docs: address Q195 editor design review findings

BUILD-LOG.md

@@ -5177,3 +5177,9 @@ Before: managed project/thread verbs had no Console conversation area. After: fi
 2026-10-21T01:28:05Z | Darkwing | row 232 #1734 installer I1 build, round 1 in review | Before: stack-release.sh managed only user units (systemctl --user), and stack-copy.sh had no bundle copy. After: --units external (adopt, activate, rollback --to, status, confirm, revert, gate --since, AWAITING-UNITS, stale-start, external-pm, --plan --expect-from) and stack-copy check --units external, copy --bundle FILE SHA, wrapper ID --create; user mode byte-identical to the base by test. First build 0af0c73c6 on 00d4cc1f6; rebased onto row 200 (cb5fdb064) as a0ffabc3f on darkwing/row232-r1; --sso refused under external (D9), row 200 config_checks run under external (D10). Gate on Sage's slot (sage-1618): cli 561/0, every scripts/test-*.sh green; 17/17 mutants killed. Results commit 84f1a91e6 (pushed, seat branch only). Manifest 7a3b4ea1 (9 paths), queue revs 2595-2596, request comment 29825, reviewer Filbert. Packet agents/darkwing/work/queue-232/BUILD.md.
 2026-10-21T04:50:44Z | Darkwing | row 233 #1735 installer I3 build, round 1 in review | Before: root had no upgrade driver for root-owned units and no host run sheet; stack-release.sh had no rehearse --backup last and no external plan refusals. After: scripts/stack-upgrade.sh upgrade and rollback (r6 A1-A5, A2f, R1-R4) with 20 tests, docs/guides/host-run-sheet.md, TOOLS.md lines, and on Sage's rulings stack-release.sh --backup last, BACKUP_STORE and the --plan refusals open-activation and migrate-required (3 tests). Base e65a3ab4d (row 232's landing). Gate on Sage's slot (sage-1704) on d99166ade: cli 616/0, every scripts/test-*.sh green, 1201/0 summed by awk; m1-m8 8/8 killed. Correction: the process sweep after the gate found an orphaned sleep 60 from the lock test's flock holder (N1); 08db6ac3f fixes it test only, Sage ruled the gate stands (sage-1707), rerun c0 20/0 and m1 killed with 0 left (sage-1708). Tip 1a1dc80ca (pushed, seat branch only). Manifest 464ce9eb (7 paths), queue revs 2644 and 2647, request comment 29901, reviewer Filbert. Packet agents/darkwing/work/queue-233/BUILD.md.
 2026-10-21T06:37:41Z | Darkwing | row 240 #1746 installer I4 build, round 1 in review | Before: root had no host check for the bwrap AppArmor profile, its pins or a boot unit, and stack-upgrade.sh exited 1 args-failed when the args move after A5 failed, while exit 1 means the old copy runs. After: scripts/case1-hostcheck.sh (seven items, --check, --enforce, --upstream), scripts/case1-pins.sh, mosaic-hostcheck.service and 16 tests; the args move failure exits 5 args-failed, documented in TOOLS.md and run sheet section 6 and tested; run sheet section 3 puts the pinned npm on PATH and names the bin/claude.exe --claude path; sections 8 and 10 have precheck lines. Verification: slot run r1 on 47ec9fe2f failed at the singles (the new N1 test's after hook threw ENOENT after the fixture cleanup removed the root); b45852daa drops the hook; r2 on b45852daa green: singles 16/0 and 21/0, c0 plus M1-M8 8/8 killed, cli 639/0, scripts 585/0. Candidate darkwing/row240-r3 ad1b23ab2 on c771a36f4, manifest 573ece95 (9 paths), revs 2694 and 2695, comment 29943.
+
+2026-10-21T16:04:23Z | Q195/Q196 writing editor design, #1752 / Vikunja #448 | Before: row 154 edits Markdown in a separate Docs view, with no selected-word thesaurus or document pins. After: design draft on gyro/editor-design compares three editor approaches, records WordNet source/license/size, folds the pane/pin model and specifies guarded context/proposal APIs, DesignCraft handoff and seven proposed briefs. Q196 changes the basis to a Word-like interface. Verification so far: editor/provenance checks 10 pass, 1 explicit rebuild skip (pinned esbuild absent); brief fields, unique headings and 11-line checklist checked. Product, queue and live state unchanged. WordCraft scratch evaluation is being incorporated before publication. Review and Jason choices remain open.
+
+2026-10-21T16:22:36Z | Q195/Q196 design verification, #1752 / Vikunja #448 | Folded Fenton 7caf8008b and Louie 880ef19e0. Recommend bounded O3: Word-like DOM editor plus isolated headless DOCX export, with explicit feature cut and semantic loss checks. WordCraft web 44,179,239 bytes, identical twice; measured comment/footnote conversion limits recorded. Seven briefs and 12-line checklist validated. Fresh editor/provenance: 10 pass, 0 fail, 1 explicit rebuild skip (esbuild 0.28.2 absent). CI queue guard identity gyro/purpose push returned documented degraded-pass (exit 0), CANNOT_ASSERT credential-unresolvable, scratch audit gyro-q195-ci-queue-audit.jsonl; no fallback or CI-green claim. Documentation-only candidate for Mos/Fenton review, no source, queue or live changes.
+
+2026-10-22T16:06:34Z | Q195/Q196 design review fixes, #1752 / Vikunja #448, mos-1300 / fenton-0004 | Before: draft 105811400 had owner-only thread wording, stale source positions, two mismatched seat/model assignments, an assumed library save boundary and 12 owner questions. After: grant-aware pin validation and stale/revoked access redaction; references refreshed against aca16404c, including public/bus.js and README offsets; Sage assigns model-only seats; unimplemented library.file.save/C2-11b brief blocks book editing; tabs explicitly cover 62-76rem; J7 stricter context choice recorded; pronouns removed; six owner questions. Static docs/source-anchor checks only, no builds, product suites, MVP gate slot or live action. Fenton re-check pending; O3 and both companion folds retained.

adapters/README.md

@@ -75,8 +75,7 @@ session's workspace and its own process group. Same contract, plus:
 | `MOSAIC_POLICY_FILE`, `MOSAIC_TOOLS_FILE` | The bundle's gate policy and typed tools. |
 | `MOSAIC_TOOL_SOCKET` | The runner's tool socket, which the typed tools call. |
 | `MOSAIC_TURN_MARKER` | `pi`: the extension writes it at `agent_end`; a pi turn that exits 0 without it failed. |
-| `MOSAIC_EXTENSIONS` | `pi` only: extension files loaded with `-e`; a missing one exits 2. The pi module names two: the gate and typed tools extension, then the unslop check's `tools/unslop-hook/extension.ts` (row 66). |
-| `MOSAIC_UNSLOP_LOG` | The unslop check's JSONL log, `<run>/unslop.jsonl`, which the runner sets for both adapters and reads after each turn (row 66). |
+| `MOSAIC_EXTENSIONS` | `pi` only: extension files loaded with `-e`; a missing one exits 2. |
 | `MOSAIC_CLAUDE_SETTINGS`, `MOSAIC_CLAUDE_MCP_CONFIG` | `claude` only: the bundle's gate hook and MCP server; required. |
 | `MOSAIC_THINKING` | The route's thinking level (row 65), which the harness module's `levels()` already checked. `pi` passes `--thinking` (`off`, `minimal`, `low`, `medium`, `high`, `xhigh`, `max`) and omits it when unset, as for `run-task.sh` workers. `claude` passes `--effort` (`low`, `medium`, `high`, `xhigh`, `max`) and requires it; unset exits 2. |
 | `MOSAIC_CLAUDE_BIN` | `claude` only: absolute path of the CLI to run, from the host's environment (the bus unit pins it). Unset or empty runs `claude` from `PATH`; a relative path or a non-executable file exits 2. |
@@ -111,18 +110,3 @@ argument, which Linux caps at 128 KiB; row 213 passes the file instead, so no
 local user reads the prompt in `/proc/<pid>/cmdline`. Pi 0.85.1 uses the path
 string itself as the prompt when the file is missing or can't be read, so the
 pi adapter exits 2 unless the path is a readable regular file.
-
-### The unslop check (row 66)
-
-Both adapters run the mechanical writing check from `tools/unslop-hook`,
-driven by one `lists.json`. `pi` loads it as its second `-e` extension.
-`claude` runs `claude-hook.js` from the bundle's `settings.json`: the Stop
-hook checks the turn's replies, and the UserPromptSubmit hook adds the
-correction notice as context on the next turn when the last reply had
-tells. Each hook command ends `; exit 0`, so neither blocks. Both log to
-`MOSAIC_UNSLOP_LOG`, and the runner adds a note for the operator to the
-next RESULT it sends (`packages/harness/README.md`, the runner). The
-harness modules mount the three files read-only at their own paths, and
-the manifest records their digests. `MOSAIC_UNSLOP_HOOK` and `UNSLOP_LISTS`
-aren't in the session environment's allowlist, so a managed session can't
-switch the check off or swap its lists.

agents/darkwing/work/queue-251/BUILD.md

@@ -1,191 +0,0 @@
-# Row 251 build: T27 lists no identities right after `ssh-add -t 1` (Vikunja #453)
-
-Brief `docs/plans/2026-10-21_t27-ssh-add-lifetime.md` (rev 2931), Mos ruling mos-1185 item 2, assigned in
-sage-2075. Owner Darkwing, reviewer Dewey, gate owner Sage. Branch `darkwing/row251` from 3b0aef995,
-claimed in-progress at rev 2938.
-
-## Step 1: the failure names its cause (e5e4b2e5a)
-
-T27's two lists now carry a message that prints only when they fail. It gives the time from addKey's
-start to its resolve and to each `ssh-add -l` call, the hrtime at each with how far into its second it
-fell, `/proc/uptime` at each, and whether the agent process and its socket were still there. The checks
-themselves did not change. The commit holds nothing else.
-
-## Step 2: the cause
-
-ssh-agent counts a key's lifetime in whole seconds of CLOCK_BOOTTIME, at the add and at the reap. I read
-OpenSSH 10.5p1, the version on dragon-lin (`ssh -V`: OpenSSH_10.5p1), at tag V_10_5_P1 (ssh-agent.c
-sha256 873691c4, misc.c sha256 ee467f43):
-
-- `misc.c:1790-1798` and `:1828`: `monotime()` returns `ts.tv_sec` of `clock_gettime(CLOCK_BOOTTIME)`,
-  falling back to MONOTONIC. The fraction of the second is dropped.
-- `ssh-agent.c:1315`: the `-t` constraint sets `*deathp = monotime() + seconds`. Lines 1410 and 1598
-  do the same for the agent's default lifetime.
-- `ssh-agent.c:1064`: the reaper drops a key when `now >= id->death`, `now` being `monotime()` again.
-- `ssh-agent.c:2650`: the main loop runs `reaper()` after every poll, before it reads requests. A list
-  that arrives after the boundary sees the key gone.
-
-So a key added at second s plus a fraction f dies at s + N, and `-t N` keeps it N - f seconds, between
-N - 1 and N. With `-t 1`, an add late in a second leaves the key milliseconds to live. That matches
-Sage's probe in the brief: 8 of 80 `-t 1` adds missed, each one made at 0.9947-0.9973 of a monotonic
-second and finished at 0.998-0.0008, and none earlier in the second missed. It also matches proof 5's
-failure, where the first list ran 31.9 ms into the test and found no identities.
-
-Node's hrtime is CLOCK_MONOTONIC. BOOTTIME differs from it by the time the host spent suspended. On
-dragon-lin the difference read 0.000001 s at 19:09Z, so a monotonic second boundary is a BOOTTIME one
-here.
-
-`addKey` and the agent start are not the cause. `addKey` passes the lifetime through as `-t`
-(`host-run.mjs:90`), and the agent starts with no default lifetime (`:175`). Production adds the key
-with `timeout + 30` (`:180`), where losing up to a second makes no difference. The only caller that
-can't afford the lost fraction is T27, which asks for 1 s. The fix belongs in the test's lifetime choice,
-and `host-run.mjs` doesn't change.
-
-The slot confirms this against T27 itself (below), not just from the source.
-
-## Step 3: the fix (this commit)
-
-T27 adds the key with `-t 2`. The agent then keeps it more than 1 s and at most 2 s. The first list
-runs milliseconds after the add, so it has over a second of margin even under load. The sleep before
-the second list grows from 2.5 s to 3.5 s, which keeps the old 1.5 s margin past the new 2 s ceiling.
-Both checks stay: listed after the add, gone after the lifetime. A comment above the add says why the
-lifetime is 2.
-
-I considered `-t 3` with a 4.5 s sleep for a 2 s floor. One second of floor is far above anything the
-first list has needed (31.9 ms in proof 5), and the concurrent-suite run below tests it under load, so I
-took the smaller change.
-
-## Base
-
-The branch stays on 3b0aef995. By 19:15Z origin/refactor was at 6096b051b, after rows 66 and 243
-landed. `git diff 3b0aef995 6096b051b` touches neither `packages/bus/src/host-run.mjs` nor
-`packages/bus/tests/host-run.test.mjs`, so there's no rebase (sage-2084). Row 243 did change
-`packages/bus/tests/process.test.mjs`. My slot's bus suites run that file as it was at 3b0aef995, and the
-gate rerun on Sage's slot runs it as landed.
-
-## Prediction for part A on e5e4b2e5a (written before the slot)
-
-The hook starts `ssh-add -t 1` at the given fraction of a monotonic second. From the brief's probe, the
-agent stores the key about 3 ms later. The first list reaches the agent a few ms after addKey resolves:
-Node's exit event, the mark, and `ssh-add -l`'s own start. A red needs the add to land before the second
-boundary and the list to land after it.
-
-- 0.990: green. The add and the list both land before the boundary.
-- 0.993, 0.995, 0.996, 0.997: red expected. The add lands before the boundary, the list after. At 0.993
-  and 0.997 I'm less sure, because the list (at 0.993) or the add (at 0.997) can land right at the
-  boundary. A green at either is in line with the cause, and so is a red.
-- 0.998: green. The add lands after the boundary, so the key gets almost a full second.
-
-Every red should show "first list got" an answer with no SHA256 line. It should also show addKey
-resolving before a second boundary and the first list starting after it or within a few ms of it, with
-the agent alive and its socket present.
-
-Under sage-2084's rule, on e5e4b2e5a only a red at 0.990 or 0.998 counts toward the stop, and two such
-reds stop the run. On the fix commit any red counts, and two stop it. In parts B to D, the first red stops
-the run.
-
-## Slot plan
-
-All scripts are in `/mnt/storage/scratch/darkwing-251-out/`, launched from `/`, each behind the busy
-checks and chained with `&&`, TMPDIR under `/mnt/storage/scratch/tmp`.
-
-1. Confirmation. `align-hooks.mjs` is a load hook, outside the repo, that serves `host-run.mjs` with
-   `addKey` wrapped to start `ssh-add` at a chosen fraction of a monotonic second. T27 runs unchanged
-   under it, alone (`--test-name-pattern`). It runs at fractions 0.990, 0.993, 0.995, 0.996, 0.997 and
-   0.998, three times each:
-   - on e5e4b2e5a (step 1, `-t 1`). Expected: some first lists fail, and the step 1 message shows the
-     add's resolve and the list on either side of a second boundary, with the agent alive and the
-     socket present. These reds are the point of the run.
-   - on the fix commit (`-t 2`). Expected: all 18 pass.
-2. `host-run.test.mjs` whole, once, on the fix commit.
-3. The bus suite whole, three times in a row.
-4. The bus suite whole in two clean worktrees at the same commit, started together.
-
-## Slot results
-
-Sage's CLEAR came in sage-2154 at 20:58:55Z. `slot-251.sh` ran parts A and B from 20:59:22Z to 21:01:33Z,
-on node v26.8.1 and OpenSSH_10.5p1, with TMPDIR `/mnt/storage/scratch/tmp/r251`. At the start, BOOTTIME
-minus MONOTONIC read 0.000001 s, then 0.000000 s twice (dewey-0769 N1). So the hrtime fractions below
-put the agent's second boundary in the right place.
-
-### Part A: T27 alone under `align-hooks.mjs`, 3 runs per fraction
-
-The fraction is when the hook started `ssh-add`. The hook logged each start within 0.0001 of its target.
-
-| fraction | e5e4b2e5a (`-t 1`) | 68f2dfd4b (`-t 2`) |
-|---|---|---|
-| 0.990 | 3 pass | 3 pass |
-| 0.993 | 3 pass | 3 pass |
-| 0.995 | 3 red | 3 pass |
-| 0.996 | 3 red | 3 pass |
-| 0.997 | 3 pass | 3 pass |
-| 0.998 | 3 pass | 3 pass |
-
-e5e4b2e5a went red 6 times out of 18, every time at a fraction the prediction named, so none of them
-counted toward the stop. 68f2dfd4b passed all 18. The fix runs used 68f2dfd4b, whose test blob is the same
-as c19b4167e's (280132c7).
-
-Every red failed on the first list and got `"The agent has no identities.\n"`, with the agent alive and
-its socket present. The step 1 message gave these hrtime fractions. "addKey start" is the mark before the
-hook's wait, so its fraction is earlier than the ssh-add start.
-
-| run | addKey resolved | first list mark |
-|---|---|---|
-| 0.995 rep 1 | 0.9992 (+317.6 ms) | 0.9993 |
-| 0.995 rep 2 | 0.9991 (+846.5 ms) | 0.9991 |
-| 0.995 rep 3 | 0.9988 (+845.0 ms) | 0.9988 |
-| 0.996 rep 1 | 0.9999 (+839.8 ms) | 1.0000 |
-| 0.996 rep 2 | 0.0004 (+845.0 ms) | 0.0004 |
-| 0.996 rep 3 | 0.0002 (+835.9 ms) | 0.0002 |
-
-At 0.995 the add finished about 4 ms in, before the boundary, and the list mark came just before it. The
-`ssh-add -l` process then reached the agent after the boundary. At 0.996 the agent stored the key before
-the boundary, and addKey resolved just after it. In both cases the key's whole second ended between the
-add and the list, which is the cause step 2 gives. The two edge fractions came out green on the first
-build. At 0.993 the list still reached the agent before the boundary, and at 0.997 the add landed after
-it, so the key got almost a full second. The prediction allowed either result at those two.
-
-### Part B: `host-run.test.mjs` whole on 68f2dfd4b
-
-24 tests, 24 passed (21:01:18Z, 14.0 s).
-
-### The stop before C1, and the resume
-
-At 21:01:33Z the script stopped before C1, with exit 4 and no red. My own `busy.sh` matched two `sleep 60`
-processes, mine, in `darkwing-r251/packages/bus`. Part B left them. They come from T27 "the start sweep
-keeps a live bus dir and kills only a matching live process" (`host-run.test.mjs:528` and `:536`). Its
-`t.after` SIGKILLs the `/bin/sh -c 'sleep 60; :'` parent, but the `sleep` child lives on for up to 60 s.
-That code is outside this row's diff, so the row leaves it alone, and it's recorded below as a follow-up.
-Sage confirmed (sage-2159) that the right move is to resume only the scope that hadn't run.
-
-`slot-251-cd.sh` runs C and D as `slot-251.sh` has them, with the same two busy checks. Before each check,
-it waits up to 75 s for those orphans to exit: my uid, my trees, a command line of exactly `sleep 60`.
-It logs them as it waits. Any other process still trips the checks.
-
-### Parts C and D: the bus suite whole on 68f2dfd4b
-
-| run | start | tests | pass | fail | time |
-|---|---|---|---|---|---|
-| C1 | 21:02:48Z | 598 | 598 | 0 | 21.6 s |
-| C2 | 21:04:06Z | 598 | 598 | 0 | 21.4 s |
-| C3 | 21:05:26Z | 598 | 598 | 0 | 22.1 s |
-| D1, darkwing-r251 | 21:06:44Z | 598 | 598 | 0 | 24.2 s |
-| D2, darkwing-r251b, TMPDIR `r251-b` | 21:06:44Z | 598 | 598 | 0 | 24.2 s |
-
-The script waited 33 s before C2, 34 s before C3, 33 s before D and 32 s before the sweep. Each time it
-was waiting for that run's `sleep 60` orphans (two per suite, four after D), and nothing else. After the
-wait, the sweep of my trees, the out dir and TMPDIR found 0 processes left (21:08:04Z). Sage confirmed
-(sage-2159, sage-2160) that the short gitea-api and `node --check` runs they made during the slot weren't
-stops. None of my busy checks refused on any of them.
-
-These runs used the bus files as they were at 3b0aef995. Since then, origin/refactor (666173292, then
-7247d80c7 and c3d88840c with row 196) has changed `broker.mjs`, `runtime.mjs` and `server.mjs`, which T27's
-file imports, along with other bus files. None of those commits touch this row's two paths or
-`host-run.mjs`, and `git merge-tree` of c3d88840c with 68f2dfd4b is clean. The gate rerun in
-a clean worktree on Sage's slot runs T27 against them.
-
-### Follow-up, not in this row
-
-T27's start-sweep test leaves the `sleep 60` child of each planted shell running for up to 60 s after
-the test. Killing the process group (`process.kill(-pid)`; both shells are spawned `detached`) or
-`exec sleep 60` in the shell would end the child along with its parent.

agents/herb/work/queue-197/BUILD.md

@@ -1,432 +0,0 @@
-# Row 197 execution ledger
-
-Plan: MANIFEST.md r2, approved by Webby ca6b32d66.
-Build grant: sage-1390. Suites, image builds and paired proof are not granted.
-Rebased five documentation commits onto origin/refactor aa1bd209e before code.
-Existing worktree herb/row197 and plain node_modules symlink retained.
-
-- T1 preflight/steps: in progress.
-- T2 locks/status/recovery: pending.
-- T3 image/Docker: pending.
-- T4 fixtures/timing: pending.
-- T5 evidence/acceptance: historical timing done; implementation pending.
-
-Preflight interfaces: T1 RunPaths supplies T2 ownership and T3 image checks.
-T2 run receipt supplies T4 lane/port state and T5 attribution. T3 image identity
-is checked before Docker-bearing steps. T4 timings supply T5 pair summaries.
-No interface conflict found. No product API or assertion changes are authorized.
-
-Ruling: use this approved BUILD.md as the execution ledger, rather than adding
-skill workspace paths outside the manifest. This preserves the reviewed path
-boundary. Missing ledger detail would cost recovery time, not product behavior.
-
-## Implementation checkpoint 2026-10-20T20:11:58Z
-
-T1-T5 source is present within the approved manifest. Full acceptance is pending.
-Fresh single-file checks: preflight/supervisor 6/6; state/recovery 11/11; image and
-Docker guard 4/4; port leases/attribution/proof summary 3/3. No skips or failures.
-Existing files checked singly: board serve; WebUI serve, preview, proof-cli,
-tester-cli and service; harness pi and Claude. Stack-release R1 selected single
-passed 1/1. WebUI service also passed 31/31 with lane-a leases and a 30-byte root.
-All existing assert lines are unchanged. Shell syntax and diff checks pass.
-
-Observed defects fixed during the single-file cycles: cancellation incorrectly
-returned zero when a TERM handler exited zero; recovery did not supersede an
-unclean terminal; status omitted the lock-before-receipt window. Evidence logs
-retain the failing and passing observations. Source still has no commit because
-applicable suites have not run. No image build, proof, push or live operation.
-
-Ruling: use an instrumented single-lane author gate on a frozen dirty-source
-clone before committing source. The new wrapper requires a clean candidate and
-proven image receipt, while repository rules require green suites before source
-commits. The author gate retains every suite and assertion, caps concurrency at
-two, uses own port/state/temp/project roots, and guards Docker against builds.
-Cost if wrong: the author gate fails; clean-candidate wrapper baselines and the
-paired proof remain mandatory after source is verified and committed.
-
-Ruling: publish the initial run directory atomically after the start receipt is
-complete. This avoids a second lane observing a partially written start. A
-crash before publication has started no test or mutable Docker operation.
-Cost if wrong: a lane refuses or quarantines; no protected state is bypassed.
-
-## Implementation review corrections, 2026-10-20T20:33Z
-
-Webby-0029 reviewed the first implementation packet at f942bd7d4.
-B1 identified missing manifest tests. B2 identified a test that leased both real
-bands through a private lock namespace. The old author-gate clear was withdrawn
-in herb-0019. SOURCE.json, BUILD.patch and gate.sh still describe the old frozen
-clone. They are not a clear for the edited working tree. No author gate ran.
-
-B2 correction: the helper test uses only the active lane and MOSAIC_GATE_STATE.
-It compares the other band arithmetically and has no unasserted listener. The
-occupied-port probe first obtains its own real lease, binds that port, and
-asserts that its sentinel listener survives refusal. No test reserves another
-lane's band. Exhaustion narrows only the test process's band to one owned port.
-
-B1 coverage added within the existing approved paths. No case is dropped:
-
-| Manifest case | Added check |
-| --- | --- |
-| T1 canonical and builder checkout, existing output | gate-lane.test: direct validateRun refusals |
-| T1 92-byte socket and over-107-byte socket | exact design example with a distinct gt- test root; 108-byte refusal |
-| T1 both candidates carry tooling | validateTooling compares each launcher file, including missing and changed cases |
-| T1 duplicates and NODE_TEST_CONTEXT | repeated package/script fixture is retained; sanitized environment is exercised by both supervised children |
-| T2 one-winner race and inherited FDs | two actual shell wrappers race; a controlled supervisor verifies held FDs, and its child checks that no FD points to either lock file |
-| T2 same checkout and legacy claim refusal | activeConflicts uses synthetic process observations with a live lane and a sibling landing gate |
-| T2 surviving child and interrupted recovery | locked recovery kills a child proven by the private root, preserves a foreign child, is killed during fake Docker cleanup, leaves quarantine, and resumes under a new fixture grant |
-| T3 missing receipt and missing image | verifyImage refuses absent provenance and failing inspection |
-| T3 tag changed mid-gate and at gate end | runGate now uses the same executePinnedSteps boundary exercised by the tests; the next step never runs after a changed ID |
-| T3 mutable-tag rebuild | fake preparation returns a new image ID with identical input digest; the old receipt refuses it |
-| T3 cold and warm counters | preparation records one build and its time; warm execution records zero builds; repeated verification never builds |
-| T4 parallel test-file leases | two generated Node test files hold ports in the same lane/state; locks are checked during child execution and shutdown |
-| T4 exhausted band, occupied port and foreign listener | a one-port process-local band refuses both a held lease and an existing sentinel listener; the listener survives |
-| T4 owner death | a killed allocator releases only its own holder; a foreign lease remains held |
-| T4 lease through child shutdown | parent probes the lock while the fixture test runs and after its child has stopped |
-| T4 fixtureCacheEnv | replacement child environment writes only under separate tmp, jiti and cache directories |
-| T5 unrelated session append | a separate process waits for a running-step barrier, appends under a fixture HOME, and remains unrelated in the resulting metadata attribution |
-
-N1 removes the unused closed binding. All leases reserve an unbound endpoint;
-existing closed options need no call-site change. N2 makes child TMPDIR a tmp
-subdirectory. N3 normalizes ss interface scopes before checking port 9. N4 uses
-gt- for unit run roots. N5 documents the canonical node_modules dependency.
-N6 is recorded: row 200 also edits stack-release.test.mjs; the second landing
-must rebase and rerun that file singly. Sage was told in herb-0019.
-
-Before Sage's hold, expanded preflight tests passed 11/11, state tests 14/14,
-image tests 7/7, and the pi/Claude singles passed 8/8 each with separate tmp
-subdirectories. Later source/test edits still need verification. In particular,
-the new parallel test-file probe had a cleanup-order defect and is unverified.
-Its root cleanup ran before child shutdown. Cleanup now stops children before
-removing their root. Output is retained for a useful failure report. The initial
-FD probe also assumed Node did not reopen FD numbers; it now checks the actual
-lock targets. The early passing fixture file covered child allocators, before
-they were changed to actual generated test files. It is not acceptance of the
-latest file.
-
-Sage-1448 stopped all node --test runs at 20:30Z for Rocko's browser slot.
-The remaining owned process tree was stopped at 20:30:32Z. Inspection found no
-remaining owned test processes afterward. Edits and static inspection continue.
-20 module syntax checks, shell syntax and git diff checks pass. Existing-file
-assertion lines remain identical to HEAD. No test is run during the hold.
-
-Next: after Sage passes Rocko's clear, verify the corrected files singly,
-including a lane-env helper-file check. Then refresh the frozen clone and all
-three packet artifacts, send their hashes, and request a new author-gate clear.
-Suites, image builds and paired proofs still need their own grants. No source
-commit, push, suite, real Docker build or paired proof has run in this phase.
-
-## Refrozen review packet, 2026-10-20T20:41Z
-
-Sage-1454 lifted the single-file hold. Fresh runs passed without failures or
-skips: review-t1-resume.log 11/11, review-t2-resume.log 14/14,
-review-t3-resume.log 8/8, review-t4-resume.log 8/8. The helper file also passed
-8/8 with lane-a environment in review-t4-lane-a.log. Its retained state had only
-an a port-lock namespace, no b directory, and every lock was released. Generated
-fixture Node test entries explicitly use --test-concurrency=2. The child-test
-probe now finishes and cleans up before removing its root. All 41 new tests pass.
-
-B1 and B2 fixes are ready for Webby's review. No manifest case was dropped.
-All 25 source paths were copied to a new frozen clone and compared by mode and
-SHA-256. This supersedes the earlier withdrawn source packet:
-
-- SOURCE.json: 91ba149f2fc039a8bed0e6d1ad5da44b80fb8cbec84d0fa4e38616040138596b
-- gate.sh: 48e06e23e45d3484755f8cd79ad5b6dfde5ef4f960081e7c455a2540e707fed1
-- BUILD.patch: 0b3871bd9848ca223c7cda50266debc04643e5d986eb7f0fece096aaf25ff43e
-- Frozen checkout: /mnt/storage/scratch/mg197-a-d22dacd92735/wt
-- Output: /mnt/storage/scratch/mg197-a-d22dacd92735/out
-- Temporary root: /mnt/storage/scratch/ga-VPXhG7 (30 bytes)
-- Compose project: mg197-a-d22dacd92735
-
-After an explicit author-gate grant, run this command with Sage's actual ID:
-
-```sh
-env MOSAIC_GATE_GRANT=ACTUAL_SAGE_GRANT_ID bash /home/jwoltje/.t3/worktrees/mosaic-stack/herb-row197/agents/herb/work/queue-197/gate.sh > /mnt/storage/scratch/mg197-a-d22dacd92735/out/gate.log 2>&1
-```
-
-No gate or suite has started. Queue order from sage-1454 is 192, 201, 204,
-200, Gander, then 197. No branch deletion is authorized or attempted. Any later
-rebase uses a new branch name, and pr-merge.sh -d stays off under #426(a).
-Whichever of rows 197 and 200 lands second must rerun stack-release singly.
-Clean-candidate wrapper baselines, image preparation and paired proofs remain
-separately gated acceptance work. There is still no source commit or push.
-
-## Implementation approval and final notes, 2026-10-20T20:47Z
-
-Webby-0031 approved r2 in REVIEW-impl-r2.md at 1f404c973. Their static review
-verified every source hash/mode and patch result, and all B1/B2 cases. No queue
-review request comment exists yet; Sage owns creating it if needed.
-
-Folded all three optional notes into the same approved paths. The helper file's
-standalone fallback now shares /mnt/storage/scratch/mosaic-gate-lanes with real
-lane-a leases and leaves its stable lock files in place. Band assertions use the
-imported BANDS. Both T5 polling children fail after five seconds if their barrier
-is missed. README records the shared standalone namespace and deadlines.
-
-Fresh single-file logs review-r3-fixtures.log and review-r3-lane-a.log both pass
-8/8 with zero skips. The lane-a run has no b lock directory, and every lock was
-released. Syntax and diff checks pass. No existing test assertions or timeouts
-changed. Remaining source matches the 11/14/8-file checks from r2.
-
-Refreshed all 25 source rows in the existing frozen checkout. New digests replace
-the preceding r2 packet. gate.sh and its command are unchanged:
-
-- SOURCE.json: 3584763642506e81a532c839bdd07b111d25daa87e35dbe441d8e8c01a2c2aab
-- gate.sh: 48e06e23e45d3484755f8cd79ad5b6dfde5ef4f960081e7c455a2540e707fed1
-- BUILD.patch: 55fe390da17ab926a0593d39e79561abe52756a1b1a2c756ec57f45d90f10fde
-
-Author gate remains unstarted and queued for Sage's explicit grant. No source
-commit, suite, image build, paired proof, push or branch deletion ran.
-
-## R3 approval receipt
-
-Webby-0033 approved r3 in REVIEW-impl-r3.md at a5643f9bd. Static review verified
-the three packet hashes, all 25 source rows, and the patch result. Their review
-accepts N1-N3; no additional hang-guard test is requested. No queue review request
-comment exists yet, so Webby has not recorded a queue review.
-
-Read-only verification after receipt confirms that the approved packet hashes
-and all 25 worktree/frozen source hashes and modes still match. Source and gate
-script stay frozen. The author gate has not started and still needs Sage's grant.
-
-## Queue review round 1
-
-Sage-1476 authorized moving row 197 to in-review before the author gate.
-Created CANDIDATE.sha256 from the same 25 reviewed SOURCE.json rows. Its digest
-is 6318f0d0bba9ee90ccaa3503cac8c2e04c6397f2ef6c3564f687fbc2092989e3.
-Ran the queue move from the canonical checkout with op herb-197-review-r3.
-The move succeeded at revision 2395, opening round 1 on #1695. The request post
-failed before send because MOSAIC_GITEA_CREDENTIAL_FILE is not set; revision 2396
-records the failed outcome. Exit code 1 describes the failed post, not a failed
-row transition. Read-back confirms state in-review and the correct candidate.
-Sage will post as jarvis and give Webby the request comment number. No credential
-lookup, alternate post or retry was attempted here.
-
-SOURCE.json, BUILD.patch, gate.sh and all 25 frozen source rows remain unchanged.
-Latest slot order is row 190 r2, 201, 204, 200, Gander, then Herb. No gate starts
-before Sage sends an explicit grant ID.
-
-## Follow-on assignment
-
-Sage-1503 assigns row 215, Case 2 C2-04, to Herb after row 197 (queue rev 2455,
-Gosalyn design r11). Read docs/plans/2026-10-20_case2-rows.md, C2-04 section,
-at 5b8def2f1 when starting that row. Its required base is origin/refactor
-305857c8f. This assignment does not replace row 197 or authorize its gate.
-Keep row 197's approved source frozen while awaiting Sage's grant. Start row
-215 only after row 197, using a new branch name under the existing fleet rule.
-
-## Round 2 merge preparation on row 233
-
-Sage-1757 replaces history replay with one candidate commit on 57f59e0c3.
-The attempted history replay on herb/row197-r2-233 had already finished when
-that instruction arrived. Its only conflict was the append-only BUILD-LOG tail.
-That branch remains for history; none of its replayed commits is in this round.
-The current branch is herb/row197-r3-233, directly from
-57f59e0c399ce29b1bb85ca6af686fdc10eb195d.
-
-Stash correction: shared refs/stash was used incorrectly. The exact entry
-2767b88549dfd8c7e810908b5416876fa50cb571 is now kept on
-herb/row197-r3-wip. After verifying stash@{0} still named it, only that entry was
-dropped. The two other entries remain. No further stash creation, force push,
-branch deletion or refs/stash mutation is planned. A separate working-copy
-backup is /mnt/storage/scratch/herb197-merge-W4oiLg.
-
-Sage-1760 requires preserving every landed hunk on every changed manifest path.
-Checked each of the 25 r1 paths with git diff aa1bd209e 57f59e0c3 -- PATH.
-Exactly three changed upstream. Their r2 diff against 57f59e0c3 is captured in
-r2-merge-only.patch:
-
-| Merged path | Only row 197 changes against landed base | Landed content retained |
-| --- | --- | --- |
-| packages/cli/tests/stack-release.test.mjs | leasePort and laneAfter imports; freePort now calls the lease helper | All landed tests, including row 233's tests after R15 and BACKUP_STORE checks |
-| packages/webui/tests/service.test.mjs | leasePort and laneAfter imports; closedPort now calls the lease helper | SEND_REFUSAL permits --sso; default unit rendering removes the @CONFIG_ENV@ line |
-| scripts/test-discord.sh | fixture PI_CODING_AGENT_DIR setup; optional two-worker nested Node cap | Row 190's absent scratch MOSAIC_CONFIG selection and caller-config restoration |
-
-The other 22 paths equal the r1 reviewed source bytes and modes. r2-MERGE.json
-lists every path, its r1/r2 digest, mode, upstream-change flag and equality result.
-Source copies came from the hash-verified r1 frozen checkout. Original r1 digest:
-6318f0d0bba9ee90ccaa3503cac8c2e04c6397f2ef6c3564f687fbc2092989e3.
-No existing assertion or timeout line differs from the landed base. Static
-checks only: 20 module syntax checks, four shell syntax checks and git diff check
-pass. BUILD-LOG.md equals 57f59e0c3 byte for byte and is outside this commit.
-
-Sage explicitly requested the local candidate SHA before granting tests. This
-commit is an untested preparation checkpoint, not gate evidence. No tests or
-push are authorized yet. r2-TEST-FILES.txt lists the requested grant scope:
-16 Node test files singly and scripts/test-discord.sh, test-foundation.sh and
-test-queue.sh. The four stack-release consumers are stack-release.test.mjs,
-stack-release-external.test.mjs, stack-upgrade.test.mjs and stack-instances.test.mjs.
-The shared stack-release-fixture.mjs is exercised by its importing test files,
-not run as a standalone test. This covers all 13 touched Node test files plus
-three additional stack-release consumers and all three touched shell suites.
-
-Current slot order from sage-1760: Gizmoduck, Launchpad, Darkwing, then Herb,
-around 06:30Z. Wait for an explicit grant. After granted checks and authorized
-push, build the new candidate manifest from that pushed tip and open the
-merge-scoped round 2. Old SOURCE.json, CANDIDATE.sha256 and gate.sh remain r1
-historical artifacts and are not a clear to run the merged candidate.
-
-## Round 2 rebuilt on row 234
-
-Sage-1776 names landing c771a36f4bd0b6c359282425c668996a90072f93.
-Built a new branch, herb/row197-r4-234, directly from that landing. No history
-replay, stash, force push, branch deletion, test run or push is involved.
-The prior candidate a3b7cbde8 remains untested and is not the queued candidate.
-
-Checked git diff --name-only 57f59e0c3 c771a36f4 against all 25 source paths.
-Only packages/cli/tests/stack-release.test.mjs overlaps; the other 24 do not.
-The full comparison is in r2-on234-OVERLAP.txt. The stack-release file starts
-from the landing and keeps both T46 untimed entries, host_grants and hosts.
-Its only changes against the landing are the leasePort and laneAfter imports
-and freePort's call to the lease helper. r2-on234-merge-only.patch records those
-hunks. Existing assertions and timeouts match the landing exactly.
-
-Every other source path equals a3b7cbde8 byte for byte and retains its mode.
-This includes the previously merged service and test-discord files, preserving
-all landed --sso, CONFIG_ENV and scratch-config handling. The earlier evidence
-r2-MERGE.json still records those three pre-234 merge cases. The new
-r2-on234-MERGE.json records each current digest, prior digest, mode and equality
-result. BUILD-LOG.md equals the new landing byte for byte and is excluded.
-
-Static check of the changed Node file and the candidate diff pass. No tests
-were run. The scope stays r2-TEST-FILES.txt: 16 Node files singly plus the three
-shell suites. No manifest or queue round is rebuilt until granted checks and
-authorized push. Old SOURCE.json, CANDIDATE.sha256 and gate.sh remain historical
-r1 evidence. The test slot follows Darkwing 240 and needs Sage's explicit grant.
-
-
-## Round 6 preparation (sage-1883, mos-1162)
-
-New branch herb/row197-r6 starts at fefd54e13, after the standalone row
-212 landing ee7b2f137. No r5 manifest path changed between e7078e6a8 and
-this base; all 32 r5 blobs and modes were copied intact before the two
-umask changes. No history replay, stash, force push or branch deletion.
-
-executeSteps now launches each argv through /bin/bash with umask 022
-and exec, preserving the process group and argv boundaries. The supervisor
-and gate-lane.sh retain 077, including state, locks, private logs and roots.
-New gate-lane tests assert the actual child umask and created file mode,
-the unchanged parent mask, private log mode, and actual wrapper-created
-state/lock modes. No shell, image preparation, credentials test or other
-existing assertions changed. process.test.mjs equals the landed base;
-lane-image.mjs equals r5. N7 remains DEFERRED at fefd54e13; rows 243 and
-244 own the explicit chmod and PI_AUTH_FILE fixtures respectively.
-
-Read Sage's permitted failed pkg-bus log: process.test startup token refusal
-saw ready.ok true, consistent with inherited 077 narrowing its fixture mode.
-No further diagnostic read of the retained ga-8I3iZc root is needed.
-No r6 tests or probes have run. Source commit, push and new manifest await
-the explicit granted checks. r6-OVERLAP.json records the empty overlap.
-
-
-Sage-1892 focused grant: gate-lane.test whole 13/0, process.test whole
-through executeSteps 8/0, zero skips/cancellations. Syntax checks passed.
-All new umask/mode assertions passed. No Docker, image, lane or proof run.
-Empty /proc cwd/argv scan and removal recorded in r6-granted/cleanup.json;
-clear herb-0068 at 09:21Z. The source matches r5 on 29 of its 32 paths,
-including modes. Only BUILD.md, gate-lane.test.mjs and gate-lane.mjs differ.
-The new r6-OVERLAP.json records the base comparison. No process test edit.
-Sage-1895 authorizes one source commit and seat-only push after range check.
-
-
-## Round 7 preparation (sage-1951, sage-1955)
-
-The r6 proof passed all package suites with the original process.test,
-then failed script-release. The guard injected --no-build into compose run;
-Compose 5.5.1 rejects it before container creation. The old unit test only
-asserted the same invalid argv, so it could not detect this compatibility
-error. This supersedes no-build-flag claims in the historical packet.
-
-herb/row197-r7 starts at b1fece6f0. No r6 manifest path changed between
-fefd54e13 and this base; all 33 r6 blobs/modes were copied intact before
-r7 tests were authored. No history replay, stash, force push or deletion.
-Sage-1955 accepts the private tempRoot/compose-no-build.yaml override,
-mode0600, with build: !reset null and image pinned to the receipt's imageId.
-The guard owns the -f arguments and forces run --pull never --no-deps.
-Caller-supplied Compose config/build/pull options remain refused.
-The existing proof removes successful temp roots and retains failed roots;
-the override stays within that same cleanup ownership.
-
-Tests first: installed-binary run --help before SERVICE checks parser
-acceptance without starting a container. A separate compose config --format
-json check uses the actual candidate compose.yaml, made-up env/auth paths,
-and an empty Docker config directory, asserting no build key and the exact
-pinned image. The no-build-restoration mutant must fail that parser test.
-No test, probe or Docker command has run on r7; waiting for Sage's grant.
-
-Primary references: Docker's merge reference documents !reset null:
-https://docs.docker.com/reference/compose-file/merge/#reset-value
-Docker's run reference documents --pull and --no-deps, with no --no-build:
-https://docs.docker.com/reference/cli/docker/compose/run/
-Installed 5.5.1 acceptance and merged configuration are still unverified.
-
-
-Sage-1956 focused grant, 2026-10-21 11:19-11:21Z: busy check CLEAR.
-Whole gate-lane-image.test on the r6 guard: 9 pass, 2 fail. The installed
-Compose parser emitted unknown flag: --no-build; the other expected failure
-was the missing override helper. No cancellation or skip. After the fix,
-whole file 11/0. The committed r7-no-build.mutant.patch restores the invalid
-flag. Applied only for the installed parser regression: 0/1 with the same
-unknown-flag error, killed. Restored source and whole file passed 11/0 again.
-Both approved node --check commands passed. Empty /proc cwd/argv scan;
-clear herb-0073 at 11:21:04Z. No container start, image build, lane, proof or
-full suite ran. Logs/counts/scan are in r7-granted/ (local run evidence).
-
-The guard supplies both absolute -f paths, suppressing automatic override
-selection, pins receipt imageId, removes build via !reset null and adds
---pull never --no-deps. Its main entry publishes the override before Docker
-runs. A unique private staging file plus hard-link publication prevents
-partial writes or replacement under concurrent guard calls; existing bytes,
-mode0600, file type and ownership must match, with O_NOFOLLOW on reads.
-The file stays under the run's short private tempRoot for existing proof
-cleanup. Caller Compose options remain allowlisted and config/build/pull
-options refuse. The actual installed Compose config test reports no build
-key and the exact image ID; parser help is before SERVICE, so no container
-operation can run. Fixtures supply made-up env/auth paths and empty Docker
-configuration. Existing image provenance, cleanup and umask behavior remain.
-
-Range check: one source commit on b1fece6f0, same 33 r6 paths plus the
-mutant patch and r7 overlap receipt (35 paths). Thirty r6 paths retain the
-same blob/mode. Only lane-docker.mjs, gate-lane-image.test.mjs and BUILD.md
-differ from r6. process.test and BUILD-LOG equal the landing. No force push,
-branch deletion, history replay or other source edits. Sage-1956 authorizes
-the source commit and seat-only push; fresh proof remains Sage's action.
-
-
-## Round 8 preparation (sage-1979)
-
-The r7 D5 proof passed business and bus, then failed the two installed
-Compose probes in pkg-cli. Their subprocess fixture retained the lane's
-shim-leading PATH but omitted MOSAIC_GATE_DOCKER_RECORD, so the shim read
-an undefined path. This is a test context error; the production guard stays
-byte-identical to r7.
-
-New herb/row197-r8 starts at 5c6f73ed7. None of r7's 35 manifest paths
-changed from b1fece6f0 to this base. Tests choose the record's real absolute
-Docker path when a lane record is set; outside lanes they keep using docker.
-Only the two read-only help/config probes use this helper. The subprocess
-env still holds fixture-only configuration; the record need not propagate
-to it. No run or policy allowlist is widened.
-
-Sage-1979 grants 215's 16 singles first, then r8's normal and lane-shaped
-shim-leading PATH whole-file checks and the record-lookup-removal mutant.
-The shim fixture invokes the actual unchanged guard, with a private made-up
-record naming the real Docker binary. No image build, container start, lane
-or proof is part of r8 checks. No r8 checks have started yet.
-
-
-Sage-1979 r8 checks followed 215's early singles, then clear herb-0078 at
-2026-10-21 12:09:28Z. Whole gate-lane-image.test normal PATH11/0; whole
-actual guard-shim-leading PATH plus private record11/0. The committed
-r8-record-lookup.mutant.patch removes the lookup: installed-Compose argv
-regression0/1, killed with the original Received undefined path error.
-Restored code, repeated whole shim-PATH file11/0. All zero skips/cancellations.
-Logs/counts/fixture metadata/empty /proc cwd+argv scan are in r8-granted/.
-Both 215 and r8 private roots were removed after an empty process scan.
-No image build, container start, suite, lane or proof ran for r8.
-
-Range: one commit on5c6f73ed7. Of r7's35 paths,33 keep the same blob/mode;
-only gate-lane-image.test and this BUILD.md change. The r8 mutant and overlap
-receipt are added. The production guard and all other tooling match r7.
-BUILD-LOG and process.test equal the landing. No history replay, force push,
-branch deletion, live state change or policy widening. Fresh proof remains
-Sage's action after Webby's merge review.

agents/herb/work/queue-197/r2-MERGE.json

@@ -1,207 +0,0 @@
-{
-  "r1Base": "aa1bd209e",
-  "r1Candidate": "6318f0d0bba9ee90ccaa3503cac8c2e04c6397f2ef6c3564f687fbc2092989e3",
-  "r2Base": "57f59e0c399ce29b1bb85ca6af686fdc10eb195d",
-  "rows": [
-    {
-      "path": "packages/cli/tests/fixtures/gate-lane-child.mjs",
-      "r1Sha256": "209682b968e929da4b46dc97c64fcd7aa68c490f3c6be44595f5d85f8d2e1483",
-      "r2Sha256": "209682b968e929da4b46dc97c64fcd7aa68c490f3c6be44595f5d85f8d2e1483",
-      "mode": "0o644",
-      "landedPathChanged": false,
-      "r1BlobEqual": true
-    },
-    {
-      "path": "packages/cli/tests/gate-lane-fixtures.test.mjs",
-      "r1Sha256": "29afa181804a724c695678eb9459c156e00f1084647c704e814c5bee156c0c25",
-      "r2Sha256": "29afa181804a724c695678eb9459c156e00f1084647c704e814c5bee156c0c25",
-      "mode": "0o644",
-      "landedPathChanged": false,
-      "r1BlobEqual": true
-    },
-    {
-      "path": "packages/cli/tests/gate-lane-image.test.mjs",
-      "r1Sha256": "0253621a49c2e77ffcdbf32beee7e1f773ec2c52c8487dcc5aa254e61807af7c",
-      "r2Sha256": "0253621a49c2e77ffcdbf32beee7e1f773ec2c52c8487dcc5aa254e61807af7c",
-      "mode": "0o644",
-      "landedPathChanged": false,
-      "r1BlobEqual": true
-    },
-    {
-      "path": "packages/cli/tests/gate-lane-state.test.mjs",
-      "r1Sha256": "948d62c76447d8269f03518562a261564c202ec9207461fb21d2b1c11c9bb9fc",
-      "r2Sha256": "948d62c76447d8269f03518562a261564c202ec9207461fb21d2b1c11c9bb9fc",
-      "mode": "0o644",
-      "landedPathChanged": false,
-      "r1BlobEqual": true
-    },
-    {
-      "path": "packages/cli/tests/gate-lane.test.mjs",
-      "r1Sha256": "240bf0c15025ad6f88b251917a3c8d72bd21c2e5df6771e1ceb83a1d90b24a51",
-      "r2Sha256": "240bf0c15025ad6f88b251917a3c8d72bd21c2e5df6771e1ceb83a1d90b24a51",
-      "mode": "0o644",
-      "landedPathChanged": false,
-      "r1BlobEqual": true
-    },
-    {
-      "path": "packages/cli/tests/stack-release.test.mjs",
-      "r1Sha256": "8ca733a600d5f5534d7e14d8533e1b16d710ebd43080ef8421238b5dd145fade",
-      "r2Sha256": "b95c0c125b6a283961e24adc07d43150bcbd05d2f11005180b836043015c52a6",
-      "mode": "0o644",
-      "landedPathChanged": true,
-      "r1BlobEqual": false
-    },
-    {
-      "path": "packages/control-board/tests/serve.test.mjs",
-      "r1Sha256": "4838cb4609da28fc921370c5542a82402fbc9ceb469692a36f0eafc713bb56c8",
-      "r2Sha256": "4838cb4609da28fc921370c5542a82402fbc9ceb469692a36f0eafc713bb56c8",
-      "mode": "0o644",
-      "landedPathChanged": false,
-      "r1BlobEqual": true
-    },
-    {
-      "path": "packages/harness/tests/claude-session.test.mjs",
-      "r1Sha256": "0a09b0255e9144a039428eb8e9f56181f94ccb2d187e474ea13392b485fdd008",
-      "r2Sha256": "0a09b0255e9144a039428eb8e9f56181f94ccb2d187e474ea13392b485fdd008",
-      "mode": "0o644",
-      "landedPathChanged": false,
-      "r1BlobEqual": true
-    },
-    {
-      "path": "packages/harness/tests/pi-session.test.mjs",
-      "r1Sha256": "6db5c3b7063baf933061e91e8bdf66740717dbb3066be3b70ac779fb17022094",
-      "r2Sha256": "6db5c3b7063baf933061e91e8bdf66740717dbb3066be3b70ac779fb17022094",
-      "mode": "0o644",
-      "landedPathChanged": false,
-      "r1BlobEqual": true
-    },
-    {
-      "path": "packages/webui/tests/preview.test.mjs",
-      "r1Sha256": "ada49ec100d75b3e739263593164b2798c378f3df0f38d73d80cf011ef16e234",
-      "r2Sha256": "ada49ec100d75b3e739263593164b2798c378f3df0f38d73d80cf011ef16e234",
-      "mode": "0o644",
-      "landedPathChanged": false,
-      "r1BlobEqual": true
-    },
-    {
-      "path": "packages/webui/tests/proof-cli.test.mjs",
-      "r1Sha256": "d3cec62f6eb8e2c1e0747f2a1bf1fc3f1a2122e45870d5a416d1830d3b6182cb",
-      "r2Sha256": "d3cec62f6eb8e2c1e0747f2a1bf1fc3f1a2122e45870d5a416d1830d3b6182cb",
-      "mode": "0o644",
-      "landedPathChanged": false,
-      "r1BlobEqual": true
-    },
-    {
-      "path": "packages/webui/tests/serve.test.mjs",
-      "r1Sha256": "36ecdfcb3d0d9a2411eec751421f770b5bb41ec2fbf9236c5794fb241fd3196b",
-      "r2Sha256": "36ecdfcb3d0d9a2411eec751421f770b5bb41ec2fbf9236c5794fb241fd3196b",
-      "mode": "0o644",
-      "landedPathChanged": false,
-      "r1BlobEqual": true
-    },
-    {
-      "path": "packages/webui/tests/service.test.mjs",
-      "r1Sha256": "c915239f0c223209baf84c96ec9f5ae2845fce7dd98ad46b073a96033aa7d6df",
-      "r2Sha256": "845313239547ddbc478090b29f96385f0b8853e5087c572393be328e7075f578",
-      "mode": "0o644",
-      "landedPathChanged": true,
-      "r1BlobEqual": false
-    },
-    {
-      "path": "packages/webui/tests/tester-cli.test.mjs",
-      "r1Sha256": "8bf4491f7982399b4162cfbe36d0b68888e99ceb2cbaefefc2361732dd95e0c8",
-      "r2Sha256": "8bf4491f7982399b4162cfbe36d0b68888e99ceb2cbaefefc2361732dd95e0c8",
-      "mode": "0o644",
-      "landedPathChanged": false,
-      "r1BlobEqual": true
-    },
-    {
-      "path": "scripts/test-discord.sh",
-      "r1Sha256": "c10af53b0717344026cb22462964f253c7401c5082ac6ef3722a89d9dfa5c661",
-      "r2Sha256": "a5dcf783c51a5d5d184a357f91ebf9fa1c4e054f0cb84a3d1d7668f6156e025e",
-      "mode": "0o755",
-      "landedPathChanged": true,
-      "r1BlobEqual": false
-    },
-    {
-      "path": "scripts/test-foundation.sh",
-      "r1Sha256": "2e11038e7f784ec4f539eb768f63bab0fab9c9940334388a1fe2d47ab9e2b008",
-      "r2Sha256": "2e11038e7f784ec4f539eb768f63bab0fab9c9940334388a1fe2d47ab9e2b008",
-      "mode": "0o755",
-      "landedPathChanged": false,
-      "r1BlobEqual": true
-    },
-    {
-      "path": "scripts/test-queue.sh",
-      "r1Sha256": "c270f181d1fa8b6d42ff4131c339beba786a8fd620bb66f8afdcec05e8b10868",
-      "r2Sha256": "c270f181d1fa8b6d42ff4131c339beba786a8fd620bb66f8afdcec05e8b10868",
-      "mode": "0o755",
-      "landedPathChanged": false,
-      "r1BlobEqual": true
-    },
-    {
-      "path": "scripts/testing/README.md",
-      "r1Sha256": "845db994e648f29f10efb5e6a4ddcf4be4e28798fc27f1eddf9d150f0e8b5319",
-      "r2Sha256": "845db994e648f29f10efb5e6a4ddcf4be4e28798fc27f1eddf9d150f0e8b5319",
-      "mode": "0o644",
-      "landedPathChanged": false,
-      "r1BlobEqual": true
-    },
-    {
-      "path": "scripts/testing/gate-lane.mjs",
-      "r1Sha256": "2e5decf42a546b1441c199337c9a3162693051f2299878f617dd039d6231f226",
-      "r2Sha256": "2e5decf42a546b1441c199337c9a3162693051f2299878f617dd039d6231f226",
-      "mode": "0o644",
-      "landedPathChanged": false,
-      "r1BlobEqual": true
-    },
-    {
-      "path": "scripts/testing/gate-lane.sh",
-      "r1Sha256": "41804d964c55dd07b6224855aae9dc44037f4e80c515c10f98fe04d6d3fa0084",
-      "r2Sha256": "41804d964c55dd07b6224855aae9dc44037f4e80c515c10f98fe04d6d3fa0084",
-      "mode": "0o755",
-      "landedPathChanged": false,
-      "r1BlobEqual": true
-    },
-    {
-      "path": "scripts/testing/lane-docker.mjs",
-      "r1Sha256": "fbe54165439923a852f64d69a6188ef29d237755289e9e21ddbfdab00e9ef933",
-      "r2Sha256": "fbe54165439923a852f64d69a6188ef29d237755289e9e21ddbfdab00e9ef933",
-      "mode": "0o644",
-      "landedPathChanged": false,
-      "r1BlobEqual": true
-    },
-    {
-      "path": "scripts/testing/lane-evidence.mjs",
-      "r1Sha256": "51d4dcff4ab01730b923e0a59c218f9a3d33e6ba729be1def03703bc457fb37e",
-      "r2Sha256": "51d4dcff4ab01730b923e0a59c218f9a3d33e6ba729be1def03703bc457fb37e",
-      "mode": "0o644",
-      "landedPathChanged": false,
-      "r1BlobEqual": true
-    },
-    {
-      "path": "scripts/testing/lane-fixtures.mjs",
-      "r1Sha256": "8634070d68bca694c8a58911eda9576991ed0eca1eb055a2c1bbf10261305939",
-      "r2Sha256": "8634070d68bca694c8a58911eda9576991ed0eca1eb055a2c1bbf10261305939",
-      "mode": "0o644",
-      "landedPathChanged": false,
-      "r1BlobEqual": true
-    },
-    {
-      "path": "scripts/testing/lane-image.mjs",
-      "r1Sha256": "2259045913b4e3042b7afd3ff6a0fb9c2cc9b4cf359f943e4dce9b8658b91982",
-      "r2Sha256": "2259045913b4e3042b7afd3ff6a0fb9c2cc9b4cf359f943e4dce9b8658b91982",
-      "mode": "0o644",
-      "landedPathChanged": false,
-      "r1BlobEqual": true
-    },
-    {
-      "path": "scripts/testing/lane-state.mjs",
-      "r1Sha256": "c37b3d5ec3025948dd8150d18d4ccc4eeb3539739ca37e4d86edede5bcafd1a8",
-      "r2Sha256": "c37b3d5ec3025948dd8150d18d4ccc4eeb3539739ca37e4d86edede5bcafd1a8",
-      "mode": "0o644",
-      "landedPathChanged": false,
-      "r1BlobEqual": true
-    }
-  ]
-}

agents/herb/work/queue-197/r2-TEST-FILES.txt

@@ -1,19 +0,0 @@
-packages/cli/tests/gate-lane-fixtures.test.mjs
-packages/cli/tests/gate-lane-image.test.mjs
-packages/cli/tests/gate-lane-state.test.mjs
-packages/cli/tests/gate-lane.test.mjs
-packages/cli/tests/stack-instances.test.mjs
-packages/cli/tests/stack-release-external.test.mjs
-packages/cli/tests/stack-release.test.mjs
-packages/cli/tests/stack-upgrade.test.mjs
-packages/control-board/tests/serve.test.mjs
-packages/harness/tests/claude-session.test.mjs
-packages/harness/tests/pi-session.test.mjs
-packages/webui/tests/preview.test.mjs
-packages/webui/tests/proof-cli.test.mjs
-packages/webui/tests/serve.test.mjs
-packages/webui/tests/service.test.mjs
-packages/webui/tests/tester-cli.test.mjs
-scripts/test-discord.sh
-scripts/test-foundation.sh
-scripts/test-queue.sh

agents/herb/work/queue-197/r2-merge-only.patch

@@ -1,45 +0,0 @@
-diff --git a/packages/cli/tests/stack-release.test.mjs b/packages/cli/tests/stack-release.test.mjs
-index 8788158c3..a78f52062 100644
---- a/packages/cli/tests/stack-release.test.mjs
-+++ b/packages/cli/tests/stack-release.test.mjs
-@@ -0,0 +1,2 @@
-+import { leasePort } from '../../../scripts/testing/lane-fixtures.mjs';
-+import { after as laneAfter } from 'node:test';
-@@ -1777 +1779 @@ const TESTER='7499';
--const freePort=async()=>{const s=createServer();s.listen(0,'127.0.0.1');await once(s,'listening');const p=String(s.address().port);await new Promise((r)=>s.close(r));return p};
-+const freePort=async()=>String(await leasePort({after:laneAfter},{closed:true}));
-diff --git a/packages/webui/tests/service.test.mjs b/packages/webui/tests/service.test.mjs
-index a6e66608a..adb460d07 100644
---- a/packages/webui/tests/service.test.mjs
-+++ b/packages/webui/tests/service.test.mjs
-@@ -0,0 +1,2 @@
-+import { leasePort } from '../../../scripts/testing/lane-fixtures.mjs';
-+import { after as laneAfter } from 'node:test';
-@@ -48,9 +50 @@ function filled(flags, root = REPO) {
--async function closedPort() {
--  const server = createServer();
--  server.listen(0, '127.0.0.1');
--  await once(server, 'listening');
--  const { port } = server.address();
--  server.close();
--  await once(server, 'close');
--  return port;
--}
-+async function closedPort() { return leasePort({after:laneAfter}, {closed:true}); }
-diff --git a/scripts/test-discord.sh b/scripts/test-discord.sh
-index 114994936..4daf0d143 100755
---- a/scripts/test-discord.sh
-+++ b/scripts/test-discord.sh
-@@ -73,0 +74,2 @@ TOOLS_JSON="{\"roots\":[{\"name\":\"docs\",\"path\":\"$SANDBOX/toolroot\"}],\"ma
-+export PI_CODING_AGENT_DIR="$SANDBOX/pi-agent"
-+mkdir -p "$PI_CODING_AGENT_DIR"
-@@ -145 +147,8 @@ fi
--node_tests() { env -u NODE_TEST_CONTEXT node --test "$@"; }
-+node_tests() {
-+    local lane_concurrency=()
-+    if [ -n "${MOSAIC_TEST_CONCURRENCY:-}" ]; then
-+        [ "$MOSAIC_TEST_CONCURRENCY" = 2 ] || return 2
-+        lane_concurrency=(--test-concurrency=2)
-+    fi
-+    env -u NODE_TEST_CONTEXT node --test "${lane_concurrency[@]}" "$@"
-+}

agents/herb/work/queue-197/r2-on234-MERGE.json

@@ -1,235 +0,0 @@
-{
-  "base": "c771a36f4bd0b6c359282425c668996a90072f93",
-  "priorCandidate": "a3b7cbde8ef51c206a83769a7c272e4f9a1de5bc",
-  "originalCandidate": "6318f0d0bba9ee90ccaa3503cac8c2e04c6397f2ef6c3564f687fbc2092989e3",
-  "overlap": [
-    "packages/cli/tests/stack-release.test.mjs"
-  ],
-  "rows": [
-    {
-      "path": "packages/cli/tests/fixtures/gate-lane-child.mjs",
-      "r1Sha256": "209682b968e929da4b46dc97c64fcd7aa68c490f3c6be44595f5d85f8d2e1483",
-      "priorCandidateSha256": "209682b968e929da4b46dc97c64fcd7aa68c490f3c6be44595f5d85f8d2e1483",
-      "newSha256": "209682b968e929da4b46dc97c64fcd7aa68c490f3c6be44595f5d85f8d2e1483",
-      "unchangedFromPrior": true,
-      "overlaps234": false,
-      "mode": "0o644"
-    },
-    {
-      "path": "packages/cli/tests/gate-lane-fixtures.test.mjs",
-      "r1Sha256": "29afa181804a724c695678eb9459c156e00f1084647c704e814c5bee156c0c25",
-      "priorCandidateSha256": "29afa181804a724c695678eb9459c156e00f1084647c704e814c5bee156c0c25",
-      "newSha256": "29afa181804a724c695678eb9459c156e00f1084647c704e814c5bee156c0c25",
-      "unchangedFromPrior": true,
-      "overlaps234": false,
-      "mode": "0o644"
-    },
-    {
-      "path": "packages/cli/tests/gate-lane-image.test.mjs",
-      "r1Sha256": "0253621a49c2e77ffcdbf32beee7e1f773ec2c52c8487dcc5aa254e61807af7c",
-      "priorCandidateSha256": "0253621a49c2e77ffcdbf32beee7e1f773ec2c52c8487dcc5aa254e61807af7c",
-      "newSha256": "0253621a49c2e77ffcdbf32beee7e1f773ec2c52c8487dcc5aa254e61807af7c",
-      "unchangedFromPrior": true,
-      "overlaps234": false,
-      "mode": "0o644"
-    },
-    {
-      "path": "packages/cli/tests/gate-lane-state.test.mjs",
-      "r1Sha256": "948d62c76447d8269f03518562a261564c202ec9207461fb21d2b1c11c9bb9fc",
-      "priorCandidateSha256": "948d62c76447d8269f03518562a261564c202ec9207461fb21d2b1c11c9bb9fc",
-      "newSha256": "948d62c76447d8269f03518562a261564c202ec9207461fb21d2b1c11c9bb9fc",
-      "unchangedFromPrior": true,
-      "overlaps234": false,
-      "mode": "0o644"
-    },
-    {
-      "path": "packages/cli/tests/gate-lane.test.mjs",
-      "r1Sha256": "240bf0c15025ad6f88b251917a3c8d72bd21c2e5df6771e1ceb83a1d90b24a51",
-      "priorCandidateSha256": "240bf0c15025ad6f88b251917a3c8d72bd21c2e5df6771e1ceb83a1d90b24a51",
-      "newSha256": "240bf0c15025ad6f88b251917a3c8d72bd21c2e5df6771e1ceb83a1d90b24a51",
-      "unchangedFromPrior": true,
-      "overlaps234": false,
-      "mode": "0o644"
-    },
-    {
-      "path": "packages/cli/tests/stack-release.test.mjs",
-      "r1Sha256": "8ca733a600d5f5534d7e14d8533e1b16d710ebd43080ef8421238b5dd145fade",
-      "priorCandidateSha256": "b95c0c125b6a283961e24adc07d43150bcbd05d2f11005180b836043015c52a6",
-      "newSha256": "071ea2803b8c7e0450bb4c86ac9b49ae7c180af1599dca52bfce6d0274ca205b",
-      "unchangedFromPrior": false,
-      "overlaps234": true,
-      "mode": "0o644"
-    },
-    {
-      "path": "packages/control-board/tests/serve.test.mjs",
-      "r1Sha256": "4838cb4609da28fc921370c5542a82402fbc9ceb469692a36f0eafc713bb56c8",
-      "priorCandidateSha256": "4838cb4609da28fc921370c5542a82402fbc9ceb469692a36f0eafc713bb56c8",
-      "newSha256": "4838cb4609da28fc921370c5542a82402fbc9ceb469692a36f0eafc713bb56c8",
-      "unchangedFromPrior": true,
-      "overlaps234": false,
-      "mode": "0o644"
-    },
-    {
-      "path": "packages/harness/tests/claude-session.test.mjs",
-      "r1Sha256": "0a09b0255e9144a039428eb8e9f56181f94ccb2d187e474ea13392b485fdd008",
-      "priorCandidateSha256": "0a09b0255e9144a039428eb8e9f56181f94ccb2d187e474ea13392b485fdd008",
-      "newSha256": "0a09b0255e9144a039428eb8e9f56181f94ccb2d187e474ea13392b485fdd008",
-      "unchangedFromPrior": true,
-      "overlaps234": false,
-      "mode": "0o644"
-    },
-    {
-      "path": "packages/harness/tests/pi-session.test.mjs",
-      "r1Sha256": "6db5c3b7063baf933061e91e8bdf66740717dbb3066be3b70ac779fb17022094",
-      "priorCandidateSha256": "6db5c3b7063baf933061e91e8bdf66740717dbb3066be3b70ac779fb17022094",
-      "newSha256": "6db5c3b7063baf933061e91e8bdf66740717dbb3066be3b70ac779fb17022094",
-      "unchangedFromPrior": true,
-      "overlaps234": false,
-      "mode": "0o644"
-    },
-    {
-      "path": "packages/webui/tests/preview.test.mjs",
-      "r1Sha256": "ada49ec100d75b3e739263593164b2798c378f3df0f38d73d80cf011ef16e234",
-      "priorCandidateSha256": "ada49ec100d75b3e739263593164b2798c378f3df0f38d73d80cf011ef16e234",
-      "newSha256": "ada49ec100d75b3e739263593164b2798c378f3df0f38d73d80cf011ef16e234",
-      "unchangedFromPrior": true,
-      "overlaps234": false,
-      "mode": "0o644"
-    },
-    {
-      "path": "packages/webui/tests/proof-cli.test.mjs",
-      "r1Sha256": "d3cec62f6eb8e2c1e0747f2a1bf1fc3f1a2122e45870d5a416d1830d3b6182cb",
-      "priorCandidateSha256": "d3cec62f6eb8e2c1e0747f2a1bf1fc3f1a2122e45870d5a416d1830d3b6182cb",
-      "newSha256": "d3cec62f6eb8e2c1e0747f2a1bf1fc3f1a2122e45870d5a416d1830d3b6182cb",
-      "unchangedFromPrior": true,
-      "overlaps234": false,
-      "mode": "0o644"
-    },
-    {
-      "path": "packages/webui/tests/serve.test.mjs",
-      "r1Sha256": "36ecdfcb3d0d9a2411eec751421f770b5bb41ec2fbf9236c5794fb241fd3196b",
-      "priorCandidateSha256": "36ecdfcb3d0d9a2411eec751421f770b5bb41ec2fbf9236c5794fb241fd3196b",
-      "newSha256": "36ecdfcb3d0d9a2411eec751421f770b5bb41ec2fbf9236c5794fb241fd3196b",
-      "unchangedFromPrior": true,
-      "overlaps234": false,
-      "mode": "0o644"
-    },
-    {
-      "path": "packages/webui/tests/service.test.mjs",
-      "r1Sha256": "c915239f0c223209baf84c96ec9f5ae2845fce7dd98ad46b073a96033aa7d6df",
-      "priorCandidateSha256": "845313239547ddbc478090b29f96385f0b8853e5087c572393be328e7075f578",
-      "newSha256": "845313239547ddbc478090b29f96385f0b8853e5087c572393be328e7075f578",
-      "unchangedFromPrior": true,
-      "overlaps234": false,
-      "mode": "0o644"
-    },
-    {
-      "path": "packages/webui/tests/tester-cli.test.mjs",
-      "r1Sha256": "8bf4491f7982399b4162cfbe36d0b68888e99ceb2cbaefefc2361732dd95e0c8",
-      "priorCandidateSha256": "8bf4491f7982399b4162cfbe36d0b68888e99ceb2cbaefefc2361732dd95e0c8",
-      "newSha256": "8bf4491f7982399b4162cfbe36d0b68888e99ceb2cbaefefc2361732dd95e0c8",
-      "unchangedFromPrior": true,
-      "overlaps234": false,
-      "mode": "0o644"
-    },
-    {
-      "path": "scripts/test-discord.sh",
-      "r1Sha256": "c10af53b0717344026cb22462964f253c7401c5082ac6ef3722a89d9dfa5c661",
-      "priorCandidateSha256": "a5dcf783c51a5d5d184a357f91ebf9fa1c4e054f0cb84a3d1d7668f6156e025e",
-      "newSha256": "a5dcf783c51a5d5d184a357f91ebf9fa1c4e054f0cb84a3d1d7668f6156e025e",
-      "unchangedFromPrior": true,
-      "overlaps234": false,
-      "mode": "0o755"
-    },
-    {
-      "path": "scripts/test-foundation.sh",
-      "r1Sha256": "2e11038e7f784ec4f539eb768f63bab0fab9c9940334388a1fe2d47ab9e2b008",
-      "priorCandidateSha256": "2e11038e7f784ec4f539eb768f63bab0fab9c9940334388a1fe2d47ab9e2b008",
-      "newSha256": "2e11038e7f784ec4f539eb768f63bab0fab9c9940334388a1fe2d47ab9e2b008",
-      "unchangedFromPrior": true,
-      "overlaps234": false,
-      "mode": "0o755"
-    },
-    {
-      "path": "scripts/test-queue.sh",
-      "r1Sha256": "c270f181d1fa8b6d42ff4131c339beba786a8fd620bb66f8afdcec05e8b10868",
-      "priorCandidateSha256": "c270f181d1fa8b6d42ff4131c339beba786a8fd620bb66f8afdcec05e8b10868",
-      "newSha256": "c270f181d1fa8b6d42ff4131c339beba786a8fd620bb66f8afdcec05e8b10868",
-      "unchangedFromPrior": true,
-      "overlaps234": false,
-      "mode": "0o755"
-    },
-    {
-      "path": "scripts/testing/README.md",
-      "r1Sha256": "845db994e648f29f10efb5e6a4ddcf4be4e28798fc27f1eddf9d150f0e8b5319",
-      "priorCandidateSha256": "845db994e648f29f10efb5e6a4ddcf4be4e28798fc27f1eddf9d150f0e8b5319",
-      "newSha256": "845db994e648f29f10efb5e6a4ddcf4be4e28798fc27f1eddf9d150f0e8b5319",
-      "unchangedFromPrior": true,
-      "overlaps234": false,
-      "mode": "0o644"
-    },
-    {
-      "path": "scripts/testing/gate-lane.mjs",
-      "r1Sha256": "2e5decf42a546b1441c199337c9a3162693051f2299878f617dd039d6231f226",
-      "priorCandidateSha256": "2e5decf42a546b1441c199337c9a3162693051f2299878f617dd039d6231f226",
-      "newSha256": "2e5decf42a546b1441c199337c9a3162693051f2299878f617dd039d6231f226",
-      "unchangedFromPrior": true,
-      "overlaps234": false,
-      "mode": "0o644"
-    },
-    {
-      "path": "scripts/testing/gate-lane.sh",
-      "r1Sha256": "41804d964c55dd07b6224855aae9dc44037f4e80c515c10f98fe04d6d3fa0084",
-      "priorCandidateSha256": "41804d964c55dd07b6224855aae9dc44037f4e80c515c10f98fe04d6d3fa0084",
-      "newSha256": "41804d964c55dd07b6224855aae9dc44037f4e80c515c10f98fe04d6d3fa0084",
-      "unchangedFromPrior": true,
-      "overlaps234": false,
-      "mode": "0o755"
-    },
-    {
-      "path": "scripts/testing/lane-docker.mjs",
-      "r1Sha256": "fbe54165439923a852f64d69a6188ef29d237755289e9e21ddbfdab00e9ef933",
-      "priorCandidateSha256": "fbe54165439923a852f64d69a6188ef29d237755289e9e21ddbfdab00e9ef933",
-      "newSha256": "fbe54165439923a852f64d69a6188ef29d237755289e9e21ddbfdab00e9ef933",
-      "unchangedFromPrior": true,
-      "overlaps234": false,
-      "mode": "0o644"
-    },
-    {
-      "path": "scripts/testing/lane-evidence.mjs",
-      "r1Sha256": "51d4dcff4ab01730b923e0a59c218f9a3d33e6ba729be1def03703bc457fb37e",
-      "priorCandidateSha256": "51d4dcff4ab01730b923e0a59c218f9a3d33e6ba729be1def03703bc457fb37e",
-      "newSha256": "51d4dcff4ab01730b923e0a59c218f9a3d33e6ba729be1def03703bc457fb37e",
-      "unchangedFromPrior": true,
-      "overlaps234": false,
-      "mode": "0o644"
-    },
-    {
-      "path": "scripts/testing/lane-fixtures.mjs",
-      "r1Sha256": "8634070d68bca694c8a58911eda9576991ed0eca1eb055a2c1bbf10261305939",
-      "priorCandidateSha256": "8634070d68bca694c8a58911eda9576991ed0eca1eb055a2c1bbf10261305939",
-      "newSha256": "8634070d68bca694c8a58911eda9576991ed0eca1eb055a2c1bbf10261305939",
-      "unchangedFromPrior": true,
-      "overlaps234": false,
-      "mode": "0o644"
-    },
-    {
-      "path": "scripts/testing/lane-image.mjs",
-      "r1Sha256": "2259045913b4e3042b7afd3ff6a0fb9c2cc9b4cf359f943e4dce9b8658b91982",
-      "priorCandidateSha256": "2259045913b4e3042b7afd3ff6a0fb9c2cc9b4cf359f943e4dce9b8658b91982",
-      "newSha256": "2259045913b4e3042b7afd3ff6a0fb9c2cc9b4cf359f943e4dce9b8658b91982",
-      "unchangedFromPrior": true,
-      "overlaps234": false,
-      "mode": "0o644"
-    },
-    {
-      "path": "scripts/testing/lane-state.mjs",
-      "r1Sha256": "c37b3d5ec3025948dd8150d18d4ccc4eeb3539739ca37e4d86edede5bcafd1a8",
-      "priorCandidateSha256": "c37b3d5ec3025948dd8150d18d4ccc4eeb3539739ca37e4d86edede5bcafd1a8",
-      "newSha256": "c37b3d5ec3025948dd8150d18d4ccc4eeb3539739ca37e4d86edede5bcafd1a8",
-      "unchangedFromPrior": true,
-      "overlaps234": false,
-      "mode": "0o644"
-    }
-  ]
-}

agents/herb/work/queue-197/r2-on234-OVERLAP.txt

@@ -1,47 +0,0 @@
-Compared 57f59e0c3 to c771a36f4bd0b6c359282425c668996a90072f93
-agents/gizmoduck/work/queue-234/BUILD.md
-docs/SESSIONS.md
-packages/bus/README.md
-packages/bus/schema.sql
-packages/bus/src/broker.mjs
-packages/bus/src/credentials.mjs
-packages/bus/src/host-grant.mjs
-packages/bus/src/host-run.mjs
-packages/bus/src/migrations/3i-3j.sql
-packages/bus/src/runtime.mjs
-packages/bus/src/server.mjs
-packages/bus/src/store.mjs
-packages/bus/tests/account-migration.test.mjs
-packages/bus/tests/chief-of-staff.test.mjs
-packages/bus/tests/comment-migration.test.mjs
-packages/bus/tests/fixtures/schema-3i.sql
-packages/bus/tests/grant-enroll.test.mjs
-packages/bus/tests/grant-migration.test.mjs
-packages/bus/tests/hard-waits.test.mjs
-packages/bus/tests/host-fixtures.mjs
-packages/bus/tests/host-run.test.mjs
-packages/bus/tests/host-tools.test.mjs
-packages/bus/tests/name-migration.test.mjs
-packages/bus/tests/project-runtime.test.mjs
-packages/bus/tests/schema.test.mjs
-packages/bus/tests/spec-fixtures.mjs
-packages/bus/tests/spec-migration.test.mjs
-packages/bus/tests/thread-migration.test.mjs
-packages/bus/tests/usage-migration.test.mjs
-packages/business/src/business.mjs
-packages/business/src/hosts.mjs
-packages/business/tests/hosts.test.mjs
-packages/cli/README.md
-packages/cli/src/cli.mjs
-packages/cli/src/hosts.mjs
-packages/cli/tests/hosts.test.mjs
-packages/cli/tests/stack-release.test.mjs
-scripts/mosaic
-tools/host/mosaic-keys
-tools/host/mosaic-keys-write
-tools/host/mosaic-keys.sshd.conf
-tools/host/mosaic-keys.sudoers
-
-Overlap with row 197 source manifest:
-packages/cli/tests/stack-release.test.mjs
-Other 24 source paths: no overlap.

agents/herb/work/queue-197/r2-on234-merge-only.patch

@@ -1,10 +0,0 @@
-diff --git a/packages/cli/tests/stack-release.test.mjs b/packages/cli/tests/stack-release.test.mjs
-index daae6efb7..910785bc4 100644
---- a/packages/cli/tests/stack-release.test.mjs
-+++ b/packages/cli/tests/stack-release.test.mjs
-@@ -0,0 +1,2 @@
-+import { leasePort } from '../../../scripts/testing/lane-fixtures.mjs';
-+import { after as laneAfter } from 'node:test';
-@@ -1779 +1781 @@ const TESTER='7499';
--const freePort=async()=>{const s=createServer();s.listen(0,'127.0.0.1');await once(s,'listening');const p=String(s.address().port);await new Promise((r)=>s.close(r));return p};
-+const freePort=async()=>String(await leasePort({after:laneAfter},{closed:true}));

agents/herb/work/queue-197/r6-OVERLAP.json

@@ -1,5 +0,0 @@
-{
-  "base": "fefd54e13",
-  "prior": "9aa6d52d9",
-  "overlaps": []
-}

agents/herb/work/queue-197/r7-OVERLAP.json

@@ -1,6 +0,0 @@
-{
-  "base": "b1fece6f0",
-  "r6": "df0c59608",
-  "r6Base": "fefd54e13",
-  "overlaps": []
-}

agents/herb/work/queue-197/r7-no-build.mutant.patch

@@ -1,11 +0,0 @@
---- a/scripts/testing/lane-docker.mjs
-+++ b/scripts/testing/lane-docker.mjs
-@@ -34,7 +34,7 @@
-     const service=argv.indexOf('mosaic-agent',2);
-     if(service<0||argv.slice(2,service).some(a=>!['--rm','-T','--no-deps','--interactive','-i'].includes(a)))refuse('Docker Compose run options not allowed');
-     const [base,override]=composeFiles(run);
--    return ['compose','-f',base,'-f',override,'run','--pull','never','--no-deps',...argv.slice(2)];
-+    return ['compose','-f',base,'-f',override,'run','--no-build','--pull','never','--no-deps',...argv.slice(2)];
-   }
-   refuse('Docker mutation or unowned command');
- }

agents/herb/work/queue-197/r8-OVERLAP.json

@@ -1,6 +0,0 @@
-{
-  "base": "5c6f73ed7",
-  "r7": "9c3166915",
-  "r7Base": "b1fece6f0",
-  "overlaps": []
-}

agents/herb/work/queue-197/r8-record-lookup.mutant.patch

@@ -1,11 +0,0 @@
---- a/packages/cli/tests/gate-lane-image.test.mjs
-+++ b/packages/cli/tests/gate-lane-image.test.mjs
-@@ -85,7 +85,7 @@
- // including when the lane's guard is first on PATH. Child fixture env stays
- // isolated; passing the real absolute path avoids re-entering that guard.
- function installedDocker(){
-- const file=process.env.MOSAIC_GATE_DOCKER_RECORD;
-+ const file=undefined; // mutant: lose the lane's real-binary lookup
-  if(!file)return 'docker';
-  const binary=JSON.parse(readFileSync(file,'utf8')).docker;
-  assert.ok(typeof binary==='string'&&isAbsolute(binary),'lane record must name the real absolute Docker binary');

agents/sage/work/queue-197/OBSERVATIONS.md

@@ -1,17 +0,0 @@
-# Row 197 proof observations (Sage)
-
-Kept here, not in Herb's BUILD.md, because that file is one of row 197's 37 paths and the landing check
-(mos-1174, mos-1185 item 5) requires them equal to c45ddeb6b.
-
-## Open observation (mos-1185 item 3), 2026-10-21
-
-Proofs 4 and 5 each stopped on a test outside 197's paths, in a pair wave, and both times in lane b:
-
-- Proof 4, pair1-b, pkg-conversation, K12 (`cohort.test.mjs:292`): `populated` undefined. Row 250, Vikunja #450.
-- Proof 5, pair2-b, pkg-bus, T27 (`host-run.test.mjs:469`): no identities right after `ssh-add -t 1`. Vikunja #453.
-
-Mos checked the step log birth times: the twin step started in both lanes within half a second each time
-(proof 4 pkg-conversation a 11:03:59.343, b .855 CDT; proof 5 pkg-bus a 12:07:25.354, b .573). Waves run in
-lockstep, so that holds for every pair wave, the passing ones too. Lane b is the twin that starts later.
-Mos's reading: contention exposing fragile tests, not a 197 defect. Paired lanes add contention, and that
-is 197's cost, covered by #451.

agents/sage/work/queue-66/BUILD.md

@@ -1,200 +0,0 @@
-# Row 66: managed sessions run the unslop check on both harnesses
-
-Sage, 2026-10-20. Brief: `docs/plans/2026-10-11_managed-session-config.md`, section "Managed
-sessions run the unslop check on both harnesses", blob 21ae25a328d4. Issue #1559. Reviewers:
-Dewey and Filbert. Built in the worktree `/mnt/storage/scratch/sage-b66` (branch `sage/row66`)
-on base 5487ed39d.
-
-Candidate: see the commit line in the review request. `candidate-manifest.sha256` in this
-directory has the sha256 of each changed file at the candidate.
-
-## What changed
-
-**Wiring.** Both harness modules mount `tools/unslop-hook/lists.json`, `unslop-check.js` and
-the harness's own entry (pi `extension.ts`, Claude Code `claude-hook.js`) read-only at their
-own paths, and the bundle manifest lists the three in `sources` with their digests. Pi loads
-`extension.ts` as the second entry of `MOSAIC_EXTENSIONS`, after the gate extension. Claude
-Code's `settings.json` gains a Stop hook and a UserPromptSubmit hook, each
-`timeout -k 2 10 '<node>' '<dir>claude-hook.js' stop|prompt; exit 0`, hook timeout 20, no
-matcher. Neither can block a reply or a prompt.
-
-**claude-hook.js** (new). `stop` checks each assistant message with text since the turn's
-prompt and logs `checked` or `flagged`. `prompt` checks the last reply and, when it has tells,
-prints the extension's notice, word for word, as `additionalContext`, once per reply (it reads
-the log for an earlier `notice_injected` with the same entry id). A broken lists.json logs
-`broken_lists`; any other fault logs `hook_failed`; the exit is always 0.
-
-**The operator channel.** The runner sets `MOSAIC_UNSLOP_LOG` to `<run>/unslop.jsonl` after the
-module's variables, so a module can't point it elsewhere. After the landing turn and after each message turn it reads what the
-log gained (whole lines only, from an offset). The next RESULT it sends ends with a note. The
-whole note, both parts and the blank line before them, is at most 600 characters (r2):
-
-- `[unslop: N reply|replies of this session flagged since the last note: <details>. The session gets a correction notice on its next turn.]`
-- `[unslop: the check is broken, so this session's replies go unchecked: <reason>]`, once a run.
-
-That RESULT is what `mosaic talk` and `mosaic follow` print. A turn that sends no reply (an
-incoming RESULT, the landing turn) keeps its note for the next one. `note()` doesn't change
-state and `sent()` runs only after `message.send` succeeds, so a failed send keeps the note.
-`clip()` caps the body at 32000 characters plus its 33-character cut line before the note, so the
-sum is at most 32633, under the bus limit of 32768. The broken reason is cut at 300 where the
-runner takes it, from the log or from its own read failure, so the broken part is at most 371
-characters and the flagged part is cut to what is left.
-
-**Counts.** `unslopCounts(path)` reads the log after the session ended:
-`{checked, flagged, patterns: {<source>: n}, notices, broken}`. A missing log gives zeros.
-Findings now carry `source`, the entry's pattern id (`ms-unslop:7`), so `patterns` is per id.
-
-**The stack copy (r2).** `scripts/stack-copy.sh` `COPY_PATHS` gains `tools/unslop-hook`. Both
-modules join their files under `REPO`, and a session launched from a pinned copy has
-`REPO = copies/<sha>`. Without it every managed session from a copy past this row would fail at
-bundle build with ENOENT (Dewey P1, comment 29440).
-
-## Round 2
-
-Round 1 (candidate 8ec03b45a, manifest e68c6bce5ec4) got changes from Filbert (29439) and Dewey
-(29440). Round 2 carries:
-
-- F1 (both): a note with both parts wasn't bounded. A 300-character reason, a long flagged part
-  and a clipped answer came to 32934 (Filbert) or 33004 (Dewey), over 32768, and the broker
-  refused the send. `note()` now gives the flagged part only the room the broken part leaves, and
-  `fresh()` cuts every reason at 300, the runner's own read-failure reason included. Tests: the
-  runner test with an answer of 40000 characters, a 400-character `hook_failed` reason and 30
-  flagged replies (note ≤ 600, body ≤ 32768, cut line at 32000), and a unit check that both
-  parts come to exactly 600 and that a read failure on a 250-character path is cut.
-- F2 (Filbert; Dewey's M3): no test failed a send through `main()`. The new runner test has the
-  broker refuse the first RESULT. The note then rides the next RESULT. One correction to the
-  F1 consequence as written: the broker marks a received message delivered, so the refused
-  message isn't received again in that run. It stays unread and its sender gets no reply; the
-  turn doesn't rerun.
-- P1 (Dewey): `COPY_PATHS` gains `tools/unslop-hook`. The copy fixtures in
-  `stack-copy.test.mjs` and `pinned-copy.test.mjs` copy `tools/unslop-hook` too, and the
-  pinned-copy top-level list gains `tools`. A new `stack-copy.test.mjs` test makes a copy, loads
-  both harness modules from it, and checks that the adapter, the six unslop paths and the mounts
-  are under the copy and exist.
-- N1 (Filbert): the two session-test comments say `<dir>/unslop.jsonl`.
-- N2 (Filbert), doc-only follow-up: the brief's `<run>/session/unslop.jsonl` (:463) and "print
-  mode notifies nobody" (:477) are stale. The brief is Jason's text for this row; the deviation
-  below records the path.
-- Dewey's notes, no change: the Claude Code Stop timing (finding 3 below) gets a look in the
-  landing session; `patterns` keys per entry source, which is the brief's "per pattern".
-
-r2 mutants, each killed by its intended test (`mutants-r2.log`):
-
-| Mutant | Killed by |
-|---|---|
-| K1 the r1 `note()` cut | the clipped-answer runner test (the send is refused and it times out) and the unit check |
-| K2 `fresh()` doesn't cut the reason | the unit check |
-| K3 `sent()` before `message.send` | the refused-send runner test |
-| K4 `COPY_PATHS` without `tools/unslop-hook` | the copy test |
-
-## Ship list against the brief
-
-| Brief item | Where |
-|---|---|
-| A reply with a tell gets a correction notice on the next turn, both harnesses | `pi-session.test.mjs`, `claude-session.test.mjs`, row 66 four-turn tests: notices per request `[0, 1, 1, 2]`, notice text matched in the second request |
-| A clean reply gets none | same tests: turn 2 is clean and turn 3's request carries no new notice |
-| Broken lists.json fails closed: no clean verdict, operator told once, session alive | the row 66 broken-lists tests per harness: checked 0, flagged 0, first note broken, second note empty, the session answers both turns |
-| Counts readable after the session ends | `unslopCounts` on each session's log: `{checked: 4, flagged: 2, notices: 2, broken: null}`, patterns non-empty |
-| Interface 1 and the export list unchanged | no harness module export added or removed; the runner gains `unslopLog`, `unslopCounts`, `unslopNotes` |
-
-## Findings made while building
-
-1. **extension.ts read the wrong reply.** Pi 0.85.1 `getBranch()` returns entries root first
-   (`session-manager.js:958-967` reverses the leaf-to-root walk). `before_agent_start` took the
-   first assistant entry it met, which was the session's first reply, every turn. In the
-   four-turn test the old code gave notices `[0, 1, 2]` over three turns (turn 3 re-noticed
-   turn 1); walking from the end gives `[0, 1, 1]`. Fixed in `extension.ts`; this also affects
-   the fleet copy under `~/.mosaic/tools`, which I didn't touch.
-2. **claude-hook replies() merged replies.** Grouping by `message.id` across the transcript
-   merged two replies that shared an id (the test API answers `msg_mock` for all). It now groups
-   adjacent assistant lines only, keyed by the first line's uuid. Before the fix turn 4 got no
-   notice (`[0, 1, 1, 1]`).
-3. **Claude Code Stop timing.** On the first turn of a new session the transcript didn't yet
-   hold the reply when Stop ran, so the hook checked `last_assistant_message` with an empty
-   `entryId`. On resumed turns the reply was in the transcript. The verdict is the same either
-   way; only the entry id differs.
-4. The finding detail format is `banned word "delve" x1`.
-
-## Deviations
-
-- **The log path is `<run>/unslop.jsonl`, not the brief's `<run>/session/unslop.jsonl`.** A
-  thread run's session directory is the thread's store, and
-  `packages/cli/tests/thread-launch.test.mjs:179` pins that a thread run keeps no per-run
-  `session/`. My first build made `<run>/session` for the log and failed that test in the gate
-  (452/453). The brief's other line, "`unslop.jsonl` in the run directory", still holds, and each
-  run keeps its own log.
-
-- **`packages/seat/tests/sandbox.test.mjs`** isn't an owned file. Its pin
-  `binds(args).length === list.length - 1` broke because the modules now mount three more files.
-  It is now `- 4`, and the test asserts the three unslop read-only binds by name.
-- **`scripts/stack-copy.sh`** and the two copy tests aren't owned files. The copy change is P1
-  above. PB3 of the Part B window (`repin-partB-proof.md`) holds `scripts/stack-copy.sh` still
-  until B7, so this row lands after the Part B window has run.
-- `MOSAIC_EXTENSIONS` is set through the pi module's `env`, not in the runner.
-- `unslop-check.js` gained the `source` field on findings (needed for per-pattern counts).
-
-## Limits
-
-- The log is in the run directory, which the session can write. A session could forge or erase
-  its own counts. They are the session's report, not host evidence.
-- The pi extension's dedupe is in memory: after a restart, or when a turn's final message is
-  tool-only, the same earlier reply can get a second notice.
-- `hook_failed`, `skipped_broken` and `broken_lists` all count as broken for the operator note.
-- No blocking (Q84 option B), no list changes, no skill changes: out of scope by the brief.
-
-## Gate
-
-Recorded with the candidate in the review request: test-unslop-check, the harness, plugins,
-seat and cli suites, and every `scripts/test-*.sh`. At landing Sage runs one managed session per
-harness and attaches the notice, the correction and the counts.
-
-## Round 4
-
-Round 3 (2369c00e3 on sage/row66-r3, base c40d846cb, manifest 42e3876ca168) had approvals from
-Filbert (29770) and Dewey (29771). Since then rows 200, 199, 232, 233, 240 and 238 changed three
-of the 23 paths: `docs/TOOLS.md`, `scripts/stack-copy.sh` and
-`packages/cli/tests/stack-copy.test.mjs`. Round 4 is the two round 3 commits cherry-picked onto
-4ced5e63d (sage/row66-r4). Neither pick had a conflict, and the tree equals a hand merge of each
-path with `git merge-file`. No code changed: `git diff BASE TIP | git patch-id --stable` is
-6d085621fd35 for both rounds.
-
-- Row 232 added `copy --bundle` (`copy_bundle`). It builds the bundle with `copy_tree`, which
-  copies `COPY_PATHS`, so a bundle copy also carries `tools/unslop-hook`. No extra change needed.
-- The Part B hold under Deviations is void. Part B was superseded by the Q175 SSO work and will
-  not run, so nothing holds `scripts/stack-copy.sh`.
-- Review scope: the merge on the three moved paths and this section. The other 19 paths have the
-  same blobs as round 3.
-
-Rebased again on fefd54e13, after row 212 landed (ee7b2f137), as branch `sage/row66-r4b`, before the round 4
-request went out. 212 added `packages/library/src` to `COPY_PATHS` and a library line to the
-`stack-copy.test.mjs` file list. None of the four picks had a conflict. Every file's patch-id equals the 4ced5e63d
-build's except `scripts/stack-copy.sh`, where the only change is the hunk's context line
-(`packages/queue/src packages/library/src`). Row 66's two added lines are the same.
-
-Rebased again on 29ce1e360, after rows 195, 213 and 231 landed, as branch `sage/row66-r4c` (r4b stays at
-49ad61963). Two of row 66's paths moved: `adapters/README.md` and `docs/TOOLS.md`. TOOLS.md merged without a
-conflict. In adapters/README.md, row 213 rewrote the skill-cap paragraph, because `claude` now gets the prompt
-as a file. The merge keeps 213's paragraph whole and adds row 66's "The unslop check (row 66)" section after
-it. Row 66's old cap sentence is dropped, since it described the argument limit that 213 removed. Every other
-path has the same blob as on r4b. Row 213 also changed the harness and both adapter scripts, so all of row 66's
-harness tests run whole again on this base before the request.
-
-Rebased again on 7b9737953, after rows 245, 248 and 249 landed, as branch `sage/row66-r4d` (r4c stays at
-670b83f65). Only `docs/TOOLS.md` moved under row 66: row 245 rewrote the paragraph on what root reads in the
-host check. The cherry-pick had no conflict. `git patch-id --stable` of row 66's whole diff is 508bb684eade on
-both bases, and so is each file's own patch-id, TOOLS.md included. So row 66's hunks are byte-identical and only
-their context moved. The one test that names TOOLS.md, `packages/cli/tests/stack-release.test.mjs`, uses it in a
-message string and is in the singles list.
-
-Rebased on a36523713 after row 197 landed (mos-1186 item 4), as branch `sage/row66-r5` (r4d stays at
-82c830779). Row 197 also touched `packages/harness/tests/claude-session.test.mjs` and `pi-session.test.mjs`.
-The cherry-pick had no conflict. The range-diff shows commit 1 differing only in one hunk header of
-pi-session.test.mjs, where git now names the context line. Commits 2-7 are `=`. `git patch-id --stable` is
-0049d05fb585 for the whole diff and d67275ac4251 without `agents/` on both bases. Correction: the r4d note
-above gives 508bb684eade for the whole diff. That number came from e25f76f54 before the 7b9737953 rebase. The
-whole-diff number on r4d is 0049d05fb585. The harness suite runs whole again on this base before landing.
-
-Correction (Filbert round 4 N2, comment 30086): the r4c paragraph says "Row 66's old cap sentence is
-dropped." That's wrong. In round 3's diff the 64 KiB cap sentence is unchanged context, so row 66 never
-wrote it. Row 213 replaced it, and none of row 66's lines were dropped. The landing sessions are in
-LANDING-SESSION.md.

agents/sage/work/queue-66/LANDING-SESSION.md

@@ -1,43 +0,0 @@
-# Row 66 landing sessions (mos-1186 items 2-3)
-
-Sage, 2026-10-21. Both ran on a scratch data root built from the candidate tree, branch `sage/row66-r5`
-at 273fff6f9 on a36523713, as row 64's D2 did (rc13bcd555652). The scripts were
-`/mnt/storage/scratch/sage-r66r5x/d2s/d2-build.mjs` and `d2-drive.mjs`. They used the business example
-with stand-in token files, tracker and Gitea URLs pointing at 127.0.0.1:9, and a scratch project repo.
-Nothing live was touched. The six skills were installed and enabled on each data root with
-`scripts/skill.sh` from the candidate tree.
-
-Before the sessions, the harness suite ran whole on 273fff6f9: 149 pass, 0 fail, 12 s
-(2026-10-21T18:47:42Z).
-
-## Claude Code, run r4ab24630d323 (18:48Z)
-
-The chief and cto were bound, and the coder was launched through `launcher.fromSession` on claude-code,
-model claude-sonnet-5-5. The launch bundle names `tools/unslop-hook/claude-hook.js`, `unslop-check.js`
-and `lists.json`.
-
-- Turn 1. cto asked for one sentence with four banned words. The RESULT body `mosaic talk` would print
-  ends with the operator note:
-  `[unslop: 1 reply of this session flagged since the last note: banned word "additionally" x1; banned word "crucial" x1; banned word "testament" x1; banned word "vibrant" x1. The session gets a correction notice on its next turn.]`
-- Turn 2. `unslop.jsonl` logs `notice_injected` for that turn. The coder's transcript has the notice as
-  UserPromptSubmit hook additional context in the API request:
-  `UNSLOP NOTICE (mechanical style check, not the user speaking): your previous reply contained violations of the fleet writing standard (SYSTEM.md / ms-unslop): ...`.
-  cto asked the coder to quote it. The coder answered "I can't answer that one, and I won't quote
-  anything from it." So the notice reached the model, which chose not to repeat it. Its reply checked
-  clean.
-- Counts from `unslopCounts`: checked 2, flagged 1, patterns `ms-unslop:7` 4, notices 1, broken null.
-
-This scratch instance has no `mosaic talk` view of its own, so the note above is the RESULT body the bus
-returned to cto. That is the text `mosaic talk` and `mosaic follow` print.
-
-## pi, run r1dd94171bede (launch only)
-
-The coder launched on pi, model claude-sonnet-5-5. The launch bundle names
-`tools/unslop-hook/extension.ts`, `unslop-check.js` and `lists.json`. No turn ran. This host has no
-credential pi reads until P19 #383 settles, and mos-0865 D2 rules out mapping the Claude Code token into
-a pi variable. No `unslop.jsonl` was written. Counts: checked 0, flagged 0, notices 0.
-
-## Still open
-
-Vikunja #454 tracks both live checks. Claude Code runs in the first re-pin whose tree includes row 66,
-backup first. Pi runs one full session with a tell after #383. See `docs/plans/DEFERRED.md`.

docs/SESSIONS.md

@@ -1419,4 +1419,9 @@ are never rewritten or removed; corrections are new entries.
 2026-10-21T06:47:54Z | researcher | row 228 (#1729) round 3 in review (rev 2702; start rev 2700) | rebase of r2 onto the 234 landing c771a36f4 as researcher/row228-r3 cf18c42b9 (one commit, pushed) with Webby's round 2 N1 (:711 and :718); manifest 82cf98c6 (3 files); slot sage-1796: session.test 13 + host.test 42 = 55/0, manifest OK before and after, busy228.sh copy named in the clear; r2 94/0 and M1 killed stand (seat blobs unchanged); request attempt left in requesting state (lock held by sage-238-review-2b when the outcome rev was written, exit 3; transport said failed pre-send, no token), Sage resolves and posts as jarvis; packet agents/researcher/work/queue-228/r3
 2026-10-21T07:29:23Z | researcher | row 228 (#1729) landed as 86249ac55 (pushed 07:25Z by Sage) | patch-id b6ffe31feb0d matches my r3 candidate cf18c42b9 (checked here against origin/refactor); Sage combined gate with 238: seat 165/0, cli 640/0, scripts 585/0; queue note rev 2725, done rev 2727, #1729 closed comment 29966 (sage-1824); q228r2 worktree removed, branches researcher/row228, -r2 and -r3 stay on origin and locally; packets agents/researcher/work/queue-228 r1 r2 r3 uncommitted
 2026-10-21T15:19:14Z | Sage (Opus 5.5, 1ef1e4f8) | MVP push 10-21 afternoon: rows 249, 197 proof 3/4, 222 singles, 66 r4d, queue-commit | 249 landed 9de5a57ab (+7b9737953 DEFERRED N1, #1751 closed, Vikunja 445 c442); 197 proof 3 rc=1 on a driver defect, Herb's fix a5b636750 to Webby, proof 4 set up in sage-r197p4; 222 singles 34/34 and 5 mutants killed (sage-2028); 66 round 4 in review (82c830779, c30083/30084); queue revs 2642-2904 committed 0636721e6
-2026-10-21T15:20:58Z | Filbert (Opus 5.5, 048f3c63) | row 66 r4 review (sage-2037, sage/row66-r4d 82c830779, manifest 6cfd812da4ca) | APPROVE 30086, rev 2906; static, no tests; rebase only, row 66 +/- lines identical to r3 next to rows 212/213/232/245; N1 code-only patch-id d67275ac4251 (508bb684eade includes BUILD.md), N2 BUILD.md cap-sentence wording; packet-only notes
+
+2026-10-21T16:04:23Z | Gyro (T3 Codex gpt-6.1-sol) | Q195/Q196 design only, #1752 / Vikunja #448, gyro/editor-design | Code-measured writing-editor draft with three options, local thesaurus, pane/pins, guarded API/MCP, DesignCraft handoff and proposed briefs; queue next refused linked worktree, canonical next gyro returned nothing; no implementation or live actions.
+
+2026-10-22T16:02:06Z | Gyro (T3 Codex gpt-6.1-sol) | Q195/Q196 independent-review follow-up, mos-1300, Q220 | Recovered candidate 105811400 and current refactor aca16404c; canonical queue next gyro returned nothing; sent read-only reference drift map to Fenton, whose review is active. Design candidate left unchanged pending verdict. Docs-only fixes authorized on gyro/editor-design, no MVP gate slot.
+
+2026-10-22T16:06:34Z | Gyro (T3 Codex gpt-6.1-sol) | Q195/Q196 fenton-0004 F1-F8 docs fixes, mos-1300, #1752 / Vikunja #448 | Verified findings against aca16404c, retained O3, corrected grants/dependencies/model routing/folds/citations and reduced checklist to six; docs-only candidate for Fenton re-check, no product checks or MVP gate slot.

docs/TOOLS.md

@@ -418,7 +418,6 @@ One read-only tree supplies the bus, Console and human CLI (row 85,
 `copy` requires a canonical checkout (.git directory); --allow-worktree
 is a test override. COMMIT must be reachable from both local refactor and
 origin/refactor. It archives the runtime/import closure, adapters, roles,
-`tools/unslop-hook` (the unslop check both harness modules mount, row 66),
 RELEASE, package.json and package-lock.json; refuses missing manifests;
 runs npm ci inside the temporary copy; removes write permissions; and
 renames beside the target. A published existing copy stays unchanged.

docs/plans/2026-10-21_console-inbox-approve.md

@@ -1,57 +0,0 @@
-# Brief: Console inbox Approve and Deny for grant requests (Vikunja #435, J2)
-
-Sage, 2026-10-21, for Mos's order mos-1193 (Jason asked at 18:35Z to test J2 sooner). Vikunja #435, parent
-#424, DECISIONS Q188. Owner Gander, reviewer Webby, gate owner Sage. Chained on row 196's candidate (Q177):
-the design starts now on Gander's row 196 build. The code lands after row 196 lands and rebases onto that
-landing. Design first. The first deliverable is `agents/gander/work/queue-ROW/DESIGN.md`.
-
-## What Jason asked for
-
-Q188, as #435 records it: the chief surfaces each grant request to Jason's inbox in the WebUI, and he clicks
-Approve or Deny. It needs the Console to know who is signed in (Q175 SSO, #412). Until then Approve is
-`mosaic decide`.
-
-## Where things stand
-
-- The Console inbox shows decisions and prints `mosaic decide <id> <key>` for each choice
-  (`packages/webui/README.md`, Inbox section). It takes no human writes: without `--send` every method
-  other than GET and HEAD answers 403 `read-only`, and the live unit runs without it (row 189).
-- Q175 phase 1 (row 192, landed 4429a104f) builds the Console's own OIDC session. It is live only after the
-  phase 2 re-pin window turns on `--sso`. Under `--sso` every request other than `GET /healthz` needs a
-  verified session.
-- Row 196 (Gander, Duckworth) settles how the bus tells the human's own call from a same-uid process. A
-  Console write that resolves a decision must go through whatever row 196 lands, not around it.
-- The PRD doesn't allow this yet. REQ-DEC-3 says a human resolution comes only from a `mosaic` CLI session
-  started outside any agent run. Jason approved REQ-WEB-2 and the REQ-DEC-3 amendment in decision
-  00ed58e2 (Vikunja 19/266), and the PRD holds the id REQ-WEB-2 for it (1.8, "held for the Console decide
-  buttons amendment"). That amendment must land before this row's code does. PRD wording goes to Mos first,
-  then Jason. This row doesn't edit the PRD.
-
-## What the design must settle
-
-1. Which decisions get the buttons. #435 names grant requests (Q188). Say whether the first cut covers only
-   those or every open decision under REQ-WEB-2, and why.
-2. The identity. The resolving human is the verified OIDC subject from the Console session (row 192), mapped to
-   an authorized human the bus knows. Nothing comes from a proxy header or a shared secret (Q175). A request
-   from an agent session or a seat credential is refused.
-3. The write path. How the Console's POST reaches the bus's decide, using row 196's human boundary, and what
-   the decision event records: `via=console` and the subject.
-4. The guards: CSRF, a confirmation step, a decision that is no longer open, a stale option key, a double
-   click, and the read-only and `--no-send` modes. State each refusal's status code and message.
-5. Without `--sso` the buttons don't exist or are disabled. Say which, and what the inbox shows instead
-   (today's `mosaic decide` line).
-6. Tests on stand-ins only: a fake OIDC provider and the test bus, as row 192's tests do.
-
-## Boundaries
-
-- No change to who can reach the Console from outside. That stays Jason's.
-- No test touches `~/.mosaic-dev`, `~/.config/mosaic-dev`, the live units or a slot file. No request to the
-  live 127.0.0.1:7332 or 7333, mosaic.woltje.com or auth.diversecanvas.com.
-- Turning the buttons on live needs the phase 2 window (`--sso`) and then a re-pin whose tree has this row.
-  Both are windows with Jason. This row ships the code and the tests.
-
-## Gate
-
-Webby approves DESIGN.md, then the manifest. The webui, bus and cli suites and every `scripts/test-*.sh` are
-green on Sage's gate, and the mutants named in DESIGN.md are killed. The PRD amendment for REQ-WEB-2 has
-landed first.

docs/plans/2026-10-21_k12-cohort-events.md

@@ -1,48 +0,0 @@
-# Brief: K12 reads cgroup.events after cgroup.kill under load
-
-Sage, 2026-10-21, for Mos's ruling mos-1182 item 3. Vikunja #450. Gate owner Sage. Owner and reviewer are
-named when the row is briefed. Base: refactor at the brief commit. The row comes after row 197, unless
-proof 5 fails on K12 again (mos-1182 item 4). Then it goes ahead of 197, and 197's candidates rebase on it.
-
-## Why
-
-`packages/conversation/tests/cohort.test.mjs` K12 (line 268) force-stops a member that forks in a loop.
-Then it asks the shim for `events` and asserts `ev.populated === 0` (line 292). It never checks `ev.ok`.
-`events()` in `packages/conversation/src/shim.mjs:83-96` returns `{ ok: false, unavailable }` when
-`engine/cgroup.events` can't be read or has no `populated` field. Under load the test then fails on
-`undefined !== 0` and never says why.
-
-This has happened twice:
-
-- BUILD-LOG.md:4092: conversation went 181/1 at a load of about 12 while mutants ran, and 182/0 alone.
-- Row 197 proof 4, wave pair1-b, 2026-10-21T16:04Z: 147/1 with two conversation suites running at once.
-  The log is `/mnt/storage/scratch/sage-r197p4/proof-run/pair1-b/out/pkg-conversation.log`.
-
-## Steps, in order
-
-1. Make the failure name its cause. The K12 assertion prints `ev` (with `ok` and `unavailable`) when it
-   fails. Commit this first, on its own.
-2. Find why the file is unreadable or lacks `populated` after `cgroup.kill` under load, and fix that at the
-   source. Use the shim, the cohort controller or the test's setup and teardown, whichever the evidence points
-   to. Record the evidence in `agents/OWNER/work/queue-ROW/BUILD.md`.
-3. Do not loosen the assertion. Do not treat `unavailable` as empty, or `populated` as 0 when it can't be
-   read. Retrying a read that is still in progress is allowed only if step 2 shows a race in the read
-   itself, and the retry has a bound and a test.
-
-## Files owned
-
-`packages/conversation/src/shim.mjs`, `packages/conversation/src/cohort.mjs` if step 2 needs it, and
-`packages/conversation/tests/cohort.test.mjs`. Nothing in row 197's 37 paths.
-
-## Tests
-
-- K12 still asserts `populated` 0 and an empty member list.
-- A new case shows `events` returning `unavailable` with its reason, and that the controller treats that as
-  unavailable, not as empty.
-- The conversation suite passes whole three times in a row, and once while a second conversation suite
-  runs at the same time. That is the load that broke it in proof 4.
-
-## Gate
-
-The reviewer approves on the row, naming the candidate manifest. The conversation suite and the
-control-board suite pass whole on a gate rerun in a clean worktree, on Sage's slot.

docs/plans/2026-10-21_q195-writing-editor.md

@@ -0,0 +1,835 @@
+# Q195 writing editor design
+
+Gitea #1752, Vikunja #448, DECISIONS Q168, Q177, Q194, Q195 and Q196. Design for review, not build
+authority. Originally measured at `6c75887b0`, rechecked against `origin/refactor` at
+`aca16404c` for Fenton's fenton-0004 review. Repository line references use `aca16404c` unless
+a different revision is named. WordCraft and DesignCraft retain their separately pinned revisions.
+Work is confined to `gyro/editor-design`.
+
+## Outcome and boundaries
+
+D1. Give Melanie a familiar Word-like writing interface inside the Console. She writes, saves,
+selects a word for synonyms, and moves between documents without losing her draft or chat. Her
+corpus includes hundreds of .doc files, several .qxd books and recent Markdown. Obsidian is not the
+interface model. Ship a useful writing slice before legacy import. This add-on does not gate the
+October 27 Markdown-library MVP, which Q196 leaves unchanged. Editor build gates are
+post-October 27 work and never take the gate slot ahead of MVP rows. Design and review
+continue now under Q220.
+
+D2. Q196 withdraws the earlier assumption that the current Markdown editor must be the solution.
+Compare all three options below. WordCraft's canvas/WebGPU browser UI
+(`apps/wordcraft-web/Cargo.toml:3,26`, `index.html:17`) has a different rendering and build system.
+Read-only reference checkout: `/mnt/storage/src/artcraft/wordcraft`, commit
+`e05b7fe86f3b85454000dffc321de638d7009817`. No code is copied by this design. Any later copy must
+preserve its applicable MIT or Apache-2.0 license and notices.
+
+D3. No direct agent writes. Proposals appear outside the document until Melanie accepts one, then
+become an undoable draft edit. Saving remains a separate human action. Q176 and Case 2 C2-06 already
+prohibit agent prose and constrain corrections. Q195 does not explicitly remove that rule. The
+design below specifies the interface, but agent access to unsaved text and new replacement-prose
+permissions remain gated on Jason's choices, not silently enabled.
+
+All examples and tests use invented fixtures. No books content, host access, live stack changes,
+role changes, queue changes or access to `~/.mosaic-dev` is part of this assignment.
+
+## What exists
+
+| Code | Measured finding and implication |
+|---|---|
+| F1 | Row 154 landed as `9353675d1` (#1648). `packages/webui/editor/model.mjs:16-18` imports ProseMirror and markdown-it. `view.mjs:162` mounts the DOM editor with history, formatting, lists and a link bar. `model.mjs:1-14` and the serializer retain original blocks unless edited. Front matter and unsupported structures remain source blocks. This is the implementation to extend. |
+| F2 | The actual vendor path is `packages/webui/third_party/editor/`, relative to the WebUI package, not repository-root `third_party/editor/`. `PROVENANCE.json:1-13` records 170 files, 19 packages and no local changes. `NOTICE:1-10` names tagged source, hashes and license paths. `editor/build.mjs:16-24,34-56` aliases source and produces an unminified bundle with inline legal notices and hashes. `editor/BUILD.json:7-14` records 758,420 JS bytes and 4,462 CSS bytes. These are checked against bytes, not inferred from the README. |
+| F3 | `packages/webui/src/public/bus.js:892-911,949-951` keeps a shared Markdown draft and falls back to Source when exact round-trip fails. Redrawing destroys the editor. `editor/view.mjs:183-205` creates a new history on `setText`. The README's “Visual editor” section (`packages/webui/README.md:572`) records this limit. A writer needs a stable editor mount while chat polls. |
+| F4 | Row 148's save is `POST /api/project-file`, with exactly `{project,path,base,content}` (`bus.js:999-1010`, `serve.mjs:522-555`, keys :527 and handler :531). Authentication, exact Origin, Fetch Metadata, strict keys and a 1 MiB request bound apply. `packages/project/src/index.mjs:244-260` restricts it to a human and refuses a changed file base. `paths.mjs:12-15` allows only `spec/north-star.md` and direct `docs/*.md`. This route cannot save book paths today. Do not widen its regexp to admit the vault. |
+| F5 | The Console already has chat projects, named threads, message paging, send and explicit resume (`packages/webui/src/chat.mjs:19-27`, `public/chat.js:9-14,66-70`). Chat has its own route and render lifecycle (`public/bus.js:1124-1128`), so Docs and Chat currently replace each other. `chat.js:68` renders bodies as escaped text. There is no document pin in these structures. |
+| F6 | Sessions are durable thread identity plus replaceable runs. Row 121 landed as `2c16d6b93` (#1615). `packages/bus/src/broker.mjs:845-853` exposes thread state and idle release. Thread creation at `:5716-5728` checks FED R3 grants; open/send at `:5766-5780` also use `#grantedThread` (`:790-793`) after thread ownership checks. Open requests launch explicitly. Current chat uses the thread's default session; pins remain thread IDs, never individual runs. Existing tester isolation is in rows 177/182 and `chat.mjs:1-4`. |
+| F7 | C2-11a, row 214, owns `editor/model.mjs`, bundle output and editor tests (`docs/plans/2026-10-20_case2-rows.md:235`). It measures and preserves wikilink forms. All proposed changes under `editor/` wait behind it. C2-10b owns `public/bus.js`, its stylesheet, `serve.mjs` and WebUI tests (`:784`). It supplies cited items, scope badges and sync status. Our shared-file rows wait behind it and reuse its renderer. Neither brief proves that its feature has landed. |
+| F8 | Sage's input via mos-1179: row 220, C2-10a (#1721), makes the conversation reader hide creative sessions and refuse direct opens with `conversation-not-listed` (`case2-rows.md:522`). Row 198 (#1696) retires the 7331 board writer, currently referenced at `serve.mjs:14`. This design uses neither raw session files nor the board route. It does not depend on row 5 (waiting on Jason) or parked row 29. |
+
+Original draft verification at `6c75887b0`: `node --test packages/webui/tests/editor-provenance.test.mjs
+packages/webui/tests/editor.test.mjs` passed 10 tests with 1 explicit skip. The skip is the rebuild
+because pinned esbuild 0.28.2 is absent. The source tree, output hashes, licenses, route serving and
+exact round-trip tests passed. This is fixture evidence, not a live check.
+
+## Options and recommendation under Q196
+
+O1. Extend row 154 into a Word-like DOM interface. Reuse its safe source-built editor, add a
+File/Home/Review ribbon, named heading/paragraph styles, a document navigation pane, familiar
+shortcuts, status bar and synonyms. It preserves browser text behavior and the current CSP. The
+measured JS/CSS sizes are F2, not an estimate. Its current schema has no footnote, comment or
+tracked-change nodes (`editor/model.mjs:27-114`), no page layout engine and no DOCX writer.
+Word-like controls do not create those features. This option needs a production export path before
+it meets Q196's DesignCraft requirement.
+
+O2. Put WordCraft's engine and canvas interface in the document pane. It offers Word-like commands
+and rich file support rather than recreating all of them in ProseMirror. Louie's scratch evaluation
+is the source for build/runtime and round-trip measurements below. Its own browser file
+pickers/downloads and preferences are not a Mosaic save or permission boundary. An adapter must
+disable direct uncontrolled I/O, connect owned git documents, expose selection/version/undo
+operations, and put all agent access through Mosaic's broker. Its native MCP server is not
+automatically a browser bridge. Q167 D3 bars the required CSP loosening today. An iframe or separate
+origin is not a way around that ruling. O2 requires Jason's explicit scoped exception and an
+independent security review before build rows.
+
+O3. Keep a Word-like DOM writing interface, use WordCraft's headless formats/engine behind a narrow
+server operation for production export. Recommend this bounded mix for the first release: O1
+supplies editing and local synonyms, a pinned headless exporter supplies DOCX for DesignCraft. Do
+not run two live document models or send every keystroke to a server. This avoids introducing a
+canvas editor and a CSP exception while adding a concrete book handoff. The cost is a reviewed
+format adapter and an explicit feature boundary. It does not promise full Word parity. If footnotes,
+comments, tracked changes or precise pagination must be editable in the first release, choose O2
+after its bridge and CSP gates instead of silently extending Markdown beyond what it can represent.
+
+The first release includes prose, headings, emphasis, lists, links, native spelling, find, word
+counts, undo, explicit save and synonyms in familiar controls. True page layout, headers/footers,
+rich tables, footnotes, comments and tracked changes are later rich-document work, not buttons that
+discard unsupported information. Existing documents with unsupported structures remain
+source-preserved or read-only with a clear reason. Jason confirms that feature cut, not an
+assumption that the existing vault defines her needs.
+
+## WordCraft measurements used for O2 and O3
+
+Louie's evaluation is pinned at `origin/louie/wordcraft-eval`, commit
+`880ef19e017dad0194ecc9921ae55a0cf2e8fef2`,
+`docs/plans/2026-10-21_q195-wordcraft-eval.md`. Louie built a scratch clone of WordCraft
+`e05b7fe86f3b85454000dffc321de638d7009817` (0.9.0), with no source modifications.
+These are Louie's measured results, not estimates or a claim that this combined design ran
+the application in the Console.
+
+| Evidence | Measured result | Design implication |
+|---|---|---|
+| Release build twice | 392.786 s, then 172.324 s, under `nice -n 19`, four Cargo jobs | First-build cost is material. Exact timings are that scratch host, not a product startup benchmark. |
+| WASM | 43,994,316 bytes, SHA-256 `90dec375924b47b40054eb4ecafb4235b6ed0bd63880b91ec138fdbb6f939e75` | The current shipped build is much larger than the packaging README's approximate figure. Use the measured artifact. |
+| JS / HTML / icon | 164,941 / 1,604 / 18,378 bytes | Total 44,179,239 bytes, identical sorted hashes for all four artifacts across both builds. No compression transfer size was measured. |
+| Review scope for web target | 15 local crates, 251,457 physical Rust source lines and 199 third-party packages | O2 imports a maintained application, not a small editor widget. All dependency licenses and pinned build inputs need review. |
+| Browser API | Session and selection stay in WASM. No exported page API or postMessage bridge. Browser has no TCP control channel | The native MCP server cannot control the browser document. The O2 adapter is new work. |
+| `.doc` → `.docx` fixture | Heading 1, italics and footnote reference/body preserved. Comment absent, inspect reports zero comments | Useful import candidate, with a real loss boundary. Legacy import must retain the original and disclose comment loss. |
+| `.doc` → `.md` fixture | Heading and italics preserved, footnote reference/body and comment absent | Markdown is not a lossless intermediate for rich legacy books. |
+| `.md` → `.docx` → `.md` fixture | Heading and italics preserved. Footnote marker/definition stay ordinary text and brackets are escaped | O3's adapter must detect unsupported constructs, not rely on conversion success as proof of semantics. |
+| Thesaurus | 29 headwords, 122 synonym values | WordNet is needed under every option. Hunspell spelling dictionaries are a separate mechanism. |
+| MCP | 16 native tools, stdio/headless or loopback desktop connection | Reuse operation ideas through Mosaic's scoped tools. Do not expose native execute/save or a loopback control port to agents. |
+
+For the unmodified O2 browser app, Louie identifies `script-src 'wasm-unsafe-eval'` for
+WebAssembly, `frame-src 'self' blob:` for the PDF preview, and `frame-ancestors 'self'`
+on an embedded WordCraft response rather than the shell's existing `'none'`. A restricted
+integration could disable PDF preview, but must demonstrate the resulting narrower policy.
+The shell policy stays unchanged when only an editor response changes. Q167 D3 still
+requires Jason's ruling on that editor policy. No worker/GPU-specific CSP directive is
+needed for this build. The report's Console CSP reference was `serve.mjs:495` at
+`6c75887b0`; the identical policy is now `packages/webui/src/serve.mjs:605` at `aca16404c`.
+
+Pane fitting is a source-based inference: eframe 0.36.2 uses ResizeObserver on the canvas.
+Louie did not prove a functioning Console embedding, keyboard escape, browser startup
+latency or browser selection bridge. Those remain O2 acceptance work, not measured successes.
+The native fixture conversions do prove format behavior on the synthetic fixture. They do
+not prove preservation of Melanie's corpus or the complete Word feature set.
+
+For O3, the headless format path is supported by the successful native fixture commands.
+A restricted exporter service and its exact native dependency subtree, memory usage and
+service latency have not been measured. W6 must measure them. O3 avoids the measured
+browser WASM/app UI and a browser CSP exception, but is not claimed to be a zero-cost or
+already-built backend. This is why the recommendation is limited to the tested prose,
+heading/emphasis/list subset plus explicit loss checks, with richer editing as a separate
+choice in Jason's checklist.
+
+## Stored format and DesignCraft handoff
+
+D20. For the recommended first slice, existing Markdown stays canonical in git, including front
+matter. No forced migration. Produce DOCX as a derived, human-requested book handoff from a specific
+commit. The first slice stores Markdown only in git and downloads the derived DOCX with an export
+manifest. Optional storage of that output under a dedicated `exports/` directory in the writing
+project requires its own accepted write-path policy brief. The manifest records source paths, source
+commit/digests, converter revision, style map, output digest and conversion warnings. The Markdown
+source is the sole editable copy. The DOCX is regenerated, never independently edited then merged
+back. Existing Case 2 mapping does not automatically index exports or gain write permission for
+them.
+
+Markdown-only git is easiest to inspect but cannot retain all Word features. DOCX-only git retains a
+richer document model but is binary to git and outside Case 2's Markdown reader, writer and
+citations. Two editable masters drift. If git later holds both, DOCX is a derived output, not
+another editable format to synchronize. A later rich-document mode may make DOCX canonical per
+document, with a derived Markdown reading projection and stable identity mapping, but that needs
+separate writer, index, citation and loss-preservation design. It does not change this week's Case 2
+MVP.
+
+D21. DesignCraft checkout `3ce3a24f08d03935bc8cf7cb23755aca8065558c` lists DOCX and MD at
+`docs/file-format-parity.md:69,72`. Code qualifies that claim: `crates/textimport/src/lib.rs:94-126`
+recognizes `.md` but falls through to plain text. Markdown headings, emphasis and YAML are not
+automatically interpreted. `crates/textimport/src/docx.rs:493-548` reads named styles and footnotes.
+Its regression `tracked_changes_import_as_accepted_including_moves` at `:706` shows that
+insertions/move destinations become accepted content, with deletions removed, not an editable review
+history. `crates/engine/src/cmd/place_text.rs:46-93` maps style names and resolves conflicts.
+`crates/engine/src/cmd/file.rs:138` documents `file.place` for DOCX/MD and
+`crates/mcp/src/tools.rs:98-110` exposes typed commands through the MCP server.
+
+D22. `POST /api/editor/export` takes exactly `{project,path,base,format:"docx"}` under the existing
+human write fences, reads the authorized saved commit and returns a bounded download containing DOCX
+plus manifest. Dirty drafts must be saved first. No arbitrary server path or browser-selected
+converter command is accepted. Export strips front matter into metadata, resolves source links as
+text or explicit cross-reference labels and maps Normal, Title, Heading 1-3, Quote and list styles
+by name. It refuses unsupported semantic content or offers an explicit loss report before export.
+Jason's later layout agent fetches the reviewed Markdown commit into its own approved workspace,
+produces the matching DOCX and manifest (or reads the separately authorized export commit), verifies
+hashes, and uses DesignCraft MCP `execute` with `file.place`, sets an explicit style map and
+`styleConflicts`, then reviews autoflow and warnings before saving a layout. That later agent
+automation is not authorized by this design assignment. No editor agent gets DesignCraft credentials
+or automatically sends Melanie's text to another service.
+
+Acceptance uses invented fixtures: body, styled headings, emphasis, list, table, link and
+footnote/track-change cases appropriate to the chosen format. Compare source text and style
+identities after WordCraft export and DesignCraft placement, including Unicode and paragraph
+boundaries. Unsupported footnotes/revisions in Markdown must refuse or warn, not vanish. For rich
+DOCX input, explicitly choose a final accepted reading before production layout, retaining the
+original review-bearing file. A direct `.md` place is a plain-text fallback only, not the production
+path for styled Markdown.
+
+D23. Legacy import is a separate assignment. It must supply stable document IDs, original hashes, a
+read-only retained original, converted editable file, named styles, metadata, attachment mapping and
+a loss/warning report with a human acceptance decision. It must also name the supported
+format/features, source-to-output paragraph identifiers and asset paths so navigation, pins and
+citations can be repaired explicitly. Never replace .doc or .qxd originals. WordCraft's `.doc`
+parser is a candidate to test, not proof that every 20-year-old document survives. Neither project
+reads .qxd today (DesignCraft's gap at `docs/file-format-parity.md:32`). QXD extraction needs its
+own evaluated tool and license. The editor accepts only reviewed converted artifacts, not a bulk
+import button.
+
+## Writing and moving between documents
+
+D4. Present a File/Open view with recent documents and a collapsible book/chapter navigation pane,
+plus a heading outline. The Case 2 mapping supplies scope underneath it. Show book, folder and
+document in the breadcrumb, without requiring Melanie to operate a vault UI. The host recon at
+`/mnt/storage/src/jason-master-restart/projects/mosaic-mvp/MELANIE-HOST-RECON.md:23` describes
+Markdown book folders, chapters, characters, summaries, locations, research and tracker notes, with
+front matter keys `type`, `name`, `appears_in` and `relationships`. Only that structure is used
+here. `.base` and `.canvas` stay untouched and are not offered as editable documents.
+
+D5. Reuse C2-04's human-only `library.file` read (`packages/bus/src/broker.mjs:99,4610-4616`).
+The future `library.file.save` verb does not exist at `aca16404c`. C2-11b has no accepted
+brief yet (`docs/plans/2026-10-20_case2-rows.md:11-14`), and the Case 2 design
+(`origin/gosalyn/case2-design:agents/gosalyn/work/case2/DESIGN.md`, section 7.3) proposes
+its navigation and save UI. C2-11b's brief, the future human save verb, C2-02's writer and
+C2-03b's push behavior must be implemented and independently reviewed before W2 can ship
+book editing. They are explicit blockers, not an existing save boundary or work hidden in
+a UI row. Until then only `docs/` fixtures can exercise the new writing surface.
+
+D6. Keep one working editor with a collapsible file tree, heading outline, recent documents and a
+path/name filter. Opening a fixture such as `Lantern Book/Chapters/03 - Rain.md` uses the mapping's
+document identity, not an absolute path. Back/forward and wikilink navigation use the same open
+operation. Do not invent a second tree or a vault-wide search service.
+
+D7. Each document keeps its text, base commit, selection, scroll and undo history in memory for this
+signed-in tab. Chat polling and divider movement never remount it. Switching back restores it. Keep
+at most ten clean inactive editor states. Before releasing a dirty state, require Save, Copy or
+explicit Discard. Never evict a dirty document silently. No unsaved text goes in URLs, localStorage
+or logs. A dirty-document badge and an unsaved count remain visible. Closing/reloading a dirty tab
+warns. Explicit sign-out clears text and access context, with an unsaved warning before it proceeds.
+Expired credentials revoke agent shares and block writes/server reads, while preserving the tab's
+local draft for Copy or reauthentication. The UI distinguishes expiry from an explicit sign-out.
+
+D8. Use Word-like File/Home/Review controls and a familiar Normal/Heading 1-3 style picker. Provide
+a clean page-colored writing surface, readable line width (about 70 characters), text-size controls,
+spacious line height, native spellcheck, keyboard formatting, find within the open file, word count
+and a focus view. Keep the toolbar compact and keyboard accessible. Hide front matter behind a
+collapsed “Document details” source panel, preserving its exact bytes. Unsupported blocks remain
+marked source blocks. Do not reinterpret YAML or normalize wikilinks. All-day use means stable
+selection/history and clear save status, not Word-style pagination.
+
+D9. Save is explicit (button and Ctrl/Cmd+S), with “Unsaved”, “Saving”, a returned commit, or a
+refusal. No autosave commits initially. Newer content refuses `stale-base` and preserves the draft.
+Show current saved text beside the draft for manual reconciliation, never an automatic overwrite.
+Unknown save/push results are read back before retry. A local library commit awaiting push is
+labelled as such, using C2-03b's result, never called synced. No create, rename, delete, promote or
+crossover work enters this add-on's first slice.
+
+## Thesaurus
+
+D10. Use Princeton WordNet 3.0, indexed locally by synset (meaning) and part of speech. This is
+substantially broader than WordCraft's small static `T` table
+(`crates/engine/src/cmd/review.rs:914`). WordNet is a lexical database, so it will miss some
+inflected or literary terms and does not rank words for a sentence. Group results by meaning, show
+the gloss, omit the selected word and duplicates, and say “No local synonyms” on a miss. Do not
+promise every alternative is interchangeable.
+
+Princeton's [statistics](https://wordnet.princeton.edu/documentation/wnstats7wn) report 117,659
+synsets and 206,941 word-sense pairs. The 155,287 strings total counts words again across parts of
+speech. The distinct total is 147,278. Its
+[license](https://wordnet.princeton.edu/license-and-commercial-use) permits copying, modification
+and distribution for any purpose, retaining its copyright, terms and disclaimer on copies and
+modifications. This fits this repository's private `UNLICENSED` package and source-review rules. Do
+not label WordNet MIT or Apache. Preserve the actual WordNet license.
+
+Measured download on this design session: Princeton's archive host timed out. The NLTK project's
+[WordNet data
+mirror](https://github.com/nltk/nltk_data/blob/96f9b3252457a2b97e52aec64c3dfceeb5c312d5/packages/corpora/wordnet.zip)
+at commit `96f9b3252457a2b97e52aec64c3dfceeb5c312d5` supplied the archive in memory. The archived
+LICENSE is WordNet 3.0's Princeton license. No archive entered this repository.
+
+| Measurement | Exact value |
+|---|---|
+| Archive | 10,775,600 bytes |
+| SHA-256 | `cbda5ea6eef7f36a97a43d4a75f85e07fccbb4f23657d27b4ccbc93e2646ab59` |
+| All uncompressed entries | 36,353,991 bytes |
+| `data.*`, `index.*` and exception files | 35,435,978 bytes |
+| Measured synsets | noun 82,115, verb 13,767, adjective 18,156, adverb 3,621 |
+
+D11. At build time, import the original text, license and a provenance manifest under
+`packages/webui/third_party/thesaurus/`. A small reviewed converter bakes a static index into a
+self-hosted Web Worker asset, shipped with the Console build. Start that worker when the writing
+surface loads. No runtime dependency install, upstream lookup, CDN, on-demand dictionary fetch or
+model call occurs when she selects a word. Data is reviewable source in the release, like row 154's
+editor source. Browser assets still come from the installed Console itself. CSP stays byte-for-byte
+unchanged. Worker startup and index decoding stay off the typing thread.
+
+The build row records exact generated bytes and worker memory/load measurements rather than guessing
+compression size here. Gate limits: at most 50 MiB shipped dictionary assets, at most 128 MiB added
+worker heap on the fixture browser, warm lookup under 100 ms for 95 of 100 fixture lookups. A failed
+limit requires a reviewed representation change, not dropping words silently. Worker startup never
+blocks typing. Only the selected word goes to the worker, and it stays in the browser.
+
+D12. Right-click an explicitly selected word to open an accessible Synonyms menu. Also support
+Shift+F10/Menu key and a toolbar action. Freeze its selection bookmark and document revision when
+opening. Preserve selection while the menu has focus. For a whole-word selection, normalize lookup
+case and use WordNet exception lists for inflections, while displaying the original word. Do not
+silently inflect a replacement. Clicking a result replaces exactly that selection in one undoable
+transaction and retains surrounding marks. If the document or selection changed while loading, close
+the menu and ask her to select again. Empty/multiword selection, source blocks and read-only mode
+offer no replacement. Escape closes and returns focus. Keep ordinary browser copy/paste reachable.
+
+D13. “Ask the agent for options in this sentence” is an optional second menu action, never a
+fallback request sent automatically. It previews the selected word and one sentence, then sends only
+that context to the chosen thread after her action. Default off pending the policy/access choices
+below. With Q176 unchanged, the answer must be allowed cited advice or bounded corrections under
+C2-06, never an unrestricted rewritten sentence.
+
+Reviewer checks: fetch the exact mirror commit, hash the archive, compare the archived LICENSE with
+Princeton's published text, recompute every imported file hash and the four synset counts, and run
+the converter twice from separate directories for identical output. Include license text with both
+original and derived data. Check generated records against source offsets, malformed input refusals,
+missing license/hash failures, no executable data, no network calls, CSP equality and absence of
+document/word logging. The mirror's pin and measured hash establish repeatability, not a claim that
+its bytes were compared with the unavailable Princeton archive.
+
+## Agent API and MCP access
+
+D14. Reuse the existing broker and harness typed-tool channel. Mosaic already implements
+`initialize`, `tools/list` and `tools/call` in `packages/harness/src/mcp-server.mjs:23-43`, with
+session-scoped tool dispatch (`tools.mjs:1-17`). WordCraft's `get_text`, `inspect_document` and
+`select_text` (`crates/mcp/src/tools.rs:109-122`) illustrate small, typed operations. Its `execute`,
+`type_text` and `save_document` are too broad here. Its `server.rs:130-163` exposes document
+resources, but Mosaic needs no second MCP server.
+
+D15. The browser publishes an immutable, short-lived context snapshot only when Melanie chooses
+“Share selection” or “Share document” in the visible thread. A pin does not grant access. Snapshot
+identity includes owner, business, library/project, mapped path, tab ID, thread ID, editor revision,
+base commit, scope, text digest and expiry. An opaque ID is a reference, not authority. The broker
+binds it to the authenticated thread holder and user. No agent chooses another user's tab, changes
+the active file, reads a session file or uses `library.file` to evade M4. Sign-out, permission loss
+or explicit revoke removes access. A browser heartbeat lease expires after 30 seconds without
+renewal, including a lost connection. Absolute expiry is 15 minutes. Navigation suspends access
+until explicit sharing for the new file. Multiple tabs have separate IDs and never guess which is
+“open”.
+
+Proposed new interfaces, all gated design contracts:
+
+| HTTP / broker operation | Typed MCP tool | Result and authority |
+|---|---|---|
+| `POST /api/editor/contexts` → `editor.context.publish` | none (human only) | Publish selection or document snapshot. Return context ID, revision, digest and expiry. Max 256 KiB snapshot UTF-8, within a 1 MiB HTTP envelope. Reject overflow without truncating silently. |
+| `DELETE /api/editor/contexts/:id` → `editor.context.revoke` | none (human only) | Revoke one owned share. Browser disables its card immediately. |
+| `GET /api/editor/contexts/:id` → `editor.context.read` | `editor_read_document({context,revision,cursor?})` | Only explicitly shared document text. Page whole blocks below `REPLY_CAP`, with revision/digest on every page. Selection-only sharing refuses whole-document reads. |
+| Same read boundary → `editor.selection.read` | `editor_read_selection({context,revision})` | Exact selected text, optional shared sentence and offsets, no implicit surrounding document. |
+| `POST /api/editor/suggestions` → `editor.suggestion.propose` | `editor_propose_edit({context,revision,expected,replacement,reason,requestId})` | Store a proposal only. Bind to shared selection offsets and exact expected text, not a browser-supplied filesystem path. No file save. |
+| `GET /api/editor/contexts/:id/suggestions` → `editor.suggestion.list` | none required | Human reads proposals for this context. |
+| `POST /api/editor/suggestions/:id/decision` → `editor.suggestion.decide` | none (human only) | Accept or reject the card. Acceptance authorizes one local transaction, never a git write. |
+
+D16. All arguments use strict schemas with unknown keys refused. Reads stay within the existing
+session capability and approved universe/scope. HTTP mutations use the signed-in human, exact Origin
+and same-origin Fetch Metadata fences, never a browser-selected actor. No MCP accept, save or
+general execute tool ships. Publishing unsaved text is a new broker boundary and needs a reviewed
+capability/policy decision. The first agent slice can remain read-only on explicitly shared saved
+material through existing allowed lookups.
+
+D17. Use normalized LF Markdown UTF-16 offsets at valid code-point boundaries, not ProseMirror
+positions or rendered DOM offsets. The browser builds a source mapping for the selected editable
+text and verifies the exact substring. Refuse selections crossing raw blocks, front matter, nodes or
+unmappable syntax. The context revision increases on every document edit. A changed digest/revision,
+revoked share or changed text makes a proposal stale. Do not auto-rebase it. Acceptance is one
+ProseMirror transaction, undoable, and a later Save uses the original file base and the existing
+human writer. Applying an accepted card twice is refused. A crash leaves a proposal unapplied, never
+retries it.
+
+D18. Bound proposals to 20 per context, each replacement/expected at most 4 KiB and reason at most
+500 characters, with 15-minute expiry and idempotent `requestId` per thread/context. Deduplicate
+transport retries without resending to the agent. Log IDs, hashes and outcomes, not bodies. Proposal
+content remains protected context data and is deleted on expiry/revoke. Audit records retain
+metadata only. Display all generated text as text, with authoring thread, old/new text, reason and
+Accept/Reject. Nothing is interpreted as HTML or commands.
+
+D19. Q176 remains enforced on this new channel too. With no new ruling, only the already permitted
+C2-06 cited corrections/advice may appear, with its exact citation and edit-distance limits, and no
+agent replacement tool is exposed. Unsaved text has no git citation. Sharing it does not turn a
+digest into a valid C2-06 source. Supporting cited unsaved drafts needs an explicit decision and
+review of M3-M5 and the guard, not a private suggestion channel around the existing guard. Reject
+arbitrary prose even when a human would later approve it until that decision is made. Direct edits
+remain outside this recommendation.
+
+## Split pane, chat and pins
+
+D24. This section folds Fenton's pane, chat and pin design from `origin/fenton/editor-design` at
+`7caf8008b5887c15f74303a50db2e54a9778375f`, `docs/plans/2026-10-21_q195-pane-and-pin.md`. Fenton's
+separate work supplies the layout, durable thread pin and send-time context model. The following
+reconciles it with Q196, Case 2 paths and this brief's explicit sharing rules. It is design input,
+not Fenton's review approval of this combined document.
+
+D25. On writing routes put the editor container, a divider and sibling `aside#chat-pane` under
+`main`. Navigation replaces the document container only. Embedded chat takes an explicit thread ID
+and container, never owns `location.hash`, and reuses the same renderer as full Chat. Keep the
+existing 10-second polling, paused for hidden tabs and sign-out. No new WebSocket service. Chat
+polling updates only its own DOM. O2, if selected later, would use the same outer pane with an
+engine adapter rather than DOM selection access.
+
+D26. Start at 62% document, 38% chat. The divider uses pointer capture and the WAI-ARIA separator
+pattern, names both panes, reports current/min/max width, and supports arrows (2%), Shift+arrows
+(10%), Home/End and Enter to collapse/restore. Double-click resets. For the recommended ribbon UI,
+clamp document/chat widths to 44rem/18rem and clamp again on resize. Below 76rem show Document/Chat
+tabs, preserve both drafts and show reply counts without switching focus. Store width/collapse only
+in `mosaic-console-split`, with invalid values reset. No document text in browser storage. These are
+design sizes, not benchmark results. The compact O1 toolbar alternative uses 28rem/18rem and tabs
+below 60rem. For the ribbon UI, tabs deliberately start at 76rem, including the entire
+62–76rem band where the two pane minimums alone would fit. That leaves room for navigation
+and avoids another intermediate layout. This deliberately replaces Fenton's E6 2.5rem chat
+rail in that band. Existing CSP stays unchanged for the recommended O3 headless-export mix.
+
+D27. Unpinned chat “Follows you” as documents change. A pin binds a bus thread UUID that passes current ownership and FED R3 grant checks to a
+document, never a harness run or session-file path. On A pinned to T1 and B pinned to T2, opening B
+shows T2, keeping each thread's draft/read cursor. A document without a pin restores the follow-you
+thread. Unpinning leaves the displayed thread following the user. Switching thread on a pinned
+document offers “Pin this thread here instead?” and never changes the pin silently. A thread may
+serve several documents, one pin per document/owner. Document navigation never launches a run. Reads
+do not call `thread.open` or send messages.
+
+D28. Recommend durable pins on the bus, following Fenton's S6. Add
+`thread_pins(business,owner,project,path,thread,at)`, unique per business/owner/project/path, with
+`POST /api/chat/pins` → `thread.pin`, `DELETE /api/chat/pins` → `thread.unpin`, and `GET
+/api/chat/pins` → `thread.pins`, under the existing chat identity/write fences. Testers retain their
+own isolated pins, never the human's. The pin belongs to its authenticated business/user.
+`thread.pin` and `thread.pins` reuse `#grantedThread` after the existing thread ownership
+check, as open/send/messages do (`packages/bus/src/broker.mjs:790-793,5766-5780`). Ownership
+alone is insufficient. Pin operations never grant thread or document access. For library
+documents validate the mapped path/scope through the library reader,
+not row 148's narrow `documentPath`. Do not widen that existing function. Keep the thread's chat
+project separate from the writing repository identity and validate their declared association. Poll
+pin unread metadata separately from message bodies so background threads can get a badge without
+rendering or waking them. Row 121's current API has no such metadata contract, so W3a must implement
+and test it rather than assume it exists.
+
+No automatic rename following. A missing path shows a stale pin and explicit Re-pin/Unpin controls.
+A missing/forbidden thread or revoked/expired thread grant shows the stale-pin state,
+offers Unpin only and exposes no former content or unread metadata. The owner may remove
+that stale pin without regaining access to the thread. Two tabs update pins
+with a revision precondition, so an old tab cannot silently replace a new pin. The follow-you thread
+ID may live under an owner/business-scoped browser key and is cleared on sign-out. A pin confers no
+document permission or context sharing.
+
+D29. First agent context is saved material at send time. A visible chip, explicitly enabled by
+Melanie and removable for each send, carries `{project,path,commit,lines:[from,to]}` and no text. It
+appears only after her share action. Check commit is reachable in the allowed served history, path
+is mapped, caller/thread can read that scope, and both lines exist in that exact commit. When the
+draft is dirty or mapping is uncertain, omit selection lines and label “Saved version only. Save to
+cite this selection.” Do not pretend draft offsets are saved line numbers. The agent uses existing
+approved library lookup tools and C2-06 citations, not session files or an expanded generic `read`
+root. `packages/project/src/paths.mjs:34-40` now refuses a library repository unless
+`allowLibrary` is explicit. Use the library reader and do not widen `documentPath`.
+
+Store structured context in `message_context` keyed to the message, kept apart from body and
+inserted atomically. `thread.send` accepts this optional strict field, and message reads return it
+separately. The broker validates the source rather than trusting the browser's chip. This first
+saved-context route does not enable D15's unsaved snapshots. Both tables and verb changes need
+Jason's explicit schema/API approval. They grant no prose authority.
+
+D30. Fenton found C2-10b's file list names `bus.js`, while actual thread messages render in
+`public/chat.js:68`. Sage must amend that row's ownership/acceptance to include `chat.js` or a
+shared renderer before W3 starts. Otherwise cited JSON would reach the pane as plain text. C2-09a's
+brief also cites older broker positions. Re-measure against `broker.mjs:5716` when building. No
+edits to those briefs or queue are made here. M7 and M8 remain intact, and neither row 5 nor row 29
+is a dependency.
+
+D31. Fenton's Q196 update adds a host contract that works with each option: `mount`, `destroy`,
+`dirty`, `focus`, `selection` and `resized`. For the recommended DOM surface these adapt the
+editor's real state, not a second document model. F6/Shift+F6 cycle focus among editor, divider and
+chat. Scope editing shortcuts to the focused pane, so chat paste and undo never mutate the document.
+Before releasing any editor state, check `dirty`; a missing/failed response counts as dirty.
+Preserve the state or offer the explicit Save/Copy/Discard controls in D7. A hash navigation alone
+is not a browser `beforeunload` event and must run this check itself.
+
+For O2, Fenton recommends an iframe so WordCraft's page-wide canvas and document/window listeners do
+not capture chat input. A new browser bridge must check `event.origin`, `event.source`, message
+schema, per-instance generation and request ID. It needs document load/export, dirty, selection,
+focus-out, resize and a safe transaction operation for the thesaurus, not just a notification hook.
+A failed dirty response after one second blocks unmounting. During divider drag capture the pointer,
+prevent iframe interception, resize at most once per animation frame and send the final `resized`
+notification. Test F6 escape, chat paste isolation, narrow ribbon behavior and stale messages after
+document changes. A same-origin iframe is UI isolation, not a security boundary. Native file I/O and
+network features still need the adapter restrictions in O2.
+
+An iframe-route-only `wasm-unsafe-eval` exception would be narrower than changing the Console shell
+policy, but it still changes the editor's CSP and requires Q167 D3's ruling. The recommended
+headless-export O3 needs neither an iframe nor a browser WASM exception. No alternative-origin
+hosting or broad `unsafe-eval` is authorized as a workaround. Fenton's conditional P5 brief at the
+pinned source describes the iframe bridge. If O2 is chosen, revise W2/W6 into source-import/build
+and browser-bridge rows before queue entry, with their exact owned source paths and the measured CSP
+delta.
+
+O2's DOCX selection cannot use Markdown line citations. A versioned document locator and C2
+guard/renderer support would need a separate reviewed format-policy brief. A DOCX path is not made
+legal by leaving `lines` out. Until that change is approved, rich-document agent context is
+disabled. This deliberately replaces Fenton's J7 proposal to send DOCX context without
+lines. Do not use paragraph indexes as if they were existing git lines.
+
+## Build order and review gates
+
+Order: W1 → W2 → W3 → W6 → W4 → W5. W3a can prepare after its Case 2 dependencies and must finish
+before W3. W2 is a useful writing increment. W6 completes the recommended release's styled
+production handoff. W4/W5 remain separately gated.
+
+These are proposed briefs, not queue entries. Jason confirms the checklist, Mos routes the decision,
+then Sage accepts and schedules each brief and creates its Gitea build issue. Every code row gets an
+independent Opus 5.5 reviewer who did not author that row. Q177 allows building on a reviewed parent
+candidate, with landings in order. It does not allow overlapping file owners or bypassed reviews.
+Sage grants suite slots and the final gate. Rows owning `serve.mjs` also serialize behind row 198's
+current ownership. That is a file handoff, not a dependency on the retired board.
+
+Common gate G1: run each changed/touched test file independently, the affected package suites and
+every `scripts/test-*.sh` on Sage's slot. Search tests for changed path/hash pins. For editor
+changes use `MOSAIC_REQUIRE_EDITOR_BUILD=1` with pinned esbuild 0.28.2 and reproducible output
+hashes. Browser checks use scratch roots and invented vaults only. No row activates a stack, changes
+roles or pushes to protected branches by implication.
+
+## W1 local thesaurus data and converter
+
+### Problem
+
+WordCraft's small built-in list cannot provide general writing coverage (D10). No Console thesaurus
+dataset exists in the measured editor inputs.
+
+### Owner and reviewer
+
+- Owner: a T3 Codex gpt-6-luna seat, assigned by Sage (lower-level data import and converter).
+- Reviewer: Fenton, Opus 5.5, independent of this implementation.
+- After: Jason's first-slice approval. WordNet is the design's routine data-source choice.
+  May start independently of C2 shared-file work.
+
+### Files owned
+
+`packages/webui/third_party/thesaurus/{LICENSE,NOTICE,PROVENANCE.json,wordnet/}`,
+`packages/webui/editor-data/{import-wordnet.mjs,build-thesaurus.mjs,BUILD.json}`,
+`packages/webui/src/public/thesaurus-data/`, `packages/webui/tests/thesaurus-data.test.mjs`,
+`packages/webui/README.md` (thesaurus section).
+
+### What ships
+
+Pinned WordNet originals and deterministic derived local data (D10-D11). Tests reproduce counts and
+hashes, license preservation, invalid-input refusal and stable sorted output. No change inside
+`editor/` or existing editor tests. Record actual output size.
+
+### Out of scope
+
+Menu, worker wiring, agent requests, editor source and Case 2 library writes.
+
+### Gate
+
+Fenton verifies source/license and two independent builds. Data tests pass and output stays within
+D11's size budget, then G1. Sage accepts the manifest.
+
+## W2 writing surface and local synonyms, first usable slice
+
+### Problem
+
+F3's redraw loses undo history and no selected-word menu exists. Books also need Case 2's library
+read/write path (F4, D5).
+
+### Owner and reviewer
+
+- Owner: Gyro, Codex gpt-6.1-sol (editor lifecycle and selection handling).
+- Reviewer: Fenton, Opus 5.5, independent of the code.
+- After: W1, C2-11a row 214, C2-10b, and C2-11b's future accepted brief and the unimplemented human `library.file.save` verb,
+  with C2-02/C2-03b for usable book saves. No acceptance claim until all are reviewed.
+
+### Files owned
+
+`packages/webui/editor/{view.mjs,entry.mjs,editor.css,thesaurus.mjs}`,
+`packages/webui/editor/BUILD.json`,
+`packages/webui/src/public/{editor.js,editor.css,bus.js,bus.css,thesaurus-worker.js}`,
+`packages/webui/tests/{editor.test.mjs,editor-browser.test.mjs,docs-browser.test.mjs,writing-browser.test.mjs,thesaurus-browser.test.mjs,editor-provenance.test.mjs}`,
+`packages/webui/README.md` (writing section). `model.mjs` remains C2-11a's result.
+
+### What ships
+
+D4-D12, D31 and O1's familiar controls: stable per-document state, explicit save, writing controls,
+navigation through the existing library tree, preserved front matter and local accessible synonyms.
+Wire only reviewed self-hosted assets. Tests cover selection/focus, Unicode, stale lookup,
+replacement undo, read-only, exact saved-selection source mapping, unsupported blocks, no external
+requests and unchanged CSP. A fixture session edits two nested chapters with front matter/wikilinks,
+saves, navigates back and checks bytes, selection and undo. Test `stale-base`, unknown result,
+unpushed feedback, credential expiry preserving local text and explicit sign-out clearing it after
+the unsaved warning. Measure D11's load/heap/lookup budgets and a 100,000-word fixture without lost
+input during chat-style refresh events. Passing responsiveness means no typing task above 100 ms
+after load in 95 of 100 measured edits, with the browser/host recorded.
+
+### Out of scope
+
+Split pane, pins, agent permissions, library writer/sync implementation and Word layout.
+
+### Gate
+
+Fenton repeats the fixture writing flow and reviews accessibility and byte preservation. `node
+--test packages/webui/tests/` with the required build passes, then G1. Sage accepts.
+
+## W3a durable pins and saved-message context
+
+### Problem
+
+Pins and structured message context do not exist (F5-F6). Browser-only pins would differ across
+machines. D28-D29 require new durable records and verified source references.
+
+### Owner and reviewer
+
+- Owner: Gyro, Codex gpt-6.1-sol (schema, broker and channel changes).
+- Reviewer: Fenton, Opus 5.5, independent of the implementation.
+- After: C2-09a, C2-10b ownership correction, C2-05b, and Jason's schema/API decision.
+
+### Files owned
+
+`packages/bus/{schema.sql,src/store.mjs,src/broker.mjs,src/editor-pins.mjs}`,
+`packages/bus/tests/{schema.test.mjs,editor-pins.test.mjs}`,
+`packages/plugins/channel/webui/index.mjs`, `packages/plugins/tests/` (pin/context tests),
+`packages/webui/src/{chat.mjs,chat-http.mjs,serve.mjs,cli.mjs}`,
+`packages/webui/tests/{chat.test.mjs,editor-context.test.mjs}`, `packages/webui/README.md`,
+`packages/bus/README.md`. The next migration identifier is allocated by Sage's schema window before
+build.
+
+### What ships
+
+D28-D29, an idempotent versioned migration in the repository's existing migration mechanism,
+owned-pin revision checks, background unread metadata and atomic saved-message context. Tests refuse
+another user's/thread's/business's context, wrong scope, unreachable commit, missing file and
+out-of-bounds lines. Failed context insertion leaves no message. Pin tests cover tester separation,
+stale paths, grant revocation/expiry and concurrent repin refusal. `thread.pin` refuses an
+owned thread whose grant no longer covers it. `thread.pins` redacts thread content and
+unread metadata after revocation while permitting stale-pin removal. No document text
+is stored in the new context table.
+Migration/restore-count and bus tool allowlist tests remain green.
+
+### Out of scope
+
+UI, raw session access, unsaved context, new role authority and replacement prose.
+
+### Gate
+
+Fenton reviews schema/ownership and failure cases. Bus, plugins and WebUI suites pass plus G1. Sage
+accepts within the allocated schema window. No live migration is part of this row.
+
+## W3 split pane and pinned conversations
+
+### Problem
+
+F5's page-level routing prevents a persistent conversation beside navigation. No pin exists. D24-D30
+supply the behavior to implement.
+
+### Owner and reviewer
+
+- Owner: a T3 Haiku 5.5 high seat, assigned by Sage (mid-level pane and state wiring),
+  separate from C2-10b's reviewer.
+- Reviewer: Fenton, Opus 5.5, independent of the implementation.
+- After: W2, W3a, C2-10b, C2-09a and row 220 C2-10a. Shared files wait behind those owners.
+
+### Files owned
+
+`packages/webui/src/public/{index.html,bus.js,bus.css,chat.js,chat.css,writing-pane.js}`,
+`packages/webui/src/{serve.mjs,chat.mjs,chat-http.mjs}`,
+`packages/webui/tests/{chat.test.mjs,chat-browser.test.mjs,writing-pane.test.mjs,writing-browser.test.mjs}`,
+`packages/webui/README.md` (pane section). Persistent pin storage is W3a, not a hidden schema change
+here.
+
+### What ships
+
+D24-D31: a resizable accessible split pane that reuses the existing grant-accessible chat thread and C2-10b
+cited-item rendering, retains editor selection/history during polling and follows the pin rules in
+D27-D29. Tests cover pin/unpin, two files, two tabs, removed/inaccessible thread, revoked/expired grant, keyboard divider,
+narrow viewport, reconnect/sign-out and navigation during delayed replies. No implicit `thread.open`
+on read or navigation. Existing chat tests remain green. The saved context chip uses W2's exact
+source mapping, and dirty drafts omit selection lines.
+
+### Out of scope
+
+7331 board route, row 5, row 29, raw sessions, fresh agent permissions and auto-launched runs.
+
+### Gate
+
+Fenton verifies the pane/pin scenarios against the folded design. WebUI suite and G1 pass. Sage
+accepts the manifest after W3a's migration and API review.
+
+## W6 DOCX production export and DesignCraft fixture handoff
+
+### Problem
+
+DesignCraft's `.md` import is plain text (D21). A Word-like writing surface still needs a verified
+styled book-production handoff, without creating two editable masters.
+
+### Owner and reviewer
+
+- Owner: Gyro, Codex gpt-6.1-sol (isolated headless format adapter and semantic checks).
+- Reviewer: Fenton, Opus 5.5, independent of the implementation.
+- After: W3, Louie's evaluated engine revision, and Jason's O3/storage choice.
+  This serializes shared `serve.mjs` and `writing-pane.js` ownership.
+
+### Files owned
+
+`packages/writing-export/` (new, source, tests, pinned source manifest and build records),
+`packages/webui/src/{editor-export.mjs,serve.mjs,cli.mjs}`,
+`packages/webui/src/public/writing-pane.js`, `packages/webui/tests/writing-export.test.mjs`,
+`packages/webui/README.md`. No change to WordCraft/DesignCraft checkouts. Any copied source retains
+full applicable license notices. Export-commit authorization must be covered by a separate accepted
+writing-project path/policy brief before a repository write is enabled.
+
+### What ships
+
+D20-D23's bounded Markdown-to-DOCX export from a pinned source commit, style map, warning report and
+manifest, plus a reproducible source build of the needed WordCraft headless component. Review the
+pinned Cargo.lock and dependency licenses, preserve required notices and bundle any required fonts
+locally. Hard starting caps: 1 MiB Markdown input, 16 MiB DOCX output, 30-second conversion deadline
+and one conversion per user at a time. Record actual fixture results and revise these limits only in
+the accepted brief when measurements justify it. Refuse filesystem/network escape, external
+linked-resource fetches, scripts/macros, malformed archives, decompression bombs and unsupported
+semantic loss. Run the conversion without network or credential access. Fixture tests place the
+result through DesignCraft's headless MCP path and compare body, styles, Unicode, paragraphs and
+warnings. Conversion is an explicit action, not every Save. The initial UI can download the export
+until the reviewed git-output path is authorized.
+
+### Out of scope
+
+Legacy .doc/.qxd import, new rich-document editing, live DesignCraft control and layout work on
+Melanie's actual content. No guessed “full fidelity” claim.
+
+### Gate
+
+Fenton independently runs the export/place fixture using the pinned two source revisions and
+inspects the loss report. New export tests and affected WebUI suite pass plus G1. Sage accepts only
+if the target chapter's tested supported features place without loss.
+
+## W4 scoped context API and typed reads
+
+### Problem
+
+The broker knows saved library material, not a tab's open document or selection. Exposing unsaved
+drafts without explicit consent would cross D15-D16's new boundary.
+
+### Owner and reviewer
+
+- Owner: Gyro, Codex gpt-6.1-sol (broker identity and capability integration).
+- Reviewer: Fenton, Opus 5.5, independent of the implementation.
+- After: W6, C2-05b, C2-06, row 220, and Jason's explicit context-access decision.
+
+### Files owned
+
+`packages/webui/src/{serve.mjs,cli.mjs,editor-http.mjs}`,
+`packages/webui/src/public/writing-pane.js`, `packages/bus/src/{broker.mjs,editor-context.mjs}`,
+`packages/harness/src/tools.mjs`, `packages/{webui,bus,harness}/tests/` (editor-context test files
+only), `packages/webui/README.md`, `packages/harness/README.md`. Any capability/role schema change
+needs a separately accepted policy brief, not this allowlist.
+
+### What ships
+
+D14-D16's publish/revoke/read operations with strict schemas, expiry, bounded paging and explicit
+sharing UI. Pi and Claude use the same broker checks. Tests refuse cross-user, thread, business,
+universe, tab, guessed context, stale revision, revoked shares, expired heartbeat and absolute
+expiry, whole-document read on selection-only access and attempts to use raw session endpoints.
+Confirm raw-session `conversation-not-listed` and human-only `library.file` still refuse.
+
+### Out of scope
+
+Replacement proposals, save authority, new roles and bypass of M3-M5.
+
+### Gate
+
+Fenton approves boundary tests and confirms no tools are exposed without the approved capability.
+WebUI, bus and harness suites pass with G1. Sage accepts.
+
+## W5 guarded proposals and optional sentence options
+
+### Problem
+
+Q195's requested editing API needs a human-controlled proposal flow, but Q176 currently prohibits
+unrestricted prose. An unsaved draft is not a valid existing git citation (D19).
+
+### Owner and reviewer
+
+- Owner: Gyro, Codex gpt-6.1-sol (revision checks and undoable proposal application).
+- Reviewer: Fenton, Opus 5.5, independent of the implementation.
+- After: W4 and an explicit Jason ruling on proposal kinds and unsaved-draft citations.
+  With no ruling this row does not enter the queue.
+
+### Files owned
+
+`packages/bus/src/{broker.mjs,editor-context.mjs}`, `packages/harness/src/tools.mjs`,
+`packages/webui/src/editor-http.mjs`, `packages/webui/src/public/writing-pane.js`,
+`packages/webui/editor/{view.mjs,thesaurus.mjs}`, `packages/webui/editor/BUILD.json`,
+`packages/webui/src/public/{editor.js,editor.css}`, `packages/{webui,bus,harness}/tests/`
+(editor-suggestion test files only), `packages/webui/README.md`. Any
+`packages/library/src/guard.mjs` or role-policy change is excluded until its own reviewed policy
+brief names the approved change and tests.
+
+### What ships
+
+D13 and D17-D19, restricted to the confirmed policy. Tests cover old/new text rendering,
+accept/reject, undo, stale and expired context, changed base, no autosave, retry deduplication,
+invalid UTF-16 boundary, hostile markup and guard failures on both RESULT and tool paths. Negative
+tests prove an agent cannot accept, apply or save, and no proposal widens C2 scope.
+
+### Out of scope
+
+Direct agent edits, prose permission by inference, arbitrary execute and automatic sending.
+
+### Gate
+
+Fenton verifies that the recorded ruling matches the allowed proposal shapes and source citations.
+WebUI, bus, harness and library guard regression suites pass with required editor rebuild and G1.
+Sage accepts. No deploy or activation authority follows.
+
+## Design verification receipt
+
+Checked 2026-10-21T16:22:36Z (from `date -u`). Both companion branches were fetched and their
+report commits pinned above. Seven briefs have every BRIEF-TEMPLATE field, unique anchors
+and an independent implementation reviewer. The initial checklist had 12 lines before fenton-0004. Only this design
+and append-only BUILD-LOG/SESSIONS records change. No product or queue files change.
+
+Fresh editor/provenance checks: 10 passed, zero failed, one rebuild skip because pinned
+esbuild 0.28.2 is absent. This is not a claim that O3's exporter, new UI, live Console or
+DesignCraft handoff has shipped or passed acceptance. Those tests belong to the build rows.
+The push queue guard ran as `MOSAIC_GIT_IDENTITY=gyro` for `gyro/editor-design`, purpose
+`push`, timeout/interval zero. It could not resolve the per-seat credential and recorded
+`CANNOT_ASSERT credential-unresolvable` with its documented push `degraded-pass` (exit 0),
+audit at `/mnt/storage/scratch/gyro-q195-ci-queue-audit.jsonl`. No identity fallback or guard
+bypass was used. CI status was not asserted. Fenton reviews the combined draft through Mos.
+
+## Review-fix verification receipt
+
+Checked 2026-10-22T16:06:34Z (from `date -u`) against `aca16404c`. Addressed fenton-0004 F1-F8:
+grant-aware pins and revoked-access redaction, refreshed source references, model-only
+seat allocation, the unbriefed save dependency, deliberate tabs below 76rem, the explicit
+J7 replacement, seat-name wording and six owner-choice questions. Additional reference
+refresh: `public/bus.js` moved by 24 lines, and the Visual editor README heading is at 572.
+The code behavior cited there is unchanged. The O3 recommendation and companion report
+measurements are unchanged. Fenton re-checks this revision before approval.
+
+Validation is static: current-source anchors, seven complete brief templates, six checklist
+lines, documentation-only diff and append-only logs. No build, product suite, gate-slot
+reservation or live action is part of this review fix. The earlier 10-pass/one-skip result
+above is the original draft's test receipt, not a new test run on `aca16404c`.
+
+## Jason's checklist
+
+- Q1. Choose O3 with Markdown source, generated DOCX, and footnotes/comments/tracked changes/page layout deferred? Recommend yes.
+- Q2. Ship writing controls, safe chapter saves and local WordNet synonyms first, after the Case 2 dependencies? Recommend yes.
+- Q3. Store pins and saved-source message context on the bus through the reviewed schema/API change? Recommend yes.
+- Q4. Share saved context only when Melanie enables the visible chip for that send? Recommend yes.
+- Q5. Keep Q176, with no agent prose and no unsaved-draft reads? Recommend yes. Any later relaxation requires Accept/Reject and a separate Save.
+- Q6 (O2 only, if Q1 is declined). Require a Q167 D3 CSP exception and rich-document citation design before O2? Recommend yes.

docs/plans/2026-10-21_t27-ssh-add-lifetime.md

@@ -1,55 +0,0 @@
-# Brief: T27 lists no identities right after ssh-add -t 1
-
-Sage, 2026-10-21, for Mos's ruling mos-1185 item 2. Vikunja #453. Gate owner Sage. Owner and reviewer are
-named when the row is briefed. Base: refactor at the brief commit. The row comes after row 197, unless
-proof 6 fails on a test outside 197's paths in a pair wave (mos-1185 item 4). Then this row and row 250 go
-ahead of 197, and 197's candidates rebase on them. The pattern is row 250's
-(`docs/plans/2026-10-21_k12-cohort-events.md`).
-
-## Why
-
-`packages/bus/tests/host-run.test.mjs:453`, "T27: ssh-add -t drops the key from an agent the test keeps
-alive", starts its own `ssh-agent -D -a SOCK`, calls `addKey(sock, key, 1)` from
-`packages/bus/src/host-run.mjs:87`, and asserts that `ssh-add -l` lists the key (line 469). Then it sleeps
-2.5 s and asserts the key is gone.
-
-Row 197 proof 5, wave pair2-b, 2026-10-21T17:07Z: the first assertion got "The agent has no identities."
-31.9 ms into the test. The bus suite went 289/1. The log is
-`/mnt/storage/scratch/sage-r197p5/proof-run/pair2-b/out/pkg-bus.log`. The same test passed in solo-b and
-pair1-b of that run.
-
-The cause is not known yet. One lead, unverified (Mos, mos-1185): ssh-agent may count lifetimes in whole
-seconds of CLOCK_MONOTONIC, so a key added just before a monotonic second boundary expires within
-milliseconds. A test aligned to wall-clock seconds did not test that idea.
-
-Sage checked the lead on dragon-lin, OpenSSH 10.5p1, 2026-10-21T17:19Z (`/mnt/storage/scratch/sage-r64/t27-mono.mjs`,
-outside any gate). It made 80 adds of `ssh-add -t 1`, each at a chosen fraction of a CLOCK_MONOTONIC second
-(`process.hrtime`), and listed at once. 8 of 80 missed. Every miss was an add made at 0.9947-0.9973 of a
-monotonic second that finished at 0.998-0.0008. No add earlier in the second missed. So a 1-second lifetime
-can end within milliseconds of the add. Step 2 still confirms this against the T27 failure itself.
-
-## Steps, in order
-
-1. Make the failure name its cause. When the first assertion fails, print the time from addKey's start
-   to its resolve and to the `ssh-add -l` call, the monotonic clock (`process.hrtime.bigint()` or
-   `/proc/uptime`) at each, and the agent's state (alive, socket present). Commit this first, on its own.
-2. Find the cause and fix it at the source: the test's lifetime choice, `addKey`, or how the agent is
-   started. Record the evidence in `agents/OWNER/work/queue-ROW/BUILD.md`.
-3. Do not loosen the check. The test still proves the key is listed after the add and gone after its
-   lifetime. A longer lifetime is a fix only if step 2 shows whole-second rounding is the cause, and then
-   the sleep grows with it.
-
-## Files owned
-
-`packages/bus/tests/host-run.test.mjs`, and `packages/bus/src/host-run.mjs` only if step 2 points there.
-Nothing in row 197's 37 paths.
-
-## Tests
-
-- T27 still asserts the key is listed, then gone.
-- The bus suite passes whole three times in a row, and once while a second bus suite runs at the same time.
-
-## Gate
-
-The reviewer approves on the row, naming the candidate manifest. The bus suite passes whole on a gate
-rerun in a clean worktree, on Sage's slot.

docs/plans/DEFERRED.md

@@ -334,17 +334,6 @@ at every gate. Started 2026-09-12 during the control board MVP.
   lanes scan only at lane end, about 15 minutes after pkg-bus, so they
   can't see it (mos-1169). (2026-10-21)
 
-- **Row 66 live checks: the unslop notice on a live managed session, both harnesses.**
-  (mos-1186, Vikunja #454.) Row 66's gate asked for one landing session per
-  harness with a prompt that draws a known tell. Mos changed that gate. The
-  Claude Code session ran before landing on a scratch root from the
-  candidate tree (run r4ab24630d323, landed 2c38325ec). Pi ran launch only there (run r1dd94171bede):
-  this host has no credential pi reads until P19 #383 settles. Two live
-  checks remain. Claude Code: in the first re-pin whose tree includes row 66,
-  backup first (Q173). Pi: one full session with a tell after #383. Each
-  attaches the operator note on the RESULT, the next-turn correction and the
-  `unslop.jsonl` counts. (2026-10-21)
-
 ## Queue
 
 Moved to `docs/plans/QUEUE.md` on 2026-09-13. This file holds only gaps.

packages/bus/tests/host-run.test.mjs

@@ -458,36 +458,17 @@ test('T27: ssh-add -t drops the key from an agent the test keeps alive', async (
   const agent = spawn('ssh-agent', ['-D', '-a', sock], { stdio: 'ignore' });
   t.after(() => agent.kill('SIGKILL'));
   assert.ok(await until(() => existsSync(sock)));
-  // A failed list names its cause: when each step ran on the monotonic clock (hrtime) and on
-  // /proc/uptime (CLOCK_BOOTTIME, which ssh-agent's lifetime counts in whole seconds), and
-  // whether the agent and its socket were still there.
-  const marks = [];
-  const mark = (name) => marks.push({ name, ns: process.hrtime.bigint(), uptime: readFileSync('/proc/uptime', 'utf8').split(' ')[0] });
-  const timing = () => {
-    const at = (m) => `${m.name} +${(Number(m.ns - marks[0].ns) / 1e6).toFixed(1)} ms (hrtime ${(Number(m.ns % 1_000_000_000n) / 1e9).toFixed(4)} s into its second, uptime ${m.uptime})`;
-    const alive = agent.exitCode === null && agent.signalCode === null;
-    return `${marks.map(at).join('; ')}; agent ${alive ? 'alive' : `gone (${agent.exitCode ?? agent.signalCode})`}, socket ${existsSync(sock) ? 'present' : 'missing'}`;
-  };
-  // ssh-agent sets a key's death to the whole second of CLOCK_BOOTTIME at the add plus the
-  // lifetime, and drops it once that whole second is reached. So `-t N` keeps a key between N - 1
-  // and N seconds: `-t 1` added just before a second boundary was gone within milliseconds (#453).
-  // `-t 2` keeps it at least 1 s, and the sleep waits past the 2 s ceiling.
-  mark('addKey start');
-  await addKey(sock, readFileSync(join(dir, 'k'), 'utf8'), 2);
-  mark('addKey resolved');
-  const list = (name) => {
-    mark(name);
+  await addKey(sock, readFileSync(join(dir, 'k'), 'utf8'), 1);
+  const list = () => {
     try {
       return execFileSync('ssh-add', ['-l'], { env: { PATH: '/usr/bin:/bin', SSH_AUTH_SOCK: sock }, encoding: 'utf8' });
     } catch (e) {
       return e.stdout;
     }
   };
-  const first = list('first list');
-  assert.match(first, /SHA256:/, `first list got ${JSON.stringify(first)}: ${timing()}`);
-  await sleep(3500);
-  const second = list('second list');
-  assert.match(second, /no identities/, `second list got ${JSON.stringify(second)}: ${timing()}`);
+  assert.match(list(), /SHA256:/);
+  await sleep(2500);
+  assert.match(list(), /no identities/);
 });
 
 // The test's own limit makes a hung addKey (M37a, M37b) fail in seconds, not at the batch timeout.

packages/cli/tests/fixtures/gate-lane-child.mjs

@@ -1,20 +0,0 @@
-// Controlled child for lane crash tests; no live service, network or model.
-import { writeFileSync } from 'node:fs';
-const [mode,marker]=process.argv.slice(2);
-if(marker&&mode!=='lock-probe')writeFileSync(marker,String(process.pid));
-if(mode!=='lock-probe')process.stdout.write('READY\n');
-if(mode==='ignore-term')process.on('SIGTERM',()=>{});
-else process.on('SIGTERM',()=>process.exit(0));
-setInterval(()=>{},1000);
-if(mode==='lock-probe'){
- const stateRoot=marker;
- const {verifyLocks,executeSteps}=await import('../../../../scripts/testing/gate-lane.mjs');
- verifyLocks({lane:'a',stateRoot,exclusive:false});
- const {appendRecord,identity}=await import('../../../../scripts/testing/lane-state.mjs');
- const {mkdirSync}=await import('node:fs');const {join}=await import('node:path');
- const out=join(stateRoot,'out');mkdirSync(out);
- appendRecord(join(stateRoot,'runs','abcdef123456'),{kind:'start',lane:'a',owner:identity()});
- const result=await executeSteps([{name:'fds',cwd:stateRoot,argv:[process.execPath,'-e',"const fs=require('fs'); for(const fd of fs.readdirSync('/proc/self/fd')){let p;try{p=fs.readlinkSync('/proc/self/fd/'+fd)}catch{continue}if(p.endsWith('/a.lock')||p.endsWith('/image.lock'))process.exit(7)}"]}],{out,env:process.env,record:()=>{}});
- if(result.rc)process.exit(result.rc);
- writeFileSync(join(stateRoot,'ready'),'verified');
-}

packages/cli/tests/gate-lane-fixtures.test.mjs

@@ -1,94 +0,0 @@
-import test from 'node:test';import assert from 'node:assert/strict';
-import { mkdtempSync,rmSync,mkdirSync,writeFileSync } from 'node:fs';import { join } from 'node:path';import { createServer } from 'node:net';import { once } from 'node:events';
-const api=await import('../../../scripts/testing/lane-fixtures.mjs').catch(e=>{if(e.code!=='ERR_MODULE_NOT_FOUND')throw e;return {};});
-const evidence=await import('../../../scripts/testing/lane-evidence.mjs').catch(e=>{if(e.code!=='ERR_MODULE_NOT_FOUND')throw e;return {};});
-test('parallel lease holders use only the active lane and its shared state',async t=>{
- const ctx=leaseContext(t),lane=ctx.lane;
- const [a,b]=await Promise.all([api.leasePort(ctx.fixture,ctx),api.leasePort(ctx.fixture,ctx)]);
- const bands=BANDS,[lo,hi]=bands[lane];
- assert.ok(a>=lo&&a<=hi);assert.ok(b>=lo&&b<=hi);assert.notEqual(a,b);
- assert.ok(bands.a[1]<bands.b[0]);assert.equal(bands.a[1]-bands.a[0],127);assert.equal(bands.b[1]-bands.b[0],127);
-});
-test('unrelated home changes do not become lane writes, and own-root references do',()=>{
- assert.equal(typeof evidence.attributeEntries,'function','attribution is required');
- const result=evidence.attributeEntries([{path:'/home/person/.claude/projects/other-session',link:null},{path:'/home/person/.cache/lane-abcdef123456',link:null},{path:'/home/person/.pi/item',link:'/mnt/storage/scratch/gt-ABCDEF/work'}],{nonce:'abcdef123456',tempRoot:'/mnt/storage/scratch/gt-ABCDEF',fixturePaths:[]});
- assert.equal(result.owned.length,2);assert.equal(result.unrelated.length,1);
-});
-test('proof summaries refuse missing timings, non-overlap and a pair without a lane swap',()=>{
- const solos=[{candidate:'one',wallMs:100},{candidate:'two',wallMs:100}];
- const make=(lane,candidate,startMs=0,endMs=120)=>({lane,candidate,startMs,endMs,rc:0,clean:true});
- const pairs=[[make('a','one'),make('b','two',5,125)],[make('b','one'),make('a','two',5,125)],[make('a','one'),make('b','two',5,125)]];
- const result=evidence.summarizePairs(solos,pairs);assert.equal(result.length,3);assert.equal(result[0].makespanMs,125);assert.equal(result[0].runs[0].slowdown,1.2);assert.equal(result[0].throughput,1.6);
- const bad=structuredClone(pairs);delete bad[0][0].endMs;assert.throws(()=>evidence.summarizePairs(solos,bad),/timing/);
- const noSwap=structuredClone(pairs);noSwap[1]=structuredClone(pairs[0]);assert.throws(()=>evidence.summarizePairs(solos,noSwap),/swap/);
- const serial=structuredClone(pairs);serial[0][1].startMs=130;serial[0][1].endMs=250;assert.throws(()=>evidence.summarizePairs(solos,serial),/overlap/);
-});
-import { BANDS } from '../../../scripts/testing/lane-state.mjs';
-import { spawn,spawnSync } from 'node:child_process';
-import { readFileSync,existsSync } from 'node:fs';
-function leaseContext(t){
- const lane=process.env.MOSAIC_GATE_LANE??'a',stateRoot=process.env.MOSAIC_GATE_STATE??'/mnt/storage/scratch/mosaic-gate-lanes',callbacks=[];
- mkdirSync(stateRoot,{recursive:true,mode:0o700});
- t.after(async()=>{for(const f of callbacks.reverse())await f();});
- return {lane,stateRoot,fixture:{after:f=>callbacks.push(f)},cleanup:f=>callbacks.push(f)};
-}
-const delay=ms=>new Promise(r=>setTimeout(r,ms));
-async function waitFor(check){for(let i=0;i<100;i++){if(check())return;await delay(20);}throw Error('fixture not ready');}
-test('an exhausted single-port band refuses, and an occupied foreign listener survives the probe',async t=>{
- const ctx=leaseContext(t),callbacks=[];
- const port=await api.leasePort({after:f=>callbacks.push(f)},ctx),original=BANDS[ctx.lane];
- const server=createServer();
- try{
-  BANDS[ctx.lane]=[port,port];
-  await assert.rejects(api.leasePort(t,ctx),/exhausted/);
-  await new Promise((resolve,reject)=>{server.once('error',reject);server.listen(port,'127.0.0.1',resolve);});
-  // Release only our lock. The sentinel listener remains foreign to the next lease.
-  await callbacks.pop()();
-  await assert.rejects(api.leasePort(t,ctx),/exhausted/);assert.equal(server.listening,true);
- }finally{BANDS[ctx.lane]=original;if(server.listening)await new Promise(r=>server.close(r));for(const f of callbacks)await f();}
-});
-test('parallel child allocators share real lane locks; a lease remains held through child shutdown',async t=>{
- const ctx=leaseContext(t),root=mkdtempSync('/mnt/storage/scratch/gf-');
- const modulePath=new URL('../../../scripts/testing/lane-fixtures.mjs',import.meta.url).href;
- const code=`import test from 'node:test';import fs from 'node:fs';const {leasePort}=await import(${JSON.stringify(modulePath)});test('lease held until fixture child finishes',async t=>{const port=await leasePort(t,JSON.parse(process.env.LEASE_CONTEXT));fs.writeFileSync(process.env.LEASE_PORT_FILE,String(port));await new Promise(r=>{const timer=setInterval(()=>{if(fs.existsSync(process.env.LEASE_STOP_FILE)){clearInterval(timer);r()}},5)});});`;
- const start=number=>{const file=join(root,`lease-${number}.test.mjs`),portFile=join(root,`port-${number}`),stopFile=join(root,`stop-${number}`);writeFileSync(file,code);const env={...process.env,LEASE_CONTEXT:JSON.stringify(ctx),LEASE_PORT_FILE:portFile,LEASE_STOP_FILE:stopFile};delete env.NODE_TEST_CONTEXT;const child=spawn(process.execPath,['--test','--test-concurrency=2','--test-reporter=tap',file],{env,stdio:['ignore','pipe','pipe']});child.output='';child.stderr.on('data',b=>child.output+=b);child.stdout.on('data',b=>child.output+=b);child.done=new Promise(r=>child.once('exit',code=>{child.exitedCode=code;r(code);}));child.portFile=portFile;child.stopFile=stopFile;return child;};
- const children=[start(1),start(2)];ctx.cleanup(async()=>{try{for(const c of children)writeFileSync(c.stopFile,'stop');await Promise.all(children.map(c=>c.done));}finally{rmSync(root,{recursive:true,force:true});}});
- await waitFor(()=>{for(const c of children)if(c.exitedCode!==undefined)throw Error(`allocator exited ${c.exitedCode}: ${c.output}`);return children.every(c=>existsSync(c.portFile));});
- const ports=children.map(c=>Number(readFileSync(c.portFile,'utf8')));assert.notEqual(...ports);
- const lock=join(ctx.stateRoot,'ports',ctx.lane,`${ports[0]}.lock`);
- assert.equal(spawnSync('flock',['-n',lock,'true']).status,1);
- writeFileSync(children[0].stopFile,'stop');assert.equal(await children[0].done,0,children[0].output);
- assert.equal(spawnSync('flock',['-n',lock,'true']).status,0);
- assert.equal(spawnSync('flock',['-n',join(ctx.stateRoot,'ports',ctx.lane,`${ports[1]}.lock`),'true']).status,1);
-});
-test('abrupt allocator death releases its holder without touching a foreign lease',async t=>{
- const ctx=leaseContext(t),foreign=await api.leasePort(ctx.fixture,ctx),modulePath=new URL('../../../scripts/testing/lane-fixtures.mjs',import.meta.url).href;
- const code=`const {leasePort}=await import(${JSON.stringify(modulePath)});const port=await leasePort({after:()=>{}},JSON.parse(process.argv[1]));console.log(port);setInterval(()=>{},1000);`;
- const child=spawn(process.execPath,['--input-type=module','-e',code,JSON.stringify(ctx)],{stdio:['ignore','pipe','pipe']});const done=new Promise(r=>child.once('exit',r));ctx.cleanup(async()=>{child.kill('SIGKILL');await done;});
- const port=await new Promise(r=>child.stdout.once('data',b=>r(Number(String(b).trim()))));assert.notEqual(port,foreign);
- child.kill('SIGKILL');await done;
- const lock=join(ctx.stateRoot,'ports',ctx.lane,`${port}.lock`);
- await waitFor(()=>spawnSync('flock',['-n',lock,'true']).status===0);
- assert.equal(spawnSync('flock',['-n',join(ctx.stateRoot,'ports',ctx.lane,`${foreign}.lock`),'true']).status,1);
-});
-test('fixture caches survive a replacement environment with a separate tmp subdirectory',async t=>{
- const root=mkdtempSync('/mnt/storage/scratch/gf-');t.after(()=>rmSync(root,{recursive:true,force:true}));
- const env=api.fixtureCacheEnv(root);assert.equal(env.TMPDIR,join(root,'tmp'));assert.equal(env.JITI_FS_CACHE,join(root,'jiti'));assert.equal(env.XDG_CACHE_HOME,join(root,'cache'));
- const code="const fs=require('fs'),p=require('path');for(const k of ['TMPDIR','JITI_FS_CACHE','XDG_CACHE_HOME'])fs.writeFileSync(p.join(process.env[k],k),'fixture');if(process.env.HOME)process.exit(7)";
- const result=spawnSync(process.execPath,['-e',code],{env,encoding:'utf8'});assert.equal(result.status,0,result.stderr);
- for(const key of Object.keys(env))assert.equal(readFileSync(join(env[key],key),'utf8'),'fixture');
-});
-test('an unrelated session can append while a supervised step runs without becoming an attributed write',async t=>{
- const root=mkdtempSync('/mnt/storage/scratch/gf-');t.after(()=>rmSync(root,{recursive:true,force:true}));
- const home=join(root,'home'),out=join(root,'out'),file=join(home,'.claude','other-session');mkdirSync(join(home,'.claude'),{recursive:true});mkdirSync(out);writeFileSync(file,'before');
- const before=evidence.homeMetadata(home),prior=new Map(before.map(e=>[e.path,JSON.stringify(e)]));
- const {executeSteps}=await import('../../../scripts/testing/gate-lane.mjs');
- const barrier=join(root,'step-running');
- const append=spawn(process.execPath,['-e',"const fs=require('fs');const deadline=setTimeout(()=>{console.error('append barrier timed out');process.exit(8)},5000);const timer=setInterval(()=>{if(fs.existsSync(process.argv[2])){clearInterval(timer);clearTimeout(deadline);fs.appendFileSync(process.argv[1],'unrelated append')}},5)",file,barrier],{stdio:'ignore'});const appended=new Promise(r=>append.once('exit',r));t.after(()=>append.kill('SIGKILL'));
- let appendedDuringStep=false;
- const stepCode="const fs=require('fs');fs.writeFileSync(process.argv[1],'running');const deadline=setTimeout(()=>{console.error('session append timed out');process.exit(8)},5000);const timer=setInterval(()=>{if(fs.readFileSync(process.argv[2],'utf8').includes('unrelated append')){clearInterval(timer);clearTimeout(deadline)}},5)";
- const result=await executeSteps([{name:'wait',cwd:root,argv:[process.execPath,'-e',stepCode,barrier,file]}],{out,env:process.env,record:r=>{if(r.kind==='step')appendedDuringStep=readFileSync(file,'utf8').includes('unrelated append');}});
- assert.equal(await appended,0);assert.equal(result.rc,0);assert.equal(appendedDuringStep,true);
- const changed=evidence.homeMetadata(home).filter(e=>prior.get(e.path)!==JSON.stringify(e));assert.ok(changed.some(e=>e.path===file));
- const attributed=evidence.attributeEntries(changed,{nonce:'abcdef123456',tempRoot:join(root,'temp'),fixturePaths:[]});assert.equal(attributed.owned.length,0);assert.ok(attributed.unrelated.length>0);
-});

packages/cli/tests/gate-lane-image.test.mjs

@@ -1,136 +0,0 @@
-import test from 'node:test';import assert from 'node:assert/strict';
-import { mkdtempSync,rmSync,writeFileSync,mkdirSync,cpSync,readFileSync,statSync,symlinkSync,unlinkSync } from 'node:fs';import { join, isAbsolute } from 'node:path';
-import { spawnSync } from 'node:child_process';
-const image=await import('../../../scripts/testing/lane-image.mjs').catch(e=>{if(e.code!=='ERR_MODULE_NOT_FOUND')throw e;return {};});
-const docker=await import('../../../scripts/testing/lane-docker.mjs').catch(e=>{if(e.code!=='ERR_MODULE_NOT_FOUND')throw e;return {};});
-test('a changed COPY input or actual image ID refuses compatible image sharing',t=>{
- assert.equal(typeof image.imageFingerprint,'function','image fingerprint required');
- const root=mkdtempSync('/mnt/storage/scratch/gi-');t.after(()=>rmSync(root,{recursive:true,force:true}));
- for(const f of ['Containerfile','package.json','package-lock.json'])cpSync(new URL('../../../'+f,import.meta.url),join(root,f));
- writeFileSync(join(root,'RELEASE'),'0.0.1\n');
- for(const d of ['contracts','src','adapters']){mkdirSync(join(root,d));writeFileSync(join(root,d,'one'),'same');}
- const digest=image.imageFingerprint(root),id='sha256:'+'a'.repeat(64);const receipt={inputDigest:digest,imageId:id,tag:'mosaic-poc-agent:0.85.1-r0.0.1',baseDigest:'node@sha256:'+'b'.repeat(64),platform:'linux/amd64'};
- const inspect=()=>({Id:id,Os:'linux',Architecture:'amd64'});
- assert.equal(image.verifyImage(receipt,root,inspect).imageId,id);
- assert.throws(()=>image.verifyImage(receipt,root,()=>({...inspect(),Id:'sha256:'+'c'.repeat(64)})),/image ID/);
- writeFileSync(join(root,'adapters','one'),'different');assert.throws(()=>image.verifyImage(receipt,root,inspect),/inputs/);
-});
-test('warm Docker guard disables implicit build and pull and refuses image mutation',t=>{
- assert.equal(typeof docker.guardDocker,'function','Docker guard required');
- const run=composeFixture(t);
- assert.deepEqual(docker.guardDocker(['compose','run','--rm','-T','mosaic-agent','prompt'],run),['compose','-f',join(run.checkout,'compose.yaml'),'-f',join(run.tempRoot,'compose-no-build.yaml'),'run','--pull','never','--no-deps','--rm','-T','mosaic-agent','prompt']);
- for(const args of [['build','.'],['image','prune'],['compose','build'],['tag','a','b'],['network','rm','foreign']])assert.throws(()=>docker.guardDocker(args,run),/refused/);
-});
-test('exclusive image preparation records actual image ID and build wall time and requires a grant',t=>{
- assert.equal(typeof image.prepareImage,'function','prepareImage is required');
- const root=mkdtempSync('/mnt/storage/scratch/gi-');t.after(()=>rmSync(root,{recursive:true,force:true}));
- for(const f of ['Containerfile','package.json','package-lock.json'])cpSync(new URL('../../../'+f,import.meta.url),join(root,f));
- writeFileSync(join(root,'RELEASE'),'0.0.1\n');for(const d of ['contracts','src','adapters'])mkdirSync(join(root,d));
- const calls=[];const invoke=(args)=>{calls.push(args);if(args[0]==='compose')return '';return JSON.stringify(args[2]==='node:24-bookworm-slim'?{RepoDigests:['node@sha256:'+'b'.repeat(64)]}:{Id:'sha256:'+'a'.repeat(64),Os:'linux',Architecture:'amd64'});};
- assert.throws(()=>image.prepareImage(root,{grant:'',tempRoot:root},invoke),/grant/);
- const result=image.prepareImage(root,{grant:'fixture',tempRoot:root},invoke);assert.equal(result.imageId,'sha256:'+'a'.repeat(64));assert.equal(result.builds,1);assert.ok(result.buildWallMs>=0);assert.ok(calls.some(x=>x.join(' ')==='compose build'));
-});
-test('cleanup refuses a foreign Docker label and removes only an exact owned project',()=>{
- const project='mg197-a-abcdef123456',id='123456789abc';let removed=false,label='foreign';
- const fake=(args)=>{if(args[0]==='ps')return removed?'':id;if(args[0]==='network')return '';if(args[0]==='container'&&args[1]==='inspect')return label;if(args[0]==='container'&&args[1]==='rm'){removed=true;return '';}throw Error('unexpected command');};
- // The injectable executor exercises ownership checks without touching Docker.
- assert.throws(()=>docker.cleanupProject({project},fake),/foreign/);assert.equal(removed,false);
- label=project;assert.deepEqual(docker.cleanupProject({project},fake).removed,[{kind:'container',id}]);assert.equal(removed,true);
-});
-function imageFixture(t){
- const root=mkdtempSync('/mnt/storage/scratch/gi-');t.after(()=>rmSync(root,{recursive:true,force:true}));
- for(const f of ['Containerfile','package.json','package-lock.json'])cpSync(new URL('../../../'+f,import.meta.url),join(root,f));
- writeFileSync(join(root,'RELEASE'),'0.0.1\n');for(const d of ['contracts','src','adapters'])mkdirSync(join(root,d));
- const receipt={inputDigest:image.imageFingerprint(root),imageId:'sha256:'+'a'.repeat(64),tag:'mosaic-poc-agent:0.85.1-r0.0.1',baseDigest:'node@sha256:'+'b'.repeat(64),platform:'linux/amd64'};
- return {root,receipt};
-}
-test('missing receipt and missing image refuse without permitting a gate',t=>{
- const {root,receipt}=imageFixture(t);assert.throws(()=>image.verifyImage(null,root),/provenance receipt/);
- assert.throws(()=>image.verifyImage(receipt,root,()=>{throw Error('No such image');}),/No such image/);
- assert.throws(()=>image.verifyImage({...receipt,tag:'mosaic-poc-agent:wrong'},root,()=>({Id:receipt.imageId,Os:'linux',Architecture:'amd64'})),/release identity/);
-});
-test('a tag changed between supervised steps fails the next boundary and suppresses gate success',async t=>{
- const {root,receipt}=imageFixture(t),out=join(root,'out');mkdirSync(out);
- let actual=receipt.imageId;const inspect=()=>({Id:actual,Os:'linux',Architecture:'amd64'}),events=[];
- const {executePinnedSteps}=await import('../../../scripts/testing/gate-lane.mjs');
- await assert.rejects(executePinnedSteps([
-  {name:'first',cwd:root,argv:[process.execPath,'-e','process.exit(0)']},
-  {name:'second',cwd:root,argv:[process.execPath,'-e','process.exit(0)']}
- ],{out,env:process.env,record:r=>events.push(r)}, {receipt,checkout:root,inspect,afterStep:()=>actual='sha256:'+'c'.repeat(64)}),/image ID/);
- assert.equal(events.filter(e=>e.kind==='step').length,1);
- assert.equal(events.some(e=>e.kind==='terminal'&&e.rc===0),false);
-});
-test('mutable-base rebuilds with identical files have distinct image IDs; cold and warm counters stay separate',t=>{
- const {root}=imageFixture(t);let builds=0,id='sha256:'+'a'.repeat(64);
- const fake=args=>{if(args[0]==='compose'){builds++;return 'fixture build';}return JSON.stringify(args[2]==='node:24-bookworm-slim'?{RepoDigests:['node@sha256:'+'b'.repeat(64)]}:{Id:id,Os:'linux',Architecture:'amd64'});};
- const cold=image.prepareImage(root,{grant:'fixture-cold',tempRoot:root},fake);
- assert.equal(cold.builds,1);assert.ok(cold.buildWallMs>=0);assert.equal(builds,1);
- for(let i=0;i<3;i++)image.verifyImage(cold,root,()=>({Id:id,Os:'linux',Architecture:'amd64'}));
- assert.equal(builds,1,'warm verification builds zero images');
- id='sha256:'+'c'.repeat(64);const rebuilt=image.prepareImage(root,{grant:'fixture-rebuild',tempRoot:root},fake);
- assert.equal(rebuilt.inputDigest,cold.inputDigest);assert.equal(rebuilt.builds,1);assert.equal(builds,2);
- assert.throws(()=>image.verifyImage(cold,root,()=>({Id:rebuilt.imageId,Os:'linux',Architecture:'amd64'})),/image ID/);
-});
-test('warm pinned execution records zero builds and checks the tag again after its final step',async t=>{
- const {root,receipt}=imageFixture(t),out=join(root,'out');mkdirSync(out);let id=receipt.imageId;
- const {executePinnedSteps}=await import('../../../scripts/testing/gate-lane.mjs');
- const options={out,env:process.env,record:()=>{}},inspect=()=>({Id:id,Os:'linux',Architecture:'amd64'});
- const result=await executePinnedSteps([{name:'warm',cwd:root,argv:[process.execPath,'-e','process.exit(0)']}],options,{receipt,checkout:root,inspect});
- assert.equal(result.rc,0);assert.equal(result.imageBuilds,0);
- await assert.rejects(executePinnedSteps([{name:'last',cwd:root,argv:[process.execPath,'-e','process.exit(0)']}],options,{receipt,checkout:root,inspect,afterStep:()=>id='sha256:'+'c'.repeat(64)}),/image ID/);
-});
-
-
-// These two read-only compatibility probes must reach the installed binary,
-// including when the lane's guard is first on PATH. Child fixture env stays
-// isolated; passing the real absolute path avoids re-entering that guard.
-function installedDocker(){
- const file=process.env.MOSAIC_GATE_DOCKER_RECORD;
- if(!file)return 'docker';
- const binary=JSON.parse(readFileSync(file,'utf8')).docker;
- assert.ok(typeof binary==='string'&&isAbsolute(binary),'lane record must name the real absolute Docker binary');
- return binary;
-}
-function composeFixture(t) {
- const tempRoot=mkdtempSync('/mnt/storage/scratch/gi-');t.after(()=>rmSync(tempRoot,{recursive:true,force:true}));
- const checkout=join(tempRoot,'candidate');mkdirSync(checkout);cpSync(new URL('../../../compose.yaml',import.meta.url),join(checkout,'compose.yaml'));
- const config=join(tempRoot,'docker-config');mkdirSync(config,{mode:0o700});
- const auth=join(tempRoot,'fixture-auth.json');writeFileSync(auth,'{}',{mode:0o600});
- return {tempRoot,checkout,project:'mg197-a-abcdef123456',tag:'mosaic-poc-agent:fixture',imageId:'sha256:'+'a'.repeat(64),
-  env:{PATH:process.env.PATH,HOME:process.env.HOME,DOCKER_CONFIG:config,COMPOSE_PROJECT_NAME:'mg197-a-abcdef123456',
-   MOSAIC_IMAGE_TAG:'mosaic-poc-agent:fixture',MOSAIC_PROVIDER:'fixture',MOSAIC_MODEL:'fixture',MOSAIC_DATA_ROOT:tempRoot,PI_AUTH_FILE:auth}};
-}
-test('installed Compose accepts rewritten run argv without starting a container',t=>{
- const run=composeFixture(t);
- if(docker.writeComposeOverride)docker.writeComposeOverride(run);
- const argv=docker.guardDocker(['compose','run','--rm','-T','mosaic-agent','fixture'],run);
- const command=argv.indexOf('run');assert.ok(command>0);
- // --help is before SERVICE, so parsing exits before any service operation.
- const parsed=spawnSync(installedDocker(),[...argv.slice(0,command+1),'--help',...argv.slice(command+1)],{cwd:run.checkout,env:run.env,encoding:'utf8',timeout:10000});
- assert.equal(parsed.status,0,parsed.stdout+parsed.stderr);
- assert.match(parsed.stdout,/Usage:/);
-});
-test('installed Compose resolves the private override with no build and the pinned image',t=>{
- const run=composeFixture(t);assert.equal(typeof docker.writeComposeOverride,'function');
- const override=docker.writeComposeOverride(run);
- assert.equal(override,join(run.tempRoot,'compose-no-build.yaml'));
- assert.equal(statSync(override).mode&0o777,0o600);
- assert.equal(docker.writeComposeOverride(run),override,'parallel callers reuse identical private content');
- const argv=docker.guardDocker(['compose','run','--rm','mosaic-agent'],run),command=argv.indexOf('run');
- const resolved=spawnSync(installedDocker(),[...argv.slice(0,command),'config','--format','json'],{cwd:run.checkout,env:run.env,encoding:'utf8',timeout:10000});
- assert.equal(resolved.status,0,resolved.stdout+resolved.stderr);
- const service=JSON.parse(resolved.stdout).services['mosaic-agent'];
- assert.equal(Object.hasOwn(service,'build'),false);assert.equal(service.image,run.imageId);
- t.diagnostic(JSON.stringify({installedComposeConfig:{buildPresent:Object.hasOwn(service,'build'),image:service.image}}));
- assert.ok(argv.includes('--no-deps'));assert.equal(argv[argv.indexOf('--pull')+1],'never');
- writeFileSync(override,'changed fixture');assert.throws(()=>docker.writeComposeOverride(run),/override/);
- unlinkSync(override);const foreign=join(run.tempRoot,'foreign');writeFileSync(foreign,'fixture');symlinkSync(foreign,override);
- assert.throws(()=>docker.writeComposeOverride(run),/override/);assert.equal(readFileSync(foreign,'utf8'),'fixture');
-});
-test('guard owns every Compose file argument and refuses caller configuration overrides',t=>{
- const run=composeFixture(t);
- for(const args of [['-f','foreign.yaml'],['--file','foreign.yaml'],['--file=foreign.yaml'],['--project-directory','/tmp'],['--build'],['--pull','always'],['--no-build']])
-  assert.throws(()=>docker.guardDocker(['compose','run',...args,'mosaic-agent'],run),/options not allowed/);
- for(const args of [['compose','-f','foreign.yaml','run','mosaic-agent'],['compose','--project-directory','/tmp','run','mosaic-agent']])
-  assert.throws(()=>docker.guardDocker(args,run),/unowned command/);
-});

packages/cli/tests/gate-lane-state.test.mjs

@@ -1,124 +0,0 @@
-import * as fsExtra from 'node:fs';
-import * as childModule from 'node:child_process';
-import test from 'node:test';
-import assert from 'node:assert/strict';
-import { mkdtempSync, rmSync, writeFileSync, readFileSync } from 'node:fs';
-import { join } from 'node:path';
-const api=await import('../../../scripts/testing/lane-state.mjs');
-function fixture(t){const root=mkdtempSync('/mnt/storage/scratch/gs-');t.after(()=>rmSync(root,{recursive:true,force:true}));return root;}
-test('unfinished dead-owner runs quarantine their lane and a recovery record clears only that run',t=>{
- assert.equal(typeof api.appendRecord,'function','appendRecord is required');
- const root=fixture(t),dir=join(root,'runs','one');
- api.appendRecord(dir,{kind:'start',lane:'a',owner:{pid:123456789,start:'1',boot:'fixture'}});
- assert.equal(api.status(root,{processes:[]}).a.state,'QUARANTINED');
- api.appendRecord(dir,{kind:'recovered',clean:true});
- assert.equal(api.status(root,{processes:[]}).a.state,'CLEAR');
-});
-test('a legacy landing gate beside a lane stays legacy even with the same parent',t=>{
- assert.equal(typeof api.appendRecord,'function');
- const root=fixture(t);const owner={pid:123,start:'5',boot:'b',state:'S',ppid:1,argv:['node','gate-lane.mjs']};
- api.appendRecord(join(root,'runs','one'),{kind:'start',lane:'a',owner});
- const procs=[owner,{pid:124,start:'6',boot:'b',state:'S',ppid:1,argv:['node','/fixture/landing.mjs','gate','/fixture/wt','/fixture/logs']}];
- const result=api.status(root,{processes:procs});assert.equal(result.a.state,'BUSY');assert.equal(result.b.state,'CLEAR');assert.deepEqual(result.legacy,[{pid:124,start:'6'}]);
-});
-test('the shell status entry reads scratch receipts and reports legacy processes without mutating old slots',t=>{
- const root=fixture(t);const {spawnSync}=requireChild();
- const r=spawnSync('bash',[new URL('../../../scripts/testing/gate-lane.sh',import.meta.url).pathname,'status','--state-root',root],{encoding:'utf8'});
- assert.equal(r.status,0,r.stderr);const state=JSON.parse(r.stdout);assert.equal(state.a.state,'CLEAR');assert.equal(state.b.state,'CLEAR');assert.ok(Array.isArray(state.legacy));
-});
-function requireChild(){return childModule;}
-test('recovery supersedes an unclean terminal without rewriting either receipt',t=>{
- const root=fixture(t),dir=join(root,'runs','one');api.appendRecord(dir,{kind:'start',lane:'a',owner:{pid:99999999,start:'1',boot:'fixture'}});api.appendRecord(dir,{kind:'terminal',clean:false});api.appendRecord(dir,{kind:'recovered',clean:true});assert.equal(api.status(root,{processes:[]}).a.state,'CLEAR');assert.equal(api.records(dir).length,3);
-});
-test('the wrapper refuses a held lane lock and preserves its inode',async t=>{
- const root=fixture(t),file=join(root,'a.lock');const {spawn,spawnSync}=childModule;
- const holder=spawn('flock',['-x',file,'bash','-c','echo ready; read -r done'],{stdio:['pipe','pipe','pipe']});const exited=new Promise(r=>holder.once('exit',r));await new Promise(r=>holder.stdout.once('data',r));
- const {statSync}=await import('node:fs');const ino=statSync(file).ino;
- t.after(async()=>{holder.stdin.end('\n');await exited;});
- const r=spawnSync('bash',[new URL('../../../scripts/testing/gate-lane.sh',import.meta.url).pathname,'run','--state-root',root,'--lane','a','--grant','fixture'],{encoding:'utf8'});
- assert.equal(r.status,2);assert.match(r.stderr,/lock busy/);assert.equal(statSync(file).ino,ino);
-});
-test('a held kernel lock without a start receipt is BUSY rather than CLEAR',async t=>{
- const root=fixture(t),file=join(root,'a.lock');const holder=childModule.spawn('flock',['-x',file,'bash','-c','echo ready; read -r done'],{stdio:['pipe','pipe','pipe']});const exited=new Promise(r=>holder.once('exit',r));await new Promise(r=>holder.stdout.once('data',r));t.after(async()=>{holder.stdin.end('\n');await exited;});
- assert.equal(api.status(root,{processes:[]}).a.state,'BUSY');
-});
-test('SIGKILL leaves a quarantined run and locked recovery publishes a new clean receipt',async t=>{
- const root=fixture(t),temp=mkdtempSync('/mnt/storage/scratch/gt-');t.after(()=>rmSync(temp,{recursive:true,force:true}));
- const child=childModule.spawn(process.execPath,[new URL('./fixtures/gate-lane-child.mjs',import.meta.url).pathname,'wait',join(temp,'started')],{stdio:['ignore','pipe','pipe']});
- const exited=new Promise(r=>child.once('exit',r));await new Promise(r=>child.stdout.once('data',r));
- const id='abcdef123456',dir=join(root,'runs',id),docker=join(root,'docker-fixture');writeFileSync(docker,'#!/bin/sh\nexit 0\n',{mode:0o700});
- api.appendRecord(dir,{kind:'start',lane:'a',owner:api.identity(child.pid),tempRoot:temp,project:`mg197-a-${id}`,docker});
- child.kill('SIGKILL');await exited;assert.equal(api.status(root,{processes:[]}).a.state,'QUARANTINED');
- const r=childModule.spawnSync('bash',[new URL('../../../scripts/testing/gate-lane.sh',import.meta.url).pathname,'recover','--state-root',root,'--run-id',id,'--grant','fixture-recover'],{encoding:'utf8'});
- assert.equal(r.status,0,r.stderr);assert.equal(api.status(root,{processes:[]}).a.state,'CLEAR');assert.equal(api.records(dir).filter(e=>e.kind==='start').length,1);assert.equal(api.records(dir).filter(e=>e.kind==='recovered').length,1);
-});
-test('a malformed receipt refuses status and an identity mismatch cannot look live',t=>{
- const root=fixture(t),dir=join(root,'runs','one');api.appendRecord(dir,{kind:'start',lane:'a',owner:{pid:123,start:'old',boot:'b'}});
- assert.equal(api.status(root,{processes:[{pid:123,start:'new',boot:'b',state:'S',ppid:1,argv:['node','owned'] }]}).a.state,'QUARANTINED');
- writeFileSync(join(dir,'bad.json'),'{');assert.throws(()=>api.status(root,{processes:[]}),/invalid run receipt/);
-});
-test('a symlink lock is refused before acquiring or replacing its target',t=>{
- const root=fixture(t),target=join(root,'foreign');writeFileSync(target,'untouched');const {symlinkSync}=fsExtra;symlinkSync(target,join(root,'a.lock'));
- const r=childModule.spawnSync('bash',[new URL('../../../scripts/testing/gate-lane.sh',import.meta.url).pathname,'run','--state-root',root,'--lane','a','--grant','fixture'],{encoding:'utf8'});
- assert.equal(r.status,2);assert.match(r.stderr,/ordinary file/);assert.equal(readFileSync(target,'utf8'),'untouched');
-});
-test('failed recovery keeps quarantine and never publishes a clean recovery receipt',async t=>{
- const root=fixture(t),temp=mkdtempSync('/mnt/storage/scratch/gt-');t.after(()=>rmSync(temp,{recursive:true,force:true}));
- const id='abcdef123456',dir=join(root,'runs',id),docker=join(root,'docker-fixture');writeFileSync(docker,'#!/bin/sh\nexit 1\n',{mode:0o700});
- api.appendRecord(dir,{kind:'start',lane:'a',owner:{pid:99999999,start:'1',boot:'fixture'},tempRoot:temp,project:`mg197-a-${id}`,docker});
- const r=childModule.spawnSync('bash',[new URL('../../../scripts/testing/gate-lane.sh',import.meta.url).pathname,'recover','--state-root',root,'--run-id',id,'--grant','fixture-recover'],{encoding:'utf8'});
- assert.equal(r.status,2);assert.equal(api.status(root,{processes:[]}).a.state,'QUARANTINED');assert.equal(api.records(dir).some(e=>e.kind==='recovered'),false);
-});
-test('two shared image holders coexist, but exclusive preparation refuses their lock',async t=>{
- const root=fixture(t),file=join(root,'image.lock');const holder=childModule.spawn('flock',['-s',file,'bash','-c','echo ready; read -r done'],{stdio:['pipe','pipe','pipe']});const exited=new Promise(r=>holder.once('exit',r));await new Promise(r=>holder.stdout.once('data',r));t.after(async()=>{holder.stdin.end('\n');await exited;});
- const entry=new URL('../../../scripts/testing/gate-lane.sh',import.meta.url).pathname;
- const shared=childModule.spawnSync('bash',[entry,'run','--state-root',root,'--lane','a','--grant','fixture'],{encoding:'utf8'});
- assert.equal(shared.status,2);assert.doesNotMatch(shared.stderr,/lock busy|descriptor|not locked/);
- const exclusive=childModule.spawnSync('bash',[entry,'prepare-image','--state-root',root,'--grant','fixture'],{encoding:'utf8'});
- assert.equal(exclusive.status,2);assert.match(exclusive.stderr,/lock busy/);
-});
-const entry=new URL('../../../scripts/testing/gate-lane.sh',import.meta.url).pathname;
-const childFixture=new URL('./fixtures/gate-lane-child.mjs',import.meta.url).pathname;
-const sleep=ms=>new Promise(r=>setTimeout(r,ms));
-async function until(check){for(let n=0;n<100;n++){if(check())return;await sleep(20);}throw Error('fixture barrier did not become ready');}
-test('two simultaneous shell claims have one winner; supervisor retains lock FDs and ordinary children do not',async t=>{
- const root=fixture(t),bin=join(root,'bin');fsExtra.mkdirSync(bin);const shim=join(bin,'node');
- writeFileSync(shim,`#!/bin/sh\nif [ "$2" = --locked ]; then exec '${process.execPath}' '${childFixture}' lock-probe '${root}'; fi\nexec '${process.execPath}' "$@"\n`,{mode:0o700});
- const env={...process.env,PATH:bin+':'+process.env.PATH};
- const start=()=>{const p=childModule.spawn('bash',[entry,'run','--state-root',root,'--lane','a','--grant','fixture'],{env,stdio:['ignore','pipe','pipe']});p.done=new Promise(r=>p.once('exit',code=>r(code)));return p;};
- const first=start(),second=start();t.after(()=>{first.kill('SIGKILL');second.kill('SIGKILL');});
- await until(()=>fsExtra.existsSync(join(root,'ready')));
- const all=api.runRecords(root);assert.equal(all.length,1);assert.equal(readFileSync(join(root,'out/fds.log'),'utf8'),'');
- const winner=all[0].records.find(r=>r.kind==='start').owner.pid;assert.ok([first.pid,second.pid].includes(winner));
- const loser=first.pid===winner?second:first;assert.equal(await loser.done,2);
- const ino=fsExtra.statSync(join(root,'a.lock')).ino;
- assert.equal(childModule.spawnSync('flock',['-n',join(root,'a.lock'),'true']).status,1);
- const won=first.pid===winner?first:second;won.kill('SIGTERM');await won.done;
- assert.equal(fsExtra.statSync(join(root,'a.lock')).ino,ino);
-});
-test('same checkout and a legacy land gate each refuse a claim on an otherwise free lane',async t=>{
- const {activeConflicts}=await import('../../../scripts/testing/gate-lane.mjs');
- const root=fixture(t),owner={pid:321,start:'1',boot:'test',state:'S',ppid:1,argv:['node','owned']};
- api.appendRecord(join(root,'runs','one'),{kind:'start',lane:'a',checkout:'/fixture/candidate',owner});
- const o={stateRoot:root,lane:'b',checkout:'/fixture/candidate'};
- assert.throws(()=>activeConflicts(o,{processes:[owner]}),/checkout already owned/);
- assert.throws(()=>activeConflicts({...o,checkout:'/fixture/other'},{processes:[owner,{pid:322,start:'2',boot:'test',state:'S',ppid:1,argv:['node','/fixture/landing.mjs','gate']}]}),/LEGACY BUSY/);
-});
-test('recovery kills a proven surviving child, preserves a foreign child and keeps quarantine if interrupted',async t=>{
- const root=fixture(t),temp=mkdtempSync('/mnt/storage/scratch/gt-');t.after(()=>rmSync(temp,{recursive:true,force:true}));
- const owned=childModule.spawn(process.execPath,[childFixture,'wait',join(temp,'child')],{cwd:temp,stdio:'ignore'});
- const foreign=childModule.spawn(process.execPath,[childFixture,'wait',join(root,'foreign')],{stdio:'ignore'});
- const ownedDone=new Promise(r=>owned.once('exit',r)),foreignDone=new Promise(r=>foreign.once('exit',r));t.after(async()=>{owned.kill('SIGKILL');foreign.kill('SIGKILL');await Promise.all([ownedDone,foreignDone]);});
- await until(()=>fsExtra.existsSync(join(temp,'child'))&&fsExtra.existsSync(join(root,'foreign')));
- const docker=join(root,'docker'),pidFile=join(root,'docker-pid'),id='abcdef123456',dir=join(root,'runs',id);
- writeFileSync(docker,`#!/bin/sh\necho $$ > '${pidFile}'\nexec sleep 60\n`,{mode:0o700});
- api.appendRecord(dir,{kind:'start',id,stateRoot:root,lane:'a',owner:{pid:99999999,start:'1',boot:'test'},tempRoot:temp,project:`mg197-a-${id}`,docker});
- const recovery=childModule.spawn('bash',[entry,'recover','--state-root',root,'--run-id',id,'--grant','fixture'],{stdio:'ignore'});const done=new Promise(r=>recovery.once('exit',r));
- await until(()=>fsExtra.existsSync(pidFile));const dockerOwner=api.identity(Number(readFileSync(pidFile,'utf8')));recovery.kill('SIGKILL');await done;
- if(api.sameProcess(dockerOwner))process.kill(dockerOwner.pid,'SIGKILL');
- await ownedDone;assert.equal(api.sameProcess(api.identity(foreign.pid)),true);
- assert.equal(api.records(dir).some(r=>r.kind==='recovered'),false);assert.equal(api.status(root,{processes:[]}).a.state,'QUARANTINED');
- writeFileSync(docker,'#!/bin/sh\nexit 0\n',{mode:0o700});
- const retried=childModule.spawnSync('bash',[entry,'recover','--state-root',root,'--run-id',id,'--grant','fixture-resume'],{encoding:'utf8'});
- assert.equal(retried.status,0,retried.stderr);assert.equal(api.status(root,{processes:[]}).a.state,'CLEAR');assert.equal(api.sameProcess(api.identity(foreign.pid)),true);
-});

packages/cli/tests/gate-lane.test.mjs

@@ -1,125 +0,0 @@
-import test from 'node:test';
-import assert from 'node:assert/strict';
-import { mkdtempSync, mkdirSync, writeFileSync, symlinkSync, rmSync } from 'node:fs';
-import { execFileSync, spawnSync } from 'node:child_process';
-import { join } from 'node:path';
-
-const api = await import('../../../scripts/testing/gate-lane.mjs').catch(e => {
-  if (e.code !== 'ERR_MODULE_NOT_FOUND') throw e;
-  return {};
-});
-function fixture(t) {
-  const root = mkdtempSync('/mnt/storage/scratch/gt-');
-  // Node appends six characters, keeping this root at 30 bytes.
-  t.after(() => rmSync(root, { recursive: true, force: true }));
-  const checkout = join(root, 'checkout'); mkdirSync(checkout);
-  for (const [f,text] of [['package.json','{}'],['RELEASE','0.0.1\n']]) writeFileSync(join(checkout,f),text);
-  execFileSync('git',['init','-q',checkout]);
-  execFileSync('git',['-C',checkout,'add','.']);
-  execFileSync('git',['-C',checkout,'-c','user.name=Fixture','-c','user.email=f@invalid','commit','-qm','fixture']);
-  symlinkSync('/mnt/storage/src/mosaic-stack/node_modules',join(checkout,'node_modules'));
-  return {lane:'a',candidate:execFileSync('git',['-C',checkout,'rev-parse','HEAD'],{encoding:'utf8'}).trim(),checkout,out:join(root,'out'),tempRoot:root,stateRoot:join(root,'state'),grant:'fixture-grant',hostFacts:{unprivilegedPortStart:1024,ephemeral:[32768,60999],listeners:[]}};
-}
-test('preflight refuses unsafe lane roots, missing grants and live port 9 before side effects', t => {
-  assert.equal(typeof api.validateRun,'function','validateRun is required');
-  const f=fixture(t);
-  assert.equal(api.validateRun(f).lane,'a');
-  for(const [patch,reason] of [[{lane:'c'},/lane/],[{grant:''},/grant/],[{tempRoot:'/tmp'},/tmp/],[{tempRoot:join(f.tempRoot,'deeper')},/30|missing/],[{candidate:'a'.repeat(40)},/candidate/],[{hostFacts:{...f.hostFacts,listeners:[{address:'0.0.0.0',port:9}]}},/port.9/],[{hostFacts:{...f.hostFacts,unprivilegedPortStart:0}},/privileged/]]) assert.throws(()=>api.validateRun({...f,...patch}),reason);
-  const link=join(f.tempRoot,'link');symlinkSync('/tmp',link);assert.throws(()=>api.validateRun({...f,tempRoot:link}),/tmp/);
-  writeFileSync(join(f.checkout,'RELEASE'),'changed');assert.throws(()=>api.validateRun(f),/dirty/);
-});
-test('discovery preserves all package and script steps while ignoring non-file shell names', t => {
-  const f=fixture(t);mkdirSync(join(f.checkout,'packages'));
-  for(const p of ['z','queue','a']){mkdirSync(join(f.checkout,'packages',p,'tests'),{recursive:true});writeFileSync(join(f.checkout,'packages',p,'tests','one.test.mjs'),'');}
-  mkdirSync(join(f.checkout,'scripts'));writeFileSync(join(f.checkout,'scripts','test-z.sh'),'');writeFileSync(join(f.checkout,'scripts','test-a.sh'),'');mkdirSync(join(f.checkout,'scripts','test-directory.sh'));
-  const steps=api.discoverSteps(f.checkout);
-  assert.deepEqual(steps.map(s=>s.name),['pkg-a','pkg-z','script-a','script-z']);
-  assert.deepEqual(steps[0].argv,['node','--test','--test-concurrency=2','tests/one.test.mjs']);
-});
-test('a failed step stops the gate and records its nonzero exit without running the next step',async t=>{
- assert.equal(typeof api.executeSteps,'function','executeSteps is required');
- const f=fixture(t),events=[],out=f.out;mkdirSync(out);const marker=join(f.tempRoot,'should-not-exist');
- const result=await api.executeSteps([{name:'first',cwd:f.checkout,argv:['bash','-c','exit 7']},{name:'second',cwd:f.checkout,argv:['touch',marker]}],{out,env:process.env,record:r=>events.push(r)});
- assert.equal(result.rc,7);assert.equal(events.filter(e=>e.kind==='step').length,1);assert.ok(events.find(e=>e.kind==='step').wallMs>=0);
- const {existsSync}=await import('node:fs');assert.equal(existsSync(marker),false);
-});
-test('a cancelled step stops its process group and records failure',async t=>{
- const f=fixture(t);mkdirSync(f.out);const controller=new AbortController(),events=[];
- const child=new URL('./fixtures/gate-lane-child.mjs',import.meta.url).pathname;
- const result=await api.executeSteps([{name:'child',cwd:f.checkout,argv:[process.execPath,child,'wait',join(f.tempRoot,'started')]}],{out:f.out,env:process.env,record:e=>{events.push(e);if(e.kind==='child')setTimeout(()=>controller.abort(),100);},signal:controller.signal});
- assert.notEqual(result.rc,0);const owned=events.find(e=>e.kind==='child').owner;const {sameProcess}=await import('../../../scripts/testing/lane-state.mjs');assert.equal(sameProcess(owned),false);
-});
-test('step receipts retain pass fail skipped counts and hashes of their actual logs',async t=>{
- const f=fixture(t);mkdirSync(f.out);const events=[];
- await api.executeSteps([{name:'counts',cwd:f.checkout,argv:[process.execPath,'-e',"console.log('ℹ pass 2\\nℹ fail 0\\nℹ skipped 1')"]}],{out:f.out,env:process.env,record:r=>events.push(r)});
- const step=events.find(e=>e.kind==='step');assert.deepEqual(step.counts,{pass:2,fail:0,skipped:1});assert.match(step.logSha256,/^[a-f0-9]{64}$/);
-});
-test('preflight rejects a real 31-byte root, missing dependency tree, occupied band and missing inventory',t=>{
- const f=fixture(t),long=f.tempRoot+'x';mkdirSync(long,{mode:0o700});t.after(()=>rmSync(long,{recursive:true,force:true}));assert.equal(Buffer.byteLength(long),31);
- assert.throws(()=>api.validateRun({...f,tempRoot:long}),/30 bytes/);
- assert.throws(()=>api.validateRun({...f,hostFacts:{...f.hostFacts,ephemeral:[60000,62000]}}),/overlaps/);
- assert.throws(()=>api.validateRun({...f,hostFacts:{...f.hostFacts,listeners:[{address:'127.0.0.1',port:61005}]}}),/live listener/);
- assert.throws(()=>api.validateRun({...f,hostFacts:{}}),/inventory/);
- rmSync(join(f.checkout,'node_modules'));assert.throws(()=>api.validateRun(f),/node_modules/);
-});
-
-test('preflight refuses canonical and builder checkouts and an existing output',t=>{
- const f=fixture(t);
- for(const checkout of ['/mnt/storage/src/mosaic-stack',new URL('../../../',import.meta.url).pathname])assert.throws(()=>api.validateRun({...f,checkout}),/canonical or builder/);
- mkdirSync(f.out);assert.throws(()=>api.validateRun(f),/output already exists/);
-});
-test('both candidates must carry every approved launcher file',t=>{
- const f=fixture(t),other=join(f.tempRoot,'second');mkdirSync(other);
- for(const checkout of [f.checkout,other]){
-  const target=join(checkout,'scripts','testing');fsExtra.cpSync(new URL('../../../scripts/testing',import.meta.url),target,{recursive:true});
-  api.validateTooling(checkout);
- }
- fsExtra.appendFileSync(join(other,'scripts/testing/lane-state.mjs'),'\n// changed\n');
- assert.throws(()=>api.validateTooling(other),/tooling differs/);
- fsExtra.rmSync(join(f.checkout,'scripts/testing/lane-fixtures.mjs'));
- assert.throws(()=>api.validateTooling(f.checkout),/tooling differs/);
-});
-test('the 92-byte socket example passes and an over-107-byte pathname refuses',()=>{
- const root='/mnt/storage/scratch/gt-ABCDEF';assert.equal(Buffer.byteLength(root),30);
- const socket=root+'/mosaic-cli-ABCDEF/data/launches/acme/r0123456789ab/tools.sock';
- assert.equal(Buffer.byteLength(socket),92);assert.equal(stateApi.socketPath(socket),socket);
- assert.throws(()=>stateApi.socketPath(socket+'x'.repeat(16)),/107 bytes/);
-});
-test('package/script duplicates stay and every supervised step clears NODE_TEST_CONTEXT',async t=>{
- const f=fixture(t);mkdirSync(join(f.checkout,'packages/cli/tests'),{recursive:true});mkdirSync(join(f.checkout,'scripts'));
- writeFileSync(join(f.checkout,'packages/cli/tests/repeated.test.mjs'),'');writeFileSync(join(f.checkout,'scripts/test-cli.sh'),'node --test packages/cli/tests/repeated.test.mjs\n');
- const steps=api.discoverSteps(f.checkout);assert.deepEqual(steps.map(s=>s.name),['pkg-cli','script-cli']);
- const original=process.env.NODE_TEST_CONTEXT;process.env.NODE_TEST_CONTEXT='parent-context';
- let env;try{env=api.cleanEnv(f,{project:'fixture'},'/fake/docker');}finally{if(original===undefined)delete process.env.NODE_TEST_CONTEXT;else process.env.NODE_TEST_CONTEXT=original;}
- assert.equal(env.NODE_TEST_CONTEXT,undefined);assert.equal(env.HOME,process.env.HOME);
- mkdirSync(f.out);const events=[];
- for(const s of steps)s.argv=[process.execPath,'-e',"if(process.env.NODE_TEST_CONTEXT)process.exit(9);console.log('cleared')"];
- const result=await api.executeSteps(steps,{out:f.out,env,record:e=>events.push(e)});
- assert.equal(result.rc,0);assert.equal(events.filter(e=>e.kind==='step').length,2);
-});
-test('scoped ss loopback and wildcard port 9 listeners refuse',t=>{
- const f=fixture(t);
- for(const address of ['127.0.0.1%lo','0.0.0.0%lo','::%lo','::ffff:127.0.0.1%lo'])assert.throws(()=>api.validateRun({...f,hostFacts:{...f.hostFacts,listeners:[{address,port:9}]}}),/port 9/);
-});
-import * as fsExtra from 'node:fs';
-import * as stateApi from '../../../scripts/testing/lane-state.mjs';
-
-
-test('step children use legacy umask 022 while the supervisor retains 077', async t => {
- const f=fixture(t);mkdirSync(f.out,{mode:0o700});const events=[],made=join(f.tempRoot,'step-file');
- const original=process.umask(0o077);
- try {
-  const result=await api.executeSteps([{name:'umask',cwd:f.checkout,argv:[process.execPath,'-e',`const fs=require('node:fs');console.log(process.umask().toString(8));fs.writeFileSync(${JSON.stringify(made)},'fixture',{mode:0o666});`]}],{out:f.out,env:process.env,record:r=>events.push(r)});
-  assert.equal(result.rc,0);assert.equal(process.umask(),0o077);
-  assert.equal(fsExtra.readFileSync(join(f.out,'umask.log'),'utf8').trim(),'22');
-  assert.equal(fsExtra.statSync(made).mode&0o777,0o644);
-  assert.equal(fsExtra.statSync(join(f.out,'umask.log')).mode&0o777,0o600);
- } finally {process.umask(original);}
-});
-test('lane wrapper keeps its state directory and lock files private', t => {
- const f=fixture(t),script=new URL('../../../scripts/testing/gate-lane.sh',import.meta.url).pathname;
- const result=spawnSync('bash',[script,'recover','--state-root',f.stateRoot,'--run-id','000000000000','--grant','fixture-private-modes'],{encoding:'utf8'});
- assert.equal(result.status,2,result.stdout+result.stderr);assert.match(result.stderr,/run not found/);
- assert.equal(fsExtra.statSync(f.stateRoot).mode&0o777,0o700);
- for(const name of ['a.lock','b.lock','image.lock'])assert.equal(fsExtra.statSync(join(f.stateRoot,name)).mode&0o777,0o600);
-});

packages/cli/tests/stack-copy.test.mjs

@@ -15,7 +15,7 @@ export function setup(t, realPin=false){
  const root=mkdtempSync(join(tmpdir(),'stack-copy-')),repo=join(root,'repo'),copies=join(root,'copies'),bin=join(root,'bin');
  t.after(()=>{execFileSync('chmod',['-R','u+w',root]);rmSync(root,{recursive:true,force:true})});
  mkdirSync(repo);mkdirSync(bin);
- const tracked=execFileSync('git',['-C',ROOT,'ls-files','-co','--exclude-standard','--','scripts','packages','adapters','roles','tools/unslop-hook','RELEASE','package.json','package-lock.json',':!packages/*/tests',':!scripts/foundation'],{encoding:'utf8'}).trim().split('\n');
+ const tracked=execFileSync('git',['-C',ROOT,'ls-files','-co','--exclude-standard','--','scripts','packages','adapters','roles','RELEASE','package.json','package-lock.json',':!packages/*/tests',':!scripts/foundation'],{encoding:'utf8'}).trim().split('\n');
  for(const f of tracked)if(existsSync(join(ROOT,f)))cpSync(join(ROOT,f),join(repo,f));
  // Lightweight npm-ci fixture; real pin/host/proof integration is tested separately.
  const pkg={name:'copy-fixture',version:'1.0.0'};
@@ -32,20 +32,6 @@ export function setup(t, realPin=false){
  const fake=body=>{writeFileSync(join(bin,'systemctl'),'#!/bin/bash\n'+body);chmodSync(join(bin,'systemctl'),0o755)};
  return {root,repo,copies,bin,id,env,run,fake,search,analyze};
 }
-// Row 66: a session launched from a pinned copy reads each harness module's files from the copy,
-// so every path a module names under its REPO (adapter, mounts, bundle sources) is in COPY_PATHS.
-test('a copy carries every file the harness modules read from it',async t=>{
- const s=setup(t);assert.equal(s.run('stack-copy.sh',['copy',s.id,'--copies',s.copies]).status,0);
- const copy=join(s.copies,s.id),paths=[];
- for(const kind of ['pi','claude-code']){
-  const m=await import(pathToFileURL(join(copy,'packages','plugins','harness',kind,'index.mjs')).href);
-  // pi's mounts() resolves node_modules, which this fixture copy lacks; its unslop mounts are its
-  // bundle sources, so the sources stand in for them.
-  paths.push(m.adapter(),...(kind==='pi'?Object.values(m.bundle().sources):m.mounts({env:{}}).map(x=>x.src)));
- }
- assert.equal(paths.filter(p=>p.includes('/tools/unslop-hook/')).length,6,paths.join('\n'));
- for(const p of paths){assert.ok(p.startsWith(copy+'/'),p);assert.ok(existsSync(p),p);}
-});
 test('shared copy: npm ci, pushed reachability, readonly/existing copy, webui delegation',t=>{
  const s=setup(t),r=s.run('stack-copy.sh',['copy',s.id,'--copies',s.copies]);assert.equal(r.status,0,r.stderr);
  const copy=join(s.copies,s.id);assert.equal(statSync(copy).mode&0o777,0o555);

packages/cli/tests/stack-release.test.mjs

@@ -1,5 +1,3 @@
-import { leasePort } from '../../../scripts/testing/lane-fixtures.mjs';
-import { after as laneAfter } from 'node:test';
 // scripts/stack-release.sh (D1, #1659). Design, the T table and the mutants:
 // agents/darkwing/work/queue-162/BUILD.md. Every run uses a temp data root, temp units and stand-in
 // systemctl, journalctl and systemd-analyze on PATH; nothing here reads ~/.mosaic-dev or a live unit.
@@ -1786,7 +1784,7 @@ for(const [id,v,froms] of [[B,'3g',['3f']],[C,'3h',['3f','3g']],[A,'3g',['3f']],
 }
 
 const TESTER='7499';
-const freePort=async()=>String(await leasePort({after:laneAfter},{closed:true}));
+const freePort=async()=>{const s=createServer();s.listen(0,'127.0.0.1');await once(s,'listening');const p=String(s.address().port);await new Promise((r)=>s.close(r));return p};
 const rh=(e,...p)=>join(e.env.HOME,...p);
 const rfault=(e,name)=>{mkdirSync(rh(e,'faults'),{recursive:true});writeFileSync(rh(e,'faults',name),'')};
 

packages/control-board/tests/serve.test.mjs

@@ -1,5 +1,3 @@
-import { leasePort } from '../../../scripts/testing/lane-fixtures.mjs';
-import { after as laneAfter } from 'node:test';
 import { test, after } from "node:test";
 import assert from "node:assert/strict";
 import {
@@ -75,7 +73,16 @@ function closeServer(server) {
 
 // Grab an ephemeral free port, then hand it back immediately so a caller can
 // try to bind it themselves (used to prove startServer never opened a socket).
-function getFreePort() { return leasePort({after:laneAfter}, {closed:true}); }
+function getFreePort() {
+  return new Promise((resolvePromise, reject) => {
+    const probe = createNetServer();
+    probe.once("error", reject);
+    probe.listen(0, "127.0.0.1", () => {
+      const port = probe.address().port;
+      probe.close(() => resolvePromise(port));
+    });
+  });
+}
 
 function runCli(args) {
   return spawnSync(process.execPath, [cli, ...args], { encoding: "utf8", timeout: 15000 });

packages/harness/README.md

@@ -68,13 +68,9 @@ so an existing bundle is never overwritten):
   (`harnessVersion`), built-in and
   typed tools, the actions without a typed tool, the S0 lines, the gate
   timeout, and the sha256 of every bundle file and of the gate, extension,
-  MCP server and tools sources, and of the unslop check's files (row 66:
-  `lists.json`, the checker, and pi's extension or Claude Code's hook
-  script).
+  MCP server and tools sources.
 - Claude Code only: `settings.json` (the wrapped PreToolUse hook, matcher
-  `*`, and the two unslop hooks, Stop and UserPromptSubmit, each ending
-  `; exit 0` so it never blocks) and `mcp.json` (one stdio server, `mosaic`,
-  serving the typed tools).
+  `*`) and `mcp.json` (one stdio server, `mosaic`, serving the typed tools).
 
 `harness` is the route's module from `packages/plugins/harness/`, which the
 launcher loaded; the bundle calls it for its own files and names and never
@@ -262,28 +258,6 @@ it never touches the disk and isn't in the environment or argv.
    header after it names when the message was sent. A failed read fails the
    turn without running the adapter: the sender gets `The turn failed: could
    not read the current state: <code>`, and the message is read.
-
-   Row 66 (#1559): the unslop check. The runner sets `MOSAIC_UNSLOP_LOG` to
-   `<run>/unslop.jsonl`, after the harness module's variables (in the run
-   directory itself, since a thread run has no `<run>/session/`). Pi's second extension and
-   Claude Code's Stop and UserPromptSubmit hooks (`tools/unslop-hook`) check
-   each reply against `lists.json` and log `checked` or `flagged` (each
-   finding names its pattern id, the entry's `source`), `notice_injected`
-   when the next turn gets the correction notice, and `broken_lists`,
-   `skipped_broken` or `hook_failed` when there is no verdict. After each
-   turn the runner reads what the log gained, and the next RESULT it sends
-   ends with a note naming the flagged replies; a broken check is told
-   once a run. The whole note, both parts together, is at most 600
-   characters, and the answer before it is clipped at 32000, so the RESULT
-   stays under the bus's 32768. A turn that sends no reply (an
-   incoming RESULT, a landing turn) keeps its note for the next reply, and
-   so does a send that failed. That RESULT is what `mosaic talk` and
-   `mosaic follow` print, so the operator sees the note there.
-   `unslopCounts(path)` reads a log after the session ended: replies
-   checked, flagged, findings per pattern id, notices, and the first reason
-   the check broke. The check never blocks a reply (Q84 option B is a later
-   decision), and the session can write its run directory, so the log is
-   the session's own report, not the host's evidence.
 5. SIGTERM or SIGINT kills the turn's process group, releases the role and
    exits 0. The handlers go in before anything else, because pid 1 of a
    PID namespace never sees a signal it has no handler for; a stop before

packages/harness/src/runner.mjs

@@ -21,12 +21,6 @@
 //      no reply and no read. A malformed entry exits 2 before the claim.
 //   5. SIGTERM ends the turn, releases the role and exits 0; before the
 //      claim it exits 0 without claiming.
-//   6. The unslop check (row 66): the harness logs each reply's check to
-//      <run>/unslop.jsonl (MOSAIC_UNSLOP_LOG). After each turn the
-//      runner reads what the log gained, and the next reply it sends ends
-//      with a note naming the flagged replies, or, once a run, the broken
-//      check. That reply is the RESULT `mosaic talk` and `mosaic follow`
-//      print, so the operator sees it there.
 //
 // Exit codes: 0 stopped, 20 founder credentials, 21 claim refused, 22 the
 // capability or the claim stopped working (ended, revoked), 23 the broker
@@ -126,113 +120,6 @@ function clip(text) {
   return text.length > BODY_MAX ? text.slice(0, BODY_MAX) + "\n[answer cut at 32000 characters]" : text;
 }
 
-// Row 66 (#1559): the unslop check's log, which the harness writes and the runner only reads. Pi's
-// second extension and Claude Code's Stop and UserPromptSubmit hooks (tools/unslop-hook) write the
-// same events: checked, flagged (with findings, each naming its lists.json source, the pattern id),
-// notice_injected, and broken_lists, skipped_broken or hook_failed when there is no verdict. The
-// session can write the run directory, so these are its own report, not the host's evidence.
-// The log sits in the run directory itself: a thread run has no <run>/session/ (its sessionDir is
-// the thread's store), and one log a run keeps each run's counts apart.
-export const unslopLog = (runDir) => join(runDir, "unslop.jsonl");
-const UNSLOP_BROKEN = new Set(["broken_lists", "skipped_broken", "hook_failed"]);
-const UNSLOP_NOTE_MAX = 600;
-const cut = (text, n) => (text.length > n ? text.slice(0, n - 3) + "..." : text);
-
-function unslopEvents(text) {
-  const out = [];
-  for (const line of text.split("\n")) {
-    if (!line.trim()) continue;
-    try {
-      const e = JSON.parse(line);
-      if (e && typeof e === "object" && !Array.isArray(e) && typeof e.ev === "string") out.push(e);
-    } catch {}
-  }
-  return out;
-}
-const unslopReason = (e) => cut(typeof e.reason === "string" ? e.reason : "no reason given", 300);
-
-// A session's counts from its log, readable after it ended: replies checked (clean or flagged),
-// replies flagged, findings per pattern id, correction notices, and the first reason the check
-// broke, or null. They are for the later blocking decision (Q84 option B).
-export function unslopCounts(path) {
-  let text = "";
-  try {
-    text = readFileSync(path, "utf8");
-  } catch (e) {
-    if (e.code !== "ENOENT") throw e;
-  }
-  const out = { checked: 0, flagged: 0, patterns: {}, notices: 0, broken: null };
-  for (const e of unslopEvents(text)) {
-    if (e.ev === "checked" || e.ev === "flagged") out.checked++;
-    if (e.ev === "flagged") {
-      out.flagged++;
-      for (const f of Array.isArray(e.findings) ? e.findings : []) {
-        if (typeof f?.source === "string") out.patterns[f.source] = (out.patterns[f.source] ?? 0) + 1;
-      }
-    }
-    if (e.ev === "notice_injected") out.notices++;
-    if (UNSLOP_BROKEN.has(e.ev) && out.broken === null) out.broken = unslopReason(e);
-  }
-  return out;
-}
-
-// What the log gained since the last read, held until a reply carries it. read() runs after every
-// turn; note() is the text for the next reply, or "", and sent() drops it once that reply went out,
-// so a failed send keeps it for the next one. A broken check is told once a run.
-export function unslopNotes(path, log = () => {}) {
-  let offset = 0;
-  let toldBroken = false;
-  let flagged = [];
-  let broken = null;
-  const fresh = (reason) => {
-    if (toldBroken || broken !== null) return;
-    broken = cut(reason, 300);
-    log(`runner: unslop: the check is broken: ${broken}`);
-  };
-  return {
-    read() {
-      let text;
-      try {
-        text = readFileSync(path, "utf8");
-      } catch (e) {
-        if (e.code !== "ENOENT") fresh(`the runner can't read ${path}: ${e.code ?? e.message}`);
-        return;
-      }
-      // Only whole lines: a line the harness is still writing waits for the next read.
-      const end = text.lastIndexOf("\n") + 1;
-      if (end <= offset) return;
-      const events = unslopEvents(text.slice(offset, end));
-      offset = end;
-      for (const e of events) {
-        if (e.ev === "flagged") {
-          const details = (Array.isArray(e.findings) ? e.findings : []).map((f) => (typeof f?.detail === "string" ? f.detail : "")).filter(Boolean);
-          flagged.push(details.join("; ") || "no findings given");
-          log(`runner: unslop: a reply flagged: ${cut(details.join("; "), 300)}`);
-        }
-        if (UNSLOP_BROKEN.has(e.ev)) fresh(unslopReason(e));
-      }
-    },
-    // The whole note, both parts and the blank line, is at most UNSLOP_NOTE_MAX, so a clipped body
-    // plus its note stays under the bus's body limit. The broken part is at most 371 characters
-    // (the reason is cut at 300), and the flagged part gets what is left.
-    note() {
-      const parts = [];
-      if (broken !== null && !toldBroken) parts.push(`[unslop: the check is broken, so this session's replies go unchecked: ${broken}]`);
-      if (flagged.length) {
-        const n = flagged.length;
-        const tail = ". The session gets a correction notice on its next turn.]";
-        const room = UNSLOP_NOTE_MAX - 2 - parts.reduce((sum, p) => sum + p.length + 1, 0) - tail.length;
-        parts.push(cut(`[unslop: ${n} ${n === 1 ? "reply" : "replies"} of this session flagged since the last note: ${[...new Set(flagged)].join("; ")}`, room) + tail);
-      }
-      return parts.length ? `\n\n${parts.join("\n")}` : "";
-    },
-    sent() {
-      if (broken !== null) toldBroken = true;
-      flagged = [];
-    },
-  };
-}
-
 const readLine = (stream) => new Promise((resolve, reject) => {
   let input = "";
   stream.setEncoding("utf8");
@@ -387,8 +274,6 @@ export function adapterEnv(session, env) {
     MOSAIC_PROVIDER: session.provider ?? "",
     MOSAIC_MODEL: session.model,
     ...session.harnessEnv,
-    // Row 66: after the module's variables, so the log is always the run's own.
-    ...(session.runDir ? { MOSAIC_UNSLOP_LOG: unslopLog(session.runDir) } : {}),
   };
 }
 
@@ -473,7 +358,6 @@ export async function main(runDir, { stdin = process.stdin, env = process.env, l
     },
   });
   const turnEnv = adapterEnv(session, env);
-  const unslop = unslopNotes(unslopLog(runDir), log);
 
   let code = EXIT.stopped;
   let failures = 0;
@@ -508,7 +392,6 @@ export async function main(runDir, { stdin = process.stdin, env = process.env, l
     try { await client.call("usage.begin", { turn: e.decision }); }
     catch (err) { log(`runner: usage baseline unavailable: ${err.code ?? "failed"}`); }
     const turn = await runTurn({ session, request: `${block}\n${landingRequest(e)}`, n, env: turnEnv, onChild: (c) => (child = c) });
-    unslop.read();
     try { await client.call("usage.end", { turn: e.decision }); }
     catch (err) { log(`runner: usage outcome unavailable: ${err.code ?? "failed"}`); }
     log(`runner: landing turn ${n} for decision ${e.decision} (${e.task_ref}): ${turn.ok ? "ok" : `failed: ${turn.reason}`}`);
@@ -556,7 +439,6 @@ export async function main(runDir, { stdin = process.stdin, env = process.env, l
       const turn = unread
         ? { ok: false, reason: unread }
         : await runTurn({ session, request: `${block}\n${turnRequest(m)}`, n, env: turnEnv, onChild: (c) => (child = c) });
-      unslop.read();
       // A failed/stopped harness can still have used tokens. Missing data remains unknown.
       try { await client.call("usage.end", { turn: m.id }); }
       catch (e) { log(`runner: usage outcome unavailable: ${e.code ?? "failed"}`); }
@@ -565,8 +447,7 @@ export async function main(runDir, { stdin = process.stdin, env = process.env, l
       try {
         if (m.class !== "RESULT") {
           const body = turn.ok ? turn.text || "(the session gave no answer)" : `The turn failed: ${turn.reason}`;
-          await client.call("message.send", { to: m.from_role, body: clip(body) + unslop.note(), class: "RESULT", in_reply_to: m.id });
-          unslop.sent();
+          await client.call("message.send", { to: m.from_role, body: clip(body), class: "RESULT", in_reply_to: m.id });
         }
         await client.call("message.read", { id: m.id });
       } catch (e) {

packages/harness/tests/bundle.test.mjs

@@ -7,8 +7,6 @@ import { BundleError, buildBundle, sessionModel, SOURCES } from "../src/bundle.m
 import { HARNESS, REPO_SKILLS, resolvedFor, scratch } from "./helpers.mjs";
 import { decide } from "../src/gate.mjs";
 
-const UNSLOP_DIR = new URL("../../../tools/unslop-hook/", import.meta.url).pathname;
-
 const sha = (p) => createHash("sha256").update(readFileSync(p)).digest("hex");
 const mode = (p) => statSync(p).mode & 0o777;
 
@@ -82,11 +80,8 @@ test("a pi bundle: prompt, policy, tools and manifest, 0600 in a 0700 directory"
   assert.deepEqual(m.skills.map((x) => x.name), ["ms-unslop", "ms-goal", "ms-communications"]);
   assert.equal(m.reliesOn.length, 5);
   assert.ok(!m.typed.includes("launch"), "row 119: the PM no longer launches");
-  assert.deepEqual(Object.keys(m.sources).sort(), ["gate", "piExtension", "tools", "unslopCheck", "unslopExtension", "unslopLists"]);
+  assert.deepEqual(Object.keys(m.sources).sort(), ["gate", "piExtension", "tools"]);
   assert.equal(m.sources.piExtension.sha256, sha(SOURCES.piExtension));
-  // Row 66 (#1559): the unslop check's files, as the session loads them.
-  for (const [name, file] of [["unslopExtension", "extension.ts"], ["unslopCheck", "unslop-check.js"], ["unslopLists", "lists.json"]])
-    assert.equal(m.sources[name].sha256, sha(join(UNSLOP_DIR, file)), name);
   for (const [name, digest] of Object.entries(m.files)) assert.equal(digest, sha(join(b.dir, "bundle", name)), name);
   assert.deepEqual(JSON.parse(readFileSync(b.files.manifest, "utf8")), JSON.parse(JSON.stringify(m)));
 });
@@ -149,15 +144,7 @@ test("a claude-code bundle adds the wrapped gate hook and the MCP config", (t) =
   assert.deepEqual(m.gateTimeout, { n: 10, k: 2, hook: 20 });
   assert.ok(m.builtins.includes("Bash"));
   assert.ok(m.typed.every((n) => n.startsWith("mcp__mosaic__")));
-  assert.deepEqual(Object.keys(m.sources).sort(), ["claudeGate", "gate", "mcpServer", "tools", "unslopCheck", "unslopHook", "unslopLists"]);
-  // Row 66 (#1559): the unslop hooks run after a reply and before the next prompt, and never block.
-  for (const [event, which] of [["Stop", "stop"], ["UserPromptSubmit", "prompt"]]) {
-    assert.equal(settings.hooks[event].length, 1, event);
-    assert.equal(settings.hooks[event][0].matcher, undefined, event);
-    assert.deepEqual(settings.hooks[event][0].hooks, [{ type: "command", command: `timeout -k 2 10 '${process.execPath}' '${join(UNSLOP_DIR, "claude-hook.js")}' ${which}; exit 0`, timeout: 20 }], event);
-  }
-  for (const [name, file] of [["unslopHook", "claude-hook.js"], ["unslopCheck", "unslop-check.js"], ["unslopLists", "lists.json"]])
-    assert.equal(m.sources[name].sha256, sha(join(UNSLOP_DIR, file)), name);
+  assert.deepEqual(Object.keys(m.sources).sort(), ["claudeGate", "gate", "mcpServer", "tools"]);
 });
 
 // Row 89 (#1583): the prompt names the built-ins as the session's harness names them.

packages/harness/tests/claude-session.test.mjs

@@ -1,4 +1,3 @@
-import { fixtureCacheEnv } from '../../../scripts/testing/lane-fixtures.mjs';
 // The host's claude CLI through adapters/claude with the bundle's hook and
 // MCP server, against the scripted Messages API. Scratch CLAUDE_CONFIG_DIR
 // and HOME, a dummy key, nonessential traffic off: nothing reaches a real
@@ -11,7 +10,7 @@ import { spawn, spawnSync } from "node:child_process";
 import { chmodSync, existsSync, mkdirSync, readFileSync, realpathSync, rmSync, writeFileSync } from "node:fs";
 import { basename, dirname, join } from "node:path";
 import { buildBundle } from "../src/bundle.mjs";
-import { adapterEnv, unslopCounts, unslopLog, unslopNotes } from "../src/runner.mjs";
+import { adapterEnv } from "../src/runner.mjs";
 import { fakeToolSocket, HARNESS, mockAnthropic, REPO, REPO_SKILLS, resolvedFor, scratch } from "./helpers.mjs";
 
 const ADAPTER = join(REPO, "adapters", "claude", "adapter.sh");
@@ -19,14 +18,14 @@ const which = spawnSync("sh", ["-c", "command -v claude"], { encoding: "utf8" })
 const CLAUDE = which.status === 0 ? which.stdout.trim() : null;
 const skip = CLAUDE ? false : "claude is not on PATH";
 
-async function session(t, script, tools = ["read", "bash"], done = (r) => `ANSWER ${JSON.stringify(r.map((x) => [x.isError, x.content.slice(0, 600)]))}`) {
+async function session(t, script, tools = ["read", "bash"]) {
   const dir = scratch(t);
   const workspace = join(dir, "ws");
   mkdirSync(workspace);
   writeFileSync(join(workspace, "notes.txt"), "inside\n");
   writeFileSync(join(dir, "secret.txt"), "outside\n");
   if (typeof script === "function") script = script(workspace);
-  const api = await mockAnthropic(t, { script, done });
+  const api = await mockAnthropic(t, { script, done: (r) => `ANSWER ${JSON.stringify(r.map((x) => [x.isError, x.content.slice(0, 600)]))}` });
   const resolved = resolvedFor(t, "coder", (d) => {
     d.roles.coder.vars = { harness: "claude-code", model: "claude-sonnet-5-5", "limits.tools": tools };
   });
@@ -42,9 +41,6 @@ async function session(t, script, tools = ["read", "bash"], done = (r) => `ANSWE
     sessionDir: join(dir, "session"),
     toolSocket: sock.path,
     turnMarker: join(dir, "turn.done"),
-    // Row 66: the run directory, so the unslop hooks log to <dir>/unslop.jsonl, which the
-    // runner makes before the first turn.
-    runDir: dir,
   };
   const { files, manifest, env: harnessEnv } = buildBundle({ dir: join(dir, "bundle"), resolved, contract: "# Coder\n", harness: HARNESS["claude-code"], skillsDir: REPO_SKILLS, session: { ...s, run: "run-1", launchedBy: "pm" } });
   s.bundle = files;
@@ -65,7 +61,7 @@ async function session(t, script, tools = ["read", "bash"], done = (r) => `ANSWE
 
 function turn(env, request, cwd, adapter = ADAPTER) {
   return new Promise((resolve) => {
-    const child = spawn("/bin/sh", [adapter], { cwd, env: { ...env, ...fixtureCacheEnv(env.CLAUDE_CONFIG_DIR), MOSAIC_REQUEST: request }, stdio: ["ignore", "pipe", "pipe"], detached: true });
+    const child = spawn("/bin/sh", [adapter], { cwd, env: { ...env, MOSAIC_REQUEST: request }, stdio: ["ignore", "pipe", "pipe"], detached: true });
     let stdout = "";
     let stderr = "";
     child.stdout.on("data", (b) => (stdout += b));
@@ -307,55 +303,3 @@ test("claude: a missing hook or MCP file refuses before claude starts", { skip }
   }
   assert.equal(api.requests.length, 0);
 });
-
-// Row 66 (#1559): the unslop check's Stop and UserPromptSubmit hooks. The scripted model's answers
-// are the session's replies; the requests show what the model was sent on the next turn.
-const TELL = "Let me delve into the build. It is a pivotal step.";
-const replying = (answers) => {
-  let n = 0;
-  return () => answers[n++] ?? "Done.";
-};
-const notices = (api) => api.requests.filter((r) => r.tools.length).map((r) => r.raw.split("UNSLOP NOTICE").length - 1);
-
-test("claude: row 66 a reply with a tell gets the correction notice on the next turn, a clean reply gets none, and the counts read after", { skip }, async (t) => {
-  const { dir, api, s, env } = await session(t, [], undefined, replying([TELL, "The build is green.", TELL, "Done."]));
-  assert.equal(env.MOSAIC_UNSLOP_LOG, unslopLog(dir));
-  const notes = unslopNotes(unslopLog(dir));
-  for (const [i, request] of ["status?", "and now?", "and the tests?", "thanks"].entries()) {
-    const r = await turn(env, `Message ${i + 1} from pm, class REQUEST:\n\n${request}`, s.workspace);
-    assert.equal(r.code, 0, r.stderr);
-    notes.read();
-    // The runner's note for the operator: on each turn whose reply had the tell, and on no other.
-    assert.equal(/1 reply of this session flagged since the last note: banned word "delve" x1; banned word "pivotal" x1\./.test(notes.note()), i % 2 === 0, `turn ${i + 1}: ${notes.note()}\n${readFileSync(unslopLog(dir), "utf8")}`);
-    notes.sent();
-  }
-  // The request after each tell carries a notice; the one after a clean reply has no new one, and
-  // a tell after a clean reply is still caught.
-  assert.deepEqual(notices(api), [0, 1, 1, 2]);
-  const second = api.requests.filter((r) => r.tools.length)[1].raw;
-  assert.match(second, /UNSLOP NOTICE \(mechanical style check, not the user speaking\)[^"]*banned word \\"delve\\" x1/);
-  const counts = unslopCounts(unslopLog(dir));
-  assert.deepEqual({ ...counts, patterns: Object.keys(counts.patterns).length > 0 }, { checked: 4, flagged: 2, patterns: true, notices: 2, broken: null });
-});
-
-test("claude: row 66 a broken lists.json gives no clean verdict, the operator is told once, and the session still answers", { skip }, async (t) => {
-  const { dir, api, s, env } = await session(t, [], undefined, replying(["The build is green.", TELL]));
-  writeFileSync(join(dir, "empty-lists.json"), "");
-  const notes = unslopNotes(unslopLog(dir));
-  const told = [];
-  for (const [i, request] of ["status?", "and now?"].entries()) {
-    const r = await turn({ ...env, UNSLOP_LISTS: join(dir, "empty-lists.json") }, `Message ${i + 1} from pm, class REQUEST:\n\n${request}`, s.workspace);
-    assert.equal(r.code, 0, r.stderr);
-    assert.ok(r.stdout.trim().length > 0, "the session answered");
-    notes.read();
-    told.push(notes.note());
-    notes.sent();
-  }
-  assert.match(told[0], /^\n\n\[unslop: the check is broken, so this session's replies go unchecked: lists\.json invalid: empty file/);
-  assert.equal(told[1], "");
-  assert.deepEqual(notices(api), [0, 0]);
-  const counts = unslopCounts(unslopLog(dir));
-  assert.equal(counts.checked, 0);
-  assert.equal(counts.flagged, 0);
-  assert.match(counts.broken, /^lists\.json invalid: empty file/);
-});

packages/harness/tests/fixtures/fake-adapter.mjs

@@ -5,9 +5,6 @@
 //   FAIL                 exit 3
 //   NOMARKER             answer without writing the turn marker
 //   ENV <name>           answer "env: <value of name>"
-//   UNSLOP <json>        append each event of the JSON array to $MOSAIC_UNSLOP_LOG, as the harness's
-//                        unslop check does (row 66), and answer "unslop: <count>"
-//   UNSLOPLONG <json>    the same, with an answer of 40000 more characters, over the runner's clip
 //   anything else        answer "echo: <request>"
 // Every turn appends its pid to $FAKE_PIDS when set.
 
@@ -36,12 +33,6 @@ if (body.startsWith("TOOL ")) {
 } else if (body.startsWith("ENV ")) {
   process.stdout.write(`env: ${process.env[body.slice(4)]}\n`);
   done();
-} else if (body.startsWith("UNSLOP ") || body.startsWith("UNSLOPLONG ")) {
-  const long = body.startsWith("UNSLOPLONG ");
-  const events = JSON.parse(body.slice(long ? 11 : 7));
-  for (const e of events) appendFileSync(process.env.MOSAIC_UNSLOP_LOG, JSON.stringify({ ts: Date.now(), ...e }) + "\n");
-  process.stdout.write(`unslop: ${events.length}${long ? " " + "x".repeat(40000) : ""}\n`);
-  done();
 } else if (body === "NOMARKER") {
   process.stdout.write("half an answer");
 } else {

packages/harness/tests/pi-session.test.mjs

@@ -1,21 +1,20 @@
-import { fixtureCacheEnv } from '../../../scripts/testing/lane-fixtures.mjs';
 // Real pi (the pinned CLI) through adapters/pi with the extension, against
 // the scripted Messages API. No real model, no network beyond 127.0.0.1.
 
 import { test } from "node:test";
 import assert from "node:assert/strict";
 import { spawn } from "node:child_process";
-import { existsSync, mkdirSync, readdirSync, readFileSync, symlinkSync, writeFileSync } from "node:fs";
+import { existsSync, mkdirSync, readdirSync, symlinkSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 import { buildBundle } from "../src/bundle.mjs";
-import { adapterEnv, unslopCounts, unslopLog, unslopNotes } from "../src/runner.mjs";
+import { adapterEnv } from "../src/runner.mjs";
 import { REPLY_CAP } from "../src/tools.mjs";
 import { fakeToolSocket, HARNESS, mockAnthropic, REPO, REPO_SKILLS, resolvedFor, scratch } from "./helpers.mjs";
 
 const ADAPTER = join(REPO, "adapters", "pi", "adapter.sh");
 
 // The chief of staff (row 119) has no write tool; tests that write use the PM.
-async function session(t, script, place = (dir) => join(dir, "ws"), instance = "chief", done = (r) => `ANSWER ${JSON.stringify(r.map((x) => [x.isError, x.content.slice(0, 80)]))}`) {
+async function session(t, script, place = (dir) => join(dir, "ws"), instance = "chief") {
   const dir = scratch(t);
   const workspace = place(dir);
   const agentDir = join(dir, "pi-agent");
@@ -23,7 +22,7 @@ async function session(t, script, place = (dir) => join(dir, "ws"), instance = "
   mkdirSync(agentDir);
   writeFileSync(join(workspace, "notes.txt"), "inside\n");
   writeFileSync(join(dir, "secret.txt"), "outside\n");
-  const api = await mockAnthropic(t, { script, done });
+  const api = await mockAnthropic(t, { script, done: (r) => `ANSWER ${JSON.stringify(r.map((x) => [x.isError, x.content.slice(0, 80)]))}` });
   writeFileSync(join(agentDir, "models.json"), JSON.stringify({ providers: { probe: { baseUrl: api.url, api: "anthropic-messages", apiKey: "probe-dummy", models: [{ id: "probe-model" }] } } }));
   const resolved = resolvedFor(t, instance, (d) => {
     d.roles[instance].vars = { ...d.roles[instance].vars, harness: "pi", model: "probe-model" };
@@ -43,9 +42,6 @@ async function session(t, script, place = (dir) => join(dir, "ws"), instance = "
     sessionDir: join(dir, "session"),
     toolSocket: sock.path,
     turnMarker: join(dir, "turn.done"),
-    // Row 66: the run directory, so the unslop check logs to <dir>/unslop.jsonl, which the
-    // runner makes before the first turn.
-    runDir: dir,
   };
   const models = { "probe-model": { provider: "probe", model: "probe-model" } };
   const { files, env: harnessEnv } = buildBundle({ dir: join(dir, "bundle"), resolved, contract: "# PM\n", tracker: true, harness: HARNESS.pi, models, skillsDir: REPO_SKILLS, session: { ...s, run: "run-1", launchedBy: "jason" } });
@@ -61,7 +57,7 @@ async function session(t, script, place = (dir) => join(dir, "ws"), instance = "
 
 function turn(env, request, cwd) {
   return new Promise((resolve) => {
-    const child = spawn("/bin/sh", [ADAPTER], { cwd, env: { ...env, ...fixtureCacheEnv(env.PI_CODING_AGENT_DIR), MOSAIC_REQUEST: request }, stdio: ["ignore", "pipe", "pipe"] });
+    const child = spawn("/bin/sh", [ADAPTER], { cwd, env: { ...env, MOSAIC_REQUEST: request }, stdio: ["ignore", "pipe", "pipe"] });
     let stdout = "";
     let stderr = "";
     child.stdout.on("data", (b) => (stdout += b));
@@ -267,55 +263,3 @@ test("pi: an extension without its configuration fails pi's start", async (t) =>
   assert.equal(api.requests.length, 0);
   assert.ok(MOSAIC_POLICY_FILE);
 });
-
-// Row 66 (#1559): the unslop check as a second extension. The scripted model's answers are the
-// session's replies; the requests show what the model was sent on the next turn.
-const TELL = "Let me delve into the build. It is a pivotal step.";
-const replying = (answers) => {
-  let n = 0;
-  return () => answers[n++] ?? "Done.";
-};
-const notices = (api) => api.requests.filter((r) => r.tools.length).map((r) => r.raw.split("UNSLOP NOTICE").length - 1);
-
-test("pi: row 66 a reply with a tell gets the correction notice on the next turn, a clean reply gets none, and the counts read after", async (t) => {
-  const { dir, api, s, env } = await session(t, [], undefined, undefined, replying([TELL, "The build is green.", TELL, "Done."]));
-  assert.equal(env.MOSAIC_UNSLOP_LOG, unslopLog(dir));
-  const notes = unslopNotes(unslopLog(dir));
-  for (const [i, request] of ["status?", "and now?", "and the tests?", "thanks"].entries()) {
-    const r = await turn(env, `Message ${i + 1} from jason, class REQUEST:\n\n${request}`, s.workspace);
-    assert.equal(r.code, 0, r.stderr);
-    notes.read();
-    // The runner's note for the operator: on each turn whose reply had the tell, and on no other.
-    assert.equal(/1 reply of this session flagged since the last note: banned word "delve" x1; banned word "pivotal" x1\./.test(notes.note()), i % 2 === 0, `turn ${i + 1}: ${notes.note()}\n${readFileSync(unslopLog(dir), "utf8")}`);
-    notes.sent();
-  }
-  // The request after each tell carries a notice; the one after a clean reply has no new one, and
-  // a tell after a clean reply is still caught.
-  assert.deepEqual(notices(api), [0, 1, 1, 2]);
-  const second = api.requests.filter((r) => r.tools.length)[1].raw;
-  assert.match(second, /UNSLOP NOTICE \(mechanical style check, not the user speaking\)[^"]*banned word \\"delve\\" x1/);
-  const counts = unslopCounts(unslopLog(dir));
-  assert.deepEqual({ ...counts, patterns: Object.keys(counts.patterns).length > 0 }, { checked: 4, flagged: 2, patterns: true, notices: 2, broken: null });
-});
-
-test("pi: row 66 a broken lists.json gives no clean verdict, the operator is told once, and the session still answers", async (t) => {
-  const { dir, api, s, env } = await session(t, [], undefined, undefined, replying(["The build is green.", TELL]));
-  writeFileSync(join(dir, "empty-lists.json"), "");
-  const notes = unslopNotes(unslopLog(dir));
-  const told = [];
-  for (const [i, request] of ["status?", "and now?"].entries()) {
-    const r = await turn({ ...env, UNSLOP_LISTS: join(dir, "empty-lists.json") }, `Message ${i + 1} from jason, class REQUEST:\n\n${request}`, s.workspace);
-    assert.equal(r.code, 0, r.stderr);
-    assert.ok(r.stdout.trim().length > 0, "the session answered");
-    notes.read();
-    told.push(notes.note());
-    notes.sent();
-  }
-  assert.match(told[0], /^\n\n\[unslop: the check is broken, so this session's replies go unchecked: lists\.json invalid: empty file/);
-  assert.equal(told[1], "");
-  assert.deepEqual(notices(api), [0, 0]);
-  const counts = unslopCounts(unslopLog(dir));
-  assert.equal(counts.checked, 0);
-  assert.equal(counts.flagged, 0);
-  assert.match(counts.broken, /^lists\.json invalid: empty file/);
-});

packages/harness/tests/runner.test.mjs

@@ -13,7 +13,7 @@ import { join } from "node:path";
 import { Store } from "../../bus/src/store.mjs";
 import { Broker, BusError } from "../../bus/src/broker.mjs";
 import { serve } from "../../bus/src/server.mjs";
-import { EXIT, founderCheck, landingRequest, stateBlock, turnRequest, unslopCounts, unslopLog, unslopNotes } from "../src/runner.mjs";
+import { EXIT, founderCheck, landingRequest, stateBlock, turnRequest } from "../src/runner.mjs";
 import { typedTools } from "../src/tools.mjs";
 import { resolvedFor, scratch } from "./helpers.mjs";
 
@@ -836,131 +836,3 @@ test("row 65 harnessEnv reaches the adapter, and an exit harness needs no turn m
   await until(() => replies(ctx)() && ctx.inbox.length >= 2);
   assert.deepEqual(ctx.inbox.map((m) => m.body.trim()), ["env: xhigh", "half an answer"]);
 });
-
-// Row 66 (#1559): the harness's unslop check logs to <run>/unslop.jsonl. The fake adapter's
-// UNSLOP body writes the events a real check would; pi-session and claude-session tests run the real
-// extension and hooks.
-const tell = (detail, source = "ms-unslop:7") => ({ ev: "flagged", clean: false, charsChecked: 40, findings: [{ rule: "word", source, detail, count: 1 }] });
-const unslopAsk = (ctx, events, cls = "REQUEST") => ctx.call(ctx.pm, "message.send", { to: "coder", body: `UNSLOP ${JSON.stringify(events)}`, class: cls });
-
-test("row 66 the adapter gets the run's unslop log, and a flagged reply's note rides that reply's RESULT, once", async (t) => {
-  const ctx = await setup(t, { session: { harnessEnv: { MOSAIC_UNSLOP_LOG: "/elsewhere.jsonl" } } });
-  ctx.inbox = [];
-  // A thread run's sessionDir is elsewhere and the run has no session/; the log needs none.
-  rmSync(join(ctx.runDir, "session"), { recursive: true, force: true });
-  const r = startRunner(ctx.runDir, ctx.cap);
-  t.after(() => r.child.kill("SIGKILL"));
-  const env = await ask(ctx, "ENV MOSAIC_UNSLOP_LOG");
-  assert.equal(env.body, `env: ${join(ctx.runDir, "unslop.jsonl")}`);
-  assert.equal(existsSync(join(ctx.runDir, "session")), false);
-  unslopAsk(ctx, [{ ev: "checked", clean: true, charsChecked: 10 }, tell('banned word "delve" x1')]);
-  await until(() => replies(ctx)() && ctx.inbox.length >= 2);
-  assert.equal(ctx.inbox[1].body, 'unslop: 2\n\n[unslop: 1 reply of this session flagged since the last note: banned word "delve" x1. The session gets a correction notice on its next turn.]');
-  const clean = await ask(ctx, "ENV MOSAIC_MODEL");
-  assert.equal(clean.body, "env: fake-model");
-  assert.match(r.stderr(), /runner: unslop: a reply flagged: banned word "delve" x1\n/);
-});
-
-test("row 66 a turn with no reply holds its note for the next reply; a broken check is told once", async (t) => {
-  const ctx = await setup(t);
-  ctx.inbox = [];
-  const r = startRunner(ctx.runDir, ctx.cap);
-  t.after(() => r.child.kill("SIGKILL"));
-  await until(() => ctx.store.get("SELECT 1 FROM role_claims WHERE role='coder' AND op='claim'"));
-  // A RESULT takes a turn and gets no reply, so its flagged reply waits.
-  const res = unslopAsk(ctx, [tell('banned word "tapestry" x1', "ms-unslop:7")], "RESULT");
-  await until(() => ctx.store.get("SELECT 1 FROM deliveries WHERE message=? AND op='read'", res.id));
-  assert.equal(replies(ctx)(), null);
-  unslopAsk(ctx, [{ ev: "broken_lists", reason: "lists.json invalid: empty file" }, tell('filler phrase "in order to" x1', "ms-unslop:23")]);
-  await until(() => replies(ctx)() && ctx.inbox.length >= 1);
-  assert.equal(ctx.inbox[0].body, "unslop: 2\n\n[unslop: the check is broken, so this session's replies go unchecked: lists.json invalid: empty file]\n" +
-    '[unslop: 2 replies of this session flagged since the last note: banned word "tapestry" x1; filler phrase "in order to" x1. The session gets a correction notice on its next turn.]');
-  // The next broken event isn't told again.
-  unslopAsk(ctx, [{ ev: "skipped_broken", reason: "lists.json invalid: empty file" }]);
-  await until(() => replies(ctx)() && ctx.inbox.length >= 2);
-  assert.equal(ctx.inbox[1].body, "unslop: 1");
-  assert.equal(r.stderr().match(/runner: unslop: the check is broken/g).length, 1);
-  const counts = unslopCounts(unslopLog(ctx.runDir));
-  assert.deepEqual(counts, { checked: 2, flagged: 2, patterns: { "ms-unslop:7": 1, "ms-unslop:23": 1 }, notices: 0, broken: "lists.json invalid: empty file" });
-});
-
-test("row 66 unslopNotes keeps a note until sent(), reads only whole lines, and unslopCounts reads a log after the session", (t) => {
-  const dir = scratch(t);
-  const path = join(dir, "unslop.jsonl");
-  const notes = unslopNotes(path);
-  notes.read();
-  assert.equal(notes.note(), "");
-  writeFileSync(path, JSON.stringify(tell('banned word "pivotal" x1')) + "\n" + '{"ev":"flagged","findings":[{"detail":"half');
-  notes.read();
-  const first = notes.note();
-  assert.match(first, /1 reply of this session flagged since the last note: banned word "pivotal" x1\./);
-  // A send that failed calls no sent(), so the note is still there.
-  assert.equal(notes.note(), first);
-  notes.sent();
-  assert.equal(notes.note(), "");
-  // The half line completes; it is read once, from where the last read stopped.
-  writeFileSync(path, readFileSync(path, "utf8") + ' x","source":"ms-unslop:9"}]}\nnot json\n[1]\n' + JSON.stringify({ ev: "notice_injected" }) + "\n");
-  notes.read();
-  assert.match(notes.note(), /1 reply of this session flagged since the last note: half x\./);
-  assert.deepEqual(unslopCounts(path), { checked: 2, flagged: 2, patterns: { "ms-unslop:7": 1, "ms-unslop:9": 1 }, notices: 1, broken: null });
-  assert.deepEqual(unslopCounts(join(dir, "none.jsonl")), { checked: 0, flagged: 0, patterns: {}, notices: 0, broken: null });
-  // A note is bounded however many findings a reply had.
-  const many = unslopNotes(join(dir, "many.jsonl"));
-  writeFileSync(join(dir, "many.jsonl"), Array.from({ length: 50 }, (_, i) => JSON.stringify(tell(`banned word "w${i}" x1`.padEnd(40, "x")))).join("\n") + "\n");
-  many.read();
-  assert.ok(many.note().length <= 600, many.note().length);
-  assert.match(many.note(), /^\n\n\[unslop: 50 replies .*\.\.\.\. The session gets a correction notice on its next turn\.\]$/s);
-  // Both parts together are bounded too, and a reason the runner makes itself is cut like one the
-  // log gives: here the log path is a directory with a long name, so the read fails with EISDIR.
-  const deep = join(dir, "d".repeat(250));
-  mkdirSync(deep);
-  const both = unslopNotes(deep);
-  both.read();
-  assert.match(both.note(), /^\n\n\[unslop: the check is broken, so this session's replies go unchecked: the runner can't read .*\.\.\.\]$/);
-  assert.equal(both.note().length, 2 + 71 + 300);
-  const both2 = unslopNotes(join(dir, "both.jsonl"));
-  writeFileSync(join(dir, "both.jsonl"), [JSON.stringify({ ev: "broken_lists", reason: "b".repeat(400) }), ...Array.from({ length: 50 }, (_, i) => JSON.stringify(tell(`banned word "w${i}" x1`.padEnd(40, "x"))))].join("\n") + "\n");
-  both2.read();
-  assert.equal(both2.note().length, 600);
-  assert.match(both2.note(), /^\n\n\[unslop: the check is broken, so this session's replies go unchecked: b{297}\.\.\.\]\n\[unslop: 50 replies .*\.\.\.\. The session gets a correction notice on its next turn\.\]$/s);
-});
-
-test("row 66 a clipped answer with both note parts stays under the bus's body limit, and the note under 600", async (t) => {
-  const ctx = await setup(t);
-  ctx.inbox = [];
-  const r = startRunner(ctx.runDir, ctx.cap);
-  t.after(() => r.child.kill("SIGKILL"));
-  await until(() => ctx.store.get("SELECT 1 FROM role_claims WHERE role='coder' AND op='claim'"));
-  const events = [{ ev: "hook_failed", reason: "r".repeat(400) }, ...Array.from({ length: 30 }, (_, i) => tell(`banned word "w${i}" x1`.padEnd(60, "x")))];
-  ctx.call(ctx.pm, "message.send", { to: "coder", body: `UNSLOPLONG ${JSON.stringify(events)}`, class: "REQUEST" });
-  await until(() => replies(ctx)() && ctx.inbox.length >= 1);
-  const body = ctx.inbox[0].body;
-  const at = body.indexOf("\n[answer cut at 32000 characters]");
-  assert.equal(at, 32000);
-  const note = body.slice(at + "\n[answer cut at 32000 characters]".length);
-  assert.ok(note.length <= 600, note.length);
-  assert.ok(body.length <= 32768, body.length);
-  assert.match(note, /^\n\n\[unslop: the check is broken, so this session's replies go unchecked: r+\.\.\.\]\n\[unslop: 30 replies .*\.\.\.\. The session gets a correction notice on its next turn\.\]$/s);
-});
-
-test("row 66 a refused send keeps the note: it rides the next RESULT the session sends", async (t) => {
-  const ctx = await setup(t);
-  ctx.inbox = [];
-  // The broker refuses the session's first RESULT once, as it would a body it can't take.
-  const request = ctx.broker.request.bind(ctx.broker);
-  let refused = 0;
-  ctx.broker.request = (cap, r) => {
-    if (r.verb === "message.send" && r.args?.class === "RESULT" && refused++ === 0) throw new BusError("invalid-request");
-    return request(cap, r);
-  };
-  const r = startRunner(ctx.runDir, ctx.cap);
-  t.after(() => r.child.kill("SIGKILL"));
-  await until(() => ctx.store.get("SELECT 1 FROM role_claims WHERE role='coder' AND op='claim'"));
-  const sent = unslopAsk(ctx, [tell('banned word "delve" x1')]);
-  await until(() => r.stderr().includes(`runner: reply to ${sent.id} failed: invalid-request\n`));
-  // The refused message was delivered and isn't read; its reply never reached the bus.
-  assert.ok(!ctx.store.get("SELECT 1 FROM deliveries WHERE message=? AND op='read'", sent.id));
-  const next = await ask(ctx, "ENV MOSAIC_MODEL");
-  assert.equal(next.body, 'env: fake-model\n\n[unslop: 1 reply of this session flagged since the last note: banned word "delve" x1. The session gets a correction notice on its next turn.]');
-  assert.equal(ctx.inbox.length, 1);
-});

packages/plugins/README.md

@@ -153,11 +153,6 @@ export returns:
   `gateTimeout`, `bundle`, `env`, `turnEnd` and `transcript` give its
   sandbox binds, web, tool names, S0 lines, bundle files, adapter variables,
   how a turn ends and where its transcripts land.
-- Row 66: both modules wire the unslop check from `tools/unslop-hook`.
-  `mounts` adds its three files read-only and `bundle` names them in the
-  manifest's sources. Pi's `env` loads `extension.ts` as the second entry of
-  `MOSAIC_EXTENSIONS`; Claude Code's `bundle` adds Stop and UserPromptSubmit
-  hooks that run `claude-hook.js` and never block.
 
 `plugins.harness` switches harnesses on, and an instance's `harness` and
 `fallback.harness` vars each name one. A launch on a harness that isn't

packages/plugins/harness/claude-code/index.mjs

@@ -16,13 +16,6 @@ export const interfaceVersion = 1;
 const REPO = fileURLToPath(new URL("../../../../", import.meta.url));
 const GATE = fileURLToPath(new URL("../../../harness/src/claude-gate.mjs", import.meta.url));
 const MCP_SERVER = fileURLToPath(new URL("../../../harness/src/mcp-server.mjs", import.meta.url));
-// Row 66 (#1559): the unslop check's hook script, which the Stop and UserPromptSubmit hooks run. It
-// logs to MOSAIC_UNSLOP_LOG, which the runner sets, and the runner tells the operator.
-const UNSLOP = Object.freeze({
-  unslopHook: join(REPO, "tools", "unslop-hook", "claude-hook.js"),
-  unslopCheck: join(REPO, "tools", "unslop-hook", "unslop-check.js"),
-  unslopLists: join(REPO, "tools", "unslop-hook", "lists.json"),
-});
 // `claude --effort <level>` on 2.1.302 (probed 2026-10-19, agents/sage/work/queue-65/BUILD.md).
 // It has no off or minimal.
 const LEVELS = Object.freeze(["low", "medium", "high", "xhigh", "max"]);
@@ -76,13 +69,11 @@ export function version({ env }) {
 // Its launches spend the business's launch.account (row 126).
 export const countsAccount = () => true;
 
-// The pinned binary, when it lives outside /usr (which the sandbox already binds), and the unslop
-// hook's files.
+// The pinned binary, when it lives outside /usr (which the sandbox already binds).
 export function mounts({ env }) {
-  const unslop = Object.values(UNSLOP).map((src) => ({ src, why: "the unslop check the session's Stop and UserPromptSubmit hooks run" }));
-  if (!env.MOSAIC_CLAUDE_BIN) return unslop;
+  if (!env.MOSAIC_CLAUDE_BIN) return [];
   const real = realpathSync(env.MOSAIC_CLAUDE_BIN);
-  return [...(real.startsWith("/usr/") ? [] : [{ src: real, dest: env.MOSAIC_CLAUDE_BIN, why: "the pinned Claude Code binary (MOSAIC_CLAUDE_BIN)" }]), ...unslop];
+  return real.startsWith("/usr/") ? [] : [{ src: real, dest: env.MOSAIC_CLAUDE_BIN, why: "the pinned Claude Code binary (MOSAIC_CLAUDE_BIN)" }];
 }
 
 // WebSearch and WebFetch are its own, so it serves harness-builtin web.
@@ -92,28 +83,22 @@ export const typedName = (name) => MCP_PREFIX + name;
 export const reliesOn = () => RELIES_ON;
 export const gateTimeout = () => ({ ...GATE_TIMEOUT });
 
-// settings.json holds the gate hook and the two unslop hooks (row 66), and mcp.json the typed
-// tools' server. An unslop hook ends with `; exit 0`, so it never blocks a reply or a prompt.
-// files: the bundle's own (policy, tools). write(name, text) puts a file in the bundle directory
-// and returns [name, sha256]; quote(path) refuses a single quote.
+// settings.json holds the gate hook and mcp.json the typed tools' server. files: the bundle's own
+// (policy, tools). write(name, text) puts a file in the bundle directory and returns
+// [name, sha256]; quote(path) refuses a single quote.
 export function bundle({ dir, files: core, session, write, quote }) {
   const files = { settings: join(dir, "settings.json"), mcp: join(dir, "mcp.json") };
   const node = process.execPath;
   const command = `timeout -k ${GATE_TIMEOUT.k} ${GATE_TIMEOUT.n} ${quote(node)} ${quote(GATE)} ${quote(core.policy)} || exit 2`;
-  const unslop = (which) => [{ hooks: [{ type: "command", command: `timeout -k ${GATE_TIMEOUT.k} ${GATE_TIMEOUT.n} ${quote(node)} ${quote(UNSLOP.unslopHook)} ${which}; exit 0`, timeout: GATE_TIMEOUT.hook }] }];
   const digests = [
     write("settings.json", JSON.stringify({
-      hooks: {
-        PreToolUse: [{ matcher: "*", hooks: [{ type: "command", command, timeout: GATE_TIMEOUT.hook }] }],
-        Stop: unslop("stop"),
-        UserPromptSubmit: unslop("prompt"),
-      },
+      hooks: { PreToolUse: [{ matcher: "*", hooks: [{ type: "command", command, timeout: GATE_TIMEOUT.hook }] }] },
     }, null, 2) + "\n"),
     write("mcp.json", JSON.stringify({
       mcpServers: { mosaic: { type: "stdio", command: node, args: [MCP_SERVER, core.tools, session.toolSocket] } },
     }, null, 2) + "\n"),
   ];
-  return { files, digests, sources: { claudeGate: GATE, mcpServer: MCP_SERVER, ...UNSLOP } };
+  return { files, digests, sources: { claudeGate: GATE, mcpServer: MCP_SERVER } };
 }
 
 export function env({ files, policy, session }) {

packages/plugins/harness/pi/index.mjs

@@ -13,13 +13,6 @@ const REPO = fileURLToPath(new URL("../../../../", import.meta.url));
 const PACKAGE = "@earendil-works/pi-coding-agent";
 const BIN = join(REPO, "node_modules", ".bin", "pi");
 const EXTENSION = fileURLToPath(new URL("../../../harness/src/pi-extension.mjs", import.meta.url));
-// Row 66 (#1559): the unslop check, loaded as a second extension. It logs to MOSAIC_UNSLOP_LOG,
-// which the runner sets, and the runner tells the operator.
-const UNSLOP = Object.freeze({
-  unslopExtension: join(REPO, "tools", "unslop-hook", "extension.ts"),
-  unslopCheck: join(REPO, "tools", "unslop-hook", "unslop-check.js"),
-  unslopLists: join(REPO, "tools", "unslop-hook", "lists.json"),
-});
 // `pi --thinking <level>` on 0.85.1 (probed 2026-10-19, agents/sage/work/queue-65/BUILD.md).
 const LEVELS = Object.freeze(["off", "minimal", "low", "medium", "high", "xhigh", "max"]);
 // docs/plans/2026-10-04_slice-1.md, "What S6 can rely on", lines 1-5.
@@ -47,23 +40,20 @@ export function version() {
 
 // Pi sessions run on a provider key, never the Claude account limit.
 export const countsAccount = () => false;
-export const mounts = () => [
-  { src: realpathSync(join(REPO, "node_modules")), dest: join(REPO, "node_modules"), why: "pi and its packages, on the session's PATH" },
-  ...Object.values(UNSLOP).map((src) => ({ src, why: "the unslop check the session's second extension runs" })),
-];
+export const mounts = () => [{ src: realpathSync(join(REPO, "node_modules")), dest: join(REPO, "node_modules"), why: "pi and its packages, on the session's PATH" }];
 // Pi has no web tool of its own, so a granted role under harness-builtin is refused.
 export const builtinWeb = () => false;
 export const builtins = ({ tools }) => [...tools];
 export const typedName = (name) => name;
 export const reliesOn = () => RELIES_ON;
 export const gateTimeout = () => null;
-export const bundle = () => ({ files: {}, digests: [], sources: { piExtension: EXTENSION, ...UNSLOP } });
+export const bundle = () => ({ files: {}, digests: [], sources: { piExtension: EXTENSION } });
 
 // The tool limit is the built-ins plus the typed tools, which the extension serves.
 export function env({ policy, tools, session }) {
   return {
     MOSAIC_TOOLS: [...policy.tools, ...tools.map((t) => t.name)].join(","),
-    MOSAIC_EXTENSIONS: [EXTENSION, UNSLOP.unslopExtension].join(","),
+    MOSAIC_EXTENSIONS: EXTENSION,
     PI_PROVIDER: session.provider ?? "",
     PI_MODEL: session.model,
     MOSAIC_THINKING: session.thinking,

packages/plugins/tests/harness.test.mjs

@@ -71,11 +71,9 @@ test("row 65 claude-code preflight: a missing credential, then a missing or rela
   assert.equal(claude.preflight({ env: { ...token, MOSAIC_CLAUDE_BIN: bin } }), null);
   assert.equal(claude.preflight({ env: { ...token, PATH: root } }), null);
   assert.equal(claude.version({ env: { MOSAIC_CLAUDE_BIN: bin, PATH: process.env.PATH } }), "2.1.302");
-  // The pinned binary outside /usr is mounted where the adapter looks for it, and the unslop hook's
-  // files where the hook commands name them (row 66).
-  const unslop = ["claude-hook.js", "unslop-check.js", "lists.json"].map(f => [join(REPO, "tools", "unslop-hook", f), undefined]);
-  assert.deepEqual(claude.mounts({ env: { MOSAIC_CLAUDE_BIN: bin } }).map(m => [m.src, m.dest]), [[bin, bin], ...unslop]);
-  assert.deepEqual(claude.mounts({ env: {} }).map(m => [m.src, m.dest]), unslop);
+  // The pinned binary outside /usr is mounted where the adapter looks for it.
+  assert.deepEqual(claude.mounts({ env: { MOSAIC_CLAUDE_BIN: bin } }).map(m => [m.src, m.dest]), [[bin, bin]]);
+  assert.deepEqual(claude.mounts({ env: {} }), []);
 });
 
 // Row 68's claudeVersion precedence, moved here with the version (row 65): the manifest records
@@ -102,8 +100,7 @@ test("row 65 pi preflight passes with the repository's pi, and its version is th
   assert.equal(pi.preflight({ env: {} }), null);
   const pkg = JSON.parse(readFileSync(join(REPO, "package.json"), "utf8"));
   assert.equal(pi.version({ env: {} }), pkg.dependencies?.["@earendil-works/pi-coding-agent"] ?? pkg.devDependencies?.["@earendil-works/pi-coding-agent"]);
-  // Row 66: the unslop extension's files, bound read-only at their own paths.
-  assert.deepEqual(pi.mounts({ env: {} }).map(m => m.dest ?? m.src), [join(REPO, "node_modules"), ...["extension.ts", "unslop-check.js", "lists.json"].map(f => join(REPO, "tools", "unslop-hook", f))]);
+  assert.deepEqual(pi.mounts({ env: {} }).map(m => m.dest), [join(REPO, "node_modules")]);
 });
 
 test("row 65 env passes the thinking level to both adapters, and claude-code's bundle writes its hook and MCP files", async t => {
@@ -111,8 +108,6 @@ test("row 65 env passes the thinking level to both adapters, and claude-code's b
   const session = { provider: "fixture", model: "m", thinking: "high", toolSocket: "/run/tools.sock" };
   const piEnv = pi.env({ policy: { tools: ["read"] }, tools: [{ name: "list_tasks" }], session });
   assert.deepEqual([piEnv.MOSAIC_THINKING, piEnv.PI_MODEL, piEnv.MOSAIC_TOOLS], ["high", "m", "read,list_tasks"]);
-  // Row 66: pi loads the unslop check as its second extension.
-  assert.deepEqual(piEnv.MOSAIC_EXTENSIONS.split(","), [join(REPO, "packages", "harness", "src", "pi-extension.mjs"), join(REPO, "tools", "unslop-hook", "extension.ts")]);
   const dir = scratch(t);
   const written = [];
   const write = (name, text) => { writeFileSync(join(dir, name), text); written.push(name); return [name, "0".repeat(64)]; };
@@ -122,9 +117,6 @@ test("row 65 env passes the thinking level to both adapters, and claude-code's b
   const settings = JSON.parse(readFileSync(join(dir, "settings.json"), "utf8"));
   assert.match(settings.hooks.PreToolUse[0].hooks[0].command, /^timeout -k 2 10 .* \|\| exit 2$/);
   assert.equal(settings.hooks.PreToolUse[0].hooks[0].timeout, 20);
-  // Row 66: the unslop hooks can't block: each command ends with `; exit 0`.
-  assert.match(settings.hooks.Stop[0].hooks[0].command, /^timeout -k 2 10 .*claude-hook\.js' stop; exit 0$/);
-  assert.match(settings.hooks.UserPromptSubmit[0].hooks[0].command, /^timeout -k 2 10 .*claude-hook\.js' prompt; exit 0$/);
   assert.equal(JSON.parse(readFileSync(join(dir, "mcp.json"), "utf8")).mcpServers.mosaic.args.at(-1), "/run/tools.sock");
   const claudeEnv = claude.env({ files: out.files, policy: { tools: ["read"], typed: [] }, session });
   assert.deepEqual([claudeEnv.MOSAIC_THINKING, claudeEnv.MOSAIC_CLAUDE_SETTINGS, claudeEnv.MOSAIC_CLAUDE_MCP_CONFIG], ["high", out.files.settings, out.files.mcp]);

packages/seat/tests/sandbox.test.mjs

@@ -93,12 +93,7 @@ test("row 65 a harness module's mounts bind read-only after the adapter, each wi
   assert.ok(at(join(root, "a.sh")) < at(modules.src) && at(modules.src) < at(join(root, "bus.sock")));
   const fixture = binds({ ...args, harnessMounts: [{ src: join(root, "tool"), why: "a fixture harness's tool" }] });
   assert.deepEqual(fixture.find((b) => b.src === join(root, "tool")), { kind: "ro", src: join(root, "tool"), why: "a fixture harness's tool" });
-  // Row 66 (#1559): pi also mounts the unslop extension's three files, each read-only at its own path.
-  for (const f of ["extension.ts", "unslop-check.js", "lists.json"]) {
-    const src = join(REPO, "tools", "unslop-hook", f);
-    assert.deepEqual(list.find((b) => b.src === src), { kind: "ro", src, why: "the unslop check the session's second extension runs" }, f);
-  }
-  assert.equal(binds(args).length, list.length - 4);
+  assert.equal(binds(args).length, list.length - 1);
 });
 
 // Row 121 (#1615): a thread run gets only its own thread's two directories,

packages/webui/tests/pinned-copy.test.mjs

@@ -33,7 +33,7 @@ function tmp(t, prefix) {
 function fixtureRepo(t) {
   const dir = tmp(t, 'webui-copy-');
   const repo = join(dir, 'repo');
-  const files = execFileSync('git', ['-C', REPO, 'ls-files', '-z', '-co', '--exclude-standard', '--', 'packages', 'scripts', 'roles', 'adapters', 'tools/unslop-hook', 'RELEASE', ':!packages/*/tests', ':!scripts/foundation'], { encoding: 'utf8' }).split('\0').filter(Boolean);
+  const files = execFileSync('git', ['-C', REPO, 'ls-files', '-z', '-co', '--exclude-standard', '--', 'packages', 'scripts', 'roles', 'adapters', 'RELEASE', ':!packages/*/tests', ':!scripts/foundation'], { encoding: 'utf8' }).split('\0').filter(Boolean);
   for (const f of files) if (existsSync(join(REPO, f))) cpSync(join(REPO, f), join(repo, f));
   writeFileSync(join(repo, 'RELEASE'), '0.0.0-fixture\n');
   writeFileSync(join(repo,'package.json'),JSON.stringify({name:'copy-fixture',version:'1.0.0'}));
@@ -72,7 +72,7 @@ test('copy writes the Console paths at the full id, read-only, and leaves an exi
   assert.equal(r.status, 0, r.stderr);
   assert.match(r.stdout, new RegExp(`^copied: ${target}$`, 'm'));
   assert.deepEqual(readdirSync(copies), [head], 'no temp directory left behind');
-  assert.deepEqual(readdirSync(target).sort(), ['RELEASE', 'adapters', 'package-lock.json', 'package.json', 'packages', 'roles', 'scripts', 'tools']);
+  assert.deepEqual(readdirSync(target).sort(), ['RELEASE', 'adapters', 'package-lock.json', 'package.json', 'packages', 'roles', 'scripts']);
   assert.deepEqual(readdirSync(join(target, 'scripts')), ['mosaic', 'mosaic-config.mjs']);
   assert.ok(existsSync(join(target, 'packages', 'webui', 'README.md')), "the unit's Documentation=");
   assert.equal(statSync(join(target, 'packages', 'webui', 'README.md')).mode & 0o222, 0, 'README.md is read-only');

packages/webui/tests/preview.test.mjs

@@ -1,5 +1,3 @@
-import { leasePort } from '../../../scripts/testing/lane-fixtures.mjs';
-import { after as laneAfter } from 'node:test';
 // Row 74 (#1568, lead decision 93): the preview mode. A request for the public name needs the
 // proxy's header equal to the one user id, else 401 with nothing read; in preview mode nothing
 // but GET and HEAD gets through, whatever the Host; loopback requests work as they did. Round 2:
@@ -207,7 +205,8 @@ test('in preview mode every write answers 403 read-only, from the public name an
 });
 
 test('loopback requests are unchanged in preview mode, and the bus views work with the board down', async t => {
-  const dead = `http://127.0.0.1:${await leasePort({after:laneAfter}, {closed:true})}`;
+  const probe = createServer(); await new Promise(r => probe.listen(0, '127.0.0.1', r));
+  const dead = `http://127.0.0.1:${probe.address().port}`; await close(probe);
   const { port, busCalls } = await setup(t, { board: dead, timeout: 200 });
   const loopback = { host: `127.0.0.1:${port}` };
   const inbox = await send(port, { headers: loopback });

packages/webui/tests/proof-cli.test.mjs

@@ -1,5 +1,3 @@
-import { leasePort } from '../../../scripts/testing/lane-fixtures.mjs';
-import { after as laneAfter } from 'node:test';
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import { spawn, spawnSync } from 'node:child_process';
@@ -64,7 +62,8 @@ test('serve argv carries only fixture proof path and header; startup explicitly
 test('CLI applies proof on the main listener and rejects that header on its tester listener', async t => {
   const f = await testerFixture(t), file = join(f.root, 'proof.fixture');
   writeFileSync(file, VALUE, { mode: 0o600 });
-  const testerPort = await leasePort({after:laneAfter}, {closed:true});
+  const free = createServer(); free.listen(0, '127.0.0.1'); await once(free, 'listening');
+  const testerPort = free.address().port; await new Promise(r => free.close(r));
   const child = spawn(process.execPath, [CLI, 'serve', '--port', '0', '--board', 'http://127.0.0.1:9', '--tester-port', String(testerPort), '--business', 'acme', ...PREVIEW, '--proof-header', 'x-console-proof', '--proof-file', file], { env: f.f.env, stdio: ['ignore', 'pipe', 'pipe'] });
   let output = ''; child.stdout.on('data', c => output += c); child.stderr.resume();
   t.after(async () => { if (child.exitCode === null && child.signalCode === null) { child.kill('SIGTERM'); await once(child, 'close'); } });

packages/webui/tests/serve.test.mjs

@@ -1,5 +1,3 @@
-import { leasePort } from '../../../scripts/testing/lane-fixtures.mjs';
-import { after as laneAfter } from 'node:test';
 import { test } from 'node:test';
 import assert from 'node:assert/strict';
 import { createServer, get } from 'node:http';
@@ -99,7 +97,8 @@ test('proxy preserves exact request bytes, status and receipt, rejects forms and
 });
 
 test('unreachable board reports URL; CLI rejects unsupported options', async () => {
-  const url = `http://127.0.0.1:${await leasePort({after:laneAfter}, {closed:true})}`;
+  const probe = createServer(); await new Promise(r => probe.listen(0, '127.0.0.1', r));
+  const url = `http://127.0.0.1:${probe.address().port}`; await close(probe);
   const web = await startServer({ port: 0, board: url, timeout: 100 });
   try {
     const res = await fetch(`http://127.0.0.1:${web.address().port}/api/board`);

packages/webui/tests/service.test.mjs

@@ -1,5 +1,3 @@
-import { leasePort } from '../../../scripts/testing/lane-fixtures.mjs';
-import { after as laneAfter } from 'node:test';
 import { test } from 'node:test';
 import assert from 'node:assert/strict';
 import { spawn } from 'node:child_process';
@@ -47,7 +45,15 @@ function filled(flags, root = REPO) {
 
 // A loopback port with nothing listening, so status's /healthz request
 // reaches no real Console.
-async function closedPort() { return leasePort({after:laneAfter}, {closed:true}); }
+async function closedPort() {
+  const server = createServer();
+  server.listen(0, '127.0.0.1');
+  await once(server, 'listening');
+  const { port } = server.address();
+  server.close();
+  await once(server, 'close');
+  return port;
+}
 
 function tmp(t) {
   const dir = mkdtempSync(join(tmpdir(), 'webui-service-'));

packages/webui/tests/tester-cli.test.mjs

@@ -1,5 +1,3 @@
-import { leasePort } from '../../../scripts/testing/lane-fixtures.mjs';
-import { after as laneAfter } from 'node:test';
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import { createServer } from 'node:net';
@@ -17,7 +15,10 @@ const get = (port, path) => new Promise((resolve, reject) => {
     let text = ''; r.on('data', c => text += c); r.on('end', () => resolve({ status: r.statusCode, body: text }));
   }); q.on('error', reject); q.end();
 });
-async function freePort() { return leasePort({after:laneAfter}, {closed:true}); }
+async function freePort() {
+  const s = createServer(); s.listen(0, '127.0.0.1'); await once(s, 'listening');
+  const port = s.address().port; await new Promise(r => s.close(r)); return port;
+}
 
 test('tester-port validates range tunnel main port and requires configured bus before listening', t => {
   const root = tmp(t, 'tester-cli-invalid-'), f = fixture(root);

scripts/stack-copy.sh

@@ -36,8 +36,6 @@ COPY_PATHS=(
  packages/queue/src packages/library/src
  # Whole directory: every in-repo plug-in module ships with the copy (row 131).
  packages/plugins
- # The unslop check both harness modules mount and list in the bundle (row 66).
- tools/unslop-hook
 )
 # stack-release.sh sources this file and calls reachable before an activate (D1).
 reachable() {

scripts/test-discord.sh

@@ -71,8 +71,6 @@ EOF_PROBE
 mkdir -p "$SANDBOX/toolroot/plans"
 echo "row one" >"$SANDBOX/toolroot/plans/QUEUE.md"
 TOOLS_JSON="{\"roots\":[{\"name\":\"docs\",\"path\":\"$SANDBOX/toolroot\"}],\"maxFileBytes\":4096,\"maxCallsPerTurn\":8}"
-export PI_CODING_AGENT_DIR="$SANDBOX/pi-agent"
-mkdir -p "$PI_CODING_AGENT_DIR"
 PI_COMMON="--mode rpc --no-extensions --no-context-files --no-skills --no-prompt-templates --no-themes --offline --no-session --provider zai --model glm-5.3"
 if [ -x "$PI_BIN" ]; then
     printf '{"type":"get_state","id":"a"}\n' | MOSAIC_DISCORD_TOOLS="$TOOLS_JSON" timeout 60 "$PI_BIN" $PI_COMMON --no-builtin-tools \
@@ -144,14 +142,7 @@ fi
 # A nested `node --test` inherits a parent runner's NODE_TEST_CONTEXT, reports
 # to that runner and exits 0 whatever its tests do, so the suite clears it
 # (#1508 N13). The planted failing test proves a failure still fails here.
-node_tests() {
-    local lane_concurrency=()
-    if [ -n "${MOSAIC_TEST_CONCURRENCY:-}" ]; then
-        [ "$MOSAIC_TEST_CONCURRENCY" = 2 ] || return 2
-        lane_concurrency=(--test-concurrency=2)
-    fi
-    env -u NODE_TEST_CONTEXT node --test "${lane_concurrency[@]}" "$@"
-}
+node_tests() { env -u NODE_TEST_CONTEXT node --test "$@"; }
 mkdir -p "$SANDBOX/planted"
 printf '%s\n' 'import { test } from "node:test";' 'import assert from "node:assert/strict";' 'test("planted failure", () => assert.equal(1, 2));' >"$SANDBOX/planted/planted.test.mjs"
 NODE_TEST_CONTEXT=child-v8 node_tests "$SANDBOX/planted/" >"$SANDBOX/planted.log" 2>&1

scripts/test-foundation.sh

@@ -76,14 +76,7 @@ check "checked-in demo bundles equal a fresh generation" $DEMO_OK
 # A nested `node --test` inherits a parent runner's NODE_TEST_CONTEXT, reports
 # to that runner and exits 0 whatever its tests do, so the suite clears it
 # (#1508 N13). The planted failing test proves a failure still fails here.
-node_tests() {
-    local lane_concurrency=()
-    if [ -n "${MOSAIC_TEST_CONCURRENCY:-}" ]; then
-        [ "$MOSAIC_TEST_CONCURRENCY" = 2 ] || return 2
-        lane_concurrency=(--test-concurrency=2)
-    fi
-    env -u NODE_TEST_CONTEXT node --test "${lane_concurrency[@]}" "$@"
-}
+node_tests() { env -u NODE_TEST_CONTEXT node --test "$@"; }
 mkdir -p "$SANDBOX/planted"
 printf '%s\n' 'import { test } from "node:test";' 'import assert from "node:assert/strict";' 'test("planted failure", () => assert.equal(1, 2));' >"$SANDBOX/planted/planted.test.mjs"
 NODE_TEST_CONTEXT=child-v8 node_tests "$SANDBOX/planted/" >"$SANDBOX/planted.log" 2>&1

scripts/test-queue.sh

@@ -47,12 +47,7 @@ node -e 'const p=require("./packages/queue/package.json"); process.exit(p.depend
 check "packages/queue declares no dependencies" $?
 
 # --- the package tests ---
-lane_concurrency=()
-if [ -n "${MOSAIC_TEST_CONCURRENCY:-}" ]; then
-    [ "$MOSAIC_TEST_CONCURRENCY" = 2 ] || exit 2
-    lane_concurrency=(--test-concurrency=2)
-fi
-env -u NODE_TEST_CONTEXT node --test "${lane_concurrency[@]}" --test-reporter=spec packages/queue/tests/ > "$SANDBOX/tests.log" 2>&1
+env -u NODE_TEST_CONTEXT node --test --test-reporter=spec packages/queue/tests/ > "$SANDBOX/tests.log" 2>&1
 rc=$?
 grep -E '^ℹ (tests|pass|fail) ' "$SANDBOX/tests.log"
 if [ "$rc" != 0 ]; then grep -E '^✖|Error' "$SANDBOX/tests.log" | head -40; fi

scripts/testing/README.md

@@ -1,97 +0,0 @@
-# Gate lanes
-
-This tooling is for Sage's granted test gates on dragon-lin. It does not grant
-itself a slot. A grant reference is an audit field, not an authentication token.
-Until Sage adopts these lanes, the existing shared-slot procedure still applies.
-
-Ask Sage with the lane, candidate SHA and exact command. Get a separate grant
-for image preparation, suites, and the whole-slot paired proof. New state is
-`/mnt/storage/scratch/mosaic-gate-lanes`. Old slot files are untouched.
-
-Invoke the entry from the builder or canonical repository. The --checkout target
-must be a separate clean scratch clone containing identical tooling source:
-
-```bash
-scripts/testing/gate-lane.sh run --lane a --candidate FULL_SHA \
-  --checkout /mnt/storage/scratch/ROW-RUN/wt \
-  --out /mnt/storage/scratch/ROW-RUN/out --grant SAGE_MESSAGE_ID \
-  --image-receipt /mnt/storage/scratch/PREP/image-receipt.json
-```
-
-Each run creates a private root like `/mnt/storage/scratch/ga-ABCDEF` (30 bytes).
-An explicit `--temp-root` must already be private, outside `/tmp`, and no longer
-than 30 UTF-8 bytes after resolving symlinks. The sandbox's own `/tmp` and HOME
-are unchanged. Host HOME stays real. A listener covering loopback port 9, an
-unsafe privileged-port threshold or unreadable host inventory refuses startup.
-
-Lane a leases ports 61000..61127, lane b 61128..61255. Refuse any band overlapping
-the host's current ephemeral range or a live listener. Port-0 fixtures with a
-held server keep using port 0. Never replace the literal dead Board :9 URLs.
-Two Node test files run per lane, including nested shell-suite Node runners.
-
-```bash
-scripts/testing/gate-lane.sh status
-scripts/testing/gate-lane.sh recover --run-id RUN_NONCE --grant SAGE_MESSAGE_ID
-```
-
-Status reports each lane, the image lock, unfinished receipts and unmanaged
-test/landing/build processes as LEGACY BUSY. It prints no command lines or
-environment values. A dead owner with an unfinished receipt is quarantined even
-when flock is free. Recovery takes both lanes and the exclusive image lock.
-Unknown process-group, scope or Docker ownership refuses recovery. Do not remove
-lock files, old receipts, or another run's resources to clear a refusal.
-
-An image receipt records exact COPY input hashes/modes, image ID, release tag,
-base digest and platform. Both concurrent candidates must match those files and
-that same image ID. Rebuilding identical files is not equivalent. Warm gates
-refuse implicit Docker builds/pulls and recheck the ID at each step and the end.
-External same-uid commands can ignore these locks. Sage must exclude other
-builders; this is test coordination, not a security boundary against that uid.
-
-Only under an explicit image-build grant:
-
-```bash
-scripts/testing/gate-lane.sh prepare-image --lane a --candidate FULL_SHA \
-  --checkout /mnt/storage/scratch/ROW-PREP/wt \
-  --out /mnt/storage/scratch/ROW-PREP/out --grant SAGE_MESSAGE_ID
-```
-
-Preparation holds both lanes and the exclusive image lock. Its build log,
-receipt, count and wall time are separate from warm gate timings. The current
-Containerfile uses a mutable FROM tag and apt indexes. A missing base digest
-refuses provenance publication. No credential file is copied or printed.
-
-Run records are immutable JSON files published by link after fsync. Every step
-has a log, UTC/monotonic times, exit code, pass/fail/skip counts and log hash.
-The first failed step stops the gate. Cleanup touches only exact project labels,
-recorded process identities and fixture paths. A process leak fails the gate
-even when cleanup succeeds. Failed logs and temp roots remain for diagnosis.
-A cleanup failure leaves the lane quarantined. GATE_PASSED requires all steps
-and cleanup. Required prerequisite skips fail the run; optional skips remain
-visible and require acceptance review.
-
-Home metadata is evidence only. Assert only on entries attributable to this
-run's nonce or fixture paths. Other sessions normally change ~/.claude, ~/.pi
-and ~/.cache, so there is no global unchanged-home assertion.
-
-The row 197 acceptance packet is `agents/herb/work/queue-197/`: two candidate
-solo baselines followed by three overlapping pairs, lane assignment swapped in
-pair two. Keep later paired results after adoption. Six green gates establish
-the initial acceptance bar, not a reliable estimate of rare flakes.
-
-The preflight unit fixture uses the canonical checkout's existing node_modules
-at `/mnt/storage/src/mosaic-stack/node_modules` through the required plain
-symlink. It does not install dependencies. Unit run roots use the `gt-` prefix;
-real lane roots use `ga-` or `gb-`. Resource helper tests inside a lane lease only
-that lane's band through MOSAIC_GATE_STATE, including their child test files.
-The exhaustion probe temporarily narrows its process-local band to a port it
-already leased, so it never reserves the whole shared band.
-
-`closed` call-site options are accepted for compatibility; every dynamic lease
-reserves an unbound endpoint. Listener fixtures decide when to bind and close.
-Fixture child caches put TMPDIR under `tmp/` next to `jiti/` and `cache/`.
-
-Outside a lane, the resource helper file uses lane a with the shared default
-state `/mnt/storage/scratch/mosaic-gate-lanes`. It leaves stable lock files in
-place. A single-file run therefore respects a live lane-a gate's closed leases.
-Its unrelated-session probe bounds both polling children at five seconds.

scripts/testing/gate-lane.mjs

@@ -1,227 +0,0 @@
-import { createHash } from 'node:crypto';
-import { realpathSync, existsSync, statSync, readdirSync } from 'node:fs';
-import { join, resolve, dirname } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { execFileSync } from 'node:child_process';
-import { shortRoot, checkHost, hostFacts, refuse, within, SCRATCH, identity } from './lane-state.mjs';
-const BUILDER=resolve(dirname(fileURLToPath(import.meta.url)),'../..');
-const git=(root,...args)=>execFileSync('git',['-C',root,...args],{encoding:'utf8',stdio:['ignore','pipe','pipe']}).trim();
-export function validateRun(o){
-  if(!['a','b'].includes(o.lane))refuse('invalid lane');
-  if(typeof o.grant!=='string'||!o.grant.trim())refuse('missing grant reference');
-  for(const key of ['checkout','out','stateRoot'])if(typeof o[key]!=='string'||!o[key])refuse(`missing ${key}`);
-  const tempRoot=shortRoot(o.tempRoot);
-  const checkout=realpathSync(o.checkout);
-  if(checkout===BUILDER||checkout==='/mnt/storage/src/mosaic-stack'||!within(SCRATCH,checkout))refuse('canonical or builder checkout');
-  if(!/^[a-f0-9]{40}$/.test(o.candidate)||git(checkout,'rev-parse','HEAD')!==o.candidate)refuse('wrong candidate SHA');
-  const changed=git(checkout,'status','--porcelain','--untracked-files=normal').split('\n').filter(x=>x&&x!=='?? node_modules');
-  if(changed.length)refuse('dirty checkout');
-  if(!existsSync(join(checkout,'node_modules'))||!statSync(join(checkout,'node_modules')).isDirectory())refuse('missing node_modules');
-  const out=resolve(o.out);if(existsSync(out))refuse('output already exists');
-  if(!within(dirname(checkout),out)||!within(SCRATCH,realpathSync(dirname(out))))refuse('output escapes run scratch');
-  const stateRoot=resolve(o.stateRoot);if(!within(SCRATCH,stateRoot))refuse('state outside scratch');
-  checkHost(o.lane,o.hostFacts??hostFacts());
-  return {...o,tempRoot,checkout,out,stateRoot};
-}
-export function validateTooling(checkout){
-  for(const name of readdirSync(join(BUILDER,'scripts/testing')).filter(n=>/\.(mjs|sh)$/.test(n))){
-    const candidate=join(checkout,'scripts/testing',name),launcher=join(BUILDER,'scripts/testing',name);
-    if(!existsSync(candidate)||!readFileSync(candidate).equals(readFileSync(launcher)))refuse('candidate tooling differs from launcher');
-  }
-}
-export function discoverSteps(checkout,concurrency=2){
-  if(concurrency!==2)refuse('test concurrency must be 2');
-  const steps=[];
-  for(const p of readdirSync(join(checkout,'packages')).sort())if(p!=='queue'&&existsSync(join(checkout,'packages',p,'tests'))&&statSync(join(checkout,'packages',p,'tests')).isDirectory())steps.push({name:`pkg-${p}`,cwd:join(checkout,'packages',p),argv:['node','--test','--test-concurrency=2',...readdirSync(join(checkout,'packages',p,'tests')).filter(n=>n.endsWith('.test.mjs')).sort().map(n=>`tests/${n}`)]});
-  for(const f of readdirSync(join(checkout,'scripts')).sort())if(/^test-.+\.sh$/.test(f)&&statSync(join(checkout,'scripts',f)).isFile())steps.push({name:`script-${f.slice(5,-3)}`,cwd:checkout,argv:['bash',`scripts/${f}`]});
-  return steps;
-}
-
-export async function executeSteps(steps,{out,env,record,onChild=()=>{},signal}){
-  const {openSync,closeSync}=await import('node:fs');const {spawn}=await import('node:child_process');
-  for(const step of steps){
-    if(signal?.aborted)return {rc:130};
-    const begin=performance.now(),startMs=Date.now();const fd=openSync(join(out,`${step.name}.log`),'wx',0o600);
-    // Keep the supervisor private while matching the legacy test environment.
-    const child=spawn('/bin/bash',['-c','umask 022; exec "$@"','gate-step',...step.argv],{cwd:step.cwd,env,detached:true,stdio:['ignore',fd,fd]});closeSync(fd);
-    onChild(child);record({kind:'child',group:child.pid,owner:identity(child.pid)});
-    let escalation;
-    const abort=()=>{try{process.kill(-child.pid,'SIGTERM');}catch{};escalation=setTimeout(()=>{try{process.kill(-child.pid,'SIGKILL');}catch{}},3000);escalation.unref();};
-    signal?.addEventListener('abort',abort,{once:true});
-    const rc=await new Promise(resolve=>{child.once('error',()=>resolve(127));child.once('close',(code,sig)=>resolve(signal?.aborted?130:(code??(sig?128:1))));});
-    clearTimeout(escalation);signal?.removeEventListener('abort',abort);onChild(null);
-    const bytes=readFileSync(join(out,`${step.name}.log`)),text=bytes.toString('utf8');
-    const counts={};for(const name of ['pass','fail','skipped']){const m=text.match(new RegExp('^(?:ℹ |# )'+name+' (\\d+)','m'));if(m)counts[name]=Number(m[1]);}
-    if(counts.pass===undefined){const summaries=[...text.matchAll(/(\d+) passed, (\d+) failed/g)];const last=summaries.at(-1);if(last){counts.pass=Number(last[1]);counts.fail=Number(last[2]);}}
-    const requiredSkips=text.split('\n').filter(line=>/^skip\b/i.test(line)&&/(docker|daemon|sandbox|systemd|credential)/i.test(line));
-    record({kind:'step',name:step.name,startMs,endMs:Date.now(),wallMs:performance.now()-begin,rc,counts,requiredSkips,logSha256:createHash('sha256').update(bytes).digest('hex')});
-    if(rc!==0||requiredSkips.length)return {rc:rc||2};
-  }
-  return {rc:0};
-}
-
-export async function executePinnedSteps(steps,options,{receipt,checkout,inspect,afterStep=()=>{}}){
-  for(const step of steps){
-    verifyImage(receipt,checkout,inspect);
-    const result=await executeSteps([step],options);afterStep(step);
-    if(result.rc){verifyImage(receipt,checkout,inspect);return {...result,imageBuilds:0};}
-  }
-  verifyImage(receipt,checkout,inspect);return {rc:0,imageBuilds:0};
-}
-
-import { mkdirSync, lstatSync, fstatSync, mkdtempSync, writeFileSync, readFileSync, openSync, readlinkSync, rmdirSync } from 'node:fs';
-import { pathToFileURL } from 'node:url';
-import { spawnSync } from 'node:child_process';
-import { status, appendRecord, runRecords, processInventory, sameProcess, nonce } from './lane-state.mjs';
-import { verifyImage, imageFingerprint, inspectImage, prepareImage } from './lane-image.mjs';
-import { cleanupProject } from './lane-docker.mjs';
-import { homeMetadata, attributeEntries, socketInventory } from './lane-evidence.mjs';
-function options(argv){
-  const result={verb:'run',stateRoot:'/mnt/storage/scratch/mosaic-gate-lanes',lane:'a',exclusive:false};
-  const names={'--state-root':'stateRoot','--lane':'lane','--candidate':'candidate','--checkout':'checkout','--out':'out','--temp-root':'tempRoot','--grant':'grant','--image-receipt':'imageReceipt','--run-id':'runId'};
-  const args=[...argv];if(args[0]&&!args[0].startsWith('--'))result.verb=args.shift();
-  if(!['run','status','recover','prepare-image','lock-dir'].includes(result.verb))refuse('unknown verb');
-  while(args.length){const key=args.shift();if(key==='--exclusive'){result.exclusive=true;continue;}if(!names[key]||!args.length)refuse('invalid or missing option');result[names[key]]=args.shift();}
-  return result;
-}
-function stateDirectory(path,create=false){
-  const root=resolve(path);if(!within(SCRATCH,root)||root===SCRATCH)refuse('state must be private scratch');
-  if(create){const parent=realpathSync(dirname(root));if(!within(SCRATCH,parent))refuse('state parent escapes scratch');mkdirSync(root,{recursive:true,mode:0o700});}
-  if(existsSync(root)){const st=lstatSync(root);if(st.isSymbolicLink()||!st.isDirectory()||st.uid!==process.getuid()||(st.mode&0o077))refuse('state is not a private owned directory');
-    for(const n of ['a.lock','b.lock','image.lock'])if(existsSync(join(root,n))&&!lstatSync(join(root,n)).isFile())refuse('lock is not an ordinary file');
-  }
-  return root;
-}
-export function verifyLocks(o){
-  for(const [fd,name] of o.exclusive?[[3,'a.lock'],[4,'b.lock'],[5,'image.lock']]:[[3,`${o.lane}.lock`],[5,'image.lock']]){
-    let opened,path;try{opened=fstatSync(fd);path=lstatSync(join(o.stateRoot,name));}catch{refuse('lock descriptors missing');}
-    if(!opened.isFile()||!path.isFile()||opened.ino!==path.ino||opened.dev!==path.dev||path.uid!==process.getuid())refuse('lock file replaced');
-    // A separate open must fail while our shared/exclusive lock is held.
-    const r=spawnSync('flock',['-n','-x',join(o.stateRoot,name),'true']);if(r.status!==1)refuse('lock descriptor is not locked');
-  }
-}
-export function activeConflicts(o,observations={}){
-  const current=status(o.stateRoot,{...observations,ignoreLocks:o.exclusive?['a','b','image']:[o.lane,'image']});
-  if(current.legacy.length)refuse('LEGACY BUSY: unmanaged gate, test or Docker process');
-  for(const lane of o.exclusive?['a','b']:[o.lane])if(current[lane].state!=='CLEAR')refuse(`${lane} ${current[lane].state}`);
-  for(const r of runRecords(o.stateRoot)){const start=r.records.find(e=>e.kind==='start');if(!r.records.some(e=>['terminal','recovered'].includes(e.kind)&&e.clean)&&start?.checkout===o.checkout)refuse('checkout already owned');}
-}
-export function cleanEnv(o,run,docker){
-  const kept=['PATH','HOME','USER','LOGNAME','SHELL','LANG','LC_ALL','LC_CTYPE','TZ','TERM','XDG_RUNTIME_DIR','DBUS_SESSION_BUS_ADDRESS','DOCKER_HOST','CHROMIUM'];
-  const env=Object.fromEntries(kept.filter(k=>typeof process.env[k]==='string').map(k=>[k,process.env[k]]));
-  Object.assign(env,{TMPDIR:o.tempRoot,TMP:o.tempRoot,TEMP:o.tempRoot,MOSAIC_GATE_LANE:o.lane,MOSAIC_GATE_STATE:o.stateRoot,MOSAIC_TEST_CONCURRENCY:'2',COMPOSE_PROJECT_NAME:run.project,JITI_FS_CACHE:join(o.tempRoot,'jiti'),XDG_CACHE_HOME:join(o.tempRoot,'cache'),MOSAIC_CONFIG:join(o.tempRoot,'missing-config.json'),MOSAIC_GATE_DOCKER_RECORD:join(o.out,'docker.json')});
-  env.PATH=`${join(o.out,'bin')}:${env.PATH??'/usr/bin:/bin'}`;
-  return env;
-}
-function fixtureProcesses(run){
-  const all=processInventory(),ancestors=new Set([process.pid]);let parent=process.pid;
-  while(parent){const p=all.find(p=>p.pid===parent);if(!p||ancestors.has(p.ppid))break;ancestors.add(p.ppid);parent=p.ppid;}
-  return all.filter(p=>{
-    if(ancestors.has(p.pid)||p.state==='Z')return false;
-    let cwd;try{cwd=readlinkSync(`/proc/${p.pid}/cwd`);}catch{}
-    return p.argv.some(a=>typeof a==='string'&&(a===run.tempRoot||a.startsWith(run.tempRoot+'/')))||cwd&&(within(run.tempRoot,cwd)||run.checkout&&within(run.checkout,cwd));
-  });
-}
-async function cleanProcesses(run,record){
-  const before=fixtureProcesses(run);
-  if(run.stateRoot&&run.id){
-    const procs=processInventory(),known=new Set(before.map(p=>p.pid));
-    const {records}=await import('./lane-state.mjs');
-    for(const child of records(join(run.stateRoot,'runs',run.id)).filter(e=>e.kind==='child')){
-      const members=procs.filter(p=>p.group===child.group&&p.state!=='Z');
-      if(members.length&&sameProcess(child.owner,procs.find(p=>p.pid===child.owner?.pid))){
-        try{process.kill(-child.group,'SIGKILL');}catch(e){if(e.code!=='ESRCH')throw e;}
-      }else if(members.some(p=>!known.has(p.pid)))refuse('unproven orphan process-group ownership');
-    }
-  }
-  record({kind:'leftover-processes',objects:before.map(({pid,start,boot})=>({pid,start,boot}))});
-  for(const p of before){if(!sameProcess(p))continue;let raw;try{raw=readFileSync(`/proc/${p.pid}/cgroup`,'utf8');}catch(e){if(e.code==='ENOENT')continue;throw e;}const scope=raw.trim().split('/').find(x=>/^mosaic-chat-[a-z0-9]+\.scope$/.test(x));
-    if(scope){const shown=execFileSync('systemctl',['--user','show',scope,'-p','InvocationID','--value'],{encoding:'utf8'}).trim();if(!/^[a-f0-9]{32}$/.test(shown))refuse('scope identity unknown');record({kind:'scope-cleanup',unit:scope,invocation:shown});execFileSync('systemctl',['--user','kill','--signal=SIGKILL',scope],{stdio:'pipe'});}
-    if(sameProcess(p))try{process.kill(p.pid,'SIGKILL');}catch(e){if(e.code!=='ESRCH')throw e;}
-  }
-  for(let n=0;n<30;n++){if(!fixtureProcesses(run).some(p=>p.state!=='Z'))return before.length===0;await new Promise(r=>setTimeout(r,100));}
-  refuse('owned fixture process remains');
-}
-async function recoverRun(o){
-  if(!o.grant)refuse('missing recovery grant');
-  if(!/^[a-f0-9]{12}$/.test(o.runId??''))refuse('invalid run ID');
-  const r=runRecords(o.stateRoot).find(r=>r.id===o.runId);if(!r)refuse('run not found');
-  const start=r.records.find(x=>x.kind==='start');if(start?.mode==='prepare-image'&&status(o.stateRoot).legacy.length)refuse('image builder still active or unknown');if(!start||sameProcess(start.owner))refuse('run owner live or unknown');
-  if(r.records.some(x=>['terminal','recovered'].includes(x.kind)&&x.clean))refuse('run already clean');
-  shortRoot(start.tempRoot);const record=e=>appendRecord(r.dir,e);
-  const procs=processInventory(),known=new Set(fixtureProcesses(start).map(p=>p.pid));
-  for(const event of r.records.filter(e=>e.kind==='child')){
-    const members=procs.filter(p=>p.group===event.group&&p.state!=='Z');
-    if(members.length&&!sameProcess(event.owner,procs.find(p=>p.pid===event.owner?.pid))&&members.some(p=>!known.has(p.pid)))refuse('orphan process-group ownership unknown');
-    if(members.length&&sameProcess(event.owner)){process.kill(-event.group,'SIGKILL');}
-  }
-  await cleanProcesses(start,record);cleanupProject(start,start.docker);
-  appendRecord(r.dir,{kind:'recovered',clean:true,grant:o.grant,owner:identity()});return {recovered:r.id};
-}
-async function runGate(input){
-  for(const key of ['checkout','out','candidate','grant','imageReceipt'])if(!input[key])refuse(`missing ${key}`);
-  const automatic=!input.tempRoot,tempRoot=input.tempRoot??mkdtempSync(`/mnt/storage/scratch/g${input.lane}-`);
-  let o,receipt,docker;
-  try{
-    o=validateRun({...input,tempRoot});
-    validateTooling(o.checkout);
-    activeConflicts(o);
-    receipt=JSON.parse(readFileSync(o.imageReceipt,'utf8'));verifyImage(receipt,o.checkout);
-    docker=execFileSync('which',['docker'],{encoding:'utf8'}).trim();
-  }catch(e){if(automatic)rmdirSync(tempRoot);throw e;}
-  const id=nonce(),run={kind:'start',id,stateRoot:o.stateRoot,lane:o.lane,exclusive:o.exclusive,owner:identity(),grant:o.grant,candidate:o.candidate,checkout:o.checkout,tempRoot:o.tempRoot,out:o.out,project:`mg197-${o.lane}-${id}`,tag:receipt.tag,imageId:receipt.imageId,docker};
-  const dir=join(o.stateRoot,'runs',id);appendRecord(dir,run);const record=e=>{appendRecord(dir,e);if(e.kind==='step')process.stdout.write(`${e.name} rc=${e.rc} wall_ms=${Math.round(e.wallMs)} pass=${e.counts.pass??'-'} fail=${e.counts.fail??'-'} skipped=${e.counts.skipped??'-'}\n`);};
-  const begin=performance.now(),startMs=Date.now();let rc=1,clean=false,current=null;
-  const aborter=new AbortController();const stop=()=>aborter.abort();for(const signal of ['SIGINT','SIGTERM','SIGHUP'])process.on(signal,stop);
-  try{
-    mkdirSync(o.out,{mode:0o700});mkdirSync(join(o.out,'bin'),{mode:0o700});
-    writeFileSync(join(o.out,'docker.json'),JSON.stringify({...run,docker}),{mode:0o600,flag:'wx'});
-    const guard=join(BUILDER,'scripts/testing/lane-docker.mjs');
-    // Launch the guard directly so it validates every real Docker invocation.
-    writeFileSync(join(o.out,'bin','docker'),`#!/bin/sh\nexec '${process.execPath.replaceAll("'","'\\''")}' '${guard.replaceAll("'","'\\''")}' "$@"\n`,{mode:0o700,flag:'wx'});
-    const steps=discoverSteps(o.checkout);record({kind:'plan',steps});
-    const before=homeMetadata(process.env.HOME);record({kind:'home-before',entries:before});
-    const env=cleanEnv(o,run,docker);
-    const result=await executePinnedSteps(steps,{out:o.out,env,record,onChild:c=>current=c,signal:aborter.signal},{receipt,checkout:o.checkout,afterStep:()=>record({kind:'sockets',entries:socketInventory(o.tempRoot)})});
-    rc=result.rc;
-    const after=homeMetadata(process.env.HOME);record({kind:'home-after',entries:after});
-    const prior=new Map(before.map(e=>[e.path,JSON.stringify(e)]));const changed=after.filter(e=>prior.get(e.path)!==JSON.stringify(e));
-    if(attributeEntries(changed,{...run,nonce:id,fixturePaths:[]}).owned.length)refuse('lane-attributed real HOME write');
-    if(git(o.checkout,'diff','--name-only'))refuse('tracked checkout changed during gate');
-    const noLeaks=await cleanProcesses(run,record);cleanupProject(run,docker);clean=true;if(!noLeaks&&rc===0)rc=1;
-  }catch(e){record({kind:'failure',message:e.message});process.stderr.write(`${e.message}\n`);rc=rc||1;
-    try{await cleanProcesses(run,record);cleanupProject(run,docker);clean=true;}catch(error){record({kind:'cleanup-failed',message:error.message});}
-  }finally{
-    if(current){try{process.kill(-current.pid,'SIGKILL');}catch{}}
-    for(const signal of ['SIGINT','SIGTERM','SIGHUP'])process.off(signal,stop);
-    record({kind:'terminal',clean,rc,startMs,endMs:Date.now(),wallMs:performance.now()-begin,imageBuilds:0});
-  }
-  if(rc===0&&clean)process.stdout.write('GATE_PASSED\n');return rc;
-}
-async function main(argv){
-  const locked=argv[0]==='--locked';if(locked)argv=argv.slice(1);
-  if(argv[0]==='lock-dir'){
-    const o=options(argv.slice(1));if(!o.grant)refuse('missing grant reference');if(!['a','b'].includes(o.lane))refuse('invalid lane');process.stdout.write(stateDirectory(o.stateRoot,true)+'\n');return 0;
-  }
-  const o=options(argv);o.stateRoot=stateDirectory(o.stateRoot);
-  if(o.verb==='status'){process.stdout.write(JSON.stringify(status(o.stateRoot))+'\n');return 0;}
-  if(!locked)refuse('use gate-lane.sh for locked operations');
-  if(['recover','prepare-image'].includes(o.verb))o.exclusive=true;
-  verifyLocks(o);
-  if(o.verb==='recover'){process.stdout.write(JSON.stringify(await recoverRun(o))+'\n');return 0;}
-  if(o.verb==='prepare-image'){
-    for(const key of ['checkout','out','candidate','grant'])if(!o[key])refuse(`missing ${key}`);
-    const checked=validateRun({...o,tempRoot:o.tempRoot??mkdtempSync('/mnt/storage/scratch/ga-')});activeConflicts(checked);
-    const id=nonce(),dir=join(checked.stateRoot,'runs',id),docker=execFileSync('which',['docker'],{encoding:'utf8'}).trim();
-    appendRecord(dir,{kind:'start',mode:'prepare-image',lane:checked.lane,exclusive:true,owner:identity(),grant:checked.grant,candidate:checked.candidate,checkout:checked.checkout,tempRoot:checked.tempRoot,out:checked.out,project:`mg197-${checked.lane}-${id}`,docker});
-    mkdirSync(checked.out,{mode:0o700});
-    try{
-      const receipt=prepareImage(checked.checkout,checked);
-      writeFileSync(join(checked.out,'image-receipt.json'),JSON.stringify(receipt,null,2)+'\n',{mode:0o600,flag:'wx'});
-      appendRecord(dir,{kind:'terminal',clean:true,rc:0,imageId:receipt.imageId,builds:1,wallMs:receipt.buildWallMs});
-      process.stdout.write(JSON.stringify({imageReceipt:join(checked.out,'image-receipt.json'),imageId:receipt.imageId,buildWallMs:receipt.buildWallMs})+'\n');return 0;
-    }catch(e){appendRecord(dir,{kind:'terminal',clean:false,rc:1,message:e.message});throw e;}
-  }
-  return runGate(o);
-}
-if(process.argv[1]&&import.meta.url===pathToFileURL(process.argv[1]).href)main(process.argv.slice(2)).then(rc=>process.exitCode=rc).catch(e=>{process.stderr.write(`${e.message}\n`);process.exitCode=2;});

scripts/testing/gate-lane.sh

@@ -1,26 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-umask 077
-entry="$(cd "$(dirname "$0")" && pwd -P)/gate-lane.mjs"
-verb="${1:-run}"
-if [ "$verb" = status ]; then exec node "$entry" "$@"; fi
-state="$(node "$entry" lock-dir "$@")"
-lane=a
-exclusive=0
-args=("$@")
-for ((i=0;i<${#args[@]};i++)); do
-  case "${args[i]}" in
-    --lane) lane="${args[i+1]:-}" ;;
-    --exclusive) exclusive=1 ;;
-  esac
-done
-case "$verb" in recover|prepare-image) exclusive=1;; esac
-case "$lane" in a|b) ;; *) echo 'gate-lane: refused: invalid lane' >&2; exit 2;; esac
-if [ "$exclusive" = 1 ]; then
-  exec 3>>"$state/a.lock" 4>>"$state/b.lock" 5>>"$state/image.lock"
-  flock -n 3 && flock -n 4 && flock -n -x 5 || { echo 'gate-lane: refused: lane or image lock busy' >&2; exit 2; }
-else
-  exec 3>>"$state/$lane.lock" 5>>"$state/image.lock"
-  flock -n 3 && flock -n -s 5 || { echo 'gate-lane: refused: lane or image lock busy' >&2; exit 2; }
-fi
-exec node "$entry" --locked "$@"

scripts/testing/lane-docker.mjs

@@ -1,60 +0,0 @@
-import { execFileSync, spawnSync } from 'node:child_process';
-import { readFileSync, writeFileSync, linkSync, unlinkSync, openSync, closeSync, fstatSync, constants } from 'node:fs';
-import { join, isAbsolute } from 'node:path';
-import { pathToFileURL } from 'node:url';
-import { refuse, shortRoot, nonce } from './lane-state.mjs';
-function composeFiles(run){
-  if(!/^sha256:[a-f0-9]{64}$/.test(run.imageId??''))refuse('invalid pinned image ID');
-  if(typeof run.checkout!=='string'||!isAbsolute(run.checkout))refuse('invalid candidate checkout');
-  return [join(run.checkout,'compose.yaml'),join(shortRoot(run.tempRoot),'compose-no-build.yaml')];
-}
-export function writeComposeOverride(run){
-  const [,file]=composeFiles(run);
-  const text=`services:\n  mosaic-agent:\n    build: !reset null\n    image: ${JSON.stringify(run.imageId)}\n`;
-  // Publish a complete file without replacing another guard's override.
-  const pending=file+'.'+nonce();
-  try{
-    writeFileSync(pending,text,{mode:0o600,flag:'wx'});
-    try{linkSync(pending,file);}catch(e){if(e.code!=='EEXIST')throw e;}
-  }finally{try{unlinkSync(pending);}catch(e){if(e.code!=='ENOENT')throw e;}}
-  let fd;
-  try{
-    fd=openSync(file,constants.O_RDONLY|constants.O_NOFOLLOW|constants.O_NONBLOCK);
-    const st=fstatSync(fd);
-    if(!st.isFile()||st.uid!==process.getuid()||(st.mode&0o777)!==0o600||st.size!==Buffer.byteLength(text)||readFileSync(fd,'utf8')!==text)
-      refuse('unsafe or changed Compose override');
-  }catch{refuse('unsafe or changed Compose override');}
-  finally{if(fd!==undefined)closeSync(fd);}
-  return file;
-}
-export function guardDocker(argv,run){
-  if(argv[0]==='info'&&argv.length===1)return argv;
-  if(argv[0]==='image'&&argv[1]==='inspect'&&argv[2]===run.tag&&argv.length===3)return argv;
-  if(argv[0]==='compose'&&argv[1]==='run'){
-    const service=argv.indexOf('mosaic-agent',2);
-    if(service<0||argv.slice(2,service).some(a=>!['--rm','-T','--no-deps','--interactive','-i'].includes(a)))refuse('Docker Compose run options not allowed');
-    const [base,override]=composeFiles(run);
-    return ['compose','-f',base,'-f',override,'run','--pull','never','--no-deps',...argv.slice(2)];
-  }
-  refuse('Docker mutation or unowned command');
-}
-export function cleanupProject(run,docker='docker'){
-  if(!/^mg197-[ab]-[a-f0-9]{12}$/.test(run.project))refuse('invalid Docker ownership project');
-  const invoke=typeof docker==='function'?docker:(args)=>execFileSync(docker,args,{encoding:'utf8',stdio:['ignore','pipe','pipe']});
-  const removed=[];
-  for(const [kind,list,filter] of [['container',['ps','-aq'],'com.docker.compose.project'],['network',['network','ls','-q'],'com.docker.compose.project']]){
-    const ids=invoke([...list,'--filter',`label=${filter}=${run.project}`]).trim().split(/\s+/).filter(Boolean);
-    for(const id of ids){if(!/^[a-f0-9]{12,64}$/.test(id))refuse('invalid Docker resource ID');
-      const label=invoke([kind,'inspect',id,'--format',`{{index .${kind==='container'?'Config.':''}Labels "${filter}"}}`]).trim();
-      if(label!==run.project)refuse('foreign Docker resource');
-      invoke(kind==='container'?['container','rm','-f',id]:['network','rm',id]);removed.push({kind,id});
-    }
-    const left=invoke([...list,'--filter',`label=${filter}=${run.project}`]).trim();if(left)refuse('Docker cleanup incomplete');
-  }
-  return {clean:true,removed};
-}
-if(process.argv[1]&&import.meta.url===pathToFileURL(process.argv[1]).href){
-  try{const run=JSON.parse(readFileSync(process.env.MOSAIC_GATE_DOCKER_RECORD,'utf8'));if(process.env.COMPOSE_PROJECT_NAME!==run.project)refuse('Compose project mismatch');
-    const argv=guardDocker(process.argv.slice(2),run);if(argv[0]==='compose')writeComposeOverride(run);const result=spawnSync(run.docker,argv,{stdio:'inherit'});process.exit(result.status??1);
-  }catch(e){process.stderr.write(`${e.message}\n`);process.exit(2);}
-}

scripts/testing/lane-evidence.mjs

@@ -1,37 +0,0 @@
-import { readdirSync, lstatSync, readlinkSync, existsSync } from 'node:fs';
-import { join } from 'node:path';
-import { within, refuse } from './lane-state.mjs';
-export function attributeEntries(metadata,run){
-  const result={owned:[],unrelated:[],unknown:[]};
-  for(const e of metadata){const owns=e.path.includes(run.nonce)||e.link&&within(run.tempRoot,e.link)||(run.fixturePaths??[]).some(path=>within(path,e.path)||e.link&&within(path,e.link));result[owns?'owned':'unrelated'].push(e);}
-  return result;
-}
-export function homeMetadata(home){
-  const out=[];
-  for(const name of ['.claude','.pi','.cache']){
-    const root=join(home,name);if(!existsSync(root))continue;
-    // Two levels are evidence only. Never open or hash file contents.
-    const walk=(dir,depth)=>{for(const d of readdirSync(dir,{withFileTypes:true})){const path=join(dir,d.name);try{const st=lstatSync(path);out.push({path,size:st.size,mtime:st.mtimeMs,mode:st.mode,link:st.isSymbolicLink()?readlinkSync(path):null});if(d.isDirectory()&&depth)walk(path,depth-1);}catch{}}};
-    walk(root,1);
-  }
-  return out;
-}
-export function socketInventory(root){const out=[];const walk=dir=>{for(const d of readdirSync(dir,{withFileTypes:true})){const p=join(dir,d.name);if(d.isDirectory())walk(p);else if(d.isSocket()){const bytes=Buffer.byteLength(p);out.push({path:p,bytes});if(bytes>107)refuse('socket path exceeds 107 bytes');}}};walk(root);return out;}
-export function summarizePairs(solos,pairs){
-  const byCandidate=new Map(solos.map(r=>[r.candidate,r]));
-  if(solos.length!==2||byCandidate.size!==2||solos.some(r=>!Number.isFinite(r.wallMs)||r.wallMs<=0))refuse('solo timing invalid');
-  if(pairs.length!==3)refuse('proof needs three pairs');
-  let first;
-  return pairs.map((pair,index)=>{
-    if(pair.length!==2||pair[0].candidate===pair[1].candidate||new Set(pair.map(r=>r.lane)).size!==2||pair.some(r=>!['a','b'].includes(r.lane)))refuse('pair needs different candidates and lanes');
-    for(const run of pair){
-      if(!run.clean||run.rc!==0||!byCandidate.has(run.candidate))refuse('proof gate failed');
-      if(!Number.isFinite(run.startMs)||!Number.isFinite(run.endMs)||run.endMs<=run.startMs)refuse('paired timing invalid');
-    }
-    if(index===0)first=new Map(pair.map(r=>[r.candidate,r.lane]));
-    if(index===1&&pair.some(r=>first.get(r.candidate)===r.lane))refuse('second pair must swap lanes');
-    if(Math.max(...pair.map(r=>r.startMs))>=Math.min(...pair.map(r=>r.endMs)))refuse('paired gates did not overlap');
-    const makespan=Math.max(...pair.map(r=>r.endMs))-Math.min(...pair.map(r=>r.startMs));
-    return {makespanMs:makespan,runs:pair.map(r=>({candidate:r.candidate,wallMs:r.endMs-r.startMs,slowdown:(r.endMs-r.startMs)/byCandidate.get(r.candidate).wallMs})),throughput:pair.reduce((n,r)=>n+byCandidate.get(r.candidate).wallMs,0)/makespan};
-  });
-}

scripts/testing/lane-fixtures.mjs

@@ -1,33 +0,0 @@
-// Imported only by tests. The port holder lives until the fixture closes.
-import { spawn } from 'node:child_process';
-import { mkdirSync, realpathSync } from 'node:fs';
-import { join } from 'node:path';
-import { createServer } from 'node:net';
-import { once } from 'node:events';
-import { BANDS, within, SCRATCH, refuse } from './lane-state.mjs';
-async function hold(file){
-  const child=spawn('flock',['-n','-E','73',file,'bash','-c','printf "held\\n"; IFS= read -r release'],{stdio:['pipe','pipe','pipe']});
-  let err='';child.stderr.on('data',c=>err+=c);const exited=once(child,'exit');
-  const ok=await new Promise((resolve,reject)=>{child.stdout.once('data',()=>resolve(true));child.once('exit',code=>code===73?resolve(false):reject(Error(`port lock holder exited ${code}: ${err}`)));child.once('error',reject);});
-  if(!ok)return null;
-  return async()=>{child.stdin.end('\n');await exited;};
-}
-async function probe(port){const s=createServer();try{await new Promise((resolve,reject)=>{s.once('error',reject);s.listen(port,'127.0.0.1',resolve);});const found=s.address().port;await new Promise(r=>s.close(r));return found;}catch(e){if(s.listening)await new Promise(r=>s.close(r));if(e.code==='EADDRINUSE')return null;throw e;}}
-export async function leasePort(t,{lane=process.env.MOSAIC_GATE_LANE,stateRoot=process.env.MOSAIC_GATE_STATE}={}){
-  if(!lane){const port=await probe(0);return port;}
-  if(!BANDS[lane]||!stateRoot)refuse('invalid port lane state');
-  const state=realpathSync(stateRoot);if(!within(SCRATCH,state))refuse('port state outside scratch');
-  const dir=join(state,'ports',lane);mkdirSync(dir,{recursive:true,mode:0o700});
-  const [lo,hi]=BANDS[lane];
-  for(let port=lo;port<=hi;port++){
-    const release=await hold(join(dir,`${port}.lock`));if(!release)continue;
-    let actual;try{actual=await probe(port);}catch(e){await release();throw e;}
-    if(!actual){await release();continue;}
-    t.after(release);return port;
-  }
-  refuse('lane port band exhausted');
-}
-export function fixtureCacheEnv(root){
-  mkdirSync(root,{recursive:true,mode:0o700});const dir=realpathSync(root);for(const n of ['tmp','jiti','cache'])mkdirSync(join(dir,n),{recursive:true,mode:0o700});
-  return {TMPDIR:join(dir,'tmp'),JITI_FS_CACHE:join(dir,'jiti'),XDG_CACHE_HOME:join(dir,'cache')};
-}

scripts/testing/lane-image.mjs

@@ -1,44 +0,0 @@
-import { createHash } from 'node:crypto';
-import { readFileSync, readdirSync, lstatSync, writeFileSync } from 'node:fs';
-import { join } from 'node:path';
-import { execFileSync } from 'node:child_process';
-import { refuse } from './lane-state.mjs';
-export function imageFingerprint(checkout){
-  const dockerfile=readFileSync(join(checkout,'Containerfile'),'utf8');
-  const copies=dockerfile.split('\n').filter(l=>/^\s*(COPY|ADD)\s/i.test(l)).map(l=>l.trim());
-  const expected=['COPY package.json package-lock.json ./','COPY contracts /opt/mosaic/contracts','COPY src /opt/mosaic/src','COPY adapters /opt/mosaic/adapters'];
-  if(JSON.stringify(copies)!==JSON.stringify(expected))refuse('image COPY inputs changed; manifest review required');
-  const hash=createHash('sha256');
-  const visit=rel=>{const path=join(checkout,rel),st=lstatSync(path);if(st.isSymbolicLink())refuse('image input is a symlink');hash.update(JSON.stringify([rel,st.mode&0o777,st.isDirectory()?'d':'f'])+'\n');if(st.isDirectory())for(const n of readdirSync(path).sort())visit(`${rel}/${n}`);else if(st.isFile())hash.update(readFileSync(path));else refuse('unsupported image input');};
-  for(const rel of ['Containerfile','package.json','package-lock.json','contracts','src','adapters'])visit(rel);
-  return hash.digest('hex');
-}
-export function inspectImage(tag,docker=process.env.MOSAIC_GATE_REAL_DOCKER??'docker'){
-  return JSON.parse(execFileSync(docker,['image','inspect',tag,'--format','{{json .}}'],{encoding:'utf8',stdio:['ignore','pipe','pipe']}));
-}
-export function verifyImage(receipt,checkout,inspect=inspectImage){
-  if(!receipt||!/^sha256:[a-f0-9]{64}$/.test(receipt.imageId??'')||!/^.+@sha256:[a-f0-9]{64}$/.test(receipt.baseDigest??'')||!/^linux\/[a-z0-9_]+$/.test(receipt.platform??'')||!/^mosaic-poc-agent:[A-Za-z0-9_.-]+$/.test(receipt.tag??''))refuse('image provenance receipt invalid');
-  if(receipt.inputDigest!==imageFingerprint(checkout))refuse('image inputs differ');
-  const actual=inspect(receipt.tag);
-  if(actual.Id!==receipt.imageId)refuse('pinned image ID differs');
-  if(`${actual.Os}/${actual.Architecture}`!==receipt.platform)refuse('image platform differs');
-  const release=readFileSync(join(checkout,'RELEASE'),'utf8').trim();const pkg=JSON.parse(readFileSync(join(checkout,'package.json'),'utf8'));
-  if(pkg.dependencies?.['@earendil-works/pi-coding-agent']&&receipt.tag!==`mosaic-poc-agent:${pkg.dependencies['@earendil-works/pi-coding-agent']}-r${release}`)refuse('image tag differs from release identity');
-  return receipt;
-}
-// Called by the CLI only while both lanes and the image lock are exclusive.
-export function prepareImage(checkout,{grant,tempRoot,out},invoke){
-  if(!grant)refuse('missing image preparation grant');
-  const inputDigest=imageFingerprint(checkout);
-  const pkg=JSON.parse(readFileSync(join(checkout,'package.json'),'utf8'));
-  const release=readFileSync(join(checkout,'RELEASE'),'utf8').trim();
-  if(!/^\d+\.\d+\.\d+$/.test(release))refuse('invalid image release');
-  const tag=`mosaic-poc-agent:${pkg.dependencies['@earendil-works/pi-coding-agent']}-r${release}`;
-  const run=invoke??((args)=>execFileSync('docker',args,{cwd:checkout,encoding:'utf8',stdio:['ignore','pipe','pipe'],env:{PATH:process.env.PATH,HOME:process.env.HOME,...(process.env.DOCKER_HOST?{DOCKER_HOST:process.env.DOCKER_HOST}:{}),COMPOSE_PROJECT_NAME:'mg197-image-prepare',MOSAIC_IMAGE_TAG:tag,MOSAIC_DATA_ROOT:join(tempRoot,'data'),MOSAIC_PROVIDER:'fixture',MOSAIC_MODEL:'fixture',PI_AUTH_FILE:'/dev/null'}}));
-  const start=performance.now();let buildOutput;try{buildOutput=run(['compose','build']);}catch(e){if(out)writeFileSync(join(out,'image-build.log'),String(e.stdout??'')+String(e.stderr??''),{mode:0o600,flag:'wx'});throw e;}if(out)writeFileSync(join(out,'image-build.log'),buildOutput,{mode:0o600,flag:'wx'});const buildWallMs=performance.now()-start;
-  if(inputDigest!==imageFingerprint(checkout))refuse('image inputs changed while building');
-  const actual=JSON.parse(run(['image','inspect',tag,'--format','{{json .}}']));
-  const base=JSON.parse(run(['image','inspect','node:24-bookworm-slim','--format','{{json .}}']));
-  const receipt={inputDigest,imageId:actual.Id,tag,baseDigest:base.RepoDigests?.find(x=>/@sha256:[a-f0-9]{64}$/.test(x)),platform:`${actual.Os}/${actual.Architecture}`,grant,builds:1,buildWallMs,at:new Date().toISOString()};
-  verifyImage(receipt,checkout,()=>actual);return receipt;
-}

scripts/testing/lane-state.mjs

@@ -1,77 +0,0 @@
-// Scratch-only lane ownership. No live Mosaic state is read or written.
-import { realpathSync, statSync, lstatSync, existsSync, readdirSync, readFileSync, mkdirSync, openSync, writeSync, fsyncSync, closeSync, linkSync, unlinkSync, renameSync } from 'node:fs';
-import { resolve, join, dirname, relative, isAbsolute } from 'node:path';
-import { execFileSync, spawnSync } from 'node:child_process';
-import { randomBytes } from 'node:crypto';
-export const SCRATCH='/mnt/storage/scratch';
-export const BANDS={a:[61000,61127],b:[61128,61255]};
-export function refuse(message){throw new Error(`gate-lane: refused: ${message}`);}
-export function within(root,path){const r=relative(root,path);return r===''||(!r.startsWith('..')&&!isAbsolute(r));}
-export function shortRoot(path){
-  let real;try{real=realpathSync(path);}catch{refuse('temporary root missing');}
-  if(real==='/tmp'||real.startsWith('/tmp/'))refuse('temporary root under /tmp');
-  if(Buffer.byteLength(real)>30)refuse('temporary root exceeds 30 bytes');
-  if(!within(SCRATCH,real)||!statSync(real).isDirectory()||statSync(real).uid!==process.getuid()||(statSync(real).mode&0o077))refuse('temporary root must be private owned scratch');
-  return real;
-}
-export function socketPath(path){if(Buffer.byteLength(path)>107)refuse('socket path exceeds 107 bytes');return path;}
-export function hostFacts(){
-  const range=readFileSync('/proc/sys/net/ipv4/ip_local_port_range','utf8').trim().split(/\s+/).map(Number);
-  const unprivilegedPortStart=Number(readFileSync('/proc/sys/net/ipv4/ip_unprivileged_port_start','utf8').trim());
-  const text=execFileSync('ss',['-Hltn'],{encoding:'utf8'});
-  const listeners=text.trim().split('\n').filter(Boolean).map(line=>{const field=line.trim().split(/\s+/)[3];const m=field?.match(/^(.*):(\d+)$/);if(!m)refuse('unreadable listener inventory');return {address:m[1].replace(/^\[|\]$/g,''),port:Number(m[2])};});
-  return {ephemeral:range,unprivilegedPortStart,listeners};
-}
-export function checkHost(lane,facts){
-  if(!facts||!Array.isArray(facts.listeners)||facts.ephemeral?.length!==2||!facts.ephemeral.every(Number.isInteger))refuse('host inventory unavailable');
-  if(!Number.isInteger(facts.unprivilegedPortStart)||facts.unprivilegedPortStart<=9)refuse('unprivileged port range includes port 9');
-  if(facts.listeners.some(x=>x.port===9&&['127.0.0.1','0.0.0.0','*','::','::ffff:127.0.0.1'].includes(x.address.replace(/%[^%]+$/, ''))))refuse('live port 9 listener');
-  const [lo,hi]=BANDS[lane];const [first,last]=facts.ephemeral;
-  if(lo<=last&&hi>=first)refuse('lane port band overlaps ephemeral range');
-  if(facts.listeners.some(x=>x.port>=lo&&x.port<=hi))refuse('lane port band has a live listener');
-}
-export function identity(pid=process.pid){try{const s=readFileSync(`/proc/${pid}/stat`,'utf8');const f=s.slice(s.lastIndexOf(')')+2).split(' ');return {pid:Number(pid),start:f[19],boot:readFileSync('/proc/sys/kernel/random/boot_id','utf8').trim(),state:f[0]};}catch{return null;}}
-export function sameProcess(a,b=identity(a?.pid)){return !!a&&!!b&&a.pid===b.pid&&a.start===b.start&&a.boot===b.boot&&b.state!=='Z';}
-export function nonce(){return randomBytes(6).toString('hex');}
-export function appendRecord(dir,record){
-  const publishedDir=dir;if(record.kind==='start'){if(existsSync(dir))refuse('run already exists');dir=dir+'.starting';}
-  mkdirSync(dir,{recursive:true,mode:0o700});
-  const file=join(dir,`${Date.now()}-${nonce()}-${record.kind}.json`);
-  const pending=file+'.pending',fd=openSync(pending,'wx',0o600);try{writeSync(fd,JSON.stringify({...record,at:new Date().toISOString()})+'\n');fsyncSync(fd);}finally{closeSync(fd);}
-  linkSync(pending,file);unlinkSync(pending);if(record.kind==='start')renameSync(dir,publishedDir);return join(publishedDir,file.split('/').at(-1));
-}
-export function records(dir){if(!existsSync(dir))return [];return readdirSync(dir).filter(n=>n.endsWith('.json')).sort().map(n=>{try{return JSON.parse(readFileSync(join(dir,n),'utf8'));}catch{refuse(`invalid run receipt ${n}`);}});}
-export function runRecords(stateRoot){
-  const runs=join(stateRoot,'runs');if(!existsSync(runs))return [];
-  return readdirSync(runs).filter(id=>!id.endsWith('.starting')).map(id=>({id,dir:join(runs,id),records:records(join(runs,id))}));
-}
-export function processInventory(){
-  const out=[];
-  for(const pid of readdirSync('/proc').filter(n=>/^\d+$/.test(n))){try{const argv=readFileSync(`/proc/${pid}/cmdline`,'utf8').split('\0').filter(Boolean);const raw=readFileSync(`/proc/${pid}/stat`,'utf8');const f=raw.slice(raw.lastIndexOf(')')+2).split(' ');out.push({...identity(Number(pid)),ppid:Number(f[1]),group:Number(f[2]),argv});}catch{}}
-  return out;
-}
-export function status(stateRoot,observations={}){
-  const procs=observations.processes??processInventory();const runs=runRecords(stateRoot);
-  const answer={a:{state:'CLEAR'},b:{state:'CLEAR'},image:'free',legacy:[],at:new Date().toISOString()};
-  const owned=new Set();
-  for(const run of runs){const start=run.records.find(x=>x.kind==='start');if(!start)refuse('run receipt has no start');const clean=run.records.some(x=>['terminal','recovered'].includes(x.kind)&&x.clean===true);
-    if(clean)continue;
-    const live=procs.find(p=>sameProcess(start.owner,p));const state=live?'BUSY':'QUARANTINED';
-    for(const lane of start.exclusive?['a','b']:[start.lane]){if(!BANDS[lane])refuse('invalid lane receipt');answer[lane]={state,run:run.id};}
-    answer.image=start.exclusive?'exclusive':'shared';
-    if(live){owned.add(live.pid);let changed=true;while(changed){changed=false;for(const p of procs)if(owned.has(p.ppid)&&!owned.has(p.pid)){owned.add(p.pid);changed=true;}}}
-  }
-  for(const p of procs){if(p.state==='Z'||p.pid===process.pid||owned.has(p.pid))continue;
-    const args=p.argv??[];const executable=args[0]?.split('/').at(-1);
-    const test=(executable==='node'&&args.includes('--test'))||args.some(a=>/^(?:.*\/)?(?:gate\.sh|test-[a-z-]+\.sh)$/.test(a))||(executable==='docker'&&(args.includes('compose')||args.includes('build')))||args.some(a=>a.endsWith('/landing.mjs')&&args.includes('gate'))||args.some(a=>/(?:^|\/)[^/]*mutant[^/]*\.(?:mjs|py|sh)$/.test(a));
-    if(test)answer.legacy.push({pid:p.pid,start:p.start});
-  }
-  for(const lane of ['a','b','image']){
-    if(observations.ignoreLocks?.includes(lane)||!existsSync(join(stateRoot,`${lane}.lock`)))continue;
-    const lock=lstatSync(join(stateRoot,`${lane}.lock`));if(!lock.isFile())refuse('lock is not an ordinary file');
-    const probe=spawnSync('flock',['-n','-x',join(stateRoot,`${lane}.lock`),'true']);
-    if(probe.status!==0&&probe.status!==1)refuse('cannot inspect lane lock');
-    if(probe.status===1){if(lane==='image')answer.image=answer.image==='free'?'held':answer.image;else if(answer[lane].state==='CLEAR')answer[lane]={state:'BUSY',run:null};}
-  }
-  return answer;
-}

tools/unslop-hook/README.md

@@ -1,7 +1,6 @@
 # unslop-hook
 
-Mechanical AI-tell enforcement for pi seats and for managed sessions on
-both harnesses (row 66, #1559). Anti-drift gate for the writing
+Mechanical AI-tell enforcement for pi seats. Anti-drift gate for the writing
 standard in SYSTEM.md / ms-unslop: prose distribution alone decays over long
 sessions; this check cannot forget.
 
@@ -19,9 +18,7 @@ sessions; this check cannot forget.
   never a clean verdict).
 - `extension.ts`: pi extension. `message_end` checks finalized assistant text
   and notifies the operator (TUI/RPC). `before_agent_start` reads the most
-  recent assistant reply from the session file (walking `getBranch()` from
-  its end: pi returns the branch root first, and before row 66 the walk
-  read the session's first reply every turn) and, if it carries tells,
+  recent assistant reply from the session file and, if it carries tells,
   injects a correction notice the model sees on its next turn. `/unslop`
   reports session stats. Violation state lives in the session file, so the
   injection path survives restart, resume, fork, and reload (an in-memory
@@ -29,17 +26,6 @@ sessions; this check cannot forget.
   broken lists.json fails closed: checks stop, `broken_lists` /
   `skipped_broken` events log the reason, operator notified once, seat keeps
   running.
-- `claude-hook.js`: the same check for Claude Code (row 66). A managed
-  session's `settings.json` runs it twice: `stop` checks each assistant
-  message of the turn from the transcript and logs `checked` or `flagged`,
-  and `prompt` (UserPromptSubmit) prints the extension's correction notice
-  as `additionalContext` when the last reply had tells, once per reply.
-  Claude Code writes one transcript line per content block, so adjacent
-  lines with one message id are one reply, keyed by the first line's uuid.
-  A broken lists.json logs `broken_lists` and checks nothing; any other
-  fault logs `hook_failed`. It always exits 0 and never blocks.
-- Each finding carries `source`, its entry's pattern id in lists.json
-  (`ms-unslop:7`), so the counts can be read per pattern.
 - `test-unslop-check.js`: unit tests with red and green controls.
 
 ## Use
@@ -58,15 +44,6 @@ events (loaded / flagged / notice_injected / checked / broken_lists /
 skipped_broken) for headless evidence. `UNSLOP_LISTS=<path>` overrides the
 lists.json location for both CLI and extension.
 
-In a managed session the runner sets `MOSAIC_UNSLOP_LOG` to
-`<run>/unslop.jsonl`, reads it after each turn and adds a short note
-to the next reply the session sends, which `mosaic talk` and `mosaic follow`
-print. A broken check is told there once a run. `unslopCounts()` in
-`packages/harness/src/runner.mjs` reads the counts after the session ends.
-The session environment's allowlist doesn't pass `MOSAIC_UNSLOP_HOOK` or
-`UNSLOP_LISTS`, so a managed session can't turn the check off or swap its
-lists.
-
 ## Verified here (2026-08-19)
 
 - Unit suite 24/24 (8 behavioral, 11 loader/CLI, 5 review follow-up), red and
@@ -83,18 +60,6 @@ lists.
   full TUI trial (notify line, injection, /unslop stats) on session vision-unslop.
 - Log evidence in session scratchpad.
 
-## Verified here (2026-10-20, row 66)
-
-- Unit suite 28/28: the `source` field, `replies()` grouping, the Claude
-  Code hook's stop and prompt paths, its off switch, a broken lists.json at
-  stop and at prompt, and bad hook input (`hook_failed`, exit 0).
-- Managed sessions on both harnesses against the test API
-  (`packages/harness/tests/pi-session.test.mjs`, `claude-session.test.mjs`):
-  a reply with a tell gets the notice on the next turn, a clean reply gets
-  none, the operator note rides the next reply, a broken lists.json fails
-  closed with the session still answering, and the counts read back after
-  the session ends.
-
 ## Limits
 
 - `/unslop` command not tested headless (print mode has no command surface);
@@ -107,15 +72,7 @@ lists.
   does not revive checks until the seat restarts. Acceptable for an advisory
   gate (review S1).
 - The fail-closed operator notification requires a UI. Print-mode sessions
-  log `skipped_broken` but notify nobody (review S2). Managed sessions are
-  the exception: the runner tells the operator in the next reply (row 66).
-- In a managed session the log sits in the run directory, which the session
-  can write. The counts are the session's own report, not host evidence.
-- The extension's per-reply dedupe is in memory. After a restart the same
-  reply can get a second notice.
-- On the first turn of a new Claude Code session the transcript may not
-  hold the reply when Stop runs; the hook then checks
-  `last_assistant_message` and logs an empty `entryId`.
+  log `skipped_broken` but notify nobody (review S2).
 - The word/phrase lists are the mechanical subset of ms-unslop only, keyed to
   pattern ids in lists.json. Style judgments (voice, rhythm, structure) stay in
   the skill, not the gate.
@@ -123,6 +80,4 @@ lists.
 ## Promotion path
 
 Stack issue (A4): checker shared as the single source for a matching Claude
-Code Stop-hook script; lists versioned beside SYSTEM.md contract text. Row 66
-did the first part: `claude-hook.js` runs the same checker and lists.
-Blocking a reply (Q84 option B) is a later decision.
+Code Stop-hook script; lists versioned beside SYSTEM.md contract text.

tools/unslop-hook/claude-hook.js

@@ -1,141 +0,0 @@
-#!/usr/bin/env node
-"use strict";
-// unslop-hook for Claude Code: the managed-session counterpart of extension.ts (row 66, #1559).
-// Two hooks in a managed session's settings.json run it (packages/plugins/harness/claude-code),
-// and neither blocks: the script always exits 0 and prints nothing on Stop.
-//
-//   node claude-hook.js stop     Stop hook. Checks each assistant message with text since the
-//                                turn's prompt and logs checked or flagged for each.
-//   node claude-hook.js prompt   UserPromptSubmit hook. Checks the last assistant reply with text
-//                                and, when it has tells, prints the correction notice as
-//                                additionalContext, once per reply.
-//
-// Both read the hook input on stdin and the transcript it names. Events go to MOSAIC_UNSLOP_LOG in
-// the extension's shapes (checked, flagged, notice_injected, broken_lists), so the runner reads one
-// log for either harness and tells the operator. A broken lists.json logs broken_lists and checks
-// nothing; there is never a clean verdict without the lists.
-// Off: MOSAIC_UNSLOP_HOOK=0. Lists: UNSLOP_LISTS=<path>, as for the checker.
-//
-// The notice text is the extension's, word for word.
-
-const fs = require("node:fs");
-const { checkText } = require("./unslop-check.js");
-
-const LOG = process.env.MOSAIC_UNSLOP_LOG;
-const log = (ev) => {
-  if (!LOG) return;
-  try { fs.appendFileSync(LOG, JSON.stringify({ ts: Date.now(), ...ev }) + "\n"); } catch {}
-};
-
-function entries(path) {
-  let raw;
-  try { raw = fs.readFileSync(path, "utf8"); } catch { return []; }
-  const out = [];
-  for (const line of raw.split("\n")) {
-    if (!line.trim()) continue;
-    try { out.push(JSON.parse(line)); } catch {}
-  }
-  return out.filter((e) => e && typeof e === "object" && !e.isSidechain);
-}
-
-const textOf = (content) => {
-  if (typeof content === "string") return content;
-  if (!Array.isArray(content)) return "";
-  return content.filter((b) => b && b.type === "text" && typeof b.text === "string").map((b) => b.text).join("\n");
-};
-// A prompt is a user entry that isn't only tool results.
-const isPrompt = (e) => e.type === "user" && e.message?.role === "user"
-  && !(Array.isArray(e.message.content) && e.message.content.length > 0 && e.message.content.every((b) => b?.type === "tool_result"));
-
-// The assistant messages with text, in order. Claude Code writes one transcript line per content
-// block, so adjacent lines that share a message id are one message. Its id is its first line's
-// uuid: a message id alone can repeat across messages (a test API answers one id for all).
-function replies(list) {
-  const out = [];
-  let last = null;
-  for (const e of list) {
-    if (e.type !== "assistant" || e.message?.role !== "assistant") {
-      last = null;
-      continue;
-    }
-    const msg = e.message.id ?? null;
-    if (!last || msg === null || last.msg !== msg) out.push((last = { msg, id: e.uuid ?? msg ?? "", texts: [] }));
-    const text = textOf(e.message.content);
-    if (text.trim()) last.texts.push(text);
-  }
-  return out.filter((r) => r.texts.length).map((r) => ({ id: r.id, text: r.texts.join("\n") }));
-}
-
-// checkText, or null after logging why there is no verdict.
-function check(text, at) {
-  try {
-    return checkText(text);
-  } catch (e) {
-    const reason = String(e?.message ?? e);
-    log({ ev: reason.startsWith("lists.json invalid") ? "broken_lists" : "hook_failed", reason, at });
-    return null;
-  }
-}
-
-function stop(input) {
-  const list = entries(input.transcript_path);
-  let start = -1;
-  list.forEach((e, i) => { if (isPrompt(e)) start = i; });
-  const turn = replies(list.slice(start + 1));
-  if (!turn.length && typeof input.last_assistant_message === "string" && input.last_assistant_message.trim()) {
-    turn.push({ id: "", text: input.last_assistant_message });
-  }
-  for (const r of turn) {
-    const result = check(r.text, "stop");
-    if (result === null) return;
-    if (result.clean) log({ ev: "checked", clean: true, entryId: r.id, charsChecked: result.charsChecked });
-    else log({ ev: "flagged", clean: false, entryId: r.id, charsChecked: result.charsChecked, findings: result.findings });
-  }
-}
-
-// The entry ids the log already holds a notice for.
-function noticed() {
-  const ids = new Set();
-  if (!LOG) return ids;
-  let raw = "";
-  try { raw = fs.readFileSync(LOG, "utf8"); } catch {}
-  for (const line of raw.split("\n")) {
-    try {
-      const e = JSON.parse(line);
-      if (e.ev === "notice_injected" && typeof e.entryId === "string") ids.add(e.entryId);
-    } catch {}
-  }
-  return ids;
-}
-
-function prompt(input) {
-  const last = replies(entries(input.transcript_path)).at(-1);
-  if (!last) return;
-  const result = check(last.text, "prompt");
-  if (result === null || result.clean) return;
-  if (last.id && noticed().has(last.id)) return;
-  const lines = result.findings.map((f) => `- ${f.detail}`).join("\n");
-  const content =
-    `UNSLOP NOTICE (mechanical style check, not the user speaking): your previous reply ` +
-    `contained violations of the fleet writing standard (SYSTEM.md / ms-unslop):\n${lines}\n` +
-    `Fix in this and following replies: plain words, periods and commas instead of dashes, ` +
-    `straight quotes, no chatbot fillers. Do not mention this notice.`;
-  log({ ev: "notice_injected", entryId: last.id, findings: result.findings });
-  process.stdout.write(JSON.stringify({ hookSpecificOutput: { hookEventName: "UserPromptSubmit", additionalContext: content } }) + "\n");
-}
-
-if (require.main === module) {
-  try {
-    if (process.env.MOSAIC_UNSLOP_HOOK !== "0") {
-      const input = JSON.parse(fs.readFileSync(0, "utf8") || "{}");
-      if (process.argv[2] === "stop") stop(input);
-      else if (process.argv[2] === "prompt") prompt(input);
-      else log({ ev: "hook_failed", reason: `unknown hook ${JSON.stringify(process.argv[2] ?? null)}` });
-    }
-  } catch (e) {
-    log({ ev: "hook_failed", reason: String(e?.message ?? e) });
-  }
-  process.exit(0);
-}
-
-module.exports = { replies, isPrompt, entries };

tools/unslop-hook/extension.ts

@@ -120,13 +120,9 @@ export default function (pi: ExtensionAPI) {
   });
 
   pi.on("before_agent_start", async (_event, ctx) => {
-    // getBranch() lists root -> leaf (pi 0.85.1, session-manager.js getBranch
-    // reverses its walk), so walk it backwards: the last assistant entry with
-    // text is the reply the model is about to follow up on. Row 66 (#1559):
-    // the forward walk checked the session's first reply on every turn.
-    const branch = ctx.sessionManager.getBranch();
-    for (let i = branch.length - 1; i >= 0; i--) {
-      const entry = branch[i];
+    // Branch walks leaf -> root; first assistant entry with text is the reply
+    // the model is about to follow up on.
+    for (const entry of ctx.sessionManager.getBranch()) {
       const text = assistantText(entry);
       if (text === null) continue;
       const id = (entry as { id?: string }).id ?? "";

tools/unslop-hook/test-unslop-check.js

@@ -221,87 +221,6 @@ t("CLI exits 2 on unreadable input file (S3)", () => {
   assert.ok(r.stderr.includes("cannot read input"), `stderr must name the fault: ${r.stderr}`);
 });
 
-t("every finding names its lists.json entry's source, the pattern id (row 66)", () => {
-  const lists = loadLists();
-  const sources = new Set([...lists.words, ...lists.phrases, ...lists.punct, ...lists.patterns].map((e) => e.source));
-  const r = checkText(SLOP + "\nIt's not just fast, but cheap.");
-  for (const rule of ["word", "phrase", "punct", "pattern"]) assert.ok(r.findings.some((f) => f.rule === rule), `no ${rule} finding: ${JSON.stringify(r.findings)}`);
-  for (const f of r.findings) assert.ok(sources.has(f.source), `finding without a known source: ${JSON.stringify(f)}`);
-  assert.strictEqual(r.findings.find((f) => f.detail.includes("delve")).source, "ms-unslop:7");
-});
-
-// ── Row 66 (#1559): claude-hook.js, the Claude Code side ───────────────
-// The session tests (packages/harness/tests/claude-session.test.mjs) run it under real claude;
-// these pin its parts without one.
-
-const HOOK = path.join(__dirname, "claude-hook.js");
-const { replies } = require("./claude-hook.js");
-const line = (type, id, uuid, content) => ({ type, uuid, message: { id, role: type, content } });
-
-t("claude-hook replies(): adjacent lines of one message join, a repeated message id later is a new reply", () => {
-  const r = replies([
-    line("assistant", "m1", "u1", [{ type: "text", text: "one" }]),
-    line("assistant", "m1", "u2", [{ type: "tool_use", id: "x", name: "Read", input: {} }]),
-    line("user", undefined, "u3", [{ type: "tool_result", tool_use_id: "x", content: "ok" }]),
-    line("assistant", "m1", "u4", [{ type: "text", text: "two" }]),
-    line("assistant", "m1", "u5", [{ type: "text", text: "three" }]),
-    line("assistant", "m2", "u6", [{ type: "tool_use", id: "y", name: "Read", input: {} }]),
-  ]);
-  assert.deepStrictEqual(r, [{ id: "u1", text: "one" }, { id: "u4", text: "two\nthree" }]);
-});
-
-function hook(which, input, env = {}) {
-  return spawnSync(process.execPath, [HOOK, which], { input: typeof input === "string" ? input : JSON.stringify(input), encoding: "utf8", env: { PATH: process.env.PATH, ...env } });
-}
-const events = (f) => (fs.existsSync(f) ? fs.readFileSync(f, "utf8").trim().split("\n").filter(Boolean).map((l) => JSON.parse(l)) : []);
-
-t("claude-hook: Stop logs the turn's reply flagged with pattern ids, the next prompt gets the notice once, and both exit 0", () => {
-  const transcript = writeTmp("transcript.jsonl", [
-    { type: "user", uuid: "p1", message: { role: "user", content: "status?" } },
-    line("assistant", "m1", "a1", [{ type: "text", text: "Let me delve into it. A pivotal step." }]),
-  ].map((x) => JSON.stringify(x)).join("\n") + "\n");
-  const log = tmp("hook-log.jsonl");
-  const stop = hook("stop", { transcript_path: transcript }, { MOSAIC_UNSLOP_LOG: log });
-  assert.strictEqual(stop.status, 0, stop.stderr);
-  assert.strictEqual(stop.stdout, "");
-  const [flagged] = events(log);
-  assert.strictEqual(flagged.ev, "flagged");
-  assert.strictEqual(flagged.entryId, "a1");
-  assert.deepStrictEqual(flagged.findings.map((f) => f.source), ["ms-unslop:7", "ms-unslop:7"]);
-  const first = hook("prompt", { transcript_path: transcript }, { MOSAIC_UNSLOP_LOG: log });
-  assert.strictEqual(first.status, 0, first.stderr);
-  const out = JSON.parse(first.stdout).hookSpecificOutput;
-  assert.strictEqual(out.hookEventName, "UserPromptSubmit");
-  assert.ok(out.additionalContext.startsWith("UNSLOP NOTICE (mechanical style check, not the user speaking)"), out.additionalContext);
-  assert.ok(out.additionalContext.includes('banned word "delve" x1'), out.additionalContext);
-  const again = hook("prompt", { transcript_path: transcript }, { MOSAIC_UNSLOP_LOG: log });
-  assert.strictEqual(again.status, 0);
-  assert.strictEqual(again.stdout, "", "one notice per reply");
-  assert.deepStrictEqual(events(log).map((e) => e.ev), ["flagged", "notice_injected"]);
-  // Off: nothing logged, nothing printed.
-  const off = tmp("hook-off.jsonl");
-  const quiet = hook("prompt", { transcript_path: transcript }, { MOSAIC_UNSLOP_LOG: off, MOSAIC_UNSLOP_HOOK: "0" });
-  assert.strictEqual(quiet.status, 0);
-  assert.strictEqual(quiet.stdout, "");
-  assert.ok(!fs.existsSync(off));
-});
-
-t("claude-hook: a broken lists.json logs broken_lists and no verdict; bad input logs hook_failed; both exit 0", () => {
-  const transcript = writeTmp("transcript-clean.jsonl", JSON.stringify(line("assistant", "m1", "a1", [{ type: "text", text: "The build is green." }])) + "\n");
-  const log = tmp("hook-broken.jsonl");
-  for (const which of ["stop", "prompt"]) {
-    const r = hook(which, { transcript_path: transcript }, { MOSAIC_UNSLOP_LOG: log, UNSLOP_LISTS: writeTmp("hook-empty.json", "") });
-    assert.strictEqual(r.status, 0, r.stderr);
-    assert.strictEqual(r.stdout, "");
-  }
-  assert.deepStrictEqual(events(log).map((e) => [e.ev, e.at]), [["broken_lists", "stop"], ["broken_lists", "prompt"]]);
-  assert.ok(events(log).every((e) => /^lists\.json invalid: empty file/.test(e.reason)));
-  const bad = tmp("hook-bad.jsonl");
-  const r = hook("stop", "{not json", { MOSAIC_UNSLOP_LOG: bad });
-  assert.strictEqual(r.status, 0);
-  assert.deepStrictEqual(events(bad).map((e) => e.ev), ["hook_failed"]);
-});
-
 let failed = 0;
 for (const [name, ok] of results) { console.log(`${ok ? "PASS" : "FAIL"} ${name}`); if (!ok) failed++; }
 console.log(`${results.length - failed}/${results.length} passed`);

tools/unslop-hook/unslop-check.js

@@ -19,9 +19,6 @@
 // Provenance note (2026-08-19): the inline lists this file carried before C1
 // moved to lists.json unchanged — 16 words, 17 phrases, 3 punct rules, 1 pattern.
 // The suite pins those counts; a list edit without a test edit is a drift signal.
-//
-// Row 66 (#1559): each finding carries its entry's source, the pattern id, so a managed
-// session's unslop.jsonl can count the ids a reply hit.
 
 const fs = require("node:fs");
 const path = require("node:path");
@@ -128,12 +125,12 @@ function checkText(raw) {
   for (const w of lists.words) {
     const re = new RegExp("\\b" + escapeRegex(w.value) + "\\b", "gi");
     const count = (text.match(re) || []).length;
-    if (count > 0) findings.push({ rule: "word", source: w.source, detail: `banned word "${w.value}" x${count}`, count });
+    if (count > 0) findings.push({ rule: "word", detail: `banned word "${w.value}" x${count}`, count });
   }
 
   for (const p of lists.phrases) {
     const count = phraseHay.split(p.value).length - 1;
-    if (count > 0) findings.push({ rule: "phrase", source: p.source, detail: `phrase "${p.value}" x${count}`, count });
+    if (count > 0) findings.push({ rule: "phrase", detail: `phrase "${p.value}" x${count}`, count });
   }
 
   // Density-gated punctuation. The deliberate divergence from SYSTEM.md's
@@ -143,14 +140,14 @@ function checkText(raw) {
     for (const ch of pc.chars) count += text.split(ch).length - 1;
     if (count < lists.thresholds.punctMinCount) continue;
     if (count / Math.max(text.length, 1) * 1000 < lists.thresholds.punctDensityPer1k) continue;
-    findings.push({ rule: "punct", source: pc.source, detail: `${pc.label} x${count} (density-gated)`, count });
+    findings.push({ rule: "punct", detail: `${pc.label} x${count} (density-gated)`, count });
   }
 
   for (const pt of lists.patterns) {
     const flags = pt.flags.includes("g") ? pt.flags : pt.flags + "g";
     const m = text.match(new RegExp(pt.regex, flags));
     const count = m ? m.length : 0;
-    if (count > 0) findings.push({ rule: "pattern", source: pt.source, detail: `"${pt.detail}" x${count}`, count });
+    if (count > 0) findings.push({ rule: "pattern", detail: `"${pt.detail}" x${count}`, count });
   }
 
   return { clean: findings.length === 0, findings, charsChecked: text.length };