Files
jason.woltje 6bad02612a lead: commit dewey's untracked evidence (721 files: queue-124-review queue-143 queue-149 queue-165-review queue-170 queue-175 queue-177 queue-184 queue-191)
Unclaimed files left in the canonical checkout. Inventory: canonical-cleanup-inventory.md (commit-as-evidence groups). detect-secrets scan clean on 2026-11-02: hits are sha256 pins, git object ids, test sentinels already in tracked tests and unit-file lines.
2026-11-02 15:05:14 -06:00

270 lines
28 KiB
Plaintext
Raw Permalink Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
✔ Q169 the signed-in human names a seat and stops the assistant, one bus call each, logged with the user (31.505987ms)
✔ Q169 the name and stop routes need send on, the public name, the user, the exact Origin and same-origin Fetch Metadata (20.14082ms)
✔ Q169 the name and stop routes take JSON within 4 KiB and only their own keys, all text (9.259829ms)
✔ Row 167 a null body on the name and stop routes is 400 invalid-request with no write, and the next request is answered (5.395892ms)
✔ Q169 a bus refusal says nothing changed; a lost or odd answer says the change may have been made (9.498875ms)
✔ Q169 the names read is a bus read like the others (3.17502ms)
✔ the Board: held roles with no machine sessions, a claim with no address, the toggle kept across a reload, and Message addressed to the role (17831.120981ms)
✔ a Seen click while a Board read is in flight waits for that read, then posts (8943.770523ms)
✔ a redirect answer on a Board read, a bus read, a conversation read, a board POST, a module read and a send signs the page out: one line, nothing stale, no further reads (14204.146025ms)
✔ browser edge states: loading, empty, malformed, stale, hostile/long values, in-flight reply and appearance fallback (9743.243638ms)
Rendered contrast: {"failures":[],"count":330,"lowest":4.504658476260286}
✔ served Console browser: real board fixtures, keyboard, drafts, receipts, themes, 320px and failures (28721.211518ms)
✔ the README says a refused field table names the file or the key at fault, never a path (1.385139ms)
✔ S5 pages in a browser: real broker rows, inert text, Copy, routes, failures, layout and no writes (26220.473932ms)
✔ bus routes serve the four reads from the reader view, unescaped JSON for the page to escape (344.262439ms)
✔ decisions route serves the roles and recent lists from the reader view (661.077784ms)
✔ credentials route serves the broker credential status from the reader view (471.5458ms)
✔ replies route serves the replies to one message from the reader view (1020.592671ms)
✔ bus routes are GET-only, have no write verb, and keep the same-origin checks (96.897375ms)
✔ bus refusals map to statuses and never carry a path or a stack (46.10727ms)
✔ humanCall speaks the human transport protocol without blocking the server (1704.340081ms)
✔ busReader takes --business, else the live bus host, else refuses (388.401061ms)
✔ humanCall kills a transport that runs past its timeout (556.16134ms)
✔ serve refuses a --business value that is not a business id (280.62891ms)
✔ WebUI channel off returns 503 and named recovery for every chat route without a chat operation (57.726055ms)
✔ WebUI only selection keeps web chat enabled while retaining the old read envelope (3.924823ms)
✔ WebUI channel-disabled recovery text is fixed and never echoes transport text (2.849602ms)
✔ chat browser: list/create named projects and threads, hostile labels inert and no implicit writes (7675.422377ms)
✔ chat browser: thread drafts, receipts and cursor history stay isolated; refresh never writes (4793.059727ms)
✔ chat browser: uncertain writes retain draft, ownership refusal clears it, read-only cannot send (4731.353145ms)
✔ chat browser: a late read from A cannot paint B; sign-out clears private state and stops reads (5909.251327ms)
✔ chat browser: page forward and deduplicate replies; pending and byte-limit submissions do not duplicate (5885.178258ms)
✔ chat browser: scrolled history stays put, New messages and an own send return to the tail (5706.758539ms)
✔ chat browser: automatic polling follows a reply without a POST or a lost draft (13874.161087ms)
✔ chat browser: display stays bounded while every forward page remains reachable (2078.017146ms)
✔ chat browser: a confirmed visible message replaces its pending receipt; malformed receipts stay unknown (1234.866048ms)
✔ chat browser: a refusal elsewhere forgets private chat drafts (1139.596275ms)
✔ chat browser: a late project creation receipt cannot navigate away from another thread (2125.061921ms)
✔ chat reads map only fixed verbs, strict forward paging and pure GET (45.34213ms)
✔ chat refuses malformed and repeated query/id values before transport (9.656455ms)
✔ chat project.create: one verified write, fixed identity/class and private log (4.854521ms)
✔ chat project.create: each existing Console write fence makes zero bus calls (16.263209ms)
✔ chat project.create: refusal or lost/malformed receipt never retries or invents success (7.614683ms)
✔ chat thread.create: one verified write, fixed identity/class and private log (3.169392ms)
✔ chat thread.create: each existing Console write fence makes zero bus calls (13.32786ms)
✔ chat thread.create: refusal or lost/malformed receipt never retries or invents success (7.850935ms)
✔ chat thread.send: one verified write, fixed identity/class and private log (4.589676ms)
✔ chat thread.send: each existing Console write fence makes zero bus calls (12.19124ms)
✔ chat thread.send: refusal or lost/malformed receipt never retries or invents success (7.241181ms)
✔ chat thread.open: one verified write, fixed identity/class and private log (2.499863ms)
✔ chat thread.open: each existing Console write fence makes zero bus calls (10.378463ms)
✔ chat thread.open: refusal or lost/malformed receipt never retries or invents success (8.494523ms)
✔ chat createThread receipt requires an instance even when its id is valid (4.999052ms)
✔ chat write receipts expose only the fields belonging to their operation (12.495843ms)
✔ chat validates names, body, project and strict empty open payload (11.565545ms)
✔ chat read failures redact ownership and refuse invalid transport arrays (12.132931ms)
✔ REQ-USER-2 real broker: owned catalog, create/name/filter, isolated history and 403/404 without mutations (1855.558633ms)
✔ chat repeats every POST boundary even when called behind an admitted request (9.753913ms)
✔ configured Console process injects chat through its existing human transport (488.96726ms)
✔ chat assets, GET purity, method and unknown-route refusals are explicit (44.756967ms)
✔ conversation view: full history, collapsed tools, hidden thinking, inert hostile content, malformed and reconcile markers (15266.45067ms)
✔ conversation view: a fork keeps the open branch, says so, and opens the new one on request (9306.399334ms)
✔ conversation view: a newer session with no readable history keeps the marker (4944.008669ms)
✔ conversation view: seats without history say so and offer no reply (5310.690358ms)
✔ Discord row through real board/WebUI: independent brake/liveness, no Reply, literal content (6705.134801ms)
✔ the editor: the list, hostile markdown that runs nothing, the draft, and each save receipt (23294.757592ms)
✔ the Console's CSP stands and the editor runs under it; hostile markdown on the load path runs and loads nothing (9740.990928ms)
✔ hostile content pasted into the editor runs and loads nothing, and a bad link target is refused in the link bar (6366.446795ms)
✔ a pasted image span is kept only for a target the link gate accepts, and a save writes only those (6363.641641ms)
✔ a switch of view reads nothing; a reload, and a trip away and back, each read the file exactly once (6943.063314ms)
✔ an edit rewrites only the block touched; a save sends the rest byte for byte; the Source view carries the draft (4696.626899ms)
✔ a file the editor cannot write back byte for byte opens as Source, says so, cannot save, and the Visual button works once it can (7018.885732ms)
✔ a link title pasted with line breaks in it is written on one line, so no HTML block comes of it (2638.452135ms)
✔ an image alt pasted with line breaks in it is written on one line, so no HTML block comes of it (1813.218991ms)
✔ an image title pasted with line breaks in it is written on one line, so no HTML block comes of it (3071.664045ms)
✔ a code block info string pasted with line breaks in it is written on one line, so no HTML block comes of it (2002.573171ms)
✔ a link title holding a quote after a backslash then a tag is written with the backslash escaped, so the title stays closed (1213.003378ms)
✔ an image title holding a quote after a backslash then a tag is written with the backslash escaped, so the title stays closed (1138.197408ms)
✔ a link title holding a trailing backslash is written with the backslash escaped, so the title stays closed (2164.994027ms)
✔ an image title holding a trailing backslash is written with the backslash escaped, so the title stays closed (691.671884ms)
✔ a code block info string with a backtick, pasted, is dropped on Save, so the fence stays closed (873.661226ms)
✔ a code block info string with a backtick, as a tilde fence can have, is kept as source, not rewritten without it (870.878233ms)
✔ the imported source is the tagged upstream source plus the recorded local changes, and nothing else (25.18257ms)
✔ every package names its origin and license, and NOTICE lists each (1.047337ms)
✔ the build reads only imported source and the editor's own files; the bundle is the recorded build (10.146078ms)
✔ MOSAIC_REQUIRE_EDITOR_BUILD: a missing or wrong esbuild skips without it and fails with it; a wrong binary always fails (8.836242ms)
✔ the toolchain check, run as a program, exits non-zero without esbuild when the build is required (310.641795ms)
﹣ rebuilding from the source gives the same bytes (needs the pinned esbuild; MOSAIC_REQUIRE_EDITOR_BUILD=1 makes its absence a failure) (7.821415ms) # esbuild 0.28.1 is installed at /mnt/storage/src/mosaic-stack/node_modules/esbuild; the editor rebuild needs exactly 0.28.2 (npm ci --ignore-scripts in packages/webui) (set MOSAIC_REQUIRE_EDITOR_BUILD=1 to fail instead of skip)
✔ the editor routes serve the built files with their types and no cache (70.797637ms)
✔ open and save with no edit writes the same bytes: the goals review and a doc with every element (37.617908ms)
✔ open and save with no edit writes the same bytes: every repository doc under docs/ and spec/ (6078.000721ms)
✔ the editor source builds markup only with DOM calls, and the bundle has no eval (3.119318ms)
✔ the link gate and the image rule are the preview's (0.879234ms)
✔ return flow through the conversation view: send, tool call, delayed result, peer message, exact long answers, relaunch (60574.891144ms)
✔ row 165 Settings: role instances read, add with a restart named, change without one, a refusal keeps the draft (10555.788938ms)
✔ row 165 Console: the signed-in human adds an instance through a real broker; validate exits 0 and the log names the human (2042.193327ms)
✔ row 165 Console: the instance write needs send on, the public name, the user, the exact Origin and same-origin Fetch Metadata (8.311686ms)
✔ row 165 Console: the instance write takes JSON within 16 KiB and only its own keys; holder, credentials and an actor are refused (9.230309ms)
✔ row 165 Console: a bus refusal says nothing changed; a lost or odd answer says the change may have been made (12.417395ms)
✔ row 165 Console: the instances read takes no arguments, needs a bus and refuses an answer without a revision (6.015397ms)
✔ REQ-LIMIT-3 REQ-LIMIT-4 Settings shows token limits counted, not enforced and check failed; Reset posts one path; a save keeps the token limits (9170.395562ms)
✔ Row 167 with an assistant draft open, a token limit reset gives the assistant submit its revision (5132.718512ms)
✔ REQ-LIMIT-3 limits read returns only the token rows; no query or write is accepted (35.754572ms)
✔ REQ-LIMIT-3 a limits answer without a token list is refused, not shown as no limits (12.543063ms)
2026-10-20T02:54:27.347Z settings user="jason" changed
✔ REQ-LIMIT-3 a Settings reset reaches the human write with its paths; a reset alone is enough (7.443262ms)
✔ REQ-LIMIT-3 the Console reader asks the bus limits verb with no arguments (0.311874ms)
✔ the preview source names none of the four string-to-markup sinks (0.976764ms)
✔ headings, paragraphs, emphasis and inline code render (1.655819ms)
✔ lists, block quotes and code blocks render (0.479249ms)
✔ a link is made for http, https and relative targets, with rel and the target shown (1.074187ms)
✔ a link with any other scheme, or an evasion of the scheme, stays source text (1.017954ms)
✔ an image shows alt text and URL, is never an img element and never loads (0.346991ms)
✔ raw HTML, entities and unsupported blocks show as source text, never as elements (0.454321ms)
✔ markup inside code and inside link text stays text (0.21731ms)
✔ hostile and pathological input stays within its look-ahead budget and under the nesting cap (38.779636ms)
✔ trailing blanks and closing hashes are cut by a walk from the end, not a regex that retries inside a blank run (27.154019ms)
✔ a link opener with no closer searches at most SPAN characters ahead (163.978745ms)
✔ the look-ahead work of one render is a fixed multiple of the text, whatever the opener (817.140947ms)
✔ past the budget an opener is source text, through the path all other text takes (16.332673ms)
✔ a normal 200 KiB document renders exactly as it did without a budget, and spends little of it (22.993665ms)
✔ a line separator inside a heading, a list item or a fence line does not end the marker line (0.561705ms)
✔ a thematic-break line is a paragraph, every other marker line opens a list (0.393765ms)
✔ every short line over space, tab, - * _ and a letter is a break exactly when the old regex said so (40.664645ms)
✔ one line of marks does not throw, at 4 MiB, whatever the mark or the spacing (7792.299389ms)
✔ CRLF and tabs are read like LF and spaces; empty input renders nothing (0.242422ms)
✔ messages HTTP read pages and preserves metadata; bad arguments refuse before a read; other reads unchanged (1286.471541ms)
✔ Console Messages lists late unsolicited messages on polling with sender class time read state and trail; nav count includes beyond the page; reads never deliver (16871.958436ms)
✔ Messages nav count polls on Tasks and Board and clears on a Board refusal; messages 403 refuses local pages (7830.166199ms)
✔ copy writes the Console paths at the full id, read-only, and leaves an existing copy alone (17810.096599ms)
✔ copy refuses a commit off refactor, an unknown one, a worktree and a bad copies directory (18302.649169ms)
✔ copy writes nothing when an archived path is missing at the commit (902.472114ms)
✔ a copy that loses the rename race leaves no read-only temp directory behind (682.176117ms)
✔ a copy whose rename fails with no target refuses, writes no copy and leaves no temp directory (996.123001ms)
✔ a copy that meets a target holding files says exists: and moves nothing into it (718.092955ms)
✔ a copy that meets an empty target directory replaces it by rename, not by moving into it (835.987797ms)
✔ serve runs from a copy: /healthz 200, the config check, roles and RELEASE from the copy, the queue from --checkout (2594.173555ms)
✔ serve refuses a --checkout that is not an absolute directory path (256.68546ms)
✔ consoleReads runs the queue read under queueRoot and reads RELEASE under root (54.122214ms)
✔ preview options are all three or none, and each is checked (10.477216ms)
✔ the CLI refuses a partial or invalid preview flag set at start (677.717175ms)
✔ the CLI with all three flags serves the preview mode (137.255789ms)
✔ a request for the public name needs the header equal to the user id, else 401 and nothing read (16.053064ms)
✔ the header name matches without regard to case, and the value compare is exact (3.710234ms)
✔ the public name with the header reads the bus views, and the Host and Origin are checked first (28.252124ms)
✔ in preview mode every write answers 403 read-only, from the public name and loopback, and reaches nothing (10.813858ms)
✔ loopback requests are unchanged in preview mode, and the bus views work with the board down (4.391027ms)
✔ a proxy that rewrites Host to the loopback port gets 403 on its first request, whatever the user (15.814581ms)
✔ a repeated Host is 400 before any other check, in preview mode and without it (7.118864ms)
✔ without the preview flags the public name is refused and writes still reach the board (4.055192ms)
✔ a signed-in same-origin save reaches exactly one human operation and returns the new commit (15.604491ms)
✔ a save needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata (6.780021ms)
✔ a save validates JSON, strict keys, text values and the 1 MiB body before the bus is asked (14.581665ms)
✔ a body that is JSON but not an object is refused 400, not thrown on (4.894986ms)
✔ the 1 MiB limit is this route only; Settings and messages keep 16 KiB (1.997431ms)
✔ a bus refusal is reported as not saved with its own status; stale-base tells the user to reload (4.510114ms)
✔ a save whose answer is lost or unusable is reported unknown and is never retried (3.581681ms)
✔ the file list and one file read take strict queries and arrive in the expected shape (7.515281ms)
✔ reads work without --send; an unusable bus answer is a bad response, a refusal keeps its status (5.170364ms)
✔ /api/config says edit only where a save can pass (3.131008ms)
✔ a repository-name project refusal is an HTTP conflict (0.554991ms)
✔ redactor: config, dataRoot, any absolute path, Discord ids and the JSON parser quote (1.59002ms)
✔ credential state from the date alone, as the bus states it (0.193872ms)
✔ queue: rows, one row, ids and methods, notes; no path or id from a row (2076.394633ms)
✔ queue: a refused read fails closed with the store's text, redacted (955.390785ms)
✔ queue: a store that fails to load, or a child that dies, gives a fixed message with no path or stack (4431.427049ms)
✔ business: names, vars on the allowlist, authority, credential metadata only (15.552092ms)
✔ business: missing or invalid file refuses with the module's text, redacted (36.433898ms)
✔ business without --business: the live bus host, else no-bus-host; no system config: not-configured (8.666423ms)
✔ settings: release, board, loopback address, notifier binding name only (911.212224ms)
✔ task fields: the committed table with no reads configured, GET only; a bad table refuses with no path (88.499843ms)
✔ bus-status: a refused boot shows reason, file and last good load; a live host or an ok boot clears it (52.957541ms)
✔ both presentations replace old activity with relaunch notice, label retained history, then resume after new activity (5296.307151ms)
✔ reported return flow and relative Age: reply sent from the inspector, then the new answer appears there without manual refresh (29522.696605ms)
✔ row 65 Settings: the routing table lists every instance, saves a harness, model, thinking and fallback to the file, and keeps the draft on each refusal (13434.251991ms)
✔ row 65 Console: the signed-in human saves a route through a real broker; each refusal says nothing changed and leaves the file and the log (2487.900044ms)
✔ row 65 Console: the routes write needs send on, a writer, the public name, the user, the exact Origin and same-origin Fetch Metadata (7.024106ms)
✔ row 65 Console: the routes write takes JSON within 16 KiB with a revision and routes only; an actor is refused and routes are never logged (10.750995ms)
✔ row 65 Console: a bus refusal maps to its status and says nothing changed; a lost or odd answer says the change may have been made (15.255037ms)
✔ row 65 Console: the routes read takes no arguments, needs a bus and refuses an odd answer (6.696459ms)
✔ the send box: held roles, the draft and caret across a refresh, each receipt, one POST per Send, and the trail link; the board Reply on a 4xx and a 5xx (13181.595865ms)
✔ a sent receipt lists its replies as the page refreshes, oldest first and capped, and marks none delivered or read (18897.544051ms)
✔ startServer takes send only as a function and only with the preview mode (5.671493ms)
✔ the CLI refuses --send without the preview flags, and without a configured bus (479.122141ms)
✔ the CLI with --send and a configured bus sends through the human transport and logs one line (302.116402ms)
✔ without --send the route is read-only like every other write, and config says no send (8.494077ms)
✔ with --send every other write is still 403 read-only, and nothing reaches the board or bus (8.18178ms)
✔ config says send only on the public name with --send on (2.17381ms)
✔ a send without the signed-in user is 401 and is neither sent nor logged, loopback included (5.009603ms)
✔ each request check refuses before anything is sent, and logs the refusal without the body (14.873718ms)
✔ a send passes exactly to, body and in_reply_to, answers the id, and logs it (3.290191ms)
✔ a crafted role name cannot forge a log line (2.783295ms)
✔ a bus refusal is not sent, with its status; an outcome the bus could not confirm is unknown and never retried (8.880356ms)
✔ through the human transport the request is exactly the business, message.send and the keys (141.361767ms)
✔ against a real broker: the message is written once as a human send, and its refusals map (1464.456884ms)
✔ loopback host and board origin fail closed (8.787316ms)
✔ real board fixture passes through WebUI; assets and isolated seen/reply work (290.592747ms)
✔ proxy preserves exact request bytes, status and receipt, rejects forms and malformed JSON, never follows redirect (56.481644ms)
✔ unreachable board reports URL; CLI rejects unsupported options (393.547194ms)
✔ tester service render carries the tester port alongside existing flags (227.194556ms)
✔ tester service refuses forwarded 7332 even with another main port (7.497657ms)
✔ tester service invalid ports refuse render and install with exit 4 and leave the unit alone (118.732127ms)
✔ tester service install and status show the tester port without changing send reporting (234.195012ms)
✔ render prints the unit without the preview flags (9.301955ms)
✔ render carries every serve flag, the preview set included (7.719911ms)
✔ a partial preview set is refused (20.860091ms)
✔ a value the unit cannot carry is refused, for every flag (329.803942ms)
✔ the rendered unit names none of the human proof agent markers and sets no agent variable (23.124415ms)
✔ install into --dir with --no-reload writes the file whole, then reports unchanged (120.080955ms)
✔ install without --no-reload runs daemon-reload and nothing that starts the unit (31.567861ms)
✔ uninstall refuses while the unit is running, with or without --no-reload, and removes it once it is not (245.672599ms)
✔ status prints the unit state and GET /healthz on the installed port (271.66741ms)
✔ usage: an unknown verb or flag, and start or enable, exit 4 (62.531081ms)
✔ without --send, render is the template with its placeholders filled, byte for byte (25.080379ms)
✔ render --send with the preview set ends ExecStart with --send and changes nothing else (41.435062ms)
✔ --send without the whole preview set is refused and writes nothing (161.417638ms)
✔ install --send into --dir with --no-reload writes the sending unit, and status says whether it sends (1635.415269ms)
✔ uninstall and status take no --send (62.629409ms)
✔ install refuses while the unit is running, in any state but inactive or failed, and changes nothing (647.829997ms)
✔ when the state read fails, install and uninstall refuse with one line and change nothing (84.427774ms)
✔ install needs --copy naming a copy that exists, and refuses outside the canonical checkout without --allow-worktree (71.978497ms)
✔ install refuses unless the bus unit runs from the same copy, naming both paths, and changes nothing (543.509057ms)
✔ render --copy runs the copy and reads the queue in the checkout; without --copy the unit is unchanged (19.468184ms)
✔ the uid header takes only an Authentik uid; the username header still takes a username (443.462113ms)
✔ a preview value cannot start with - or . (51.746403ms)
✔ status names the copy and whether refactor has moved past it, and says when the unit runs from no copy (727.219579ms)
✔ Settings form shows every scope and held role; gated save, exact payload, retained draft and no automatic retry (6511.991957ms)
✔ Q169 Assistant section: gated, changed fields only, name and stop posts, retained draft and no automatic retry (5585.053005ms)
✔ Row 167 a refused names read gives the refused usage page; another names failure keeps the Assistant section (3928.275551ms)
✔ Row 167 with a limits draft open, an assistant save gives the limits submit its revision and the typed limit stays (6704.140153ms)
✔ Row 167 with an assistant draft open, a launch save gives the assistant submit its revision, and reload reads the current one (2006.341492ms)
2026-10-20T02:54:47.474Z settings user="jason" changed
✔ REQ-WEB-1 signed-in same-origin Settings write reaches exactly one human operation (26.381946ms)
✔ REQ-WEB-1 Settings writes require enabled send, named Host, identity, exact Origin and same-origin Fetch Metadata (12.72055ms)
✔ REQ-WEB-1 Settings validates JSON, size, revision and strict writable keys before broker call (8.296756ms)
✔ Q169 a Console change of the assistant reaches the human operation unchanged, and the log names the signed-in user (3.791303ms)
✔ tokens.css and icons.svg are byte copies of docs/design (99.219034ms)
✔ JetBrains Mono files match the digests in their sources file, with the OFL text (1.678835ms)
✔ shipped strings are unchanged, and the web keeps its write boundary (2.599755ms)
✔ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (9696.005925ms)
✔ five states on Board, Inbox, Tasks, Agents and Trail (7850.655265ms)
✔ tester Console banner exposes only instance route and name editors and saves a route as tester (6887.5433ms)
✔ row 177: the tester Console chat composer is enabled and a send shows in its own thread (8369.196716ms)
✔ tester-port validates range tunnel main port and requires configured bus before listening (1126.205911ms)
✔ CLI tester listener binds loopback and spawns TESTER_CLI for every Console bus read (5955.161542ms)
✔ main listener refuses x-mosaic-tester before any board or bus read for every Host (21.56696ms)
✔ tester listener rejects preview binding and requires its loopback Host and no proxy auth header (2048.250945ms)
✔ tester listener writes only instances routes and names with tester receipts and actor (3531.967179ms)
✔ tester listener refuses every human-only write with no bus call (1713.268742ms)
✔ tester-off and tester-required reads return HTTP 403 (1355.680037ms)
✔ tester credentials routes and committed project reads keep secrets and paths bounded (4217.545791ms)
✔ row 177 W1: the tester chat makes, sends to, opens and reads its own thread as tester (1686.451418ms)
✔ row 177 W2: tester chat writes refuse a missing or foreign Origin, cross-site, text/plain and the proxy header with no bus call (492.473299ms)
✔ row 177 W3: the human thread through the tester chat is thread-not-owned, and bus.tester off answers tester-off (2206.672435ms)
✔ row 177 W4: the main listener refuses x-mosaic-tester on chat reads and writes before the chat (2.898141ms)
✔ REQ-LIMIT-4 Settings shows all token kinds and unknown turns beside every total, as a read-only separate section (4515.106076ms)
✔ REQ-WEB-1 usage read keeps unknown counts and each token kind; no query or write is accepted (53.324384ms)
✔ REQ-WEB-1 malformed usage is refused instead of shown as zero (11.465112ms)
✔ Queue, Business and Settings in their five states, with no move button (8701.071305ms)
✔ seeded secrets, Discord ids and paths reach no response and no page; business refusals in the module's words (3101.957876ms)
✔ the server log names no config path when the system config refuses (371.665236ms)
ℹ tests 258
ℹ suites 0
ℹ pass 257
ℹ fail 0
ℹ cancelled 0
ℹ skipped 1
ℹ todo 0
ℹ duration_ms 61765.572239