jason.woltje
068d868a99
Unclaimed files left in the canonical checkout. Inventory: canonical-cleanup-inventory.md (commit-as-evidence groups). detect-secrets scan clean on 2026-11-02: hits are sha256 pins, git object ids, test sentinels already in tracked tests and unit-file lines.
188 lines
18 KiB
Plaintext
188 lines
18 KiB
Plaintext
✔ the Board: held roles with no machine sessions, a claim with no address, the toggle kept across a reload, and Message addressed to the role (2806.096304ms)
|
||
✔ a redirect answer on a Board read, a bus read, a conversation read, a board POST, a module read and a send signs the page out: one line, nothing stale, no further reads (4959.797456ms)
|
||
✔ browser edge states: loading, empty, malformed, stale, hostile/long values, in-flight reply and appearance fallback (1044.095196ms)
|
||
Rendered contrast: {"failures":[],"count":330,"lowest":4.504658476260286}
|
||
✔ served Console browser: real board fixtures, keyboard, drafts, receipts, themes, 320px and failures (1168.065648ms)
|
||
✔ the README says a refused field table names the file or the key at fault, never a path (1.390425ms)
|
||
✔ S5 pages in a browser: real broker rows, inert text, Copy, routes, failures, layout and no writes (2974.910564ms)
|
||
✔ bus routes serve the four reads from the reader view, unescaped JSON for the page to escape (56.004218ms)
|
||
✔ decisions route serves the roles and recent lists from the reader view (29.670279ms)
|
||
✔ credentials route serves the broker credential status from the reader view (9.276973ms)
|
||
✔ replies route serves the replies to one message from the reader view (28.479434ms)
|
||
✔ bus routes are GET-only, have no write verb, and keep the same-origin checks (47.830866ms)
|
||
✔ bus refusals map to statuses and never carry a path or a stack (24.420061ms)
|
||
✔ humanCall speaks the human transport protocol without blocking the server (1642.203856ms)
|
||
✔ busReader takes --business, else the live bus host, else refuses (151.897014ms)
|
||
✔ humanCall kills a transport that runs past its timeout (528.461669ms)
|
||
✔ serve refuses a --business value that is not a business id (223.235585ms)
|
||
✔ chat browser: list/create named projects and threads, hostile labels inert and no implicit writes (493.661479ms)
|
||
✔ chat browser: thread drafts, receipts and cursor history stay isolated; refresh never writes (446.005463ms)
|
||
✔ chat browser: uncertain writes retain draft, ownership refusal clears it, read-only cannot send (563.925629ms)
|
||
✔ chat browser: a late read from A cannot paint B; sign-out clears private state and stops reads (689.259737ms)
|
||
✔ chat browser: page forward and deduplicate replies; pending and byte-limit submissions do not duplicate (501.478636ms)
|
||
✔ chat browser: scrolled history stays put, New messages and an own send return to the tail (488.558009ms)
|
||
✔ chat browser: automatic polling follows a reply without a POST or a lost draft (10491.149468ms)
|
||
✔ chat browser: display stays bounded while every forward page remains reachable (465.692845ms)
|
||
✔ chat browser: a confirmed visible message replaces its pending receipt; malformed receipts stay unknown (435.362443ms)
|
||
✔ chat browser: a refusal elsewhere forgets private chat drafts (461.707403ms)
|
||
✔ chat browser: a late project creation receipt cannot navigate away from another thread (547.344199ms)
|
||
✔ chat reads map only fixed verbs, strict forward paging and pure GET (19.037979ms)
|
||
✔ chat refuses malformed and repeated query/id values before transport (4.701384ms)
|
||
✔ chat project.create: one verified write, fixed identity/class and private log (1.947673ms)
|
||
✔ chat project.create: each existing Console write fence makes zero bus calls (7.152427ms)
|
||
✔ chat project.create: refusal or lost/malformed receipt never retries or invents success (3.386126ms)
|
||
✔ chat thread.create: one verified write, fixed identity/class and private log (1.028566ms)
|
||
✔ chat thread.create: each existing Console write fence makes zero bus calls (5.467638ms)
|
||
✔ chat thread.create: refusal or lost/malformed receipt never retries or invents success (2.269797ms)
|
||
✔ chat thread.send: one verified write, fixed identity/class and private log (0.91672ms)
|
||
✔ chat thread.send: each existing Console write fence makes zero bus calls (5.022129ms)
|
||
✔ chat thread.send: refusal or lost/malformed receipt never retries or invents success (2.669261ms)
|
||
✔ chat thread.open: one verified write, fixed identity/class and private log (0.845998ms)
|
||
✔ chat thread.open: each existing Console write fence makes zero bus calls (4.65331ms)
|
||
✔ chat thread.open: refusal or lost/malformed receipt never retries or invents success (1.882218ms)
|
||
✔ chat validates names, body, project and strict empty open payload (3.399529ms)
|
||
✔ chat read failures redact ownership and refuse invalid transport arrays (1.654388ms)
|
||
✔ REQ-USER-2 real broker: owned catalog, create/name/filter, isolated history and 403/404 without mutations (52.70861ms)
|
||
✔ chat repeats every POST boundary even when called behind an admitted request (0.855553ms)
|
||
✔ configured Console process injects chat through its existing human transport (117.327023ms)
|
||
✔ chat assets, GET purity, method and unknown-route refusals are explicit (13.365439ms)
|
||
✔ conversation view: full history, collapsed tools, hidden thinking, inert hostile content, malformed and reconcile markers (891.925241ms)
|
||
✔ conversation view: a fork keeps the open branch, says so, and opens the new one on request (1250.950098ms)
|
||
✔ conversation view: a newer session with no readable history keeps the marker (832.528484ms)
|
||
✔ conversation view: seats without history say so and offer no reply (561.41799ms)
|
||
✔ Discord row through real board/WebUI: independent brake/liveness, no Reply, literal content (566.13619ms)
|
||
✔ the editor: the list, hostile markdown that runs nothing, the draft, and each save receipt (1283.058441ms)
|
||
✔ return flow through the conversation view: send, tool call, delayed result, peer message, exact long answers, relaunch (51876.563856ms)
|
||
✔ the preview source names none of the four string-to-markup sinks (0.862478ms)
|
||
✔ headings, paragraphs, emphasis and inline code render (1.181949ms)
|
||
✔ lists, block quotes and code blocks render (0.403887ms)
|
||
✔ a link is made for http, https and relative targets, with rel and the target shown (0.89941ms)
|
||
✔ a link with any other scheme, or an evasion of the scheme, stays source text (0.677678ms)
|
||
✔ an image shows alt text and URL, is never an img element and never loads (0.141166ms)
|
||
✔ raw HTML, entities and unsupported blocks show as source text, never as elements (0.280643ms)
|
||
✔ markup inside code and inside link text stays text (0.140287ms)
|
||
✔ hostile and pathological input stays within its look-ahead budget and under the nesting cap (32.072521ms)
|
||
✔ trailing blanks and closing hashes are cut by a walk from the end, not a regex that retries inside a blank run (24.253967ms)
|
||
✔ a link opener with no closer searches at most SPAN characters ahead (146.687849ms)
|
||
✔ the look-ahead work of one render is a fixed multiple of the text, whatever the opener (621.653101ms)
|
||
✔ past the budget an opener is source text, through the path all other text takes (11.940845ms)
|
||
✔ a normal 200 KiB document renders exactly as it did without a budget, and spends little of it (16.168298ms)
|
||
✔ a line separator inside a heading, a list item or a fence line does not end the marker line (0.376636ms)
|
||
✔ a thematic-break line is a paragraph, every other marker line opens a list (0.350827ms)
|
||
✔ every short line over space, tab, - * _ and a letter is a break exactly when the old regex said so (32.706387ms)
|
||
✔ one line of marks does not throw, at 4 MiB, whatever the mark or the spacing (5728.36819ms)
|
||
✔ CRLF and tabs are read like LF and spaces; empty input renders nothing (0.158526ms)
|
||
✔ messages HTTP read pages and preserves metadata; bad arguments refuse before a read; other reads unchanged (74.094824ms)
|
||
✔ Console Messages lists late unsolicited messages on polling with sender class time read state and trail; nav count includes beyond the page; reads never deliver (800.43323ms)
|
||
✔ Messages nav count polls on Tasks and Board and clears on a Board refusal; messages 403 refuses local pages (1574.137228ms)
|
||
✔ copy writes the Console paths at the full id, read-only, and leaves an existing copy alone (663.590424ms)
|
||
✔ copy refuses a commit off refactor, an unknown one, a worktree and a bad copies directory (542.106566ms)
|
||
✔ copy writes nothing when an archived path is missing at the commit (204.403929ms)
|
||
✔ a copy that loses the rename race leaves no read-only temp directory behind (335.02556ms)
|
||
✔ a copy whose rename fails with no target refuses, writes no copy and leaves no temp directory (352.309193ms)
|
||
✔ a copy that meets a target holding files says exists: and moves nothing into it (352.105356ms)
|
||
✔ a copy that meets an empty target directory replaces it by rename, not by moving into it (343.706222ms)
|
||
✔ serve runs from a copy: /healthz 200, the config check, roles and RELEASE from the copy, the queue from --checkout (679.166011ms)
|
||
✔ serve refuses a --checkout that is not an absolute directory path (238.112095ms)
|
||
✔ consoleReads runs the queue read under queueRoot and reads RELEASE under root (50.335266ms)
|
||
✔ preview options are all three or none, and each is checked (6.180084ms)
|
||
✔ the CLI refuses a partial or invalid preview flag set at start (527.952075ms)
|
||
✔ the CLI with all three flags serves the preview mode (110.681312ms)
|
||
✔ a request for the public name needs the header equal to the user id, else 401 and nothing read (13.758013ms)
|
||
✔ the header name matches without regard to case, and the value compare is exact (2.903189ms)
|
||
✔ the public name with the header reads the bus views, and the Host and Origin are checked first (21.806138ms)
|
||
✔ in preview mode every write answers 403 read-only, from the public name and loopback, and reaches nothing (8.151877ms)
|
||
✔ loopback requests are unchanged in preview mode, and the bus views work with the board down (3.502891ms)
|
||
✔ a proxy that rewrites Host to the loopback port gets 403 on its first request, whatever the user (13.034454ms)
|
||
✔ a repeated Host is 400 before any other check, in preview mode and without it (5.597855ms)
|
||
✔ without the preview flags the public name is refused and writes still reach the board (3.518678ms)
|
||
✔ a signed-in same-origin save reaches exactly one human operation and returns the new commit (15.065961ms)
|
||
✔ a save needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata (6.269816ms)
|
||
✔ a save validates JSON, strict keys, text values and the 1 MiB body before the bus is asked (16.299078ms)
|
||
✔ a body that is JSON but not an object is refused 400, not thrown on (4.170952ms)
|
||
✔ the 1 MiB limit is this route only; Settings and messages keep 16 KiB (1.915313ms)
|
||
✔ a bus refusal is reported as not saved with its own status; stale-base tells the user to reload (4.513518ms)
|
||
✔ a save whose answer is lost or unusable is reported unknown and is never retried (2.746829ms)
|
||
✔ the file list and one file read take strict queries and arrive in the expected shape (3.684971ms)
|
||
✔ reads work without --send; an unusable bus answer is a bad response, a refusal keeps its status (2.175268ms)
|
||
✔ /api/config says edit only where a save can pass (1.546935ms)
|
||
✔ redactor: config, dataRoot, any absolute path, Discord ids and the JSON parser quote (1.086449ms)
|
||
✔ credential state from the date alone, as the bus states it (0.132834ms)
|
||
✔ queue: rows, one row, ids and methods, notes; no path or id from a row (364.563145ms)
|
||
✔ queue: a refused read fails closed with the store's text, redacted (165.350336ms)
|
||
✔ queue: a store that fails to load, or a child that dies, gives a fixed message with no path or stack (694.123389ms)
|
||
✔ business: names, vars on the allowlist, authority, credential metadata only (8.5818ms)
|
||
✔ business: missing or invalid file refuses with the module's text, redacted (5.945176ms)
|
||
✔ business without --business: the live bus host, else no-bus-host; no system config: not-configured (6.10969ms)
|
||
✔ settings: release, board, loopback address, notifier binding name only (95.989622ms)
|
||
✔ task fields: the committed table with no reads configured, GET only; a bad table refuses with no path (14.957408ms)
|
||
✔ bus-status: a refused boot shows reason, file and last good load; a live host or an ok boot clears it (6.289385ms)
|
||
✔ both presentations replace old activity with relaunch notice, label retained history, then resume after new activity (600.74794ms)
|
||
✔ reported return flow and relative Age: reply sent from the inspector, then the new answer appears there without manual refresh (20651.981747ms)
|
||
✔ the send box: held roles, the draft and caret across a refresh, each receipt, one POST per Send, and the trail link; the board Reply on a 4xx and a 5xx (2262.867244ms)
|
||
✔ a sent receipt lists its replies as the page refreshes, oldest first and capped, and marks none delivered or read (10975.204473ms)
|
||
✔ startServer takes send only as a function and only with the preview mode (5.197892ms)
|
||
✔ the CLI refuses --send without the preview flags, and without a configured bus (368.762576ms)
|
||
✔ the CLI with --send and a configured bus sends through the human transport and logs one line (109.910505ms)
|
||
✔ without --send the route is read-only like every other write, and config says no send (5.992221ms)
|
||
✔ with --send every other write is still 403 read-only, and nothing reaches the board or bus (4.966368ms)
|
||
✔ config says send only on the public name with --send on (1.581017ms)
|
||
✔ a send without the signed-in user is 401 and is neither sent nor logged, loopback included (3.793931ms)
|
||
✔ each request check refuses before anything is sent, and logs the refusal without the body (9.480261ms)
|
||
✔ a send passes exactly to, body and in_reply_to, answers the id, and logs it (2.235156ms)
|
||
✔ a crafted role name cannot forge a log line (1.730551ms)
|
||
✔ a bus refusal is not sent, with its status; an outcome the bus could not confirm is unknown and never retried (6.24647ms)
|
||
✔ through the human transport the request is exactly the business, message.send and the keys (71.075178ms)
|
||
✔ against a real broker: the message is written once as a human send, and its refusals map (20.602518ms)
|
||
✔ loopback host and board origin fail closed (5.408228ms)
|
||
✔ real board fixture passes through WebUI; assets and isolated seen/reply work (70.352554ms)
|
||
✔ proxy preserves exact request bytes, status and receipt, rejects forms and malformed JSON, never follows redirect (38.938594ms)
|
||
✔ unreachable board reports URL; CLI rejects unsupported options (341.524541ms)
|
||
✔ render prints the unit without the preview flags (10.027438ms)
|
||
✔ render carries every serve flag, the preview set included (6.052664ms)
|
||
✔ a partial preview set is refused (14.722224ms)
|
||
✔ a value the unit cannot carry is refused, for every flag (212.85273ms)
|
||
✔ the rendered unit names none of the human proof agent markers and sets no agent variable (15.550236ms)
|
||
✔ install into --dir with --no-reload writes the file whole, then reports unchanged (48.254114ms)
|
||
✔ install without --no-reload runs daemon-reload and nothing that starts the unit (19.679157ms)
|
||
✔ uninstall refuses while the unit is running, with or without --no-reload, and removes it once it is not (97.530645ms)
|
||
✔ status prints the unit state and GET /healthz on the installed port (154.481765ms)
|
||
✔ usage: an unknown verb or flag, and start or enable, exit 4 (52.016327ms)
|
||
✔ without --send, render is the template with its placeholders filled, byte for byte (23.441995ms)
|
||
✔ render --send with the preview set ends ExecStart with --send and changes nothing else (37.748458ms)
|
||
✔ --send without the whole preview set is refused and writes nothing (96.914314ms)
|
||
✔ install --send into --dir with --no-reload writes the sending unit, and status says whether it sends (186.025948ms)
|
||
✔ uninstall and status take no --send (26.507223ms)
|
||
✔ install refuses while the unit is running, in any state but inactive or failed, and changes nothing (200.21452ms)
|
||
✔ when the state read fails, install and uninstall refuse with one line and change nothing (51.257091ms)
|
||
✔ install needs --copy naming a copy that exists, and refuses outside the canonical checkout without --allow-worktree (46.107091ms)
|
||
✔ install refuses unless the bus unit runs from the same copy, naming both paths, and changes nothing (174.289778ms)
|
||
✔ render --copy runs the copy and reads the queue in the checkout; without --copy the unit is unchanged (13.586657ms)
|
||
✔ the uid header takes only an Authentik uid; the username header still takes a username (235.176099ms)
|
||
✔ a preview value cannot start with - or . (24.3781ms)
|
||
✔ status names the copy and whether refactor has moved past it, and says when the unit runs from no copy (340.742026ms)
|
||
✔ Settings form shows every scope and held role; gated save, exact payload, retained draft and no automatic retry (988.932432ms)
|
||
2026-10-18T16:23:52.081Z settings user="jason" changed
|
||
✔ REQ-WEB-1 signed-in same-origin Settings write reaches exactly one human operation (14.038699ms)
|
||
✔ REQ-WEB-1 Settings writes require enabled send, named Host, identity, exact Origin and same-origin Fetch Metadata (5.681073ms)
|
||
✔ REQ-WEB-1 Settings validates JSON, size, revision and strict writable keys before broker call (5.800997ms)
|
||
✔ tokens.css and icons.svg are byte copies of docs/design (1.540343ms)
|
||
✔ JetBrains Mono files match the digests in their sources file, with the OFL text (1.251258ms)
|
||
✔ shipped strings are unchanged, and the web keeps its write boundary (1.80701ms)
|
||
✔ shell in a browser: System default, seeded states, 400px, focus and the Ctrl+K palette (5350.054064ms)
|
||
✔ five states on Board, Inbox, Tasks, Agents and Trail (2297.865352ms)
|
||
✔ REQ-LIMIT-4 Settings shows all token kinds and unknown turns beside every total, as a read-only separate section (424.800269ms)
|
||
✔ REQ-WEB-1 usage read keeps unknown counts and each token kind; no query or write is accepted (24.196615ms)
|
||
✔ REQ-WEB-1 malformed usage is refused instead of shown as zero (5.580927ms)
|
||
✔ Queue, Business and Settings in their five states, with no move button (2920.530889ms)
|
||
✔ seeded secrets, Discord ids and paths reach no response and no page; business refusals in the module's words (1070.557231ms)
|
||
✔ the server log names no config path when the system config refuses (263.627697ms)
|
||
ℹ tests 177
|
||
ℹ suites 0
|
||
ℹ pass 177
|
||
ℹ fail 0
|
||
ℹ cancelled 0
|
||
ℹ skipped 0
|
||
ℹ todo 0
|
||
ℹ duration_ms 157550.118635
|