stack/agents/dewey/work/queue-149/mutants/S1-sr-bash.log

== packages/business rc=1
✔ the role file loads and resolves through loadBusiness (4.799737ms)
✔ the shipped file is exactly the approved list (0.593552ms)
✔ the assistant's authority is message.send and record.write within role (1.504541ms)
✔ the assistant talks to the user and the chief of staff only, and no other shipped role is limited (0.480683ms)
✔ a business grant through limits does not widen the role (1.260247ms)
✔ a launch block whose by is the assistant is refused (1.193282ms)
✔ the instance takes no credential references and no tracker (1.925932ms)
✔ an arbiter whose role definition declares messaging lists is refused, for each kind (2.708446ms)
✔ an arbiter without messaging lists is accepted beside the limited assistant (1.479808ms)
✔ the contract passes work to the chief of staff and directs no one (0.503164ms)
✔ REQ-HARN-2: the assistant holds the web grant, and no other role file does (4.254415ms)
✔ record.write is within-role for the eleven approved v2 agents, never gated-only (2.081849ms)
✔ the four shipped version 2 roles load (2.290521ms)
✔ shipped role scopes match addendum B section 2 and the SR runbook (0.680963ms)
✔ shipped authority follows the note's table (1.612838ms)
✔ every role file in roles/ loads through the validator, and a v2 contract exists (0.709972ms)
✔ version 1 files keep loading with no authority (0.725732ms)
✔ the conductor policy isn't a role (0.143044ms)
✔ a missing role file is exit 4, a symbolic link too (0.303207ms)
✔ version 2 refusals (1.446572ms)
✔ authority: closed vocabulary, no gated-only action, no overlap (1.453529ms)
✔ messaging: optional, role definitions and human, never the tester (1.238351ms)
✔ credentials: Gitea scopes (0.564082ms)
✔ credentials: Vikunja scopes are a group-to-verbs map from the grantable list (1.381769ms)
✔ credentials: services (0.391794ms)
✔ contract: a non-empty regular Markdown file beside the role file (0.487593ms)
✖ both definitions load, with a contract file, and are exactly the approved lists (2.609654ms)
✖ security-reviewer has no write or shell tool and classifies only the verdict as its own (0.305387ms)
✔ merge-gate's only grant is git.merge.protected cross-role, and it has no write tool (3.699129ms)
✔ neither role can be an arbiter: its messaging lists refuse the business file (row 133) (3.579653ms)
✔ every role contract carries the proactive line in its Authority section (0.589596ms)
✔ pm and chief-of-staff say where a raise goes under REQ-DEC-2 (0.764048ms)
ℹ tests 32
ℹ suites 0
ℹ pass 30
ℹ fail 2
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 76.772327

✖ failing tests:

test at tests/workflow-roles.test.mjs:50:1
✖ both definitions load, with a contract file, and are exactly the approved lists (2.609654ms)
  AssertionError [ERR_ASSERTION]: security-reviewer
  + actual - expected
  ... Skipped lines
  
    {
      authority: {
        crossRole: [],
        withinRole: [
          'review.verdict'
  ...
        'ls',
  +     'bash'
      ]
    }
  
      at TestContext.<anonymous> (file:///home/jwoltje/dewey-scratch/r149/packages/business/tests/workflow-roles.test.mjs:58:12)
      at Test.runInAsyncScope (node:async_hooks:226:14)
      at Test.run (node:internal/test_runner/test:1402:25)
      at Test.start (node:internal/test_runner/test:1262:17)
      at startSubtestAfterBootstrap (node:internal/test_runner/harness:387:17) {
    generatedMessage: false,
    code: 'ERR_ASSERTION',
    actual: { roleVersion: 2, name: 'security-reviewer', contract: 'security-reviewer.md', tools: [ 'read', 'grep', 'find', 'ls', 'bash' ], network: 'api-only', authority: { withinRole: [Array], crossRole: [] }, credentials: [], messaging: { sendTo: [Array], receiveFrom: [Array] } },
    expected: { roleVersion: 2, name: 'security-reviewer', contract: 'security-reviewer.md', tools: [ 'read', 'grep', 'find', 'ls' ], network: 'api-only', authority: { withinRole: [Array], crossRole: [] }, credentials: [], messaging: { sendTo: [Array], receiveFrom: [Array] } },
    operator: 'deepStrictEqual',
    diff: 'simple'
  }

test at tests/workflow-roles.test.mjs:63:1
✖ security-reviewer has no write or shell tool and classifies only the verdict as its own (0.305387ms)
  AssertionError [ERR_ASSERTION]: bash
      at TestContext.<anonymous> (file:///home/jwoltje/dewey-scratch/r149/packages/business/tests/workflow-roles.test.mjs:65:37)
      at Test.runInAsyncScope (node:async_hooks:226:14)
      at Test.run (node:internal/test_runner/test:1402:25)
      at Test.processPendingSubtests (node:internal/test_runner/test:974:18)
      at Test.postRun (node:internal/test_runner/test:1542:19)
      at Test.run (node:internal/test_runner/test:1467:12)
      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
    generatedMessage: false,
    code: 'ERR_ASSERTION',
    actual: false,
    expected: true,
    operator: '==',
    diff: 'simple'
  }
== packages/bus rc=0
✔ each C-suite role file carries the same two lists: human, chief-of-staff, pm, cto (1.209061ms)
✔ chief-executive-officer: messages to and from the user, chief of staff, pm and cto pass (426.869432ms)
✔ chief-executive-officer: a message to or from the coder, reviewer or assistant is refused and logged, and nothing is stored (390.644564ms)
✔ chief-executive-officer: another C-suite role isn't on the lists either (220.020803ms)
✔ chief-financial-officer: messages to and from the user, chief of staff, pm and cto pass (228.253447ms)
✔ chief-financial-officer: a message to or from the coder, reviewer or assistant is refused and logged, and nothing is stored (226.311473ms)
✔ chief-financial-officer: another C-suite role isn't on the lists either (200.551409ms)
✔ chief-information-officer: messages to and from the user, chief of staff, pm and cto pass (239.824677ms)
✔ chief-information-officer: a message to or from the coder, reviewer or assistant is refused and logged, and nothing is stored (216.138471ms)
✔ chief-information-officer: another C-suite role isn't on the lists either (196.975728ms)
✔ chief-information-security-officer: messages to and from the user, chief of staff, pm and cto pass (239.261966ms)
✔ chief-information-security-officer: a message to or from the coder, reviewer or assistant is refused and logged, and nothing is stored (222.605964ms)
✔ chief-information-security-officer: another C-suite role isn't on the lists either (208.120331ms)
✔ chief-marketing-officer: messages to and from the user, chief of staff, pm and cto pass (299.184525ms)
✔ chief-marketing-officer: a message to or from the coder, reviewer or assistant is refused and logged, and nothing is stored (213.598324ms)
✔ chief-marketing-officer: another C-suite role isn't on the lists either (182.795051ms)
✔ merge-gate's technical raise is cross-role, goes to the cto, and only merge-gate can use the approval (224.239725ms)
✔ merge-gate has no message.send, and without a domain its raise goes to the delivery arbiter (223.344564ms)
✔ the cto must be able to message merge-gate, or the technical raise is refused (row 133) (185.980828ms)
✔ security-reviewer answers a review with its verdict alone; it holds no message.send (224.112613ms)
ℹ tests 20
ℹ suites 0
ℹ pass 20
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 3773.099145
== packages/harness rc=0
✔ raise_decision offers domain as technical or delivery only, optional, and says where a raise goes (8.481788ms)
✔ raise_decision forwards domain to decision.raise, and a call without it sends none (193.560486ms)
✔ every role sees read_spec, record writer follows its grant, citation schemas stay strict (10.144487ms)
✔ typed socket forwards read content/history and agent record writes, and cannot write a spec (226.800414ms)
✔ the PM gets its task verbs and the reads, and no launch (5.804107ms)
✔ the chief of staff gets launch, send_message, end_run and change_organization, and no task verbs (2.122125ms)
✔ request_staff is the pm's alone: staff.request over message.send, roles and counts bounded (7.039086ms)
✔ end_run sends role and reason, no decision; change_organization sends revision and the organization keys (1.315088ms)
✔ the organization keys change_organization takes are the broker's ORGANIZATION_KEYS (0.0765ms)
✔ a role without role.end or organization.change gets neither tool, and each tool follows its own grant (5.134632ms)
✔ the assistant gets send_message, the reads and the web tools (it holds the web grant), no launch (0.833164ms)
✔ list_requirements reads the requirement ids, for a task.create holder with a tracker (1.555271ms)
✔ a coder gets no launch, no resolve_decision, and no task tools without a tracker (0.762689ms)
✔ a coder with a tracker gets its own task tools and no task_reassign (0.75732ms)
✔ launch only when the business's launch block names the instance as launcher (1.44059ms)
✔ an action outside the instance's authority has no tool (0.84899ms)
✔ the review loop: push_working and request_review for the coder, fetch_review and review_verdict for the reviewer, none for the PM (3.158863ms)
✔ land_work is there only with land, after push_working, with the task and the decision (1.989821ms)
✔ callTool: one JSON line out, the result back, a refusal rejects (7.159942ms)
✔ list_tasks takes the broker's filters and pages; get_task takes a task_ref (1.646557ms)
✔ callTool sends list_tasks done false unless the session names done; other tools as given (1.894878ms)
✔ replyText: compact JSON up to the cap, an error naming the size and the cap over it (0.464104ms)
✔ web_search's query maxLength is the web layer's SEARCH_MAX_QUERY_CHARS (1.895078ms)
ℹ tests 23
ℹ suites 0
ℹ pass 23
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 313.359625