row224: record static rebase and pending gate (unrun)

row224: pace failed inline sync attempts (unrun)
row224: draft broker library lookups and typed tools (unrun)
2026-10-24 12:08:56 -05:00 · 2026-10-24 12:08:24 -05:00 · 2026-10-24 12:08:24 -05:00 · 2026-10-24 11:22:36 -05:00 · 2026-10-24 11:15:02 -05:00 · 2026-10-24 10:55:31 -05:00
158 changed files with 24328 additions and 243 deletions
@@ -5532,3 +5532,25 @@ claim. Receipts and limitations in agents/lena/work/queue-296/BUILD.md and run-r
 - 2026-10-24 (rockerduck, row286 / #1791 r6, sage-4112 / #1825): corrected only two fixture constants to unique19-character values after the landing secrets check refused r5. No waiver/guard/assertion/product change. Added-package-lines secrets grep empty; touched6/6+24/24, library151/151, bus981/981 on fresh shortTMP timeout-k10; both exact new values absent from all four outputs. Mutants not rerun as directed. Plain evidence in agents/rockerduck/work/queue-286/BUILD.md and gate-r6; new manifest/push and round3 follow.

 2026-10-24T14:37:02Z | Sage | Row 286 (#1791, C2-03b, Rockerduck on Codex, Boyd and Dewey) LANDED 5d7801dc1. Before: refactor at d55944edb. After: r6 candidate 75f6d56b1's 19 commits cherry-picked onto d55944edb. The one conflict (64f1ff950, BUILD-LOG.md and SESSIONS.md) is append-only and kept both sides, with 0 lines removed against either parent. Apart from the logs, the tree equals the candidate except on the 6 paths of my doc commit d55944edb. Reviews: round 2 (r5 ec8cb10c0) Boyd c31584 rev 3928, Dewey c31585 rev 3929; round 3 (r6) Boyd c31587 rev 3942, Dewey c31588 rev 3943. Sage posted the requests (c31583, c31586) because Rockerduck has no token. Gate GREEN on r5's tree e9c73ab96 at 14:14:11Z, then the push stopped at push-check STOP secrets. The guard came in today with #1825. Two added fixture constants (SLOT_TOKEN in library-credential.test.mjs, SEAT_TOKEN in sync.test.mjs) were 31 characters and matched its token-assignment pattern. sage-4112: no waiver (mos-1570) and no guard edit; r6 shortened only those two values to 19 characters, with reviewers confirming the delta. Gate GREEN again on 5d7801dc1 at 14:36:42Z with its own npm ci: 17 package suites, 4251 tests, 0 fail, 1 skip, which is the allowed FED R7 entry whose runner passed 1/1. All 12 scripts/test-*.sh rc 0. Neither old nor new fixture values appear in any of the 29 run outputs. Mutants: Rockerduck killed P1, P2 and B285-M1 (gitea-grant X-G1). For Dewey's N1 I also ran B285-M1 against library-credential.test.mjs; T7 and T9 failed (4/6) and passed after the restore. sage-4100 (chief grant seeded as fixture until C2-21) is recorded in the 285 entry. Overlap sweep found no in-review row on the 9 code paths. push-check FF_OK, NO_BINARY, SECRETS_CLEAN, NO_ATTRIBUTION. #1791 closed with c31591. No P19 task names row 286, so there is no Vikunja task to close. Brief template gains a sage-4112 line: test credentials stay under 24 characters. The live stack is not re-pinned.
+
+2026-10-24T14:55:11Z | Sage | Row 290 (#1795, C2-12b, the setup sheet rewrite, Louie on Codex, Webby) LANDED 3d7dff345. Before: refactor at 18334d713. After: Louie's r2 candidate 22510988d (four doc commits on 963303403) cherry-picked onto 18334d713. The commits match by patch-id and range-diff, and docs/case2/SETUP-SHEET.md is blob 37b451c6, the text Webby approved in rounds 2-3 (42b75e484) and again on the rebase (round 4, webby/reviews 0006f03f4). Sage posted the request (c31595, revs 3952-3953) because Louie has no token; Webby's verdict is c31596, recorded at rev 3954. Gate from the brief, doc only: a grep of packages/*/tests, scripts/test-*.sh and tests/ for SETUP-SHEET finds nothing, and a positive-control grep does find matches. Louie checked that the sheet's two setting names match broker.mjs:5341. No suite ran: no test reads the file (decision 137), so the mos-1455 all-suites gate, which covers code rows, doesn't apply, and Fethry's slot for row 225 stays untouched. push-check FF_OK, SECRETS_CLEAN, NO_ATTRIBUTION. #1795 closed with c31597. No P19 task names row 290. The live stack is not re-pinned.
+2026-10-23 | Fethry | Row 225 C2-10b (#1726), handoff recovery. Before: Morgana's untested candidate 9a131e956 replaces renderItems with renderReply and adds Console citation/notice/status rendering and status/revert routes. Continuing that exact history on fethry/row225; preserving A1-A5 and the accepted file deviations. Remaining: confirm limits contract, review/test candidate under Sage CLEAR, obtain Mos OK through Sage for inherited old-test changes, manifest and Dewey review. No Node/tests run in this session and no green claim.
+
+2026-10-23 | Fethry | Row 225 T1 lane A (sage-3641/3647). Before: nested replyLimits fallback/problem omitted, wrong-project revert receipt accepted, invalid library mapping hidden. After RED: these three local behaviors corrected; three assertions in the new handoff test files corrected against existing route/mapping/Boolean behavior, each explained in BUILD.md. Whole-file GREEN: renderer 9/0, routes 13/0, browser 9/0; full library 81/0, channel-proof 2/0. Approved old-test numstats remain 80/66 and 3/1. Full webui/build and full integration gate have not run. Isolated mutants next within the authorized 19:38Z hard stop; no completion claim.
+
+2026-10-23 | Fethry | Row 225 T1 expanded evidence complete (sage-3647). Full library81/0 and channel-proof2/0; final targeted renderer9/0, routes13/0, browser9/0. Isolated kit14/14 assertion kills on507901277, every target restored/hash-checked, candidate hashes unchanged. First attempt stopped at a wait-based failure, recorded as not killed; corrected the new test's repaint wait, baseline9/0, and reran the whole kit. No processes left; lane A returned around19:29Z. Source manifest for Dewey prepared; full webui/build and Sage's integration/scripts gate still pending. Raw logs preserved in scratch, normalized display copies and raw SHA256 provenance in agent evidence.
+
+2026-10-23 | Fethry | Row225 review follow-up (dewey-0937/0939, sage-3669). Before: a notice-shaped checked agent body could misrepresent another agent's real commit/path, and a403 owner-only lacking sent looked uncertain. Regression browser cases and two isolated mutants authored first; corrected own BUILD.md's forgery explanation and stated Sage's accepted pre217 no-check residual. No production change or Node/test run yet. Existing renderer tests, including the unchecked notice case, stay exactly at Mos1510's80/66; channel-proof stays3/1. RED/GREEN and full webui wait for explicit T3 CLEAR after217; no broker marker or row288 change.
+
+2026-10-24 | Fethry | Row225 round2 resumed under sage4119/4120. Before: reviewed source94128f73f had blocking checked-message notice forgery and a misleading owner-only refusal; prepared tests7590cf633 awaited the slot. Rebased onto963303403 on new fethry/row225-r2 preserving sharing/chatGrants, upstream exports and both log histories; approved test deltas remain80/66 and3/1 with the combined bus pin. Queue start rev3946; local root/webui npm ci, no canonical dependency links. New browser RED8/3 then GREEN11/0 after only B1/N1 fixes. Editor build unchanged; whole webui442/0 and library149/0 (no skip/cancel); bus gate in progress. No old-test edit or second RED; full results and isolated-mutant evidence follow.
+
+2026-10-24 | Fethry | Row225 round2 worktree gate and review correction complete on sourcec010dfd85 over963303403. B1/N1 RED8/3→GREEN11/0. Local editor build unchanged; webui442/0, library149/0, bus981/0, whole channel-proof2/0, all zero skips/cancels. Isolated16 unique clean assertion kills (14 originals+B1+N1); one M3 missing-file attempt timed out during a status after-hook, was not counted, was reported to Sage before any change, and passed unchanged retry with the remaining9.17 attempts total, timeout retained. Per-mutant restored hashes and final13 pins verified; scratch Node/Chromium sweep zero, no signals. New fethry/row225-r2 preserves original published branch, approved old tests80/66 and3/1, all landed sharing/exports/log histories. MANIFEST.r2.md and manifest.r2.sha256 to Dewey; source review/lead integration remain separate, no live action.
+- 2026-10-24 — steelbeak — #1792 / row 287 C2-21 before: library grants still fork; creative and chief grants refuse. Recovered Megavolt's binding design on 18334d713 and documented current-code delta in agents/steelbeak/work/queue-287/BUILD.md. No tests or implementation yet; Sage holds test clearance, scope delta reported in steelbeak-0001.
+
+- 2026-10-24 — steelbeak — #1792 / row 287 C2-21 after: library grants use admin collaborator PUT, creative write/chief read levels, definition scopes, exact publish-wide reach and kind/level binding; business fence and chief install identity/publish updated; T7/T9 seeds replaced by real minting. Scratch Gitea F-A/F-B pass, F-C owner control negative recorded, F-D normal/force control positive. Verified bus 998, business 283, CLI 989 plus dedicated FED 1 (one expected CLI skip), Docker 2, install 27, all 12 shell gates, M1-M11 killed and restored; token audit hits0 and owned-process/container cleanup clean. Test fixture corrections approved under mos-1590/sage-4139; non-executable land-work launcher rc126 resolved by sage-4141 bash invocation. Evidence and manifest at agents/steelbeak/work/queue-287/; handing off to Boyd, then Dewey, with no live change or landing.
+
+- 2026-10-24 — steelbeak — #1792 / row 287 first-review correction, boyd-0034: frozen candidate c2338ed58 approved, no blocking code findings. Product/test diff-check is clean; the full committed diff has trailing whitespace in preserved raw RED/mutant logs, correcting the earlier unqualified claim. Added verified old-test numstats in BUILD.md as a separate doc-only follow-up under lead137. Queue round1 opened at rev3963; automatic request failed at rev3964 for missing Steelbeak credential, reported to Sage without workaround. No product edits, tests or slot use.
+
+2026-10-24T15:55:22Z | Sage | Row 225 (#1726, C2-10b, Fethry on Codex, Dewey) LANDED 9b6345466. Before: refactor at c63801959. After: Fethry's r2 candidate c1f9dfd3c (11 commits on 963303403) cherry-picked onto c63801959. 8 commits are equal by range-diff; the other 3 differ only in the append-only log hunks, kept both sides with 0 lines removed against either parent. All 13 manifest paths match manifest.r2.sha256 (517af41b). Dewey APPROVE c31599 rev 3960; request c31600 revs 3961-3962, posted by Sage because Fethry has no token. Sage gate GREEN 15:54:58Z with its own npm ci and MOSAIC_REQUIRE_EDITOR_BUILD=1: every package suite except queue 0 fail (webui 442, library 149, bus 981, cli 988 plus the allow-listed FED R7 skip, whose runner passed 1/1), all 12 scripts rc 0. The excluded M3 timeout attempt was not counted; the unchanged retry killed cleanly. Dewey N1-N3 non-blocking: the Discord relay must pass check once it calls renderReply; the M3 hang was in the new status test's after-hook teardown; the pre-217 residual stands under sage-3669. #1726 closed c31604. Not re-pinned.
+
+2026-10-24T16:12:35Z | Sage | Row 287 (#1792, C2-21, Steelbeak on Codex, Boyd and Dewey) LANDED 0e935776e. Before: refactor at 9b6345466. After: Steelbeak's c2338ed58 and doc follow-up a5370b198 cherry-picked onto 9b6345466. One commit equal by range-diff, the other differs only in log hunks, kept both sides. 56 manifest paths match 3683b40a. Boyd APPROVE c31602 rev 3967, Dewey APPROVE c31603 rev 3968; request c31601 revs 3965-3966 posted by Sage. Sage gate GREEN 16:11:38Z: bus 998 (Gitea Docker F-A/F-B and X-G3, minted 4, hits 0), business 283, webui 442, cli 989 plus the allowed FED R7 skip, every other suite 0 fail, all 12 scripts rc 0; fixture credential values in 0 of 29 run files with a positive control. Rulings applied: sage-4125 (library grants mint declared scopes, chief read), mos-1590 (new-test fixture fixes are the lead's call when no production code or old test changes and every fail-closed refusal keeps its own test), sage-4139 (fixture fixes) and sage-4141 (test-land-work.sh is mode 100644, run via bash). Follow-up: F-C negative, a protected Story/** rule refuses the owner too; binds the first row that needs owner pushes to a protected branch. Dewey N1-N3 non-blocking: the block's last line "can write every repository this user can write" contradicts the chief's read grant; a collaborator entry outlives a failed step 5, which still fails closed; #publishFacts would accept a library project, unreachable today. Closes Dewey's 286 r2 N2 (T7/T9 real mint). #1792 closed c31606. Not re-pinned.
@@ -0,0 +1,204 @@
+# Row 224 — C2-05b broker lookups and typed tools (#1725)
+
+Owner: Della; reviewer: Dewey. Assignment sage-2795; scope extension sage-2804.
+Base: `4f3fbc25a` (Researcher C2-05a). Branch: `della/row224`.
+Brief: C2-05b in `docs/plans/2026-10-20_case2-rows.md` at `aca16404c`
+and `51cc0445c`; design section 3, 5.3 M3 and 7.2; C2-05a BUILD rulings.
+
+## Execution boundary and progress
+
+Code/docs and local Git only while row 253 holds the gate. No Node (including
+syntax checks), HTTPS Git, queue claim, test or push until Sage's CLEAR.
+Tests are written first; their RED/GREEN runs are deferred, not claimed.
+Queue next is deferred too: its executable uses Node. Sage assigned this row
+explicitly. After 253 and 216 land, rebase under a new branch name.
+
+- Pre-flight: query.mjs consumes `{repo,commit,mapping}`; broker cannot import
+  Git/filesystem library code because it is in the sandbox import closure.
+  Runtime injects the host lookup adapter; existing human file/status/sync stay.
+- Pre-flight: resolved has no project list and a library is never a checkout.
+  Bundle needs an explicit library flag from launcher business configuration.
+- M3 reading: exact creative base is five lookups plus send_message; retain
+  explicitly granted broker web_search/web_fetch for research/companion under
+  landed C2-08 and sage-2804. No generic spec, task, evidence or decision tools. Residual (mos-1308): those
+  reads lack broker action checks; their typed-tool absence is the only fence
+  for creative roles. M1/M2 deny bash; broker-side refusal is outside this row.
+  Mos confirmed this interpretation in mos-1308; design wording fix belongs to Gosalyn. Other definitions retain their current tools.
+- Multi-library businesses use an optional project ID; omit it only with one
+  configured library. Universe is required for all five tools, including get.
+- Missing library uses the brief's `library-not-configured`; argument errors
+  reuse `invalid-request` and C2-05a query codes. No new action or authority.
+
+## Manifest (draft code, unrun)
+
+- bus/src/broker.mjs: five lookup verbs, strict args, holder/business rechecks.
+- bus/src/runtime.mjs: host lookup adapter, stale-before-read sync, served pin.
+- harness/src/tools.mjs: five schemas; creative exact-set filtering.
+- harness/src/bundle.mjs: library flag forwarded to typedTools.
+- cli/src/launcher.mjs: one flag derived from trusted business projects.
+- bus/tests/library-lookups.test.mjs: real query/broker/socket/runtime cases.
+- harness/tests/library-tools.test.mjs: schemas, role snapshots, bundle parity.
+- cli/tests/thread-launch.test.mjs: flag reaches a real launched bundle with no library checkout.
+- agents/della/work/queue-224/BUILD.md: manifest, rulings and deferred verification ledger.
+
+## Verification ledger
+
+No test or syntax-check run yet. Acceptance requires full bus/cli/harness suites
+and every scripts/test-*.sh on Sage's gate; focused files and affected CLI/
+seat import-closure tests precede that only in an authorized CLEAR.
+
+## Coordination
+
+Huey272 reports no runtime/bundle/launcher overlap. Rocko219 changes launcher
+THREAD_DEFINITIONS checks only, separate from our buildBundle flag argument.
+The launcher argument is required: bundle cannot derive library presence from
+checkout IDs (a library has no agent clone). No role, authority or config schema
+changes; library project entries are already validated and protected by M9.
+
+## Mount and pin impact (inspection only)
+
+No new imports in broker.mjs or tools.mjs; no RUNNER_FILES or sandbox mount
+addition. runtime.mjs is host-only and already imports library index.mjs.
+Bundle forwards only a boolean, never a root/mapping/slot/credential. The
+existing import-closure tests are bus/tests/project-runtime.test.mjs and
+seat/tests/sandbox.test.mjs. Grep found no literal sha256 pin for runtime.mjs
+or bundle.mjs; bundle tests derive current source digests through SOURCES.
+Library sources remain in the existing whole-directory release copy.
+
+## Runs to schedule only after CLEAR
+
+Set TMPDIR=/mnt/storage/scratch/tmp. Focused new bus/harness files first,
+then existing library.test.mjs, library-sync.test.mjs, project-runtime.test.mjs,
+harness creative/tools/spec-tools/bundle files and affected CLI launch tests.
+Follow with the required whole bus/cli/harness suites and Sage's full shell gate.
+No timing claim yet: use the repository/Sage per-file limits and record every
+command, outcome, elapsed time and timeout before acceptance. No focused skip
+or pattern run substitutes for whole-file gate evidence.
+
+## Read-through findings and residuals
+
+- Library get requires universe although the older design table omitted it;
+  section 3 isolation rule and C2-05a's accepted API are binding.
+- Query type enum matches mapping.TYPES (five values); manuscript is a distinct
+  lookup and not a find type. Unknown host-path/commit/business/accept fields
+  are refused; explicit project is restricted to this business's library list.
+- Async reads recheck the live holder and current project revision. A stale
+  read attempts sync, then takes the new served snapshot; a returned fetch
+  failure/divergence keeps serving the old pin. Busy sync uses the current pin.
+  Unreadable state, no served commit or unsafe configuration refuse. Query
+  and sync never hold a SQLite transaction over await.
+- Processing halt refuses new agent lookup work and rechecks before returning
+  async results. Existing human library file/status/sync behavior is unchanged.
+- Timer sync and reads still use C2-03a's 60-second contract. No timer tuning or
+  resource-limit schema is introduced by this row. Q222 creative reply settings
+  are in C2-06; no reply guard or writing capability is implemented here.
+- The generic tool socket's existing 60-second client timeout can precede the
+  server's 120-second Git timeout. This row does not change the generic timeout;
+  a timed-out lookup is read-only and retryable, never a write/outcome claim.
+- All tests are authored but unrun. No RED, GREEN, syntax, runtime performance,
+  sandbox, broker/harness suite, shell gate, claim or push evidence exists yet.
+
+## Candidate review checklist (read-through only)
+
+- [x] Five verbs mapped to real C2-05a methods, all require universe.
+- [x] Default sole library or explicit owned project; no caller repo/commit.
+- [x] Human-only file/status/sync gates kept; lookup holder rechecked.
+- [x] Async socket dispatch includes lookup verbs through LIBRARY_VERBS.
+- [x] Stale/unknown fetch syncs first; results use current immutable served pin.
+- [x] Six/eight creative names per mos-1308; other roles retain their tools.
+- [x] Launcher -> bundle -> typedTools passes presence without a library clone.
+- [x] No imports added to sandbox source closure; no mount change.
+- [ ] Execute new tests, RED characterization, full files/suites after CLEAR.
+- [ ] Rebase after rows 253/216 land, under a new branch name.
+- [ ] Claim/push only in Sage-authorized gap; Dewey review and Sage gate.
+
+Candidate preservation commits are explicitly unrun under sage-2795; they are
+not completion, green-suite or landing claims. No dependencies installed.
+
+Correction: the first committed-range diff --check found a blank line at EOF
+in the new library-tools test, missed while it was untracked. Removed in a
+follow-up local commit; the complete range must be checked again. No tests ran.
+
+## Shared-log receipts for Sage (sage-2815)
+
+The shared logs are unchanged from the base in this row. Sage appends these
+receipts in the landing sweep; they are preserved here, not in the manifest.
+
+For `BUILD-LOG.md`:
+
+```text
+2026-10-22T16:36:30Z | Della row224 C2-05b #1725 preparation | Before: C2-05a queries exist at 4f3fbc25a but no broker lookup verbs or typed tools. Scope: broker/tools plus Sage-authorized runtime/bundle integration, tests and docs. Existing human-only library reads retained; five agent queries require a live holder and trusted configured source. Code/docs only under row253 gate; no Node/test/push/claim. Runtime ownership coordinated with Rocko219/Huey272.
+```
+
+For `docs/SESSIONS.md`:
+
+```text
+2026-10-22T16:36:30Z | Della (sage-2795 / sage-2804, Q220) | Row 224 C2-05b #1725, della/row224 base 4f3fbc25a | Read both pinned briefs and C2-05a source; preparing broker/typed tools and authorized host runtime/bundle seams. No queue command, Node, HTTPS Git, claim, test or push during Gander gate. Dewey reviewer; Rocko/Huey runtime coordination sent. Tests and integration verification deferred to CLEAR.
+```
+
+Local-only draft pins 19c0a7adf/7cf39c390 are superseded by the
+log-free candidate. Saved as local branch della/row224-draft-with-logs before
+rebuilding the unpublished candidate commit; no remote history changed.
+
+## Dewey dewey-0852 and Sage sage-2819 — focused corrections
+
+B1: inline freshness uses max(lastFetch, lastError.at), not lastFetch alone.
+An error within 60 seconds counts as a recent attempt, so later lookups serve
+the old served pin without another fetch. Keep inline sync: the brief requires
+it and businesses without timed libraries have no sync timer. The extended
+failed-fetch test makes reads at +1, +59,999 and +60,000 ms (one attempt total),
+then +60,001 ms (second attempt). All reads must return the old commit.
+
+Required mutant M-B1: remove lastError.at from recentAttempt. The repeated
+reads must fail the attempted-count assertion. This mutant has NOT been run.
+
+Residual (Sage will defer): the first inline fetch in each outage window can
+still exceed the tool timeout (60 seconds, or the runner broker client’s
+30 seconds). Bounding that fetch is out of scope for 224. Subsequent reads
+are paced by persisted lastError.at. No claim of first-read outage latency.
+
+N1: whole bus, cli and harness suites are required, plus the shell gate.
+If the new thread-launch integration test skips due to sandboxProblem(),
+name the skip; a skip is not launcher integration proof.
+N2: cli/tests/thread-launch.test.mjs now depends on library/tests/helpers.mjs
+mappingEntry() and library/tests/fixtures/mapping.json. Changes to that fixture
+must rerun the CLI launch file.
+N3: harness/tests/library-tools.test.mjs compares the type enum to mapping.mjs
+TYPES, so adding a mapped type cannot silently leave the typed tool behind.
+
+These edits are local code/docs only. No Node, RED/GREEN run, mutant, claim,
+HTTPS Git or push. New local pin goes to Dewey/Mos/Sage for focused review.
+
+## sage-4163 — row224-r2 static rebase, 2026-10-24
+
+New isolated worktree: `/mnt/storage/scratch/della-row224-r2`.
+Branch `della/row224-r2`, base refactor `487500a16f4ab5902c318509fdec6acc56a543ca`.
+Only the two row-owned commits were cherry-picked, in order:
+`38e322ea0` -> `327073400`; `23816cf28` -> `e138b2c55`.
+No old prerequisite commits were copied into this series. Rows 216 and 217
+are now upstream. Row 266 remains a landing dependency: rebase on its landing
+when Sage announces it. No broker hunk touches room.read or its hydration.
+
+One content conflict: the footer of cli/tests/thread-launch.test.mjs. Kept
+both upstream C2-09a test bodies and every assertion, followed by our unchanged
+C2-05b launched-bundle test. No test was removed or weakened. Range-diff shows
+only that context relocation and the upstream sandbox workspace expression
+beside launcher's added library flag. The B1 commit is patch-identical.
+
+B1 answer: e138b2c55 retains max(lastFetch, lastError.at), the repeated-read
+regression and M-B1 specification. Dewey already checked the original fix at
+23816cf28 in dewey-0853; it still needs executed mutant and gate evidence.
+N2 dependency also includes harness/tests/library-tools.test.mjs importing
+library/src/mapping.mjs TYPES; changes there must rerun that harness file.
+
+Static checks: complete-range git diff --check clean; nine manifest paths.
+Scanned packages/*/tests for every changed basename alongside literal 64-hex
+hashes (three lines on either side): no matching hash pins. Broker and tools
+add no imports; no RUNNER_FILES or sandbox mount changes.
+No Node, syntax check, test, mutant, install or build was run. The historical
+verification ledger above records the original preparation, not current gate
+permission. Under sage-4163 the required gate is Dewey's manifest approval,
+whole bus and harness suites, plus every scripts/test-*.sh on Sage's gate;
+record every skip. Tests and mutants wait for Sage's explicit CLEAR. Static
+Git and pushing this new branch are authorized now. Shared logs remain
+unchanged; Sage owns their append-only landing receipts.
@@ -0,0 +1,473 @@
+# Row 225 (C2-10b) Console chat: replies, citations, write notices, status line
+
+Owner: Morgana, from sage-3582 (18:53Z 10-23). Base: origin/refactor 45dca69f6. Branch: morgana/row225.
+Brief: docs/plans/2026-10-20_case2-rows.md, C2-10b. Design: agents/gosalyn/work/case2/DESIGN.md 7.4,
+5.2 (the reply schema and the check result) and the write notice and `library.revert` (about line 286).
+
+## Ruling on the dependency gap (sage-3591)
+
+225 builds against the design contracts. `renderReply` stays pure, and the caller supplies the answers
+it can't know. The revert route proxies to the bus verb and shows the refusal code until the verb
+exists. Landing order: 225 lands after 217 (C2-06), not after 288 (C2-02). Sage adds `after 217` to
+row 225. Before 288 lands, the Revert button gets the bus's refusal and shows its code, as the brief
+allows.
+
+## A1. The check result I assume (to 217, Launchpad)
+
+The broker stores one check result with each agent-to-human message the guard passes. The Console reads
+it on the message row that `/api/chat/threads/<id>/messages` returns, under the key `check`:
+
+```json
+{
+  "check": {
+    "citations": [
+      { "scope": "canon", "agent": null },
+      { "scope": "supporting", "agent": "acme/scribe" },
+      { "scope": "web", "agent": null }
+    ]
+  }
+}
+```
+
+- `check` is `null` or absent on a message the guard didn't check: a human's message, a free-text reply,
+  a notice, or a message from before 217.
+- `check.citations` has one entry per entry of the body's `citations`, in the same order.
+- `scope` is one of `canon`, `playground`, `supporting` and `web`. A url cite is `web`.
+- `agent` is the `Mosaic-Agent` trailer value, `<business>/<instance>`, from
+  `git log -1 --format=%(trailers:key=Mosaic-Agent,valueonly) <commit> -- <path>`, or `null` when the
+  file's last commit at `commit` carries none. A url cite has `agent: null`. The Console shows the
+  agent-written label when `agent` is a nonempty string, and names the agent.
+
+The Console trusts nothing in the body for scope or label. A cite with no matching check entry renders
+with no badge and no label. It doesn't fall back to a scope it worked out itself.
+
+If 217 uses other names, I change mine to theirs before either of us pushes (sage-3591 item 1).
+
+## A2. The revert verb I assume (to 288, Honker)
+
+- Verb: `library.revert`. A human verb (design M4): from an agent session it refuses `human-required`,
+  like `library.status` (`broker.mjs:5133`).
+- Args: `{ "project": <business project name>, "commit": <40 lowercase hex> }`. The design writes
+  `library.revert {commit}`. `project` is added to match the other library verbs, and like theirs it is the
+  key of `business.projects` (`mirror.mjs:31`), which is the chat project's `repo` link, not its UUID. Both are required, and no other key
+  is allowed (`invalid-request`), as the other library verbs check with `keys(args, ...)`.
+- Result: `{ "project", "path", "reverted": <the commit given>, "commit": <the new commit> }`.
+- Refusal codes the Console shows by name:
+  - `library-revert-not-agent`: `commit` has no `Mosaic-Agent` trailer for this business, or isn't
+    reachable from the served commit.
+  - `stale-base`: a later commit changed that path.
+  - `human-required`, `invalid-request`, `project-not-configured`.
+  - Before 288 lands, the bus refuses the verb (expected `unknown-verb`, `broker.mjs:6578`), and the Console
+    shows that code.
+- HTTP status in the Console (`packages/webui/src/bus.mjs` `busStatus`): `stale-base` and
+  `library-revert-not-agent` map to 409. Every other code keeps the existing mapping.
+
+## A3. The status line
+
+`GET /api/library/status?project=<id>` proxies `library.status {project}` through the existing
+`libraryStatus` option. `cli.mjs:110` already passes that option, but `startServer` doesn't read it.
+The status line shows:
+
+- the served commit (7 characters) and its age;
+- `library-diverged` when the sync state names it;
+- the fetch error code;
+- the reply limits in force, and the keys that fell back;
+- the count of R-problems, linking to the list.
+
+It reads the fields `readSyncState` returns at the base (`packages/library/src/mirror.mjs:232`). It shows
+any field 217 adds (the limits) only when present.
+
+## A4. "Changed since" (ruled sage-3596)
+
+Sage ruled that 217 supplies `last`. On a `thread.messages` row that carries `check`, each path cite's
+entry gets `last`, the file's last commit at the served tip, read when the message is read. When `last`
+is absent the Console marks nothing changed, and a test pins that.
+
+One more field is needed, raised in morgana-0200. The cited `commit` is a library commit, not the
+file's own last commit, so a cite made at a commit that didn't touch the file would differ from `last`
+while the file is unchanged. I asked 217 to also store `file`, the file's last commit at the cited
+commit. That's `%H` from the same `git log -1 <commit> -- <path>` call that reads the trailer, so it
+costs no extra git call. The Console marks a cite changed when both `file` and `last` are 40-hex and
+differ. The cited commit is reachable from the served one (5.2), so `file` is an ancestor of `last`,
+and differing means newer. A missing or malformed `file` or `last` marks nothing.
+
+The entry the Console reads, in full: `{ scope, agent, file?, last? }`.
+
+## A5. `no-cited-answer` retires
+
+`renderItems` and its `NOTICES` (`no-cited-answer`, `no-answer`, `turn-failed`) go. 217 sends the
+runner's fixed texts as plain bodies (design 5.2, "Runner texts"), and renderReply shows those as free
+text. Design 7.4 names no other notice than `library-write`, so nothing is lost (sage-3596 item 3).
+
+## Files
+
+Both deviations below were accepted in sage-3596 and are named in the manifest for Dewey. The brief owns these:
+
+- `packages/library/src/render.mjs`: `renderReply` replaces `renderItems`.
+- `packages/library/src/index.mjs`: the export.
+- `packages/library/README.md`: the section.
+- `packages/library/tests/render.test.mjs`.
+
+It also owns `bus.js`, its stylesheet, `serve.mjs` (only the two routes) and new webui tests. Two
+deviations, both recorded here:
+
+- The chat view's message list is `packages/webui/src/public/chat.js:85` (`window.MosaicChat`), not
+  `bus.js`. The reply, notice and Revert rendering goes in `chat.js` and `chat.css`. The status line
+  goes in the chat thread view, so it is also in `chat.js`.
+- `packages/webui/src/console-bus.mjs` and `cli.mjs` each get one `libraryRevert` line, beside the
+  existing `libraryStatus` wiring.
+
+## Overlap with row 220 (C2-10a, Researcher, 3ef6da90d)
+
+220 changes one line each in the webui tests discord.test.mjs, fixture.mjs, history-fixture.mjs,
+relaunch.test.mjs and return-flow.test.mjs. Its other paths are in control-board, conversation, discord
+and business. 225 doesn't touch those five files or those packages. Its webui tests are new files.
+
+## Handoff to Fethry (mos-1501, Q245)
+
+The row moved to Fethry (Codex, fethry/row225). Everything below is **untested**: no suite or single file
+has run on it, since a run needs Sage's CLEAR. Each changed file passes `node --check`.
+
+Done in the handoff commit:
+
+- `render.mjs` `renderReply(body, {check, changed, name})`; index export; README section;
+  `render.test.mjs` rewritten. `renderItems` is gone from every package.
+- `serve.mjs`: `/render.mjs` static entry (owner and user file maps), `GET /api/library/status`
+  (one `project` query, answer must name that project), `POST /api/library/revert` (save's boundary,
+  strict `{project, commit}`, refusal shows the code, lost or unusable answer is `outcome-unknown`,
+  never retried). Both are nulled for a granted user, and `userRoute` keeps them owner-only. The tester
+  listener refuses `libraryRevert`.
+- `bus.mjs`: `library-revert-not-agent: 409`. That re-pins `packages/webui/src/bus.mjs` in
+  `packages/bus/tests/channel-proof.test.mjs`, with a comment line, as row 254 did. It's a third deviation,
+  in another package's test.
+- `console-bus.mjs` and `cli.mjs`: `libraryRevert`, beside `libraryStatus`.
+- `chat.js`: dynamic `import('/render.mjs')` (CSP is `script-src 'self'`); body text until it loads.
+  Cites with a scope badge, the agent-written label, "changed since" from `file`/`last`, links only for
+  https with `rel="noopener noreferrer"`. A notice gets a Revert button behind `confirm()`. The library
+  status line goes under the thread heading.
+- `chat.css`: cite, badge, notice and status styles.
+- New tests: `packages/webui/tests/library-routes.test.mjs` and
+  `packages/webui/tests/chat-replies-browser.test.mjs`. 220's five files are untouched.
+
+Decisions made in the build:
+
+- The library name is the chat project's `repo`. A project with no repo reads no status and its
+  Revert does nothing.
+- These codes hide the status line: `project-not-declared`, `library-mapping-invalid`,
+  `project-not-configured`, `not-configured` and `owner-only`.
+  - Otherwise every code-repo thread, and every granted user, would show "unavailable".
+  - Cost: a broken library mapping also hides the line. `library.status` from the CLI still shows it.
+- "Age" is the time since `lastFetch` ("fetched 5 min ago"), not the served commit's age, which the
+  status doesn't carry.
+- The limits fields are assumed to be `replyLimits {requireCitation, citationsPerReply}` and
+  `replyLimitsFallback [keys]`, and are shown only when present. **Not agreed with 217.** Confirm with
+  Beakley and rename.
+- Correction (dewey-0937 B1, sage-3669): shape alone cannot authenticate a notice. An agent in a
+  library business could name another agent's real reachable commit while claiming a fake path,
+  misleading the human into reverting a different file. The renderer must require no stored check
+  result before treating a notice-shaped body as a broker notice. A checked body stays plain text.
+  Pre-217 messages have no check, so a notice-shaped legacy body still renders as a notice; Sage
+  accepts that residual in this test system with no real agent history and owns the later positive
+  broker-marker follow-up after10-27. No marker or row288 dependency is added by225.
+
+Left:
+
+1. Get CLEAR and run the webui and library suites, `channel-proof.test.mjs`, and the two new files whole.
+   The browser test's selectors and waits have never run.
+2. Agree the limits field names with 217 (Beakley).
+3. Granted-user R6 G5 (`granted-user.test.mjs:252`) lists owner verbs by hand. Add `library.revert`
+   once 288 lands.
+4. BUILD.md: the mutant list and the mos-1275 timeout plan.
+5. The manifest names the three deviations: chat.js and chat.css in place of bus.js, the console-bus and
+   cli lines, and the channel-proof re-pin.
+
+## Fethry continuation (2026-10-23, Q245)
+
+Owner: Fethry, thread 14f80e3c-ace7-4793-a577-e1275ca09b0b. Branch fethry/row225.
+This file carries Morgana's complete BUILD.md above unchanged, recovered from 9a131e956
+(base 45dca69f6). Morgana stopped editing 225 at that handoff. Issue #1726; Dewey reviews.
+Sage owns queue moves, test slots, gate and landing. No Node/tests until Sage CLEAR
+(sage-3611); commits/pushes before the gate are explicitly Untested. No credential files read.
+
+### Confirmed interfaces and rulings
+
+- Beakley beakley-0004 confirms ordered check.citations {scope, agent, file, last}; a missing
+  or malformed file/last means no changed marker. Fetched age accurately describes lastFetch.
+- Beakley's concrete library.status shape is replyLimits:
+  {requireCitation, citationsPerReply, fallback: [keys], problem: 'reply-limits-unreadable' | null}.
+  The inherited top-level replyLimitsFallback assumption is superseded. Show nested fallback and
+  problem, with a browser regression test for each. No broker or policy change in this row.
+- Bubba bubba-0002 confirms A2 and the exact broker notice shape. fethry-0005 forwards the
+  project-key correction: project is chat project.repo, not the chat UUID.
+- Keep the inherited ordinary-code-repo/granted-user status hiding behavior for now, but a
+  library-mapping-invalid error should stay visible: hiding an invalid mapping hides diagnosis.
+  Confirm this local UI choice through regression coverage and tell Sage/Dewey.
+
+### Continuation plan and acceptance evidence
+
+Spec: docs/plans/2026-10-20_case2-rows.md C2-10b; design 5.2 and 7.4;
+standing rulings sage-3591, sage-3596 and sage-3611. Implement inline in this existing isolated
+T3 worktree; use the existing candidate and tests, never restart the implementation.
+
+1. Static audit the handoff against the contracts and inherited tests. Add failing coverage for
+   nested limits fallback/problem, wrong-project revert receipts, missing file/last and invalid
+   mapping visibility. Existing tests require Mos approval through Sage before further edits.
+2. On Sage CLEAR, run the new files whole and library renderer tests with per-test deadlines;
+   record RED before changing uncovered behavior. Fix only demonstrated local defects. Run
+   targeted GREEN, then the full relevant suites only within the authorized slot.
+3. Record exact commands, timings and output paths. Prepare mutant kill list below; run only on
+   CLEAR, using isolated copies so the candidate is never temporarily changed for mutation.
+4. Freeze a manifest containing all source/test/doc changes and all three handoff deviations.
+   Push only fethry/*, as additional commits. Send exact head/results to Dewey and Sage; cc Mos
+   on pushes/blockers. Sage performs queue moves, gate and landing. No merge/release/live changes.
+
+### Existing test changes requiring Mos OK through Sage (mos-1272)
+
+Diff against 45dca69f6, inherited from Morgana 9a131e956:
+
+| File | Added | Removed | Reason |
+| --- | ---: | ---: | --- |
+| packages/library/tests/render.test.mjs | 80 | 66 | Brief requires retiring renderItems and replacing its tests with renderReply coverage |
+| packages/bus/tests/channel-proof.test.mjs | 3 | 1 | bus.mjs gains library-revert-not-agent:409; refresh that source hash and document why |
+
+No further edits to these files pending approval. No edits to row220's five tests.
+The new webui test files are additions against the row base.
+
+### Timeout plan (mos-1275)
+
+Every Node test run uses --test-concurrency=1 and --test-timeout=30000, under an outer timeout.
+New library/route files: outer 120s each; new browser file: outer 240s. Full library and channel-proof:
+outer 180s; full webui: outer 900s, MOSAIC_REQUIRE_EDITOR_BUILD=1. Full webui requires its own
+packages/webui npm ci per agents/README.md and Sage CLEAR. Output redirects to an evidence log;
+inspect tail, failure names and summary, never claim green from an exit alone. A timeout is a
+failed run: stop, report the exact command/phase/last output, and diagnose before retrying.
+Sage's gate owns every scripts/test-*.sh; no implicit slot or test authority from this plan.
+
+### Mutant plan (pending CLEAR)
+
+- M1: drop a path badge or the supporting label; cite browser assertions must fail.
+- M2: allow http/javascript links; renderer and browser safe-link assertions must fail.
+- M3: compare cited library commit to last instead of file to last, or treat a missing file/last as
+  changed; changed-since assertions must fail, including same-file/different-library-commit.
+- M4: ignore nested fallback/problem; status browser tests must fail.
+- M5: remove a revert fence (send, identity, exact Origin or Fetch Metadata), strict key/commit
+  validation or wrong-project receipt validation; route tests must fail with zero unexpected calls.
+- M6: retry a refused/unknown revert; single-call route/browser assertions must fail.
+- M7: remove granted-user library-route fence; owner-only route coverage must fail.
+
+Progress: handoff and interfaces recovered; candidate untested. No completion claim.
+
+Static evidence correction: the first pushed patch artifact used ordinary context lines, whose
+single-space blank context lines make git diff --check report whitespace in the artifact. Regenerated
+inherited-old-tests.patch with --unified=0; it is the same exact two-file change, applicable with
+git apply --unidiff-zero. No source or existing test changed for this correction.
+
+Mutation kit authored at mutants.py (11 concrete mutations across M1-M7), Python AST parse only.
+It archives the committed packages plus their tracked fixture dependencies into disposable snapshots,
+links the existing dependency install read-only in practice (tests do not install), enforces exactly
+one mutation anchor and requires an assertion failure for a kill. It records source hashes before
+and after. It has not run; anchors for the planned fixes intentionally require those fixes first.
+No Node/tests/build/browser work has run in Fethry's session pending Sage CLEAR.
+
+### Old-test approval and preservation condition (mos-1510, sage-3623)
+
+Mos approves render.test.mjs +80/-66 and channel-proof.test.mjs +3/-1 exactly. No additional edits
+are permitted to either file without a new Mos OK through Sage. The condition on the renderer:
+
+- The old malformed-body fixed-line behavior no longer applies. Design 5.2 now says any body
+  outside the cited-object schema is free text whose text is the whole body. Rejecting it into a
+  fixed line would hide human/free-text/older messages and the four fixed runner texts. The new
+  render.test.mjs tests “free text renders as itself with no citations” and “a body without the
+  reply or notice shape is free text: the whole body, no citations” explicitly cover this new rule.
+- The old no-options path-badge behavior still applies. The new render.test.mjs test “without a
+  check result a path cite has no badge, no label and is never changed” covers it, and the browser
+  test checks an unchecked path cite has no badge/label. No path inference fallback was added.
+
+Dewey checks both against the frozen old-test delta. The two numstats remain 80/66 and 3/1.
+
+### Test slot and shared protocol (sage-3623, beakley-0006)
+
+Targeted lane A slot is planned around 19:47Z, after Gosalyn's 226 run and Sage's queue gap.
+Wait for explicit CLEAR; the scheduled time alone grants nothing. Hard stop 20:00Z for Sage's
+226 gate. Boyd's lane B bus/cli/business work is disjoint and does not count as a busy lane A.
+The three requested files are the library renderer test and the two new webui files, whole/serial.
+
+Beakley confirms reply-protocol.mjs exports only GUARD_CODES (the seven guard refusal codes) and
+FIXED_TEXTS {empty, failed, uncited, tooLong}. It has no scope/notice constants or validator.
+renderReply defines none of those codes or runner texts: it already renders the fixed bodies as free
+text. It therefore needs no protocol import and no extra browser module route (beakley-0006).
+Do not add unused imports or redefine those shared codes/texts later.
+
+2026-10-23T19:21:07Z dependency update (bubba-0006): Bubba's first static row288 push is
+origin/bubba/row288 c867cada9, explicitly Untested with no Node run. A2 library.revert uses the
+business.projects key; broker notice retains the exact agreed body. Bubba adds librarySave only
+in console-bus.mjs/cli.mjs and leaves libraryRevert wiring owned by 225. Preserve both callback
+changes when Sage integrates. No dependency merge or test run performed here; 225 still lands
+after 217 and may show unknown-verb until 288 lands.
+
+## T1 targeted RED to GREEN (sage-3641, 2026-10-23T19:23Z)
+
+All three files ran whole and serial, with TMPDIR=/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2,
+--test-concurrency=1 --test-timeout=30000 and outer timeout -k 10 (120s renderer, 120s routes,
+240s browser). Initial renderer 9/0 (0.105s), routes 9/3 (0.226s), browser 5/3 (5.630s).
+Final renderer 9/0 (0.105s), routes 12/0 (0.212s), browser 8/0 (5.284s). Logs in evidence/.
+
+Production fixes after RED:
+- Reject a library.revert receipt with the wrong project as outcome-unknown; no retry.
+- Read replyLimits.fallback and display replyLimits.problem per beakley-0004/0006.
+- Show library-mapping-invalid in the status line; its hidden-status branch is covered by the
+  browser refusal matrix once the nested-limits assertion passes. This diagnosis was made statically;
+  the first RED exits that matrix at the preceding fallback assertion, so visibility itself has only
+  a GREEN run, unlike the fallback/problem and wrong-project fixes.
+
+Three assertion corrections in NEW handoff files (not pre-existing tests, per sage-3647):
+1. library-routes.test.mjs: POST /api/library/status in preview mode expects 403, because the existing
+   global preview write fence runs before the GET-only route and returns read-only. The route remains
+   GET-only and no callback fires on that POST. Do not weaken or bypass the fence to get 405.
+2. library-routes.test.mjs: project-not-declared expects 400, which busStatus already maps at the
+   row base. The inherited 502 expectation contradicted that existing map. No production map change.
+3. chat-replies-browser.test.mjs: coerce the whole “img element OR window.injected” expression to a
+   Boolean. With no injected node/code the old expression returns undefined, not false. Assertions
+   still require neither DOM injection nor executed handler. All preceding cite/link assertions pass.
+
+Frozen pre-existing test deltas still render.test.mjs 80/66 and channel-proof.test.mjs 3/1.
+No Node/Chromium process with this slot TMPDIR remained after targeted tests (checked /proc).
+
+Expanded CLEAR sage-3647: full library, then channel-proof whole, then isolated mutants that fit;
+still hard stop 19:38Z. No full webui suite, npm ci or editor build authorized in this window.
+
+Expanded-slot evidence: full library 81/0 (9.179s), channel-proof 2/0 (0.573s), whole/serial,
+--test-timeout=30000, outer timeout -k 10 180, same TMPDIR. Logs copied to evidence/.
+To exercise invalid-mapping visibility independently, added its own browser case and temporarily
+restored only the hidden-mapping branch. Whole browser RED: 7/2 (8.810s); the direct assertion sees
+null instead of the diagnostic, and the refusal-matrix wait also fails. Finally restored the exact
+corrected source before the next run. This supersedes the earlier visibility “GREEN only” note.
+
+Final targeted coverage before mutation: browser 9/0 (6014.970ms runner duration), routes 13/0.
+Added an independent send-off test with a configured libraryRevert callback: absence of --send
+still refuses with zero callback calls. This makes the send fence independently mutation-testable.
+The kit now has 14 concrete mutations, including agent-label, unreadable-limits problem and send.
+Each isolated target is restored to its candidate SHA256, and worktree hashes are checked before
+continuing to the next mutant (sage-3647). Runner uses TAP so assertion failures can be distinguished
+from timeouts/import/process failures. Full webui/build and the integration gate remain pending.
+
+Dependency update beakley-0008: row217 first push origin/beakley/row217 c25f5b8da is UNTESTED,
+continued from Launchpad e25ef0373. No dependency merge here; its protocol/module mount belongs to
+217 and renderReply needs none of those codes/texts. Integration acceptance remains Sage's gate.
+
+First isolated-mutant attempt stopped honestly at M3-wrong-commit: M1 badge, M1 agent label and M2
+https-only link mutants were killed by assertions; M3 failed via the browser's expected-state wait,
+so the strict runner did NOT count it as a kill. Every target restored/hash-checked and candidate
+hashes unchanged. Logs retained in evidence/mutants-attempt1/. Corrected the new browser test to wait
+for a completed repaint (independent of desired output), then assert changed-marker count. Whole
+browser baseline remains 9/0. No production change. Re-run the whole isolated kit against this test.
+
+## T1 complete: isolated mutants and source-review handoff
+
+sage-3647 final kit on source candidate 507901277: 14/14 assertion kills, no timeout/import/process
+failure counted. Each mutant matched one anchor, restored the target SHA256 and checked the three
+candidate source hashes before the next. evidence/mutants-final/summary.json records every result;
+final worktreeUnchanged=true. Logs name the failing tests, including M3's direct assertion after the
+refresh wait correction. /proc inspection found no remaining Node/Chromium process with the slot
+TMPDIR. Returned lane A to Sage as fethry-0016 at about19:29Z, before the19:38Z hard stop.
+
+Checked-in TAP display copies remove trailing whitespace so the diff is clean. Their raw SHA256
+values are recorded in evidence/raw-log-provenance.json; original byte-for-byte logs remain under
+/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2. This changes evidence presentation only, never tests.
+
+MANIFEST.md and manifest.r1.sha256 freeze the13 changed package files for Dewey. All three handoff
+deviations and Mos1510's two preservation conditions are explicit. Old-test numstats remain80/66 and3/1.
+No full webui/npm ci/build was run; Sage explicitly reserved it for a later window. Full package/script
+and dependency integration gate remains required before landing. No queue move, merge or live action.
+
+
+## Dewey static CHANGES B1, N1 (dewey-0937; ruling sage-3669)
+
+Static verification confirms renderReply currently takes exact notice shape as sufficient provenance.
+The previous handoff explanation above is corrected: a reachable agent commit can be reverted while
+its body claims another path. Sage directs a row225 fix, not a broker marker in288.
+
+Regression tests authored first in the NEW chat-replies-browser.test.mjs:
+- A checked agent notice-shaped body names the genuine notice's commit with an invented delete path.
+  It must render the whole body as plain text and have no notice styling or Revert, while the real
+  unchecked broker notice remains actionable.
+- A403 owner-only receipt with no sent field must say Not reverted (owner-only), exactly one POST.
+
+Planned B1 production change after RED: pure renderReply recognizes a notice only when options.check
+is null/absent; chat already supplies the stored check. This protects the shared renderer rather than
+only one DOM caller. Planned mutant: remove that check condition; browser B1 must assert-fail.
+N1 is small: treat a4xx refusal with a code as definite without requiring a sent field, preserving
+401 sign-out and503/network outcome-unknown behavior. Add its missing-condition mutant too.
+No pre-existing test edit is needed; keep approved80/66 and3/1. No production fixes or Node runs yet.
+
+Test window: after217 in T3, roughly20:25-20:55Z (sage-3663/3669). Wait for explicit CLEAR; then
+worktree-local packages/webui npm ci, editor build, whole webui suite with
+MOSAIC_REQUIRE_EDITOR_BUILD=1, and Chromium cleanup sweep. Stay out of library/bus/cli runs during
+Researcher's216 lane. Ask Sage to include the browser RED/GREEN and two new mutants before that
+whole-suite run. T1 slot was already returned; no further tests under its old CLEAR.
+
+## Round2 recovery and review fixes (2026-10-24, sage-4119/4120)
+
+CLEAR resumed this row after217/285/286 landed; new base963303403. Created fethry/row225-r2 from
+7590cf633; original fethry/row225 and all published history retained. Rebased all nine commits.
+Conflicts resolved in chat.js/serve.mjs by preserving sharing, threadWrites, chatGrants and225's
+render/status/revert callbacks. Both append-only logs retain963303403 byte-for-byte as their prefix.
+The channel-proof conflict retains239's comments/transport changes and re-pins the merged bus.mjs
+hash4ebf6c2b5d71c23d85cbde83f69aa671058dc2195c9ae4bdda624f6940729d1b; delta still3/1.
+render.test.mjs remains80/66 relative the new base. No published commit amended or force-pushed.
+The first local conflict-resolution attempt hit a script assertion; aborted that unfinished rebase
+and restarted before any publication, then checked all conflict markers were gone.
+
+Canonical start op fethry-225-start by fethry completed rev3946 (briefed→in-progress), no timeout.
+Removed our canonical node_modules symlink only; root and packages/webui now each have local
+npm ci --ignore-scripts --no-audit --no-fund installs (mos1575). TMPDIR from mktemp is
+/mnt/storage/scratch/tmp/rbCdM2. MOSAIC_REQUIRE_EDITOR_BUILD=1 throughout gate.
+
+Whole NEW browser file first RED8/3,6755.602ms: B1 forged notice fails its own whole-body assertion
+and the existing one-Revert count (2vs1); N1 sees outcome-unknown instead of definite refusal.
+Placed all three as expected first-run failures (fethry0021); no old test red. Then changed
+renderReply to recognize a notice only when options.check is null/absent, and chat's4xx coded
+refusal path to be definite even without sent.401 still signs out;503/network remains unknown.
+Whole-file GREEN11/0,7244.663ms. Approved existing renderer test is unchanged, including unchecked
+notice text. The pre217 no-check residual remains accepted under sage3669, with positive-marker
+follow-up owned by Sage after10-27. No288 dependency/marker introduced.
+
+Next: whole webui/library/bus and channel-proof, then all14 original mutants and new B1/N1 mutants;
+all serialized under timeout -k10 with per-test30s deadlines. Any old-test red or second red must
+reach Sage before changing it, per sage4119. Full gate results and replacement manifest to follow.
+
+Round2 worktree gate GREEN (sage4119): editor-build0/0.288s, webui442/0/274.272s,
+library149/0/14.981s, bus981/0/125.727s, whole channel-proof2/0/0.503s. No skip/cancel in any suite.
+Each command runs serially with TMPDIR=/mnt/storage/scratch/tmp/rbCdM2,
+MOSAIC_REQUIRE_EDITOR_BUILD=1, --test-concurrency=1 --test-timeout=30000, outer timeout -k10
+(editor120s, webui900s, library300s, bus1200s, channel120s). Exact commands/timings recorded in
+ evidence/r2/gate-summary.json. Root/webui installs and editor source/assets are worktree-local;
+generated editor.js/editor.css/BUILD.json stayed identical to the base. Raw scratch logs retained;
+display copies trim trailing whitespace, with raw SHA256 provenance in evidence/r2/raw-provenance.json.
+No old-test red and no unexpected second red; no additional existing-test edits. All requested source
+suites passed before committing this B1/N1 source candidate. Isolated16-mutant run follows (14 originals
+plus B1 and N1); no final mutation claim yet.
+
+## Round2 final mutation evidence and slot return
+
+Sourcec010dfd85; all16 unique mutants now have clean assertion kills (14 originals plus B1 and N1).
+Initial run produced6 clean kills, then M3-missing-file exited124 at the240s outer deadline. Its
+new-file status-case after-hook failed at30643ms; the intended missing-file assertion1!=0 did fail,
+but the process never exited normally. NOT counted as a kill. Reported to Sage as fethry0022 before
+any change, verified13 candidate hashes/restoration and no scratch-owned leftover processes.
+Retried only that mutant unchanged, plus the remaining9; all10 clean assertion kills. No source,
+test or helper edit, no weakened deadline/kill criterion.17 attempts total;1 timeout retained and
+excluded,16 clean unique kills. Final selected logs have zero cancellations/skips and no hook/timeout
+failures. Both attempt sets and combined result are in evidence/r2/.
+
+Final sweep at2026-10-24T15:02:21Z found no scratch-owned Node/Chromium descendants, no signals needed.
+Both dependency roots are real local directories, not symlinks. All13 package pins reverified.
+manifest.r2.sha256 file digest:517af41b26cd44abe4a103a048cac8ec3a4fd2a9dc0f2f3f74b5699af7289d64.
+MANIFEST.r2.md describes the B1/N1/rebase delta, preserves the accepted pre217 residual, and names
+this timeout/retry honestly. Original packet, old source branch and evidence retained.
+
+Requested worktree gate: webui442/0, library149/0, bus981/0, channel-proof2/0, editor-build exit0;
+new review browser RED8/3→GREEN11/0; isolated16/16 clean unique kills. Existing-test deltas unchanged
+at80/66 and3/1 relative963303403. No old-test failure. No queue move after the owner start, no merge,
+release, deployment or real library write/revert. Ready to return the slot and send Dewey the new
+branch pin/manifest delta; his formal record and Sage's integration/landing remain separate gates.
@@ -0,0 +1,67 @@
+# Row 225 review packet — C2-10b (#1726)
+
+Owner Fethry (14f80e3c), reviewer Dewey (84fb346c). Base 45dca69f6.
+Source candidate 507901277 continues Morgana 66f7becf2 and 9a131e956; no rewritten history.
+Status: targeted tests and full library green; full webui/build and Sage's full gate still pending.
+This packet requests source/manifest review, not landing or a full-green claim.
+
+## Behavior and contracts
+
+The Console shows reply text and citations with path/line/quote, scope and agent-written labels,
+marks a changed file only with valid differing check.file/check.last, links only https URLs, shows
+write/delete notices and explicit Revert results, and displays library status, fetch age, divergence,
+fetch errors, nested replyLimits metadata and R-problems. Invalid library mappings remain visible.
+Revert validates {project,commit}, preserves refusal codes and reports uncertain/wrong-project
+receipts as outcome-unknown without retry. The project is chat project.repo (business.projects key).
+
+A1-A5 are in BUILD.md. Dependency contracts: row217 ordered check.citations and nested replyLimits;
+row288 A2 revert result/notice. No dependency merge in this candidate. Landing order is 217 then225;
+unknown-verb is expected until288 lands. Beakley's GUARD_CODES/FIXED_TEXTS need no renderer import:
+renderReply defines neither and renders those fixed bodies as free text.
+
+## Frozen implementation and tests
+
+manifest.r1.sha256 freezes the 13 changed package paths, including the two approved existing-test
+changes. Check from repository root with `sha256sum -c agents/fethry/work/queue-225/manifest.r1.sha256`.
+All other changed files are BUILD/session records, handoff/approval evidence and this review packet.
+No role, policy, schema, secret, live instance, deployment or queue change is included.
+
+Three departures from the brief, carried from Morgana's handoff:
+
+1. Chat rendering/status live in public/chat.js and chat.css, where the message list is, instead of
+   bus.js and its stylesheet (sage-3596). serve.mjs serves the same pure render.mjs module to owner
+   and granted-user pages; no duplicated browser renderer and no generated asset.
+2. console-bus.mjs and cli.mjs wire libraryRevert beside libraryStatus (sage-3596). --send still
+   independently gates Revert. Preserve row288's separate librarySave wiring at integration.
+3. webui/src/bus.mjs maps library-revert-not-agent to409; bus/tests/channel-proof.test.mjs re-pins
+   only that source's hash and documents why. Mos read and approved this exact +3/-1 (mos-1510).
+
+Existing-test authority: Mos1510 via Sage3623 approves render.test.mjs +80/-66 and channel-proof +3/-1.
+Both exact numstats are unchanged. The malformed-body fixed-line rule is superseded by design5.2's
+whole-body free text, covered by two replacement renderer tests. The old no-options path-badge rule
+is retained and covered by the replacement test plus unchecked-cite browser coverage. BUILD.md
+explains these two preservation conditions and the three new-file assertion corrections in detail.
+
+## Verification and remaining gate
+
+Evidence logs are under evidence/; commands, deadlines, failures and corrections are in BUILD.md.
+Targeted whole-file tests: renderer9/0, routes13/0, browser9/0. Full library81/0, channel-proof2/0.
+No skips/cancellations. Invalid-mapping visibility also has an independent RED then GREEN.
+All 14 isolated mutants were killed by assertions on source candidate507901277; each mutation
+matched one anchor, restored its source hash, and verified unchanged candidate hashes before the next
+mutation. Summary: evidence/mutants-final/summary.json. The first attempt stopped at an expected-state
+wait (not counted as a kill), then the new browser test was improved and the whole kit rerun.
+Raw logs remain under the scratch root; checked-in display copies trim trailing whitespace and record
+raw digests in evidence/raw-log-provenance.json.
+
+Before landing, Sage still runs full webui with MOSAIC_REQUIRE_EDITOR_BUILD=1 after the worktree-local
+webui npm ci, every applicable package/script suite and integration against217. No full webui/build
+in T1 (sage-3647). Dewey approval and Sage's gate/landing remain required; queue moves belong to Sage.
+
+Static audit: the channel-proof source pin matches webui bus.mjs; no hash pin of bus.js, serve.mjs
+or library render.mjs was found. packages' only remaining renderItems match is an explanatory comment
+in the frozen replacement test; no runtime export, import or call remains. No no-cited-answer match.
+
+Review focus: stored check metadata versus untrusted body, missing/malformed file/last, https-only
+links and inert hostile text, Revert authority/receipt uncertainty, async route/sign-out isolation,
+and status diagnostics without owner transport leakage to a granted user.
@@ -0,0 +1,64 @@
+# Row225 round2 — C2-10b (#1726), Dewey B1/N1 delta
+
+Owner Fethry14f80e3c; reviewer Dewey84fb346c. New base963303403.
+Branch fethry/row225-r2; source candidatec010dfd85. Original fethry/row225 is untouched.
+This replaces the pending round1 source packet at94128f73f; old packet/evidence remain historical.
+
+## Delta for Dewey (dewey0937/0939, sage3669/4119)
+
+- B1: renderReply recognizes the exact notice shape only when options.check is null or absent.
+  An ordinary checked agent body shaped as a notice is whole-body free text, with no notice styling
+  or Revert. New browser coverage for a forged delete path naming another agent's genuine commit
+  went RED, then GREEN; genuine unchecked broker notice remains actionable. The existing renderer
+  test “a write notice renders its fixed line” is unchanged. README documents the condition.
+- N1: a coded4xx is shown as Not reverted even if sent is absent.403 owner-only is definite;
+  401 still signs out,503/network remain outcome-unknown and no request is retried. Separate browser
+  case went RED then GREEN. No route, policy, broker marker or row288 dependency was added.
+- Accepted residual (sage3669): pre217 history carries no check, so a notice-shaped old body still
+  renders as a notice. Sage accepts this test-system residual with no real agent history and owns a
+  positive broker-marker follow-up after10-27. This condition is not a positive provenance marker.
+- Rebase: retained landed thread sharing/threadWrites/chatGrants, new library supporting/query/guard/
+  push exports, row239 transport behavior and both append-only log histories. The handoff commit's
+  three source conflicts combine those changes with225; other package commits replay unchanged.
+- channel-proof re-pin now matches merged webui bus.mjs4ebf6c2b5d71c23d85cbde83f69aa671058dc2195c9ae4bdda624f6940729d1b.
+  Relative the new base its delta is still exactly3/1; renderer test remains exactly80/66 (mos1510).
+  No additional existing test changes. Approved preservation conditions are in BUILD.md.
+
+## Frozen package manifest
+
+manifest.r2.sha256 freezes exactly the13 changed package paths relative963303403; verify from repo
+root with `sha256sum -c agents/fethry/work/queue-225/manifest.r2.sha256`. The manifest's SHA256 is sent
+with the final pushed pin. Source remains the tested c010dfd85; later commits are evidence/records only.
+
+The three accepted brief departures remain: chat.js/chat.css instead of bus.js/styles, libraryRevert
+wiring in console-bus.mjs/cli.mjs, and the bus.mjs409 map plus channel-proof pin. Serving the pure
+/render.mjs module to both page types remains the same. No dependency protocol constants are
+redefined: renderReply has no guard codes/fixed texts to import from217's reply-protocol.mjs.
+No generated editor file, role, policy, schema, queue-data file or live-state file is in the delta.
+
+## Verification
+
+Root and packages/webui each used worktree-local npm ci --ignore-scripts --no-audit --no-fund.
+No canonical dependency link. MOSAIC_REQUIRE_EDITOR_BUILD=1; TMPDIR=/mnt/storage/scratch/tmp/rbCdM2.
+Every command is serial under timeout -k10, Node suites use --test-timeout=30000.
+
+- New browser whole-file RED8/3 (B1 own assertion, one-Revert count and N1), then GREEN11/0.
+- Editor build: exit0; generated editor.js/editor.css/BUILD.json match the base.
+- Whole webui442/0, library149/0, bus981/0, channel-proof2/0; zero skipped/cancelled.
+- All16 unique isolated mutants have clean assertion kills on c010dfd85:14 original plus B1/N1.
+  Six initial clean kills, then M3-missing-file timed out (exit124, not counted) with an unrelated
+  status-case after-hook failure. The intended M3 assertion also failed, but the process stayed alive.
+  Reported to Sage as fethry0022 before any change; retried that exact mutant unchanged and ran the
+  remaining nine. All ten completed with clean kills. No source, test or helper edit for the retry.
+  Both attempt sets are retained;17 attempts total,16 unique clean kills,1 timeout attempt excluded.
+  Combined receipt: evidence/r2/mutants-combined.json. All candidate hashes unchanged/restored.
+- Final scratch-owned Node/Chromium sweep found zero processes; no signals needed. Dependency roots
+  are real local directories. Receipt: evidence/r2/cleanup.json.
+
+Exact commands/timings and raw log digests: evidence/r2/gate-summary.json and raw-provenance.json.
+Raw logs remain in the unique scratch root; checked-in display copies trim trailing whitespace only.
+No old-test failure occurred. The only unexpected later result was the recorded mutation cleanup
+timeout above; it was reported before an unchanged retry. No test/helper was patched around it.
+
+Dewey's B1 review and formal record remain pending; Sage owns integration/landing and any broader
+scripts gate. No force push, merge, deployment, real library write/revert or release action occurred.
@@ -0,0 +1,64 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 704.129155
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 690.249337
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 595.036289
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 627.082447
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 787.799722
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 587.311743
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 618.209773
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 633.838649
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 619.313248
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 9
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6014.970062
@@ -0,0 +1,64 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 636.096036
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 741.239029
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 568.879998
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 641.929005
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 870.041985
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 648.87451
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 566.725897
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 611.150846
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 618.488891
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 9
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6014.364529
@@ -0,0 +1,16 @@
+✔ chat replies: free text, cites with badges, the agent label, changed since and safe links (583.234335ms)
+✔ chat replies: a write notice reads as its line with a Revert; a refused revert shows its code (634.71741ms)
+✔ chat replies: a read-only Console shows the notice with Revert disabled (574.836149ms)
+✔ chat status line: served commit and age, divergence, fetch error and the problems one click away (607.74749ms)
+✔ chat status line: limits when the status carries them, no problems, and refusals (861.034669ms)
+✔ chat status line: a project with no repository link reads no library status (611.433469ms)
+✔ chat status line: unreadable reply limits show their problem and both fallback keys (606.380675ms)
+✔ chat replies: unchanged file at a different library commit and incomplete checks stay unmarked (650.947719ms)
+ℹ tests 8
+ℹ suites 0
+ℹ pass 8
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 5251.735356
@@ -0,0 +1,78 @@
+✖ chat replies: free text, cites with badges, the agent label, changed since and safe links (980.914799ms)
+✔ chat replies: a write notice reads as its line with a Revert; a refused revert shows its code (753.988771ms)
+✔ chat replies: a read-only Console shows the notice with Revert disabled (672.814814ms)
+✔ chat status line: served commit and age, divergence, fetch error and the problems one click away (622.859977ms)
+✖ chat status line: limits when the status carries them, no problems, and refusals (583.956229ms)
+✔ chat status line: a project with no repository link reads no library status (635.758222ms)
+✖ chat status line: unreadable reply limits show their problem and both fallback keys (581.636121ms)
+✔ chat replies: unchanged file at a different library commit and incomplete checks stay unmarked (653.788881ms)
+ℹ tests 8
+ℹ suites 0
+ℹ pass 5
+ℹ fail 3
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 5597.371605
+
+✖ failing tests:
+
+test at packages/webui/tests/chat-replies-browser.test.mjs:81:1
+✖ chat replies: free text, cites with badges, the agent label, changed since and safe links (980.914799ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  + actual - expected
+
+  + undefined
+  - false
+
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:102:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: undefined,
+    expected: false,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at packages/webui/tests/chat-replies-browser.test.mjs:152:1
+✖ chat status line: limits when the status carries them, no problems, and refusals (583.956229ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  + actual - expected
+
+  + 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · no problems'
+  - 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · limits fell back: citationsPerReply · no problems'
+
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:156:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · no problems',
+    expected: 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · limits fell back: citationsPerReply · no problems',
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at packages/webui/tests/chat-replies-browser.test.mjs:173:1
+✖ chat status line: unreadable reply limits show their problem and both fallback keys (581.636121ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  + actual - expected
+
+  + 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · no problems'
+  - 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
+
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:179:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · no problems',
+    expected: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems',
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
@@ -0,0 +1,22 @@
+TAP version 13
+# Subtest: channel conversion preserves the four proof/transport byte baselines and modules cannot import a proof caller
+ok 1 - channel conversion preserves the four proof/transport byte baselines and modules cannot import a proof caller
+  ---
+  duration_ms: 4.280459
+  type: 'test'
+  ...
+# Subtest: channel recovery still requires the same shim path and rejects an absent or forged proof
+ok 2 - channel recovery still requires the same shim path and rejects an absent or forged proof
+  ---
+  duration_ms: 413.032186
+  type: 'test'
+  ...
+1..2
+# tests 2
+# suites 0
+# pass 2
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 539.602759
@@ -0,0 +1,496 @@
+TAP version 13
+# Subtest: resolver step 1: a path from the repo root, with or without .md
+ok 1 - resolver step 1: a path from the repo root, with or without .md
+  ---
+  duration_ms: 1.051208
+  type: 'test'
+  ...
+# Subtest: resolver step 2: the same path with vaultPrefix/ stripped
+ok 2 - resolver step 2: the same path with vaultPrefix/ stripped
+  ---
+  duration_ms: 0.164795
+  type: 'test'
+  ...
+# Subtest: resolver step 3: a path relative to the linking file, never above the repo root
+ok 3 - resolver step 3: a path relative to the linking file, never above the repo root
+  ---
+  duration_ms: 0.192765
+  type: 'test'
+  ...
+# Subtest: resolver step 4: a base name that matches exactly one indexed file
+ok 4 - resolver step 4: a base name that matches exactly one indexed file
+  ---
+  duration_ms: 0.201611
+  type: 'test'
+  ...
+# Subtest: a link into another of her repos resolves to nothing
+ok 5 - a link into another of her repos resolves to nothing
+  ---
+  duration_ms: 0.130282
+  type: 'test'
+  ...
+# Subtest: wikilink forms, embeds, and links skipped inside code
+ok 6 - wikilink forms, embeds, and links skipped inside code
+  ---
+  duration_ms: 1.445011
+  type: 'test'
+  ...
+# Subtest: only a body embed whose target has an extension other than .md, in any case, is an attachment
+ok 7 - only a body embed whose target has an extension other than .md, in any case, is an attachment
+  ---
+  duration_ms: 0.25003
+  type: 'test'
+  ...
+# Subtest: the fixture mapping checks and comes back frozen
+ok 8 - the fixture mapping checks and comes back frozen
+  ---
+  duration_ms: 1.772928
+  type: 'test'
+  ...
+# Subtest: C2-01c: a prefix inside or holding another entry's book refuses library-playground-other-universe
+ok 9 - C2-01c: a prefix inside or holding another entry's book refuses library-playground-other-universe
+  ---
+  duration_ms: 0.735312
+  type: 'test'
+  ...
+# Subtest: C2-01c: a prefix equal to a book folder, or holding its own, refuses library-mapping-invalid
+ok 10 - C2-01c: a prefix equal to a book folder, or holding its own, refuses library-mapping-invalid
+  ---
+  duration_ms: 0.532498
+  type: 'test'
+  ...
+# Subtest: C2-01c: universe-level prefixes lie outside every book, in a plain universe and in a hybrid with no books
+ok 11 - C2-01c: universe-level prefixes lie outside every book, in a plain universe and in a hybrid with no books
+  ---
+  duration_ms: 0.668173
+  type: 'test'
+  ...
+# Subtest: C2-01c: a draft takes kind, name and playground only, and comes back frozen with books []
+ok 12 - C2-01c: a draft takes kind, name and playground only, and comes back frozen with books []
+  ---
+  duration_ms: 1.032507
+  type: 'test'
+  ...
+# Subtest: no playground prefix holds another, and no book folder holds another
+ok 13 - no playground prefix holds another, and no book folder holds another
+  ---
+  duration_ms: 0.507943
+  type: 'test'
+  ...
+# Subtest: shape refusals: kind, remote, branch, unknown keys, types, manuscript, folder names
+ok 14 - shape refusals: kind, remote, branch, unknown keys, types, manuscript, folder names
+  ---
+  duration_ms: 0.740368
+  type: 'test'
+  ...
+# Subtest: C2-03a sage-2021: user is optional, kept when given, and must be a plain account name
+ok 15 - C2-03a sage-2021: user is optional, kept when given, and must be a plain account name
+  ---
+  duration_ms: 0.659277
+  type: 'test'
+  ...
+# Subtest: a hybrid universe is a shape the query code can take (1.4), with sources that must exist
+ok 16 - a hybrid universe is a shape the query code can take (1.4), with sources that must exist
+  ---
+  duration_ms: 0.695117
+  type: 'test'
+  ...
+# Subtest: a caller-supplied fail receives the code, as business file loading will pass it (C2-04)
+ok 17 - a caller-supplied fail receives the code, as business file loading will pass it (C2-04)
+  ---
+  duration_ms: 0.392362
+  type: 'test'
+  ...
+# Subtest: scope comes from the path alone (design 1.2)
+ok 18 - scope comes from the path alone (design 1.2)
+  ---
+  duration_ms: 0.466406
+  type: 'test'
+  ...
+# Subtest: C2-04 mirror: exact default path, bare without checkout or remote, and idempotent initialization
+ok 19 - C2-04 mirror: exact default path, bare without checkout or remote, and idempotent initialization
+  ---
+  duration_ms: 46.645994
+  type: 'test'
+  ...
+# Subtest: C2-04 mirror: simultaneous creators publish one intact mirror and leave no staging paths
+ok 20 - C2-04 mirror: simultaneous creators publish one intact mirror and leave no staging paths
+  ---
+  duration_ms: 32.763959
+  type: 'test'
+  ...
+# Subtest: C2-04 mirror: skipped publication accepts both coreutils statuses without removing the winner
+ok 21 - C2-04 mirror: skipped publication accepts both coreutils statuses without removing the winner
+  ---
+  duration_ms: 109.751094
+  type: 'test'
+  ...
+# Subtest: C2-04 mirror: preserve occupied directories and reject symlink ancestors and code overlaps
+ok 22 - C2-04 mirror: preserve occupied directories and reject symlink ancestors and code overlaps
+  ---
+  duration_ms: 20.129293
+  type: 'test'
+  ...
+# Subtest: C2-04 mirror: existing metadata accepts only bare Git plus state and the precreated lock
+ok 23 - C2-04 mirror: existing metadata accepts only bare Git plus state and the precreated lock
+  ---
+  duration_ms: 24.021555
+  type: 'test'
+  ...
+# Subtest: C2-04 state: missing state is empty only while the served ref is absent
+ok 24 - C2-04 state: missing state is empty only while the served ref is absent
+  ---
+  duration_ms: 37.436349
+  type: 'test'
+  ...
+# Subtest: C2-04 state: valid problems and sync metadata return no content and change no state bytes
+ok 25 - C2-04 state: valid problems and sync metadata return no content and change no state bytes
+  ---
+  duration_ms: 37.681315
+  type: 'test'
+  ...
+# Subtest: C2-04 state: strict keys, types, times, branch, commit and fixed R messages fail closed
+ok 26 - C2-04 state: strict keys, types, times, branch, commit and fixed R messages fail closed
+  ---
+  duration_ms: 105.483341
+  type: 'test'
+  ...
+# Subtest: C2-04 state: symlink, hardlink, non-private state and missing lock refuse without replacement
+ok 27 - C2-04 state: symlink, hardlink, non-private state and missing lock refuse without replacement
+  ---
+  duration_ms: 29.562786
+  type: 'test'
+  ...
+# Subtest: C2-04 file: served commit, not HEAD or a caller commit, owns the exact returned text
+ok 28 - C2-04 file: served commit, not HEAD or a caller commit, owns the exact returned text
+  ---
+  duration_ms: 74.057232
+  type: 'test'
+  ...
+# Subtest: C2-04 file: R1, R2 and R7 exclusions and never-synced mirrors cannot return file bodies
+ok 29 - C2-04 file: R1, R2 and R7 exclusions and never-synced mirrors cannot return file bodies
+  ---
+  duration_ms: 80.573844
+  type: 'test'
+  ...
+# Subtest: C2-04 lock: a first-sync and fast-forward reader wait for a consistent pair across processes
+ok 30 - C2-04 lock: a first-sync and fast-forward reader wait for a consistent pair across processes
+  ---
+  duration_ms: 253.247948
+  type: 'test'
+  ...
+# Subtest: C2-04 lock: same-process waits, timeout code, callback expiry and throw release
+ok 31 - C2-04 lock: same-process waits, timeout code, callback expiry and throw release
+  ---
+  duration_ms: 5031.462795
+  type: 'test'
+  ...
+# Subtest: C2-04 lock: owner death releases the kernel lock without replacing its file
+ok 32 - C2-04 lock: owner death releases the kernel lock without replacing its file
+  ---
+  duration_ms: 61.533295
+  type: 'test'
+  ...
+# Subtest: C2-04 lock: a missing flock binary becomes a handled refusal
+ok 33 - C2-04 lock: a missing flock binary becomes a handled refusal
+  ---
+  duration_ms: 57.176644
+  type: 'test'
+  ...
+# Subtest: C2-04 lock: an unawaited scoped read drains before the lock is released
+ok 34 - C2-04 lock: an unawaited scoped read drains before the lock is released
+  ---
+  duration_ms: 22.766874
+  type: 'test'
+  ...
+# Subtest: the fixture reads clean: every resolver step, appears_in and relationships wikilinks indexed
+ok 35 - the fixture reads clean: every resolver step, appears_in and relationships wikilinks indexed
+  ---
+  duration_ms: 33.888061
+  type: 'test'
+  ...
+# Subtest: R1: executables, symlinks, gitlinks, blobs over 1 MiB and non-UTF-8 text are not indexed
+ok 36 - R1: executables, symlinks, gitlinks, blobs over 1 MiB and non-UTF-8 text are not indexed
+  ---
+  duration_ms: 68.951498
+  type: 'test'
+  ...
+# Subtest: R2: unmapped paths are reported and not indexed
+ok 37 - R2: unmapped paths are reported and not indexed
+  ---
+  duration_ms: 25.70771
+  type: 'test'
+  ...
+# Subtest: R3: front matter not fully parsed stays raw, with the line where parsing stopped
+ok 38 - R3: front matter not fully parsed stays raw, with the line where parsing stopped
+  ---
+  duration_ms: 26.059427
+  type: 'test'
+  ...
+# Subtest: front matter forms the reader accepts and refuses
+ok 39 - front matter forms the reader accepts and refuses
+  ---
+  duration_ms: 0.448293
+  type: 'test'
+  ...
+# Subtest: R4: a link to no file, to more than one, or into another repo is reported and not followed
+ok 40 - R4: a link to no file, to more than one, or into another repo is reported and not followed
+  ---
+  duration_ms: 26.225692
+  type: 'test'
+  ...
+# Subtest: a block list link carries its item line, a scalar or flow link its key line, and problems follow
+ok 41 - a block list link carries its item line, a scalar or flow link its key line, and problems follow
+  ---
+  duration_ms: 22.565103
+  type: 'test'
+  ...
+# Subtest: an unresolved attachment embed gives no problem; a link or front matter value to one is R4; a note embed resolves
+ok 42 - an unresolved attachment embed gives no problem; a link or front matter value to one is R4; a note embed resolves
+  ---
+  duration_ms: 20.903777
+  type: 'test'
+  ...
+# Subtest: an indexed Dr.Quinn.md resolves as a body link, a block list link and an embed
+ok 43 - an indexed Dr.Quinn.md resolves as a body link, a block list link and an embed
+  ---
+  duration_ms: 25.42747
+  type: 'test'
+  ...
+# Subtest: R5: a canon file that refers into the playground is reported, and the link still goes by path
+ok 44 - R5: a canon file that refers into the playground is reported, and the link still goes by path
+  ---
+  duration_ms: 27.37119
+  type: 'test'
+  ...
+# Subtest: R6: a canon file that refers into another universe is reported; a hybrid may refer into its sources
+ok 45 - R6: a canon file that refers into another universe is reported; a hybrid may refer into its sources
+  ---
+  duration_ms: 30.585458
+  type: 'test'
+  ...
+# Subtest: R7: two paths that differ only in case are both left out
+ok 46 - R7: two paths that differ only in case are both left out
+  ---
+  duration_ms: 40.709509
+  type: 'test'
+  ...
+# Subtest: the reader reads the commit, never the working tree, and refuses a bad commit id
+ok 47 - the reader reads the commit, never the working tree, and refuses a bad commit id
+  ---
+  duration_ms: 33.579454
+  type: 'test'
+  ...
+# Subtest: a bare mirror reads the same as the clone
+ok 48 - a bare mirror reads the same as the clone
+  ---
+  duration_ms: 38.368686
+  type: 'test'
+  ...
+# Subtest: free text renders as itself with no citations
+ok 49 - free text renders as itself with no citations
+  ---
+  duration_ms: 1.571777
+  type: 'test'
+  ...
+# Subtest: a cited reply renders its text, then each cite with the badge from the check result
+ok 50 - a cited reply renders its text, then each cite with the badge from the check result
+  ---
+  duration_ms: 0.537429
+  type: 'test'
+  ...
+# Subtest: a parsed body renders as its string does
+ok 51 - a parsed body renders as its string does
+  ---
+  duration_ms: 0.304068
+  type: 'test'
+  ...
+# Subtest: without a check result a path cite has no badge, no label and is never changed
+ok 52 - without a check result a path cite has no badge, no label and is never changed
+  ---
+  duration_ms: 0.184363
+  type: 'test'
+  ...
+# Subtest: the label and the badge come from the check result only, never from a bad entry
+ok 53 - the label and the badge come from the check result only, never from a bad entry
+  ---
+  duration_ms: 0.180581
+  type: 'test'
+  ...
+# Subtest: a web cite is a link only for https
+ok 54 - a web cite is a link only for https
+  ---
+  duration_ms: 0.293669
+  type: 'test'
+  ...
+# Subtest: a write notice renders its fixed line
+ok 55 - a write notice renders its fixed line
+  ---
+  duration_ms: 0.277197
+  type: 'test'
+  ...
+# Subtest: a body without the reply or notice shape is free text: the whole body, no citations
+ok 56 - a body without the reply or notice shape is free text: the whole body, no citations
+  ---
+  duration_ms: 0.345807
+  type: 'test'
+  ...
+# Subtest: an empty citations list is a reply with no cites
+ok 57 - an empty citations list is a reply with no cites
+  ---
+  duration_ms: 0.187354
+  type: 'test'
+  ...
+# Subtest: C2-01c: each level gives its universe, and its book or null
+ok 58 - C2-01c: each level gives its universe, and its book or null
+  ---
+  duration_ms: 3.363132
+  type: 'test'
+  ...
+# Subtest: C2-01c: prefixes come first: in a book that holds a prefix, a file outside it is canon and one under it playground
+ok 59 - C2-01c: prefixes come first: in a book that holds a prefix, a file outside it is canon and one under it playground
+  ---
+  duration_ms: 0.480483
+  type: 'test'
+  ...
+# Subtest: C2-01c: a canon file linking into a draft gives R6, and into its own universe-level prefix gives R5
+ok 60 - C2-01c: a canon file linking into a draft gives R6, and into its own universe-level prefix gives R5
+  ---
+  duration_ms: 44.606565
+  type: 'test'
+  ...
+# Subtest: the survey prints folder names, counts, key sets and link-form counts, and never text
+ok 61 - the survey prints folder names, counts, key sets and link-form counts, and never text
+  ---
+  duration_ms: 37.28555
+  type: 'test'
+  ...
+# Subtest: folder names print DEL, C1 and bidi controls, U+061C among them, as escapes
+ok 62 - folder names print DEL, C1 and bidi controls, U+061C among them, as escapes
+  ---
+  duration_ms: 26.222951
+  type: 'test'
+  ...
+# Subtest: an embed of an attachment counts as an embed and as an attachment; a plain link to one does not
+ok 63 - an embed of an attachment counts as an embed and as an attachment; a plain link to one does not
+  ---
+  duration_ms: 26.23793
+  type: 'test'
+  ...
+# Subtest: with --mapping the survey adds scope, resolver step and problem counts
+ok 64 - with --mapping the survey adds scope, resolver step and problem counts
+  ---
+  duration_ms: 41.437066
+  type: 'test'
+  ...
+# Subtest: survey exit codes: usage 4, bad mapping 3, unreadable repo 2
+ok 65 - survey exit codes: usage 4, bad mapping 3, unreadable repo 2
+  ---
+  duration_ms: 17.463059
+  type: 'test'
+  ...
+# Subtest: scripts/mosaic library survey reaches the survey
+ok 66 - scripts/mosaic library survey reaches the survey
+  ---
+  duration_ms: 77.634947
+  type: 'test'
+  ...
+# Subtest: C2-03a argv: the fixed sequence, one https allow, no other protocol key
+ok 67 - C2-03a argv: the fixed sequence, one https allow, no other protocol key
+  ---
+  duration_ms: 1.605597
+  type: 'test'
+  ...
+# Subtest: C2-03a argv: only an https URL with a plain host, no userinfo, and a plain user
+ok 68 - C2-03a argv: only an https URL with a plain host, no userinfo, and a plain user
+  ---
+  duration_ms: 0.713147
+  type: 'test'
+  ...
+# Subtest: C2-03a helper: answers only the exact prompts for the configured host and user (dewey-0765)
+ok 69 - C2-03a helper: answers only the exact prompts for the configured host and user (dewey-0765)
+  ---
+  duration_ms: 31.590474
+  type: 'test'
+  ...
+# Subtest: C2-03a first sync: served is the fetched tip, HEAD is served, the survey reads it, and the token stays in the slot
+ok 70 - C2-03a first sync: served is the fetched tip, HEAD is served, the survey reads it, and the token stays in the slot
+  ---
+  duration_ms: 135.075159
+  type: 'test'
+  ...
+# Subtest: C2-03a fast-forward: served moves, problems are rebuilt, and a repeat changes only lastFetch
+ok 71 - C2-03a fast-forward: served moves, problems are rebuilt, and a repeat changes only lastFetch
+  ---
+  duration_ms: 225.707972
+  type: 'test'
+  ...
+# Subtest: C2-03a Filbert N2: a read that took served before a sync still finds its objects after served moves
+ok 72 - C2-03a Filbert N2: a read that took served before a sync still finds its objects after served moves
+  ---
+  duration_ms: 205.10431
+  type: 'test'
+  ...
+# Subtest: C2-03a overlap: a reader during a sync sees the old pair or the new one, never a mix
+ok 73 - C2-03a overlap: a reader during a sync sees the old pair or the new one, never a mix
+  ---
+  duration_ms: 175.907929
+  type: 'test'
+  ...
+# Subtest: C2-03a diverged: a non-fast-forward keeps serving and holds until a human accepts the tip
+ok 74 - C2-03a diverged: a non-fast-forward keeps serving and holds until a human accepts the tip
+  ---
+  duration_ms: 431.553812
+  type: 'test'
+  ...
+# Subtest: C2-03a accept starts the record over, so a changed branch gets a fresh state
+ok 75 - C2-03a accept starts the record over, so a changed branch gets a fresh state
+  ---
+  duration_ms: 195.011432
+  type: 'test'
+  ...
+# Subtest: C2-03a fetch failure: a wrong token keeps serving and records the error, lastFetch unchanged
+ok 76 - C2-03a fetch failure: a wrong token keeps serving and records the error, lastFetch unchanged
+  ---
+  duration_ms: 192.898644
+  type: 'test'
+  ...
+# Subtest: C2-03a a failed first fetch records the error with nothing served
+ok 77 - C2-03a a failed first fetch records the error with nothing served
+  ---
+  duration_ms: 61.594695
+  type: 'test'
+  ...
+# Subtest: C2-03a a 302 to another host fails the fetch and the other host sees nothing
+ok 78 - C2-03a a 302 to another host fails the fetch and the other host sees nothing
+  ---
+  duration_ms: 64.82991
+  type: 'test'
+  ...
+# Subtest: C2-03a the slot: missing or unsafe refuses before git, and sync never opens it
+ok 79 - C2-03a the slot: missing or unsafe refuses before git, and sync never opens it
+  ---
+  duration_ms: 59.167725
+  type: 'test'
+  ...
+# Subtest: C2-03a sage-2021: an entry with no user refuses library-remote-invalid and runs no git
+ok 80 - C2-03a sage-2021: an entry with no user refuses library-remote-invalid and runs no git
+  ---
+  duration_ms: 35.37205
+  type: 'test'
+  ...
+# Subtest: C2-03a one sync per mirror: an overlapping call refuses library-sync-busy
+ok 81 - C2-03a one sync per mirror: an overlapping call refuses library-sync-busy
+  ---
+  duration_ms: 118.260687
+  type: 'test'
+  ...
+1..81
+# tests 81
+# suites 0
+# pass 81
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 9149.325891
@@ -0,0 +1,48 @@
+✔ chat replies: free text, cites with badges, the agent label, changed since and safe links (633.807074ms)
+✔ chat replies: a write notice reads as its line with a Revert; a refused revert shows its code (621.95095ms)
+✔ chat replies: a read-only Console shows the notice with Revert disabled (577.638161ms)
+✔ chat status line: served commit and age, divergence, fetch error and the problems one click away (555.847899ms)
+✖ chat status line: limits when the status carries them, no problems, and refusals (3725.696272ms)
+✔ chat status line: a project with no repository link reads no library status (657.572856ms)
+✔ chat status line: unreadable reply limits show their problem and both fallback keys (663.163445ms)
+✔ chat replies: unchanged file at a different library commit and incomplete checks stay unmarked (616.184063ms)
+✖ chat status line: an invalid library mapping remains visible for diagnosis (597.976623ms)
+ℹ tests 9
+ℹ suites 0
+ℹ pass 7
+ℹ fail 2
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 8782.679569
+
+✖ failing tests:
+
+test at packages/webui/tests/chat-replies-browser.test.mjs:152:1
+✖ chat status line: limits when the status carries them, no problems, and refusals (3725.696272ms)
+  Error: Uncaught (in promise) Error: window.__statusReads.length && document.querySelector(".chat-conversation") && document.querySelector(".chat-library")?.textContent==="Library status unavailable (library-mapping-invalid).": undefined
+      at Object.evaluate (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/browser.mjs:49:35)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:162:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+
+test at packages/webui/tests/chat-replies-browser.test.mjs:200:1
+✖ chat status line: an invalid library mapping remains visible for diagnosis (597.976623ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  + actual - expected
+
+  + null
+  - 'Library status unavailable (library-mapping-invalid).'
+
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:203:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: null,
+    expected: 'Library status unavailable (library-mapping-invalid).',
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
@@ -0,0 +1,4 @@
+{"mutant": "M1-badges", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M1-badges.tap"}
+{"mutant": "M1-agent-label", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M1-agent-label.tap"}
+{"mutant": "M2-http-links", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M2-http-links.tap"}
+{"mutant": "M3-wrong-commit", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": false, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M3-wrong-commit.tap"}
@@ -0,0 +1,192 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 627.180675
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M1-agent-label/packages/webui/tests/chat-replies-browser.test.mjs:81:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+    ... Skipped lines
+
+      [
+        {
+          agent: null,
+          badge: 'canon',
+          changed: false,
+    ...
+        {
+    +     agent: null,
+    -     agent: 'agent-written: acme/scribe',
+          badge: 'supporting',
+          changed: false,
+          href: null,
+          quote: 'green eyes',
+          ref: 'Notes/Eyes.md:9-10 @aaaaaaa',
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  actual:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: ~
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M1-agent-label/packages/webui/tests/chat-replies-browser.test.mjs:90:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 778.572201
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 641.728604
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 629.327348
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 837.886073
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 613.037186
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 651.026507
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 735.546636
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 712.174542
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6353.090574
@@ -0,0 +1,206 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 638.589537
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M1-badges/packages/webui/tests/chat-replies-browser.test.mjs:81:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+    ... Skipped lines
+
+      [
+        {
+          agent: null,
+    +     badge: null,
+    -     badge: 'canon',
+          changed: false,
+          href: null,
+          quote: 'her grey eyes',
+          ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa',
+          rel: null
+    ...
+          agent: null,
+    +     badge: null,
+    -     badge: 'playground',
+          changed: true,
+          href: null,
+          quote: 'a storm',
+          ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa',
+          rel: null
+    ...
+          agent: 'agent-written: acme/scribe',
+    +     badge: null,
+    -     badge: 'supporting',
+          changed: false,
+          href: null,
+          quote: 'green eyes',
+          ref: 'Notes/Eyes.md:9-10 @aaaaaaa',
+          rel: null
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  actual:
+    0:
+      badge: ~
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: ~
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: ~
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M1-badges/packages/webui/tests/chat-replies-browser.test.mjs:90:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 770.070531
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 519.328288
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 647.667301
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 999.237447
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 676.088845
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 634.472637
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 655.963182
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 578.819646
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6239.022812
@@ -0,0 +1,204 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 655.901619
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M2-http-links/packages/webui/tests/chat-replies-browser.test.mjs:81:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+    ... Skipped lines
+
+      [
+        {
+          agent: null,
+          badge: 'canon',
+          changed: false,
+    ...
+          changed: false,
+    +     href: 'http://example.invalid/plain',
+    -     href: null,
+          quote: 'plain http',
+          ref: 'http://example.invalid/plain',
+    +     rel: 'noopener noreferrer'
+    -     rel: null
+        },
+        {
+          agent: null,
+          badge: 'web',
+          changed: false,
+    +     href: 'javascript:window.injected=2',
+    -     href: null,
+          quote: 'script',
+          ref: 'javascript:window.injected=2',
+    +     rel: 'noopener noreferrer'
+    -     rel: null
+        }
+      ]
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  actual:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: 'http://example.invalid/plain'
+      rel: 'noopener noreferrer'
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: 'javascript:window.injected=2'
+      rel: 'noopener noreferrer'
+      quote: 'script'
+      agent: ~
+      changed: false
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M2-http-links/packages/webui/tests/chat-replies-browser.test.mjs:90:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 741.122544
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 616.728572
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 625.818493
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 867.033773
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 655.587703
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 615.997516
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 648.263681
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 624.323397
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6168.633364
@@ -0,0 +1,74 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 640.32042
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 694.233373
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 611.500508
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 606.581119
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 896.462474
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 666.798177
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 629.105559
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+not ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 3654.057789
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M3-wrong-commit/packages/webui/tests/chat-replies-browser.test.mjs:184:1'
+  failureType: 'testCodeFailure'
+  error: 'Uncaught (in promise) Error: document.querySelectorAll(".chat-changed").length===0: undefined'
+  code: 'ERR_TEST_FAILURE'
+  stack: |-
+    Object.evaluate (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M3-wrong-commit/packages/webui/tests/browser.mjs:49:35)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M3-wrong-commit/packages/webui/tests/chat-replies-browser.test.mjs:195:3)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 656.44095
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 9179.328916
@@ -0,0 +1,47 @@
+{
+  "head": "77172ce3b46eb289409068518b7022fc7be47ebe",
+  "clear": "sage-3647",
+  "worktreeUnchanged": true,
+  "results": [
+    {
+      "mutant": "M1-badges",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M1-badges.tap"
+    },
+    {
+      "mutant": "M1-agent-label",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M1-agent-label.tap"
+    },
+    {
+      "mutant": "M2-http-links",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M2-http-links.tap"
+    },
+    {
+      "mutant": "M3-wrong-commit",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": false,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M3-wrong-commit.tap"
+    }
+  ]
+}
@@ -0,0 +1,14 @@
+{"mutant": "M1-badges", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M1-badges.tap"}
+{"mutant": "M1-agent-label", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M1-agent-label.tap"}
+{"mutant": "M2-http-links", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M2-http-links.tap"}
+{"mutant": "M3-wrong-commit", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M3-wrong-commit.tap"}
+{"mutant": "M3-missing-file", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M3-missing-file.tap"}
+{"mutant": "M4-fallback", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M4-fallback.tap"}
+{"mutant": "M4-problem", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M4-problem.tap"}
+{"mutant": "M5-send", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-send.tap"}
+{"mutant": "M5-project-receipt", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-project-receipt.tap"}
+{"mutant": "M5-commit-input", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-commit-input.tap"}
+{"mutant": "M5-origin", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-origin.tap"}
+{"mutant": "M5-fetch-metadata", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-fetch-metadata.tap"}
+{"mutant": "M6-duplicate-call", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M6-duplicate-call.tap"}
+{"mutant": "M7-user-fence", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M7-user-fence.tap"}
@@ -0,0 +1,192 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 646.851404
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M1-agent-label/packages/webui/tests/chat-replies-browser.test.mjs:81:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+    ... Skipped lines
+
+      [
+        {
+          agent: null,
+          badge: 'canon',
+          changed: false,
+    ...
+        {
+    +     agent: null,
+    -     agent: 'agent-written: acme/scribe',
+          badge: 'supporting',
+          changed: false,
+          href: null,
+          quote: 'green eyes',
+          ref: 'Notes/Eyes.md:9-10 @aaaaaaa',
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  actual:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: ~
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M1-agent-label/packages/webui/tests/chat-replies-browser.test.mjs:90:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 667.90945
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 588.346681
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 485.882289
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 709.847041
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 544.885551
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 514.410016
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 542.746154
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 582.608663
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 5409.980177
@@ -0,0 +1,206 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 621.562133
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M1-badges/packages/webui/tests/chat-replies-browser.test.mjs:81:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+    ... Skipped lines
+
+      [
+        {
+          agent: null,
+    +     badge: null,
+    -     badge: 'canon',
+          changed: false,
+          href: null,
+          quote: 'her grey eyes',
+          ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa',
+          rel: null
+    ...
+          agent: null,
+    +     badge: null,
+    -     badge: 'playground',
+          changed: true,
+          href: null,
+          quote: 'a storm',
+          ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa',
+          rel: null
+    ...
+          agent: 'agent-written: acme/scribe',
+    +     badge: null,
+    -     badge: 'supporting',
+          changed: false,
+          href: null,
+          quote: 'green eyes',
+          ref: 'Notes/Eyes.md:9-10 @aaaaaaa',
+          rel: null
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  actual:
+    0:
+      badge: ~
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: ~
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: ~
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M1-badges/packages/webui/tests/chat-replies-browser.test.mjs:90:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 731.101767
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 633.163696
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 637.761161
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 847.929653
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 635.512979
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 645.427688
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 672.272209
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 629.043251
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6169.954716
@@ -0,0 +1,204 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 582.248796
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M2-http-links/packages/webui/tests/chat-replies-browser.test.mjs:81:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+    ... Skipped lines
+
+      [
+        {
+          agent: null,
+          badge: 'canon',
+          changed: false,
+    ...
+          changed: false,
+    +     href: 'http://example.invalid/plain',
+    -     href: null,
+          quote: 'plain http',
+          ref: 'http://example.invalid/plain',
+    +     rel: 'noopener noreferrer'
+    -     rel: null
+        },
+        {
+          agent: null,
+          badge: 'web',
+          changed: false,
+    +     href: 'javascript:window.injected=2',
+    -     href: null,
+          quote: 'script',
+          ref: 'javascript:window.injected=2',
+    +     rel: 'noopener noreferrer'
+    -     rel: null
+        }
+      ]
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  actual:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: 'http://example.invalid/plain'
+      rel: 'noopener noreferrer'
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: 'javascript:window.injected=2'
+      rel: 'noopener noreferrer'
+      quote: 'script'
+      agent: ~
+      changed: false
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M2-http-links/packages/webui/tests/chat-replies-browser.test.mjs:90:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 640.769563
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 572.506418
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 519.031091
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 743.513043
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 676.282756
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 595.166769
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 626.475981
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 596.828198
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 5658.889854
@@ -0,0 +1,81 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 639.027823
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 693.772757
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 683.094789
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 637.029355
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 772.100011
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 599.342035
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 574.320042
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+not ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 621.466015
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M3-missing-file/packages/webui/tests/chat-replies-browser.test.mjs:184:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    1 !== 0
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 0
+  actual: 1
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M3-missing-file/packages/webui/tests/chat-replies-browser.test.mjs:196:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 590.165121
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 5921.651346
@@ -0,0 +1,81 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 704.141588
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 816.229452
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 697.826745
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 638.579753
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 850.914117
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 634.004327
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 585.469632
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+not ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 673.386968
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M3-wrong-commit/packages/webui/tests/chat-replies-browser.test.mjs:184:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    1 !== 0
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 0
+  actual: 1
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M3-wrong-commit/packages/webui/tests/chat-replies-browser.test.mjs:196:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 579.53998
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6292.579267
@@ -0,0 +1,102 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 683.334532
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 686.685624
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 612.757087
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 584.651483
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+not ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 637.405759
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M4-fallback/packages/webui/tests/chat-replies-browser.test.mjs:152:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+    + actual - expected
+
+    + 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · no problems'
+    - 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · limits fell back: citationsPerReply · no problems'
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · limits fell back: citationsPerReply · no problems'
+  actual: 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · no problems'
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M4-fallback/packages/webui/tests/chat-replies-browser.test.mjs:156:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 626.790802
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+not ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 643.680732
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M4-fallback/packages/webui/tests/chat-replies-browser.test.mjs:173:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+    + actual - expected
+
+    + 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · reply-limits-unreadable · no problems'
+    - 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
+  actual: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · reply-limits-unreadable · no problems'
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M4-fallback/packages/webui/tests/chat-replies-browser.test.mjs:179:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 645.032205
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 616.242947
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 7
+# fail 2
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 5845.226677
@@ -0,0 +1,83 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 663.005514
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 662.360161
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 620.68694
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 744.825035
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 826.418848
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 549.365993
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+not ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 589.776762
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M4-problem/packages/webui/tests/chat-replies-browser.test.mjs:173:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+    + actual - expected
+
+    + 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · no problems'
+    - 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
+  actual: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · no problems'
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M4-problem/packages/webui/tests/chat-replies-browser.test.mjs:179:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 590.919434
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 545.326381
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 5914.325706
@@ -0,0 +1,105 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 16.128237
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 5.987607
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+not ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 4.805637
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-commit-input/packages/webui/tests/library-routes.test.mjs:64:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    {"project":"books","commit":"abc"}
+
+    200 !== 400
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 400
+  actual: 200
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-commit-input/packages/webui/tests/library-routes.test.mjs:69:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.383811
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.000988
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.487122
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 4.9292
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.266317
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.443059
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.048018
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 0.864934
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.064626
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.803048
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 12
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 153.3549
@@ -0,0 +1,105 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 20.271342
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+not ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 5.700968
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-fetch-metadata/packages/webui/tests/library-routes.test.mjs:48:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    sec-fetch-site
+
+    200 !== 403
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 403
+  actual: 200
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-fetch-metadata/packages/webui/tests/library-routes.test.mjs:57:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 6.427935
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 7.39929
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 5.425467
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.634037
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 5.727409
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.317954
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.583799
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.207375
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 0.956772
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.147745
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.819337
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 12
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 166.134058
@@ -0,0 +1,105 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 16.249491
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+not ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 5.463985
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-origin/packages/webui/tests/library-routes.test.mjs:48:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    origin
+
+    200 !== 403
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 403
+  actual: 200
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-origin/packages/webui/tests/library-routes.test.mjs:57:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 6.035196
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 5.621744
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.928333
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.455282
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 4.838747
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.235209
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.436399
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.100574
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 0.943474
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.176957
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.861834
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 12
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 150.969641
@@ -0,0 +1,105 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 18.918199
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 7.26916
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 5.352342
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.134713
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.288914
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.745385
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 5.739155
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.264793
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.471965
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.045204
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+not ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 1.531252
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-project-receipt/packages/webui/tests/library-routes.test.mjs:145:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    200 !== 503
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 503
+  actual: 200
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-project-receipt/packages/webui/tests/library-routes.test.mjs:148:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.60161
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.816068
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 12
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 171.289003
@@ -0,0 +1,106 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 18.930067
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 7.470645
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 6.646929
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.637697
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.174441
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.513131
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 5.145692
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.182362
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.471806
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.064814
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 0.910004
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.16191
+  type: 'test'
+  ...
+# 2026-10-23T19:28:51.488Z library-revert user="jason" project="books" commit="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" commit=bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb
+# Subtest: a configured revert callback remains unreachable when send is off
+not ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 1.624909
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-send/packages/webui/tests/library-routes.test.mjs:175:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    200 !== 403
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 403
+  actual: 200
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-send/packages/webui/tests/library-routes.test.mjs:181:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 12
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 165.919088
@@ -0,0 +1,177 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+not ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 17.922489
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:40:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+
+      [
+        {
+          commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
+          project: 'books'
+        },
+    +   {
+    +     commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
+    +     project: 'books'
+    +   }
+      ]
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+  actual:
+    0:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+    1:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:43:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 7.053366
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 5.869486
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.852952
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+not ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 2.870452
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:88:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    2 !== 1
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 1
+  actual: 2
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:96:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.904694
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 5.7962
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.518332
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.563294
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.17446
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+not ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 1.258633
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:145:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+
+      [
+        {
+          commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
+          project: 'books'
+        },
+    +   {
+    +     commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
+    +     project: 'books'
+    +   }
+      ]
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+  actual:
+    0:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+    1:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:151:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.362877
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.848309
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 10
+# fail 3
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 169.162917
@@ -0,0 +1,126 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 18.215173
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 6.416847
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 5.529629
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.92431
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.588509
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.817257
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 6.020444
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.377224
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+not ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 1.015984
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M7-user-fence/packages/webui/tests/library-routes.test.mjs:132:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    /api/library/status
+
+    true !== false
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: false
+  actual: true
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M7-user-fence/packages/webui/tests/library-routes.test.mjs:133:106)
+    Test.runInAsyncScope (node:async_hooks:226:14)
+    Test.run (node:internal/test_runner/test:1402:25)
+    Test.processPendingSubtests (node:internal/test_runner/test:974:18)
+    Test.postRun (node:internal/test_runner/test:1542:19)
+    Test.run (node:internal/test_runner/test:1467:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.695555
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 1.378325
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+not ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.178045
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M7-user-fence/packages/webui/tests/library-routes.test.mjs:155:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    503 !== 403
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 403
+  actual: 503
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M7-user-fence/packages/webui/tests/library-routes.test.mjs:167:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 1.057394
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 11
+# fail 2
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 176.864112
@@ -0,0 +1,147 @@
+{
+  "head": "50790127716002f97154800ecbfb968690a9d644",
+  "clear": "sage-3647",
+  "worktreeUnchanged": true,
+  "results": [
+    {
+      "mutant": "M1-badges",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M1-badges.tap"
+    },
+    {
+      "mutant": "M1-agent-label",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M1-agent-label.tap"
+    },
+    {
+      "mutant": "M2-http-links",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M2-http-links.tap"
+    },
+    {
+      "mutant": "M3-wrong-commit",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M3-wrong-commit.tap"
+    },
+    {
+      "mutant": "M3-missing-file",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M3-missing-file.tap"
+    },
+    {
+      "mutant": "M4-fallback",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M4-fallback.tap"
+    },
+    {
+      "mutant": "M4-problem",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M4-problem.tap"
+    },
+    {
+      "mutant": "M5-send",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-send.tap"
+    },
+    {
+      "mutant": "M5-project-receipt",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-project-receipt.tap"
+    },
+    {
+      "mutant": "M5-commit-input",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-commit-input.tap"
+    },
+    {
+      "mutant": "M5-origin",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-origin.tap"
+    },
+    {
+      "mutant": "M5-fetch-metadata",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-fetch-metadata.tap"
+    },
+    {
+      "mutant": "M6-duplicate-call",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M6-duplicate-call.tap"
+    },
+    {
+      "mutant": "M7-user-fence",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M7-user-fence.tap"
+    }
+  ]
+}
@@ -0,0 +1,22 @@
+TAP version 13
+# Subtest: channel conversion preserves the four proof/transport byte baselines and modules cannot import a proof caller
+ok 1 - channel conversion preserves the four proof/transport byte baselines and modules cannot import a proof caller
+  ---
+  duration_ms: 0.97881
+  type: 'test'
+  ...
+# Subtest: channel recovery still requires the same shim path and rejects an absent or forged proof
+ok 2 - channel recovery still requires the same shim path and rejects an absent or forged proof
+  ---
+  duration_ms: 376.310279
+  type: 'test'
+  ...
+1..2
+# tests 2
+# suites 0
+# pass 2
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 473.296901
@@ -0,0 +1,8 @@
+{
+  "at": "2026-10-24T15:02:21.827084+00:00",
+  "scratch": "/mnt/storage/scratch/tmp/rbCdM2",
+  "scratchOwnedNodeChromium": [],
+  "signalsNeeded": false,
+  "rootDependencySymlink": false,
+  "webuiDependencySymlink": false
+}
@@ -0,0 +1,16 @@
+npm notice run @mosaic/[email protected] build:editor
+npm notice run node editor/build.mjs
+▲ [WARNING] Ignoring this import because "third_party/editor/prosemirror-transform/src/mark.ts" was marked as having no side effects [ignored-bare-import]
+
+    third_party/editor/prosemirror-transform/src/index.ts:10:7:
+      10 │ import "./mark"
+         ╵        ~~~~~~~~
+
+  "sideEffects" is false in the enclosing "package.json" file:
+
+    third_party/editor/prosemirror-transform/package.json:13:2:
+      13 │   "sideEffects": false,
+         ╵   ~~~~~~~~~~~~~
+
+editor.js 9c881b13740fae2408717ad75fa1d85bfcfe3fa8b3af0f1b3f2e706c90e80fee (133 inputs)
+editor.css 8654ac57d1e7a561110138ecd7f701c34a074017ff8c4cd2768d8083908ee61f
@@ -0,0 +1,69 @@
+[
+  {
+    "step": "editor-build",
+    "exit": 0,
+    "seconds": 0.288,
+    "command": [
+      "npm",
+      "run",
+      "build:editor"
+    ],
+    "cwd": "packages/webui"
+  },
+  {
+    "step": "webui-full",
+    "exit": 0,
+    "seconds": 274.272,
+    "command": [
+      "node",
+      "--test",
+      "--test-reporter=tap",
+      "--test-concurrency=1",
+      "--test-timeout=30000",
+      "packages/webui/tests/"
+    ],
+    "cwd": "."
+  },
+  {
+    "step": "library-full",
+    "exit": 0,
+    "seconds": 14.981,
+    "command": [
+      "node",
+      "--test",
+      "--test-reporter=tap",
+      "--test-concurrency=1",
+      "--test-timeout=30000",
+      "packages/library/tests/"
+    ],
+    "cwd": "."
+  },
+  {
+    "step": "bus-full",
+    "exit": 0,
+    "seconds": 125.727,
+    "command": [
+      "node",
+      "--test",
+      "--test-reporter=tap",
+      "--test-concurrency=1",
+      "--test-timeout=30000",
+      "packages/bus/tests/"
+    ],
+    "cwd": "."
+  },
+  {
+    "step": "channel-proof",
+    "exit": 0,
+    "seconds": 0.503,
+    "command": [
+      "node",
+      "--test",
+      "--test-reporter=tap",
+      "--test-concurrency=1",
+      "--test-timeout=30000",
+      "packages/bus/tests/channel-proof.test.mjs"
+    ],
+    "cwd": "."
+  }
+]
@@ -0,0 +1,905 @@
+TAP version 13
+# Subtest: C2-06 reply schema: free bodies, exact objects and safe refusal reasons
+ok 1 - C2-06 reply schema: free bodies, exact objects and safe refusal reasons
+  ---
+  duration_ms: 17.189459
+  type: 'test'
+  ...
+# Subtest: C2-06 citation setting and all four exact fixed texts
+ok 2 - C2-06 citation setting and all four exact fixed texts
+  ---
+  duration_ms: 12.53954
+  type: 'test'
+  ...
+# Subtest: C2-06 default citation cap passes 20 and refuses 21, even with optional citations
+ok 3 - C2-06 default citation cap passes 20 and refuses 21, even with optional citations
+  ---
+  duration_ms: 93.810117
+  type: 'test'
+  ...
+# Subtest: C2-06 real Git citation scope, reachability, lines and normalized quotes
+ok 4 - C2-06 real Git citation scope, reachability, lines and normalized quotes
+  ---
+  duration_ms: 50.779918
+  type: 'test'
+  ...
+# Subtest: C2-06 playground cites pass but cannot state canon
+ok 5 - C2-06 playground cites pass but cannot state canon
+  ---
+  duration_ms: 29.160097
+  type: 'test'
+  ...
+# Subtest: C2-06 independent universes refuse; a hybrid and only its sources pass
+ok 6 - C2-06 independent universes refuse; a hybrid and only its sources pass
+  ---
+  duration_ms: 50.655113
+  type: 'test'
+  ...
+# Subtest: C2-06 web cites require allowed definition, this session fetch and kept quote
+ok 7 - C2-06 web cites require allowed definition, this session fetch and kept quote
+  ---
+  duration_ms: 13.192112
+  type: 'test'
+  ...
+# Subtest: C2-06 file origin is the path commit and trailer, while last follows served changes
+ok 8 - C2-06 file origin is the path commit and trailer, while last follows served changes
+  ---
+  duration_ms: 40.750304
+  type: 'test'
+  ...
+# Subtest: C2-06 origin uses literal paths even when a filename contains a glob
+ok 9 - C2-06 origin uses literal paths even when a filename contains a glob
+  ---
+  duration_ms: 25.953804
+  type: 'test'
+  ...
+# Subtest: C2-06 cited-commit guard reads exactly the C2-05a indexed file set with supporting scope
+ok 10 - C2-06 cited-commit guard reads exactly the C2-05a indexed file set with supporting scope
+  ---
+  duration_ms: 55.312833
+  type: 'test'
+  ...
+# Subtest: C2-06 reply limits fall back independently without coercion or inherited keys
+ok 11 - C2-06 reply limits fall back independently without coercion or inherited keys
+  ---
+  duration_ms: 0.577179
+  type: 'test'
+  ...
+# Subtest: the same commit, repo path and mapping return the same index, and only mapped files are in it
+ok 12 - the same commit, repo path and mapping return the same index, and only mapped files are in it
+  ---
+  duration_ms: 27.069716
+  type: 'test'
+  ...
+# Subtest: a different repo path, mapping or commit gets its own index
+ok 13 - a different repo path, mapping or commit gets its own index
+  ---
+  duration_ms: 44.766781
+  type: 'test'
+  ...
+# Subtest: the cache holds at most eight indexes and evicts the least recently used
+ok 14 - the cache holds at most eight indexes and evicts the least recently used
+  ---
+  duration_ms: 65.786114
+  type: 'test'
+  ...
+# Subtest: a failed read is not kept in the cache
+ok 15 - a failed read is not kept in the cache
+  ---
+  duration_ms: 13.289447
+  type: 'test'
+  ...
+# Subtest: a missing or unchecked mapping is refused before any read
+ok 16 - a missing or unchecked mapping is refused before any read
+  ---
+  duration_ms: 11.613882
+  type: 'test'
+  ...
+# Subtest: a 3,000-file rebuild completes and its time is reported
+ok 17 - a 3,000-file rebuild completes and its time is reported
+  ---
+  duration_ms: 2747.108654
+  type: 'test'
+  ...
+# 3,000-file index rebuild: 2583 ms
+# Subtest: resolver step 1: a path from the repo root, with or without .md
+ok 18 - resolver step 1: a path from the repo root, with or without .md
+  ---
+  duration_ms: 1.045058
+  type: 'test'
+  ...
+# Subtest: resolver step 2: the same path with vaultPrefix/ stripped
+ok 19 - resolver step 2: the same path with vaultPrefix/ stripped
+  ---
+  duration_ms: 0.17514
+  type: 'test'
+  ...
+# Subtest: resolver step 3: a path relative to the linking file, never above the repo root
+ok 20 - resolver step 3: a path relative to the linking file, never above the repo root
+  ---
+  duration_ms: 0.184944
+  type: 'test'
+  ...
+# Subtest: resolver step 4: a base name that matches exactly one indexed file
+ok 21 - resolver step 4: a base name that matches exactly one indexed file
+  ---
+  duration_ms: 0.191037
+  type: 'test'
+  ...
+# Subtest: a link into another of her repos resolves to nothing
+ok 22 - a link into another of her repos resolves to nothing
+  ---
+  duration_ms: 0.135053
+  type: 'test'
+  ...
+# Subtest: wikilink forms, embeds, and links skipped inside code
+ok 23 - wikilink forms, embeds, and links skipped inside code
+  ---
+  duration_ms: 0.747412
+  type: 'test'
+  ...
+# Subtest: only a body embed whose target has an extension other than .md, in any case, is an attachment
+ok 24 - only a body embed whose target has an extension other than .md, in any case, is an attachment
+  ---
+  duration_ms: 0.275738
+  type: 'test'
+  ...
+# Subtest: the fixture mapping checks and comes back frozen
+ok 25 - the fixture mapping checks and comes back frozen
+  ---
+  duration_ms: 1.690568
+  type: 'test'
+  ...
+# Subtest: C2-01c: a prefix inside or holding another entry's book refuses library-playground-other-universe
+ok 26 - C2-01c: a prefix inside or holding another entry's book refuses library-playground-other-universe
+  ---
+  duration_ms: 0.709762
+  type: 'test'
+  ...
+# Subtest: C2-01c: a prefix equal to a book folder, or holding its own, refuses library-mapping-invalid
+ok 27 - C2-01c: a prefix equal to a book folder, or holding its own, refuses library-mapping-invalid
+  ---
+  duration_ms: 0.417767
+  type: 'test'
+  ...
+# Subtest: C2-01c: universe-level prefixes lie outside every book, in a plain universe and in a hybrid with no books
+ok 28 - C2-01c: universe-level prefixes lie outside every book, in a plain universe and in a hybrid with no books
+  ---
+  duration_ms: 0.658449
+  type: 'test'
+  ...
+# Subtest: C2-01c: a draft takes kind, name and playground only, and comes back frozen with books []
+ok 29 - C2-01c: a draft takes kind, name and playground only, and comes back frozen with books []
+  ---
+  duration_ms: 1.070571
+  type: 'test'
+  ...
+# Subtest: C2-01d: supporting prefixes at book level, universe level, in a hybrid and in a draft, [] when absent
+ok 30 - C2-01d: supporting prefixes at book level, universe level, in a hybrid and in a draft, [] when absent
+  ---
+  duration_ms: 0.331996
+  type: 'test'
+  ...
+# Subtest: C2-01d: each supporting prefix rule refuses with its code
+ok 31 - C2-01d: each supporting prefix rule refuses with its code
+  ---
+  duration_ms: 1.524906
+  type: 'test'
+  ...
+# Subtest: C2-01d: between the lists, a supporting prefix may equal its own playground, and a playground may hold its own supporting
+ok 32 - C2-01d: between the lists, a supporting prefix may equal its own playground, and a playground may hold its own supporting
+  ---
+  duration_ms: 0.595392
+  type: 'test'
+  ...
+# Subtest: C2-01d: editor is optional, kept when given, and refuses anything but a plain name and email
+ok 33 - C2-01d: editor is optional, kept when given, and refuses anything but a plain name and email
+  ---
+  duration_ms: 2.763196
+  type: 'test'
+  ...
+# Subtest: C2-01d: an accepted editor round-trips through a real git commit unchanged
+ok 34 - C2-01d: an accepted editor round-trips through a real git commit unchanged
+  ---
+  duration_ms: 10.253061
+  type: 'test'
+  ...
+# Subtest: no playground prefix holds another, and no book folder holds another
+ok 35 - no playground prefix holds another, and no book folder holds another
+  ---
+  duration_ms: 0.575878
+  type: 'test'
+  ...
+# Subtest: shape refusals: kind, remote, branch, unknown keys, types, manuscript, folder names
+ok 36 - shape refusals: kind, remote, branch, unknown keys, types, manuscript, folder names
+  ---
+  duration_ms: 0.715513
+  type: 'test'
+  ...
+# Subtest: C2-03a sage-2021: user is optional, kept when given, and must be a plain account name
+ok 37 - C2-03a sage-2021: user is optional, kept when given, and must be a plain account name
+  ---
+  duration_ms: 0.499903
+  type: 'test'
+  ...
+# Subtest: a hybrid universe is a shape the query code can take (1.4), with sources that must exist
+ok 38 - a hybrid universe is a shape the query code can take (1.4), with sources that must exist
+  ---
+  duration_ms: 0.887001
+  type: 'test'
+  ...
+# Subtest: a caller-supplied fail receives the code, as business file loading will pass it (C2-04)
+ok 39 - a caller-supplied fail receives the code, as business file loading will pass it (C2-04)
+  ---
+  duration_ms: 0.215772
+  type: 'test'
+  ...
+# Subtest: scope comes from the path alone (design 1.2)
+ok 40 - scope comes from the path alone (design 1.2)
+  ---
+  duration_ms: 0.380641
+  type: 'test'
+  ...
+# Subtest: C2-04 mirror: exact default path, bare without checkout or remote, and idempotent initialization
+ok 41 - C2-04 mirror: exact default path, bare without checkout or remote, and idempotent initialization
+  ---
+  duration_ms: 36.752555
+  type: 'test'
+  ...
+# Subtest: C2-04 mirror: simultaneous creators publish one intact mirror and leave no staging paths
+ok 42 - C2-04 mirror: simultaneous creators publish one intact mirror and leave no staging paths
+  ---
+  duration_ms: 28.683571
+  type: 'test'
+  ...
+# Subtest: C2-04 mirror: skipped publication accepts both coreutils statuses without removing the winner
+ok 43 - C2-04 mirror: skipped publication accepts both coreutils statuses without removing the winner
+  ---
+  duration_ms: 106.133994
+  type: 'test'
+  ...
+# Subtest: C2-04 mirror: preserve occupied directories and reject symlink ancestors and code overlaps
+ok 44 - C2-04 mirror: preserve occupied directories and reject symlink ancestors and code overlaps
+  ---
+  duration_ms: 12.154398
+  type: 'test'
+  ...
+# Subtest: C2-04 mirror: existing metadata accepts only bare Git plus state and the precreated lock
+ok 45 - C2-04 mirror: existing metadata accepts only bare Git plus state and the precreated lock
+  ---
+  duration_ms: 21.554021
+  type: 'test'
+  ...
+# Subtest: C2-04 state: missing state is empty only while the served ref is absent
+ok 46 - C2-04 state: missing state is empty only while the served ref is absent
+  ---
+  duration_ms: 36.680415
+  type: 'test'
+  ...
+# Subtest: C2-04 state: valid problems and sync metadata return no content and change no state bytes
+ok 47 - C2-04 state: valid problems and sync metadata return no content and change no state bytes
+  ---
+  duration_ms: 37.530513
+  type: 'test'
+  ...
+# Subtest: C2-04 state: strict keys, types, times, branch, commit and fixed R messages fail closed
+ok 48 - C2-04 state: strict keys, types, times, branch, commit and fixed R messages fail closed
+  ---
+  duration_ms: 102.20466
+  type: 'test'
+  ...
+# Subtest: C2-04 state: symlink, hardlink, non-private state and missing lock refuse without replacement
+ok 49 - C2-04 state: symlink, hardlink, non-private state and missing lock refuse without replacement
+  ---
+  duration_ms: 29.713255
+  type: 'test'
+  ...
+# Subtest: C2-04 file: served commit, not HEAD or a caller commit, owns the exact returned text
+ok 50 - C2-04 file: served commit, not HEAD or a caller commit, owns the exact returned text
+  ---
+  duration_ms: 75.482761
+  type: 'test'
+  ...
+# Subtest: C2-04 file: R1, R2 and R7 exclusions and never-synced mirrors cannot return file bodies
+ok 51 - C2-04 file: R1, R2 and R7 exclusions and never-synced mirrors cannot return file bodies
+  ---
+  duration_ms: 81.31492
+  type: 'test'
+  ...
+# Subtest: C2-04 lock: a first-sync and fast-forward reader wait for a consistent pair across processes
+ok 52 - C2-04 lock: a first-sync and fast-forward reader wait for a consistent pair across processes
+  ---
+  duration_ms: 247.180363
+  type: 'test'
+  ...
+# Subtest: C2-04 lock: same-process waits, timeout code, callback expiry and throw release
+ok 53 - C2-04 lock: same-process waits, timeout code, callback expiry and throw release
+  ---
+  duration_ms: 5031.333528
+  type: 'test'
+  ...
+# Subtest: C2-04 lock: owner death releases the kernel lock without replacing its file
+ok 54 - C2-04 lock: owner death releases the kernel lock without replacing its file
+  ---
+  duration_ms: 60.37894
+  type: 'test'
+  ...
+# Subtest: C2-04 lock: a missing flock binary becomes a handled refusal
+ok 55 - C2-04 lock: a missing flock binary becomes a handled refusal
+  ---
+  duration_ms: 52.707661
+  type: 'test'
+  ...
+# Subtest: C2-04 lock: an unawaited scoped read drains before the lock is released
+ok 56 - C2-04 lock: an unawaited scoped read drains before the lock is released
+  ---
+  duration_ms: 20.968604
+  type: 'test'
+  ...
+# Subtest: the query reply cap equals the harness reply cap
+ok 57 - the query reply cap equals the harness reply cap
+  ---
+  duration_ms: 0.764136
+  type: 'test'
+  ...
+# Subtest: find is bound to its universe and refuses a call without one
+ok 58 - find is bound to its universe and refuses a call without one
+  ---
+  duration_ms: 32.208658
+  type: 'test'
+  ...
+# Subtest: every result carries its scope, and playground appears only when asked for
+ok 59 - every result carries its scope, and playground appears only when asked for
+  ---
+  duration_ms: 22.460169
+  type: 'test'
+  ...
+# Subtest: unmapped files never appear in any reply
+ok 60 - unmapped files never appear in any reply
+  ---
+  duration_ms: 21.117277
+  type: 'test'
+  ...
+# Subtest: a hybrid sees its sources canon, minus exclusions, and no playground
+ok 61 - a hybrid sees its sources canon, minus exclusions, and no playground
+  ---
+  duration_ms: 21.479685
+  type: 'test'
+  ...
+# Subtest: a hybrid gets a source file it can see, and not an excluded or foreign one
+ok 62 - a hybrid gets a source file it can see, and not an excluded or foreign one
+  ---
+  duration_ms: 30.779213
+  type: 'test'
+  ...
+# Subtest: get lists visible links both ways and drops a target another universe cannot see
+ok 63 - get lists visible links both ways and drops a target another universe cannot see
+  ---
+  duration_ms: 30.529291
+  type: 'test'
+  ...
+# Subtest: a long list pages by position, never cuts an item, and returns 50 per page
+ok 64 - a long list pages by position, never cuts an item, and returns 50 per page
+  ---
+  duration_ms: 124.407539
+  type: 'test'
+  ...
+# Subtest: a page stays under the reply cap when items are large
+ok 65 - a page stays under the reply cap when items are large
+  ---
+  duration_ms: 57.810337
+  type: 'test'
+  ...
+# Subtest: a search line too long to fit alone comes back marked, with no excerpt, and the other hits still return
+ok 66 - a search line too long to fit alone comes back marked, with no excerpt, and the other hits still return
+  ---
+  duration_ms: 23.581956
+  type: 'test'
+  ...
+# Subtest: a find item that cannot fit alone is refused, not cut
+ok 67 - a find item that cannot fit alone is refused, not cut
+  ---
+  duration_ms: 22.252458
+  type: 'test'
+  ...
+# Subtest: get pages its lines, and the next line picks up where the page stopped
+ok 68 - get pages its lines, and the next line picks up where the page stopped
+  ---
+  duration_ms: 23.912496
+  type: 'test'
+  ...
+# Subtest: get refuses a file whose front matter alone is over the cap, and a line alone is over the cap
+ok 69 - get refuses a file whose front matter alone is over the cap, and a line alone is over the cap
+  ---
+  duration_ms: 24.150899
+  type: 'test'
+  ...
+# Subtest: get pages the links of a hub note, every page carries the front matter, and the pages add up
+ok 70 - get pages the links of a hub note, every page carries the front matter, and the pages add up
+  ---
+  duration_ms: 813.956135
+  type: 'test'
+  ...
+# Subtest: get rejects a bad links_from
+ok 71 - get rejects a bad links_from
+  ---
+  duration_ms: 31.267213
+  type: 'test'
+  ...
+# Subtest: search returns scoped line hits, case-insensitively, and refuses empty text
+ok 72 - search returns scoped line hits, case-insensitively, and refuses empty text
+  ---
+  duration_ms: 27.15274
+  type: 'test'
+  ...
+# Subtest: a manuscript call returns one chapter, at most 400 lines, and names its next line
+ok 73 - a manuscript call returns one chapter, at most 400 lines, and names its next line
+  ---
+  duration_ms: 44.387645
+  type: 'test'
+  ...
+# Subtest: a manuscript call without a chapter returns the first chapter in path order and names the next
+ok 74 - a manuscript call without a chapter returns the first chapter in path order and names the next
+  ---
+  duration_ms: 26.076613
+  type: 'test'
+  ...
+# Subtest: a chapter name that matches two visible files is refused
+ok 75 - a chapter name that matches two visible files is refused
+  ---
+  duration_ms: 27.921747
+  type: 'test'
+  ...
+# Subtest: a hybrid reads a source chapter through its declared sources only
+ok 76 - a hybrid reads a source chapter through its declared sources only
+  ---
+  duration_ms: 33.188323
+  type: 'test'
+  ...
+# Subtest: universe info reports a hybrid sources, constraints and notes, and refuses an unknown universe
+ok 77 - universe info reports a hybrid sources, constraints and notes, and refuses an unknown universe
+  ---
+  duration_ms: 11.456952
+  type: 'test'
+  ...
+# Subtest: an exclusion hides what it names from a hybrid and from nothing else
+ok 78 - an exclusion hides what it names from a hybrid and from nothing else
+  ---
+  duration_ms: 33.694035
+  type: 'test'
+  ...
+# Subtest: PRD 1.14: a lookup that names a book leaves book-null files out
+ok 79 - PRD 1.14: a lookup that names a book leaves book-null files out
+  ---
+  duration_ms: 27.623969
+  type: 'test'
+  ...
+# Subtest: PRD 1.14: library_manuscript never reads a book-null file
+ok 80 - PRD 1.14: library_manuscript never reads a book-null file
+  ---
+  duration_ms: 27.898096
+  type: 'test'
+  ...
+# Subtest: PRD 1.14: a draft universe has no canon, so its lookups return files only with scope playground
+ok 81 - PRD 1.14: a draft universe has no canon, so its lookups return files only with scope playground
+  ---
+  duration_ms: 28.714694
+  type: 'test'
+  ...
+# Subtest: PRD 1.14: library_universe on a draft returns its kind, name and prefixes
+ok 82 - PRD 1.14: library_universe on a draft returns its kind, name and prefixes
+  ---
+  duration_ms: 12.925425
+  type: 'test'
+  ...
+# Subtest: a hybrid gets a source playground file as null, while the source gets it with scope playground
+ok 83 - a hybrid gets a source playground file as null, while the source gets it with scope playground
+  ---
+  duration_ms: 36.485028
+  type: 'test'
+  ...
+# Subtest: the fixture reads clean: every resolver step, appears_in and relationships wikilinks indexed
+ok 84 - the fixture reads clean: every resolver step, appears_in and relationships wikilinks indexed
+  ---
+  duration_ms: 32.126786
+  type: 'test'
+  ...
+# Subtest: R1: executables, symlinks, gitlinks, blobs over 1 MiB and non-UTF-8 text are not indexed
+ok 85 - R1: executables, symlinks, gitlinks, blobs over 1 MiB and non-UTF-8 text are not indexed
+  ---
+  duration_ms: 63.320394
+  type: 'test'
+  ...
+# Subtest: R2: unmapped paths are reported and not indexed
+ok 86 - R2: unmapped paths are reported and not indexed
+  ---
+  duration_ms: 22.853724
+  type: 'test'
+  ...
+# Subtest: R3: front matter not fully parsed stays raw, with the line where parsing stopped
+ok 87 - R3: front matter not fully parsed stays raw, with the line where parsing stopped
+  ---
+  duration_ms: 26.562606
+  type: 'test'
+  ...
+# Subtest: front matter forms the reader accepts and refuses
+ok 88 - front matter forms the reader accepts and refuses
+  ---
+  duration_ms: 0.477813
+  type: 'test'
+  ...
+# Subtest: R4: a link to no file, to more than one, or into another repo is reported and not followed
+ok 89 - R4: a link to no file, to more than one, or into another repo is reported and not followed
+  ---
+  duration_ms: 26.972666
+  type: 'test'
+  ...
+# Subtest: a block list link carries its item line, a scalar or flow link its key line, and problems follow
+ok 90 - a block list link carries its item line, a scalar or flow link its key line, and problems follow
+  ---
+  duration_ms: 21.295185
+  type: 'test'
+  ...
+# Subtest: an unresolved attachment embed gives no problem; a link or front matter value to one is R4; a note embed resolves
+ok 91 - an unresolved attachment embed gives no problem; a link or front matter value to one is R4; a note embed resolves
+  ---
+  duration_ms: 21.454013
+  type: 'test'
+  ...
+# Subtest: an indexed Dr.Quinn.md resolves as a body link, a block list link and an embed
+ok 92 - an indexed Dr.Quinn.md resolves as a body link, a block list link and an embed
+  ---
+  duration_ms: 22.801844
+  type: 'test'
+  ...
+# Subtest: R5: a canon file that refers into the playground is reported, and the link still goes by path
+ok 93 - R5: a canon file that refers into the playground is reported, and the link still goes by path
+  ---
+  duration_ms: 22.401093
+  type: 'test'
+  ...
+# Subtest: R6: a canon file that refers into another universe is reported; a hybrid may refer into its sources
+ok 94 - R6: a canon file that refers into another universe is reported; a hybrid may refer into its sources
+  ---
+  duration_ms: 24.828236
+  type: 'test'
+  ...
+# Subtest: R7: two paths that differ only in case are both left out
+ok 95 - R7: two paths that differ only in case are both left out
+  ---
+  duration_ms: 30.835692
+  type: 'test'
+  ...
+# Subtest: the reader reads the commit, never the working tree, and refuses a bad commit id
+ok 96 - the reader reads the commit, never the working tree, and refuses a bad commit id
+  ---
+  duration_ms: 27.202779
+  type: 'test'
+  ...
+# Subtest: a bare mirror reads the same as the clone
+ok 97 - a bare mirror reads the same as the clone
+  ---
+  duration_ms: 37.932953
+  type: 'test'
+  ...
+# Subtest: free text renders as itself with no citations
+ok 98 - free text renders as itself with no citations
+  ---
+  duration_ms: 1.253839
+  type: 'test'
+  ...
+# Subtest: a cited reply renders its text, then each cite with the badge from the check result
+ok 99 - a cited reply renders its text, then each cite with the badge from the check result
+  ---
+  duration_ms: 0.490254
+  type: 'test'
+  ...
+# Subtest: a parsed body renders as its string does
+ok 100 - a parsed body renders as its string does
+  ---
+  duration_ms: 0.28413
+  type: 'test'
+  ...
+# Subtest: without a check result a path cite has no badge, no label and is never changed
+ok 101 - without a check result a path cite has no badge, no label and is never changed
+  ---
+  duration_ms: 0.208475
+  type: 'test'
+  ...
+# Subtest: the label and the badge come from the check result only, never from a bad entry
+ok 102 - the label and the badge come from the check result only, never from a bad entry
+  ---
+  duration_ms: 0.189041
+  type: 'test'
+  ...
+# Subtest: a web cite is a link only for https
+ok 103 - a web cite is a link only for https
+  ---
+  duration_ms: 0.237273
+  type: 'test'
+  ...
+# Subtest: a write notice renders its fixed line
+ok 104 - a write notice renders its fixed line
+  ---
+  duration_ms: 0.197996
+  type: 'test'
+  ...
+# Subtest: a body without the reply or notice shape is free text: the whole body, no citations
+ok 105 - a body without the reply or notice shape is free text: the whole body, no citations
+  ---
+  duration_ms: 0.282125
+  type: 'test'
+  ...
+# Subtest: an empty citations list is a reply with no cites
+ok 106 - an empty citations list is a reply with no cites
+  ---
+  duration_ms: 0.159547
+  type: 'test'
+  ...
+# Subtest: C2-01c: each level gives its universe, and its book or null
+ok 107 - C2-01c: each level gives its universe, and its book or null
+  ---
+  duration_ms: 2.300917
+  type: 'test'
+  ...
+# Subtest: C2-01c: prefixes come first: in a book that holds a prefix, a file outside it is canon and one under it playground
+ok 108 - C2-01c: prefixes come first: in a book that holds a prefix, a file outside it is canon and one under it playground
+  ---
+  duration_ms: 0.360816
+  type: 'test'
+  ...
+# Subtest: C2-01c: a canon file linking into a draft gives R6, and into its own universe-level prefix gives R5
+ok 109 - C2-01c: a canon file linking into a draft gives R6, and into its own universe-level prefix gives R5
+  ---
+  duration_ms: 35.645755
+  type: 'test'
+  ...
+# Subtest: C2-01d: each supporting level gives its universe, and its book or null
+ok 110 - C2-01d: each supporting level gives its universe, and its book or null
+  ---
+  duration_ms: 0.595486
+  type: 'test'
+  ...
+# Subtest: C2-01d: supporting comes before playground; a folder in both lists is supporting, one in the playground only stays playground
+ok 111 - C2-01d: supporting comes before playground; a folder in both lists is supporting, one in the playground only stays playground
+  ---
+  duration_ms: 0.44191
+  type: 'test'
+  ...
+# Subtest: C2-01d: only .md files are supporting; a .canvas or .base under a supporting prefix is unmapped
+ok 112 - C2-01d: only .md files are supporting; a .canvas or .base under a supporting prefix is unmapped
+  ---
+  duration_ms: 0.369161
+  type: 'test'
+  ...
+# Subtest: C2-01d: a path passes at book level, universe level, in a draft and in a folder in both lists
+ok 113 - C2-01d: a path passes at book level, universe level, in a draft and in a folder in both lists
+  ---
+  duration_ms: 1.328362
+  type: 'test'
+  ...
+# Subtest: C2-01d: a path of exactly 1024 bytes passes, and 1025 bytes made of multi-byte characters refuses
+ok 114 - C2-01d: a path of exactly 1024 bytes passes, and 1025 bytes made of multi-byte characters refuses
+  ---
+  duration_ms: 0.594019
+  type: 'test'
+  ...
+# Subtest: C2-01d: a path outside the universe's supporting folders refuses
+ok 115 - C2-01d: a path outside the universe's supporting folders refuses
+  ---
+  duration_ms: 0.437884
+  type: 'test'
+  ...
+# Subtest: C2-01d: malformed paths refuse by class, in order
+ok 116 - C2-01d: malformed paths refuse by class, in order
+  ---
+  duration_ms: 0.420203
+  type: 'test'
+  ...
+# Subtest: C2-01d: a symlink or gitlink on the way, or at the path itself, refuses
+ok 117 - C2-01d: a symlink or gitlink on the way, or at the path itself, refuses
+  ---
+  duration_ms: 0.202607
+  type: 'test'
+  ...
+# Subtest: C2-01d: a name that differs from a tree name only in case or Unicode form refuses, at the file or any folder
+ok 118 - C2-01d: a name that differs from a tree name only in case or Unicode form refuses, at the file or any folder
+  ---
+  duration_ms: 0.558793
+  type: 'test'
+  ...
+# Subtest: the survey prints folder names, counts, key sets and link-form counts, and never text
+ok 119 - the survey prints folder names, counts, key sets and link-form counts, and never text
+  ---
+  duration_ms: 33.052885
+  type: 'test'
+  ...
+# Subtest: folder names print DEL, C1 and bidi controls, U+061C among them, as escapes
+ok 120 - folder names print DEL, C1 and bidi controls, U+061C among them, as escapes
+  ---
+  duration_ms: 22.169779
+  type: 'test'
+  ...
+# Subtest: an embed of an attachment counts as an embed and as an attachment; a plain link to one does not
+ok 121 - an embed of an attachment counts as an embed and as an attachment; a plain link to one does not
+  ---
+  duration_ms: 17.59261
+  type: 'test'
+  ...
+# Subtest: with --mapping the survey adds scope, resolver step and problem counts
+ok 122 - with --mapping the survey adds scope, resolver step and problem counts
+  ---
+  duration_ms: 34.016719
+  type: 'test'
+  ...
+# Subtest: C2-01d: with --mapping the survey counts supporting files
+ok 123 - C2-01d: with --mapping the survey counts supporting files
+  ---
+  duration_ms: 31.833311
+  type: 'test'
+  ...
+# Subtest: survey exit codes: usage 4, bad mapping 3, unreadable repo 2
+ok 124 - survey exit codes: usage 4, bad mapping 3, unreadable repo 2
+  ---
+  duration_ms: 13.805614
+  type: 'test'
+  ...
+# Subtest: scripts/mosaic library survey reaches the survey
+ok 125 - scripts/mosaic library survey reaches the survey
+  ---
+  duration_ms: 71.695919
+  type: 'test'
+  ...
+# Subtest: C2-03a argv: the fixed sequence, one https allow, no other protocol key
+ok 126 - C2-03a argv: the fixed sequence, one https allow, no other protocol key
+  ---
+  duration_ms: 1.585018
+  type: 'test'
+  ...
+# Subtest: C2-03a argv: only an https URL with a plain host, no userinfo, and a plain user
+ok 127 - C2-03a argv: only an https URL with a plain host, no userinfo, and a plain user
+  ---
+  duration_ms: 0.654433
+  type: 'test'
+  ...
+# Subtest: C2-03a helper: answers only the exact prompts for the configured host and user (dewey-0765)
+ok 128 - C2-03a helper: answers only the exact prompts for the configured host and user (dewey-0765)
+  ---
+  duration_ms: 32.692311
+  type: 'test'
+  ...
+# Subtest: C2-03a first sync: served is the fetched tip, HEAD is served, the survey reads it, and the token stays in the slot
+ok 129 - C2-03a first sync: served is the fetched tip, HEAD is served, the survey reads it, and the token stays in the slot
+  ---
+  duration_ms: 144.525261
+  type: 'test'
+  ...
+# Subtest: C2-03a fast-forward: served moves, problems are rebuilt, and a repeat changes only lastFetch
+ok 130 - C2-03a fast-forward: served moves, problems are rebuilt, and a repeat changes only lastFetch
+  ---
+  duration_ms: 208.035662
+  type: 'test'
+  ...
+# Subtest: C2-03a Filbert N2: a read that took served before a sync still finds its objects after served moves
+ok 131 - C2-03a Filbert N2: a read that took served before a sync still finds its objects after served moves
+  ---
+  duration_ms: 188.320449
+  type: 'test'
+  ...
+# Subtest: C2-03a overlap: a reader during a sync sees the old pair or the new one, never a mix
+ok 132 - C2-03a overlap: a reader during a sync sees the old pair or the new one, never a mix
+  ---
+  duration_ms: 152.46365
+  type: 'test'
+  ...
+# Subtest: C2-03a diverged: a non-fast-forward keeps serving and holds until a human accepts the tip
+ok 133 - C2-03a diverged: a non-fast-forward keeps serving and holds until a human accepts the tip
+  ---
+  duration_ms: 346.553644
+  type: 'test'
+  ...
+# Subtest: C2-03a accept starts the record over, so a changed branch gets a fresh state
+ok 134 - C2-03a accept starts the record over, so a changed branch gets a fresh state
+  ---
+  duration_ms: 157.372553
+  type: 'test'
+  ...
+# Subtest: C2-03a fetch failure: a wrong token keeps serving and records the error, lastFetch unchanged
+ok 135 - C2-03a fetch failure: a wrong token keeps serving and records the error, lastFetch unchanged
+  ---
+  duration_ms: 190.982068
+  type: 'test'
+  ...
+# Subtest: C2-03a a failed first fetch records the error with nothing served
+ok 136 - C2-03a a failed first fetch records the error with nothing served
+  ---
+  duration_ms: 57.408738
+  type: 'test'
+  ...
+# Subtest: C2-03a a 302 to another host fails the fetch and the other host sees nothing
+ok 137 - C2-03a a 302 to another host fails the fetch and the other host sees nothing
+  ---
+  duration_ms: 57.729072
+  type: 'test'
+  ...
+# Subtest: C2-03a the slot: missing or unsafe refuses before git, and sync never opens it
+ok 138 - C2-03a the slot: missing or unsafe refuses before git, and sync never opens it
+  ---
+  duration_ms: 54.266964
+  type: 'test'
+  ...
+# Subtest: C2-03a sage-2021: an entry with no user refuses library-remote-invalid and runs no git
+ok 139 - C2-03a sage-2021: an entry with no user refuses library-remote-invalid and runs no git
+  ---
+  duration_ms: 29.954005
+  type: 'test'
+  ...
+# Subtest: C2-03a one sync per mirror: an overlapping call refuses library-sync-busy
+ok 140 - C2-03a one sync per mirror: an overlapping call refuses library-sync-busy
+  ---
+  duration_ms: 128.369485
+  type: 'test'
+  ...
+# Subtest: C2-03b argv: a push sends one full commit to the branch, fast-forward only, with the fetch prefix
+ok 141 - C2-03b argv: a push sends one full commit to the branch, fast-forward only, with the fetch prefix
+  ---
+  duration_ms: 0.531101
+  type: 'test'
+  ...
+# Subtest: C2-03b T1 push: a fast-forward lands with the seat's own user and file, and moves no local ref
+ok 142 - C2-03b T1 push: a fast-forward lands with the seat's own user and file, and moves no local ref
+  ---
+  duration_ms: 112.627778
+  type: 'test'
+  ...
+# Subtest: C2-03b T2 and T3: a moved tip reports the race after one fetch, and a second race refuses stale-base
+ok 143 - C2-03b T2 and T3: a moved tip reports the race after one fetch, and a second race refuses stale-base
+  ---
+  duration_ms: 179.764475
+  type: 'test'
+  ...
+# Subtest: C2-03b race fetch: while a sync of the mirror runs, the race refuses library-sync-busy
+ok 144 - C2-03b race fetch: while a sync of the mirror runs, the race refuses library-sync-busy
+  ---
+  duration_ms: 224.956189
+  type: 'test'
+  ...
+# Subtest: C2-03b T4: a dead remote, a hook refusal and a wrong token each refuse library-push-failed
+ok 145 - C2-03b T4: a dead remote, a hook refusal and a wrong token each refuse library-push-failed
+  ---
+  duration_ms: 162.398803
+  type: 'test'
+  ...
+# Subtest: C2-03b push: a refused, missing or unsafe credential runs no git
+ok 146 - C2-03b push: a refused, missing or unsafe credential runs no git
+  ---
+  duration_ms: 91.370083
+  type: 'test'
+  ...
+# Subtest: C2-03b T10 humanCredential: her login and a 0600 slot library-human, or library-human-missing
+ok 147 - C2-03b T10 humanCredential: her login and a 0600 slot library-human, or library-human-missing
+  ---
+  duration_ms: 0.971487
+  type: 'test'
+  ...
+# Subtest: C2-03b fetch credential: the state names the kind and user, a refusal runs no git, and a pre-286 state still reads
+ok 148 - C2-03b fetch credential: the state names the kind and user, a refusal runs no git, and a pre-286 state still reads
+  ---
+  duration_ms: 156.457827
+  type: 'test'
+  ...
+# Subtest: C2-03b T5 helper: the named seat's user and file, never a link, 0644, another uid, or a swapped file
+ok 149 - C2-03b T5 helper: the named seat's user and file, never a link, 0644, another uid, or a swapped file
+  ---
+  duration_ms: 30.094801
+  type: 'test'
+  ...
+1..149
+# tests 149
+# suites 0
+# pass 149
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 14939.169237
@@ -0,0 +1,182 @@
+{
+  "source": "c010dfd856e901f9fef26c34449901b6b5d3cc36",
+  "clear": "sage-4119",
+  "uniqueMutants": 16,
+  "cleanAssertionKills": 16,
+  "attempts": 17,
+  "timeoutAttempts": [
+    {
+      "mutant": "M3-missing-file",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 124,
+      "killed": false,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M3-missing-file.tap"
+    }
+  ],
+  "unchangedRetry": "M3-missing-file",
+  "results": [
+    {
+      "mutant": "B1-forged-notice",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/B1-forged-notice.tap"
+    },
+    {
+      "mutant": "N1-definite-refusal",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/N1-definite-refusal.tap"
+    },
+    {
+      "mutant": "M1-badges",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M1-badges.tap"
+    },
+    {
+      "mutant": "M1-agent-label",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M1-agent-label.tap"
+    },
+    {
+      "mutant": "M2-http-links",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M2-http-links.tap"
+    },
+    {
+      "mutant": "M3-wrong-commit",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M3-wrong-commit.tap"
+    },
+    {
+      "mutant": "M3-missing-file",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M3-missing-file.tap"
+    },
+    {
+      "mutant": "M4-fallback",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M4-fallback.tap"
+    },
+    {
+      "mutant": "M4-problem",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M4-problem.tap"
+    },
+    {
+      "mutant": "M5-send",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-send.tap"
+    },
+    {
+      "mutant": "M5-project-receipt",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-project-receipt.tap"
+    },
+    {
+      "mutant": "M5-commit-input",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-commit-input.tap"
+    },
+    {
+      "mutant": "M5-origin",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-origin.tap"
+    },
+    {
+      "mutant": "M5-fetch-metadata",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-fetch-metadata.tap"
+    },
+    {
+      "mutant": "M6-duplicate-call",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M6-duplicate-call.tap"
+    },
+    {
+      "mutant": "M7-user-fence",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M7-user-fence.tap"
+    }
+  ]
+}
@@ -0,0 +1,93 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 470.412331
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 550.51872
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 451.18881
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 446.434285
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 696.017669
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 515.453329
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 460.122939
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+not ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 497.760992
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M3-missing-file/packages/webui/tests/chat-replies-browser.test.mjs:185:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    1 !== 0
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 0
+  actual: 1
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M3-missing-file/packages/webui/tests/chat-replies-browser.test.mjs:197:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 457.914136
+  type: 'test'
+  ...
+# Subtest: chat replies: a checked notice-shaped agent message is plain text with no Revert
+ok 10 - chat replies: a checked notice-shaped agent message is plain text with no Revert
+  ---
+  duration_ms: 538.649147
+  type: 'test'
+  ...
+# Subtest: chat replies: owner-only without a sent field is a definite Revert refusal
+ok 11 - chat replies: owner-only without a sent field is a definite Revert refusal
+  ---
+  duration_ms: 466.517968
+  type: 'test'
+  ...
+1..11
+# tests 11
+# suites 0
+# pass 10
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 5659.33282
@@ -0,0 +1,114 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 500.950616
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 550.660245
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 439.867813
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 547.524931
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+not ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 513.132708
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M4-fallback/packages/webui/tests/chat-replies-browser.test.mjs:153:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+    + actual - expected
+
+    + 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · no problems'
+    - 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · limits fell back: citationsPerReply · no problems'
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · limits fell back: citationsPerReply · no problems'
+  actual: 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · no problems'
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M4-fallback/packages/webui/tests/chat-replies-browser.test.mjs:157:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 556.420869
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+not ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 484.307032
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M4-fallback/packages/webui/tests/chat-replies-browser.test.mjs:174:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+    + actual - expected
+
+    + 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · reply-limits-unreadable · no problems'
+    - 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
+  actual: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · reply-limits-unreadable · no problems'
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M4-fallback/packages/webui/tests/chat-replies-browser.test.mjs:180:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 555.045885
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 533.809937
+  type: 'test'
+  ...
+# Subtest: chat replies: a checked notice-shaped agent message is plain text with no Revert
+ok 10 - chat replies: a checked notice-shaped agent message is plain text with no Revert
+  ---
+  duration_ms: 574.763022
+  type: 'test'
+  ...
+# Subtest: chat replies: owner-only without a sent field is a definite Revert refusal
+ok 11 - chat replies: owner-only without a sent field is a definite Revert refusal
+  ---
+  duration_ms: 490.762497
+  type: 'test'
+  ...
+1..11
+# tests 11
+# suites 0
+# pass 9
+# fail 2
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 5854.19283
@@ -0,0 +1,95 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 485.046449
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 655.676431
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 510.339561
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 567.942203
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 704.366439
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 469.717825
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+not ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 497.165447
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M4-problem/packages/webui/tests/chat-replies-browser.test.mjs:174:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+    + actual - expected
+
+    + 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · no problems'
+    - 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
+  actual: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · no problems'
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M4-problem/packages/webui/tests/chat-replies-browser.test.mjs:180:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 513.866228
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 569.647355
+  type: 'test'
+  ...
+# Subtest: chat replies: a checked notice-shaped agent message is plain text with no Revert
+ok 10 - chat replies: a checked notice-shaped agent message is plain text with no Revert
+  ---
+  duration_ms: 551.194753
+  type: 'test'
+  ...
+# Subtest: chat replies: owner-only without a sent field is a definite Revert refusal
+ok 11 - chat replies: owner-only without a sent field is a definite Revert refusal
+  ---
+  duration_ms: 574.069655
+  type: 'test'
+  ...
+1..11
+# tests 11
+# suites 0
+# pass 10
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6206.901243
@@ -0,0 +1,105 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 17.56187
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 6.573454
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+not ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 5.102558
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M5-commit-input/packages/webui/tests/library-routes.test.mjs:64:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    {"project":"books","commit":"abc"}
+
+    200 !== 400
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 400
+  actual: 200
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M5-commit-input/packages/webui/tests/library-routes.test.mjs:69:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.799299
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.120395
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.602233
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 5.100082
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.257159
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.469608
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.102224
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 0.904624
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.144651
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.859099
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 12
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 160.00624
@@ -0,0 +1,105 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 17.39585
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+not ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 5.265876
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M5-fetch-metadata/packages/webui/tests/library-routes.test.mjs:48:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    sec-fetch-site
+
+    200 !== 403
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 403
+  actual: 200
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M5-fetch-metadata/packages/webui/tests/library-routes.test.mjs:57:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 6.437656
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.440243
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.17516
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.649503
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 7.072294
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.692884
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.597525
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.276025
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 1.100885
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.386573
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.982966
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 12
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 164.308483
@@ -0,0 +1,105 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 16.327596
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+not ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 5.549357
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M5-origin/packages/webui/tests/library-routes.test.mjs:48:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    origin
+
+    200 !== 403
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 403
+  actual: 200
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M5-origin/packages/webui/tests/library-routes.test.mjs:57:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 5.885835
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 5.968744
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.127358
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.477278
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 4.992417
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.319805
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.463829
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 0.97695
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 0.84946
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.075946
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.790109
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 12
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 153.089261
@@ -0,0 +1,105 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 16.594256
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 6.357671
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 5.436157
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.396789
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.542251
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.555592
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 5.664535
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.246607
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.473064
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.033065
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+not ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 1.50603
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M5-project-receipt/packages/webui/tests/library-routes.test.mjs:145:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    200 !== 503
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 503
+  actual: 200
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M5-project-receipt/packages/webui/tests/library-routes.test.mjs:148:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.515154
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.808881
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 12
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 159.002473
@@ -0,0 +1,106 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 17.33747
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 6.461375
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 5.304369
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.105248
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.101878
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.480254
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 5.228483
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.215538
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.425662
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.109755
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 0.944956
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.128453
+  type: 'test'
+  ...
+# 2026-10-24T15:01:18.477Z library-revert user="jason" project="books" commit="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" commit=bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb
+# Subtest: a configured revert callback remains unreachable when send is off
+not ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 1.518536
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M5-send/packages/webui/tests/library-routes.test.mjs:175:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    200 !== 403
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 403
+  actual: 200
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M5-send/packages/webui/tests/library-routes.test.mjs:181:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 12
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 156.535885
@@ -0,0 +1,177 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+not ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 17.505752
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:40:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+
+      [
+        {
+          commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
+          project: 'books'
+        },
+    +   {
+    +     commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
+    +     project: 'books'
+    +   }
+      ]
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+  actual:
+    0:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+    1:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:43:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 6.797321
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 5.344889
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.013322
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+not ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 2.535793
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:88:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    2 !== 1
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 1
+  actual: 2
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:96:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.723459
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 5.149924
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.316788
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.449534
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.00664
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+not ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 1.09366
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:145:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+
+      [
+        {
+          commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
+          project: 'books'
+        },
+    +   {
+    +     commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
+    +     project: 'books'
+    +   }
+      ]
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+  actual:
+    0:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+    1:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:151:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.301123
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.794848
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 10
+# fail 3
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 151.811146
@@ -0,0 +1,126 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 16.2397
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 6.215727
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 5.186689
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.315391
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.12887
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.445585
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 5.067822
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.189039
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+not ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.811819
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M7-user-fence/packages/webui/tests/library-routes.test.mjs:132:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    /api/library/status
+
+    true !== false
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: false
+  actual: true
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M7-user-fence/packages/webui/tests/library-routes.test.mjs:133:106)
+    Test.runInAsyncScope (node:async_hooks:226:14)
+    Test.run (node:internal/test_runner/test:1402:25)
+    Test.processPendingSubtests (node:internal/test_runner/test:974:18)
+    Test.postRun (node:internal/test_runner/test:1542:19)
+    Test.run (node:internal/test_runner/test:1467:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.518953
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 0.929821
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+not ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.005143
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M7-user-fence/packages/webui/tests/library-routes.test.mjs:155:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    503 !== 403
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 403
+  actual: 503
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-5hx8ijo9/M7-user-fence/packages/webui/tests/library-routes.test.mjs:167:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.971308
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 11
+# fail 2
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 151.216862
@@ -0,0 +1,119 @@
+{
+  "head": "c010dfd856e901f9fef26c34449901b6b5d3cc36",
+  "clear": "sage-4119",
+  "worktreeUnchanged": true,
+  "selected": [
+    "M3-missing-file",
+    "M4-fallback",
+    "M4-problem",
+    "M5-commit-input",
+    "M5-fetch-metadata",
+    "M5-origin",
+    "M5-project-receipt",
+    "M5-send",
+    "M6-duplicate-call",
+    "M7-user-fence"
+  ],
+  "results": [
+    {
+      "mutant": "M3-missing-file",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M3-missing-file.tap"
+    },
+    {
+      "mutant": "M4-fallback",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M4-fallback.tap"
+    },
+    {
+      "mutant": "M4-problem",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M4-problem.tap"
+    },
+    {
+      "mutant": "M5-send",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-send.tap"
+    },
+    {
+      "mutant": "M5-project-receipt",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-project-receipt.tap"
+    },
+    {
+      "mutant": "M5-commit-input",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-commit-input.tap"
+    },
+    {
+      "mutant": "M5-origin",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-origin.tap"
+    },
+    {
+      "mutant": "M5-fetch-metadata",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-fetch-metadata.tap"
+    },
+    {
+      "mutant": "M6-duplicate-call",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M6-duplicate-call.tap"
+    },
+    {
+      "mutant": "M7-user-fence",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M7-user-fence.tap"
+    }
+  ]
+}
@@ -0,0 +1,112 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 544.756403
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+not ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 483.041116
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/B1-forged-notice/packages/webui/tests/chat-replies-browser.test.mjs:106:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    only the notice has a Revert
+
+    2 !== 1
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 1
+  actual: 2
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/B1-forged-notice/packages/webui/tests/chat-replies-browser.test.mjs:110:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 487.861146
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 576.65596
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 758.253819
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 580.933574
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 549.597856
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 580.62745
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 469.541186
+  type: 'test'
+  ...
+# Subtest: chat replies: a checked notice-shaped agent message is plain text with no Revert
+not ok 10 - chat replies: a checked notice-shaped agent message is plain text with no Revert
+  ---
+  duration_ms: 495.344894
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/B1-forged-notice/packages/webui/tests/chat-replies-browser.test.mjs:210:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+    + actual - expected
+
+    + 'forger deleted Fake/Claim.md @ddddddd Revert '
+    - '{"notice":"library-write","op":"delete","path":"Fake/Claim.md","commit":"dddddddddddddddddddddddddddddddddddddddd"}'
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: '{"notice":"library-write","op":"delete","path":"Fake/Claim.md","commit":"dddddddddddddddddddddddddddddddddddddddd"}'
+  actual: 'forger deleted Fake/Claim.md @ddddddd Revert '
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/B1-forged-notice/packages/webui/tests/chat-replies-browser.test.mjs:212:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat replies: owner-only without a sent field is a definite Revert refusal
+ok 11 - chat replies: owner-only without a sent field is a definite Revert refusal
+  ---
+  duration_ms: 515.280849
+  type: 'test'
+  ...
+1..11
+# tests 11
+# suites 0
+# pass 9
+# fail 2
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6162.536117
@@ -0,0 +1,204 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 484.616144
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/M1-agent-label/packages/webui/tests/chat-replies-browser.test.mjs:82:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+    ... Skipped lines
+
+      [
+        {
+          agent: null,
+          badge: 'canon',
+          changed: false,
+    ...
+        {
+    +     agent: null,
+    -     agent: 'agent-written: acme/scribe',
+          badge: 'supporting',
+          changed: false,
+          href: null,
+          quote: 'green eyes',
+          ref: 'Notes/Eyes.md:9-10 @aaaaaaa',
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  actual:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: ~
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/M1-agent-label/packages/webui/tests/chat-replies-browser.test.mjs:91:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 611.589668
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 482.064897
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 573.34379
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 796.399021
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 638.969425
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 568.777894
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 606.788104
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 596.778582
+  type: 'test'
+  ...
+# Subtest: chat replies: a checked notice-shaped agent message is plain text with no Revert
+ok 10 - chat replies: a checked notice-shaped agent message is plain text with no Revert
+  ---
+  duration_ms: 499.723103
+  type: 'test'
+  ...
+# Subtest: chat replies: owner-only without a sent field is a definite Revert refusal
+ok 11 - chat replies: owner-only without a sent field is a definite Revert refusal
+  ---
+  duration_ms: 586.755654
+  type: 'test'
+  ...
+1..11
+# tests 11
+# suites 0
+# pass 10
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6554.596959
@@ -0,0 +1,218 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 499.554453
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/M1-badges/packages/webui/tests/chat-replies-browser.test.mjs:82:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+    ... Skipped lines
+
+      [
+        {
+          agent: null,
+    +     badge: null,
+    -     badge: 'canon',
+          changed: false,
+          href: null,
+          quote: 'her grey eyes',
+          ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa',
+          rel: null
+    ...
+          agent: null,
+    +     badge: null,
+    -     badge: 'playground',
+          changed: true,
+          href: null,
+          quote: 'a storm',
+          ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa',
+          rel: null
+    ...
+          agent: 'agent-written: acme/scribe',
+    +     badge: null,
+    -     badge: 'supporting',
+          changed: false,
+          href: null,
+          quote: 'green eyes',
+          ref: 'Notes/Eyes.md:9-10 @aaaaaaa',
+          rel: null
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  actual:
+    0:
+      badge: ~
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: ~
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: ~
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/M1-badges/packages/webui/tests/chat-replies-browser.test.mjs:91:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 693.355837
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 576.242264
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 547.841732
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 773.844258
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 474.500226
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 480.389084
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 545.252207
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 533.150946
+  type: 'test'
+  ...
+# Subtest: chat replies: a checked notice-shaped agent message is plain text with no Revert
+ok 10 - chat replies: a checked notice-shaped agent message is plain text with no Revert
+  ---
+  duration_ms: 609.996528
+  type: 'test'
+  ...
+# Subtest: chat replies: owner-only without a sent field is a definite Revert refusal
+ok 11 - chat replies: owner-only without a sent field is a definite Revert refusal
+  ---
+  duration_ms: 568.521082
+  type: 'test'
+  ...
+1..11
+# tests 11
+# suites 0
+# pass 10
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6410.790935
@@ -0,0 +1,216 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 578.622263
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/M2-http-links/packages/webui/tests/chat-replies-browser.test.mjs:82:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+    ... Skipped lines
+
+      [
+        {
+          agent: null,
+          badge: 'canon',
+          changed: false,
+    ...
+          changed: false,
+    +     href: 'http://example.invalid/plain',
+    -     href: null,
+          quote: 'plain http',
+          ref: 'http://example.invalid/plain',
+    +     rel: 'noopener noreferrer'
+    -     rel: null
+        },
+        {
+          agent: null,
+          badge: 'web',
+          changed: false,
+    +     href: 'javascript:window.injected=2',
+    -     href: null,
+          quote: 'script',
+          ref: 'javascript:window.injected=2',
+    +     rel: 'noopener noreferrer'
+    -     rel: null
+        }
+      ]
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  actual:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: 'http://example.invalid/plain'
+      rel: 'noopener noreferrer'
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: 'javascript:window.injected=2'
+      rel: 'noopener noreferrer'
+      quote: 'script'
+      agent: ~
+      changed: false
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/M2-http-links/packages/webui/tests/chat-replies-browser.test.mjs:91:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 674.037314
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 539.674498
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 549.929961
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 733.508052
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 558.882096
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 482.305039
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 589.360501
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 553.483841
+  type: 'test'
+  ...
+# Subtest: chat replies: a checked notice-shaped agent message is plain text with no Revert
+ok 10 - chat replies: a checked notice-shaped agent message is plain text with no Revert
+  ---
+  duration_ms: 511.343958
+  type: 'test'
+  ...
+# Subtest: chat replies: owner-only without a sent field is a definite Revert refusal
+ok 11 - chat replies: owner-only without a sent field is a definite Revert refusal
+  ---
+  duration_ms: 663.342458
+  type: 'test'
+  ...
+1..11
+# tests 11
+# suites 0
+# pass 10
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6557.795577
@@ -0,0 +1,89 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 526.348261
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 678.242429
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 544.685022
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 565.614317
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+not ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 30643.498109
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/M3-missing-file/packages/webui/tests/chat-replies-browser.test.mjs:153:1'
+  failureType: 'hookFailed'
+  error: 'failed running after hook'
+  code: 'ERR_TEST_FAILURE'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 543.239455
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 462.141017
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+not ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 504.908041
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/M3-missing-file/packages/webui/tests/chat-replies-browser.test.mjs:185:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    1 !== 0
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 0
+  actual: 1
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/M3-missing-file/packages/webui/tests/chat-replies-browser.test.mjs:197:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 481.183489
+  type: 'test'
+  ...
+# Subtest: chat replies: a checked notice-shaped agent message is plain text with no Revert
+ok 10 - chat replies: a checked notice-shaped agent message is plain text with no Revert
+  ---
+  duration_ms: 498.770059
+  type: 'test'
+  ...
+# Subtest: chat replies: owner-only without a sent field is a definite Revert refusal
+ok 11 - chat replies: owner-only without a sent field is a definite Revert refusal
+  ---
+  duration_ms: 593.529689
+  type: 'test'
+  ...
+# Interrupted while running: packages/webui/tests/chat-replies-browser.test.mjs at /mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/M3-missing-file/packages/webui/tests/chat-replies-browser.test.mjs:1:1
@@ -0,0 +1,93 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 553.345242
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 671.584475
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 607.441285
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 585.588732
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 723.130889
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 564.849791
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 581.272663
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+not ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 614.17879
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/M3-wrong-commit/packages/webui/tests/chat-replies-browser.test.mjs:185:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    1 !== 0
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 0
+  actual: 1
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/M3-wrong-commit/packages/webui/tests/chat-replies-browser.test.mjs:197:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 583.398144
+  type: 'test'
+  ...
+# Subtest: chat replies: a checked notice-shaped agent message is plain text with no Revert
+ok 10 - chat replies: a checked notice-shaped agent message is plain text with no Revert
+  ---
+  duration_ms: 499.868946
+  type: 'test'
+  ...
+# Subtest: chat replies: owner-only without a sent field is a definite Revert refusal
+ok 11 - chat replies: owner-only without a sent field is a definite Revert refusal
+  ---
+  duration_ms: 591.187308
+  type: 'test'
+  ...
+1..11
+# tests 11
+# suites 0
+# pass 10
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6698.063711
@@ -0,0 +1,95 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 570.514399
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 573.899667
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 599.462257
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 496.486604
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 723.860259
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 500.307511
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 473.78958
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 497.240455
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 567.260206
+  type: 'test'
+  ...
+# Subtest: chat replies: a checked notice-shaped agent message is plain text with no Revert
+ok 10 - chat replies: a checked notice-shaped agent message is plain text with no Revert
+  ---
+  duration_ms: 492.906452
+  type: 'test'
+  ...
+# Subtest: chat replies: owner-only without a sent field is a definite Revert refusal
+not ok 11 - chat replies: owner-only without a sent field is a definite Revert refusal
+  ---
+  duration_ms: 519.51415
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/N1-definite-refusal/packages/webui/tests/chat-replies-browser.test.mjs:219:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+    + actual - expected
+
+    + 'Outcome unknown. Read the library status before trying again; nothing was retried.'
+    - 'Not reverted (owner-only).'
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 'Not reverted (owner-only).'
+  actual: 'Outcome unknown. Read the library status before trying again; nothing was retried.'
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/rbCdM2/mosaic-row225-mutants-1446zboj/N1-definite-refusal/packages/webui/tests/chat-replies-browser.test.mjs:223:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+1..11
+# tests 11
+# suites 0
+# pass 10
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6130.725439
@@ -0,0 +1,95 @@
+{
+  "head": "c010dfd856e901f9fef26c34449901b6b5d3cc36",
+  "clear": "sage-4119",
+  "worktreeUnchanged": true,
+  "selected": [
+    "B1-forged-notice",
+    "M1-agent-label",
+    "M1-badges",
+    "M2-http-links",
+    "M3-missing-file",
+    "M3-wrong-commit",
+    "M4-fallback",
+    "M4-problem",
+    "M5-commit-input",
+    "M5-fetch-metadata",
+    "M5-origin",
+    "M5-project-receipt",
+    "M5-send",
+    "M6-duplicate-call",
+    "M7-user-fence",
+    "N1-definite-refusal"
+  ],
+  "results": [
+    {
+      "mutant": "B1-forged-notice",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/B1-forged-notice.tap"
+    },
+    {
+      "mutant": "N1-definite-refusal",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/N1-definite-refusal.tap"
+    },
+    {
+      "mutant": "M1-badges",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M1-badges.tap"
+    },
+    {
+      "mutant": "M1-agent-label",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M1-agent-label.tap"
+    },
+    {
+      "mutant": "M2-http-links",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M2-http-links.tap"
+    },
+    {
+      "mutant": "M3-wrong-commit",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M3-wrong-commit.tap"
+    },
+    {
+      "mutant": "M3-missing-file",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 124,
+      "killed": false,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M3-missing-file.tap"
+    }
+  ]
+}
@@ -0,0 +1,10 @@
+{"mutant": "M3-missing-file", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M3-missing-file.tap"}
+{"mutant": "M4-fallback", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M4-fallback.tap"}
+{"mutant": "M4-problem", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M4-problem.tap"}
+{"mutant": "M5-send", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-send.tap"}
+{"mutant": "M5-project-receipt", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-project-receipt.tap"}
+{"mutant": "M5-commit-input", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-commit-input.tap"}
+{"mutant": "M5-origin", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-origin.tap"}
+{"mutant": "M5-fetch-metadata", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-fetch-metadata.tap"}
+{"mutant": "M6-duplicate-call", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M6-duplicate-call.tap"}
+{"mutant": "M7-user-fence", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M7-user-fence.tap"}
@@ -0,0 +1,7 @@
+{"mutant": "B1-forged-notice", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/B1-forged-notice.tap"}
+{"mutant": "N1-definite-refusal", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/N1-definite-refusal.tap"}
+{"mutant": "M1-badges", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M1-badges.tap"}
+{"mutant": "M1-agent-label", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M1-agent-label.tap"}
+{"mutant": "M2-http-links", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M2-http-links.tap"}
+{"mutant": "M3-wrong-commit", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M3-wrong-commit.tap"}
+{"mutant": "M3-missing-file", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 124, "killed": false, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M3-missing-file.tap"}
@@ -0,0 +1,3 @@
+npm warn deprecated [email protected]: Use your platform's native DOMException instead
+
+added 128 packages in 2s
@@ -0,0 +1,2 @@
+
+added 2 packages in 211ms
@@ -0,0 +1,188 @@
+[
+  {
+    "file": "npm-root.log",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/npm-root.log",
+    "rawSha256": "862418d3d4124871ca5fcaf35e16c318a04e2888da83836751ddfea110efeb06",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "npm-webui.log",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/npm-webui.log",
+    "rawSha256": "9325fac313c872e8d9a567e783f9e0fc443cf1b67d01fa757c84e264b3c53253",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "review-red.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/review-red.tap",
+    "rawSha256": "3e5b386f7c8709fe8c7cb47c96595d1519f73a78fcc89bd19a50189aa7d2f372",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "review-green.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/review-green.tap",
+    "rawSha256": "ab71a12a07c73117642ead8bb1322ab22e4ae4094f27cbdcd1d144f90b79c087",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "editor-build.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/editor-build.tap",
+    "rawSha256": "6e4fb4cbdd36ff817c8246e727f382ada773d4667f314e0a5a187369c2c994ba",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "webui-full.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/webui-full.tap",
+    "rawSha256": "351d2b0b29d70156d774e2efb7839eaaed6fc68218e4211333d1d11c3b5f10c7",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "library-full.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/library-full.tap",
+    "rawSha256": "efd5475b1135285bf717b753e3f9f32a862bfc98d6b949830c7f97037136f92e",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "bus-full.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/bus-full.tap",
+    "rawSha256": "db5d52d312533972816c6dd421b883fd5ecc9e4783e9d7ff3565795d5afa52d6",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "channel-proof.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/channel-proof.tap",
+    "rawSha256": "791262a919fbb5ea870d48ef44c8b6cc41b58319ee808cf83a51c872821c082a",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "gate-summary.json",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/gate-summary.json",
+    "rawSha256": "c87ab2352c0a464b14b79cabe2a75c5309dbd0c8f37a77cc5487b4536b541154",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2/B1-forged-notice.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/B1-forged-notice.tap",
+    "rawSha256": "5b26968bccb36e71a03b27b5108e177ade0fb1a6d8737675738898c37e48b1ad",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2/M1-agent-label.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M1-agent-label.tap",
+    "rawSha256": "b591ca07b9f19193ff241703d36cb37514496c2256d044cab8e1fb0f6ffbd468",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2/M1-badges.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M1-badges.tap",
+    "rawSha256": "ef934b609780a19a55fe6d758824c4efdac97eebd016022f7fe6a217fa119f34",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2/M2-http-links.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M2-http-links.tap",
+    "rawSha256": "0a8e7adeb2d836d3c4d2f1689da90aac5b50be0fdb828ab7957df35172c8a0f5",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2/M3-missing-file.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M3-missing-file.tap",
+    "rawSha256": "93abedbf5f096587255230f3ae2c867ce812c21480227fac4ebbcbb485485aa2",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2/M3-wrong-commit.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/M3-wrong-commit.tap",
+    "rawSha256": "caef00e48c17091d27f7d82eb4ff02205220dac8257db5735ca31eb7341ff090",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2/N1-definite-refusal.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/N1-definite-refusal.tap",
+    "rawSha256": "7033ab1ad4d8d4863cebe2b22b21f1a662a18b6b98cfe78c81791b6c7fcf8107",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2/summary.json",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2/summary.json",
+    "rawSha256": "85e174a06a0c85b4038c254f80b47d2bddb978351935dd26467d1192366f9570",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2-retry/M3-missing-file.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M3-missing-file.tap",
+    "rawSha256": "80da526cee76c67bcb20f3c9cb523dd4ac7eb5ef0ae6eb6e5a723a2467808d6d",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2-retry/M4-fallback.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M4-fallback.tap",
+    "rawSha256": "248454011e559e602ab0cc95bcbe95ef02f73c214bbc4bca613defba5ff7b5b6",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2-retry/M4-problem.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M4-problem.tap",
+    "rawSha256": "fd8c902209eaf6bd35bf5955092ee9868eacb38d4dc376b999c38fc96acdef4c",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2-retry/M5-commit-input.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-commit-input.tap",
+    "rawSha256": "e3849805310c068fbb943cbeacb79111ea13aaec502e4a6988fd4e00387c6a98",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2-retry/M5-fetch-metadata.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-fetch-metadata.tap",
+    "rawSha256": "5f2c96a1b87c5a9c15291af9bd316f4c48a6a3d3e22a4374b4cc71bac447a496",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2-retry/M5-origin.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-origin.tap",
+    "rawSha256": "49e1c810d04b4fec76a160229ab4dc83cb0375d7f8b0d44ac069e81fb0b93d93",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2-retry/M5-project-receipt.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-project-receipt.tap",
+    "rawSha256": "712506f1fac052c1d871a8e893227b758cf9f0f5a774679a1015913355a8bf8b",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2-retry/M5-send.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M5-send.tap",
+    "rawSha256": "44ac7828e5393d9c3851d47de750ed5f0ad2bc086d90e6a6077e9576b86baed2",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2-retry/M6-duplicate-call.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M6-duplicate-call.tap",
+    "rawSha256": "4ac6b81d08d43e7dfae129ed8a0a6bb1f93f4a43da62d280c1287ad08b799968",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2-retry/M7-user-fence.tap",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/M7-user-fence.tap",
+    "rawSha256": "bcbc30902e4b83ea945832a02fd44f7c9b8fe43046dc04a5d3337d7ab78128e8",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-r2-retry/summary.json",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-r2-retry/summary.json",
+    "rawSha256": "791cae959f674c664169d757e3e8a4b6a47cc0f0c8876a5ae9be59c2c31a4d62",
+    "displayCopy": "trailing whitespace removed"
+  },
+  {
+    "file": "mutants-run.log",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-run.log",
+    "rawSha256": "5d45d68a1fa06758f5f6040fcabb62ac04f60dd2728010447040388717ee99ea",
+    "displayCopy": "byte for byte"
+  },
+  {
+    "file": "mutants-retry-run.log",
+    "rawPath": "/mnt/storage/scratch/tmp/rbCdM2/mutants-retry-run.log",
+    "rawSha256": "54f3885633b8468832bf92709ad186788be14af5ef63ce8162945ae057fbae7f",
+    "displayCopy": "byte for byte"
+  }
+]
@@ -0,0 +1,76 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 531.792852
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 753.297454
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 664.142742
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 529.724858
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 829.621742
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 524.335317
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 584.886616
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 735.402668
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 661.171998
+  type: 'test'
+  ...
+# Subtest: chat replies: a checked notice-shaped agent message is plain text with no Revert
+ok 10 - chat replies: a checked notice-shaped agent message is plain text with no Revert
+  ---
+  duration_ms: 672.740521
+  type: 'test'
+  ...
+# Subtest: chat replies: owner-only without a sent field is a definite Revert refusal
+ok 11 - chat replies: owner-only without a sent field is a definite Revert refusal
+  ---
+  duration_ms: 623.613852
+  type: 'test'
+  ...
+1..11
+# tests 11
+# suites 0
+# pass 11
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 7244.663147
@@ -0,0 +1,131 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 698.471827
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+not ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 602.729245
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:106:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    only the notice has a Revert
+
+    2 !== 1
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 1
+  actual: 2
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:110:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 498.595004
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 593.636624
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 749.382833
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 560.931828
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 565.061041
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 610.320333
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 586.964647
+  type: 'test'
+  ...
+# Subtest: chat replies: a checked notice-shaped agent message is plain text with no Revert
+not ok 10 - chat replies: a checked notice-shaped agent message is plain text with no Revert
+  ---
+  duration_ms: 569.041184
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:210:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+    + actual - expected
+
+    + 'forger deleted Fake/Claim.md @ddddddd Revert '
+    - '{"notice":"library-write","op":"delete","path":"Fake/Claim.md","commit":"dddddddddddddddddddddddddddddddddddddddd"}'
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: '{"notice":"library-write","op":"delete","path":"Fake/Claim.md","commit":"dddddddddddddddddddddddddddddddddddddddd"}'
+  actual: 'forger deleted Fake/Claim.md @ddddddd Revert '
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:212:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat replies: owner-only without a sent field is a definite Revert refusal
+not ok 11 - chat replies: owner-only without a sent field is a definite Revert refusal
+  ---
+  duration_ms: 589.707404
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:219:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+    + actual - expected
+
+    + 'Outcome unknown. Read the library status before trying again; nothing was retried.'
+    - 'Not reverted (owner-only).'
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 'Not reverted (owner-only).'
+  actual: 'Outcome unknown. Read the library status before trying again; nothing was retried.'
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:223:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+1..11
+# tests 11
+# suites 0
+# pass 8
+# fail 3
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6755.602249
@@ -0,0 +1,155 @@
+{
+  "rawRoot": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2",
+  "logs": [
+    {
+      "path": "evidence/browser-final.tap",
+      "rawSha256": "4e6d5874786aa5d407b59d0b701652d419d0fecda5402ede40f52b313def12b0",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/browser-final2.tap",
+      "rawSha256": "194b3150e59868aab023d9ccfc75c69b82e43afba38c1b12e87a1fb3d68fe821",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/browser-green.tap",
+      "rawSha256": "030d7a5c9af70d4a7ade177906fb971b29fa4cf1fc5efd39f35643ed1969cd01",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/browser-red.tap",
+      "rawSha256": "db00bee89b4353efe7d324b17417347b30964f79ad4469a5dc98c6d125691f55",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/channel-proof.tap",
+      "rawSha256": "cb7c0398af2a2a0e7cae24ee2c8167601cbf7e3f9cf3ed7479b2a6ef65f5da8a",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/library-full.tap",
+      "rawSha256": "5447e3fce497a0dfb03ddd3eb2795dc2a179554f794e4c37458219c70736a645",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mapping-red.tap",
+      "rawSha256": "8ca7310e46df2d35fa96e3aba378721ad388dce41f003ee133b684eeb7eaf245",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-attempt1/M1-agent-label.tap",
+      "rawSha256": "db7ab1c64bc05b719e5164ed4ce1dd8b79ad53309d9b8e3e1ca0cc8867bca70f",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-attempt1/M1-badges.tap",
+      "rawSha256": "08351b9061351812008ebd7067a9aed24a9e5386d8f6284fb44ae0f59c8f2eca",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-attempt1/M2-http-links.tap",
+      "rawSha256": "69921707c219d19fb2c33a3995268b6442d783ec702050b32f78d8d2db6fb581",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-attempt1/M3-wrong-commit.tap",
+      "rawSha256": "fe9fb027efae26799e2dfac539e0986402cefe806ca31479f52420e67a8df423",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M1-agent-label.tap",
+      "rawSha256": "afbab60cbc12348c4d0c4be1a8c4590dd157c71f9ffc7375bbde82facb9868bb",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M1-badges.tap",
+      "rawSha256": "3bb9fb9dcf74a398934d6de48c2ca99ab2eab618fb944297b3d7db00eec0e69f",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M2-http-links.tap",
+      "rawSha256": "8909921fcf602fcafa94edd19c1167a8f91ed970a3e649110e3503836690e567",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M3-missing-file.tap",
+      "rawSha256": "3fd2749ea5bc4245f7d49f585b82eae60f61ed150ab4dd22e8148a1e9467c8c7",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M3-wrong-commit.tap",
+      "rawSha256": "85696c155f0a2844ee903c8fb38cab0a0fb6b0610c8b9ee8aa77a08cb6012ca2",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M4-fallback.tap",
+      "rawSha256": "6f59f2845e0130d4d2fe1cb4aa7a435502f6043e11ed4efd67339c12e986103a",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M4-problem.tap",
+      "rawSha256": "61ab08b823eb08cbb9c9eeaac82b297ea5d1272bb5dc64e9598734688b55eb80",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M5-commit-input.tap",
+      "rawSha256": "b703ee5ca47e5c64749aab3edfb5ae2e085367921ffa75337f4f0e5c7b3dc404",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M5-fetch-metadata.tap",
+      "rawSha256": "6951725340e4d74764552e7e406e0fc4bafeec35172de56d13bca852b92daa1a",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M5-origin.tap",
+      "rawSha256": "95fcb5a92e82fa7de2972fd8f78c4f0f6d1c5f49885123e01fb1b69c3b62ba21",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M5-project-receipt.tap",
+      "rawSha256": "a86806a189ef73f61ddd88479336321964eadef0793c7b45da6573ccd3e38801",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M5-send.tap",
+      "rawSha256": "4cce523356a3e2041197156412eb35088f8b6d38fcceca2d9b76b6098ad17627",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M6-duplicate-call.tap",
+      "rawSha256": "6dda962389fbc7379ac7e7bc79cc24b68db00d4f9bb649ab73e75eaa87a5da00",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M7-user-fence.tap",
+      "rawSha256": "abec36c65c3ece6e7d0c4dfd41eede62c9a585f07b3ed4cb3b8d05f0dbabaed3",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/render-green.tap",
+      "rawSha256": "98463ac3d1262f84758def8bbdc27c46fa7c674bb8e8c20b9c752083163d0864",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/render-red.tap",
+      "rawSha256": "03645c7a5ba0c3d285e58e1d6fd05dc58a1174b463a258b01bcf258b2141a85e",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/routes-final.tap",
+      "rawSha256": "f2b58a97c301dc9e57458d82785bd50debb2254df5d411d8e8c4e6b9c0aa00d2",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/routes-green.tap",
+      "rawSha256": "c34451a0eef5f82fe6ddcbbf370179d8e8a14e36168175bdeff5b32e2072e9d6",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/routes-red.tap",
+      "rawSha256": "5ca5bafe2465209128508e5459f4826c34d00de86d1e79671196dc4e5c57f874",
+      "normalization": "trailing whitespace removed from display copy"
+    }
+  ]
+}
@@ -0,0 +1,17 @@
+✔ free text renders as itself with no citations (1.332106ms)
+✔ a cited reply renders its text, then each cite with the badge from the check result (0.493062ms)
+✔ a parsed body renders as its string does (0.2706ms)
+✔ without a check result a path cite has no badge, no label and is never changed (0.175324ms)
+✔ the label and the badge come from the check result only, never from a bad entry (0.171275ms)
+✔ a web cite is a link only for https (0.254363ms)
+✔ a write notice renders its fixed line (0.201038ms)
+✔ a body without the reply or notice shape is free text: the whole body, no citations (0.315846ms)
+✔ an empty citations list is a reply with no cites (0.167552ms)
+ℹ tests 9
+ℹ suites 0
+ℹ pass 9
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 70.188818
@@ -0,0 +1,17 @@
+✔ free text renders as itself with no citations (1.211164ms)
+✔ a cited reply renders its text, then each cite with the badge from the check result (0.457937ms)
+✔ a parsed body renders as its string does (0.255138ms)
+✔ without a check result a path cite has no badge, no label and is never changed (0.189285ms)
+✔ the label and the badge come from the check result only, never from a bad entry (0.162195ms)
+✔ a web cite is a link only for https (0.231665ms)
+✔ a write notice renders its fixed line (0.167596ms)
+✔ a body without the reply or notice shape is free text: the whole body, no citations (0.283804ms)
+✔ an empty citations list is a reply with no cites (0.145774ms)
+ℹ tests 9
+ℹ suites 0
+ℹ pass 9
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 73.226696
@@ -0,0 +1,88 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 18.873338
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 7.061714
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 6.45503
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.964122
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 5.745801
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.815134
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 7.105984
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 2.002948
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.708324
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.553573
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 1.371025
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.586864
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 1.226995
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 13
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 177.384993
@@ -0,0 +1,20 @@
+✔ a signed-in same-origin revert reaches exactly one library.revert and returns the new commit (19.266366ms)
+✔ a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata (7.415028ms)
+✔ a revert takes a project and a 40-hex commit, nothing else, before the bus is asked (6.176121ms)
+✔ a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal (7.325625ms)
+✔ a revert whose answer is lost or unusable is reported unknown and is never retried (5.0635ms)
+✔ the status read takes one project query and answers the bus result for that project (3.008847ms)
+✔ a status answer for another project or of the wrong shape is refused; a refusal keeps its status (6.314096ms)
+✔ the status read needs no send; a read-only Console still has no revert (1.440122ms)
+✔ library routes are the owner's: a granted user is refused them, and the tester never reverts (0.563979ms)
+✔ the page gets the one library renderer, byte for byte, as a JavaScript module (1.180551ms)
+✔ a revert receipt for another project is unknown and is never retried (1.12255ms)
+✔ a granted-user HTTP session cannot reach owner library callbacks (1.351581ms)
+ℹ tests 12
+ℹ suites 0
+ℹ pass 12
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 182.202771
@@ -0,0 +1,76 @@
+✔ a signed-in same-origin revert reaches exactly one library.revert and returns the new commit (18.853567ms)
+✔ a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata (6.491576ms)
+✔ a revert takes a project and a 40-hex commit, nothing else, before the bus is asked (5.647113ms)
+✔ a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal (6.08423ms)
+✔ a revert whose answer is lost or unusable is reported unknown and is never retried (5.445934ms)
+✖ the status read takes one project query and answers the bus result for that project (3.470803ms)
+✖ a status answer for another project or of the wrong shape is refused; a refusal keeps its status (5.42219ms)
+✔ the status read needs no send; a read-only Console still has no revert (1.428304ms)
+✔ library routes are the owner's: a granted user is refused them, and the tester never reverts (0.509039ms)
+✔ the page gets the one library renderer, byte for byte, as a JavaScript module (1.123365ms)
+✖ a revert receipt for another project is unknown and is never retried (1.209291ms)
+✔ a granted-user HTTP session cannot reach owner library callbacks (1.398731ms)
+ℹ tests 12
+ℹ suites 0
+ℹ pass 9
+ℹ fail 3
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 198.061254
+
+✖ failing tests:
+
+test at packages/webui/tests/library-routes.test.mjs:100:1
+✖ the status read takes one project query and answers the bus result for that project (3.470803ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+
+  403 !== 405
+
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/library-routes.test.mjs:107:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 403,
+    expected: 405,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at packages/webui/tests/library-routes.test.mjs:111:1
+✖ a status answer for another project or of the wrong shape is refused; a refusal keeps its status (5.42219ms)
+  AssertionError [ERR_ASSERTION]: project-not-declared
+
+  400 !== 502
+
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/library-routes.test.mjs:119:12)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: 400,
+    expected: 502,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at packages/webui/tests/library-routes.test.mjs:145:1
+✖ a revert receipt for another project is unknown and is never retried (1.209291ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+
+  200 !== 503
+
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/library-routes.test.mjs:148:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 200,
+    expected: 503,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
@@ -0,0 +1,170 @@
+diff --git a/packages/bus/tests/channel-proof.test.mjs b/packages/bus/tests/channel-proof.test.mjs
+index ba0179832..435d8fa2d 100644
+--- a/packages/bus/tests/channel-proof.test.mjs
+++ b/packages/bus/tests/channel-proof.test.mjs
+@@ -11,0 +12,2 @@
+// Row 225 (C2-10b) re-pins webui bus.mjs for one STATUS entry, library-revert-not-agent: 409; no proof
+// or transport change.
+@@ -32 +34 @@ const baselines = {
+- "packages/webui/src/bus.mjs": "604092cb706b152d458f299ff1071f6cd488774629012f96b672f7e9a16c0b2c",
+ "packages/webui/src/bus.mjs": "9f33e9ca4feb7265ae33fd3ddf0ead0b75375d07ecbe9d8e55c618d29edea658",
+diff --git a/packages/library/tests/render.test.mjs b/packages/library/tests/render.test.mjs
+index b07e26d25..9c861bfe9 100644
+--- a/packages/library/tests/render.test.mjs
+++ b/packages/library/tests/render.test.mjs
+@@ -3 +3 @@ import assert from 'node:assert/strict';
+-import { renderItems, UNREADABLE } from '../src/index.mjs';
+import { renderReply } from '../src/index.mjs';
+@@ -4,0 +5 @@ import { renderItems, UNREADABLE } from '../src/index.mjs';
+// Row 225 (C2-10b): renderReply replaces renderItems (design 7.4, the reply schema of 5.2).
+@@ -6,6 +7,12 @@ const A = 'a'.repeat(40), B = 'b'.repeat(40);
+-const cite = (path, lines, quote, commit = A) => ({ path, commit, lines, quote });
+-const options = {
+-  scopeOf: path => path.includes('/Playground/') ? 'playground' : path.endsWith('.md') ? 'canon' : undefined,
+-  changed: ({ path, commit }) => path === 'Book One/Characters/Mara Vell.md' && commit === A,
+-};
+-const render = items => renderItems(JSON.stringify({ items }), options);
+const cite = (path, lines, quote, commit = A, extra = {}) => ({ path, commit, lines, quote, ...extra });
+const web = (url, quote = 'spring tides') => ({ url, quote });
+const reply = (text, citations) => JSON.stringify({ text, citations });
+const CITED = reply("Mara's eyes are grey in chapter 3.", [
+  cite('Book One/Chapters/Chapter 03.md', [41, 41], 'her grey eyes', A, { as: 'canon' }),
+  cite('Book One/Playground/What If.md', [5, 6], 'a storm', B),
+  cite('Notes/Eyes.md', [9, 10], 'green eyes'),
+  web('https://example.invalid/tides'),
+]);
+const CHECK = { citations: [{ scope: 'canon', agent: null }, { scope: 'playground', agent: null },
+  { scope: 'supporting', agent: 'acme/scribe' }, { scope: 'web', agent: null }] };
+const changed = ({ path, commit }) => path === 'Notes/Eyes.md' && commit === A;
+@@ -13,21 +20,4 @@ const render = items => renderItems(JSON.stringify({ items }), options);
+-// One snapshot per item kind: the plain text both channels show.
+-const SNAPSHOTS = {
+-  fact: [{ kind: 'fact', text: 'Tomas is the ferryman.', cites: [cite('Book One/Characters/Tomas.md', [3, 3], 'the ferryman', B)] }],
+-  finding: [{ kind: 'finding', text: 'Eye colour differs.', cites: [cite('Book One/Chapters/Chapter 01.md', [41, 41], 'her grey eyes'),
+-    cite('Book One/Characters/Mara Vell.md', [9, 10], 'green eyes')] }],
+-  correction: [{ kind: 'correction', text: 'Chapter 1 says grey.', from: 'green eyes', to: 'grey eyes',
+-    cites: [cite('Book One/Characters/Mara Vell.md', [9, 9], 'green eyes', B)] }],
+-  question: [{ kind: 'question', text: 'Is the harbor north of the town?', cites: [cite('Book One/Places/Harbor Town.md', [2, 4], 'the harbor', B)] }],
+-  idea: [{ kind: 'idea', text: 'A storm could close the harbor.', cites: [cite('Book One/Playground/What If.md', [5, 5], 'a storm', B),
+-    { url: 'https://example.invalid/tides', quote: 'spring tides' }] }],
+-};
+-const EXPECTED = {
+-  fact: '1. Fact: Tomas is the ferryman.\n   [canon] Book One/Characters/Tomas.md:3 @bbbbbbb "the ferryman"',
+-  finding: '1. Finding: Eye colour differs.\n   [canon] Book One/Chapters/Chapter 01.md:41 @aaaaaaa "her grey eyes"\n'
+-    + '   [canon] Book One/Characters/Mara Vell.md:9-10 @aaaaaaa "green eyes" (changed since)',
+-  correction: '1. Correction: Chapter 1 says grey.\n   From: "green eyes"\n   To: "grey eyes"\n'
+-    + '   [canon] Book One/Characters/Mara Vell.md:9 @bbbbbbb "green eyes"',
+-  question: '1. Question: Is the harbor north of the town?\n   [canon] Book One/Places/Harbor Town.md:2-4 @bbbbbbb "the harbor"',
+-  idea: '1. Idea: A storm could close the harbor.\n   [playground] Book One/Playground/What If.md:5 @bbbbbbb "a storm"\n'
+-    + '   [web] https://example.invalid/tides "spring tides"',
+-};
+test('free text renders as itself with no citations', () => {
+  for (const body of ['Grey, in chapter 3.', '', '"a JSON string"', '[1, 2]', '42', 'null'])
+    assert.deepEqual(renderReply(body, { check: CHECK }), { kind: 'text', text: body, plain: body });
+});
+@@ -35,8 +25,15 @@ const EXPECTED = {
+-for (const kind of Object.keys(SNAPSHOTS)) {
+-  test(`renderItems snapshot: ${kind}`, () => {
+-    const out = render(SNAPSHOTS[kind]);
+-    assert.equal(out.kind, 'items');
+-    assert.equal(out.text, EXPECTED[kind]);
+-    assert.equal(out.items[0].kind, kind);
+-  });
+-}
+test('a cited reply renders its text, then each cite with the badge from the check result', () => {
+  const out = renderReply(CITED, { check: CHECK, changed });
+  assert.equal(out.kind, 'reply');
+  assert.equal(out.text, "Mara's eyes are grey in chapter 3.");
+  assert.deepEqual(out.citations.map(c => c.badge), ['canon', 'playground', 'supporting', 'web']);
+  assert.equal(out.plain, "Mara's eyes are grey in chapter 3.\n"
+    + '   [canon] Book One/Chapters/Chapter 03.md:41 @aaaaaaa "her grey eyes"\n'
+    + '   [playground] Book One/Playground/What If.md:5-6 @bbbbbbb "a storm"\n'
+    + '   [supporting] Notes/Eyes.md:9-10 @aaaaaaa "green eyes" (agent-written: acme/scribe) (changed since)\n'
+    + '   [web] https://example.invalid/tides "spring tides"');
+  assert.deepEqual(out.citations[0], { badge: 'canon', path: 'Book One/Chapters/Chapter 03.md', commit: A, lines: [41, 41],
+    ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa', quote: 'her grey eyes', canon: true, agent: null, changed: false });
+  assert.deepEqual(out.citations[3], { badge: 'web', url: 'https://example.invalid/tides', link: 'https://example.invalid/tides',
+    ref: 'https://example.invalid/tides', quote: 'spring tides', agent: null, changed: false });
+});
+@@ -44,6 +41,2 @@ for (const kind of Object.keys(SNAPSHOTS)) {
+-test('renderItems numbers several items and takes a parsed body as well as a string', () => {
+-  const items = [...SNAPSHOTS.fact, ...SNAPSHOTS.question];
+-  const out = renderItems({ items }, options);
+-  assert.equal(out.text, `${EXPECTED.fact}\n${EXPECTED.question.replace(/^1\./, '2.')}`);
+-  assert.deepEqual(out.items[1].cites[0], { badge: 'canon', path: 'Book One/Places/Harbor Town.md', commit: B, lines: [2, 4],
+-    ref: 'Book One/Places/Harbor Town.md:2-4 @bbbbbbb', quote: 'the harbor', changed: false });
+test('a parsed body renders as its string does', () => {
+  assert.deepEqual(renderReply(JSON.parse(CITED), { check: CHECK, changed }), renderReply(CITED, { check: CHECK, changed }));
+@@ -52,4 +45,4 @@ test('renderItems numbers several items and takes a parsed body as well as a str
+-test('without options a path cite has no badge and is never marked changed', () => {
+-  assert.equal(renderItems({ items: SNAPSHOTS.finding }).text,
+-    '1. Finding: Eye colour differs.\n   Book One/Chapters/Chapter 01.md:41 @aaaaaaa "her grey eyes"\n'
+-    + '   Book One/Characters/Mara Vell.md:9-10 @aaaaaaa "green eyes"');
+test('without a check result a path cite has no badge, no label and is never changed', () => {
+  const out = renderReply(CITED);
+  assert.deepEqual(out.citations.map(c => [c.badge, c.agent, c.changed]),
+    [[null, null, false], [null, null, false], [null, null, false], ['web', null, false]]);
+@@ -58,6 +51,6 @@ test('without options a path cite has no badge and is never marked changed', ()
+-const NOTICE_SNAPSHOTS = { 'no-cited-answer': 'No cited answer', 'no-answer': 'No answer', 'turn-failed': 'The turn failed' };
+-for (const [notice, text] of Object.entries(NOTICE_SNAPSHOTS)) {
+-  test(`renderItems snapshot: notice ${notice}`, () => {
+-    assert.deepEqual(renderItems(JSON.stringify({ items: [], notice }), options), { kind: 'notice', notice, text });
+-  });
+-}
+test('the label and the badge come from the check result only, never from a bad entry', () => {
+  const bad = { citations: [{ scope: 'web', agent: '' }, { scope: 'story', agent: 7 }, null, { scope: 'canon', agent: 'x/y' }] };
+  const out = renderReply(CITED, { check: bad });
+  // A path cite can't be web; a url cite is web by its shape whatever the check says, and never agent-written.
+  assert.deepEqual(out.citations.map(c => [c.badge, c.agent]), [[null, null], [null, null], [null, null], ['web', null]]);
+});
+@@ -65,14 +58,8 @@ for (const [notice, text] of Object.entries(NOTICE_SNAPSHOTS)) {
+-test('a body without the reply shape shows a fixed line and none of its text', () => {
+-  const secret = 'free prose the guard would refuse';
+-  const bodies = [secret, JSON.stringify(secret), '{"items": [], "notice": "other"}', JSON.stringify({ items: [], notice: 'no-answer', extra: secret }),
+-    JSON.stringify({ items: [] }), JSON.stringify({ items: [{ kind: 'story', text: secret, cites: [] }] }),
+-    JSON.stringify({ items: [{ kind: 'fact', text: secret }] }), JSON.stringify({ items: SNAPSHOTS.fact, prose: secret }),
+-    JSON.stringify({ items: [{ kind: 'correction', text: secret, cites: [] }] }),
+-    JSON.stringify({ items: [{ kind: 'fact', text: secret, cites: [cite('a.md', [2, 1], 'q')] }] }),
+-    JSON.stringify({ items: [{ kind: 'fact', text: secret, cites: [{ path: 'a.md', commit: 'abc', lines: [1, 1], quote: 'q' }] }] }),
+-    JSON.stringify({ items: [{ kind: 'fact', text: secret, cites: [{ url: 'https://x.invalid', path: 'a.md', quote: 'q' }] }] }),
+-    null, 42, '[]'];
+-  for (const body of bodies) {
+-    const out = renderItems(body, options);
+-    assert.deepEqual(out, { kind: 'unreadable', text: UNREADABLE }, String(body));
+-    assert.ok(!JSON.stringify(out).includes(secret));
+test('a web cite is a link only for https', () => {
+  const urls = { 'https://example.invalid/a': 'https://example.invalid/a', 'http://example.invalid/a': null,
+    'javascript:alert(1)': null, 'JAVASCRIPT:alert(1)': null, 'data:text/html,x': null, 'not a url': null, '//example.invalid': null };
+  for (const [url, link] of Object.entries(urls)) {
+    const out = renderReply(reply('t', [web(url)]));
+    assert.equal(out.kind, 'reply', url);
+    assert.equal(out.citations[0].link, link, url);
+    assert.equal(out.citations[0].ref, url);
+@@ -80,0 +68,27 @@ test('a body without the reply shape shows a fixed line and none of its text', (
+
+test('a write notice renders its fixed line', () => {
+  const body = op => JSON.stringify({ notice: 'library-write', op, path: 'Notes/Eyes.md', commit: B });
+  assert.deepEqual(renderReply(body('write'), { name: 'Scribe' }),
+    { kind: 'notice', op: 'write', path: 'Notes/Eyes.md', commit: B, text: 'Scribe wrote Notes/Eyes.md @bbbbbbb', plain: 'Scribe wrote Notes/Eyes.md @bbbbbbb' });
+  assert.equal(renderReply(body('delete'), { name: 'Scribe' }).text, 'Scribe deleted Notes/Eyes.md @bbbbbbb');
+  assert.equal(renderReply(body('write')).text, 'An agent wrote Notes/Eyes.md @bbbbbbb');
+});
+
+test('a body without the reply or notice shape is free text: the whole body, no citations', () => {
+  const bodies = [
+    JSON.stringify({ text: 't' }), JSON.stringify({ citations: [] }), JSON.stringify({ text: 1, citations: [] }),
+    JSON.stringify({ text: 't', citations: [], extra: 1 }), JSON.stringify({ items: [] }),
+    reply('t', [cite('a.md', [2, 1], 'q')]), reply('t', [cite('a.md', [0, 1], 'q')]), reply('t', [cite('a.md', [1], 'q')]),
+    reply('t', [{ path: 'a.md', commit: 'abc', lines: [1, 1], quote: 'q' }]), reply('t', [cite('a.md', [1, 1], 'q', A, { as: 'playground' })]),
+    reply('t', [cite('a.md', [1, 1], 'q', A, { scope: 'canon' })]), reply('t', [{ url: 'https://x.invalid', path: 'a.md', quote: 'q' }]),
+    reply('t', [{ url: 'https://x.invalid' }]), reply('t', [{ url: 'https://x.invalid', quote: 'q', agent: 'x/y' }]),
+    JSON.stringify({ notice: 'library-write', op: 'move', path: 'a.md', commit: A }),
+    JSON.stringify({ notice: 'library-write', op: 'write', path: 'a.md', commit: 'abc' }),
+    JSON.stringify({ notice: 'library-write', op: 'write', path: 'a.md', commit: A, by: 'x' }),
+  ];
+  for (const body of bodies) assert.deepEqual(renderReply(body, { check: CHECK }), { kind: 'text', text: body, plain: body }, body);
+});
+
+test('an empty citations list is a reply with no cites', () => {
+  assert.deepEqual(renderReply(reply('Grey.', [])), { kind: 'reply', text: 'Grey.', citations: [], plain: 'Grey.' });
+});
@@ -0,0 +1,13 @@
+6bdaf870be3d8d03a68eb03f5f6916150bb1b3db134ffbe84018e91d47e6434d  packages/bus/tests/channel-proof.test.mjs
+0385fc49b445ff730021eb11c20b29027631e0d27350e4591d5a0936ffbdccf6  packages/library/README.md
+653ff444ba66cb73e1ca4df1f6037f15a2ec7d3d009cf614a0dc51deabda4b50  packages/library/src/index.mjs
+dfcc9f271afc7afdab908395a7f3c402100fa89b4994b20d5bcae3140d5c335e  packages/library/src/render.mjs
+f3c213f3b0bd080d0bc5837f741a29e324acb91cf0c27144dee08a4113262210  packages/library/tests/render.test.mjs
+9f33e9ca4feb7265ae33fd3ddf0ead0b75375d07ecbe9d8e55c618d29edea658  packages/webui/src/bus.mjs
+f1a0c9a55b1ae933e205c7e2b9753afe0c2f1fc9b0faa2cf18765396f99ac8dd  packages/webui/src/cli.mjs
+bf49a22147be0535076640d20149116a744dad9b0b32dd667ee297a061d56134  packages/webui/src/console-bus.mjs
+793e7dd9edbe5a55c2deab3c8aef4fbd5b4c838e132e2ac9294043c7176ec6f7  packages/webui/src/public/chat.css
+af3a6f382e0d40cf2b28c31db7cb58ba775f1e242651ba42c7426bda99dc0d89  packages/webui/src/public/chat.js
+6412fe34bc640433e9cf7610f65d3574a3415c934354d8cb52e056793a81948f  packages/webui/src/serve.mjs
+f191752f867a112c867ca24268f70aa99ca0903c9208f76bc4bb4c1587cb55df  packages/webui/tests/chat-replies-browser.test.mjs
+df4ff385ac4ca8244ffa00faf82fcca1f4fcdac8da02a4f4d71233d4df8e1157  packages/webui/tests/library-routes.test.mjs
@@ -0,0 +1,13 @@
+0457ba48705ce47c6c5777adbbb818c5012dc82fe4ccdaf0b56ee8ca025bd355  packages/bus/tests/channel-proof.test.mjs
+495e737525274c49f31523aea34983345b7f8f09eb4e982603bb51d8ddf7cda5  packages/library/README.md
+45dbeed86fb8940050c2dc600bd78042e1f14e8b385f79bf6f2efda07ec35eeb  packages/library/src/index.mjs
+bfc3de029d3c8f0dcc96c90fde30d6da58bbb5b72d8f13e3f536c0d735c73ca5  packages/library/src/render.mjs
+f3c213f3b0bd080d0bc5837f741a29e324acb91cf0c27144dee08a4113262210  packages/library/tests/render.test.mjs
+4ebf6c2b5d71c23d85cbde83f69aa671058dc2195c9ae4bdda624f6940729d1b  packages/webui/src/bus.mjs
+f1a0c9a55b1ae933e205c7e2b9753afe0c2f1fc9b0faa2cf18765396f99ac8dd  packages/webui/src/cli.mjs
+bf49a22147be0535076640d20149116a744dad9b0b32dd667ee297a061d56134  packages/webui/src/console-bus.mjs
+793e7dd9edbe5a55c2deab3c8aef4fbd5b4c838e132e2ac9294043c7176ec6f7  packages/webui/src/public/chat.css
+52828c03b618e3754f0e59a395f4bcc16d1c9d8db01d403406a67ca0934f0188  packages/webui/src/public/chat.js
+4ee53400b0e433833ce1cb641b93f1aa346af548e8c710b5884ea11c4c173342  packages/webui/src/serve.mjs
+3d20b683150fdfa3fe6898372a46d92bbe60f121759edaaca538ee0542a0886b  packages/webui/tests/chat-replies-browser.test.mjs
+df4ff385ac4ca8244ffa00faf82fcca1f4fcdac8da02a4f4d71233d4df8e1157  packages/webui/tests/library-routes.test.mjs
@@ -0,0 +1,106 @@
+#!/usr/bin/env python3
+"""Run row225 mutants in disposable snapshots, only on Sage CLEAR.
+
+Commit the tested candidate first. Never change the worktree or shared dependencies.
+A timeout, import failure or process failure is not a mutation kill.
+"""
+import argparse
+import hashlib
+import json
+import os
+from pathlib import Path
+import shutil
+import subprocess
+import tarfile
+import tempfile
+
+BROWSER = 'packages/webui/tests/chat-replies-browser.test.mjs'
+ROUTES = 'packages/webui/tests/library-routes.test.mjs'
+CHAT = 'packages/webui/src/public/chat.js'
+SERVE = 'packages/webui/src/serve.mjs'
+RENDER = 'packages/library/src/render.mjs'
+MUTANTS = [
+    ('B1-forged-notice', RENDER, 'options.check == null ? notice(value, options.name) : null', 'notice(value, options.name)', BROWSER),
+    ('N1-definite-refusal', CHAT, 'data?.sent === false || res.status >= 400 && res.status < 500', 'data?.sent === false', BROWSER),
+    ('M1-badges', RENDER, 'badge: scope, path:', 'badge: null, path:', BROWSER),
+    ('M1-agent-label', RENDER, 'canon: c.canon, agent,', 'canon: c.canon, agent: null,', BROWSER),
+    ('M2-http-links', RENDER, "new URL(url).protocol === 'https:' ? url : null", 'url', BROWSER),
+    ('M3-wrong-commit', CHAT, 'e.file !== e.last', 'cite.commit !== e.last', BROWSER),
+    ('M3-missing-file', CHAT, "SHA.test(e?.file ?? '') && SHA.test(e?.last ?? '')", "SHA.test(e?.last ?? '')", BROWSER),
+    ('M4-fallback', CHAT, 'Array.isArray(limits.fallback) ? limits.fallback.filter', 'Array.isArray(v.replyLimitsFallback) ? v.replyLimitsFallback.filter', BROWSER),
+    ('M4-problem', CHAT, "if (CODE.test(limits.problem ?? '')) parts.push(`<code>${txt(limits.problem)}</code>`);", '', BROWSER),
+    ('M5-send', SERVE, 'if (!send || !libraryRevert || !named)', 'if (!libraryRevert || !named)', ROUTES),
+    ('M5-project-receipt', SERVE, 'result.project !== value.project || ', '', ROUTES),
+    ('M5-commit-input', SERVE, '!COMMIT.test(value.commit)', 'false', ROUTES),
+    ('M5-origin', SERVE, "if (one(req, 'origin') !== ownOrigin(preview)) return refuse(403, 'cross-origin request refused', 'a revert needs the Console\\'s own Origin');", '', ROUTES),
+    ('M5-fetch-metadata', SERVE, "if (one(req, 'sec-fetch-site') !== 'same-origin') return refuse(403, 'cross-site request refused', 'a revert needs same-origin Fetch Metadata');", '', ROUTES),
+    ('M6-duplicate-call', SERVE, 'result = await libraryRevert({ project: value.project, commit: value.commit });', 'result = await libraryRevert({ project: value.project, commit: value.commit }); await libraryRevert({ project: value.project, commit: value.commit });', ROUTES),
+    ('M7-user-fence', SERVE, "if (path === '/api/chat' || path.startsWith('/api/chat/')) return true;", "if (path.startsWith('/api/library/')) return true; if (path === '/api/chat' || path.startsWith('/api/chat/')) return true;", ROUTES),
+]
+
+
+def digest(path):
+    return hashlib.sha256(path.read_bytes()).hexdigest()
+
+
+def main():
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument('--clear', required=True, help='Sage CLEAR authorizing this run')
+    parser.add_argument('--output', required=True, type=Path)
+    parser.add_argument('--only', help='Comma-separated mutant names for a bounded review delta')
+    args = parser.parse_args()
+    names = set(args.only.split(',')) if args.only else {m[0] for m in MUTANTS}
+    if names - {m[0] for m in MUTANTS}:
+        raise SystemExit('Unknown mutant name')
+    selected = [m for m in MUTANTS if m[0] in names]
+    repo = Path(subprocess.check_output(['git', 'rev-parse', '--show-toplevel'], text=True).strip())
+    if subprocess.check_output(['git', 'status', '--porcelain', '--', 'packages'], text=True).strip():
+        raise SystemExit('Commit tested packages first: snapshot must match candidate.')
+    dependency = repo / 'node_modules'
+    if dependency.is_symlink() or not dependency.is_dir():
+        raise SystemExit('Install dependencies locally in the worktree; no canonical dependency link.')
+    head = subprocess.check_output(['git', 'rev-parse', 'HEAD'], text=True).strip()
+    before = {p: digest(repo / p) for p in [CHAT, SERVE, RENDER]}
+    args.output.mkdir(parents=True, exist_ok=True)
+    results = []
+    with tempfile.TemporaryDirectory(prefix='mosaic-row225-mutants-') as directory:
+        scratch = Path(directory)
+        archive = scratch / 'candidate.tar'
+        with archive.open('wb') as stream:
+            subprocess.run(['git', 'archive', 'HEAD', 'packages', 'roles', 'contracts', 'tasks', 'missions', 'package.json', 'RELEASE'], stdout=stream, check=True)
+        for name, target, old, new, test in selected:
+            tree = scratch / name
+            tree.mkdir()
+            with tarfile.open(archive) as bundle:
+                bundle.extractall(tree, filter='data')
+            (tree / 'node_modules').symlink_to((repo / 'node_modules').resolve(), target_is_directory=True)
+            path = tree / target
+            source = path.read_text()
+            hits = source.count(old)
+            if hits != 1:
+                raise SystemExit(f'{name}: expected one anchor, found {hits}')
+            path.write_text(source.replace(old, new, 1))
+            command = ['timeout', '-k', '10', '240' if test == BROWSER else '120', 'node', '--test', '--test-reporter=tap', '--test-concurrency=1', '--test-timeout=30000', test]
+            run = subprocess.run(command, cwd=tree, stdout=subprocess.PIPE, stderr=subprocess.STDOUT, text=True, env=os.environ)
+            log = args.output / f'{name}.tap'
+            log.write_text(run.stdout)
+            path.write_text(source)
+            restored = digest(path) == hashlib.sha256(source.encode()).hexdigest()
+            worktree_clean = before == {p: digest(repo / p) for p in before}
+            if not restored or not worktree_clean:
+                raise SystemExit(f'{name}: restore/hash check failed')
+            killed = run.returncode == 1 and 'ERR_ASSERTION' in run.stdout and 'not ok ' in run.stdout
+            results.append({'mutant': name, 'anchorHits': hits, 'restored': restored, 'worktreeUnchanged': worktree_clean, 'exit': run.returncode, 'killed': killed, 'test': test, 'log': str(log)})
+            print(json.dumps(results[-1]), flush=True)
+            shutil.rmtree(tree)
+            if not killed:
+                break
+    after = {p: digest(repo / p) for p in before}
+    report = {'head': head, 'clear': args.clear, 'worktreeUnchanged': before == after, 'selected': sorted(names), 'results': results}
+    (args.output / 'summary.json').write_text(json.dumps(report, indent=2) + '\n')
+    if before != after or len(results) != len(selected) or not all(r['killed'] for r in results):
+        raise SystemExit(1)
+
+
+if __name__ == '__main__':
+    main()
@@ -0,0 +1,177 @@
+# Row 225 (C2-10b) Console chat: replies, citations, write notices, status line
+
+Owner: Morgana, from sage-3582 (18:53Z 10-23). Base: origin/refactor 45dca69f6. Branch: morgana/row225.
+Brief: docs/plans/2026-10-20_case2-rows.md, C2-10b. Design: agents/gosalyn/work/case2/DESIGN.md 7.4,
+5.2 (the reply schema and the check result) and the write notice and `library.revert` (about line 286).
+
+## Ruling on the dependency gap (sage-3591)
+
+225 builds against the design contracts. `renderReply` stays pure, and the caller supplies the answers
+it can't know. The revert route proxies to the bus verb and shows the refusal code until the verb
+exists. Landing order: 225 lands after 217 (C2-06), not after 288 (C2-02). Sage adds `after 217` to
+row 225. Before 288 lands, the Revert button gets the bus's refusal and shows its code, as the brief
+allows.
+
+## A1. The check result I assume (to 217, Launchpad)
+
+The broker stores one check result with each agent-to-human message the guard passes. The Console reads
+it on the message row that `/api/chat/threads/<id>/messages` returns, under the key `check`:
+
+```json
+{
+  "check": {
+    "citations": [
+      { "scope": "canon", "agent": null },
+      { "scope": "supporting", "agent": "acme/scribe" },
+      { "scope": "web", "agent": null }
+    ]
+  }
+}
+```
+
+- `check` is `null` or absent on a message the guard didn't check: a human's message, a free-text reply,
+  a notice, or a message from before 217.
+- `check.citations` has one entry per entry of the body's `citations`, in the same order.
+- `scope` is one of `canon`, `playground`, `supporting` and `web`. A url cite is `web`.
+- `agent` is the `Mosaic-Agent` trailer value, `<business>/<instance>`, from
+  `git log -1 --format=%(trailers:key=Mosaic-Agent,valueonly) <commit> -- <path>`, or `null` when the
+  file's last commit at `commit` carries none. A url cite has `agent: null`. The Console shows the
+  agent-written label when `agent` is a nonempty string, and names the agent.
+
+The Console trusts nothing in the body for scope or label. A cite with no matching check entry renders
+with no badge and no label. It doesn't fall back to a scope it worked out itself.
+
+If 217 uses other names, I change mine to theirs before either of us pushes (sage-3591 item 1).
+
+## A2. The revert verb I assume (to 288, Honker)
+
+- Verb: `library.revert`. A human verb (design M4): from an agent session it refuses `human-required`,
+  like `library.status` (`broker.mjs:5133`).
+- Args: `{ "project": <business project name>, "commit": <40 lowercase hex> }`. The design writes
+  `library.revert {commit}`. `project` is added to match the other library verbs, and like theirs it is the
+  key of `business.projects` (`mirror.mjs:31`), which is the chat project's `repo` link, not its UUID. Both are required, and no other key
+  is allowed (`invalid-request`), as the other library verbs check with `keys(args, ...)`.
+- Result: `{ "project", "path", "reverted": <the commit given>, "commit": <the new commit> }`.
+- Refusal codes the Console shows by name:
+  - `library-revert-not-agent`: `commit` has no `Mosaic-Agent` trailer for this business, or isn't
+    reachable from the served commit.
+  - `stale-base`: a later commit changed that path.
+  - `human-required`, `invalid-request`, `project-not-configured`.
+  - Before 288 lands, the bus refuses the verb (expected `unknown-verb`, `broker.mjs:6578`), and the Console
+    shows that code.
+- HTTP status in the Console (`packages/webui/src/bus.mjs` `busStatus`): `stale-base` and
+  `library-revert-not-agent` map to 409. Every other code keeps the existing mapping.
+
+## A3. The status line
+
+`GET /api/library/status?project=<id>` proxies `library.status {project}` through the existing
+`libraryStatus` option. `cli.mjs:110` already passes that option, but `startServer` doesn't read it.
+The status line shows:
+
+- the served commit (7 characters) and its age;
+- `library-diverged` when the sync state names it;
+- the fetch error code;
+- the reply limits in force, and the keys that fell back;
+- the count of R-problems, linking to the list.
+
+It reads the fields `readSyncState` returns at the base (`packages/library/src/mirror.mjs:232`). It shows
+any field 217 adds (the limits) only when present.
+
+## A4. "Changed since" (ruled sage-3596)
+
+Sage ruled that 217 supplies `last`. On a `thread.messages` row that carries `check`, each path cite's
+entry gets `last`, the file's last commit at the served tip, read when the message is read. When `last`
+is absent the Console marks nothing changed, and a test pins that.
+
+One more field is needed, raised in morgana-0200. The cited `commit` is a library commit, not the
+file's own last commit, so a cite made at a commit that didn't touch the file would differ from `last`
+while the file is unchanged. I asked 217 to also store `file`, the file's last commit at the cited
+commit. That's `%H` from the same `git log -1 <commit> -- <path>` call that reads the trailer, so it
+costs no extra git call. The Console marks a cite changed when both `file` and `last` are 40-hex and
+differ. The cited commit is reachable from the served one (5.2), so `file` is an ancestor of `last`,
+and differing means newer. A missing or malformed `file` or `last` marks nothing.
+
+The entry the Console reads, in full: `{ scope, agent, file?, last? }`.
+
+## A5. `no-cited-answer` retires
+
+`renderItems` and its `NOTICES` (`no-cited-answer`, `no-answer`, `turn-failed`) go. 217 sends the
+runner's fixed texts as plain bodies (design 5.2, "Runner texts"), and renderReply shows those as free
+text. Design 7.4 names no other notice than `library-write`, so nothing is lost (sage-3596 item 3).
+
+## Files
+
+Both deviations below were accepted in sage-3596 and are named in the manifest for Dewey. The brief owns these:
+
+- `packages/library/src/render.mjs`: `renderReply` replaces `renderItems`.
+- `packages/library/src/index.mjs`: the export.
+- `packages/library/README.md`: the section.
+- `packages/library/tests/render.test.mjs`.
+
+It also owns `bus.js`, its stylesheet, `serve.mjs` (only the two routes) and new webui tests. Two
+deviations, both recorded here:
+
+- The chat view's message list is `packages/webui/src/public/chat.js:85` (`window.MosaicChat`), not
+  `bus.js`. The reply, notice and Revert rendering goes in `chat.js` and `chat.css`. The status line
+  goes in the chat thread view, so it is also in `chat.js`.
+- `packages/webui/src/console-bus.mjs` and `cli.mjs` each get one `libraryRevert` line, beside the
+  existing `libraryStatus` wiring.
+
+## Overlap with row 220 (C2-10a, Researcher, 3ef6da90d)
+
+220 changes one line each in the webui tests discord.test.mjs, fixture.mjs, history-fixture.mjs,
+relaunch.test.mjs and return-flow.test.mjs. Its other paths are in control-board, conversation, discord
+and business. 225 doesn't touch those five files or those packages. Its webui tests are new files.
+
+## Handoff to Fethry (mos-1501, Q245)
+
+The row moved to Fethry (Codex, fethry/row225). Everything below is **untested**: no suite or single file
+has run on it, since a run needs Sage's CLEAR. Each changed file passes `node --check`.
+
+Done in the handoff commit:
+
+- `render.mjs` `renderReply(body, {check, changed, name})`; index export; README section;
+  `render.test.mjs` rewritten. `renderItems` is gone from every package.
+- `serve.mjs`: `/render.mjs` static entry (owner and user file maps), `GET /api/library/status`
+  (one `project` query, answer must name that project), `POST /api/library/revert` (save's boundary,
+  strict `{project, commit}`, refusal shows the code, lost or unusable answer is `outcome-unknown`,
+  never retried). Both are nulled for a granted user, and `userRoute` keeps them owner-only. The tester
+  listener refuses `libraryRevert`.
+- `bus.mjs`: `library-revert-not-agent: 409`. That re-pins `packages/webui/src/bus.mjs` in
+  `packages/bus/tests/channel-proof.test.mjs`, with a comment line, as row 254 did. It's a third deviation,
+  in another package's test.
+- `console-bus.mjs` and `cli.mjs`: `libraryRevert`, beside `libraryStatus`.
+- `chat.js`: dynamic `import('/render.mjs')` (CSP is `script-src 'self'`); body text until it loads.
+  Cites with a scope badge, the agent-written label, "changed since" from `file`/`last`, links only for
+  https with `rel="noopener noreferrer"`. A notice gets a Revert button behind `confirm()`. The library
+  status line goes under the thread heading.
+- `chat.css`: cite, badge, notice and status styles.
+- New tests: `packages/webui/tests/library-routes.test.mjs` and
+  `packages/webui/tests/chat-replies-browser.test.mjs`. 220's five files are untouched.
+
+Decisions made in the build:
+
+- The library name is the chat project's `repo`. A project with no repo reads no status and its
+  Revert does nothing.
+- These codes hide the status line: `project-not-declared`, `library-mapping-invalid`,
+  `project-not-configured`, `not-configured` and `owner-only`.
+  - Otherwise every code-repo thread, and every granted user, would show "unavailable".
+  - Cost: a broken library mapping also hides the line. `library.status` from the CLI still shows it.
+- "Age" is the time since `lastFetch` ("fetched 5 min ago"), not the served commit's age, which the
+  status doesn't carry.
+- The limits fields are assumed to be `replyLimits {requireCitation, citationsPerReply}` and
+  `replyLimitsFallback [keys]`, and are shown only when present. **Not agreed with 217.** Confirm with
+  Beakley and rename.
+- A notice body's shape is all the renderer checks. An agent in a business without a library could
+  send a body that looks like a notice. The page would show it, but `library.revert` still refuses it.
+
+Left:
+
+1. Get CLEAR and run the webui and library suites, `channel-proof.test.mjs`, and the two new files whole.
+   The browser test's selectors and waits have never run.
+2. Agree the limits field names with 217 (Beakley).
+3. Granted-user R6 G5 (`granted-user.test.mjs:252`) lists owner verbs by hand. Add `library.revert`
+   once 288 lands.
+4. BUILD.md: the mutant list and the mos-1275 timeout plan.
+5. The manifest names the three deviations: chat.js and chat.css in place of bus.js, the console-bus and
+   cli lines, and the channel-proof re-pin.
@@ -0,0 +1,11 @@
+# Steelbeak
+
+Builder seat, Codex gpt-6.1-sol, started by Sage under Q246 and mos-1576. Takes over row 287 (C2-21, #1792) from
+Megavolt's pushed `megavolt/row287` 21c123ae8, a design-only BUILD.md with no code yet, and builds it on refactor.
+Megavolt's rulings and notes in agents/megavolt/work/queue-287/BUILD.md bind this seat. The brief names an Opus 5.5
+owner; mos-1542 moved every new build row to Codex, so this seat builds it.
+
+No launcher in this directory. The seat runs as a T3 thread and works in its own worktree. It has no credentials of its
+own; it pushes only its own `steelbeak/*` branches through the repository credential helper (mos-0981), never
+`refactor`, `main` or another seat's branch. Boyd gives the first Codex review and Dewey the Opus 5.5 landing review
+(mos-1542). Registered by Sage on 2026-10-24 so the queue can name the seat as row owner (store.mjs isSeatDir).
@@ -0,0 +1,427 @@
+# Row 287 design notes: C2-21, the grant executor for a library project (#1792)
+
+Builder Megavolt, reviewer Dewey, gate owner Sage (sage-2910, Q226, mos-1310). Branch megavolt/row287, a
+doc-only draft off 94c33a43c, written during Gizmoduck's slot with local git only. The build starts on the
+candidates of row 285 (C2-08b, Scrooge) and row 226 (C2-13b, Gosalyn) and rebases onto their landings
+(Q177). Nothing here has been run.
+
+The brief is "C2-21 the grant executor for a library project" in docs/plans/2026-10-20_case2-rows.md at
+94c33a43c. Its gate: Dewey approves the manifest; the bus suite, the Gitea Docker test and the install test
+are green on Sage's gate, along with every `scripts/test-*.sh`; a search of the test run's output for the
+fixture admin and seat tokens finds nothing.
+
+## Sources (line cites at 94c33a43c)
+
+- `packages/bus/src/gitea-grant.mjs`: the admin api (`adminApi`, no collaborator call yet), the seat api
+  (`forkGet`, `fork`, `repos`), `identitySha256`, `REPO_PAGE`/`REPO_PAGES`.
+- `packages/bus/src/broker.mjs`: `#giteaRole` :2132, `#giteaTargets` :2149, `#giteaGrantBinding` and its
+  block :2167-2196, `#giteaRecheck` :2200, `#giteaSteps` step 4 :2425-2441 and step 5 :2442-2473, the
+  `grant.applied` body and notice :2480-2488, the host refusals `host-creative-role` :1106 and :1254.
+- `packages/business/src/business.mjs` :266-288: a `kind: "library"` project goes through `checkMapping`, and
+  :286 refuses any role whose `publish` names a library project.
+- `packages/library/src/mapping.mjs`: a library entry carries `remote`, `branch` and an optional `user`.
+- `packages/bus/tests/gitea-grant.test.mjs` :297-334 pins the `grant.applied` body (`forks: [...]`) and the
+  block; `fake-gitea-api.mjs` keeps collaborators as a list of logins with no permission.
+- `packages/bus/tests/gitea-grant-docker.test.mjs`: the scratch gitea/gitea:1.27.1 container; it uses
+  `os.tmpdir()`.
+
+## 1. Rulings, blockers and questions
+
+- B1, the publish rule. `business.mjs:286` refuses any `publish` entry that names a library project
+  ("library repositories cannot be published by agents"). The brief's chief needs `publish: ["books"]`, and a
+  creative seat needs the library project in `publish` for `#giteaRole` and `#giteaTargets` to pass. No test
+  under packages/*/tests or scripts pins the :286 message (positive control: "publish names" hits
+  agent-identity.test.mjs).
+- Ruling sage-2916 (18:42Z 10-22), files-owned extension: row 287 owns `packages/business/src/business.mjs`
+  :283-291 and the `packages/business/tests/business.test.mjs` cases for it. Row 285 leaves business.mjs
+  alone. Conditions:
+  - The refusal is rewritten, not deleted. A library project in `publish` loads only for a creative
+    instance (`CREATIVE_DEFINITIONS`) or the chief of staff, each with a gitea credential. Any other
+    instance still refuses, with a new message that names the rule. Tests cover both sides. The grant path
+    serves an allowed one with collaborator reach, never a fork. (To confirm on the base: how business.mjs
+    names the chief, by definition `chief-of-staff` or by `launch.by`.)
+  - Before in-review, grep 'packages/*/tests/*' and `scripts/test-*.sh` again for the old message text,
+    with a positive control.
+  - PRD 1.15 REQ-LIB-6 is the authority for this. If Mos changes 1.15 (sage-2914, `library.write`
+    routing), check this text against what lands.
+- Q1 to Q4 below: Sage accepted them as stated assumptions (sage-2916). Dewey checks them in the round.
+- Q1, the hash. `identitySha256` covers identity, publish and remotes, not a project's kind or the role's
+  definition name, and the level comes from the definition name. Proposal: add a `library` key
+  (`{project: level}`) to the hash input only when a publish project is a library, so every non-library
+  grant's hash stays byte-identical and no open grant turns `decision-mismatch` on upgrade.
+- Q2, the event. `grant.applied` and its notice carry `forks`, and the test at :322 pins that body.
+  Proposal: `forks` stays (empty when every target is a library), and a `repositories:
+  [{project, repository, level}]` key appears only when a library target exists. The notice names them the
+  same way.
+- Q3, mixed raises. A creative raise must name only library projects (mos-1320 item 2). The chief may
+  name a library project next to forked ones in one raise; step 4 forks the others and adds the collaborator
+  on the library one. Proposal: allow that, and test it. Under sage-2916, any other non-creative instance
+  can't hold a library project in `publish` at all, so the business file refuses it before any raise.
+- Q4, the token search for the Docker test. The fake API's tokens are fixtures and can be grepped. The
+  Docker test's tokens are minted by the container at run time, so the gate grep can't know them in advance.
+  Proposal: the Docker test captures its own diagnostics and asserts that no token it minted appears in
+  them, and the gate greps the run's output for every fake-API fixture token.
+
+### Early look, Dewey (dewey-0862, 18:53Z 10-22, on 5bcfef0ad, read only), folded
+
+These replace the matching proposals in sections 2 and 3 where they differ.
+
+- Q2 accepted. `forks` stays and is `[]` when every target is a library. `repositories:
+  [{project, repository, level}]` appears only when a library target exists. `repository` is the remote
+  URL, the same form as `forks`; the `full_name` that step 5 matched is asserted in a test and doesn't go
+  in the body. The only src reader of `forks` is the notice (:2483). The notice drops its forks clause when
+  the list is empty and adds "repositories: <url> (<level>)". A non-library notice keeps today's text.
+- The read line: "The token can read every path of this repository. It can't push to it, because the user
+  is a read collaborator." The seat scope is still `write:repository` (:2189).
+- B-a: `\nForks:` (:2187) prints only when a fork target exists.
+- B-b: "Step 5 checks that this is only its forks." (:2193) is unchanged with no library target. With one, it
+  reads "Step 5 checks that this is only its forks and the repositories above at their level."
+- B-c: `others` (:2181, :2194) splits. An untargeted library project in publish gets its own line, "It may
+  also reach these repositories as a collaborator: <url> (<level>)", because a revoke leaves the
+  collaborator entry and step 5 accepts it publish-wide. Forked others keep today's line. L8 covers B-a to
+  B-c.
+- Q1 holds. Test: a project flipped to `kind: "library"` between the raise and the recheck gives
+  `decision-mismatch` (L10).
+- Q3 holds. Library projects stay out of step 5's fork upstream set (:2446), so a fork of her repository
+  refuses `gitea-reach-wider`; L4 covers it.
+- Q4 holds if the assertion covers what the test prints, TAP stdout and stderr, not only an in-test
+  buffer. The Docker test prints one line, "minted N, hits 0", for the gate to grep.
+- Step 5 compares exactly the keys `admin`, `push` and `pull`. BUILD.md records F-B's actual `permissions`
+  object, so an extra Gitea key can't pass or fail by accident.
+- The chief is named by definition `chief-of-staff`, not `launch.by`, matching broker `STAFF_TO` (:240) and
+  row 286 (dewey-0860). A fired chief keeps its roles entry (instance-settings.mjs:355), so B-2 also loads a
+  fired chief's entry.
+
+### The definitions' gitea credential (dewey-0865)
+
+At 94c33a43c, chief-of-staff.json and all six creative definitions have `credentials: []`, so `#giteaRole`
+(:2137-2143) would refuse them all `gitea-not-declared`. Row 287 doesn't add the credential. Row 285 (C2-08b)
+owns those role files, and its brief (case2-rows.md :1823-1824) gives each creative role and the chief
+`[{"service": "gitea"}]`, which Mos authorized in mos-1309 item 5. That is why 287 builds after 285 lands. Two
+notes for 285, not for this row:
+- The grant path reads only `service === 'gitea'`. The seat token's scopes come from `SEAT_SCOPES` in code,
+  not from the definition. coder.json adds `scopes`, and 285's validator decides whether the bare form passes.
+- Five bus tests read roles/chief-of-staff.json directly (chief-of-staff, fire-revokes-grants,
+  instances-verb, names, routes-verb), and 285's gate names the business suite, not the bus suite.
+- Settled (sage-2950, 19:06Z 10-22): 285's gate runs the bus suite whole (sage-2946), and Scrooge has the
+  role.mjs no-scopes check. Dewey withdrew dewey-0865 (dewey-0867). Mos withdrew the mos-1332 item 3 publish
+  fence (mos-1333), so business.mjs stays out of 285's files and sage-2916 stands as written.
+- Correction (sage-2958, Scrooge): role.mjs refuses `{"service": "gitea"}` with no scopes
+  (checkGiteaScopes :100-111, util.mjs:42); only a host entry may omit them (:134). So 285's entries name
+  their scopes, equal to SEAT_SCOPES (sage-2915). The chief-of-staff.json readers are seven, not five: add
+  host-run and reload. 287's tests that build definitions give gitea entries `scopes: ["read:user",
+  "write:repository"]`.
+
+## 2. The change (proposed)
+
+- Order in the executor: step 2 (user) and step 3 (mint) as today. Step 4, for each target: a library
+  project gets `PUT /api/v1/repos/{owner}/{repo}/collaborators/{user}` with `{permission}` through the admin
+  api, op `collaborator-add`, the `token` header, logged like every call. Expect 204, or anything else fails
+  with `gitea-failed`. A non-library project forks as today.
+- The level: `write` when `CREATIVE_DEFINITIONS.includes(role.definition)`, `read` otherwise. The raise has
+  no field for it; `giteaGrantCheck` still refuses any key other than method, agent, rotateBy and target.
+- Step 5: the upstream set stays for forks. A repository is accepted when it is the user's fork of a
+  non-library publish upstream (today's rule), or when its `full_name` is a library publish project's
+  `owner/repo` and its `permissions` are exactly `{admin: false, push: level === 'write', pull: true}`. Any
+  other repository, a wider permission or `admin: true` refuses `gitea-reach-wider` with the repository
+  named.
+- `#giteaRole`: the `CREATIVE_DEFINITIONS` refusal becomes "unless every project the raise names is a
+  library project". `#giteaRole` gets the raise's project list from its two callers (the binding at
+  :2168 and the recheck at :2201), so it can decide. The comment cites mos-1320 item 2 and keeps
+  mos-1163 for every other project and every host grant. The host refusals at :1106 and :1254 and their
+  tests stay as they are.
+- `#giteaTargets` returns `{project, upstream, library: true, repository, level}` for a library project and
+  today's `{project, upstream, fork}` otherwise. `forkProblem` still runs for both: a library remote on
+  another host refuses `remote-host-mismatch`, and one the seat user owns refuses `remote-not-fork`.
+- The block: a library target prints `Repository: <remote>, level <write|read>.` in place of its fork line,
+  plus the brief's line "The token can write every path of this repository. Only the bus's path check
+  limits it to supporting folders." for a `write` level. For a `read` level the line says the token can read
+  every path. (The brief gives only the write line; Dewey can rule the read wording.)
+- Revoke deletes the token as today; the collaborator entry stays, as forks do. A fire sets
+  `prohibit_login` as today. Neither path changes.
+- `scripts/case2-install.sh` (row 226's file): the chief of staff's instance gets `identity` and
+  `publish: ["books"]`. If `#grantableAgent` refuses the chief as its own target, the row stops and goes to
+  Sage. Read of :2037-2042 says it passes when the chief is `launch.by`; a test proves it.
+
+## 3. Tests (proposed)
+
+Docker (`gitea-grant-docker.test.mjs`), each fact first, before any code is trusted:
+- F-A: the admin token with `ADMIN_SCOPES` adds a collaborator to a repository the admin account doesn't
+  own. F-B: `/user/repos` with the seat token lists that repository with the granted `permissions`. Either
+  failing stops the row; the output goes to Mos.
+- F-C (recorded, not gating): a protected file pattern on her branch refuses a seat user's push to a story
+  path while her own push passes. F-D (recorded): branch protection refuses a seat user's force-push while a
+  normal push passes. Each logs its result as a diagnostic and doesn't fail the file; BUILD.md and a message
+  to Mos carry them.
+
+Fake API (`gitea-grant.test.mjs`, `fake-gitea-api.mjs`): collaborators carry a permission, `repoJson`
+returns `permissions`, and the PUT route requires a site admin token with `write:repository`.
+- L1 a creative definition gets `write`; L2 the chief gets `read`, including a mixed raise of the library
+  project and a forked one (Q3).
+- L4 a repository with `push: true` for a read grant, or `admin: true`, or a fork of her library repository,
+  refuses `gitea-reach-wider` naming it.
+- L5 revoke deletes the token and leaves the collaborator.
+- L6 a non-library project still forks, and its `grant.applied` body is byte-identical to today's.
+- L7 a creative raise naming a non-library project, or a library and a non-library one, refuses
+  `gitea-not-declared`.
+- L8 the block holds the repository, the level and the brief's line, plus B-a to B-c (dewey-0862); the notice
+  has no "forks: ." on a library-only grant.
+- L10 a project flipped to `kind: "library"` between the raise and the recheck gives `decision-mismatch`.
+- L9 the chief raises its own grant through `credential.mint`.
+- Install test: the business file gives the chief `identity` and `publish`.
+
+Business (`business.test.mjs`, sage-2916): B-1 a creative instance with identity, a gitea credential and a
+library project in `publish` loads; B-2 so does the chief; B-3 any other instance with a library project in
+`publish` refuses with the new message; B-4 a creative instance or the chief without a gitea credential
+still refuses under the existing `publish needs identity and a gitea definition` rule. Mutant: M5 drop the
+creative-or-chief condition (any instance loads), killed by B-3.
+
+Mutants: M1 drop the library-only condition from `#giteaRole` (the brief's), killed by L7. Others to list
+once the code exists: the level forced to `write` (L2), step 5's exact-permission check loosened to
+`push || pull` (L4), the fork path taken for a library project (L1, a fork call counted).
+
+## 4. Gate plan (draft)
+
+On Sage's CLEAR, with TMPDIR from `mktemp -d /mnt/storage/scratch/tmp/gXXXXXX`, stopping at the first red:
+the touched bus test files whole, then the mutants, the bus suite, the Docker test (checking for `^skip`
+first, since a missing image skips it), the install test, every `scripts/test-*.sh` under row 281's limits,
+then the token grep over the saved output. Timeouts and limits go in this file before the run.
+
+## Runs
+
+Filled in after the runs.
+
+## Steelbeak takeover (2026-10-24, base 18334d713)
+
+Sage-4124 dispatches Steelbeak as builder, Boyd first reviewer and Dewey landing reviewer. The
+inherited text above is retained as design history; this section records current execution.
+No test has run. Root npm ci uses this worktree only. Short TMPDIR is
+`/mnt/storage/scratch/tmp/1ysAmV`; every scripts/test-*.sh invocation will use `timeout -k 10`.
+Canonical queue next returned nothing while assignment was pending. Start op steelbeak-287-start
+refused the sage-4122 assign lock; retry no sooner than two minutes after that refusal.
+
+Delta at 18334d713: broker grantableAgent 2667-2672 (launch.by self eligible), giteaRole 2760-2777
+(new chief refusal), targets 2781-2789, binding/block 2799-2830, recheck 2832-2842, step4
+3070-3085, step5 3087-3120, applied/notice 3124-3132. gitea-grant hash 75-80 and API 250-264
+unchanged. Business publish fence is 291-299. Install library helper is 109-127. Row286
+library-credential.test.mjs seeds 153-179, consumed at 219, 225 and 286, must become real minting.
+
+Chief scope delta raised in steelbeak-0001: row285 declares read scopes and sage-2921 fences the
+existing write-scoped executor; inherited dewey-0862 retained SEAT_SCOPES and Q3 allowed mixed
+chief grants. Await explicit resolution of that boundary before implementing it. Other accepted
+rulings (conditional library hash, optional repositories event key, exact permission keys, business
+publish fence, preserved host creative refusals) remain applicable.
+
+Tests planned: Docker F-A/F-B gating first; F-C/F-D recorded. Fake L1/L2/L4-L10 and business
+B1-B4 from inherited plan; install chief identity/publish and row286 real-mint replacement.
+Mutants M1 library-only guard, M2 forced write, M3 loose permissions, M4 library fork,
+M5 missing creative-or-chief publish fence. No suite runs before Sage CLEAR.
+
+### Rulings
+
+Sage-4125 (2026-10-24 14:49:27Z), replacing Q3 and dewey-0862's chief SEAT_SCOPES line:
+1. Chief grants name only library projects; mixed and fork-only chief raises refuse gitea-not-declared.
+2. Library mint scopes come from the definition's gitea credential: chief read:repository/read:user,
+   creative its declared scopes. Fork grants retain SEAT_SCOPES.
+3. Role comment retains sage-2921's reason and cites mos-1320 item 2 and sage-4125.
+4. L2 pins chief read collaborator and read token scopes; L7b pins chief nonlibrary/mixed refusal;
+   M6 substitutes SEAT_SCOPES for library minting, M7 drops chief library-only condition.
+5. Stop/report if grantableAgent or business validator still refuses chief after that condition.
+
+Root npm ci passed (128 packages), webui npm ci passed (2), both worktree-local with ignore-scripts,
+no-audit and no-fund. Start retry met a different queue lock (louie-290-in-review); no bypass.
+
+Prepared tests only (not executed): Docker F-A/F-B against both creative write and chief read users;
+F-B prints the actual permissions object. F-C/F-D use a private scratch repo and HTTP Git, logging
+only exit codes. A parent captures the fact child's entire TAP stdout/stderr and checks actual minted
+tokens before emitting diagnostics. New executor/business/install cases are drafted, including
+same-definition-hash level drift. Production files and fake API remain unchanged until Docker facts
+and expected RED evidence are recorded under CLEAR.
+
+Row286 T7/T9 fixture draft now raises chief/books, resolves the human yes and awaits the executor;
+asserts repositories read level and actual token read scopes. The mapping remote is the fake's
+acme/books; revoke/fire assertions are unchanged. This intentional replacement is expected RED on
+the pre-C2-21 executor, separately from regressions in unchanged tests. No execution yet.
+
+### Implementation sequence and acceptance
+
+After CLEAR: run only the C2-21 Docker facts first, under a 360-second outer timeout, and stop/report
+if F-A or F-B fails or skips. Then run new C2-21 tests and the intentionally replaced T7/T9 cases
+against unchanged production to establish expected RED. Save the evidence and report the first RED.
+No production fix until that evidence exists. Old tests retain assertions; the old chief refusal
+case still targets a non-library project and should remain green.
+
+Implementation boundaries: definition-based scopes only for library minting, collaborator PUT through
+admin token, exact admin/push/pull check publish-wide with library projects excluded from fork parents,
+conditional library hash input preserving legacy hashes, optional repositories event field preserving
+legacy event shape, scope-accurate block/notice. Business library publish remains fenced to creative
+or chief and existing identity/credential validation. Install adds only chief identity/publish for the
+library profile. Host creative refusals remain untouched.
+
+Builder verification after expected RED and fix: touched test files whole (600 seconds each), bus,
+business and cli whole (1800 seconds each); mutants M1-M7 with targeted test filters (180 seconds
+each), restoring source after each; Docker whole (600 seconds); all scripts/test-*.sh (1200 seconds
+each, timeout -k 10); token search across saved output. Tests do not run concurrently. Stop on an
+unexpected old-test RED or second RED and report to Sage before any remediation. The gate's cli
+skip-list rules and Sage's slot ownership remain authoritative. No live host change, push to refactor,
+merge or deployment is authorized. Own-branch push is authorized after applicable suites are green.
+
+Canonical start succeeded at 14:56Z: `ok steelbeak-287-start rev 3955 row 287 briefed→in-progress`.
+Prepared all independent pre-CLEAR work; no tests, production edits, commits or pushes. Reported
+ready in steelbeak-0004. The first execution is the Docker facts, never a fake or package suite.
+
+## CLEAR run (sage-4130, 2026-10-24 15:04Z)
+
+Worktree-local root npm ci passed (128 packages) and webui npm ci passed (2), ignore-scripts,
+no-audit, no-fund. New short TMPDIR `/mnt/storage/scratch/tmp/HvDvQ8`.
+First Docker facts invocation returned a vacuous green: inherited NODE_TEST_CONTEXT made Node skip
+the nested runner, minted 0. INVALID evidence, no fact pass claimed; reported steelbeak-0006.
+Corrected only the new harness child environment (delete NODE_TEST_CONTEXT) and added a requirement
+that four actual tokens were minted. Second facts invocation is running. Production unchanged.
+
+### Docker facts (gitea/gitea:1.27.1, corrected harness, rc 0)
+
+Evidence: evidence/docker-facts-r2.log, 1 pass, 0 fail, 0 skip; all four tokens minted and no minted
+value in complete captured TAP stdout/stderr. Container g287-* removed by t.after cleanup.
+- F-A PASS: exact admin scopes write:admin/write:repository/write:user; collaborator PUT on writer/books
+  (admin does not own it) returned 204 for creative write and chief read.
+- F-B PASS: seat /user/repos lists writer/books. Actual creative permissions
+  `{"admin":false,"push":true,"pull":true}`; chief permissions
+  `{"admin":false,"push":false,"pull":true}`. Chief token has read:repository/read:user scopes.
+- F-C NOT ESTABLISHED: Story/** protection rejected both seat push (rc 1) and owner push (rc 1).
+  The required owner control did not pass; do not claim a useful seat-only protected-file fence.
+- F-D ESTABLISHED: on protected branch normal seat supporting-file push rc 0, force-push rc 1.
+
+Proceeding to expected RED against untouched production, then sage-4125 implementation.
+
+### RED and correction record
+
+New-test first RED: evidence/red-new.log, 17 tests, 4 pass (refusal controls), 13 fail at missing
+behavior. T7/T9 replacement expected RED: evidence/red-replacement.log, 2 fail gitea-not-declared.
+After implementation, touched-r1.log: 122 tests, 115 pass, 7 fail, 0 skip, all failures new cases.
+Stopped/reported steelbeak-0008 before changes. Mos-1590 via sage-4138 approved two fixture fixes:
+seat-only /user/repos overrides (not admin prechecks) and real declared coder scopes for kind drift.
+Dedicated-admin refusal already covered by X-G2 "admin set refuses each failed check and writes
+nothing, then writes the slot once" at gitea-grant.test.mjs:276 (:293 asserts grant-admin-not-dedicated).
+
+Touched-r2.log: 123 tests, 122 pass, 1 fail, 0 skip. New L10's extra zero-network assertion was false:
+executor correctly performs four read-only admin checks before binding recheck. Stopped/reported
+steelbeak-0009. Sage-4139 approves exact GET admin checks, no /admin/users, /tokens or /collaborators,
+unchanged decision-mismatch, and absent grant file/record. Add M10, an early write ahead of recheck.
+The added no-declared-scopes case ran green before its mutant, an ordering error recorded honestly;
+its proof will be M8 removing the scopes check, followed by restored green. No prior RED-first proof
+is claimed for that added case. Add M9 dedication-check removal against existing X-G2.
+
+F-C follow-up (sage-4134): a protected Story/** rule refused owner and seat; the first row depending
+on owner pushes to a protected branch must resolve this. Record only; no 287 behavior changes.
+Install choice: books is the chief's read project when present; another library project's existing
+install support is retained by using the first library project. Default identity is business-id-chief
+on that project's origin, with a mosaic.invalid email; an explicit input identity is preserved.
+
+Touched-r3.log: 123 tests, 123 pass, 0 fail/skip after sage-4139. No unchanged assertion removed.
+Mutants M1-M11: all KILLED by assertion failures (rc 1, positive fail count, zero skips), no timeout,
+syntax or module-load kill. Every edited file restored byte-for-byte after each mutant; runner is
+mutants.py, evidence/mutants-run.log and evidence/M*.log hold the outcomes. M8's restored proof is
+the forthcoming full bus run; the added case's initial green remains recorded above.
+
+| Mutant | Change | Catch |
+| --- | --- | --- |
+| M1 | drop creative library-only guard | L7 creative nonlibrary/mixed |
+| M2 | force library level write | L2 chief read |
+| M3 | accept pull regardless of admin/push | L4 widened read |
+| M4 | fork instead of collaborator | L1 creative write |
+| M5 | remove library publish fence | business only creative/chief |
+| M6 | library mint SEAT_SCOPES | L2 chief declared read scopes |
+| M7 | drop chief library-only guard | L7b chief nonlibrary/mixed |
+| M8 | remove declared-scopes check | no-declared-scopes refusal |
+| M9 | remove admin dedication check | existing X-G2 |
+| M10 | move step2 user-create write before binding recheck | L10 exact GETs, no writes/file/record |
+| M11 | omit library kind/level from identity hash | L10 drift |
+
+### Full suites in progress
+
+Restored full bus: evidence/bus-suite.log, rc 0, 998/998 pass, 0 fail/skip. This includes restored M8
+proof and both Docker tests (fact child diagnostics also carry their own nested summary).
+Full business: evidence/business-suite.log, rc 0, 283/283 pass, 0 fail/skip.
+CLI is running sequentially after business at --test-concurrency=2. Every package invocation uses
+short TMPDIR and an outer timeout -k 10; no live provider opt-in is passed.
+Docker executor container prefix is now g287-executor-* (only the test's scratch name changed),
+so the separately required full Docker rerun and final sweep can target only this row's g287-*.
+
+Full CLI: evidence/cli-suite.log, rc 0, 990 tests, 989 pass, 0 fail, 1 skip, duration 851 seconds.
+The existing skip is packages/cli/tests/federation-acceptance.test.mjs, "FED R7 scratch two-instance
+acceptance", runner scripts/test-federation-acceptance.sh. That runner must pass in this same gate
+before the CLI skip is accepted (BRIEF-TEMPLATE mos-1583); no new skipped test was introduced.
+Dedicated full Docker and install-file reruns are now running; shell gates follow sequentially.
+
+Dedicated Docker whole: evidence/docker-whole.log, rc 0, 2/2 pass, 0 fail/skip; actual F-A/F-B
+permissions and F-C negative/F-D positive reproduced. Complete captured fact TAP: minted 4, hits 0.
+Dedicated install whole: evidence/install-whole.log, rc 0, 27/27 pass, 0 fail/skip.
+Docker shell wrapper adds an EXIT/INT/TERM cleanup for g287-* only, alongside each test's t.after.
+Every scripts/test-*.sh is now running sequentially at timeout -k 10 1200, NO_COLOR=1 and
+MOSAIC_TEST_CONCURRENCY=2, with MOSAIC_LIVE_PROVIDER and NODE_TEST_CONTEXT unset. Each script's own
+scratch-project cleanup remains active. Stop at the first nonzero result; shell-summary.txt records rc.
+
+Shell launcher error: direct timeout invocation of scripts/test-land-work.sh returned rc 126,
+Permission denied. File is tracked 100644; no assertion ran. Not a test RED. Reported steelbeak-0013;
+sage-4141 approved bash invocation for this and remaining scripts, matching the landing gate.
+No chmod or source change. Preserve initial shell-summary.txt and add shell-resume-summary.txt.
+
+## Builder verification complete (sage-4130)
+
+All twelve shell scripts passed (shell-summary.txt plus shell-resume-summary.txt), with the recorded
+rc126 launcher error followed by the approved bash run. Counts: auth 15, conductor 17, config 55,
+discord 82, extension-package 18, FED 1, foundation 44, land-work 86, push-check 38 checks plus its
+six killed internal mutants, queue 28 shell checks and 156 node passes, release 15, task 92; zero
+failed checks. Queue's canonical-only verify/render checks are intentionally skipped by its linked
+worktree runner. Task's live-provider cases remain off as required by row244 and this assignment.
+
+Summary: bus 998/998; business 283/283; CLI 989 passed, zero failed and the one existing FED skip
+covered by dedicated runner 1/1 with zero skips and cleanup receipt; Docker whole 2/2; install 27/27;
+all 12 shell scripts rc0; M1-M11 killed without timeout/syntax kills and byte-restored.
+Known fixture search: 3 values across 37 logs, hits0. Fact runner checked four actual minted values
+against complete TAP stdout/stderr, hits0. Fake cases check every issued value against stored data.
+Final cleanup: no owned test node/chromium processes and no g287 Docker containers; test-task and
+release network removal checks passed; FED reports no groups/ports/sockets. Other containers and
+preexisting harness/MCP services were untouched. git diff --check passes.
+
+Scope result: a creative library seat gets collaborator write; chief library read uses its declared
+read token scopes; creative/chief non-library or mixed raises refuse. Business publish remains fenced
+to creative/chief; legacy forks/event fields and host creative refusals retain coverage. T7/T9 now mint
+real chief grants before their unchanged revoke/fire assertions. F-C owner-protection follow-up is
+recorded above; F-D force-push observation is positive. No live Gitea or host change.
+
+Review handoff: Boyd first, Dewey landing review, Sage gate. Base 18334d713; branch steelbeak/row287.
+The review manifest freezes all changed code, tests, logs and these notes (excluding only the
+manifest itself). Commit/push are authorized by sage-4130; review/landing remain separate stages.
+
+## First-review doc-only follow-up (Boyd boyd-0034)
+
+Boyd approved the frozen product candidate c2338ed588b9d54e35ebf628f514cfd8d7321b52 and manifest
+3683b40a32b68163c3ab0430ee0d6a4603c97882bf62e982d33a40058507c2b6 (56 entries), static review,
+no tests or slot use. Dewey received the Q210 landing-review handoff.
+
+Correction to the earlier diff-check claims: plain `git diff --check` checked the then-current
+unstaged changes only. The complete base 18334d713 → frozen candidate diff-check returns rc2 because
+raw RED/mutant evidence logs retain Node assertion formatting with trailing whitespace. The complete
+product/test diff-check returns rc0. Raw evidence is preserved; do not claim the entire committed diff
+is whitespace-clean. This correction changes documentation only and does not rerun or weaken a test.
+
+Old-test numstats, verified with `git diff --numstat 18334d713 c2338ed58` (added/deleted lines):
+
+| Existing test file | Added | Deleted |
+| --- | ---: | ---: |
+| packages/bus/tests/fake-gitea-api.mjs | 13 | 3 |
+| packages/bus/tests/gitea-grant-docker.test.mjs | 127 | 2 |
+| packages/bus/tests/gitea-grant.test.mjs | 155 | 0 |
+| packages/bus/tests/library-credential.test.mjs | 24 | 35 |
+| packages/business/tests/business.test.mjs | 25 | 0 |
+| packages/cli/tests/case2-install.test.mjs | 13 | 0 |
+
+Canonical queue move steelbeak-287-r1-review succeeded at rev3963, round1 on #1792. Its automatic
+review request failed at rev3964 because MOSAIC_GITEA_CREDENTIAL_FILE is unset; this seat has no
+Gitea credential. No substitution or secret access attempted. Sage received the precise boundary
+in steelbeak-0016 and handles the normal lead request/comment route. The test slot was returned.
+
+Per lead decision137, this is a separate doc-only follow-up to the approved candidate. The frozen
+manifest and product/test bytes remain unchanged; the follow-up is not a new product review round.
@@ -0,0 +1,40 @@
+✖ C2-21 L7/L7b: research refuses non-library targets lib (56.821785ms)
+✖ C2-21 L7/L7b: research refuses non-library targets app,lib (37.82327ms)
+ℹ tests 2
+ℹ suites 0
+ℹ pass 0
+ℹ fail 2
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 174.924413
+
+✖ failing tests:
+
+test at packages/bus/tests/gitea-grant.test.mjs:1370:5
+✖ C2-21 L7/L7b: research refuses non-library targets lib (56.821785ms)
+  AssertionError [ERR_ASSERTION]: Missing expected rejection.
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/steelbeak-row287/packages/bus/tests/gitea-grant.test.mjs:1372:7)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: undefined,
+    operator: 'rejects',
+    diff: 'simple'
+  }
+
+test at packages/bus/tests/gitea-grant.test.mjs:1370:5
+✖ C2-21 L7/L7b: research refuses non-library targets app,lib (37.82327ms)
+  AssertionError [ERR_ASSERTION]: Missing expected rejection.
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/steelbeak-row287/packages/bus/tests/gitea-grant.test.mjs:1372:7)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: undefined,
+    operator: 'rejects',
+    diff: 'simple'
+  }
@@ -0,0 +1,35 @@
+✖ C2-21 L10: project kind or library level changing after raise refuses decision-mismatch (94.748852ms)
+ℹ tests 1
+ℹ suites 0
+ℹ pass 0
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 176.166886
+
+✖ failing tests:
+
+test at packages/bus/tests/gitea-grant.test.mjs:1416:1
+✖ C2-21 L10: project kind or library level changing after raise refuses decision-mismatch (94.748852ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly deep-equal:
+  + actual - expected
+  
+    [
+      'GET /api/v1/version',
+      'GET /api/v1/user',
+      'GET /api/v1/token',
+      'GET /api/v1/user/repos',
+  +   'POST /api/v1/admin/users'
+    ]
+  
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/steelbeak-row287/packages/bus/tests/gitea-grant.test.mjs:1434:12)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: [ 'GET /api/v1/version', 'GET /api/v1/user', 'GET /api/v1/token', 'GET /api/v1/user/repos', 'POST /api/v1/admin/users' ],
+    expected: [ 'GET /api/v1/version', 'GET /api/v1/user', 'GET /api/v1/token', 'GET /api/v1/user/repos' ],
+    operator: 'deepStrictEqual',
+    diff: 'simple'
+  }
@@ -0,0 +1,30 @@
+✖ C2-21 L10: project kind or library level changing after raise refuses decision-mismatch (114.899902ms)
+ℹ tests 1
+ℹ suites 0
+ℹ pass 0
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 190.404699
+
+✖ failing tests:
+
+test at packages/bus/tests/gitea-grant.test.mjs:1416:1
+✖ C2-21 L10: project kind or library level changing after raise refuses decision-mismatch (114.899902ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  + actual - expected
+  
+  + undefined
+  - 'decision-mismatch'
+  
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/steelbeak-row287/packages/bus/tests/gitea-grant.test.mjs:1433:12)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: undefined,
+    expected: 'decision-mismatch',
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
@@ -0,0 +1,29 @@
+✖ C2-21 L1/L2/L9: chief-of-staff gets read on her repository with declared scopes through raise and yes (56.777186ms)
+ℹ tests 1
+ℹ suites 0
+ℹ pass 0
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 137.201615
+
+✖ failing tests:
+
+test at packages/bus/tests/gitea-grant.test.mjs:1325:3
+✖ C2-21 L1/L2/L9: chief-of-staff gets read on her repository with declared scopes through raise and yes (56.777186ms)
+  AssertionError [ERR_ASSERTION]: The expression evaluated to a falsy value:
+  
+    assert.ok(block.includes(`Repository: ${f.gitea.url}/acme/app, level ${level}.`))
+  
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/steelbeak-row287/packages/bus/tests/gitea-grant.test.mjs:1338:12)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: false,
+    expected: true,
+    operator: '==',
+    diff: 'simple'
+  }
@@ -0,0 +1,30 @@
+✖ C2-21 L4: read widened to write refuses gitea-reach-wider and deletes the minted token (119.045451ms)
+ℹ tests 1
+ℹ suites 0
+ℹ pass 0
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 197.170231
+
+✖ failing tests:
+
+test at packages/bus/tests/gitea-grant.test.mjs:1386:3
+✖ C2-21 L4: read widened to write refuses gitea-reach-wider and deletes the minted token (119.045451ms)
+  AssertionError [ERR_ASSERTION]: {"action":"grant.applied","method":"gitea","grantDecision":"18acf1bb-f896-4b14-9c47-a5cff85a898d","agent":"chief","user":"demo-chief","userId":7,"tokenId":8,"forks":[],"repositories":[{"project":"app","repository":"https://127.0.0.1:33421/acme/app","level":"read"}]}
+  + actual - expected
+  
+  + undefined
+  - 'gitea-reach-wider'
+  
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/steelbeak-row287/packages/bus/tests/gitea-grant.test.mjs:1394:12)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: undefined,
+    expected: 'gitea-reach-wider',
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
@@ -0,0 +1,31 @@
+✖ C2-21 L1/L2/L9: research gets write on her repository with declared scopes through raise and yes (135.204477ms)
+ℹ tests 1
+ℹ suites 0
+ℹ pass 0
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 215.545162
+
+✖ failing tests:
+
+test at packages/bus/tests/gitea-grant.test.mjs:1325:3
+✖ C2-21 L1/L2/L9: research gets write on her repository with declared scopes through raise and yes (135.204477ms)
+  AssertionError [ERR_ASSERTION]: {"action":"grant.failed","method":"gitea","grantDecision":"0c2e03db-8b1f-4b25-b460-02d551551433","agent":"coder","code":"gitea-reach-wider","repository":"demo-coder/app","user":"demo-coder"}
+  + actual - expected
+  
+  + 'grant.failed'
+  - 'grant.applied'
+           ^
+  
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/steelbeak-row287/packages/bus/tests/gitea-grant.test.mjs:1348:12)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: 'grant.failed',
+    expected: 'grant.applied',
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
@@ -0,0 +1,25 @@
+✖ C2-21: only creative definitions and the chief with gitea may publish a library project (17.773466ms)
+ℹ tests 1
+ℹ suites 0
+ℹ pass 0
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 71.348342
+
+✖ failing tests:
+
+test at packages/business/tests/business.test.mjs:365:1
+✖ C2-21: only creative definitions and the chief with gitea may publish a library project (17.773466ms)
+  AssertionError [ERR_ASSERTION]: Missing expected exception.
+      at refuses (file:///home/jwoltje/.t3/worktrees/mosaic-stack/steelbeak-row287/packages/business/tests/business.test.mjs:53:10)
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/steelbeak-row287/packages/business/tests/business.test.mjs:380:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: undefined,
+    operator: 'throws',
+    diff: 'simple'
+  }
@@ -0,0 +1,33 @@
+✖ C2-21 L1/L2/L9: chief-of-staff gets read on her repository with declared scopes through raise and yes (117.793367ms)
+ℹ tests 1
+ℹ suites 0
+ℹ pass 0
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 201.446169
+
+✖ failing tests:
+
+test at packages/bus/tests/gitea-grant.test.mjs:1325:3
+✖ C2-21 L1/L2/L9: chief-of-staff gets read on her repository with declared scopes through raise and yes (117.793367ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly deep-equal:
+  + actual - expected
+  
+    [
+  -   'read:repository',
+      'read:user',
+  +   'write:repository'
+    ]
+  
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/steelbeak-row287/packages/bus/tests/gitea-grant.test.mjs:1353:12)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: [ 'read:user', 'write:repository' ],
+    expected: [ 'read:repository', 'read:user' ],
+    operator: 'deepStrictEqual',
+    diff: 'simple'
+  }
@@ -0,0 +1,40 @@
+✖ C2-21 L7/L7b: chief-of-staff refuses non-library targets lib (52.058911ms)
+✖ C2-21 L7/L7b: chief-of-staff refuses non-library targets app,lib (38.384854ms)
+ℹ tests 2
+ℹ suites 0
+ℹ pass 0
+ℹ fail 2
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 169.051619
+
+✖ failing tests:
+
+test at packages/bus/tests/gitea-grant.test.mjs:1370:5
+✖ C2-21 L7/L7b: chief-of-staff refuses non-library targets lib (52.058911ms)
+  AssertionError [ERR_ASSERTION]: Missing expected rejection.
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/steelbeak-row287/packages/bus/tests/gitea-grant.test.mjs:1372:7)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: undefined,
+    operator: 'rejects',
+    diff: 'simple'
+  }
+
+test at packages/bus/tests/gitea-grant.test.mjs:1370:5
+✖ C2-21 L7/L7b: chief-of-staff refuses non-library targets app,lib (38.384854ms)
+  AssertionError [ERR_ASSERTION]: Missing expected rejection.
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/steelbeak-row287/packages/bus/tests/gitea-grant.test.mjs:1372:7)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: undefined,
+    operator: 'rejects',
+    diff: 'simple'
+  }
@@ -0,0 +1,35 @@
+✖ C2-21: a library grant with no declared scopes refuses gitea-not-declared at raise (53.012865ms)
+ℹ tests 1
+ℹ suites 0
+ℹ pass 0
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 133.866141
+
+✖ failing tests:
+
+test at packages/bus/tests/gitea-grant.test.mjs:1455:1
+✖ C2-21: a library grant with no declared scopes refuses gitea-not-declared at raise (53.012865ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  + actual - expected
+  
+  + 'storage-refused'
+  - 'gitea-not-declared'
+  
+      at Object.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/steelbeak-row287/packages/bus/tests/gitea-grant.test.mjs:40:63)
+      at expectedException (node:assert:547:17)
+      at expectsError (node:assert:672:21)
+      at strict.rejects (node:assert:738:3)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/steelbeak-row287/packages/bus/tests/gitea-grant.test.mjs:1460:3)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 'storage-refused',
+    expected: 'gitea-not-declared',
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
@@ -0,0 +1,25 @@
+✖ X-G2: admin set refuses each failed check and writes nothing, then writes the slot once (146.452903ms)
+ℹ tests 1
+ℹ suites 0
+ℹ pass 0
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 226.323297
+
+✖ failing tests:
+
+test at packages/bus/tests/gitea-grant.test.mjs:275:1
+✖ X-G2: admin set refuses each failed check and writes nothing, then writes the slot once (146.452903ms)
+  AssertionError [ERR_ASSERTION]: Missing expected rejection.
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/steelbeak-row287/packages/bus/tests/gitea-grant.test.mjs:293:3)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: undefined,
+    operator: 'rejects',
+    diff: 'simple'
+  }
@@ -0,0 +1,291 @@
+✔ a grant's level is collaborator or viewer (1.2135ms)
+✔ any other level refuses with the key path named (0.705817ms)
+✔ covers tells a viewer grant from a collaborator grant (0.16459ms)
+✔ covers refuses a call with no level, so a viewer grant can't slip past a collaborator check (0.123619ms)
+✔ a viewer grant still needs its business, project, instance and expiry to cover (0.12482ms)
+✔ a valid document passes and comes back frozen (2.021061ms)
+✔ checkAccess does not freeze or alias the caller's document (0.237983ms)
+✔ LEVELS is the single allowed level set, collaborator and viewer (row 193a) (0.098348ms)
+✔ accessFilePath is access.json in the config directory (0.319126ms)
+✔ top level: object, unknown keys, accessVersion, revision, arrays (0.858299ms)
+✔ users: unknown keys and the id rule (0.249483ms)
+✔ users: human, tester and any business's human are refused (0.24794ms)
+✔ users: home is a given peer or local (0.203275ms)
+✔ users: subjects, provider, sub, uniqueness and owner subjects (0.531512ms)
+✔ grants: unknown keys, id, user and business (0.431077ms)
+✔ grants: projects is ["*"] or distinct lowercase UUIDs (0.609265ms)
+✔ grants: instances is ["*"] or distinct declared instances of that business (0.320727ms)
+✔ grants: any level other than collaborator or viewer refuses, naming grants[i].level (0.367521ms)
+✔ grants: expires is optional ISO time, and a past expiry is not refused (0.747486ms)
+✔ the context is required and checked (0.336112ms)
+✔ loadAccess reads a valid file and checks it (0.501525ms)
+✔ loadAccess refuses a missing file, a symlink and a directory with exit 4 (0.324663ms)
+✔ loadAccess refuses another owner and group or other write (0.341248ms)
+✔ loadAccess refuses bad JSON and a bad document with exit 2 (0.328302ms)
+✔ covers: * and listed ids match (0.194537ms)
+✔ covers: an unlisted project, instance or business doesn't match (0.116729ms)
+✔ covers: an expired grant doesn't match, at and after the instant (0.118575ms)
+✔ covers: level is the least level asked for (row 193a) (0.108766ms)
+✔ covers: a missing or unknown level throws (row 193a, N1) (0.235393ms)
+✔ covers: a grant with an unknown level covers nothing (row 193a) (0.095664ms)
+✔ covers: now must be a valid Date (0.111546ms)
+✔ today's files load unchanged: identity, publish and remote are optional (4.289784ms)
+✔ a granted agent loads with its identity, grant and the project's upstream (1.918421ms)
+✔ N10: publish needs identity and a gitea definition, and the error names the grant (2.193949ms)
+✔ row 285: a chief with its gitea reference, identity and publish loads (2.646658ms)
+✔ publish names declared projects that have a remote, each once (2.695792ms)
+✔ identity fields are checked (2.941449ms)
+✔ D9c: the upstream must be its own normalized form, exactly /OWNER/REPO (7.397104ms)
+✔ D9c: one .git is stripped, and the fork is built from the stripped name (0.736416ms)
+✔ D9c: gitea.url names the instance only (3.765187ms)
+✔ the upstream's host and port must be the agent's Gitea's (1.274431ms)
+✔ remote-not-fork: an upstream the agent's own user owns, compared without case (1.27873ms)
+✔ store references: own path only (design D1, D3a) (0.253823ms)
+✔ the role file loads and resolves through loadBusiness (5.248984ms)
+✔ the shipped file is exactly the approved list (0.568801ms)
+✔ the assistant's authority is message.send and record.write within role (1.643851ms)
+✔ the assistant talks to the user and the chief of staff only, and no other shipped role is limited (0.468874ms)
+✔ a business grant through limits does not widen the role (2.103126ms)
+✔ a launch block whose by is the assistant is refused (1.227137ms)
+✔ the instance takes no credential references and no tracker (1.712585ms)
+✔ an arbiter whose role definition declares messaging lists is refused, for each kind (3.414519ms)
+✔ an arbiter without messaging lists is accepted beside the limited assistant (1.570128ms)
+✔ the contract passes work to the chief of staff and directs no one (0.485429ms)
+✔ REQ-HARN-2: the assistant, companion and research hold the web grant, and no other role file does (0.988738ms)
+✔ C2-04: library mappings load without roots, remain frozen, and retain mapping refusals (11.206347ms)
+✔ C2-04: an otherwise valid publish grant cannot name a library repo (1.732724ms)
+✔ config directory and file path follow MOSAIC_CONFIG (0.227073ms)
+✔ the fixture business validates and comes back frozen (0.994283ms)
+✔ two instances may share a definition (1.013991ms)
+✔ top-level refusals (2.939224ms)
+✔ arbiters and projects (4.586351ms)
+✔ role instances (2.30027ms)
+✔ Vikunja bots (5.245177ms)
+✔ a role without Vikunja takes no tracker block (2.857595ms)
+✔ credential references match the definition's services (2.272475ms)
+✔ launch (8.361716ms)
+✔ REQ-THREAD-2 REQ-LAUNCH-1 launch.threadIdleSeconds: absent is the default, a positive integer is used, anything else refuses (4.793795ms)
+✔ loadBusiness: file checks (2.040605ms)
+✔ loadBusiness: not a regular file (41.081919ms)
+✔ loading writes nothing (1.077813ms)
+✔ names that are Object.prototype properties don't count as declared (3.161448ms)
+✔ the shipped example refuses as written and validates once filled in (0.811309ms)
+✔ persona vars: agent layer, creative definition only, both or neither (8.817701ms)
+✔ row 285: a chief or creative instance without credentials.gitea refuses at load (6.447728ms)
+✔ row 285: a creative instance with identity and publish loads (0.774254ms)
+✔ row 194 keep, noHire and retired validate, and a file without them loads as before (1.57886ms)
+✔ row 194 each bad keep, noHire or retired entry refuses (5.865272ms)
+✔ C2-21: only creative definitions and the chief with gitea may publish a library project (10.140247ms)
+✔ row 323: committed Case 1 document loads unchanged through the business loader (4.882073ms)
+✔ row 323: real business validate accepts the Case 1 fixture without tracker credentials (65.86572ms)
+✔ row 323: real factory install accepts the document's scratch input and writes it unchanged (161.468205ms)
+✔ row 323: the Case 1 business boots without a tracker or @sync credential (50.794373ms)
+✔ row 323: factory install refuses bus.tester false before writing (34.17225ms)
+✔ row 323: literal library key refuses through final business validation (178.477589ms)
+✔ row 323: a library project refuses through the factory profile plan (33.530043ms)
+✔ row 325: the Case 1 project's sole key matches the repository project id (4.587873ms)
+✔ row 325: real business validate reports the copied repository project valid (66.272939ms)
+✔ row 325: the old mosaic-stack project key refuses against those same project bytes (66.102296ms)
+✔ row 285 amendment 1: no library loads with empty chief credentials (3.385712ms)
+✔ row 285 amendment 1: a library without chief gitea refuses by name (2.200618ms)
+✔ row 285 amendment 1: no library with chief gitea refuses the extra reference (0.708673ms)
+✔ the role file loads and resolves through loadBusiness (8.538323ms)
+✔ the shipped file is exactly the approved list (0.339503ms)
+✔ the resolved record matches the approved list, so a widened file fails (2.406238ms)
+✔ the chief of staff holds role.launch, message.send, role.end, organization.change, record.write, instance.name, role.hire and role.fire; every other action is gated (2.024787ms)
+✔ the pm does not hold role.launch (2.017621ms)
+✔ a business grant of a gated action through limits does not widen the role (1.216462ms)
+✔ a limit that drops role.launch leaves the chief of staff with no launch block (1.161866ms)
+✔ a launch block whose by is the pm instance is refused (1.3663ms)
+✔ the contract names no duty to talk to the human and the pm contract no launch (0.368325ms)
+✔ the instance takes no credential references and no tracker (1.990093ms)
+✔ C2-04: business validate and resolve skip a library before code projects and credential checks (200.876248ms)
+✔ usage errors exit 4 (277.707279ms)
+✔ validate: a good business exits 0 and prints instance digests (70.09797ms)
+✔ validate: project files (308.414394ms)
+✔ validate: missing files and a broken system config (237.80596ms)
+✔ validate: credential reference problems exit 2 and name each one (62.694272ms)
+✔ validate: a not-issued store agent dated today passes, and an issued one with a past expiry fails (137.769151ms)
+✔ validate: a token file inside the repository is refused (67.194357ms)
+✔ validate: role definitions come from MOSAIC_ROLES_DIR (189.791235ms)
+✔ resolve: prints one instance's record (258.920062ms)
+✔ resolve: refusals (383.486673ms)
+✔ parse: exactly one of file or env, plus the service's date (1.863836ms)
+✔ check: a good file has no problems (0.63731ms)
+✔ check never opens the file: a write-only token passes (0.259065ms)
+✔ check: file problems (0.654057ms)
+✔ check: token files can't live in the repository or dataRoot, even through a linked directory (0.666643ms)
+✔ check: dates and environment references (0.302686ms)
+✔ each definition loads, with a contract file, and is exactly the approved list (2.422404ms)
+✔ an organization file that declares them passes, and each resolves to least privilege (4.82324ms)
+✔ the chief of staff launches each one; no other role does (2.43161ms)
+✔ a C-suite role can't be made the launcher: launch.by must hold role.launch (1.392659ms)
+✔ limits can narrow a C-suite role but never widen it (1.344546ms)
+✔ any unknown key, tool, action or version in a role file is refused (0.395675ms)
+✔ row 298: checkGrantScope takes the D2 shape and refuses anything else (1.345091ms)
+✔ row 298: a missing scope is empty and a bad one falls back to empty, which covers nothing (0.239287ms)
+✔ row 298: a Gitea grant is in scope only when its agent and every project are listed (0.120581ms)
+✔ row 298 (sage-3594 Q2): host commands match whole argv tokens, and enrollment is never in scope (0.172913ms)
+✔ row 298: a bad grantScope in the file still loads, and the read shows the fallback (9.548945ms)
+✔ row 298: the writer checks the scope, logs the change and removes the key for {} (29.2548ms)
+✔ row 298 (sage-3594 Q1): the general writers can't write grantScope (6.509756ms)
+✔ REQ-WAIT-1: GATED_ONLY is exactly the hard waits; the new actions are in the vocabulary (0.953961ms)
+✔ REQ-ROLE-2: END_PROTECTED includes the assistant's thread definition (0.140081ms)
+✔ REQ-COS-3: role.hire and role.fire are routed, not hard waits (0.086622ms)
+✔ REQ-WAIT-3: library.write is routed under REQ-LIB-6 (1.16), not a hard wait (0.079125ms)
+✔ REQ-WAIT-3: every action is routed or a hard wait, never both, and the routed list names only actions (0.142718ms)
+✔ REQ-WAIT-3: instance.name is routed under REQ-MSG-2 (1.5), not a hard wait (row 141, sage-0589) (0.070496ms)
+✔ REQ-WAIT-2: a role listing a hard wait at either class is refused; the actions that left can be granted (2.750593ms)
+✔ S1: the business file refuses hosts at the top level and in a role, and host.<id> references (12.095424ms)
+✔ T1: address, user and host key checks, which the enrollment raise uses (4.457254ms)
+✔ T26: no wildcard and no shell, runner or interpreter as a prefix (1.428718ms)
+✔ D6: argv shape and the literal prefix match (0.265339ms)
+✔ row 285 P: creative equal-service changes preserve every existing credential reference (23.443808ms)
+✔ row 285 P: creative declared-service mismatch refuses even when host has no reference (4.777219ms)
+✔ row 285 P: an equal-service non-creative target keeps the base credential refusal (4.051484ms)
+✔ row 285 P: business validation precedes the creative credential fence (4.080403ms)
+✔ row 285 P: listing derives creative from authority and accepts only existing gitea minting (2.940761ms)
+✔ C2-04: instance settings skip a library while checking a later code project (24.897209ms)
+✔ row 165 read lists each instance and the definitions add accepts (2.526881ms)
+✔ row 165 add: two instances join, validate exits 0, the log names the human, and the writer asks for no restart (row 194, D3) (82.478108ms)
+✔ row 165 change: definition, vars and launch membership log before and after; none asks for a restart, the bus reloads (row 194, D3) (100.666633ms)
+✔ row 165 refuses each validation failure and leaves the file's bytes alone (35.076218ms)
+✔ T19 add of a credentialed definition writes store references dated today, names its bot, and validate exits 0 (85.693778ms)
+✔ T19 add of a definition that declares host writes references for its token services only (12.728252ms)
+✔ row 165 refuses a definition change to or from one that declares credentials (5.117931ms)
+✔ row 165 a vars or launch change on an instance with its binding succeeds and keeps the binding (75.996979ms)
+✔ row 165 refuses an END_PROTECTED definition and every change to a protected instance (8.113739ms)
+✔ row 165 refuses while a project file doesn't resolve, as validate would (16.000833ms)
+✔ row 165 refuses a stale revision and leaves the file's bytes alone (11.161353ms)
+✔ row 65 an instance write refuses harness-off, thinking-unsupported, an unknown model and a partial fallback (30.579803ms)
+✔ row 213 a creative instance is the human's: add, vars and definition changes, persona digest only (85.63908ms)
+✔ row 256 T1-T3, T5 the human deletes a creative instance, no other actor does, and the assistant stays (99.46135ms)
+✔ row 256 T4 the human's delete of the only listed instance, a creative one, is the last-listed refusal (3.143347ms)
+✔ REQ-LIMIT-1 schema: every scope unset or zero, adjustable above four, bad values and unknown models refuse (11.58859ms)
+✔ REQ-LIMIT-1 counts each exact scope at/over limit, unlimited and old tuple after model reassignment (0.653762ms)
+✔ REQ-ROLE-3 writer: atomic validated revision, immutable previous bytes and authenticated actor/old/new receipt (17.075687ms)
+✔ REQ-ROLE-3 writer: pre-rename fault leaves old file, post-rename recovery records commit, conflicting recovery refuses (13.840934ms)
+✔ REQ-LIMIT-1 / decision145 migration prints only, preserves values, rejects ambiguity, and is idempotent (3.72795ms)
+✔ REQ-LIMIT-1 shared settings validates the complete proposed selection and logs exact actor (19.857864ms)
+✔ REQ-LIMIT-1 provider is table data: another provider routes separately and aliases share exact counts (1.748236ms)
+✔ REQ-ROLE-3 refuses live writer locks, symlink targets and uncertain recovery without changing bytes (9.132518ms)
+✔ Q169 assistants: vars and definition change and log the actor; tracker null leaves no tracker (16.727332ms)
+✔ Q169 assistants: refuses other instances, other definitions, holder and credentials, empty entries, a tracker the definition has no credential for and a stale revision (18.030778ms)
+✔ Q169 assistants: a definition with a vikunja credential takes a tracker change and refuses its removal or a used bot (11.719638ms)
+✔ row 65 routes lists every instance with harness, model, thinking and fallback, the switched-on harnesses, the model keys and each harness's levels (2.212163ms)
+✔ row 65 setRoutes saves a harness, model, thinking and whole fallback, reads each back from the file, logs the actor, and a null fallback clears all three (14.340575ms)
+✔ row 65 setRoutes refuses a partial fallback, a switched-off harness, a level the harness doesn't apply, an unloaded module, an unknown model or instance, a malformed route, no change and a stale revision, with the file unchanged (19.4324ms)
+✔ row 65 a file with harness vars and no plugins.harness loads and its views read; a model change still saves, and a route change refuses harness-off (9.559348ms)
+✔ B7 kept instance: the models keys it names and the instances key are the human's (25.258332ms)
+✔ B7 kept instance: its route is the human's (8.773053ms)
+✔ M10 creative instance: models keys it names, the instances key and its route are the human's (31.644759ms)
+✔ C2-04 M9: changed playground and hybrid entries leave business and changes.jsonl byte-identical (20.984808ms)
+✔ C2-04 M9: code projects, additions, deletions and array changes are protected too (15.600225ms)
+✔ C2-04 M9: canonical key order is allowed and a non-project setter still records its change (12.997939ms)
+✔ C2-04 M9: a serialization hook cannot change projects after the canonical comparison (9.845749ms)
+✔ M7/M8: library seats come from library businesses, creative seats from their creative definitions (6.566752ms)
+✔ M8: a business with no library project puts no seat in either set (1.612265ms)
+✔ M7/M8: a business file that is not valid JSON throws; no empty set (1.658908ms)
+✔ M7/M8: an absent businesses directory gives empty sets (0.32243ms)
+✔ M7/M8: a businesses path that is not a directory throws; no empty set (0.725625ms)
+✔ M7/M8: a businesses symlink to a missing target throws; no empty set (0.382107ms)
+✔ M7/M8: a config directory under a regular file throws (lstat fails with ENOTDIR); no empty set (0.297168ms)
+✔ M7/M8: a business file that can't be read throws; no empty set (0.755072ms)
+✔ T6 delete refuses in the design's order and leaves the file's bytes alone (28.611933ms)
+✔ T6 delete refuses the last listed instance (3.226085ms)
+✔ T6 a clean delete removes the entry and its own references, adds retired, and the name can't come back (83.48393ms)
+✔ T7 veto: keep, unkeep, nohire and hire each write once, a repeat is no change, and the log names the human (112.086534ms)
+✔ T7 veto refuses an unknown or END_PROTECTED keep, a bad request, a stale revision and a business without launch (17.584597ms)
+✔ D2.2 hire adds and lists a new instance, logs the chief's context, and sets only model and limits (78.115614ms)
+✔ D2.2 hire refuses noHire, a kept name and a listed name, and re-lists a fired one only as it was (22.285503ms)
+✔ D2.2 fire delists and keeps the entry, a repeat is done with no write, and each refusal holds (79.084361ms)
+✔ row 256 checkDelete passes the human's creative delete and refuses another actor's; fire still refuses (5.186556ms)
+✔ row 239 T1 a fire on a revision that goes stale before the writer's lock refuses there and revokes nothing (4.342942ms)
+✔ row 239 T2 a write after the revoke refused before publication carries revoked, and the file keeps the edit (7.275516ms)
+✔ row 239 T3 any error after the revoke carries revoked, for a fire and a delete; a revoke that throws carries nothing (24.024395ms)
+✔ Q247: omitting tracker loads as null and preserves independent role bots (4.88928ms)
+✔ Q247: real business validate passes without a sync credential reference or file (67.498247ms)
+✔ Q247: present tracker retains its values and validation without mutating the input (2.36343ms)
+✔ Q247: present null, undefined and malformed trackers still refuse (3.735298ms)
+✔ Q247: absent business tracker does not waive a role's Vikunja bot requirement (0.785091ms)
+✔ REQ-PLUG-1 schema: plugins is optional, names known kinds and checked module names (10.412775ms)
+✔ REQ-PLUG-1 REQ-ROLE-3 the setter writes plugins through the organization writer and logs old and new names (21.608828ms)
+✔ vikunja:19/309 a patch changes only the kinds it names; null removes one kind, explicitly and in the trail (22.123619ms)
+✔ vikunja:19/309 an unknown kind (set or removed), a bad module, an empty patch and null on the wrong shape are refused, nothing written (1.61091ms)
+✔ REQ-PLUG-1 REQ-ROLE-3 the writer checks the bytes it writes: a Date in plugins is refused there too (3.81691ms)
+✔ REQ-PLUG-1 REQ-ROLE-3 a refused setter write throws a code, changes nothing and logs nothing (1.453096ms)
+✔ vikunja:19/305 with an exists check, the setter refuses a module no tree file answers to, before anything is written (6.975244ms)
+✔ optional project repo is preserved and must be a normalized absolute path (8.248464ms)
+✔ loaded business project repo cannot be nested in any declared code checkout (1.924299ms)
+✔ path and load (1.814342ms)
+✔ refusals (0.952563ms)
+✔ record.write is within-role for the eleven approved v2 agents, never gated-only (2.278902ms)
+✔ C2-06 M11 human replacement works; omitted settings return to defaults (27.784744ms)
+✔ C2-06 M11 agents and tester cannot change settings, including by changing human (24.473091ms)
+✔ C2-06 M11 serialization cannot replace settings after the first fence (8.808556ms)
+✔ C2-06 M11 an unrelated actor cannot appoint itself human and change reply limits (7.973319ms)
+✔ C2-06 invalid setter values preserve the business and changes.jsonl (8.939774ms)
+✔ C2-06 validator accepts hand-edited settings; raw reader fails closed on invalid files (10.916335ms)
+✔ C2-04: a library first in projects does not hide a later project layer (6.843821ms)
+✔ systemVars flattens the validated config (0.836289ms)
+✔ precedence: system, business, project, project role, agent (1.614161ms)
+✔ limits narrow the definition and never widen it (2.069759ms)
+✔ role.launch stays within-role only for the instance the launch block names (4.437162ms)
+✔ limits.authority without role.launch leaves the launcher with no launch block (1.556099ms)
+✔ limits.authority narrows cross-role actions too (0.872466ms)
+✔ classify (0.882709ms)
+✔ the record carries what the broker and launcher need (0.73785ms)
+✔ digest: key order doesn't matter, any value change does (5.81602ms)
+✔ refusals (1.779158ms)
+✔ the four shipped version 2 roles load (2.378087ms)
+✔ shipped role scopes match addendum B section 2 and the SR runbook (0.811462ms)
+✔ shipped authority follows the note's table (4.746427ms)
+✔ every role file in roles/ loads through the validator, and a v2 contract exists (1.129712ms)
+✔ version 1 files keep loading with no authority (0.820814ms)
+✔ the conductor policy isn't a role (0.145369ms)
+✔ a missing role file is exit 4, a symbolic link too (0.319514ms)
+✔ version 2 refusals (0.929286ms)
+✔ authority: closed vocabulary, no gated-only action, no overlap (1.548788ms)
+✔ messaging: optional, role definitions and human, never the tester (1.049825ms)
+✔ row 64 skills: optional, distinct skill directory names, none on version 1 (1.019457ms)
+✔ credentials: Gitea scopes (0.605626ms)
+✔ credentials: Vikunja scopes are a group-to-verbs map from the grantable list (0.6735ms)
+✔ credentials: services (0.330683ms)
+✔ contract: a non-empty regular Markdown file beside the role file (0.469895ms)
+✔ the six creative roles load: read tools, message.send and library.write, gitea, messaging with the human only (0.353918ms)
+✔ M1: a creative role file wider than read and answer is refused (2.717807ms)
+✔ hireable: HIRE_ALLOWED is exactly the six plain work actions, and every one is routed (0.08884ms)
+✔ hireable: a list naming a definition that holds any refused action refuses at load, one case per action (6.677373ms)
+✔ hireable: a mixed definition refuses, a clean list loads, and the named file's own hireable isn't read (0.544957ms)
+✔ hireable: a missing, version 1, duplicate or badly named entry refuses, and the key is optional (1.724693ms)
+✔ the pm and the cto check a saved spec against settled decisions and work in flight, and answer with a BLOCK or an accept (4.171158ms)
+✔ the chief of staff relays a BLOCK or an accept to the assistant as a reply to the message that carried it (0.402275ms)
+✔ the assistant summarizes a spec review in its own words and doesn't repeat the chief of staff's text (0.368389ms)
+✔ REQ-LIMIT-3 schema: each subject kind, limit 0 and no ceiling are accepted; bad limits, times, keys and undeclared instances refuse (12.866323ms)
+✔ REQ-LIMIT-3 the writer stamps since: a new limit gets now, a changed one keeps its time, a different time is refused (38.335671ms)
+✔ REQ-LIMIT-3 only tokens.* at schema depth holds token limits: agent limits named `limit` save as sent, and a token limit named `limit` is stamped and reset (39.769908ms)
+✔ REQ-LIMIT-3 a reset moves since to now, is logged with its actor, and refuses a path that is not a limit (21.162763ms)
+✔ REQ-LIMIT-2 schema: launch.account names a credential set; a daily quota needs a reset and an IANA zone and names the account (22.640957ms)
+✔ REQ-LIMIT-2 the writer stamps a daily quota's since, keeps its reset and zone, and a reset moves since (22.016802ms)
+✔ every key names known layers and a merge rule (0.630788ms)
+✔ unknown keys and wrong layers refuse (0.532995ms)
+✔ types (1.62428ms)
+✔ merge: defaults, then the most specific layer wins (0.217143ms)
+✔ merge: limits only narrow, and provenance lists each source (0.286677ms)
+✔ merge doesn't change its inputs (0.115663ms)
+✔ web.searxng takes https anywhere and http on loopback, so Jason's 127.0.0.1:8888 passes (0.148911ms)
+✔ both definitions load, with a contract file, and are exactly the approved lists (1.885538ms)
+✔ security-reviewer has no write or shell tool and classifies only the verdict as its own (5.091977ms)
+✔ merge-gate's only grant is git.merge.protected cross-role, and it has no write tool (1.67274ms)
+✔ neither role can be an arbiter: its messaging lists refuse the business file (row 133) (3.925963ms)
+✔ every role contract carries the proactive line in its Authority section (0.562759ms)
+✔ pm and chief-of-staff say where a raise goes under REQ-DEC-2 (0.479526ms)
+✔ the merge landing takes two runs: merge-gate, cto and chief-of-staff each say their part (0.372532ms)
+ℹ tests 283
+ℹ suites 0
+ℹ pass 283
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 3476.671216
@@ -0,0 +1,7 @@
+owned test node/chromium processes found: 0
+owned test processes remaining: 0
+owned g287 Docker containers removed in final sweep: 0
+owned g287 Docker containers remaining: 0
+FED runner: no child groups, ports or sockets remain.
+Task/release scripts: owned compose network removal checks pass.
+Preexisting Codex/MCP runtime services excluded from the test-process sweep; other containers untouched.
@@ -0,0 +1,27 @@
+✔ C2-21 F-A/F-B: admin collaborator grant on another owner and seat permission reach; F-C/F-D protection observations (11763.04751ms)
+ℹ ✔ C2-21 F-A/F-B: admin collaborator grant on another owner and seat permission reach; F-C/F-D protection observations (11616.122395ms)
+ℹ F-A creative write: PUT status 204
+ℹ F-B creative: permissions {"admin":false,"push":true,"pull":true}
+ℹ F-A chief read: PUT status 204
+ℹ F-B chief: permissions {"admin":false,"push":false,"pull":true}
+ℹ F-C protected Story/**: seat rc 1, owner rc 1; established false
+ℹ F-D protected branch: normal rc 0, force rc 1; established true
+ℹ minted 4, hits 0
+ℹ tests 1
+ℹ suites 0
+ℹ pass 1
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 11727.640162
+
+ℹ minted 4, hits 0 (complete TAP stdout/stderr)
+ℹ tests 1
+ℹ suites 0
+ℹ pass 1
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 11858.472832
@@ -0,0 +1,13 @@
+✔ C2-21 F-A/F-B: admin collaborator grant on another owner and seat permission reach; F-C/F-D protection observations (40.800678ms)
+ℹ (node:3897534) Warning: node:test run() is being called recursively within a test file. skipping running files.
+(Use `node --trace-warnings ...` to show where the warning was created)
+
+ℹ minted 0, hits 0 (complete TAP stdout/stderr)
+ℹ tests 1
+ℹ suites 0
+ℹ pass 1
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 148.828093
@@ -0,0 +1,28 @@
+✔ C2-21 F-A/F-B: admin collaborator grant on another owner and seat permission reach; F-C/F-D protection observations (12203.540198ms)
+ℹ ✔ C2-21 F-A/F-B: admin collaborator grant on another owner and seat permission reach; F-C/F-D protection observations (12086.277368ms)
+ℹ F-A creative write: PUT status 204
+ℹ F-B creative: permissions {"admin":false,"push":true,"pull":true}
+ℹ F-A chief read: PUT status 204
+ℹ F-B chief: permissions {"admin":false,"push":false,"pull":true}
+ℹ F-C protected Story/**: seat rc 1, owner rc 1; established false
+ℹ F-D protected branch: normal rc 0, force rc 1; established true
+ℹ minted 4, hits 0
+ℹ tests 1
+ℹ suites 0
+ℹ pass 1
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 12174.33915
+
+ℹ minted 4, hits 0 (complete TAP stdout/stderr)
+✔ X-G3: on scratch 1.27.1, a grant makes the user, mints, forks, checks reach, writes the file, and revoke deletes the token (12131.714969ms)
+ℹ tests 2
+ℹ suites 0
+ℹ pass 2
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 24419.085201
@@ -0,0 +1,35 @@
+✔ the library install writes the business file, personas and slot dir, makes the copy and starts nothing (235.765785ms)
+✔ a library re-run passes and leaves every file as it was (392.367807ms)
+✔ a re-run refuses business-file-differs and leaves the file unchanged (273.242685ms)
+✔ a re-run refuses persona-differs when an installed persona isn't the staged one, and writes nothing (272.374516ms)
+✔ the factory install writes no library mapping, persona or slot dir (177.367057ms)
+✔ the factory install refuses a library project and bus.tester off, before anything is written (73.809786ms)
+✔ the library install refuses bus.tester on and a persona var in the input (75.800921ms)
+✔ the install refuses root, a business id mismatch, another --home and a config dir with group bits (54.413413ms)
+✔ the library install needs --personas (5.198673ms)
+✔ a validate refusal removes the business file this run wrote (239.945383ms)
+✔ N4: a validate refusal on a re-run leaves the matching business file in place, byte for byte (386.30537ms)
+✔ a clean library host passes the precheck with no mirror yet (405.96297ms)
+✔ the library precheck refuses a persona file at 0644 (394.702581ms)
+✔ the library precheck refuses a persona whose digest isn't persona.sha256 (390.230566ms)
+✔ the library precheck refuses a persona dir with group bits (384.651188ms)
+✔ the library precheck refuses a business file at 0644 (394.310416ms)
+✔ the library precheck refuses a changes.jsonl at 0644 (558.803755ms)
+✔ the library precheck refuses a Discord binding (390.812738ms)
+✔ --library-status refuses library-mirror-missing before the bus has made the mirror (303.064191ms)
+✔ --library-status refuses library-never-synced on a fresh mirror (323.253782ms)
+✔ --library-status names a recorded lastError before the null lastFetch it leaves (N3) (338.938239ms)
+✔ --library-status prints each R-problem's path as an escaped JSON string, then the count, and passes (383.891631ms)
+✔ --library-status takes no --profile (5.425522ms)
+✔ Vikunja 614: install preserves the explicit notifier decision bytes and mode and creates none when absent (469.515908ms)
+✔ row 322 F8: library personas install from the copy with no clone node_modules (139.58888ms)
+✔ row 322 F9: importer refusal keeps the error line rather than the Node banner (88.736058ms)
+✔ C2-21: library install supplies chief identity and books publish for its real read grant (234.472998ms)
+ℹ tests 27
+ℹ suites 0
+ℹ pass 27
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 7494.342107
Author	SHA1	Message	Date
jason.woltje	a051467342	row224: record static rebase and pending gate (unrun)	2026-10-24 12:08:56 -05:00
jason.woltje	e138b2c55f	row224: pace failed inline sync attempts (unrun)	2026-10-24 12:08:24 -05:00
jason.woltje	327073400f	row224: draft broker library lookups and typed tools (unrun)	2026-10-24 12:08:24 -05:00
jason.woltje	487500a16f	docs: C2-10c brief amendment 1, room.read carries the stored check and last as thread.messages does, through one shared helper; broker.mjs joins row 266's files for that change only (sage-4156, from fethry-0027); doc only	2026-10-24 11:22:36 -05:00
jason.woltje	962046aaab	docs: rows 225 and 287 landing records and session line (doc only)	2026-10-24 11:15:02 -05:00
Steelbeak	0e935776ee	Row 287: record first-review documentation corrections	2026-10-24 10:55:31 -05:00
Steelbeak	dc8f552819	Row 287: grant library collaborators with declared scopes	2026-10-24 10:55:31 -05:00
jason.woltje	9b63454660	row225: record rebased gate, review delta and verified mutation retries	2026-10-24 10:12:34 -05:00
jason.woltje	360f9a331b	row225: prevent checked notice forgery and report definite revert refusals	2026-10-24 10:12:34 -05:00
jason.woltje	2a345b62ef	Untested: row 225 B1 and N1 regression coverage before T3	2026-10-24 10:12:34 -05:00
jason.woltje	6325295cec	Untested full gate: row 225 manifest and 14 verified mutation kills	2026-10-24 10:12:34 -05:00
jason.woltje	e1e4750815	Untested full gate: row 225 mutation check asserts after repaint completion	2026-10-24 10:12:33 -05:00
jason.woltje	35fbdcad01	Untested full gate: row 225 fixes verified by targeted RED-GREEN and library suite	2026-10-24 10:12:33 -05:00
jason.woltje	8952720e04	Untested: record mos-1510 preservation condition and row 225 test slot	2026-10-24 10:12:33 -05:00
jason.woltje	df236ab6eb	Untested: row 225 isolated mutation kit and whitespace-clean approval evidence	2026-10-24 10:12:33 -05:00
jason.woltje	a9b9c84566	Untested: fethry row 225 handoff recovery and contract regression coverage	2026-10-24 10:12:33 -05:00
jason.woltje	de17e8bc30	morgana: row 225 handoff to fethry (mos-1501), UNTESTED: renderReply, chat replies/cites/notice/Revert/status line, library status and revert routes, channel-proof re-pin of webui bus.mjs	2026-10-24 10:12:24 -05:00
jason.woltje	5e9a49e3f4	morgana: row 225 BUILD.md: check-result shape agreed with 217 (launchpad-0118), library.revert contract A2 for row 288, changed-since via file and last (sage-3596)	2026-10-24 10:12:24 -05:00
jason.woltje	c638019596	docs: row 290 landing record and session line (doc only)	2026-10-24 09:56:03 -05:00
jason.woltje	3d7dff3453	docs: clarify setup sheet notices and agent identity	2026-10-24 09:54:29 -05:00
jason.woltje	f8461e9ab5	docs: keep chat guidance within Q226 brief	2026-10-24 09:54:29 -05:00
jason.woltje	b6795f9a1c	docs: clarify setup sheet repo behavior	2026-10-24 09:54:29 -05:00
jason.woltje	ceb612a40f	docs: update Case 2 setup sheet for Q226	2026-10-24 09:54:29 -05:00
jason.woltje	18334d713b	agents: register Codex seat Steelbeak to build row 287 (C2-21, #1792 ) from megavolt/row287's design (mos-1576, mos-1542); doc only	2026-10-24 09:46:14 -05:00