jason.woltje
6bad02612a
Unclaimed files left in the canonical checkout. Inventory: canonical-cleanup-inventory.md (commit-as-evidence groups). detect-secrets scan clean on 2026-11-02: hits are sha256 pins, git object ids, test sentinels already in tracked tests and unit-file lines.
137 lines
8.7 KiB
Plaintext
137 lines
8.7 KiB
Plaintext
== packages/business rc=1
|
||
✔ the role file loads and resolves through loadBusiness (4.68372ms)
|
||
✔ the shipped file is exactly the approved list (0.563632ms)
|
||
✔ the assistant's authority is message.send and record.write within role (1.434942ms)
|
||
✔ the assistant talks to the user and the chief of staff only, and no other shipped role is limited (0.470351ms)
|
||
✔ a business grant through limits does not widen the role (1.198473ms)
|
||
✔ a launch block whose by is the assistant is refused (1.283759ms)
|
||
✔ the instance takes no credential references and no tracker (1.888331ms)
|
||
✔ an arbiter whose role definition declares messaging lists is refused, for each kind (2.739555ms)
|
||
✔ an arbiter without messaging lists is accepted beside the limited assistant (1.418066ms)
|
||
✔ the contract passes work to the chief of staff and directs no one (0.485924ms)
|
||
✔ REQ-HARN-2: the assistant holds the web grant, and no other role file does (0.945923ms)
|
||
✔ record.write is within-role for the eleven approved v2 agents, never gated-only (2.029219ms)
|
||
✔ the four shipped version 2 roles load (2.224817ms)
|
||
✔ shipped role scopes match addendum B section 2 and the SR runbook (0.65979ms)
|
||
✔ shipped authority follows the note's table (1.617902ms)
|
||
✔ every role file in roles/ loads through the validator, and a v2 contract exists (0.772246ms)
|
||
✔ version 1 files keep loading with no authority (0.754491ms)
|
||
✔ the conductor policy isn't a role (0.144549ms)
|
||
✔ a missing role file is exit 4, a symbolic link too (0.292116ms)
|
||
✔ version 2 refusals (1.391458ms)
|
||
✔ authority: closed vocabulary, no gated-only action, no overlap (1.440521ms)
|
||
✔ messaging: optional, role definitions and human, never the tester (1.210502ms)
|
||
✔ credentials: Gitea scopes (0.565489ms)
|
||
✔ credentials: Vikunja scopes are a group-to-verbs map from the grantable list (0.688143ms)
|
||
✔ credentials: services (0.352694ms)
|
||
✔ contract: a non-empty regular Markdown file beside the role file (0.484419ms)
|
||
✔ both definitions load, with a contract file, and are exactly the approved lists (1.928623ms)
|
||
✔ security-reviewer has no write or shell tool and classifies only the verdict as its own (3.66378ms)
|
||
✔ merge-gate's only grant is git.merge.protected cross-role, and it has no write tool (1.350882ms)
|
||
✔ neither role can be an arbiter: its messaging lists refuse the business file (row 133) (3.626685ms)
|
||
✔ every role contract carries the proactive line in its Authority section (0.528151ms)
|
||
✖ pm and chief-of-staff say where a raise goes under REQ-DEC-2 (1.094557ms)
|
||
ℹ tests 32
|
||
ℹ suites 0
|
||
ℹ pass 31
|
||
ℹ fail 1
|
||
ℹ cancelled 0
|
||
ℹ skipped 0
|
||
ℹ todo 0
|
||
ℹ duration_ms 70.049809
|
||
|
||
✖ failing tests:
|
||
|
||
test at tests/workflow-roles.test.mjs:105:1
|
||
✖ pm and chief-of-staff say where a raise goes under REQ-DEC-2 (1.094557ms)
|
||
AssertionError [ERR_ASSERTION]: pm
|
||
+ actual - expected
|
||
|
||
[
|
||
'account.create',
|
||
'credential.mint',
|
||
'data.delete',
|
||
+ 'git.merge.protected',
|
||
- 'deploy',
|
||
'git.push.protected',
|
||
'message.external',
|
||
'network.expose',
|
||
'spend'
|
||
]
|
||
|
||
at TestContext.<anonymous> (file:///home/jwoltje/dewey-scratch/r149/packages/business/tests/workflow-roles.test.mjs:114:12)
|
||
at Test.runInAsyncScope (node:async_hooks:226:14)
|
||
at Test.run (node:internal/test_runner/test:1402:25)
|
||
at Test.processPendingSubtests (node:internal/test_runner/test:974:18)
|
||
at Test.postRun (node:internal/test_runner/test:1542:19)
|
||
at Test.run (node:internal/test_runner/test:1467:12)
|
||
at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
|
||
generatedMessage: false,
|
||
code: 'ERR_ASSERTION',
|
||
actual: [ 'account.create', 'credential.mint', 'data.delete', 'git.merge.protected', 'git.push.protected', 'message.external', 'network.expose', 'spend' ],
|
||
expected: [ 'account.create', 'credential.mint', 'data.delete', 'deploy', 'git.push.protected', 'message.external', 'network.expose', 'spend' ],
|
||
operator: 'deepStrictEqual',
|
||
diff: 'simple'
|
||
}
|
||
== packages/bus rc=0
|
||
✔ each C-suite role file carries the same two lists: human, chief-of-staff, pm, cto (1.18649ms)
|
||
✔ chief-executive-officer: messages to and from the user, chief of staff, pm and cto pass (400.072764ms)
|
||
✔ chief-executive-officer: a message to or from the coder, reviewer or assistant is refused and logged, and nothing is stored (363.65989ms)
|
||
✔ chief-executive-officer: another C-suite role isn't on the lists either (191.899227ms)
|
||
✔ chief-financial-officer: messages to and from the user, chief of staff, pm and cto pass (235.579171ms)
|
||
✔ chief-financial-officer: a message to or from the coder, reviewer or assistant is refused and logged, and nothing is stored (216.79032ms)
|
||
✔ chief-financial-officer: another C-suite role isn't on the lists either (184.906014ms)
|
||
✔ chief-information-officer: messages to and from the user, chief of staff, pm and cto pass (228.75562ms)
|
||
✔ chief-information-officer: a message to or from the coder, reviewer or assistant is refused and logged, and nothing is stored (212.130152ms)
|
||
✔ chief-information-officer: another C-suite role isn't on the lists either (170.93728ms)
|
||
✔ chief-information-security-officer: messages to and from the user, chief of staff, pm and cto pass (216.840451ms)
|
||
✔ chief-information-security-officer: a message to or from the coder, reviewer or assistant is refused and logged, and nothing is stored (221.05965ms)
|
||
✔ chief-information-security-officer: another C-suite role isn't on the lists either (180.904372ms)
|
||
✔ chief-marketing-officer: messages to and from the user, chief of staff, pm and cto pass (221.928682ms)
|
||
✔ chief-marketing-officer: a message to or from the coder, reviewer or assistant is refused and logged, and nothing is stored (228.297302ms)
|
||
✔ chief-marketing-officer: another C-suite role isn't on the lists either (188.7188ms)
|
||
✔ merge-gate's technical raise is cross-role, goes to the cto, and only merge-gate can use the approval (198.671377ms)
|
||
✔ merge-gate has no message.send, and without a domain its raise goes to the delivery arbiter (204.331707ms)
|
||
✔ the cto must be able to message merge-gate, or the technical raise is refused (row 133) (169.523966ms)
|
||
✔ security-reviewer answers a review with its verdict alone; it holds no message.send (214.027993ms)
|
||
ℹ tests 20
|
||
ℹ suites 0
|
||
ℹ pass 20
|
||
ℹ fail 0
|
||
ℹ cancelled 0
|
||
ℹ skipped 0
|
||
ℹ todo 0
|
||
ℹ duration_ms 3523.716747
|
||
== packages/harness rc=0
|
||
✔ raise_decision offers domain as technical or delivery only, optional, and says where a raise goes (8.335698ms)
|
||
✔ raise_decision forwards domain to decision.raise, and a call without it sends none (176.402534ms)
|
||
✔ every role sees read_spec, record writer follows its grant, citation schemas stay strict (9.830151ms)
|
||
✔ typed socket forwards read content/history and agent record writes, and cannot write a spec (210.449794ms)
|
||
✔ the PM gets its task verbs and the reads, and no launch (5.843534ms)
|
||
✔ the chief of staff gets launch, send_message, end_run and change_organization, and no task verbs (2.021724ms)
|
||
✔ request_staff is the pm's alone: staff.request over message.send, roles and counts bounded (6.640959ms)
|
||
✔ end_run sends role and reason, no decision; change_organization sends revision and the organization keys (1.194936ms)
|
||
✔ the organization keys change_organization takes are the broker's ORGANIZATION_KEYS (0.088361ms)
|
||
✔ a role without role.end or organization.change gets neither tool, and each tool follows its own grant (5.17124ms)
|
||
✔ the assistant gets send_message, the reads and the web tools (it holds the web grant), no launch (0.815456ms)
|
||
✔ list_requirements reads the requirement ids, for a task.create holder with a tracker (1.520342ms)
|
||
✔ a coder gets no launch, no resolve_decision, and no task tools without a tracker (0.754108ms)
|
||
✔ a coder with a tracker gets its own task tools and no task_reassign (0.817265ms)
|
||
✔ launch only when the business's launch block names the instance as launcher (1.308214ms)
|
||
✔ an action outside the instance's authority has no tool (0.847963ms)
|
||
✔ the review loop: push_working and request_review for the coder, fetch_review and review_verdict for the reviewer, none for the PM (3.214875ms)
|
||
✔ land_work is there only with land, after push_working, with the task and the decision (1.517565ms)
|
||
✔ callTool: one JSON line out, the result back, a refusal rejects (7.343965ms)
|
||
✔ list_tasks takes the broker's filters and pages; get_task takes a task_ref (1.564051ms)
|
||
✔ callTool sends list_tasks done false unless the session names done; other tools as given (1.797618ms)
|
||
✔ replyText: compact JSON up to the cap, an error naming the size and the cap over it (0.46322ms)
|
||
✔ web_search's query maxLength is the web layer's SEARCH_MAX_QUERY_CHARS (1.844706ms)
|
||
ℹ tests 23
|
||
ℹ suites 0
|
||
ℹ pass 23
|
||
ℹ fail 0
|
||
ℹ cancelled 0
|
||
ℹ skipped 0
|
||
ℹ todo 0
|
||
ℹ duration_ms 296.882182
|