jason.woltje
6bad02612a
Unclaimed files left in the canonical checkout. Inventory: canonical-cleanup-inventory.md (commit-as-evidence groups). detect-secrets scan clean on 2026-11-02: hits are sha256 pins, git object ids, test sentinels already in tracked tests and unit-file lines.
123 lines
8.4 KiB
Plaintext
123 lines
8.4 KiB
Plaintext
== packages/business rc=1
|
||
✔ the role file loads and resolves through loadBusiness (4.550271ms)
|
||
✔ the shipped file is exactly the approved list (0.561005ms)
|
||
✔ the assistant's authority is message.send and record.write within role (1.418267ms)
|
||
✔ the assistant talks to the user and the chief of staff only, and no other shipped role is limited (0.465902ms)
|
||
✔ a business grant through limits does not widen the role (1.123072ms)
|
||
✔ a launch block whose by is the assistant is refused (1.165313ms)
|
||
✔ the instance takes no credential references and no tracker (1.831698ms)
|
||
✔ an arbiter whose role definition declares messaging lists is refused, for each kind (2.716544ms)
|
||
✔ an arbiter without messaging lists is accepted beside the limited assistant (1.475722ms)
|
||
✔ the contract passes work to the chief of staff and directs no one (0.472979ms)
|
||
✔ REQ-HARN-2: the assistant holds the web grant, and no other role file does (1.029496ms)
|
||
✔ record.write is within-role for the eleven approved v2 agents, never gated-only (2.019469ms)
|
||
✔ the four shipped version 2 roles load (2.203479ms)
|
||
✔ shipped role scopes match addendum B section 2 and the SR runbook (0.689285ms)
|
||
✔ shipped authority follows the note's table (1.480738ms)
|
||
✔ every role file in roles/ loads through the validator, and a v2 contract exists (0.697414ms)
|
||
✔ version 1 files keep loading with no authority (0.715305ms)
|
||
✔ the conductor policy isn't a role (0.143618ms)
|
||
✔ a missing role file is exit 4, a symbolic link too (0.297291ms)
|
||
✔ version 2 refusals (1.241105ms)
|
||
✔ authority: closed vocabulary, no gated-only action, no overlap (1.454409ms)
|
||
✔ messaging: optional, role definitions and human, never the tester (4.359921ms)
|
||
✔ credentials: Gitea scopes (0.595602ms)
|
||
✔ credentials: Vikunja scopes are a group-to-verbs map from the grantable list (0.688742ms)
|
||
✔ credentials: services (0.351116ms)
|
||
✔ contract: a non-empty regular Markdown file beside the role file (0.494983ms)
|
||
✔ both definitions load, with a contract file, and are exactly the approved lists (1.924198ms)
|
||
✔ security-reviewer has no write or shell tool and classifies only the verdict as its own (3.48302ms)
|
||
✔ merge-gate's only grant is git.merge.protected cross-role, and it has no write tool (1.341889ms)
|
||
✔ neither role can be an arbiter: its messaging lists refuse the business file (row 133) (3.515925ms)
|
||
✖ every role contract carries the proactive line in its Authority section (0.838174ms)
|
||
✔ pm and chief-of-staff say where a raise goes under REQ-DEC-2 (0.377696ms)
|
||
ℹ tests 32
|
||
ℹ suites 0
|
||
ℹ pass 31
|
||
ℹ fail 1
|
||
ℹ cancelled 0
|
||
ℹ skipped 0
|
||
ℹ todo 0
|
||
ℹ duration_ms 72.146266
|
||
|
||
✖ failing tests:
|
||
|
||
test at tests/workflow-roles.test.mjs:91:1
|
||
✖ every role contract carries the proactive line in its Authority section (0.838174ms)
|
||
AssertionError [ERR_ASSERTION]: coder.md
|
||
at TestContext.<anonymous> (file:///home/jwoltje/dewey-scratch/r149/packages/business/tests/workflow-roles.test.mjs:101:12)
|
||
at Test.runInAsyncScope (node:async_hooks:226:14)
|
||
at Test.run (node:internal/test_runner/test:1402:25)
|
||
at Test.processPendingSubtests (node:internal/test_runner/test:974:18)
|
||
at Test.postRun (node:internal/test_runner/test:1542:19)
|
||
at Test.run (node:internal/test_runner/test:1467:12)
|
||
at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
|
||
generatedMessage: false,
|
||
code: 'ERR_ASSERTION',
|
||
actual: '\n## Authority\n',
|
||
expected: /Within\s+your\s+grants,\s+act\s+on\s+what\s+you\s+see\s+without\s+waiting\s+to\s+be\s+asked,\s+and\s+raise\s+a\s+decision\s+or\s+send\s+a\s+message\s+for\s+anything\s+outside\s+them\./,
|
||
operator: 'match',
|
||
diff: 'simple'
|
||
}
|
||
== packages/bus rc=0
|
||
✔ each C-suite role file carries the same two lists: human, chief-of-staff, pm, cto (1.221849ms)
|
||
✔ chief-executive-officer: messages to and from the user, chief of staff, pm and cto pass (372.556813ms)
|
||
✔ chief-executive-officer: a message to or from the coder, reviewer or assistant is refused and logged, and nothing is stored (344.673801ms)
|
||
✔ chief-executive-officer: another C-suite role isn't on the lists either (187.550824ms)
|
||
✔ chief-financial-officer: messages to and from the user, chief of staff, pm and cto pass (203.61936ms)
|
||
✔ chief-financial-officer: a message to or from the coder, reviewer or assistant is refused and logged, and nothing is stored (195.00256ms)
|
||
✔ chief-financial-officer: another C-suite role isn't on the lists either (168.801913ms)
|
||
✔ chief-information-officer: messages to and from the user, chief of staff, pm and cto pass (216.203662ms)
|
||
✔ chief-information-officer: a message to or from the coder, reviewer or assistant is refused and logged, and nothing is stored (203.988962ms)
|
||
✔ chief-information-officer: another C-suite role isn't on the lists either (172.366282ms)
|
||
✔ chief-information-security-officer: messages to and from the user, chief of staff, pm and cto pass (210.182277ms)
|
||
✔ chief-information-security-officer: a message to or from the coder, reviewer or assistant is refused and logged, and nothing is stored (192.261892ms)
|
||
✔ chief-information-security-officer: another C-suite role isn't on the lists either (156.136268ms)
|
||
✔ chief-marketing-officer: messages to and from the user, chief of staff, pm and cto pass (222.957996ms)
|
||
✔ chief-marketing-officer: a message to or from the coder, reviewer or assistant is refused and logged, and nothing is stored (206.653575ms)
|
||
✔ chief-marketing-officer: another C-suite role isn't on the lists either (185.022887ms)
|
||
✔ merge-gate's technical raise is cross-role, goes to the cto, and only merge-gate can use the approval (178.836895ms)
|
||
✔ merge-gate has no message.send, and without a domain its raise goes to the delivery arbiter (195.765985ms)
|
||
✔ the cto must be able to message merge-gate, or the technical raise is refused (row 133) (161.759041ms)
|
||
✔ security-reviewer answers a review with its verdict alone; it holds no message.send (206.742957ms)
|
||
ℹ tests 20
|
||
ℹ suites 0
|
||
ℹ pass 20
|
||
ℹ fail 0
|
||
ℹ cancelled 0
|
||
ℹ skipped 0
|
||
ℹ todo 0
|
||
ℹ duration_ms 3297.699637
|
||
== packages/harness rc=0
|
||
✔ raise_decision offers domain as technical or delivery only, optional, and says where a raise goes (8.536943ms)
|
||
✔ raise_decision forwards domain to decision.raise, and a call without it sends none (159.047835ms)
|
||
✔ every role sees read_spec, record writer follows its grant, citation schemas stay strict (10.314913ms)
|
||
✔ typed socket forwards read content/history and agent record writes, and cannot write a spec (188.200751ms)
|
||
✔ the PM gets its task verbs and the reads, and no launch (5.714145ms)
|
||
✔ the chief of staff gets launch, send_message, end_run and change_organization, and no task verbs (2.052862ms)
|
||
✔ request_staff is the pm's alone: staff.request over message.send, roles and counts bounded (6.93327ms)
|
||
✔ end_run sends role and reason, no decision; change_organization sends revision and the organization keys (1.227551ms)
|
||
✔ the organization keys change_organization takes are the broker's ORGANIZATION_KEYS (0.082862ms)
|
||
✔ a role without role.end or organization.change gets neither tool, and each tool follows its own grant (5.664975ms)
|
||
✔ the assistant gets send_message, the reads and the web tools (it holds the web grant), no launch (0.898185ms)
|
||
✔ list_requirements reads the requirement ids, for a task.create holder with a tracker (1.987438ms)
|
||
✔ a coder gets no launch, no resolve_decision, and no task tools without a tracker (0.853281ms)
|
||
✔ a coder with a tracker gets its own task tools and no task_reassign (0.810429ms)
|
||
✔ launch only when the business's launch block names the instance as launcher (1.534026ms)
|
||
✔ an action outside the instance's authority has no tool (0.911546ms)
|
||
✔ the review loop: push_working and request_review for the coder, fetch_review and review_verdict for the reviewer, none for the PM (3.316079ms)
|
||
✔ land_work is there only with land, after push_working, with the task and the decision (2.012565ms)
|
||
✔ callTool: one JSON line out, the result back, a refusal rejects (7.707886ms)
|
||
✔ list_tasks takes the broker's filters and pages; get_task takes a task_ref (1.773301ms)
|
||
✔ callTool sends list_tasks done false unless the session names done; other tools as given (1.908324ms)
|
||
✔ replyText: compact JSON up to the cap, an error naming the size and the cap over it (0.471283ms)
|
||
✔ web_search's query maxLength is the web layer's SEARCH_MAX_QUERY_CHARS (1.817758ms)
|
||
ℹ tests 23
|
||
ℹ suites 0
|
||
ℹ pass 23
|
||
ℹ fail 0
|
||
ℹ cancelled 0
|
||
ℹ skipped 0
|
||
ℹ todo 0
|
||
ℹ duration_ms 278.272009
|