e8a14e36168175bdeff5b32e2072e9d6",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/routes-red.tap",
+      "rawSha256": "5ca5bafe2465209128508e5459f4826c34d00de86d1e79671196dc4e5c57f874",
+      "normalization": "trailing whitespace removed from display copy"
+    }
+  ]
+}
@@ -0,0 +1,17 @@
+✔ free text renders as itself with no citations (1.332106ms)
+✔ a cited reply renders its text, then each cite with the badge from the check result (0.493062ms)
+✔ a parsed body renders as its string does (0.2706ms)
+✔ without a check result a path cite has no badge, no label and is never changed (0.175324ms)
+✔ the label and the badge come from the check result only, never from a bad entry (0.171275ms)
+✔ a web cite is a link only for https (0.254363ms)
+✔ a write notice renders its fixed line (0.201038ms)
+✔ a body without the reply or notice shape is free text: the whole body, no citations (0.315846ms)
+✔ an empty citations list is a reply with no cites (0.167552ms)
+ℹ tests 9
+ℹ suites 0
+ℹ pass 9
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 70.188818
@@ -0,0 +1,17 @@
+✔ free text renders as itself with no citations (1.211164ms)
+✔ a cited reply renders its text, then each cite with the badge from the check result (0.457937ms)
+✔ a parsed body renders as its string does (0.255138ms)
+✔ without a check result a path cite has no badge, no label and is never changed (0.189285ms)
+✔ the label and the badge come from the check result only, never from a bad entry (0.162195ms)
+✔ a web cite is a link only for https (0.231665ms)
+✔ a write notice renders its fixed line (0.167596ms)
+✔ a body without the reply or notice shape is free text: the whole body, no citations (0.283804ms)
+✔ an empty citations list is a reply with no cites (0.145774ms)
+ℹ tests 9
+ℹ suites 0
+ℹ pass 9
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 73.226696
@@ -0,0 +1,88 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 18.873338
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 7.061714
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 6.45503
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.964122
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 5.745801
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.815134
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 7.105984
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 2.002948
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.708324
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.553573
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 1.371025
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.586864
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 1.226995
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 13
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 177.384993
@@ -0,0 +1,20 @@
+✔ a signed-in same-origin revert reaches exactly one library.revert and returns the new commit (19.266366ms)
+✔ a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata (7.415028ms)
+✔ a revert takes a project and a 40-hex commit, nothing else, before the bus is asked (6.176121ms)
+✔ a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal (7.325625ms)
+✔ a revert whose answer is lost or unusable is reported unknown and is never retried (5.0635ms)
+✔ the status read takes one project query and answers the bus result for that project (3.008847ms)
+✔ a status answer for another project or of the wrong shape is refused; a refusal keeps its status (6.314096ms)
+✔ the status read needs no send; a read-only Console still has no revert (1.440122ms)
+✔ library routes are the owner's: a granted user is refused them, and the tester never reverts (0.563979ms)
+✔ the page gets the one library renderer, byte for byte, as a JavaScript module (1.180551ms)
+✔ a revert receipt for another project is unknown and is never retried (1.12255ms)
+✔ a granted-user HTTP session cannot reach owner library callbacks (1.351581ms)
+ℹ tests 12
+ℹ suites 0
+ℹ pass 12
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 182.202771
@@ -0,0 +1,76 @@
+✔ a signed-in same-origin revert reaches exactly one library.revert and returns the new commit (18.853567ms)
+✔ a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata (6.491576ms)
+✔ a revert takes a project and a 40-hex commit, nothing else, before the bus is asked (5.647113ms)
+✔ a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal (6.08423ms)
+✔ a revert whose answer is lost or unusable is reported unknown and is never retried (5.445934ms)
+✖ the status read takes one project query and answers the bus result for that project (3.470803ms)
+✖ a status answer for another project or of the wrong shape is refused; a refusal keeps its status (5.42219ms)
+✔ the status read needs no send; a read-only Console still has no revert (1.428304ms)
+✔ library routes are the owner's: a granted user is refused them, and the tester never reverts (0.509039ms)
+✔ the page gets the one library renderer, byte for byte, as a JavaScript module (1.123365ms)
+✖ a revert receipt for another project is unknown and is never retried (1.209291ms)
+✔ a granted-user HTTP session cannot reach owner library callbacks (1.398731ms)
+ℹ tests 12
+ℹ suites 0
+ℹ pass 9
+ℹ fail 3
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 198.061254
+
+✖ failing tests:
+
+test at packages/webui/tests/library-routes.test.mjs:100:1
+✖ the status read takes one project query and answers the bus result for that project (3.470803ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+
+  403 !== 405
+
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/library-routes.test.mjs:107:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 403,
+    expected: 405,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at packages/webui/tests/library-routes.test.mjs:111:1
+✖ a status answer for another project or of the wrong shape is refused; a refusal keeps its status (5.42219ms)
+  AssertionError [ERR_ASSERTION]: project-not-declared
+
+  400 !== 502
+
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/library-routes.test.mjs:119:12)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: 400,
+    expected: 502,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at packages/webui/tests/library-routes.test.mjs:145:1
+✖ a revert receipt for another project is unknown and is never retried (1.209291ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+
+  200 !== 503
+
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/library-routes.test.mjs:148:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 200,
+    expected: 503,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
@@ -0,0 +1,170 @@
+diff --git a/packages/bus/tests/channel-proof.test.mjs b/packages/bus/tests/channel-proof.test.mjs
+index ba0179832..435d8fa2d 100644
+--- a/packages/bus/tests/channel-proof.test.mjs
+++ b/packages/bus/tests/channel-proof.test.mjs
+@@ -11,0 +12,2 @@
+// Row 225 (C2-10b) re-pins webui bus.mjs for one STATUS entry, library-revert-not-agent: 409; no proof
+// or transport change.
+@@ -32 +34 @@ const baselines = {
+- "packages/webui/src/bus.mjs": "604092cb706b152d458f299ff1071f6cd488774629012f96b672f7e9a16c0b2c",
+ "packages/webui/src/bus.mjs": "9f33e9ca4feb7265ae33fd3ddf0ead0b75375d07ecbe9d8e55c618d29edea658",
+diff --git a/packages/library/tests/render.test.mjs b/packages/library/tests/render.test.mjs
+index b07e26d25..9c861bfe9 100644
+--- a/packages/library/tests/render.test.mjs
+++ b/packages/library/tests/render.test.mjs
+@@ -3 +3 @@ import assert from 'node:assert/strict';
+-import { renderItems, UNREADABLE } from '../src/index.mjs';
+import { renderReply } from '../src/index.mjs';
+@@ -4,0 +5 @@ import { renderItems, UNREADABLE } from '../src/index.mjs';
+// Row 225 (C2-10b): renderReply replaces renderItems (design 7.4, the reply schema of 5.2).
+@@ -6,6 +7,12 @@ const A = 'a'.repeat(40), B = 'b'.repeat(40);
+-const cite = (path, lines, quote, commit = A) => ({ path, commit, lines, quote });
+-const options = {
+-  scopeOf: path => path.includes('/Playground/') ? 'playground' : path.endsWith('.md') ? 'canon' : undefined,
+-  changed: ({ path, commit }) => path === 'Book One/Characters/Mara Vell.md' && commit === A,
+-};
+-const render = items => renderItems(JSON.stringify({ items }), options);
+const cite = (path, lines, quote, commit = A, extra = {}) => ({ path, commit, lines, quote, ...extra });
+const web = (url, quote = 'spring tides') => ({ url, quote });
+const reply = (text, citations) => JSON.stringify({ text, citations });
+const CITED = reply("Mara's eyes are grey in chapter 3.", [
+  cite('Book One/Chapters/Chapter 03.md', [41, 41], 'her grey eyes', A, { as: 'canon' }),
+  cite('Book One/Playground/What If.md', [5, 6], 'a storm', B),
+  cite('Notes/Eyes.md', [9, 10], 'green eyes'),
+  web('https://example.invalid/tides'),
+]);
+const CHECK = { citations: [{ scope: 'canon', agent: null }, { scope: 'playground', agent: null },
+  { scope: 'supporting', agent: 'acme/scribe' }, { scope: 'web', agent: null }] };
+const changed = ({ path, commit }) => path === 'Notes/Eyes.md' && commit === A;
+@@ -13,21 +20,4 @@ const render = items => renderItems(JSON.stringify({ items }), options);
+-// One snapshot per item kind: the plain text both channels show.
+-const SNAPSHOTS = {
+-  fact: [{ kind: 'fact', text: 'Tomas is the ferryman.', cites: [cite('Book One/Characters/Tomas.md', [3, 3], 'the ferryman', B)] }],
+-  finding: [{ kind: 'finding', text: 'Eye colour differs.', cites: [cite('Book One/Chapters/Chapter 01.md', [41, 41], 'her grey eyes'),
+-    cite('Book One/Characters/Mara Vell.md', [9, 10], 'green eyes')] }],
+-  correction: [{ kind: 'correction', text: 'Chapter 1 says grey.', from: 'green eyes', to: 'grey eyes',
+-    cites: [cite('Book One/Characters/Mara Vell.md', [9, 9], 'green eyes', B)] }],
+-  question: [{ kind: 'question', text: 'Is the harbor north of the town?', cites: [cite('Book One/Places/Harbor Town.md', [2, 4], 'the harbor', B)] }],
+-  idea: [{ kind: 'idea', text: 'A storm could close the harbor.', cites: [cite('Book One/Playground/What If.md', [5, 5], 'a storm', B),
+-    { url: 'https://example.invalid/tides', quote: 'spring tides' }] }],
+-};
+-const EXPECTED = {
+-  fact: '1. Fact: Tomas is the ferryman.\n   [canon] Book One/Characters/Tomas.md:3 @bbbbbbb "the ferryman"',
+-  finding: '1. Finding: Eye colour differs.\n   [canon] Book One/Chapters/Chapter 01.md:41 @aaaaaaa "her grey eyes"\n'
+-    + '   [canon] Book One/Characters/Mara Vell.md:9-10 @aaaaaaa "green eyes" (changed since)',
+-  correction: '1. Correction: Chapter 1 says grey.\n   From: "green eyes"\n   To: "grey eyes"\n'
+-    + '   [canon] Book One/Characters/Mara Vell.md:9 @bbbbbbb "green eyes"',
+-  question: '1. Question: Is the harbor north of the town?\n   [canon] Book One/Places/Harbor Town.md:2-4 @bbbbbbb "the harbor"',
+-  idea: '1. Idea: A storm could close the harbor.\n   [playground] Book One/Playground/What If.md:5 @bbbbbbb "a storm"\n'
+-    + '   [web] https://example.invalid/tides "spring tides"',
+-};
+test('free text renders as itself with no citations', () => {
+  for (const body of ['Grey, in chapter 3.', '', '"a JSON string"', '[1, 2]', '42', 'null'])
+    assert.deepEqual(renderReply(body, { check: CHECK }), { kind: 'text', text: body, plain: body });
+});
+@@ -35,8 +25,15 @@ const EXPECTED = {
+-for (const kind of Object.keys(SNAPSHOTS)) {
+-  test(`renderItems snapshot: ${kind}`, () => {
+-    const out = render(SNAPSHOTS[kind]);
+-    assert.equal(out.kind, 'items');
+-    assert.equal(out.text, EXPECTED[kind]);
+-    assert.equal(out.items[0].kind, kind);
+-  });
+-}
+test('a cited reply renders its text, then each cite with the badge from the check result', () => {
+  const out = renderReply(CITED, { check: CHECK, changed });
+  assert.equal(out.kind, 'reply');
+  assert.equal(out.text, "Mara's eyes are grey in chapter 3.");
+  assert.deepEqual(out.citations.map(c => c.badge), ['canon', 'playground', 'supporting', 'web']);
+  assert.equal(out.plain, "Mara's eyes are grey in chapter 3.\n"
+    + '   [canon] Book One/Chapters/Chapter 03.md:41 @aaaaaaa "her grey eyes"\n'
+    + '   [playground] Book One/Playground/What If.md:5-6 @bbbbbbb "a storm"\n'
+    + '   [supporting] Notes/Eyes.md:9-10 @aaaaaaa "green eyes" (agent-written: acme/scribe) (changed since)\n'
+    + '   [web] https://example.invalid/tides "spring tides"');
+  assert.deepEqual(out.citations[0], { badge: 'canon', path: 'Book One/Chapters/Chapter 03.md', commit: A, lines: [41, 41],
+    ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa', quote: 'her grey eyes', canon: true, agent: null, changed: false });
+  assert.deepEqual(out.citations[3], { badge: 'web', url: 'https://example.invalid/tides', link: 'https://example.invalid/tides',
+    ref: 'https://example.invalid/tides', quote: 'spring tides', agent: null, changed: false });
+});
+@@ -44,6 +41,2 @@ for (const kind of Object.keys(SNAPSHOTS)) {
+-test('renderItems numbers several items and takes a parsed body as well as a string', () => {
+-  const items = [...SNAPSHOTS.fact, ...SNAPSHOTS.question];
+-  const out = renderItems({ items }, options);
+-  assert.equal(out.text, `${EXPECTED.fact}\n${EXPECTED.question.replace(/^1\./, '2.')}`);
+-  assert.deepEqual(out.items[1].cites[0], { badge: 'canon', path: 'Book One/Places/Harbor Town.md', commit: B, lines: [2, 4],
+-    ref: 'Book One/Places/Harbor Town.md:2-4 @bbbbbbb', quote: 'the harbor', changed: false });
+test('a parsed body renders as its string does', () => {
+  assert.deepEqual(renderReply(JSON.parse(CITED), { check: CHECK, changed }), renderReply(CITED, { check: CHECK, changed }));
+@@ -52,4 +45,4 @@ test('renderItems numbers several items and takes a parsed body as well as a str
+-test('without options a path cite has no badge and is never marked changed', () => {
+-  assert.equal(renderItems({ items: SNAPSHOTS.finding }).text,
+-    '1. Finding: Eye colour differs.\n   Book One/Chapters/Chapter 01.md:41 @aaaaaaa "her grey eyes"\n'
+-    + '   Book One/Characters/Mara Vell.md:9-10 @aaaaaaa "green eyes"');
+test('without a check result a path cite has no badge, no label and is never changed', () => {
+  const out = renderReply(CITED);
+  assert.deepEqual(out.citations.map(c => [c.badge, c.agent, c.changed]),
+    [[null, null, false], [null, null, false], [null, null, false], ['web', null, false]]);
+@@ -58,6 +51,6 @@ test('without options a path cite has no badge and is never marked changed', ()
+-const NOTICE_SNAPSHOTS = { 'no-cited-answer': 'No cited answer', 'no-answer': 'No answer', 'turn-failed': 'The turn failed' };
+-for (const [notice, text] of Object.entries(NOTICE_SNAPSHOTS)) {
+-  test(`renderItems snapshot: notice ${notice}`, () => {
+-    assert.deepEqual(renderItems(JSON.stringify({ items: [], notice }), options), { kind: 'notice', notice, text });
+-  });
+-}
+test('the label and the badge come from the check result only, never from a bad entry', () => {
+  const bad = { citations: [{ scope: 'web', agent: '' }, { scope: 'story', agent: 7 }, null, { scope: 'canon', agent: 'x/y' }] };
+  const out = renderReply(CITED, { check: bad });
+  // A path cite can't be web; a url cite is web by its shape whatever the check says, and never agent-written.
+  assert.deepEqual(out.citations.map(c => [c.badge, c.agent]), [[null, null], [null, null], [null, null], ['web', null]]);
+});
+@@ -65,14 +58,8 @@ for (const [notice, text] of Object.entries(NOTICE_SNAPSHOTS)) {
+-test('a body without the reply shape shows a fixed line and none of its text', () => {
+-  const secret = 'free prose the guard would refuse';
+-  const bodies = [secret, JSON.stringify(secret), '{"items": [], "notice": "other"}', JSON.stringify({ items: [], notice: 'no-answer', extra: secret }),
+-    JSON.stringify({ items: [] }), JSON.stringify({ items: [{ kind: 'story', text: secret, cites: [] }] }),
+-    JSON.stringify({ items: [{ kind: 'fact', text: secret }] }), JSON.stringify({ items: SNAPSHOTS.fact, prose: secret }),
+-    JSON.stringify({ items: [{ kind: 'correction', text: secret, cites: [] }] }),
+-    JSON.stringify({ items: [{ kind: 'fact', text: secret, cites: [cite('a.md', [2, 1], 'q')] }] }),
+-    JSON.stringify({ items: [{ kind: 'fact', text: secret, cites: [{ path: 'a.md', commit: 'abc', lines: [1, 1], quote: 'q' }] }] }),
+-    JSON.stringify({ items: [{ kind: 'fact', text: secret, cites: [{ url: 'https://x.invalid', path: 'a.md', quote: 'q' }] }] }),
+-    null, 42, '[]'];
+-  for (const body of bodies) {
+-    const out = renderItems(body, options);
+-    assert.deepEqual(out, { kind: 'unreadable', text: UNREADABLE }, String(body));
+-    assert.ok(!JSON.stringify(out).includes(secret));
+test('a web cite is a link only for https', () => {
+  const urls = { 'https://example.invalid/a': 'https://example.invalid/a', 'http://example.invalid/a': null,
+    'javascript:alert(1)': null, 'JAVASCRIPT:alert(1)': null, 'data:text/html,x': null, 'not a url': null, '//example.invalid': null };
+  for (const [url, link] of Object.entries(urls)) {
+    const out = renderReply(reply('t', [web(url)]));
+    assert.equal(out.kind, 'reply', url);
+    assert.equal(out.citations[0].link, link, url);
+    assert.equal(out.citations[0].ref, url);
+@@ -80,0 +68,27 @@ test('a body without the reply shape shows a fixed line and none of its text', (
+
+test('a write notice renders its fixed line', () => {
+  const body = op => JSON.stringify({ notice: 'library-write', op, path: 'Notes/Eyes.md', commit: B });
+  assert.deepEqual(renderReply(body('write'), { name: 'Scribe' }),
+    { kind: 'notice', op: 'write', path: 'Notes/Eyes.md', commit: B, text: 'Scribe wrote Notes/Eyes.md @bbbbbbb', plain: 'Scribe wrote Notes/Eyes.md @bbbbbbb' });
+  assert.equal(renderReply(body('delete'), { name: 'Scribe' }).text, 'Scribe deleted Notes/Eyes.md @bbbbbbb');
+  assert.equal(renderReply(body('write')).text, 'An agent wrote Notes/Eyes.md @bbbbbbb');
+});
+
+test('a body without the reply or notice shape is free text: the whole body, no citations', () => {
+  const bodies = [
+    JSON.stringify({ text: 't' }), JSON.stringify({ citations: [] }), JSON.stringify({ text: 1, citations: [] }),
+    JSON.stringify({ text: 't', citations: [], extra: 1 }), JSON.stringify({ items: [] }),
+    reply('t', [cite('a.md', [2, 1], 'q')]), reply('t', [cite('a.md', [0, 1], 'q')]), reply('t', [cite('a.md', [1], 'q')]),
+    reply('t', [{ path: 'a.md', commit: 'abc', lines: [1, 1], quote: 'q' }]), reply('t', [cite('a.md', [1, 1], 'q', A, { as: 'playground' })]),
+    reply('t', [cite('a.md', [1, 1], 'q', A, { scope: 'canon' })]), reply('t', [{ url: 'https://x.invalid', path: 'a.md', quote: 'q' }]),
+    reply('t', [{ url: 'https://x.invalid' }]), reply('t', [{ url: 'https://x.invalid', quote: 'q', agent: 'x/y' }]),
+    JSON.stringify({ notice: 'library-write', op: 'move', path: 'a.md', commit: A }),
+    JSON.stringify({ notice: 'library-write', op: 'write', path: 'a.md', commit: 'abc' }),
+    JSON.stringify({ notice: 'library-write', op: 'write', path: 'a.md', commit: A, by: 'x' }),
+  ];
+  for (const body of bodies) assert.deepEqual(renderReply(body, { check: CHECK }), { kind: 'text', text: body, plain: body }, body);
+});
+
+test('an empty citations list is a reply with no cites', () => {
+  assert.deepEqual(renderReply(reply('Grey.', [])), { kind: 'reply', text: 'Grey.', citations: [], plain: 'Grey.' });
+});
@@ -0,0 +1,13 @@
+6bdaf870be3d8d03a68eb03f5f6916150bb1b3db134ffbe84018e91d47e6434d  packages/bus/tests/channel-proof.test.mjs
+0385fc49b445ff730021eb11c20b29027631e0d27350e4591d5a0936ffbdccf6  packages/library/README.md
+653ff444ba66cb73e1ca4df1f6037f15a2ec7d3d009cf614a0dc51deabda4b50  packages/library/src/index.mjs
+dfcc9f271afc7afdab908395a7f3c402100fa89b4994b20d5bcae3140d5c335e  packages/library/src/render.mjs
+f3c213f3b0bd080d0bc5837f741a29e324acb91cf0c27144dee08a4113262210  packages/library/tests/render.test.mjs
+9f33e9ca4feb7265ae33fd3ddf0ead0b75375d07ecbe9d8e55c618d29edea658  packages/webui/src/bus.mjs
+f1a0c9a55b1ae933e205c7e2b9753afe0c2f1fc9b0faa2cf18765396f99ac8dd  packages/webui/src/cli.mjs
+bf49a22147be0535076640d20149116a744dad9b0b32dd667ee297a061d56134  packages/webui/src/console-bus.mjs
+793e7dd9edbe5a55c2deab3c8aef4fbd5b4c838e132e2ac9294043c7176ec6f7  packages/webui/src/public/chat.css
+af3a6f382e0d40cf2b28c31db7cb58ba775f1e242651ba42c7426bda99dc0d89  packages/webui/src/public/chat.js
+6412fe34bc640433e9cf7610f65d3574a3415c934354d8cb52e056793a81948f  packages/webui/src/serve.mjs
+f191752f867a112c867ca24268f70aa99ca0903c9208f76bc4bb4c1587cb55df  packages/webui/tests/chat-replies-browser.test.mjs
+df4ff385ac4ca8244ffa00faf82fcca1f4fcdac8da02a4f4d71233d4df8e1157  packages/webui/tests/library-routes.test.mjs
@@ -0,0 +1,13 @@
+0457ba48705ce47c6c5777adbbb818c5012dc82fe4ccdaf0b56ee8ca025bd355  packages/bus/tests/channel-proof.test.mjs
+495e737525274c49f31523aea34983345b7f8f09eb4e982603bb51d8ddf7cda5  packages/library/README.md
+45dbeed86fb8940050c2dc600bd78042e1f14e8b385f79bf6f2efda07ec35eeb  packages/library/src/index.mjs
+bfc3de029d3c8f0dcc96c90fde30d6da58bbb5b72d8f13e3f536c0d735c73ca5  packages/library/src/render.mjs
+f3c213f3b0bd080d0bc5837f741a29e324acb91cf0c27144dee08a4113262210  packages/library/tests/render.test.mjs
+4ebf6c2b5d71c23d85cbde83f69aa671058dc2195c9ae4bdda624f6940729d1b  packages/webui/src/bus.mjs
+f1a0c9a55b1ae933e205c7e2b9753afe0c2f1fc9b0faa2cf18765396f99ac8dd  packages/webui/src/cli.mjs
+bf49a22147be0535076640d20149116a744dad9b0b32dd667ee297a061d56134  packages/webui/src/console-bus.mjs
+793e7dd9edbe5a55c2deab3c8aef4fbd5b4c838e132e2ac9294043c7176ec6f7  packages/webui/src/public/chat.css
+52828c03b618e3754f0e59a395f4bcc16d1c9d8db01d403406a67ca0934f0188  packages/webui/src/public/chat.js
+4ee53400b0e433833ce1cb641b93f1aa346af548e8c710b5884ea11c4c173342  packages/webui/src/serve.mjs
+3d20b683150fdfa3fe6898372a46d92bbe60f121759edaaca538ee0542a0886b  packages/webui/tests/chat-replies-browser.test.mjs
+df4ff385ac4ca8244ffa00faf82fcca1f4fcdac8da02a4f4d71233d4df8e1157  packages/webui/tests/library-routes.test.mjs
@@ -0,0 +1,106 @@
+#!/usr/bin/env python3
+"""Run row225 mutants in disposable snapshots, only on Sage CLEAR.
+
+Commit the tested candidate first. Never change the worktree or shared dependencies.
+A timeout, import failure or process failure is not a mutation kill.
+"""
+import argparse
+import hashlib
+import json
+import os
+from pathlib import Path
+import shutil
+import subprocess
+import tarfile
+import tempfile
+
+BROWSER = 'packages/webui/tests/chat-replies-browser.test.mjs'
+ROUTES = 'packages/webui/tests/library-routes.test.mjs'
+CHAT = 'packages/webui/src/public/chat.js'
+SERVE = 'packages/webui/src/serve.mjs'
+RENDER = 'packages/library/src/render.mjs'
+MUTANTS = [
+    ('B1-forged-notice', RENDER, 'options.check == null ? notice(value, options.name) : null', 'notice(value, options.name)', BROWSER),
+    ('N1-definite-refusal', CHAT, 'data?.sent === false || res.status >= 400 && res.status < 500', 'data?.sent === false', BROWSER),
+    ('M1-badges', RENDER, 'badge: scope, path:', 'badge: null, path:', BROWSER),
+    ('M1-agent-label', RENDER, 'canon: c.canon, agent,', 'canon: c.canon, agent: null,', BROWSER),
+    ('M2-http-links', RENDER, "new URL(url).protocol === 'https:' ? url : null", 'url', BROWSER),
+    ('M3-wrong-commit', CHAT, 'e.file !== e.last', 'cite.commit !== e.last', BROWSER),
+    ('M3-missing-file', CHAT, "SHA.test(e?.file ?? '') && SHA.test(e?.last ?? '')", "SHA.test(e?.last ?? '')", BROWSER),
+    ('M4-fallback', CHAT, 'Array.isArray(limits.fallback) ? limits.fallback.filter', 'Array.isArray(v.replyLimitsFallback) ? v.replyLimitsFallback.filter', BROWSER),
+    ('M4-problem', CHAT, "if (CODE.test(limits.problem ?? '')) parts.push(`<code>${txt(limits.problem)}</code>`);", '', BROWSER),
+    ('M5-send', SERVE, 'if (!send || !libraryRevert || !named)', 'if (!libraryRevert || !named)', ROUTES),
+    ('M5-project-receipt', SERVE, 'result.project !== value.project || ', '', ROUTES),
+    ('M5-commit-input', SERVE, '!COMMIT.test(value.commit)', 'false', ROUTES),
+    ('M5-origin', SERVE, "if (one(req, 'origin') !== ownOrigin(preview)) return refuse(403, 'cross-origin request refused', 'a revert needs the Console\\'s own Origin');", '', ROUTES),
+    ('M5-fetch-metadata', SERVE, "if (one(req, 'sec-fetch-site') !== 'same-origin') return refuse(403, 'cross-site request refused', 'a revert needs same-origin Fetch Metadata');", '', ROUTES),
+    ('M6-duplicate-call', SERVE, 'result = await libraryRevert({ project: value.project, commit: value.commit });', 'result = await libraryRevert({ project: value.project, commit: value.commit }); await libraryRevert({ project: value.project, commit: value.commit });', ROUTES),
+    ('M7-user-fence', SERVE, "if (path === '/api/chat' || path.startsWith('/api/chat/')) return true;", "if (path.startsWith('/api/library/')) return true; if (path === '/api/chat' || path.startsWith('/api/chat/')) return true;", ROUTES),
+]
+
+
+def digest(path):
+    return hashlib.sha256(path.read_bytes()).hexdigest()
+
+
+def main():
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument('--clear', required=True, help='Sage CLEAR authorizing this run')
+    parser.add_argument('--output', required=True, type=Path)
+    parser.add_argument('--only', help='Comma-separated mutant names for a bounded review delta')
+    args = parser.parse_args()
+    names = set(args.only.split(',')) if args.only else {m[0] for m in MUTANTS}
+    if names - {m[0] for m in MUTANTS}:
+        raise SystemExit('Unknown mutant name')
+    selected = [m for m in MUTANTS if m[0] in names]
+    repo = Path(subprocess.check_output(['git', 'rev-parse', '--show-toplevel'], text=True).strip())
+    if subprocess.check_output(['git', 'status', '--porcelain', '--', 'packages'], text=True).strip():
+        raise SystemExit('Commit tested packages first: snapshot must match candidate.')
+    dependency = repo / 'node_modules'
+    if dependency.is_symlink() or not dependency.is_dir():
+        raise SystemExit('Install dependencies locally in the worktree; no canonical dependency link.')
+    head = subprocess.check_output(['git', 'rev-parse', 'HEAD'], text=True).strip()
+    before = {p: digest(repo / p) for p in [CHAT, SERVE, RENDER]}
+    args.output.mkdir(parents=True, exist_ok=True)
+    results = []
+    with tempfile.TemporaryDirectory(prefix='mosaic-row225-mutants-') as directory:
+        scratch = Path(directory)
+        archive = scratch / 'candidate.tar'
+        with archive.open('wb') as stream:
+            subprocess.run(['git', 'archive', 'HEAD', 'packages', 'roles', 'contracts', 'tasks', 'missions', 'package.json', 'RELEASE'], stdout=stream, check=True)
+        for name, target, old, new, test in selected:
+            tree = scratch / name
+            tree.mkdir()
+            with tarfile.open(archive) as bundle:
+                bundle.extractall(tree, filter='data')
+            (tree / 'node_modules').symlink_to((repo / 'node_modules').resolve(), target_is_directory=True)
+            path = tree / target
+            source = path.read_text()
+            hits = source.count(old)
+            if hits != 1:
+                raise SystemExit(f'{name}: expected one anchor, found {hits}')
+            path.write_text(source.replace(old, new, 1))
+            command = ['timeout', '-k', '10', '240' if test == BROWSER else '120', 'node', '--test', '--test-reporter=tap', '--test-concurrency=1', '--test-timeout=30000', test]
+            run = subprocess.run(command, cwd=tree, stdout=subprocess.PIPE, stderr=subprocess.STDOUT, text=True, env=os.environ)
+            log = args.output / f'{name}.tap'
+            log.write_text(run.stdout)
+            path.write_text(source)
+            restored = digest(path) == hashlib.sha256(source.encode()).hexdigest()
+            worktree_clean = before == {p: digest(repo / p) for p in before}
+            if not restored or not worktree_clean:
+                raise SystemExit(f'{name}: restore/hash check failed')
+            killed = run.returncode == 1 and 'ERR_ASSERTION' in run.stdout and 'not ok ' in run.stdout
+            results.append({'mutant': name, 'anchorHits': hits, 'restored': restored, 'worktreeUnchanged': worktree_clean, 'exit': run.returncode, 'killed': killed, 'test': test, 'log': str(log)})
+            print(json.dumps(results[-1]), flush=True)
+            shutil.rmtree(tree)
+            if not killed:
+                break
+    after = {p: digest(repo / p) for p in before}
+    report = {'head': head, 'clear': args.clear, 'worktreeUnchanged': before == after, 'selected': sorted(names), 'results': results}
+    (args.output / 'summary.json').write_text(json.dumps(report, indent=2) + '\n')
+    if before != after or len(results) != len(selected) or not all(r['killed'] for r in results):
+        raise SystemExit(1)
+
+
+if __name__ == '__main__':
+    main()
@@ -0,0 +1,323 @@
+# Row 296: FED R7, scratch two-instance acceptance (#1802)
+
+## Start
+
+- Started 2026-10-23 18:53:27Z, on Sage's sage-3583 (mos-1489).
+- Base: origin/refactor 45dca69f6 (pinned; local copy used, no fetch: fetch runs the credential node script, which
+  is held during Darkwing's re-pin window).
+- Branch: quackerjack/row296 in worktree quackerjack-fed-r5-row296.
+- Brief: docs/plans/2026-10-23_mvp-readiness-rows.md at 45dca69f6, section "Brief: FED R7, scratch two-instance
+  acceptance" (line 77).
+- Constraints from Sage: scratch roots only (mktemp -d under /mnt/storage/scratch/tmp), never ~/.mosaic-dev or
+  the live bus. No push, claim, queue write, node or test run until CLEAR.
+
+## What the brief asks for (summary)
+
+- One script test under scripts/ with its harness in packages/*/tests/, as row 190's tests are.
+- Two configs, two data roots, two Consoles, one fake OP. Consoles start outside agent ancestry in a transient
+  user unit. They never use the live stack's units, ports or sockets. The script removes its units on exit (trap).
+- Test (design section 7 R7 gate): Jason's test identity, granted collaborator on one hub project, signs in,
+  makes a thread, sends to the granted instance, gets the reply in the thread, is refused on another project and
+  on board reads, is revoked, is refused again, and the run ends. The factory shows nothing of the hub.
+- Mutants: grant project list widened to `*`; revocation claim end skipped.
+- Gate: Filbert approves the manifest; the script test and every scripts/test-*.sh green on Sage's gate; no unit,
+  port or socket of the script outlives the run. R8 (live window) stays row 209.
+
+## Open reads before design
+
+- R4 and R6 candidates (the brief says it builds on their combined candidate). Confirm what they expose: the
+  hub sign-in, grant and revocation paths, and the Console's board-read refusal.
+- Row 190's test harness (several instances on one uid): how it starts units and cleans up.
+- Transient user unit support on this host (systemd-run --user), and how the existing tests detect it.
+
+## Status
+
+- 18:53Z: worktree created, brief read. No code yet.
+
+## Handoff 2026-10-23 19:10:09Z (Mos ruling Q245, mos-1503)
+
+Row 296 moves to Lena (Codex seat, thread db27faca-85fb-4ca0-9fc7-78d740d3fa3a, branch lena/row296). Quackerjack
+stops here: no builds, no claim, no queue writes. This design is the handoff; Lena continues it.
+
+Base: 45dca69f6. R4 landed as 2efd127ce (ancestor of the base, checked with merge-base --is-ancestor). R6 landed as
+d3059c2c3 (row 294). R7 is claimable once Darkwing's window ends (Sage, sage-3592).
+
+What I verified by reading (not by running):
+- packages/cli/src/access.mjs:65 reads `system.federation?.peers ?? []` (the R6 seam).
+- packages/bus/src/user-cli.mjs exists at base (the user-cli transport).
+- Row 190's tests (packages/cli/tests/stack-instances.test.mjs, stack-release.test.mjs T56, stack-release-fixture.mjs)
+  drive stand-in units and fixtures. They do not start real transient user units. Not a model for R7's Consoles.
+- Real transient-unit launch pattern: packages/conversation/src/cohort.mjs (`scopeAvailable()` and `ScopeLauncher`,
+  systemd-run --user --scope -p Delegate=yes --unit=...; MANAGER_ENV = XDG_RUNTIME_DIR, DBUS_SESSION_BUS_ADDRESS).
+- Test-only spawn of systemd-run in packages/conversation/tests is the nearest precedent for start/stop cleanup.
+
+What I did NOT verify (so treat as open): the hub sign-in, grant, revocation and board-read paths in R4/R6 code; the
+Console startup flags; whether the fake OP can be a local stand-in; the trap-based unit cleanup.
+
+Design (proposal, not yet checked against code):
+1. scripts/test-federation-acceptance.sh: the entry point. Creates a mktemp -d scratch root under
+   /mnt/storage/scratch/tmp (never ~/.mosaic-dev, never the live bus). trap removes every unit it started and the
+   scratch root. Refuses to run if a transient unit name collides.
+2. Two configs (instance A = hub-side granted seat, instance B = collaborator's home), each with its own
+   MOSAIC_CONFIG, data root and federation.self; federation.peers names the other.
+3. One fake OP: a local stand-in that issues Jason's test identity. Its port and socket are per-run, not the live ones.
+4. Two Consoles, each in its own transient user unit (systemd-run --user --unit=mosaic-r7-<run>-<A|B>); outside agent
+   ancestry; ports picked per run.
+5. Test flow (the R7 gate): identity -> grant on one hub project -> sign in -> thread -> send to granted instance ->
+   reply in thread -> refused on another project -> refused on board reads -> revoke -> refused after revoke -> run
+   ends. Factory output must show nothing of the hub.
+6. Mutants: (a) grant project list widened to `*`, must fail the other-project refusal; (b) revocation claim end
+   skipped, must fail the refusal-after-revoke check.
+
+Unresolved decisions for Lena (I did not decide these):
+- Whether the harness lives in packages/cli/tests (matching row 190) or packages/conversation/tests (matching
+  cohort.mjs). Brief says packages/*/tests/; pick the one that owns the Console start path.
+- Fake OP: in-process HTTP stand-in versus file-backed identity. No preference recorded.
+- Port selection: fixed range per run vs OS-assigned. Brief forbids the live ports; it does not pick a range.
+
+R2 and R5 learning:
+- R2 (row 203, #1701) landed as a4da4e6df. I built it. Relevant to R7: validateFederation in
+  scripts/mosaic-config.mjs rejects unknown keys and bad ids, and test-config.sh has an FED block
+  (expect_fed_refusal). Use federation.self/peers exactly as row 203 validates them.
+  Mutant runner pattern: one textual edit that must occur exactly once, then a named test must fail; restore from git.
+  Name filter gotcha: `node --test --test-name-pattern` skips subtests whose parent does not match; include the
+  parent name (T57 for row 203).
+- R5: I did not build R5 in this session and have no first-hand notes on it. Ask Sage for R5's landing sha and notes.
+
+Status: design written; no code, no test runs, no claim, no push of the test files. Next owner: Lena.
+
+## Lena continuation, 2026-10-23
+
+Owner: Lena, thread db27faca-85fb-4ca0-9fc7-78d740d3fa3a. Branch lena/row296.
+Base remains 45dca69f6. Quackerjack's handoff c6ab9bdc9 preserved by cherry-pick ad84c1e45.
+Issue #1802 exists. Reviewer Filbert. Sage owns queue state, shared test slot and landing.
+Status: Untested. All Node, tests and credential-helper fetch/push held for Sage CLEAR (sage-3615).
+The earlier canonical `queue next lena` read finished with `nothing` and a rendered-view warning;
+no queue state was changed. Lena's owner registration is Sage's action.
+
+### Design decisions sent to Sage (lena-0003)
+
+- Harness under packages/cli/tests, beside row 190's instance proof; shell entry under scripts/.
+- Existing HTTPS fakeOidc helper, its generated scratch CA trusted through NODE_EXTRA_CA_CERTS
+  by each real Console CLI. One fake OP, two client ids; no TLS verification bypass.
+- Kernel-assigned loopback ports (0), discovered from each Console's startup log. Public origins
+  are distinct *.example.test HTTPS names; HTTP requests model the loopback reverse proxy with
+  exact Host and Origin. This proves the Console boundary, not a deployed HTTPS front end (R8).
+- Transient user service units, not scopes: a scope leaves ancestry beneath the caller; the real
+  user proof walks ancestry. Each Console runs the existing cli.mjs serve --sso --send verb.
+- Real startHost broker process and createLauncher. Only the harness adapter is a test stand-in,
+  as in thread-revoke.test.mjs. A real sandboxed run replies through the broker.
+- Scratch-only setup and access grant/revoke use real human CLI transport from a transient service.
+  No injected principal verifier, direct bindHuman/bindUser, or simulated user transport.
+- Every service has a unique per-run prefix and is recorded before launch. Shell EXIT/INT/TERM
+  traps stop only these services, wait for collection and verify socket and port closure.
+- Claim-end assertion reads append-only claim history independently of the launcher's final
+  shutdown so the claim-end mutant cannot be hidden by endLaunch's cleanup.
+
+### Implementation plan
+
+Goal: an executable scratch proof of federation section 7's R7 gate, without live state.
+Architecture: shell lifecycle owner, Node test driver, test-only host fixture, existing real Console CLI.
+Tech: Bash, Node ESM/node:test, systemd user transient services, existing fake OP and bwrap adapter.
+Spec: docs/plans/2026-10-23_mvp-readiness-rows.md, FED R7, plus preserved handoff above.
+
+Constraints: scratch only under /mnt/storage/scratch/tmp; no live units/ports/sockets/configs or
+credential reads; no production behavior/policy changes; no old test edits without Mos via Sage.
+
+Review focus: partial startup cleanup; signals; unit name collision; mismatched hub/factory sessions;
+claim end versus process exit. Each must have explicit assertions or a negative cleanup exercise.
+
+- [ ] Write acceptance driver assertions: Jason test sub binds as collaborator (owner is another
+  fixture identity), one allowed project/instance, thread send and correlated RESULT, private
+  project creation/read refused, board reads refused, factory has no hub objects, revoke denies
+  session and re-login, claim history records access-revoked and runner ends.
+- [ ] Write shell lifecycle: scratch HOME/TMPDIR, unique unit ledger, bounded command timeout,
+  traps stop/collect only this run's units, verify recorded sockets and ports no longer listen.
+- [ ] Write host fixture using startHost(bootConfig), createLauncher with fakeHarnesses and the
+  existing thread adapter. Prepare two named configs through bootstrap before fixture edits;
+  supply only generated test client slots. Setup/grant/revoke through real human transport.
+- [ ] On Sage CLEAR run only the new script, fix failures in new files and record exact results.
+- [ ] Prepare explicit once-only mutant patches: R5 projects widened to ['*']; R4 #claimEnd call
+  skipped. On Sage CLEAR prove each gives an assertion failure, restore bytes in finally.
+- [ ] Publish manifest (paths, hashes, assertion mapping, old-test numstat), request Filbert review,
+  push additive commits to lena/row296 only. Sage runs shared suites and gate and lands the row.
+
+Pre-existing test changes: none (numstat: empty).
+
+### Source inspection corrections before first execution
+
+- The real webui chat is channel-gated. Scratch businesses enable only harness pi and channel webui;
+  the loader fixture re-exports the unchanged webui channel. The adapter replacement is exactly
+  fakeHarnesses' pi.adapter export; no product file gains a fixture branch.
+- startHost creates a real broker child and a real Unix proof socket; it is hosted in the test
+  driver. The two Console services run the exact same-tree webui CLI, which is required by
+  verifyPrincipal. Human setup runs the exact same-tree human-cli through humanTransport.
+- The earlier in-process host proposal did not need a separate host fixture: startHost exposes
+  the production launcher API directly, so the only helper file is federation-human.mjs.
+- Read-only SQLite inspects claim evidence while the broker remains the sole writer. The test
+  also checks the registered runner and engine pids/start times are gone after revocation.
+- `--kill-after-start` kills the test process after both services have listened; Node teardown
+  hooks cannot run. The shell trap owns service cleanup independently. This is an expected-red
+  exercise; acceptance requires its kill marker, nonzero exit and successful cleanup line.
+- Main driver environment is a whitelist (PATH, scratch HOME/TMPDIR, systemd manager transport,
+  R7 run ids). Console/human services use env -i. No host preload or credential env is carried.
+- No Node or test has run. Bash syntax and git diff --check passed during preparation.
+
+### Binding design correction: sage-3625, 2026-10-23 19:17:35Z
+
+Sage rejected the transient-unit approach: "no transient systemd user units used to satisfy the
+human proof"; such a unit makes the ancestry walk miss the development agent, and creates host
+state under mos-1438. This direction replaces the brief/handoff's unit requirement for this build.
+No unit was created by the superseded draft, and no Node/test execution occurred.
+
+Current design, replacing the earlier proposals above:
+
+- Consoles are ordinary spawned child processes in their own process groups; no systemd commands,
+  units, user manager or manager environment are involved.
+- Test-only federation-host.mjs follows channel-fixture.mjs's mock.module pattern. It re-exports
+  real readProcess and replaces verifyHuman's readProcess argument with real process fields plus
+  ppid=1. This is explicitly a stand-in for Jason's shell, NOT a real ancestry acceptance proof.
+  Real pid/uid/startTime/nonce/path checks still run; verifyPrincipal still checks the Console's
+  actual direct parent path for user calls. No product source receives this override.
+- Each fixture host runs real startBroker and createLauncher. Its local host API is the existing
+  thread-revoke.test.mjs pattern, with only the pi adapter replaced via fakeHarnesses.
+- Setup/grant/revoke are plain children using real CLI wrappers against that fixture proof seam.
+- Shell records each detached group's leader pid and start time, checks both before signalling,
+  and verifies no live group member, TCP listener or Unix listener remains. Killed-driver mode
+  bypasses every Node teardown hook and still leaves cleanup to the shell trap.
+- Read-only claim evidence and actual runner/engine exit remain independent assertions.
+- Gate limitation: this proves the revised scratch integration, not real outside-agent ancestry,
+  transient unit cleanup, TLS proxy deployment or live federation. R8 remains row 209.
+- R5 landing found in git log: ddfb29af7 (#1700).
+- Targeted Node/tests remain held. Sage permits the first lena/row296 push in the 19:41Z gap,
+  with MOSAIC_GITEA_CREDENTIAL_FILE unset. 226 and 283 have earlier slots.
+
+Current files: shell entry; federation-acceptance.test.mjs; fixtures/federation-host.mjs and
+fixtures/federation-human.mjs; this BUILD; mutant runner; manifest; append-only logs; preserved
+Quackerjack BUILD at ad84c1e45. No pre-existing test modification (numstat empty).
+
+### First candidate, 2026-10-23
+
+Implementation is prepared under sage-3625, not yet executed. Static checks: Bash parser accepts
+scripts/test-federation-acceptance.sh; Python ast.parse accepts mutants.py; git diff --check clean.
+No test outcome is claimed. The root node_modules links the existing canonical install so the
+future targeted run needs no install or network. No webui editor build is involved.
+
+M1 now requires the user project-list leak assertion (`R7 ungranted project must not appear`),
+so it proves exposure through the actual Console transport rather than only inspecting grant
+configuration. The private-project thread-create refusal and exact grant-list check follow it.
+M2 requires `R7 revoke must end the claim as access-revoked` before any host teardown.
+
+Sage opened the push gap early in sage-3644 (19:23:04Z). The first candidate is committed as
+Untested, for push only to lena/row296 with MOSAIC_GITEA_CREDENTIAL_FILE unset. Node, acceptance,
+negative cleanup exercise and mutants still wait for the test slot. Full suites/gate are Sage's.
+
+### Filbert static review, filbert-296-first-push-static, 19:28:51Z
+
+Review pinned f06a1f78c against 45dca69f6. Filbert verified all nine manifest hashes from Git
+objects, no product/pre-existing test changes, no systemd calls, fixture-only ancestry override,
+real path/uid/startTime/nonce checks, group ledger identity checks and child-only CA trust.
+He ran nothing. The verdict remains pending execution and gate evidence.
+
+- C1 confirmed by inspection: subprocess.run(timeout=280) kills the shell on timeout and can
+  bypass its trap, while the shell's own deadline plus cleanup can exceed 280 seconds. Removed
+  the outer Python timeout (the simpler alternative Filbert explicitly allowed). Python now
+  waits for the shell's bounded run and EXIT/TERM cleanup. Source restoration remains in finally.
+- N1 retained limitation: a SIGKILL between spawn and the pid/startTime ledger append can leave
+  an unrecorded group. The killed-driver exercise begins after both Consoles are recorded and
+  does not cover that gap. Cleanup claims apply to recorded groups; no universal crash-proof
+  process creation claim is made.
+- N2 addressed before the mutant run: the named readonly claim-history assertion now runs after
+  revoke and before waiting for the run's end. A skipped #claimEnd therefore cannot first fail
+  the run-end wait. The final latest-op check still runs after engine/runner exit. If M2 instead
+  fails an earlier condition, its runner must say NOT KILLED; diagnose the first failure on the
+  same pinned candidate, retain the intended assertion, and rerun on Sage CLEAR. Never accept a
+  timeout or change the mutant's expected assertion merely to mark it killed.
+- N3 deferred cosmetic fixture detail: wrap() returns fn(value) without await, so async rejection
+  skips its code mapping. This is not an authorization or cleanup change; the rejection still
+  propagates, and no verdict relies on that fixture mapping.
+- N4: corrected the exact-grant assertion's indentation in the new test.
+- N5: prepare() first calls bootstrap --instance, then overwrites that bootstrap-generated
+  config inside the unique disposable scratch HOME with fixture Console/provider settings.
+  This is fixture-only setup, not a product/bootstrap overwrite path or a live-config operation.
+  There remains one selected config per scratch instance, with the same marked data root.
+
+Still Untested. No Node, acceptance, mutant, negative cleanup or CLI suite run. Static validation
+only; execution waits for Sage's test window. Follow-up push needs a currently authorized gap.
+
+### Push receipt and N2 ordering proof, 2026-10-23 19:31Z
+
+Sage sage-3659 authorized push before 19:38Z. e855f82e1846f094927c3de69aea1a801253736a
+was pushed to origin/lena/row296 with MOSAIC_GITEA_CREDENTIAL_FILE unset. No Node/tests ran.
+
+N2, filbert-296-c1-ack: this path is synchronous after a successful reload. accessCommand awaits
+reload at access.mjs:289; reload awaits the access.reload transport at :297. broker.mjs:4645
+calls #revokeLost before constructing its reply. #revokeLost (:1025–1034) calls #claimEnd inside
+Store.transaction, which executes COMMIT before returning (store.mjs:282–302). server.mjs:160–161
+calls broker.request and then writes the response. Therefore the claim record is committed before
+the successful CLI call returns; no asynchronous sweep is required for this assertion. A refused
+reload can be reported by the CLI with exit 0, but then immediate revocation evidence is absent
+and this test must fail; that is not a race the test should hide. No polling change is needed.
+
+T3 package comparison (sage-3659): the four planned runs execute only the new dedicated
+federation-acceptance.test.mjs and its fixture host/human children. They do not execute stack-copy,
+stack-release or the whole CLI suite. Existing helpers are imported; no old test module is run.
+Asked Researcher to confirm against row216. Full CLI suite remains a later Sage gate requirement,
+outside the targeted T3 command list. All test resources are unique scratch state.
+
+### R2 rebase and slot start, 2026-10-24, sage-4035/4036/4038
+
+New branch lena/row296-r2, base e0c6142f3a411ed70e32b2c50d01930e0b0641c8.
+Original branch remains a1321f8f9; no force push. Rebased tip before evidence: 17e421cf4.
+Only conflicts were append-only BUILD-LOG.md and docs/SESSIONS.md: retained all new-base bytes
+and appended this row's original suffix. All other row files byte-identical to a1321f8f9.
+Range-diff receipt: run-r2/range-diff.txt. Patch IDs: run-r2/patch-ids.txt.
+Mapping: ad84c1e45=4a16ebaa4, f06a1f78c→6418b1b12 (only append-log context),
+e855f82e1=bbc38067f, a1321f8f9=17e421cf4. Stable patch IDs match for 1/3/4;
+commit 2 differs because patch-id includes changed append-log context. No source delta.
+
+The prior local root node_modules symlink was unlinked without following it. Own-worktree root
+npm ci --ignore-scripts --no-audit --no-fund: exit 0, 128 packages. Own-worktree webui same
+command: exit 0, 2 packages. Both node_modules are real local directories. Canonical dependencies
+were never installed, removed or changed. This supersedes the earlier link-based setup note.
+
+Root install had completed before sage-4036 arrived. Exact queue command from worktree refused
+linked-worktree policy; reported as lena-0013 and held tests. Sage-4038 authorized queue verbs
+only in canonical; no npm/rm there. All further tests run in this worktree under short scratch
+TMPDIR, serially: plain script, killed-driver negative exercise, M1, M2, touched new test whole.
+Filbert cleared C1 on a1321f8f9 (filbert-296-c1-cleared); rebase preserves those source bytes.
+
+### Scoped acceptance results, 2026-10-24 09:55–09:57Z
+
+Queue start succeeded: lena-296-start rev3888, briefed→in-progress, through the authorized
+canonical queue route. Earlier retries refused Sage assignment locks; no lock bypass occurred.
+
+Commands ran serially in this worktree, each with a newly created six-character external TMPDIR
+under /mnt/storage/scratch/tmp and timeout -k 10. The script itself additionally creates its own
+unique r7.* root and owns child group cleanup. All five external TMPDIRs were empty and removed
+afterward (run-r2/tmpdir-cleanup.txt). No product/test source changed to obtain these results.
+
+| Run | Exit | Node pass/fail/skip/cancel | Evidence |
+| --- | --- | --- | --- |
+| plain script, timeout 600 | 0 | 1/0/0/0 | run-r2/plain-1.log, 3.788 s Node duration |
+| --kill-after-start, timeout 600 | 1 expected; negative wrapper 0 | 0/1/0/0 expected SIGKILL | run-r2/killed-1.log, both-Consoles-started marker and cleanup line |
+| M1 driver, timeout 600 | 0 (script 1 expected) | 0/1/0/0 expected mutation | run-r2/M1.log, KILLED by R7 ungranted project must not appear |
+| M2 driver, timeout 600 | 0 (script 1 expected) | 0/1/0/0 expected mutation | run-r2/M2.log, KILLED by R7 revoke must end the claim as access-revoked |
+| new test whole without script context, timeout 60 | 0 | 0/0/1/0 | run-r2/whole-file.log, expected dedicated-script skip |
+
+Every script run printed exactly `R7 cleanup: no child groups, ports or sockets remain; no units
+created`. The killed-driver run exercised shell cleanup with no Node teardown hooks. M1 and M2
+failed on assertions, not startup failure or timeout; the runner found the named assertion and
+cleanup marker. pre-mutants.sha256 checked after each mutation: access.mjs and broker.mjs both
+restored byte-for-byte. git diff against e0c6142f3 confirms neither product path changed.
+
+No unexpected first-run red: plain acceptance passed on its first run. Only the deliberate killed
+and mutated runs failed. The ordinary-file skip is intentional; the plain script ran its full test
+without skips. Module-mocking experimental/deprecation warnings are fixture-only. No old test
+was run or changed, so no mos-1272 placement was needed. N3 and N6 remain optional diagnostics;
+N1's documented spawn-to-ledger SIGKILL gap remains outside the killed-driver scenario.
+
+Scope per sage-4035: dedicated script, touched new test whole, both mutants and cleanup checks.
+No full CLI suite, unrelated package suite, webui build or other scripts/test-*.sh ran in this slot.
+Those broader earlier review/gate requirements remain for Sage's integration gate; no full gate
+claim is made here. R8/live acceptance, real ancestry proof and deployment remain out of scope.
@@ -0,0 +1,73 @@
+# Row 296 / #1802 — R2 scoped acceptance verified; review pending
+
+Base: e0c6142f3a411ed70e32b2c50d01930e0b0641c8. Branch: lena/row296-r2. Reviewer: Filbert. Gate owner: Sage.
+Handoff: c6ab9bdc9 preserved as ad84c1e45, rebased as 4a16ebaa4, including
+agents/quackerjack/work/queue-296/BUILD.md. Every changed path is in MANIFEST.sha256,
+except the checksum file itself (self-hash is excluded). No product file or pre-existing test changed.
+Pre-existing test numstat: empty. BUILD-LOG.md and docs/SESSIONS.md are append-only additions.
+
+Binding ruling: sage-3625 replaces the brief's transient-unit start with plain child Consoles and
+explicit test stand-ins. **This candidate does not prove genuine outside-agent ancestry.**
+It creates no transient systemd unit and makes no systemd CLI call. R8 remains row 209.
+
+## What is real, and what is a stand-in
+
+- Two configs created by bootstrap --instance hub/factory, two marked data roots, real Console
+  cli.mjs serve --sso --send, real broker runtime and launcher, real path-bound human-cli and
+  user-cli wrappers, real access loader, CLI writes/reload, grant filters and revocation.
+- One existing HTTPS fakeOidc server, two issuer/client identities. Its generated CA is trusted
+  only through NODE_EXTRA_CA_CERTS in this test's child environment, never any trust store.
+- federation-host.mjs replaces verifyHuman's readProcess argument with actual process fields plus
+  ppid=1, exactly the test pattern Sage named. This stands in for Jason's shell on setup,
+  grant/revoke and both Consoles' transports. The actual Console parent/path check remains.
+  There is no product parameter, environment switch or altered verifier default.
+- fakeHarnesses replaces only the pi harness adapter() with a scratch shell invoking the existing
+  thread-adapter.mjs. The existing webui channel is re-exported unchanged. No network model runs.
+- Public HTTPS origins are modelled through HTTP loopback requests with matching Host/Origin;
+  reverse-proxy TLS deployment is outside this scratch proof.
+
+## Acceptance map
+
+All checks live in `FED R7 scratch two-instance acceptance` in
+packages/cli/tests/federation-acceptance.test.mjs.
+
+| Requirement | Assertion/evidence |
+| --- | --- |
+| Isolated instances | different config paths/data roots/ports; scratch HOME/TMPDIR; two named markers from bootstrap; port 0, forbidden live ports 7330–7332 checked |
+| Jason is collaborator, not owner | owner melanie; access user jason-test, home factory, fake sub jason-test-sub; hub /api/config user=true |
+| One project, one granted instance | actual access grant CLI, projects=[shared], instances=[assistant]; user project list contains shared only |
+| Thread and reply | create thread on shared, POST message, correlated RESULT with in_reply_to=sent.id, from_role=assistant, to_role=user, body contains question |
+| Other project refused | private project absent from listing; create on private returns 403 access-refused |
+| Board reads refused | /api/board, /api/bus/inbox and /api/bus/tasks return 403 owner-only |
+| Factory sees no hub objects | Jason sub refused at factory; factory owner sees factory-only project and no threads; hub cookie gets 401 at factory |
+| Revoke takes effect | actual access revoke CLI; existing hub session 401 and re-login 403 |
+| Claim and process ended | live run before revoke; end log exitCode=0; no registered sessions; engine and runner pid/startTime gone; readonly claim history has revoke/access-revoked before the process-end wait, latest op=revoke afterward |
+| Normal cleanup | EXIT trap terminates only recorded pid/startTime-checked groups; checks no live group member, no recorded TCP/Unix listener, no other scratch Unix listener, removes scratch directory/socket files |
+| Killed-driver cleanup | --kill-after-start prints both-Consoles-started marker then SIGKILLs test driver; shell performs the same independent cleanup; expected nonzero run with successful cleanup line |
+
+## Verification commands (executed on sage-4035 CLEAR)
+
+- scripts/test-federation-acceptance.sh — must exit 0, one acceptance test passes, cleanup line present.
+- scripts/test-federation-acceptance.sh --kill-after-start — must exit nonzero, print the explicit
+  interruption marker and `R7 cleanup: no child groups, ports or sockets remain; no units created`.
+- python3 agents/lena/work/queue-296/mutants.py M1 — once-only R5 grant projects -> ['*']; must fail
+  `R7 ungranted project must not appear` and verify cleanup, then restore original source bytes. Python relies on the shell's own run deadline and cleanup; no outer killing timeout.
+- python3 agents/lena/work/queue-296/mutants.py M2 — once-only R4 claim end omitted; must fail
+  `R7 revoke must end the claim as access-revoked` before shutdown, verify cleanup and restore bytes.
+- Sage integration gate remains separate: every scripts/test-*.sh and full applicable suites per Sage; not run in this scoped slot.
+
+Status: scoped gate passed: plain 1/1 (exit 0), killed-driver expected exit 1 with verified cleanup, M1/M2 drivers exit 0 with named assertion kills and source restoration; normal whole-file invocation exit 0 with one intentional dedicated-script skip. All cancellations 0. Receipts in run-r2/; counts and commands in BUILD.md.
+The script never silently skips a missing tool/sandbox/provider: prerequisites fail the acceptance.
+Ordinary CLI suites skip the dedicated test until invoked by its owning script.
+
+Static-review follow-up: filbert-296-first-push-static. C1 removes Python's outer timeout so it
+cannot SIGKILL the shell before EXIT cleanup. N2 moves the named claim-history assertion before
+the process-end wait. N1's spawn-to-ledger SIGKILL gap is retained and documented in BUILD.md;
+--kill-after-start exercises the fully recorded groups. N3 remains a cosmetic fixture limitation.
+N4 indentation corrected. N5 scratch-bootstrap config overwrite is explicitly fixture-only.
+
+R2 provenance: source identical to the statically cleared a1321f8f9. Rebase mapping/range-diff
+and stable patch IDs are in run-r2/. Only append-log conflict context changed. No unexpected
+first-run failure, no old test changed/run, and no broader suite or shared gate claimed.
+Manifest coverage is the complete changed-path set over e0c6142f3..candidate, including all
+text evidence and this description; only MANIFEST.sha256 itself is excluded from its own hash.
@@ -0,0 +1,29 @@
+97a7d3518ac0e3f823c631d6616cea3de277040c673acd016f5bb0efd627938f  BUILD-LOG.md
+5d040043c9ef15a5343ac4bc8382051c67c6bce13f273b7b16071e9e16e42c5d  agents/lena/work/queue-296/BUILD.md
+1b853af963c754152466ae77a27e2136087192abd8cc912045b6d95c4c094e11  agents/lena/work/queue-296/MANIFEST.md
+bd6e9fd9e3f7aa0ee6702401776ef7bd3e39562059a11b87aaaf2a427904381b  agents/lena/work/queue-296/mutants.py
+9a271f2a916b0b6ee6cecb2426f0b3206ef074578be55d9bc94f6f3fe3ab86aa  agents/lena/work/queue-296/run-r2/M1.exit
+50ac6f0ea22cc671e4056385fc2feb4d015bfe853a9393a60a6cb38a10ad6cb2  agents/lena/work/queue-296/run-r2/M1.log
+5079eaa8fcc6964072f7ba20333ba77607fa25729697182151bb3739f3ab15f8  agents/lena/work/queue-296/run-r2/M1.tmpdir
+9a271f2a916b0b6ee6cecb2426f0b3206ef074578be55d9bc94f6f3fe3ab86aa  agents/lena/work/queue-296/run-r2/M2.exit
+793b40f72e600ca71d6a29d058b2f11b4aaa0388dd80e8e6f8a925f46af589d7  agents/lena/work/queue-296/run-r2/M2.log
+01ef19b3acc3ac7f8cf0e69e31b8a0ef5413264109be154987993e0c8ce845d5  agents/lena/work/queue-296/run-r2/M2.tmpdir
+4355a46b19d348dc2f57c046f8ef63d4538ebb936000f3c9ee954a27460dd865  agents/lena/work/queue-296/run-r2/killed-1.exit
+6333824a3def94fc983f4d9ede08ae3301dd31921fae350cec77e9b7c220c963  agents/lena/work/queue-296/run-r2/killed-1.log
+67809d95a8b102392c23ed05e347ad461fc6eee8b66b0a732251be476ca99f08  agents/lena/work/queue-296/run-r2/killed-1.tmpdir
+c8a0c8d9d9a2c723aab5cfcb973713903a0914ec46394215533531f17a7eeeaf  agents/lena/work/queue-296/run-r2/patch-ids.txt
+9a271f2a916b0b6ee6cecb2426f0b3206ef074578be55d9bc94f6f3fe3ab86aa  agents/lena/work/queue-296/run-r2/plain-1.exit
+ae2d6a16a97907384f992ef847be503eae0124bd378648fd620717450d56f2f7  agents/lena/work/queue-296/run-r2/plain-1.log
+254a104ac320b5b8e7ed792b373e5ca3af0febb94d705dc62b54fc6545fe9395  agents/lena/work/queue-296/run-r2/plain-1.tmpdir
+97858a98531f635813404f1c2a149f9e3d620444ca4cddb49b1e035cb91fa73d  agents/lena/work/queue-296/run-r2/pre-mutants.sha256
+f431f734d74169b9c0932dedadf4cb2bac7ecc37e0ee93f1009b90c5b7bf6541  agents/lena/work/queue-296/run-r2/range-diff.txt
+36d4dcb2e1a816b5bdde0c1f47510d7e059f86810b75f6e10a5ca91c8341fe4b  agents/lena/work/queue-296/run-r2/tmpdir-cleanup.txt
+9a271f2a916b0b6ee6cecb2426f0b3206ef074578be55d9bc94f6f3fe3ab86aa  agents/lena/work/queue-296/run-r2/whole-file.exit
+615834d38c4b90b0dc04529c6fc7f280a6e30e1b81c1658bd2e7d5a55e932e01  agents/lena/work/queue-296/run-r2/whole-file.log
+6e9863193aa62750f7ce89f17484973d5d85ef61980782d353c7ad6bd255b130  agents/lena/work/queue-296/run-r2/whole-file.tmpdir
+87239327014c49abbe130c17881bb48e13d96545bf9f3e09b6f4aed46e11453b  agents/quackerjack/work/queue-296/BUILD.md
+04512fb4693bc135131857f204addfcc4968c660a00327c2589f5a107f591a2b  docs/SESSIONS.md
+89a15e62aa6f951596b764993afeff7e33eeaa3a4f45d31599eba7d27a4000ad  packages/cli/tests/federation-acceptance.test.mjs
+86b76565f5afe9efdd076ef61cc54e40c447d235f77b95818d0d601ce036effa  packages/cli/tests/fixtures/federation-host.mjs
+b12a9bad4be083f2439c3363738b9763fa0061228f84d501a385ade48fea90e4  packages/cli/tests/fixtures/federation-human.mjs
+4008361f062a2f21b6075c500060196e10a48351fd7d95b25d681f36b4fa801a  scripts/test-federation-acceptance.sh
@@ -0,0 +1,51 @@
+#!/usr/bin/env python3
+"""R7 mutants. Run only on Sage CLEAR in Lena's isolated candidate.
+
+Every replacement must occur once. Product bytes are restored even on timeout
+or failure. A killed mutant must contain the named assertion in the script's
+output; startup errors and timeout alone are not evidence. The shell owns its
+own timeout and EXIT/TERM cleanup. Do not put a killing Python timeout around it.
+"""
+from pathlib import Path
+import subprocess
+import sys
+
+repo = Path(__file__).resolve().parents[4]
+mutants = {
+    'M1': (
+        'packages/cli/src/access.mjs',
+        'projects: resolveProjects(list(parsed.values["--projects"]), rows),',
+        'projects: ["*"],',
+        'R7 ungranted project must not appear',
+    ),
+    'M2': (
+        'packages/bus/src/broker.mjs',
+        "this.#claimEnd({ business: t.business }, h, 'revoke', null, 'access-revoked', by);",
+        "/* R7 mutant: skip ending the revoked claim */",
+        'R7 revoke must end the claim as access-revoked',
+    ),
+}
+if len(sys.argv) != 2 or sys.argv[1] not in mutants:
+    raise SystemExit('usage: mutants.py M1|M2')
+name = sys.argv[1]
+file, before, after, assertion = mutants[name]
+path = repo / file
+original = path.read_bytes()
+text = original.decode()
+if text.count(before) != 1:
+    raise SystemExit(f'{name}: anchor count {text.count(before)}, expected 1')
+try:
+    path.write_text(text.replace(before, after))
+    result = subprocess.run(['scripts/test-federation-acceptance.sh'], cwd=repo,
+                            stdout=subprocess.PIPE, stderr=subprocess.STDOUT,
+                            text=True)
+    print(result.stdout, end='')
+    if result.returncode == 0 or assertion not in result.stdout:
+        raise SystemExit(f'{name}: NOT KILLED by expected assertion')
+    if 'R7 cleanup: no child groups, ports or sockets remain; no units created' not in result.stdout:
+        raise SystemExit(f'{name}: cleanup not verified')
+    print(f'{name}: KILLED by {assertion}')
+finally:
+    path.write_bytes(original)
+    if path.read_bytes() != original:
+        raise SystemExit(f'{name}: restore failed')
@@ -0,0 +1 @@
+0
@@ -0,0 +1,59 @@
+✖ FED R7 scratch two-instance acceptance (1924.232002ms)
+ℹ tests 1
+ℹ suites 0
+ℹ pass 0
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 2002.66244
+
+✖ failing tests:
+
+test at packages/cli/tests/federation-acceptance.test.mjs:143:1
+✖ FED R7 scratch two-instance acceptance (1924.232002ms)
+  AssertionError [ERR_ASSERTION]: R7 ungranted project must not appear
+  + actual - expected
+  
+    [
+      'd27c7d26-5ea3-446c-b1ce-f54183e16c8a',
+  +   'c1cb5a81-e752-4932-be3c-d849e5a34284'
+    ]
+  
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/lena-row296/packages/cli/tests/federation-acceptance.test.mjs:185:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: [ 'd27c7d26-5ea3-446c-b1ce-f54183e16c8a', 'c1cb5a81-e752-4932-be3c-d849e5a34284' ],
+    expected: [ 'd27c7d26-5ea3-446c-b1ce-f54183e16c8a' ],
+    operator: 'deepStrictEqual',
+    diff: 'simple'
+  }
+R7 diagnostic: factory-console.log
+Mosaic Console: http://127.0.0.1:43315/
+Board: http://127.0.0.1:1
+Bus: factory
+Sign-in: https://factory.example.test/ (--sso), reads and human writes (--send), grant Approve and Deny
+Sign-in provider: test-op issuer https://127.0.0.1:35689/factory/ subjects 1 (ready)
+Proxy: proxy proof off
+Ctrl-C stops this server.
+R7 diagnostic: factory-host.log
+(node:889203) ExperimentalWarning: Module mocking is an experimental feature and might change at any time
+(Use `node --trace-warnings ...` to show where the warning was created)
+(node:889203) DeprecationWarning: mock.module(): options.namedExports is deprecated. Use options.exports instead.
+R7 diagnostic: hub-console.log
+Mosaic Console: http://127.0.0.1:34081/
+Board: http://127.0.0.1:1
+Bus: hub
+Sign-in: https://hub.example.test/ (--sso), reads and human writes (--send), grant Approve and Deny
+Sign-in provider: test-op issuer https://127.0.0.1:35689/hub/ subjects 1 (ready)
+Proxy: proxy proof off
+Ctrl-C stops this server.
+R7 diagnostic: hub-host.log
+(node:889107) ExperimentalWarning: Module mocking is an experimental feature and might change at any time
+(Use `node --trace-warnings ...` to show where the warning was created)
+(node:889107) DeprecationWarning: mock.module(): options.namedExports is deprecated. Use options.exports instead.
+R7 cleanup: no child groups, ports or sockets remain; no units created
+M1: KILLED by R7 ungranted project must not appear
@@ -0,0 +1 @@
+/mnt/storage/scratch/tmp/9Uoj48
@@ -0,0 +1 @@
+0
@@ -0,0 +1,60 @@
+✖ FED R7 scratch two-instance acceptance (3143.370798ms)
+ℹ tests 1
+ℹ suites 0
+ℹ pass 0
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 3218.651521
+
+✖ failing tests:
+
+test at packages/cli/tests/federation-acceptance.test.mjs:143:1
+✖ FED R7 scratch two-instance acceptance (3143.370798ms)
+  AssertionError [ERR_ASSERTION]: R7 revoke must end the claim as access-revoked
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/lena-row296/packages/cli/tests/federation-acceptance.test.mjs:226:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: false,
+    expected: true,
+    operator: '==',
+    diff: 'simple'
+  }
+R7 diagnostic: factory-console.log
+Mosaic Console: http://127.0.0.1:40569/
+Board: http://127.0.0.1:1
+Bus: factory
+Sign-in: https://factory.example.test/ (--sso), reads and human writes (--send), grant Approve and Deny
+Sign-in provider: test-op issuer https://127.0.0.1:37617/factory/ subjects 1 (ready)
+Proxy: proxy proof off
+Ctrl-C stops this server.
+2026-10-24T09:56:19.857Z sso refused code=subject-unknown provider=test-op iss="https://127.0.0.1:37617/factory/" sub="jason-test-sub"
+R7 diagnostic: factory-host.log
+(node:892054) ExperimentalWarning: Module mocking is an experimental feature and might change at any time
+(Use `node --trace-warnings ...` to show where the warning was created)
+(node:892054) DeprecationWarning: mock.module(): options.namedExports is deprecated. Use options.exports instead.
+R7 diagnostic: hub-console.log
+Mosaic Console: http://127.0.0.1:44529/
+Board: http://127.0.0.1:1
+Bus: hub
+Sign-in: https://hub.example.test/ (--sso), reads and human writes (--send), grant Approve and Deny
+Sign-in provider: test-op issuer https://127.0.0.1:37617/hub/ subjects 1 (ready)
+Proxy: proxy proof off
+Ctrl-C stops this server.
+2026-10-24T09:56:19.257Z chat action=createThread user="jason-test" id=58f85ce3-825f-42ea-9b19-e407157147f1
+2026-10-24T09:56:19.387Z chat action=send user="jason-test" id=3e803a2f-e10d-4ede-b80e-c7ca3fcc564b
+2026-10-24T09:56:19.836Z chat action=createThread user="jason-test" error=access-refused
+2026-10-24T09:56:20.395Z sso refused code=user-revoked provider=test-op user="jason-test"
+2026-10-24T09:56:20.401Z sso refused code=subject-unknown provider=test-op iss="https://127.0.0.1:37617/hub/" sub="jason-test-sub"
+R7 diagnostic: hub-host.log
+(node:892013) ExperimentalWarning: Module mocking is an experimental feature and might change at any time
+(Use `node --trace-warnings ...` to show where the warning was created)
+(node:892013) DeprecationWarning: mock.module(): options.namedExports is deprecated. Use options.exports instead.
+usage: {"event":"usage-unknown","business":"hub","run":"r892d587abe73","instance":"assistant","turn":"3e803a2f-e10d-4ede-b80e-c7ca3fcc564b","source":"@none","code":"baseline-unknown"}
+mosaic-bus: run r892d587abe73 (assistant) ended: stopped
+R7 cleanup: no child groups, ports or sockets remain; no units created
+M2: KILLED by R7 revoke must end the claim as access-revoked
@@ -0,0 +1 @@
+/mnt/storage/scratch/tmp/wPuOGf
@@ -0,0 +1 @@
+1
@@ -0,0 +1,41 @@
+R7 interruption: both Consoles started; killing test driver
+✖ packages/cli/tests/federation-acceptance.test.mjs (2055.463978ms)
+ℹ tests 1
+ℹ suites 0
+ℹ pass 0
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 2061.099035
+
+✖ failing tests:
+
+test at packages/cli/tests/federation-acceptance.test.mjs:1:1
+✖ packages/cli/tests/federation-acceptance.test.mjs (2055.463978ms)
+  'test failed'
+R7 diagnostic: factory-console.log
+Mosaic Console: http://127.0.0.1:42937/
+Board: http://127.0.0.1:1
+Bus: factory
+Sign-in: https://factory.example.test/ (--sso), reads and human writes (--send), grant Approve and Deny
+Sign-in provider: test-op issuer https://127.0.0.1:40605/factory/ subjects 1 (ready)
+Proxy: proxy proof off
+Ctrl-C stops this server.
+R7 diagnostic: factory-host.log
+(node:887305) ExperimentalWarning: Module mocking is an experimental feature and might change at any time
+(Use `node --trace-warnings ...` to show where the warning was created)
+(node:887305) DeprecationWarning: mock.module(): options.namedExports is deprecated. Use options.exports instead.
+R7 diagnostic: hub-console.log
+Mosaic Console: http://127.0.0.1:42267/
+Board: http://127.0.0.1:1
+Bus: hub
+Sign-in: https://hub.example.test/ (--sso), reads and human writes (--send), grant Approve and Deny
+Sign-in provider: test-op issuer https://127.0.0.1:40605/hub/ subjects 1 (ready)
+Proxy: proxy proof off
+Ctrl-C stops this server.
+R7 diagnostic: hub-host.log
+(node:887261) ExperimentalWarning: Module mocking is an experimental feature and might change at any time
+(Use `node --trace-warnings ...` to show where the warning was created)
+(node:887261) DeprecationWarning: mock.module(): options.namedExports is deprecated. Use options.exports instead.
+R7 cleanup: no child groups, ports or sockets remain; no units created
@@ -0,0 +1 @@
+/mnt/storage/scratch/tmp/bZhAyq
@@ -0,0 +1,8 @@
+old ad84c1e45cf2327b9584c38328db02fb9d5dfc63 af9d89f4c65a791b0aeabe7bf1f19c6709c50bfb
+old f06a1f78cf135b0cd749e4602b28f6e63c177c85 da6478f871cd450ff3ee43e14b4f6a1d1a1deb59
+old e855f82e1846f094927c3de69aea1a801253736a 6065440666f6fc49254352e259ecbc5b0a4b40c3
+old a1321f8f90b41295245859ec92bb5ec4801ede84 d1a7f19fabc3f0c604eda8051312ef1efb50e74e
+rebased 4a16ebaa4ac96bfac2a0e3787f4437467a13650b af9d89f4c65a791b0aeabe7bf1f19c6709c50bfb
+rebased 6418b1b12382186e82048cf9aa223b851a23d4d0 2d2d8a223bce50d30fc3525da5f1cda9c38254cd
+rebased bbc38067f2d6100e58020bc197a84e6251fef83d 6065440666f6fc49254352e259ecbc5b0a4b40c3
+rebased 17e421cf4c9a3fd0cf432de0205cc1efff7f6044 d1a7f19fabc3f0c604eda8051312ef1efb50e74e
@@ -0,0 +1 @@
+0
@@ -0,0 +1,10 @@
+✔ FED R7 scratch two-instance acceptance (3684.148824ms)
+ℹ tests 1
+ℹ suites 0
+ℹ pass 1
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 3787.998681
+R7 cleanup: no child groups, ports or sockets remain; no units created
@@ -0,0 +1 @@
+/mnt/storage/scratch/tmp/vgwsGf
@@ -0,0 +1,2 @@
+c4949a16173d11f9d32d10d3ddd58a181631848b259bef1998820a78f5694808  packages/cli/src/access.mjs
+71b32ee4afa322793aad81231441ee7badc3e5aff65ff008c6cc0f7f63b72781  packages/bus/src/broker.mjs
@@ -0,0 +1,31 @@
+1:  ad84c1e45 = 1:  4a16ebaa4 row 296 handoff: FED R7 design notes to lena/row296 (mos-1503, Q245)
+2:  f06a1f78c ! 2:  6418b1b12 Untested: row 296 scratch two-instance acceptance (#1802)
+    @@ Commit message
+         Untested: row 296 scratch two-instance acceptance (#1802)
+     
+      ## BUILD-LOG.md ##
+    -@@ BUILD-LOG.md: Row 299 (573, #1806, Gander, Filbert): before, the P10 band test timed a fault r
+    - 2026-10-23T17:29:46Z | Gyro Vikunja571 sage-3542 Connections amendment | Branch gyro/editor-connections-design cut exactly from landed PRD1.17 30e6bb680; read REQ-LIB-5 in that PRD. Replaced stale J-b waits in parent and W4. Proposed W8 owns current authorized Markdown/DOCX links/backlinks list, labels, versioned refresh, leakage refusals and fixture tests. Build order under mos-1470/comment961 is W7 closed routing candidate, W8 landing, then W7 human first-real-import opening. No REQ-LIB-8 condition or acceptance change. Q234/mos-1363/S0 M1-M14 and post-10-27/MVP priority fixed. Static diff, twelve brief sections and append-only checks pass. No repo Node, tests, build, browser, queue mutation or live action. Fenton reviews after authorized docs branch push; Sage lands on approval.
+    +@@ BUILD-LOG.md: remain; no live state, schema or bus policy change.
+      
+    - 2026-10-23T17:32:37Z | Gyro sage-3544 fenton-0016 N1/N2 delta | Before: W7 Gate/final real-conversion list omit the W8 build-order cross-reference and W8 human-view filtering cites agent settings. After: both locations explicitly put W8 landing before human opening as mos-1470 build order, not acceptance; comment/tracked-deletion links are not current story links and never appear in the human Connections view regardless of agent settings. New commit atop approved 5af060fb5, no amend. Static diff and append-only checks pass. Docs only, no repo Node/tests/live action. Fenton checks only this delta.
+    + 2026-10-24 | Goldie | Row265 / #1770 verified (mos-1567, sage-3942) | Approved correction adds solely address import pin + Row265 comment to project-runtime.test and one pure-source RUNNER_FILES mount; new block checks parser has no imports. Serialized fresh-short-TMP timeout-k10: unchanged sandbox10/10, parser15/15, rooms18/18, full bus957/957, twelve named refusal mutants killed (each Node1, driver0), restored parser15/15 + rooms18/18. All positives zero fail/skip/cancel; every mutation restored full broker SHA71b32ee4. Old first-red evidence retained, no other old-test change. Slot returned goldie-0034; Boyd packet explicitly includes mount-list review, candidate push next.
+    + 2026-10-24T07:18:53Z | Sage | Row 327 (#1825, Bradford, Poe and Dewey) LANDED 68c08b4e7. Before: refactor at 94d9e90a6; the push guard was a scratch script with no reviewed-binary check. After: scripts/push-check.sh and scripts/test-push-check.sh on refactor, 3 commits cherry-picked onto 6a5e12511 with blobs equal to the round 3 tip d858c9f8b, plus doc commits 76f84465f and 68c08b4e7. Binaries are found by numstat or a NUL in the first 8000 committed bytes, regardless of attributes; each needs its sha256 and path in an approved latest-round candidate; an unconfirmed queue tail exits 2. Reviews: Poe c31525 rev 3882, Dewey c31526 rev 3883. Gate: 1st run 06:57Z RED, not the candidate: canonical node_modules was empty from 05:45:15Z (sage-4023). Rerun with its own root npm ci GREEN 07:15:49Z: 17 package suites 0 failures (cli 986, plugins 119, webui 418), 11 scripts exit 0, push-check 6 mutants KILLED; skips are the queue canonical-root check and the row 244 live provider cases. The landed push-check.sh passed its own push (NO_BINARY, NO_ATTRIBUTION, PUSH_READY). mos-1575: gates install their own node_modules; canonical restored with npm ci (128 packages).
+     +
+     +## 2026-10-23 — Lena, row 296 / #1802 FED R7 start
+     +
+    @@ agents/lena/work/queue-296/mutants.py (new)
+     
+      ## docs/SESSIONS.md ##
+     @@ docs/SESSIONS.md: are never rewritten or removed; corrections are new entries.
+    - 2026-10-23T17:48:43Z | Scrooge (629b6cd3) | Row 252 Console inbox Approve and Deny (#1753) | Rebased onto 306 landing as 580037105 (range-diff all =), slot run bus 907/0 webui 410/0 cli 943/0, in-review revs 3608/3609, Webby r1 APPROVE, J1-J19 specs to Sage; Sage landed 45ea3fa0d (done rev 3616). Part 1 mutant results were never in BUILD.md; they went to Sage by T3 (scrooge-0252-mutant-specs).
+    - 2026-10-23 | Sage (1ef1e4f8) | Rows 308 and 252 landings, 571 Connections design amendment, Vikunja 597 | 308 (PRD 1.17, #1815) landed 30e6bb680 and 252 (#1753) landed 45ea3fa0d (replay of 580037105 onto 30e6bb680, range-diff all =), each after a full gate on the landed tree (252 also J1-J19, J11c and J18 equivalent); Gyro's 571 amendment (Fenton APPROVE) landed e8bb13df8; Vikunja 570, 435 and 597 done, canonical webui esbuild 0.28.2; queue revs 3589-3616 committed 59f013247
+    - 2026-10-23 | Sage (1ef1e4f8) | Vikunja 571 W build rows; rows 13, 42, 257 and 289 check | Filed the design's ten W rows as queue rows 309-318 (revs 3617-3626, owners set to unassigned 3627-3636, queue commit 293b42fee pushed); Vikunja 571 done (comment 994). Row 13's candidate fd72d2689 is on refactor, gate is Monday's row 7 ledger run; 42 paused under mos-1184; 257 post-v1; 289 waits on 214 and 288. Slot released 17:56Z.
+    + 2026-10-24T04:27Z | Goldie (a13dd6d5-5e73-4b7d-8318-02abeff24940) | Row265 / #1770 C2-09b rooms | Goldie owns build, Boyd reviews under sage-3915. New goldie/row265 worktree at ec86f2c84, claim rev3814; room verbs/parser/new tests prepared, no old tests changed. Sage-3932 slot: new parser14/14 and rooms18/18 passed; whole bus in progress before refusal mutants, stop rule active.
+    + 2026-10-24T04:35Z | Goldie (a13dd6d5-5e73-4b7d-8318-02abeff24940) | Row265 / #1770 verified | First slot stopped at project-runtime import pin. mos-1567 narrowly authorizes pin and pure-source mount correction. sage-3942 rerun: sandbox10/10, parser15/15, rooms18/18, bus957/957, twelve refusal mutants killed/restored SHA71b32ee4, parser15/15 + rooms18/18 again. Slot returned goldie-0034; no further test runs. Boyd reviews RUNNER_FILES alongside rooms; own-branch push/claimant in-review next.
+    + 2026-10-24T07:18:53Z | Sage (1ef1e4f8) | Row 327 / #1825 push guard landed (mos-1572 option A, mos-1575) | Gate went red 06:57Z on an empty canonical node_modules (Glomgold's webui npm ci through a link to canonical, glomgold-0011); rerun with its own npm ci GREEN 07:15:49Z on 1bd214e38; pushed 68c08b4e7 07:18:03Z; #1825 closed c31530; canonical restored (128 packages); brief template rule 4db23a51f | landed
+     +- 2026-10-23 — lena (Codex, db27faca): row 296 / #1802 FED R7; recovered Quackerjack design on lena/row296, inspecting acceptance paths; Node/tests held pending Sage CLEAR, no live changes.
+     
+      ## packages/cli/tests/federation-acceptance.test.mjs (new) ##
+3:  e855f82e1 = 3:  bbc38067f Untested: preserve R7 shell cleanup during mutant runs (#1802)
+4:  a1321f8f9 = 4:  17e421cf4 Untested: record R7 reload ordering and slot boundaries (#1802)
@@ -0,0 +1,5 @@
+M1: external TMPDIR removed (empty)
+M2: external TMPDIR removed (empty)
+killed-1: external TMPDIR removed (empty)
+plain-1: external TMPDIR removed (empty)
+whole-file: external TMPDIR removed (empty)
@@ -0,0 +1 @@
+0
@@ -0,0 +1,9 @@
+﹣ FED R7 scratch two-instance acceptance (0.501837ms) # run scripts/test-federation-acceptance.sh
+ℹ tests 1
+ℹ suites 0
+ℹ pass 0
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 1
+ℹ todo 0
+ℹ duration_ms 77.634961
Author	SHA1	Message	Date
Steelbeak	0e935776ee	Row 287: record first-review documentation corrections	2026-10-24 10:55:31 -05:00
Steelbeak	dc8f552819	Row 287: grant library collaborators with declared scopes	2026-10-24 10:55:31 -05:00
jason.woltje	9b63454660	row225: record rebased gate, review delta and verified mutation retries	2026-10-24 10:12:34 -05:00
jason.woltje	360f9a331b	row225: prevent checked notice forgery and report definite revert refusals	2026-10-24 10:12:34 -05:00
jason.woltje	2a345b62ef	Untested: row 225 B1 and N1 regression coverage before T3	2026-10-24 10:12:34 -05:00
jason.woltje	6325295cec	Untested full gate: row 225 manifest and 14 verified mutation kills	2026-10-24 10:12:34 -05:00
jason.woltje	e1e4750815	Untested full gate: row 225 mutation check asserts after repaint completion	2026-10-24 10:12:33 -05:00
jason.woltje	35fbdcad01	Untested full gate: row 225 fixes verified by targeted RED-GREEN and library suite	2026-10-24 10:12:33 -05:00
jason.woltje	8952720e04	Untested: record mos-1510 preservation condition and row 225 test slot	2026-10-24 10:12:33 -05:00
jason.woltje	df236ab6eb	Untested: row 225 isolated mutation kit and whitespace-clean approval evidence	2026-10-24 10:12:33 -05:00
jason.woltje	a9b9c84566	Untested: fethry row 225 handoff recovery and contract regression coverage	2026-10-24 10:12:33 -05:00
jason.woltje	de17e8bc30	morgana: row 225 handoff to fethry (mos-1501), UNTESTED: renderReply, chat replies/cites/notice/Revert/status line, library status and revert routes, channel-proof re-pin of webui bus.mjs	2026-10-24 10:12:24 -05:00
jason.woltje	5e9a49e3f4	morgana: row 225 BUILD.md: check-result shape agreed with 217 (launchpad-0118), library.revert contract A2 for row 288, changed-since via file and last (sage-3596)	2026-10-24 10:12:24 -05:00
jason.woltje	c638019596	docs: row 290 landing record and session line (doc only)	2026-10-24 09:56:03 -05:00
jason.woltje	3d7dff3453	docs: clarify setup sheet notices and agent identity	2026-10-24 09:54:29 -05:00
jason.woltje	f8461e9ab5	docs: keep chat guidance within Q226 brief	2026-10-24 09:54:29 -05:00
jason.woltje	b6795f9a1c	docs: clarify setup sheet repo behavior	2026-10-24 09:54:29 -05:00
jason.woltje	ceb612a40f	docs: update Case 2 setup sheet for Q226	2026-10-24 09:54:29 -05:00
jason.woltje	18334d713b	agents: register Codex seat Steelbeak to build row 287 (C2-21, #1792 ) from megavolt/row287's design (mos-1576, mos-1542); doc only	2026-10-24 09:46:14 -05:00
jason.woltje	963303403e	queue: revs 3915-3945. Row 285 in-review (Magica 3915-3916), review request (3917-3918), Poe 3919 and Webby 3920 approvals, note and done (3921-3922). Row 286 r5 and r6 rounds (Rockerduck 3923-3925, 3937-3939), requests (3926-3927, 3940-3941), Boyd 3928/3942 and Dewey 3929/3943 approvals, note and done (3944-3945). Case2 brief re-pins for 225, 229, 284, 287-290 (3930-3936)	2026-10-24 09:41:11 -05:00
jason.woltje	72db194a43	docs: row 286 landing record and sage-4112 test-credential length line in the brief template (doc only)	2026-10-24 09:38:04 -05:00
jason.woltje	5d7801dc19	Row 286 r6: shorten two fixture values for secrets guard and record green reruns (sage-4112)	2026-10-24 09:20:22 -05:00
jason.woltje	af988f6526	Row 286 r5: record green read-grant fixtures, whole suites and restored semantic mutants	2026-10-24 09:20:22 -05:00
jason.woltje	5999872f5a	Row 286 r5: rebase onto row285 and seed chief read-grant fixtures under sage-4100	2026-10-24 09:20:22 -05:00
jason.woltje	b0690ae8c0	Row 286 r4: record transplant onto landed row217, hunk comparisons and refreshed untested manifest	2026-10-24 09:20:22 -05:00
jason.woltje	18eca02ae9	Row 286 r3: fix new credential fixtures and record green CLEAR gate with killed mutants	2026-10-24 09:20:22 -05:00
jason.woltje	a7aa4a4dab	Row 286 r3: record successful canonical queue start and pre-CLEAR push receipt	2026-10-24 09:20:22 -05:00
jason.woltje	fda535d97d	Row 286 r3: transplant evidence, conflict resolution and static reader drift; untested pending CLEAR	2026-10-24 09:20:22 -05:00
jason.woltje	337ccee2dc	Row 286 C2-03b r2: rebase onto `45dca69f6` (sage-3579). The range-diff is all =. Drift check of the paths the tests read is in BUILD.md. Unrun.	2026-10-24 09:20:21 -05:00
jason.woltje	d06ada4b8b	Row 286 C2-03b: BUILD.md notes for dewey-0869 and sage-2951 (fired-chief path :4308, marker-gated busy test, T9 scratch roles)	2026-10-24 09:20:21 -05:00
jason.woltje	105d26f1d9	Row 286 C2-03b: fold dewey-0869 and sage-2951 (marker-gated busy test, T9 scratch roles with a chief gitea credential, fired-chief path cited)	2026-10-24 09:20:21 -05:00
jason.woltje	efd43df9d3	Row 286 C2-03b: cite sage-2947 (T7 real verbs, R1 in this row, 285/286 rebase rule)	2026-10-24 09:20:21 -05:00
jason.woltje	f3030813ed	Row 286 C2-03b: fold dewey-0864 (T7/T9 through grants.revoke and instance.fire, race fetch takes the sync guard, two-chief code, id -u shim note)	2026-10-24 09:20:21 -05:00
jason.woltje	918bbddfb0	Row 286: library.status shows the credential (webby-0151 R3); fired chief revokes its row as row 281 does; unrun	2026-10-24 09:20:21 -05:00
jason.woltje	17d1123ea1	Row 286 C2-03b: library push, per-seat credentials, the chief's fetch credential, askpass fd check (#1791 , sage-2922/2925/2928, dewey-0860); unrun	2026-10-24 09:20:21 -05:00
jason.woltje	a5e7785476	Row 286 C2-03b: sage-2928 rulings (sh helper, chief by roles definition, departure noted)	2026-10-24 09:20:21 -05:00
jason.woltje	727cc0aa0c	Row 286 C2-03b: fold dewey-0860 (Q1 sh fd/inode check, Q2 chief by roles definition, N1-N3)	2026-10-24 09:20:21 -05:00
jason.woltje	7d0eb8d8d6	Row 286 C2-03b: sage-2925 Q4 ruling (humanCredential takes her login; editor.user is row 283's)	2026-10-24 09:20:21 -05:00
jason.woltje	0cada1be13	Row 286 C2-03b: sage-2922 files-owned extension; Q4 back to Sage (user is the bot fetch identity)	2026-10-24 09:20:21 -05:00
jason.woltje	ad6a8d99ea	Row 286 C2-03b: build plan and four scope questions (BUILD.md only)	2026-10-24 09:20:21 -05:00
jason.woltje	d55944edb1	docs: row 285 landing record, sage-4100 seed ruling in the C2-21 brief, webby-0282 N1 in the C2-02 brief, mos-1584 brief template line, Vikunja 546 comment script (doc only)	2026-10-24 08:40:20 -05:00
jason.woltje	1f3d0350f3	row 285: preserve credential bindings for approved creative changes and verify r4 (#1790 , mos-1585, mos-1586)	2026-10-24 08:12:02 -05:00
jason.woltje	c57a9425e9	docs: row 285 r4 replay and regenerated B1 evidence on landed 296 and 217 (sage-4078)	2026-10-24 08:12:02 -05:00
jason.woltje	edf06ca884	row 285: align library and creative fixture credential data under B1 (mos-1581, mos-1582)	2026-10-24 08:12:02 -05:00
jason.woltje	6ece68c975	row 285: require chief gitea exactly for library businesses (mos-1580, sage-4059, sage-4060)	2026-10-24 08:12:02 -05:00
jason.woltje	dc68d4f4ce	docs: trim range-diff evidence trailing whitespace	2026-10-24 08:12:02 -05:00
jason.woltje	6a0fa43837	docs: correct row 285 evidence timestamps with append-only receipts	2026-10-24 08:12:02 -05:00
jason.woltje	0c32e67f29	docs: row 285 r3 replay and static drift evidence before CLEAR (#1790 , sage-4039)	2026-10-24 08:12:02 -05:00
jason.woltje	076eda6a57	row 285: BUILD.md records N1, the creative-only library.write refusal as a follow-up, and the round scope (#1790 , sage-3593)	2026-10-24 08:12:02 -05:00
jason.woltje	63f3a69313	row 285: library.write joins ACTIONS and ROUTED in the business vocabulary and the broker under PRD 1.16 REQ-WAIT-3 and REQ-LIB-6, with a hard-waits test; BUILD.md records the r2 rebase, range-diff and drift check (#1790 , sage-3578)	2026-10-24 08:12:02 -05:00
jason.woltje	9c85f27fa5	row 285: mos-1333, withdraw the publish fence; N10 option (a) with an assistant instance; a chief with its gitea ref, identity and publish loads; restore the creative publish test; BUILD.md gate scope (sage-2946) (#1790 )	2026-10-24 08:12:02 -05:00
jason.woltje	e7038a4407	row 285: webby-0178 early read, drop the stale creative publish comment and name the example's test readers (#1790 )	2026-10-24 08:12:02 -05:00
jason.woltje	239033309c	row 285: a chief-of-staff or creative instance that names publish refuses at load, keeping today's N10 refusal; instance-settings :289 follows the companion's gitea (#1790 , mos-1332) The fence sits near business.mjs:166, clear of row 287's :283-291. Its message starts with the N10 text. An assistant-instance test keeps the no-gitea branch covered, and a creative-instance test covers the fence. Nothing here has run.	2026-10-24 08:12:02 -05:00
jason.woltje	54bdac257e	row 285: fixtures, example and README give the chief and creative instances their gitea reference (#1790 , mos-1330) Fixture data only, plus two named tests that a chief or creative instance without credentials.gitea refuses at load. chief-of-staff.test :88 and :155 change expected values and wait on Mos's mos-1272 ruling. Nothing here has run.	2026-10-24 08:12:02 -05:00
jason.woltje	752cc87ac1	row 285: C2-08b, creative roles hold library.write and the gitea credential, the chief of staff a read-scoped gitea credential; #giteaRole refuses the chief (#1790 , mos-1309 item 5, sage-2915, sage-2921) The creative role files declare gitea with SEAT_SCOPES, the scopes the Gitea grant mints. The chief declares read scopes only, so #giteaRole refuses it with gitea-not-declared until row 287 mints its declared scopes. library.write is not yet routed: it waits on PRD 1.16 (row #1796), and the fixture change waits on Mos's mos-1272 rulings. Nothing here has run.	2026-10-24 08:12:02 -05:00
jason.woltje	25874bc86c	docs: rows 296 and 217 landing record, mos-1583 cli skip-list rule in the brief template, Vikunja 533 comment script (doc only)	2026-10-24 06:24:51 -05:00
jason.woltje	4c6190645d	queue: revs 3886-3914 (sage assigns 285/286 to magica and rockerduck, 285 brief re-pin, reviewers 285/286, requests and resolve/abandon for 296/217/286, notes and done for 296 and 217; lena 296 in-progress/in-review/outcome; magica 285 start; rockerduck 286 start/in-review/outcome; beakley 217 start and in-review; filbert 296 approve; webby 217 approve; boyd and dewey 286 approve)	2026-10-24 06:24:39 -05:00
jason.woltje	d0a6a87cda	row 217: record six green suites and five killed mutants for review	2026-10-24 05:39:26 -05:00
jason.woltje	29f7287942	row 217: correct new runtime fixture and record first-run evidence	2026-10-24 05:39:26 -05:00
jason.woltje	2c244de380	row 217: trim inherited limits whitespace and refresh hashes (Untested)	2026-10-24 05:39:26 -05:00
jason.woltje	a44c1f884e	row 217: normalize range-diff receipt whitespace (Untested)	2026-10-24 05:39:26 -05:00
jason.woltje	5481478786	row 217: availability refusal and landed supporting scope (Untested)	2026-10-24 05:39:26 -05:00
jason.woltje	c2eac13ea5	row 217: keep fixture status on its current served tip (Untested)	2026-10-24 05:39:26 -05:00
jason.woltje	dab9f6cd4d	row 217: early-review coverage and availability RED cases (Untested)	2026-10-24 05:39:26 -05:00
jason.woltje	b3ca50c950	row 217: citation runner retry and acceptance draft (Untested)	2026-10-24 05:39:26 -05:00
jason.woltje	a1b72432cd	launchpad: row 217 C2-06 work in progress, UNTESTED, handed to Beakley (mos-1500) Guard, limits, M11 fence, broker guard/page store/check event, BusError reason, runtime wiring and the CLI replies verb. No runner work, no tests, nothing run. BUILD.md lists the rulings, the row 225 contract and what is left.	2026-10-24 05:39:16 -05:00
Lena	bc4e94166d	row 296: record scoped scratch acceptance and mutant evidence (#1802 )	2026-10-24 05:39:14 -05:00
Lena	35f32b0326	Untested: record R7 reload ordering and slot boundaries (#1802 )	2026-10-24 05:39:13 -05:00
Lena	fca8c68ccc	Untested: preserve R7 shell cleanup during mutant runs (#1802 )	2026-10-24 05:39:13 -05:00
Lena	4f7bb95b33	Untested: row 296 scratch two-instance acceptance (#1802 )	2026-10-24 05:39:13 -05:00
jason.woltje	d91b580c3b	row 296 handoff: FED R7 design notes to lena/row296 (mos-1503, Q245) Quackerjack stops row 296 here. BUILD.md holds the verified reads, the proposed harness design, the open decisions for Lena, and the R2 learning that R7 depends on. No test or code changes in this commit.	2026-10-24 05:39:13 -05:00
jason.woltje	98235fdb32	docs: row 285 brief amendment 1, the chief's gitea reference is required only when the business declares a library, row 323's Case 1 file and test stay byte-identical (mos-1580); Beakley reports go to Sage (mos-1579); doc only	2026-10-24 05:36:04 -05:00
jason.woltje	b19ffa04f8	agents: register Codex seats Magica (row 285) and Rockerduck (row 286) for the rebases onto refactor (mos-1576, mos-1542); doc only	2026-10-24 04:51:38 -05:00