1111 lines
118 KiB
Plaintext
1111 lines
118 KiB
Plaintext
✔ R6 a configured peer id validates as a user's home and an unconfigured one refuses (8.708181ms)
|
||
✔ R6 B1 a boot with access.json binds a granted user, whose home is a configured peer (73.690687ms)
|
||
✔ R6 B2 a boot without access.json has no access and binds no user (58.777893ms)
|
||
✔ R6 B3 a boot with a file R1's loader refuses still boots, binds no user and says so once (183.634474ms)
|
||
✔ list prints the revision and the users (25.814043ms)
|
||
✔ grant writes one revision up, a receipt line, and the id in the file (52.471497ms)
|
||
✔ a viewer grant writes the viewer level, one revision up (48.487944ms)
|
||
✔ a second write appends a second receipt and leaves the first intact (102.108177ms)
|
||
✔ a stale revision refuses with revision-conflict and writes nothing (78.237724ms)
|
||
✔ a live holder's lock refuses and leaves the file and the lock alone (27.955005ms)
|
||
✔ an empty or unreadable lock refuses, since its holder may still be writing (53.438153ms)
|
||
✔ a lock left by a dead pid refuses, names the pid, and is not reclaimed (46.361078ms)
|
||
✔ a failed rename leaves the old bytes, removes the temp file, and writes no receipt (26.436931ms)
|
||
✔ a group-writable access file refuses with exit 3, names the file, and changes nothing (24.323639ms)
|
||
✔ an agent or tester caller is refused before the context or the access file is read (1.091758ms)
|
||
✔ the lock is mode 0600 while held and removed after a refused write (26.693428ms)
|
||
✔ a grant naming an unknown instance is refused before any write (26.742275ms)
|
||
✔ a project name resolves to its id at grant time (54.299463ms)
|
||
✔ an unknown project name refuses before any write (32.459405ms)
|
||
✔ revoke removes the user's grants and leaves a revision behind (105.892244ms)
|
||
✔ revoke of a user with no grant refuses and writes nothing (26.423754ms)
|
||
✔ an agent caller is refused before the bus is asked (0.786195ms)
|
||
✔ --tester is refused on every verb before the bus is asked (0.894402ms)
|
||
✔ a bus that refuses the human proof blocks the write (26.528865ms)
|
||
✔ the context reads console.sso subjects and the business files, and peers stay empty (7.610513ms)
|
||
✔ the real human-cli, run from agent ancestry, refuses and writes nothing (5156.310734ms)
|
||
✔ T1 user add writes the user one revision up, prints it and appends a user.add receipt (27.584254ms)
|
||
✔ T2 a bad user add refuses before any write (315.113003ms)
|
||
✔ T3 user remove of a user with no grant drops them one revision up, with a user.remove receipt (32.193798ms)
|
||
✔ T4 user remove refuses with user-has-grants while the user holds a grant, and writes nothing (77.801213ms)
|
||
✔ T5 user remove of an id not in the file refuses and writes nothing (27.450233ms)
|
||
✔ T6 a stale revision refuses both user verbs with revision-conflict (52.237178ms)
|
||
✔ T7 --tester and an agent caller are refused on both user verbs before the bus is asked (1.240839ms)
|
||
✔ T8 a user verb of the wrong shape prints the help (0.909971ms)
|
||
✔ T9 a bus that refuses the human proof blocks both user verbs (46.986468ms)
|
||
✔ R4 grant and revoke call access.reload after the write, and nothing else does (153.347993ms)
|
||
✔ R4 a refused access.reload after a good write exits 0, stdout reports the write, stderr names the code and the 30 s timer (56.069422ms)
|
||
✔ R4 the help keeps the provider-removal order and says what a refused reload means (0.838331ms)
|
||
✔ every screen and overlay fits 120x36, 80x24 and the narrow layout, row for row (1206.284557ms)
|
||
✔ width counts terminal cells: wide CJK and emoji 2, U+FE0F after a one-cell base 1, marks 0 (62.819288ms)
|
||
✔ broker text is shown, never interpreted: no raw control character or bidi override reaches the terminal (139.325127ms)
|
||
✔ NO_COLOR: no escape codes, except reverse video on the selected row (211.541353ms)
|
||
✔ 1-9 shows the decide flow's own lines and question; only y resolves (58.319741ms)
|
||
✔ the app shows the same decide text as mosaic decide (25.704237ms)
|
||
✔ any key but y or Y at the question answers No; nothing is sent (230.155161ms)
|
||
✔ below 40x10 the question is hidden, so every key answers it No, y included (Filbert R3) (82.997358ms)
|
||
✔ under 40 columns a tall terminal shows the too-small screen even where the decide box would fit; y sends nothing (Filbert N10) (294.695357ms)
|
||
✔ a hidden decide box names the way out, and the status line under it does not promise y (Filbert N12) (39.094278ms)
|
||
✔ a throw while answering the question goes to crash, sends nothing and leaves no job pending (25.690234ms)
|
||
✔ type-ahead never answers the question: a paste, keys typed before it is drawn, keys inside askMs (415.083681ms)
|
||
✔ quitting at the question answers No and sends nothing, armed or not (41.342626ms)
|
||
✔ a timer tick reads nothing under an overlay, never answers the question, and keeps a resolved status (35.188796ms)
|
||
✔ a long question is cut inside the question; the action, target, choice and prompt stay (Dewey B1) (50.439734ms)
|
||
✔ a decide box too big for the terminal says so, and every key answers it No, y included (Dewey B1, round 3) (316.439147ms)
|
||
✔ at every size the decide box shows each line y depends on, or says it is hidden (8123.516093ms)
|
||
✔ outcome unknown: the CLI's sentence, no retry, then the trail or a re-read (73.108924ms)
|
||
✔ refused and failed reads keep the last list, marked stale; a refused decide says refused (40.376925ms)
|
||
✔ help or a detail box cut to fit keeps its last line, Esc included (Dewey) (20.327264ms)
|
||
✔ keys: views, moving, trail of a selection, the command line, help and quit (96.339995ms)
|
||
✔ one option: the status line says Press 1, not 1-1 (24.444081ms)
|
||
✔ no business: the app says so and :business picks one (12.886712ms)
|
||
✔ mosaic with no argument: exit 3 in an agent run, exit 4 with the usage off a terminal, the app on one (1.774098ms)
|
||
✔ scripts/mosaic with no argument reaches the app entry; the seat usage it printed before has not drifted (199.031229ms)
|
||
✔ strings to keep exactly live once, in the decide flow and the transport; the app does not restate them (0.456901ms)
|
||
✔ decide with --note still asks; a No sends nothing (15.152635ms)
|
||
✔ the app's business comes from a live bus host only (0.947678ms)
|
||
✔ runApp leaves the terminal as it found it on q, end of input, SIGTERM, SIGINT, SIGHUP and an error, the first frame's included (8.367587ms)
|
||
✔ draw is pure: same state, same frame (0.779266ms)
|
||
✔ recordBootRefused keeps the last good load across refusals; recordBootOk clears the refusal (3.241622ms)
|
||
✔ an unknown key and a JSON syntax error each leave the bus down with the reason and path in the status (715.996319ms)
|
||
✔ a missing file is recorded too, and a valid file clears the status on the next start (500.929519ms)
|
||
✔ row253 socket observation uses configured root, metadata and the Console peer without sending bytes (1865.233654ms)
|
||
✔ row253 P10 refuses unsafe metadata, wrong peers and an unsafe Python without claiming closure (29148.343866ms)
|
||
✔ row253 acceptance rejects bad config and unsupported copies before talk (1347.342078ms)
|
||
✔ row253 stalled peer observation ends within its bound without leaving a reader (3938.626751ms)
|
||
✔ row253 P8 refuses both retired TCP and board listeners (3655.458559ms)
|
||
✔ row253 C4 acceptance query inner reason holds under both sudo models (10692.868028ms)
|
||
✔ row253 C4 acceptance query outer reason discards stdout and names residual cleanup (14176.15576ms)
|
||
✔ row253 C4 acceptance query overflow is output-limit in both models (491.287919ms)
|
||
✔ row299 P10 timing copy preserves shipped bytes and isolates observer variables (0.800454ms)
|
||
✔ row299 P10 observers preserve stdout stderr status and the EXIT trap (3.207798ms)
|
||
✔ row299 P10 observer records are complete and ordered (0.491721ms)
|
||
✔ row253 C4 P10 inner reason holds under both sudo models (11551.03818ms)
|
||
ℹ {"fault":"inner","mode":"exec","baselineSeconds":1.8464614839999922,"faultSeconds":3.9080639939999964,"probeSeconds":2.24}
|
||
ℹ {"fault":"inner","mode":"hop","baselineSeconds":1.802099205999999,"faultSeconds":3.931873563000001,"probeSeconds":2.26}
|
||
✔ row253 C4 P10 outer reason holds under both sudo models (15177.008954ms)
|
||
ℹ {"fault":"outer","mode":"exec","baselineSeconds":1.8096813559999865,"faultSeconds":5.677183815000011,"probeSeconds":4}
|
||
ℹ {"fault":"outer","mode":"hop","baselineSeconds":1.8913509179999966,"faultSeconds":5.740817106000002,"probeSeconds":4}
|
||
✔ row253 C4 P10 overflow reason holds under both sudo models (3655.635581ms)
|
||
✔ row 195 accept: every check passing exits 0, with each P mark and counts that match the lines (1842.438569ms)
|
||
✔ row 195 accept: exits 1 with each F check failing alone, and its line names it (20732.874384ms)
|
||
✔ row 195 accept: F3 fails on exit 0 with no reply line, and its evidence takes talk's error (3664.923761ms)
|
||
✔ row 195 accept: F1 fails on a unit that isn't active or isn't User=mosaic (3457.591173ms)
|
||
✔ row 195 accept: F2 fails when healthz doesn't answer and when another pid holds the port (3689.697908ms)
|
||
✔ row 195 accept: F5 fails on unpriv_bwrap (enforce), on complain and on a trailing space (8670.713283ms)
|
||
✔ row 195 accept: F5 fails with no bwrap of mosaic's, and passes on comm alone (3989.6074ms)
|
||
✔ row 195 accept: F6 fails on a stub that prints nothing, on a path outside claude-<pin> and on a .. segment (5111.571363ms)
|
||
✔ row 195 accept: F7 fails on two live PM launches, one for another business, and no launch.by (5492.018714ms)
|
||
✔ row 195 accept: F8 fails on 0640, on another owner and on a symlink, and never prints the credential (5460.149839ms)
|
||
✔ row 195 accept: F9 fails on another owner, a group-writable mode and a number for the flag (5430.088646ms)
|
||
✔ row 195 accept: F9 won't run --node as root off the pin path or with a writable directory above it (5122.976514ms)
|
||
✔ row 195 accept: F11 fails on one *.json under discord/ and passes on an empty directory (3718.404323ms)
|
||
✔ row 195 accept: each P check reports unnamed on its fault, and the exit stays 0 (16360.414992ms)
|
||
✔ row 195 accept: P2 is unnamed with a supplementary group, and P5 names docker (3693.898356ms)
|
||
✔ row 195 accept: P5 is closed with no jarvis account, and P2 with an empty authorized_keys (1844.362194ms)
|
||
✔ row 195 accept: P9 is unnamed once for each item missing (9348.039582ms)
|
||
✔ row253 accept: P10 fails its observation with another peer; P11 with the unit disabled (3787.139384ms)
|
||
✔ row 195 accept: every P check unnamed together still exits 0 (1674.316746ms)
|
||
✔ row 195 accept: a bad args file refuses with exit 2 before any check, each for its own reason (98.185938ms)
|
||
✔ row 195 accept: usage errors and a run without --root as a user exit 2 (10.484713ms)
|
||
✔ row 195 accept: every in-instance call goes through sudo -u mosaic -H env PATH=<node dir>:... (1965.600839ms)
|
||
✔ row 195 accept: the host check runs with --check and never --enforce (1832.577745ms)
|
||
✔ row276 legacy call inventory pins every production bound and the conversation contract (0.363629ms)
|
||
✔ row276 talk legacy inner timeout cleans both sudo models (1665.477616ms)
|
||
✔ row276 precheck legacy inner timeout cleans both sudo models (1654.328241ms)
|
||
✔ row276 claude-version legacy inner timeout cleans both sudo models (1658.253144ms)
|
||
✔ row276 pm-list legacy inner timeout cleans both sudo models (1665.534555ms)
|
||
✔ row276 node-version legacy inner timeout cleans both sudo models (1649.60191ms)
|
||
✔ row276 legacy streams and display status preserve failures without granting success (2540.112704ms)
|
||
✔ row276 trailer grammar cannot make supervisor failure pass (2110.638137ms)
|
||
✔ row276 earlier forged trailer and appended zero remain failures (552.716734ms)
|
||
✔ row276 precheck outer bound discards success status and fixture cleans residual (2165.212149ms)
|
||
✔ row276 case1 capture and legacy tools refuse unsafe system tools (76.30406ms)
|
||
✔ row276 stderr retention is bounded and keeps the final diagnostic (254.175675ms)
|
||
✔ row276 version and PM checks refuse successful-looking stdout on supervisor failure (15.908445ms)
|
||
✔ row276 full acceptance keeps all five healthy calls in both sudo models (3868.757808ms)
|
||
✔ row276 vanished pid stat read returns 3 with empty stderr in both scripts (5.280498ms)
|
||
✔ row276 legacy stdout snapshot preserves exact bytes on success and command failure (3223.947753ms)
|
||
✔ row 240 check: exits 0 with all seven items and a note that bubblewrap is the install pin (33.69171ms)
|
||
✔ row 240 check: exits 1 with each item failing alone, and its line names it (214.716262ms)
|
||
✔ row 240 check: item 1 fails when a package owns the profile, when dpkg -S errs, or with no pin (89.101025ms)
|
||
✔ row 240 check: item 2 fails on a loaded mosaic-bwrap, a missing unpriv_bwrap or a failed aa-status (87.568067ms)
|
||
✔ row 240 check: item 3 fails on a second file naming bwrap as a word, /{usr/,}bin/bwrap included (127.738057ms)
|
||
✔ row 240 check: item 4 reads the label under the units' no-new-privs and matches it exactly (122.859164ms)
|
||
✔ row 240 check: item 5 needs the statoverride and stat to agree (31.499013ms)
|
||
✔ row 240 check: item 6 fails on protected_hardlinks 0; item 7 fails with the floor at 732 and reads 1023 with no unit (179.112203ms)
|
||
✔ row 240 check: a bubblewrap version other than the install pin is a note, not a failure (31.115946ms)
|
||
✔ row 240 enforce: a pass with no DRIFT changes nothing and exits 0 (30.757167ms)
|
||
✔ row 240 enforce: each failure exits 0, unloads the profile, closes bwrap, writes DRIFT and one log line (269.973574ms)
|
||
✔ row 240 enforce: with DRIFT present and every item passing, it still closes bwrap (37.435835ms)
|
||
✔ row 240 enforce: no unload when aa-status lists neither bwrap profile; never writes the statoverride (312.052165ms)
|
||
✔ row 240 upstream: a candidate whose profile differs prints the difference and exits 0 (51.753494ms)
|
||
✔ row 240 boot unit: a oneshot after apparmor and before the bus that runs --enforce (0.43046ms)
|
||
✔ row 240 pins and usage: the shipped pins are r6's, the script reads the pins beside it, and bad usage exits 2 (44.15352ms)
|
||
✔ Vikunja 614 check: item 5 accepts dpkg's bare octal mode and leading-zero equivalents (61.347395ms)
|
||
✔ Vikunja 614 enforce: dpkg's bare 750 leaves bwrap open and writes no DRIFT (30.584552ms)
|
||
✔ Vikunja 614 check: item 5 refuses other modes, owners, groups, paths and malformed overrides (857.743387ms)
|
||
✔ the library install writes the business file, personas and slot dir, makes the copy and starts nothing (240.856882ms)
|
||
✔ a library re-run passes and leaves every file as it was (410.684714ms)
|
||
✔ a re-run refuses business-file-differs and leaves the file unchanged (273.074556ms)
|
||
✔ a re-run refuses persona-differs when an installed persona isn't the staged one, and writes nothing (272.734739ms)
|
||
✔ the factory install writes no library mapping, persona or slot dir (174.058688ms)
|
||
✔ the factory install refuses a library project and bus.tester off, before anything is written (71.604928ms)
|
||
✔ the library install refuses bus.tester on and a persona var in the input (75.858985ms)
|
||
✔ the install refuses root, a business id mismatch, another --home and a config dir with group bits (53.730741ms)
|
||
✔ the library install needs --personas (5.587162ms)
|
||
✔ a validate refusal removes the business file this run wrote (232.008061ms)
|
||
✔ N4: a validate refusal on a re-run leaves the matching business file in place, byte for byte (397.357356ms)
|
||
✔ a clean library host passes the precheck with no mirror yet (407.133401ms)
|
||
✔ the library precheck refuses a persona file at 0644 (415.960127ms)
|
||
✔ the library precheck refuses a persona whose digest isn't persona.sha256 (395.738502ms)
|
||
✔ the library precheck refuses a persona dir with group bits (397.801777ms)
|
||
✔ the library precheck refuses a business file at 0644 (398.310457ms)
|
||
✔ the library precheck refuses a changes.jsonl at 0644 (561.944743ms)
|
||
✔ the library precheck refuses a Discord binding (397.862918ms)
|
||
✔ --library-status refuses library-mirror-missing before the bus has made the mirror (325.045338ms)
|
||
✔ --library-status refuses library-never-synced on a fresh mirror (346.486065ms)
|
||
✔ --library-status names a recorded lastError before the null lastFetch it leaves (N3) (350.94116ms)
|
||
✔ --library-status prints each R-problem's path as an escaped JSON string, then the count, and passes (404.730676ms)
|
||
✔ --library-status takes no --profile (5.975915ms)
|
||
✔ Vikunja 614: install preserves the explicit notifier decision bytes and mode and creates none when absent (490.860861ms)
|
||
✔ row 322 F8: library personas install from the copy with no clone node_modules (155.528931ms)
|
||
✔ row 322 F9: importer refusal keeps the error line rather than the Node banner (89.748123ms)
|
||
✔ C2-21: library install supplies chief identity and books publish for its real read grant (231.78426ms)
|
||
✔ stage takes each profile's SOUL.md byte for byte and prints the pairing with sizes and digests (58.537271ms)
|
||
✔ stage lists the per-channel prompts in all three places by name and byte count only (52.781917ms)
|
||
✔ a config key with a newline prints as one quoted line (52.114131ms)
|
||
✔ a read trace shows stage and the dry run open SOUL.md and config.yaml and never memory, sessions or secrets (106.787325ms)
|
||
✔ the pairing refuses anything but two existing profiles naming Bean and Chet once each, and writes nothing (415.407051ms)
|
||
✔ a profile with no persona refuses: no SOUL.md, a blank one, a symlink, not UTF-8 (374.721172ms)
|
||
✔ the import applies C2-08's exported fence at its boundaries (400.491412ms)
|
||
✔ install writes 0600 persona files in 0700 directories whose digests match, and prints the vars (101.816529ms)
|
||
✔ install refuses an open or foreign staging file, a digest off the manifest and an existing persona (514.223513ms)
|
||
✔ --dry-run writes nothing and prints only counts and the fence fault, two heading lines in a fixture counted (49.235922ms)
|
||
✔ --dry-run applies C2-08's fence: over it the fault prints, nothing is written and it exits 1 (92.605674ms)
|
||
✔ a directory made between the check and mkdir refuses by name, at stage and at install (158.969602ms)
|
||
✔ --dry-run counts three lines naming a Hermes tool or channel and prints none of the words (46.332318ms)
|
||
✔ usage: stage needs one of --staging and --dry-run, install takes only its own options (319.67261ms)
|
||
✔ row253 factory socket uses actual config and target-uid query without widening hardening (276.184155ms)
|
||
✔ row253 installer refuses unsafe location and query facts before unit writes (2896.56112ms)
|
||
✔ row253 query timeout kills its process group and leaves no running child (7050.610854ms)
|
||
✔ row253 protected homes refuse before any filesystem access (9.199633ms)
|
||
✔ row253 C4 sleep query has exact inner reason and cleans all members (10623.079485ms)
|
||
✔ row253 C4 signals query has exact inner reason and cleans all members (10605.502183ms)
|
||
✔ row253 C4 member query has exact inner reason and cleans all members (10609.70894ms)
|
||
✔ row253 C4 overflow is output-limit in both sudo modes (391.385098ms)
|
||
✔ row253 C4 stalled supervisor uses the outer reason and explicit residual cleanup (14127.784322ms)
|
||
✔ row253 C4 inline supervisor is byte-identical in both host scripts (0.432631ms)
|
||
✔ row253 C4 cleanup budget starts after inventory pass one (31.58042ms)
|
||
✔ row253 query reaps its group even when a child closes stdout before the query returns (122.104501ms)
|
||
✔ row253 config parser is strict (8.308979ms)
|
||
✔ a clean library render writes both units 0644 with the fixed lines, and enables both then starts the bus then the Console (93.001507ms)
|
||
✔ PATH starts with the --node directory, for a node outside the default list and for /usr/bin/node (101.75392ms)
|
||
✔ a failed bus start refuses with the Console not started (91.497675ms)
|
||
✔ the script never links a unit file (0.158743ms)
|
||
✔ factory renders --pm once and one MOSAIC_CLAUDE_BIN line, and without them both tokens render empty (523.3768ms)
|
||
✔ a re-install over running units says they are still on the old copy and must restart together, never that it started them (403.744186ms)
|
||
✔ a re-install to another copy re-renders both units, and an edited installed unit refuses (967.367306ms)
|
||
✔ a template with a namespace, user or system call restriction refuses (266.334273ms)
|
||
✔ the bus template's EnvironmentFile line must be there and point at the session env, and the Console template must have none (176.822963ms)
|
||
✔ a template holding an unknown token, PermissionsStartOnly or a privileged Exec prefix refuses (136.231191ms)
|
||
✔ a symlink at either unit path refuses (163.026026ms)
|
||
✔ a --node that is relative, not root-owned or under <home> refuses (18.922635ms)
|
||
✔ a re-install with a different --node or different serve flags refuses (444.391339ms)
|
||
✔ an installed pair whose units name different copies refuses (239.000061ms)
|
||
✔ a copy id that is short, uppercase, holds / or .., or names no directory refuses (26.668559ms)
|
||
✔ library refuses a privileged-floor miss, a bad proof pair and every flag outside its set (265.118649ms)
|
||
✔ library refuses a proof file not owned by <user>'s uid (15.956121ms)
|
||
✔ factory refuses duplicate socket, a missing --port or --business, and each proxy flag (172.626484ms)
|
||
✔ row253 factory refuses retired TCP and a value after the socket marker (26.214831ms)
|
||
✔ factory refuses a --claude that is relative, not root-owned or under <home>, and a re-install with another --pm or --claude (1145.276416ms)
|
||
✔ the precheck passes on a good host and prints free memory, without the key (148.162996ms)
|
||
✔ the precheck refuses each failed host check (1283.122164ms)
|
||
✔ the precheck refuses a user missing from passwd, a business file that does not load, and a symlinked run root (721.52235ms)
|
||
✔ a bwrap that fails refuses and prints the sysctl and where bwrap is (146.782995ms)
|
||
✔ an unprivileged port floor at or below the Console's port refuses, and so does a missing Console unit (733.671443ms)
|
||
✔ bus.tester: library refuses it on, factory needs it on, and factory refuses a library business (565.722924ms)
|
||
✔ the claude check runs only for a claude-code instance, and refuses a claude that appends or answers wrong (1159.848055ms)
|
||
✔ the claude check runs the bus unit's MOSAIC_CLAUDE_BIN over claude on PATH (371.070086ms)
|
||
✔ the session env file refuses when missing, open to others, a symlink, empty, or emptied by a later line (903.872781ms)
|
||
✔ inside a session's sandbox a bind below 1024 fails with EACCES, and a bind on a free high port succeeds (79.001529ms)
|
||
✔ Vikunja 614 factory: scoped @anthropic-ai Claude path renders and passes installed read-back (748.602153ms)
|
||
✔ Vikunja 614 factory: plain paths still refuse every named unsafe character (87.186535ms)
|
||
✔ Vikunja 614 precheck: explicit null and named notifier decisions pass (317.960688ms)
|
||
✔ Vikunja 614 precheck: notifier config refuses missing, public, malformed and extra-key decisions (1215.360455ms)
|
||
✔ CLI off, absent and other-only channel selections refuse every project/thread flow before any effect (10.09608ms)
|
||
✔ CLI enabled project/thread lists dispatch through selection without changing output (1.131206ms)
|
||
✔ both channels off recover through the existing human CLI, socket and organization writer (2076.260444ms)
|
||
✔ inbox lists only decisions routed to the human, with what approving authorizes and how to decide (23.357077ms)
|
||
✔ decide resolves by id prefix with --yes, and the trail shows it in broker order with the task to follow (17.035471ms)
|
||
✔ decide refuses without a terminal or --yes, on an unknown option and on a short reference (14.000447ms)
|
||
✔ decide prints a declining choice as declining (13.41423ms)
|
||
✔ an unknown outcome is reported once and never resent (12.398389ms)
|
||
✔ a decision closed before the answer arrives exits 2 and points at its trail (11.800747ms)
|
||
✔ a prefix that matches two open decisions exits 2 and resolves neither (12.506778ms)
|
||
✔ without --business a command uses the live host's business, and a stale host.json is not a host (12.192618ms)
|
||
✔ every human command refuses inside an agent run before it touches the bus (11.677731ms)
|
||
✔ usage errors exit 4; no business and no host is a usage error (12.600231ms)
|
||
✔ agents and tasks print through the broker (13.1269ms)
|
||
✔ notify.json: missing, loose, malformed and extra keys refuse; a binding or null passes (1.08292ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"raa7a9a181b03","instance":"assistant","turn":"cc7f2b54-d46c-48aa-a6e3-c99971dfcb71","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"rdd2fcbf492df","instance":"assistant","turn":"c515f5c2-124e-4a6a-96f3-5fa61be2f431","source":"@none","code":"baseline-unknown"}
|
||
✔ REQ-THREAD-2 T3 a run collects compactions at its start and its end, and the count holds across a resume and a host restart (2988.541128ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"red44c81abc8a","instance":"assistant","turn":"3ae980da-01c2-4a65-96c5-0f1c8c29cd53","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r0ad574d3b2ca","instance":"assistant","turn":"18cc700b-4761-48d8-adf7-480ede2f41fe","source":"@none","code":"baseline-unknown"}
|
||
✔ REQ-THREAD-2 T3 a collection that fails is logged and recorded store-unreadable, and the run ends as one whose collections count (2834.648038ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r90620ac66996","instance":"assistant","turn":"c54ef413-962c-4559-88e4-fef75d6d3b7b","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"rba06f3c09499","instance":"assistant","turn":"828e8e37-0178-4f18-aa69-0335495c01e5","source":"@none","code":"baseline-unknown"}
|
||
✔ REQ-THREAD-2 T3 the read budget is the system config's compactionReadBytes, and a bad value takes the default (2899.634668ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"rbb589448e7bb","instance":"assistant","turn":"54030a69-1f9c-40a4-9d96-3b77b59e8ba6","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r8ed00226385d","instance":"assistant","turn":"cd6a7769-ad91-44a7-867c-7d5c20eaf3e8","source":"@none","code":"baseline-unknown"}
|
||
✔ REQ-THREAD-2 T3 the stream cap is the system config's compactionStreams, and a bad value takes the default (2906.768023ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r31956e3deb7f","instance":"assistant","turn":"79ced7bf-710c-4427-9930-b3582753939b","source":"@none","code":"baseline-unknown"}
|
||
✔ REQ-THREAD-2 T3 T4 a clear leaves the retired session's count as it was, its successor counts from 0, and a legacy session reads the thread's ledger (2750.792993ms)
|
||
✔ bootConfig builds the broker's boot message for one business, with no trackers key when no project names one (34.189796ms)
|
||
✔ trackers come from the tracker.* variables of the one project that names a tracker project (58.029739ms)
|
||
✔ with two projects, the one that sets tracker.project supplies the tracker and the other is no conflict (30.202294ms)
|
||
✔ two projects that each name a tracker project refuse, since the boot shape holds one (30.966859ms)
|
||
✔ a business without tracker.baseUrl gets no trackers entry (28.887767ms)
|
||
✔ an unknown business and a broken system config refuse with exit 3 (57.931843ms)
|
||
✔ Row 252 (Webby N1): every console.sso subject reaches the boot as a console owner, and no sso means no consoleOwners key (27.854222ms)
|
||
✔ row 199: issue and rotate send the stdin token once to credentials.issue and print no value (5.981576ms)
|
||
✔ row 199: rotate goes ahead on each held state, rotation-due included, and refuses not-issued, revoked and an unknown entry (2.306065ms)
|
||
✔ row 199: status, revoke and delete; the tester runs status and revoke only (2.440867ms)
|
||
✔ row 210: issue of a host.<id> kind prints public material only (1.049253ms)
|
||
✔ row 199: scripts/mosaic sends credentials to packages/cli, not the seat CLI (87.64011ms)
|
||
﹣ FED R7 scratch two-instance acceptance (0.509349ms) # run scripts/test-federation-acceptance.sh
|
||
✔ follow prints an unsolicited message after plain talk returned (32.331991ms)
|
||
✔ talk --follow continues after reply and prints a later unsolicited message (31.874108ms)
|
||
✔ inbox lists all unread human messages under decisions, does not deliver or read them (293.078728ms)
|
||
✔ follow refuses agent context and bad arguments (13.326218ms)
|
||
✔ follow Ctrl-C wakes the poll sleep and removes its handler; transport errors also clean up (12.776326ms)
|
||
✔ plain talk leaves the process SIGINT handlers unchanged (14.908415ms)
|
||
✔ empty views say so (0.635032ms)
|
||
✔ agents adds a thread line for each held thread claim, after the roles (0.135154ms)
|
||
✔ the trail keeps the broker's order and names a decision's task without its rows (1.195242ms)
|
||
✔ tasks print the tracker fields the snapshot carries (0.146025ms)
|
||
✔ guardDocker refuses a compose run unless PI_AUTH_FILE is a regular file inside the lane temp root (3.051538ms)
|
||
✔ cleanEnv points PI_AUTH_FILE at the lane fixture and drops MOSAIC_LIVE_PROVIDER (0.470571ms)
|
||
✔ test-release.sh activates through the mock adapter with a 0600 fixture auth file (1339.205433ms)
|
||
ℹ {"script":"test-release.sh","extra":[],"wallMs":1163,"status":1}
|
||
✔ test-task.sh mounts only its fixture, uses only the mock adapter and prints the live skip twice (7361.366677ms)
|
||
ℹ {"script":"test-task.sh","extra":[],"wallMs":7291,"status":1}
|
||
✔ M-T: MOSAIC_LIVE_PROVIDER=1 runs the real-model cases, which fail under a fixture auth file (8003.025493ms)
|
||
ℹ {"script":"test-task.sh","extra":["MOSAIC_LIVE_PROVIDER","PI_AUTH_FILE"],"wallMs":7934,"status":1}
|
||
✔ parallel lease holders use only the active lane and its shared state (16.35375ms)
|
||
✔ unrelated home changes do not become lane writes, and own-root references do (0.251309ms)
|
||
✔ proof summaries refuse missing timings, non-overlap and a pair without a lane swap (0.641174ms)
|
||
✔ an exhausted single-port band refuses, and an occupied foreign listener survives the probe (6.417033ms)
|
||
✔ parallel child allocators share real lane locks; a lease remains held through child shutdown (111.631426ms)
|
||
✔ abrupt allocator death releases its holder without touching a foreign lease (47.850479ms)
|
||
✔ fixture caches survive a replacement environment with a separate tmp subdirectory (19.613371ms)
|
||
✔ an unrelated session can append while a supervised step runs without becoming an attributed write (28.040453ms)
|
||
✔ a changed COPY input or actual image ID refuses compatible image sharing (4.193929ms)
|
||
✔ warm Docker guard disables implicit build and pull and refuses image mutation (1.208659ms)
|
||
✔ exclusive image preparation records actual image ID and build wall time and requires a grant (2.484352ms)
|
||
✔ cleanup refuses a foreign Docker label and removes only an exact owned project (0.35371ms)
|
||
✔ missing receipt and missing image refuse without permitting a gate (1.67155ms)
|
||
✔ a tag changed between supervised steps fails the next boundary and suppresses gate success (23.336128ms)
|
||
✔ mutable-base rebuilds with identical files have distinct image IDs; cold and warm counters stay separate (2.965137ms)
|
||
✔ warm pinned execution records zero builds and checks the tag again after its final step (39.273624ms)
|
||
✔ installed Compose accepts rewritten run argv without starting a container (79.259425ms)
|
||
✔ installed Compose resolves the private override with no build and the pinned image (41.186332ms)
|
||
ℹ {"installedComposeConfig":{"buildPresent":false,"image":"sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"}}
|
||
✔ guard owns every Compose file argument and refuses caller configuration overrides (0.640143ms)
|
||
✔ changing packages/processing-control/src/state.mjs invalidates the image receipt (1.40504ms)
|
||
✔ changing packages/processing-control/src/entrypoint.mjs invalidates the image receipt (1.621325ms)
|
||
✔ unfinished dead-owner runs quarantine their lane and a recovery record clears only that run (4.545506ms)
|
||
✔ a legacy landing gate beside a lane stays legacy even with the same parent (1.485558ms)
|
||
✔ the shell status entry reads scratch receipts and reports legacy processes without mutating old slots (58.032625ms)
|
||
✔ recovery supersedes an unclean terminal without rewriting either receipt (2.191794ms)
|
||
✔ the wrapper refuses a held lane lock and preserves its inode (39.961646ms)
|
||
✔ a held kernel lock without a start receipt is BUSY rather than CLEAR (4.187703ms)
|
||
✔ SIGKILL leaves a quarantined run and locked recovery publishes a new clean receipt (209.628698ms)
|
||
✔ a malformed receipt refuses status and an identity mismatch cannot look live (1.507692ms)
|
||
✔ a symlink lock is refused before acquiring or replacing its target (32.878997ms)
|
||
✔ failed recovery keeps quarantine and never publishes a clean recovery receipt (177.052376ms)
|
||
✔ two shared image holders coexist, but exclusive preparation refuses their lock (110.738964ms)
|
||
✔ two simultaneous shell claims have one winner; supervisor retains lock FDs and ordinary children do not (107.665506ms)
|
||
✔ same checkout and a legacy land gate each refuse a claim on an otherwise free lane (3.170667ms)
|
||
✔ recovery kills a proven surviving child, preserves a foreign child and keeps quarantine if interrupted (425.353304ms)
|
||
✔ preflight refuses unsafe lane roots, missing grants and live port 9 before side effects (28.817242ms)
|
||
✔ discovery preserves all package and script steps while ignoring non-file shell names (10.016955ms)
|
||
✔ a failed step stops the gate and records its nonzero exit without running the next step (13.343223ms)
|
||
✔ a cancelled step stops its process group and records failure (113.183333ms)
|
||
✔ step receipts retain pass fail skipped counts and hashes of their actual logs (31.87673ms)
|
||
✔ preflight rejects a real 31-byte root, missing dependency tree, occupied band and missing inventory (22.236695ms)
|
||
✔ preflight refuses canonical and builder checkouts and an existing output (12.443241ms)
|
||
✔ both candidates must carry every approved launcher file (10.99204ms)
|
||
✔ the 92-byte socket example passes and an over-107-byte pathname refuses (0.164877ms)
|
||
✔ package/script duplicates stay and every supervised step clears NODE_TEST_CONTEXT (57.099225ms)
|
||
✔ scoped ss loopback and wildcard port 9 listeners refuse (22.375215ms)
|
||
✔ step children use legacy umask 022 while the supervisor retains 077 (32.552056ms)
|
||
✔ lane wrapper keeps its state directory and lock files private (83.34115ms)
|
||
✔ the review loop: the coder pushes and asks, the reviewer fetches and approves, and the task's trail holds each step (823.546524ms)
|
||
✔ refusals: no action, non-fast-forward, an unknown commit or request, and a push for another task moves only that task's ref (767.45155ms)
|
||
✔ the size cap refuses a push before any byte (242.401698ms)
|
||
✔ a fetch over the cap refuses before any byte reaches the reviewer (758.049726ms)
|
||
✔ the socket refuses a request with no capability, an unknown one, and a bad request line (329.247544ms)
|
||
✔ a rigged clone runs nothing: hooks, fsmonitor, a filter, a gitlink and a symlinked .git/config leave no marker (668.956833ms)
|
||
✔ an identity with no role, or of another business, refuses not-a-role and moves no ref (441.874742ms)
|
||
✔ a review of a project the business no longer has refuses unknown-project (440.864943ms)
|
||
✔ past maxActive connections the socket refuses git-busy, and a hung-up connection frees its slot (242.744491ms)
|
||
✔ close() answers host-closing to a connection still sending its request line (231.410555ms)
|
||
✔ a bundle that trickles in refuses body-timeout at its deadline and frees its slot (641.237658ms)
|
||
✔ a reviewer gone before its bundle was sent is filed fetch-aborted, not as the host's fault (730.846163ms)
|
||
✔ a reviewer that hangs up the moment it has the whole bundle was served, not aborted (1497.808592ms)
|
||
✔ send: a close after every byte left is served; one that fails a queued write is fetch-aborted (42.611829ms)
|
||
✔ a bundle with no bytes for bodyIdle refuses body-timeout long before its deadline (557.837551ms)
|
||
✔ send: a close once the loop is past its last chunk is served, and a failed write there is fetch-aborted (23.829794ms)
|
||
✔ letGo waits for an answer to leave for at most its cap, then destroys the socket (301.935691ms)
|
||
✔ a record that fails and can't be undone refuses rollback-failed, which the host logs (608.356684ms)
|
||
✔ land: the squash runs the gate in its own worktree, then main moves and the broker records it (742.495215ms)
|
||
✔ land: an arbiter-resolved landing's squash says the arbiter resolved it through the broker (693.424273ms)
|
||
✔ land: refusals before the gate answer the role at once and leave main and no worktree (786.577977ms)
|
||
✔ land: a failed gate is refused gate-failed with its step, told to the role, and main stays (700.944103ms)
|
||
✔ land: a record the broker refuses moves main back, and the landing is refused with the broker's code (661.814928ms)
|
||
✔ land: a second landing while one runs refuses land-busy, and close() stops the gate and refuses host-closing (656.557737ms)
|
||
✔ row 298 CLI: scope reads and scope set sends JSON and the observed revision (4.432672ms)
|
||
✔ row 298 CLI: every access agent marker refuses scope set before transport (2.387245ms)
|
||
✔ row 298 CLI: --tester cannot read or change the scope (0.561327ms)
|
||
✔ row 298 CLI: missing revision and empty, invalid or oversized JSON refuse without a call (2.535273ms)
|
||
✔ row 236: grants status prints one line per entry, and --json the answer (2.924831ms)
|
||
✔ row 236: run, revoke, sweep and admin rotate and remove send their args (0.648707ms)
|
||
✔ row 236: admin set sends the stdin token once to grants.admin.set and prints no value (4.152199ms)
|
||
✔ row 236: a malformed grants command is a usage error and calls nothing (4.56052ms)
|
||
✔ row 236: a bus refusal exits 2 with its code (0.328957ms)
|
||
✔ row 236: scripts/mosaic sends grants to packages/cli, not the seat CLI (86.133637ms)
|
||
✔ the host boots the broker, binds a launch in process, and the notifier DMs a blocking decision exactly once (937.591194ms)
|
||
✔ a notifier that dies takes the host down with exit 1, so the unit restarts the pair (256.710531ms)
|
||
✔ a second host for the same data root refuses with exit 3 while the first runs (171.377722ms)
|
||
✔ two bus starts racing for one data root leave one host running; the other refuses that a host already runs (588.706677ms)
|
||
✔ a host takes over a host.lock its dead host left, and puts back a live claim that replaced it meanwhile (1.770435ms)
|
||
✔ a host.lock that goes between the check and the read is tried again; one that can't be parsed still refuses as unreadable (0.712187ms)
|
||
✔ a live host's lock stays, however old the file is (0.501594ms)
|
||
✔ a host.lock left by a host killed with SIGKILL doesn't stop the next bus start (871.315058ms)
|
||
✔ while a host boots, a reader sees no host: the human commands still ask for --business, stop and status find none (218.720389ms)
|
||
✔ a host started before host.lock existed, holding only host.json, still refuses a second start, which leaves no lock (27.442197ms)
|
||
✔ a broker fork that throws leaves no host.lock and no host.json (29.403284ms)
|
||
✔ a broker send that throws leaves no host.lock and no host.json (31.254465ms)
|
||
✔ a broker that misses its boot wait leaves no host.lock and no host.json (35.777516ms)
|
||
✔ a notifier fork that throws stops the broker and leaves no host.lock and no host.json (169.774942ms)
|
||
✔ a notifier send that throws stops the broker and leaves no host.lock and no host.json (171.794869ms)
|
||
✔ a boot reply with no reader for the business refuses with exit 3 naming it, before the notifier starts, and leaves no host.lock and no live broker (176.260459ms)
|
||
✔ a boot reply with no reader for the business refuses with exit 3 naming it, with no notifier, and leaves no host.lock and no live broker (172.424139ms)
|
||
✔ a host.json that can't be written stops both children and leaves no host.lock (285.670337ms)
|
||
✔ an error event on the broker before it replies fails the start at once, and leaves no host.lock and no live child (31.415964ms)
|
||
✔ an error event on the notifier before it replies fails the start at once, and leaves no host.lock and no live child (170.600509ms)
|
||
✔ an error event on the broker while the notifier starts fails the start once the notifier replies (281.157922ms)
|
||
✔ an error event on the broker once the host is up stops the host with exit 1, and leaves no host.lock and no host.json (286.296979ms)
|
||
✔ an error event on the notifier once the host is up stops the host with exit 1, and leaves no host.lock and no host.json (291.387508ms)
|
||
✔ a broker reply that misses the wait breaks the channel: the late reply answers nothing, later requests refuse, the host exits 1 (1194.958241ms)
|
||
✔ a broker reply with another request's id, or none, breaks the channel and the host exits 1 (345.488737ms)
|
||
✔ a broker reply with no request waiting breaks the channel and the host exits 1 (173.64326ms)
|
||
✔ a notifier that refuses stops the broker and the host refuses with exit 3 (226.64156ms)
|
||
✔ a notifier that refuses after the broker died still refuses with exit 3, without a send to the dead broker (218.092999ms)
|
||
✔ a notifier that dies before it replies, after the broker died, still refuses, without a send to the dead broker (171.847003ms)
|
||
✔ a close send that fails with EPIPE after the notifier refuses still gives the notifier's refusal, exit 3 (223.580381ms)
|
||
✔ a close send that fails with EPIPE after the notifier dies unanswered still gives the notifier's error (164.67302ms)
|
||
✔ close() whose stop and close sends fail with EPIPE still finishes, with exit 1 (233.536415ms)
|
||
✔ watchChildren reports a child that died before it was called, and one that dies later (20.187662ms)
|
||
✔ bus stop refuses to signal a live pid that is not a bus host (202.296732ms)
|
||
✔ bus start refuses with exit 3 and the code when the broker refuses to boot; bus status names the lock (318.687414ms)
|
||
✔ bus start refuses with exit 3 without a notifier config (120.633951ms)
|
||
✔ bus start runs until bus stop; status reports it while it runs (833.937952ms)
|
||
✔ bus start --no-launch says launches are disabled in its host-up line and stops cleanly; with --pm it is a usage error (693.542015ms)
|
||
✔ bus-service.sh renders the unit and installs it into a given directory (249.737584ms)
|
||
✔ bus-service.sh pins the claude binary, refuses one the unit can't carry, and renders without one (396.846523ms)
|
||
✔ bus-service.sh refuses a directory pin and keeps a symlink default unresolved (84.661222ms)
|
||
✔ bus-service.sh refuses a default claude without the execute bit, or in a PATH dir with a space (58.049983ms)
|
||
✔ bus start --pm while halted keeps the control host up without launching the chief (424.29504ms)
|
||
✔ row 234: hosts status prints one line per host, and --json the rows (1.977151ms)
|
||
✔ row 234: hosts check and remove send the host id, as the human or the tester (0.393366ms)
|
||
✔ row 234: a malformed hosts command is a usage error and calls nothing (1.729086ms)
|
||
✔ row 234: a bus refusal exits 2 with its code (0.357785ms)
|
||
✔ row 234: scripts/mosaic sends hosts to packages/cli, not the seat CLI (85.945851ms)
|
||
✔ row 235: hosts revoke sends agent, host and reason, and sweep the host, as the human or the tester (0.440477ms)
|
||
✔ row 235 (N10): revoke without --reason, --reason on another verb, and inherited names are usage errors (2.482528ms)
|
||
✔ row 235: a status line shows the tags of a revoke in progress (1.009345ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r1280e31c6c40","instance":"assistant","turn":"975d3b3b-a019-49e4-9ef4-6e5653c93119","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r605d35c916fa","instance":"assistant","turn":"c56dec4b-ee69-4fef-ac1e-a2d55ec976f9","source":"@none","code":"baseline-unknown"}
|
||
✔ row 302 REQ-THREAD-2 an idle-released run whose call lands before the SIGTERM ends stopped/0; a run whose claim the human revoked in the same window still ends session-invalid/22 (1598.326978ms)
|
||
organization: {"event":"reload-needs-restart","business":"acme"}
|
||
organization: {"event":"reload-needs-restart","business":"acme"}
|
||
✔ row 165 CLI: instance add puts an instance in the file, validate exits 0, the log names the human, and the instance binds with no restart (row 194, T1) (166.206478ms)
|
||
✔ row 194 CLI: a bus whose boot credential references differ from the file answers restart needed, and doesn't bind the instance (D3 item 3) (80.958287ms)
|
||
✔ row 165 CLI: instance set passes the vars file and --no-launch, and a vars-only change needs no restart (134.931497ms)
|
||
✔ row 165 CLI: a refusal names its code and why, exits 2 and keeps the bytes (73.330281ms)
|
||
✔ row 165 CLI: usage errors exit 4 before any bus call, and an agent session is refused (58.980617ms)
|
||
✔ row 165: scripts/mosaic sends business instances, instance and (row 194) veto to packages/cli, and validate still to packages/business (208.992912ms)
|
||
✔ row 194 CLI V6: veto keep, unkeep, nohire and hire write through veto.set, the read shows kept and noHire, and a no-op refuses (112.218565ms)
|
||
✔ row 194 CLI: the read lists each instance's running run from the bus claims (68.886886ms)
|
||
✔ row 194 CLI D1.1 item 5: launch and regenerate poll instance.request and print the run; a done with a refusal exits 3 with its code and the request id (76.143738ms)
|
||
✔ row 194 CLI D1.1 item 5: an open request at --wait exits 3 with its id, and a taken one with no done is outcome-unknown (1123.407983ms)
|
||
✔ row 194 CLI: a request cancelled by a terminate exits 3 request-cancelled (64.178648ms)
|
||
✔ row 194 CLI V3: terminate prints the runs, the cancelled and the taken requests, and nothing held refuses not-held (66.213524ms)
|
||
✔ row 194 CLI V5: delete polls to the transaction and the read lists the name retired; workspace-rename-failed names the transaction (111.834792ms)
|
||
✔ row 239 T5 CLI: a delete closed -revoked says the tokens may already be revoked; a plain revision-conflict doesn't (85.108245ms)
|
||
✔ row 194 CLI: lifecycle and veto usage errors exit 4 before any bus call (61.070751ms)
|
||
✔ REQ-LIMIT-2 a claude-code launch asks mayLaunch with launch.account.name (16.913906ms)
|
||
✔ REQ-LIMIT-2 each login set the account can name is accepted when the bus host holds exactly it (25.068985ms)
|
||
✔ REQ-LIMIT-2 account-credential-missing: the named set is not a login set, or the bus host lacks part of it (25.668376ms)
|
||
✔ REQ-LIMIT-2 account-credential-ambiguous: the bus host sets a credential variable outside the named set, ANTHROPIC_BASE_URL included (18.548137ms)
|
||
✔ REQ-LIMIT-2 account-is-credential: launch.account.name is the value of a credential variable the bus host sets (11.643731ms)
|
||
✔ REQ-LIMIT-2 a pi launch carries account null and skips both account checks (13.03738ms)
|
||
✔ REQ-LIMIT-2 with no launch.account a claude-code launch carries null and the environment is not checked for ambiguity (7.031925ms)
|
||
✔ REQ-LIMIT-4 the launcher asks mayLaunch with the instance, provider, model and account (row 126), and goes on to authorization on an allow (16.52215ms)
|
||
✔ REQ-LIMIT-3 REQ-LIMIT-4 a launch whose subject is at its limit is refused limit-reached and logged with the check, limit and count (7.735358ms)
|
||
✔ REQ-LIMIT-4 fail closed: a refused op, a check failure or a malformed answer refuses limit-check-failed, naming the check and the code (60.80665ms)
|
||
✔ REQ-LIMIT-4 the launcher reaches token-limit only through the bus: launcher.mjs imports no limit check (0.54916ms)
|
||
✔ a launcher before trusted control initialization refuses processing-uninitialized (3.111638ms)
|
||
✔ each launch rereads limits and model selections; lowered limits keep sessions and log exact hit (26.683972ms)
|
||
✔ row 65 a passing primary is the route: its provider and model reach mayLaunch, and a stated fallback is never used (18.714768ms)
|
||
✔ row 65 a failed primary preflight takes the stated fallback, and the limit checks see the fallback route (9.92287ms)
|
||
✔ row 65 a failed primary with no fallback refuses with the preflight code and never asks mayLaunch (8.335153ms)
|
||
✔ row 65 a fallback whose own preflight fails refuses with its code and names both reasons (8.22775ms)
|
||
✔ row 65 the fallback route spends launch.account when its module counts the account (10.193811ms)
|
||
✔ row 65 a missing harness, model or thinking var refuses no-route naming it, and the system execution keys never fill it (18.758258ms)
|
||
✔ row 65 a harness that is not switched on refuses harness-off, primary or fallback, and an off primary never falls back (24.834986ms)
|
||
✔ row 65 the loader refusing a module refuses harness-refused and names it; a module that throws refuses harness-failed (20.056829ms)
|
||
✔ row 65 a thinking level the route harness does not apply refuses thinking-unsupported, on the primary or a fallback taken (27.758767ms)
|
||
✔ C2-04: launcher workspace clones code but never the library (1380.404925ms)
|
||
✔ bus start --pm: the launcher instance (the chief of staff) runs under its own PID namespace, registered, with a manifest (1318.183823ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"rb4f6b89ce7cc","instance":"chief","turn":"7efb4ca8-3b03-44ec-849e-2b877400dcd3","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r178f273e0097","instance":"coder","turn":"3156e1b0-867f-4eec-8f81-29c7ea7c8f4d","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"rb4f6b89ce7cc","instance":"chief","turn":"160843c5-ca64-462f-b648-1c4ac1ceb30a","source":"@none","code":"baseline-unknown"}
|
||
✔ the chief of staff launches a coder through its launch tool; the coder answers; refusals name their code (653.69319ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"rfab619877e19","instance":"chief","turn":"e881a7d6-e288-4102-8af1-ae0f3caebc3e","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r716e7bb8bb95","instance":"pm","turn":"ced1726b-50ef-4a5c-ab9b-c11f823cf177","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"rfab619877e19","instance":"chief","turn":"23e76601-9b1e-4d71-a8cd-d8b4849248ee","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r716e7bb8bb95","instance":"pm","turn":"07267714-cd9e-4f0c-a119-be55e897f963","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r716e7bb8bb95","instance":"pm","turn":"3424efe7-61e5-4172-a9a3-deb13e769900","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"rfab619877e19","instance":"chief","turn":"8c699037-971f-4324-8c8c-ff3f8958a1c7","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r716e7bb8bb95","instance":"pm","turn":"1b6f2c59-70ec-46b3-9f35-1fb92d28021c","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"rfab619877e19","instance":"chief","turn":"7aaaec78-def7-4daf-8d23-4b1a95e8a474","source":"@none","code":"baseline-unknown"}
|
||
✔ a launched pm's request_staff reaches the chief of staff; no other session has the tool and the launch limits still hold (1242.850148ms)
|
||
✔ each launch makes sure the workspace has a clone of the project: cloned, fast-forwarded, or fetched and logged (4047.620401ms)
|
||
✔ a role the broker says holds a merge decision gets land_work, its prompt line, its landing and the git socket; without it, none (608.275787ms)
|
||
✔ REQ-LAUNCH-1 the tick starts a listed merge decision holder once, with land_work, the Landing line and its landing turn; an unlisted holder starts nothing (409.776687ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r24229661437a","instance":"coder","turn":"7e51c087-4571-4750-a2d2-06eee105fc58","source":"@none","code":"baseline-unknown"}
|
||
✔ a holder running since before the resolution is stopped once the broker releases it, land-relaunch, and the next tick starts it: landing turn first, then the message that waited (695.522155ms)
|
||
✔ a landing run that ended isn't started again for its decision, a spent decision starts nothing, and a new decision starts the holder (634.25079ms)
|
||
✔ after a restart, the new host's first tick starts a holder whose decision is still held (867.867249ms)
|
||
✔ a refused landing start is logged once per code with its decision, isn't a start, and the next tick with room starts the holder (619.272508ms)
|
||
✔ a project clone that can't be made refuses checkout-failed, from --chief and from a session, with no run and no clone left (269.195824ms)
|
||
✔ a runner that stops at once ends its launch with the runner's reason (341.669818ms)
|
||
✔ a Claude Code launch with no session credential refuses before it starts (199.021796ms)
|
||
✔ a pi launch needs no session credential: pi logs in through its own ENV_ALLOW variables (326.006383ms)
|
||
usage: {"event":"plugin-refused","kind":"harness","name":"down","code":"missing","message":"/home/jwoltje/.t3/worktrees/mosaic-stack/steelbeak-row287/packages/plugins/harness/down is missing","kept":[]}
|
||
plugins: {"event":"plugin-refused","kind":"harness","name":"down","code":"missing","message":"/home/jwoltje/.t3/worktrees/mosaic-stack/steelbeak-row287/packages/plugins/harness/down is missing","kept":[]}
|
||
✔ row 65 a failed primary preflight launches the fallback on a fixture harness module, recording the route and the reason (356.299383ms)
|
||
✔ a runner killed from the host ends its launch as killed, not failed (378.785398ms)
|
||
✔ a missing or failing bwrap refuses sandbox-unavailable before anything starts; there is no unconfined fallback (192.649873ms)
|
||
✔ row 64 a role skill that isn't enabled refuses skill-not-enabled, and one that isn't a plain directory skill-refused, before anything starts (190.922901ms)
|
||
✔ row 213 a creative instance's persona is read from <configDir>/personas: off its digest the launch fails with the mismatch as its reason (248.747147ms)
|
||
✔ row 64 on Claude Code a role skill that isn't enabled refuses the same way, before anything starts (188.063207ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r6e0bd9592cd9","instance":"chief","turn":"a206c793-8f5d-434e-aada-91513ced6d6f","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r6e9e7b606ebc","instance":"coder","turn":"1ec649fd-14ac-4c02-8d8b-6b919104e25e","source":"@none","code":"baseline-unknown"}
|
||
✔ a real Claude Code coder's shell can't read a stand-in secret or anything else its sandbox doesn't hold (1527.079496ms)
|
||
✔ a host that died hard leaves its sessions to the next host, which kills them and ends their runs so the role can be launched again (1042.814868ms)
|
||
✔ a host that died hard leaves its sessions to the next host, which finds one already exited (23) and ends their runs so the role can be launched again (4042.085364ms)
|
||
✔ bus start --no-launch leaves an earlier host's live session alone: no signal, no end, sessions.json as it was (257.437242ms)
|
||
✔ bus start --no-launch refuses every launch: the PM launch and a session's request, each logged, nothing spawned (204.255481ms)
|
||
✔ bus start --no-launch starts no thread tick; the same host with launches runs it (1183.549177ms)
|
||
✔ a malformed sessions.json refuses the host start with exit 3 and stays as it was (177.714887ms)
|
||
✔ an over-long launch request is refused at once, not at the 10 s idle timeout (186.229605ms)
|
||
✔ a launch client that never closes its side doesn't hold the host's close (195.662799ms)
|
||
✔ a runner that ignores SIGTERM is killed when the host closes (1367.612885ms)
|
||
✔ kill switch refuses chief and hire before launch work and a clear permits a later request (329.588606ms)
|
||
✔ kill switch stops an actual managed namespace and records the halt reason without rewriting its bundle (335.206663ms)
|
||
✔ a launch waiting across halt and resume cannot use its stale admission (202.629148ms)
|
||
✔ row 194 T2: the human's launch runs an unlisted instance and launch.by through the pm branch, and closes with the run (415.325355ms)
|
||
✔ row 194 T2: a request past its 60 s never launches, and a refused check closes the request with its code (78.591413ms)
|
||
✔ row 194 T3: a --no-launch host closes each request launches-disabled and starts nothing (75.445287ms)
|
||
✔ row 194 T3: a limit refusal closes the request with its code and the limit in the launch log (212.304673ms)
|
||
✔ row 194 T4: terminate revokes and cancels at the verb, then the pass signals the run, which ends once (273.95455ms)
|
||
✔ row 194 T5: regenerate ends the run in the registry and starts a new run on the same workspace (482.390203ms)
|
||
✔ row 194 T5: a run that outlasts the request's mark closes the regenerate regenerate-timeout and starts nothing (2758.028859ms)
|
||
✔ row 194 V5: delete retires the name, renames the workspace to .retired/I-<transaction> at 0700, and a retry renames after workspace-rename-failed (101.123568ms)
|
||
✔ row 194 V5: a delete with no workspace commits and closes with the transaction (90.247981ms)
|
||
✔ row 281 T10: the delete pass closes a granted instance's first request grants-revoking and the host channel stays up (98.62482ms)
|
||
✔ row 194 D1.1 item 5: the CLI's launch, regenerate, terminate and delete end to end through the pass, and a closed refusal exits 3 with the request id (581.077497ms)
|
||
✔ row 194 T20: a store-only delete with a tracker bot closes naming the bot, and the CLI says to remove it in Vikunja (98.742584ms)
|
||
✔ row 194 T2a: a launch.revoke between the request and the pass closes it launch-revoked with no process; a done that fails once leaves the request taken and the next pass starts nothing (231.533658ms)
|
||
✔ row 194 T4: terminate signals a spawned run in the registry that the bus never bound, and not a run whose start time differs (384.063232ms)
|
||
✔ row 194 T9a: fire signals its bound run and a spawned but unbound registry run; a SIGTERM-ignoring runner gets SIGKILL and lifecycle.end.killed, and one whose kill fails gets lifecycle.end.alive (1068.967733ms)
|
||
✔ row 194 T9a: fire of a registry run with no runtime record reads lifecycle.end.alive with reason unknown, never killed (525.05459ms)
|
||
✔ row 194 T9a: a runner whose identity changed before the SIGTERM gets no signal, and one whose identity changed between the SIGTERM and the SIGKILL gets no SIGKILL (208.192395ms)
|
||
✔ row 194 T9a: V3 terminate of a SIGTERM-ignoring runner sends no SIGKILL (987.989057ms)
|
||
✔ row 194 T9b: a halt during a fire's stop sends no second SIGTERM, keeps the fire's deadline, writes one stop receipt with reason fire and the request, and counts the run; a fire while halted refuses (1689.146692ms)
|
||
✔ row 194 T15: while halted the pass closes a launch and a regenerate processing-halted and runs no thread pass, terminate signals, and after a resume a launch starts (281.651305ms)
|
||
✔ row 194 N6: a run spawned after a terminate's verb survives its pass, and the next terminate ends it (513.766372ms)
|
||
✔ row 194 T6: a delete leaves the run evidence bytes unchanged, and the retired name refuses a create and a launch (288.514717ms)
|
||
✔ row 194 T11: two stack roots with the same business id; a launch, a terminate and a delete in one leave the other byte-identical (355.592448ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r504654c3daae","instance":"chief","turn":"dc6f47a5-535b-49f5-a568-a40f53722f75","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r504654c3daae","instance":"chief","turn":"d4df604a-967b-4ac1-b365-6efe324f8a80","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r504654c3daae","instance":"chief","turn":"43aa4d9b-3354-4db6-94ce-21a612af999a","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r504654c3daae","instance":"chief","turn":"3ac81fa9-315a-48fc-bab8-9c20758c5473","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r504654c3daae","instance":"chief","turn":"4814c034-ca1b-4d30-9cc2-fe8f3d759122","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r504654c3daae","instance":"chief","turn":"b2cd399b-6617-4987-9629-66f68916d506","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r504654c3daae","instance":"chief","turn":"15f09e60-bf26-4a46-9b97-4b58a36c66d2","source":"@none","code":"baseline-unknown"}
|
||
✔ row 194 D3 item 5: the chief's session hires with its tool and launches its hire in the same session, then fires it (1253.868112ms)
|
||
✔ REQ-LIMIT-3 REQ-LIMIT-4 formatTokens shows each limit counted, not enforced, or check failed, in reset path words (0.7076ms)
|
||
✔ REQ-LIMIT-2 row 126: any daily quota row adds one line after the list saying the count is this stack's own use (0.207418ms)
|
||
✔ REQ-LIMIT-3 the view prints the limits then the token lines; --json keeps tokens in the result (2.208325ms)
|
||
✔ REQ-LIMIT-3 reset reads the revision, then sends limits.set with one path per limit, a word per level (0.610244ms)
|
||
✔ REQ-LIMIT-3 reset with no path, or with --file, is refused before the bus (1.129802ms)
|
||
✔ migration needs no bus/config, prints whole converted document, is idempotent and never writes (12.607251ms)
|
||
✔ limits view/set use the human bus transport and pass only the explicit patch (1.545642ms)
|
||
✔ limits set passes an assistants patch through unchanged, and the usage names the key (0.843288ms)
|
||
✔ post-119 example and Jason fixture migrate with checked inherited models; wrong or absent config refuses (161.555803ms)
|
||
✔ plugins view/set use the human bus transport and pass only the explicit patch (vikunja:19/305) (1.730104ms)
|
||
✔ inbox --read marks one message by the id inbox prints, delivered or not, and leaves the rest unread (32.065173ms)
|
||
✔ inbox --read refuses an id that is not the human's, prints its code, still marks the rest and exits 2 (21.070486ms)
|
||
✔ inbox --read refuses an ambiguous or short prefix, names every match, reads nothing for them and marks the rest (0.770654ms)
|
||
✔ inbox --read-all marks every message the inbox walk lists, delivered or not, and inbox then shows 0 unread (672.878087ms)
|
||
✔ inbox --read stops on an error that is not about one message (0.606938ms)
|
||
✔ inbox --read and --read-all refuse bad combinations; other verbs refuse them (13.190046ms)
|
||
✔ the human names an instance, lists it, and talk's message.send reaches it by that name (23.616067ms)
|
||
✔ name and names refuse the wrong number of arguments with the usage (13.462268ms)
|
||
✔ zoned uses the IANA zone across DST (11.849424ms)
|
||
✔ each open blocking decision is DM'd once, across polls and a restart; non-blocking ones are not (23.612957ms)
|
||
✔ two blocking decisions get two DMs with different nonces (15.417007ms)
|
||
✔ the digest nonce differs per business and per day and fits Discord's 25 characters (0.167421ms)
|
||
✔ a failed DM is journaled, backs off, and is retried until it lands (15.428413ms)
|
||
✔ five definite refusals stop a DM: one gave-up line, one log line, and a restart keeps the count (17.971374ms)
|
||
✔ 429s, 5xx-style unknowns and refusals without a status never count toward the limit (21.13613ms)
|
||
✔ a crash between the fifth refusal and its gave-up line: the next poll appends it and sends nothing (15.379205ms)
|
||
✔ polled every POLL_MS against a permanent 403, a DM is sent at 0, 30, 60, 90 and 120 min and gives up only then (126.678706ms)
|
||
✔ a restart after the second refusal does not send before that refusal's 30 min are up (72.365321ms)
|
||
✔ the digest goes at 08:00 Chicago once a day, with blocking ones marked as DM'd (18.989193ms)
|
||
✔ a late start with no digest for the day sends one at once; an empty inbox gets one line (12.956482ms)
|
||
✔ an inbox read failure is logged and the next poll retries (0.598481ms)
|
||
✔ no Discord id reaches the journal or the log (13.487764ms)
|
||
✔ the journal: a torn tail is copied out and truncated, so an append after it reopens cleanly (1.681739ms)
|
||
✔ the journal: a crash between the copy and the truncate leaves a tail the next open repairs (1.986715ms)
|
||
✔ the journal: a whole file that is one torn line truncates to empty (1.093258ms)
|
||
✔ the journal: a malformed complete line refuses and leaves the file and any torn tail alone (0.407473ms)
|
||
✔ the journal: a loose file mode, a loose directory or a symlinked journal refuses (0.479003ms)
|
||
✔ the journal: a line with a wrong type refuses with exit 3 and names the field (1.752097ms)
|
||
✔ the journal: a symlinked directory refuses and says it is a link (0.285262ms)
|
||
✔ the journal: a dangling directory link, a parent that is a file and a journal that is a directory each refuse with exit 3 (0.430568ms)
|
||
✔ the journal: an append after the file was swapped for a symlink refuses and writes nothing through it (0.326819ms)
|
||
✔ the journal: a directory it cannot write or create refuses with exit 3 and names the path (0.424758ms)
|
||
✔ digest content stays within Discord's 2000 characters (0.237776ms)
|
||
✔ runLoop never overlaps ticks and stops after the one in flight (111.258062ms)
|
||
✔ processing halt prevents notifier reads and sends and fences the wait before delivery (23.73349ms)
|
||
✔ Q247: bootConfig omits tracker setup even with tracker variables left in the business (6.715546ms)
|
||
✔ Q247: trackerless business boots and registers no @sync credential (49.135897ms)
|
||
✔ Q247: Console business read works with tracker absent and shows no sync credential (1.689458ms)
|
||
✔ Q247: a present tracker with a missing token still refuses bus boot (10.880104ms)
|
||
✔ a human command refused with human-required prints the other-tree line and exits 3 (2.076112ms)
|
||
✔ a --tester command refused with tester-required prints the other-tree line and exits 3 (0.735069ms)
|
||
✔ other exit-3 refusals print no other-tree line (1.070266ms)
|
||
✔ the line names no path (0.091434ms)
|
||
✔ human halt/status/resume uses management transport without loading any channel (23.968003ms)
|
||
✔ halt refuses inside an agent before transport (10.829832ms)
|
||
✔ resume refuses inside an agent before transport (10.36179ms)
|
||
✔ unknown and partially stopped outcomes are never reported as a successful halt (10.843463ms)
|
||
✔ threads project resolution explains a business repository and falls back if its file cannot load (47.044149ms)
|
||
✔ project create prints the repository-name refusal and exits two without writing (17.080072ms)
|
||
✔ project init/check use declared business repo and never contact the bus (110.120849ms)
|
||
✔ project commands validate args and refuse undeclared projects and agent init (30.624238ms)
|
||
✔ project create and list validate their arguments before any bus call (34.519757ms)
|
||
✔ project dispatcher reaches the human CLI (90.774059ms)
|
||
✔ T3 end to end: publish under an approved decision sends the work commit to the agent's own fork and records it once (653.617234ms)
|
||
✔ T3 end to end: a fork the token can't reach is fork-unavailable, filed once, and nothing is recorded as allowed (403.659909ms)
|
||
✔ a bad branch or project refuses before the broker; a fork, user or ref in the request is ignored (467.894581ms)
|
||
✔ T3 end to end: two agents, one project, each lands on its own fork only; the upstream receives nothing (839.428812ms)
|
||
✔ T3: a push after checkPublish and before the lock refuses ref-moved; the fork receives nothing (520.241203ms)
|
||
✔ T3: a push recorded while the bus process pushes refuses decision-mismatch; only the decision's commit reached the fork (465.684952ms)
|
||
✔ row 237: two publishes race on one decision; the second refuses publish-busy and exactly one push reaches the fork (471.547027ms)
|
||
✔ sage-1440: the publishResult poll is bounded: publish-timeout, filed once, and nothing recorded (525.40535ms)
|
||
bus: publish 8f8d9eec-e389-4dea-8244-8b86307308cd: pushed after the git socket refused publish-timeout; recorded
|
||
✔ row 242: a retry after publish-timeout refuses publish-busy while the bus process's push runs; the late push is recorded and the decision pushes once (586.014108ms)
|
||
✔ C2-06 CLI replies reads revision and sends only the JSON settings to the human verb (1.877681ms)
|
||
✔ C2-06 CLI replies requires a file and refuses tester writes before a bus call (0.500004ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"rad8af455b2e5","instance":"assistant","turn":"bf5a0e53-6dac-4a2a-b582-8b5d5aef735a","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"raf7902f4a26e","instance":"assistant","turn":"c9d8fe68-111b-495a-a3ee-d3f981e028e8","source":"@none","code":"baseline-unknown"}
|
||
✔ row 306 REQ-LAUNCH-1 R4 a revoked run whose call lands before the SIGTERM ends stopped/0; a run the human stopped in the same window still ends session-invalid/22 (728.891863ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r03cc3c216413","instance":"assistant","turn":"0eb690e0-9322-42a4-82a6-2c4176aad472","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r2cadef02ecd0","instance":"assistant","turn":"a7cf132a-0d11-4962-8fea-8f10a8aec0ed","source":"@none","code":"baseline-unknown"}
|
||
✔ REQ-THREAD-2 T4 D7 D8 N6: a clear of a running session stops its drained run once, retires it on the run's end, and starts the successor fresh in its own namespace (936.529403ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r38bac8a2c72e","instance":"assistant","turn":"18f0d2c6-1e46-4bda-b7c1-36dedb9fce4d","source":"@none","code":"baseline-unknown"}
|
||
✔ REQ-THREAD-2 T4 D8: a successor start refused capacity-full is held, reported and logged once, and starts when capacity frees (4658.840014ms)
|
||
✔ REQ-THREAD-2 T4 D7 Q2: after a restart, a live survivor of the cleared run holds the clear at drained with no signal, and its exit lets it retire (503.113211ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r387fc03d9eaa","instance":"assistant","turn":"37e84d16-efd9-49cf-bc84-8ffafd6f8405","source":"@none","code":"baseline-unknown"}
|
||
✔ REQ-THREAD-2 T4 D7: a drained run that outlives the stop timeout makes the clear uncertain once, with one signal, and it retires on the run's end (1758.985039ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"rbab729e7115f","instance":"assistant","turn":"c20363dc-c5a0-4792-b895-89d453ed7595","source":"@none","code":"baseline-unknown"}
|
||
✔ REQ-THREAD-2 T4 T6: a bus unavailable at the exit proof and then at retirement holds the clear with no retirement, successor or launch, and it resumes when the bus is back (3041.530049ms)
|
||
✔ session list/show/open select one session without changing the saved default (4.663738ms)
|
||
✔ create requires a reusable operation key and returns the broker identity (1.112506ms)
|
||
✔ invalid/foreign session selection never falls back to the default or opens a session (2.411417ms)
|
||
✔ unsupported clear refuses with a reason and never opens or creates a replacement (0.657159ms)
|
||
✔ clear waits by operation reads only, keeps revision, then reports pending at 30s (0.8442ms)
|
||
✔ count output distinguishes exact zero, lower bounds and unavailable collection (0.177799ms)
|
||
✔ session CLI real broker: create/list/open keeps default and selectors isolated (25.191345ms)
|
||
✔ explicit --session on thread reads, opens and talk never drops the selected id (2.167988ms)
|
||
✔ repeating clear with a recorded operation queries it and never sends a new revision (0.403453ms)
|
||
✔ new CLI surface refuses forged agent identity before reaching transport (0.298819ms)
|
||
✔ cancel requires confirmation, uses the clear op and accepts cancelled before or after retirement (0.785155ms)
|
||
✔ cancelled operation is terminal: clear polling stops without another write (0.359459ms)
|
||
✔ routed message cancellation prints its stored receipt and never waits for a reply (0.478596ms)
|
||
✔ 272 N2: reusing another session clear key gives a precise refusal without a write (0.315849ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r59df8d7534de","instance":"assistant","turn":"c7ec5103-89ee-4732-be26-6eb9ec8ade50","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r63b5394a7453","instance":"assistant","turn":"bafaa4c0-88a9-41e2-9c57-ea84e9b18acf","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r003519bb247d","instance":"assistant","turn":"e7258880-5ca4-4db8-bfa5-16596329997e","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"re40801281f10","instance":"assistant","turn":"753c8173-085d-4c7e-b79a-b46fbd32508d","source":"@none","code":"baseline-unknown"}
|
||
✔ REQ-THREAD-2 REQ-LAUNCH-1 two sessions of one thread, and another thread's default, run at once, each with its own store and workspace; a restart of one resumes only that one (5978.201713ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r19f414e484ea","instance":"assistant","turn":"86a233d2-0adb-4adc-80e7-e5f79e5085aa","source":"@none","code":"baseline-unknown"}
|
||
✔ REQ-THREAD-2 REQ-LAUNCH-1 a legacy session resumes the thread's old store at the old in-sandbox cwd, in a workspace of its own (379.232472ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r67ca9716f6bb","instance":"assistant","turn":"f28a722b-7031-4c2f-90aa-67605f55b397","source":"@none","code":"baseline-unknown"}
|
||
✔ REQ-THREAD-2 REQ-LAUNCH-1 a live lock on a session workspace refuses session-workspace-busy before any checkout; a stale one is taken over (1508.28271ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"ree1df7823835","instance":"assistant","turn":"03155160-73ce-4b04-9509-a720e61c1768","source":"@none","code":"baseline-unknown"}
|
||
✔ REQ-THREAD-2 REQ-LAUNCH-1 a session start refuses legacy-run-live while an earlier host's sessionless run lives, and starts once it has exited (1627.173824ms)
|
||
✔ REQ-THREAD-2 REQ-LAUNCH-1 a symlinked session workspace root refuses session-workspace-unsafe and launches nothing (188.69083ms)
|
||
✔ REQ-THREAD-2 REQ-LAUNCH-1 a session workspace that holds the legacy workspace root refuses session-workspace-overlap and launches nothing (201.845872ms)
|
||
✔ REQ-THREAD-2 REQ-LAUNCH-1 a symlinked session store refuses thread-store-refused and makes no workspace (198.689528ms)
|
||
✔ REQ-THREAD-2 REQ-LAUNCH-1 a named session's start refuses processing-generation-changed, then processing-halted, after check() and before any spawn (336.039267ms)
|
||
✔ a copy carries every file the harness modules read from it (680.511069ms)
|
||
✔ shared copy: npm ci, pushed reachability, readonly/existing copy, webui delegation (533.568651ms)
|
||
✔ wrapper preserves Q81 lease and marker, rejects foreign/symlink; check uses effective roots (715.600615ms)
|
||
✔ row 190 N6: check --instance passes only when the wrapper exports the instance's MOSAIC_CONFIG (662.972158ms)
|
||
✔ bus unit copy/pm pins, install refuses all busy states and failed reads, drop-in refusal (807.243585ms)
|
||
✔ missing package manifest refuses before npm; npm failure removes the unpublished temp copy (382.176921ms)
|
||
✔ real pinned install loads bus and Console; same-copy mosaic talk passes proof, other trees refuse (3827.72625ms)
|
||
✔ bus status reads effective copy/pm/drop-ins without writes; check refuses an overridden ExecStart (620.099537ms)
|
||
✔ drop-ins in either override field and malformed metadata refuse; uninstall also checks --no-reload (406.944375ms)
|
||
✔ install never shows a template name on systemd 261; template drop-ins still refuse (363.964176ms)
|
||
✔ unlisted instance drop-in is found in another unit lookup directory; path discovery errors refuse (337.529126ms)
|
||
✔ inherited mosaic-.service.d override refuses without changing the unit (402.794986ms)
|
||
✔ inherited service.d override refuses without changing the unit (394.558818ms)
|
||
✔ inherited drop-in unreadable directory or file refuses before writing (345.566139ms)
|
||
✔ row 232: copy --bundle copies a SHA the bundle's refactor reaches, byte-identical to copy SHA, and refuses the rest (2250.760496ms)
|
||
✔ row 232: wrapper --create writes the first wrapper only, the same bytes wrapper ID writes, and refuses over any file (810.434767ms)
|
||
✔ row 232: check --units external reads the system units, the default reads the user units (601.915366ms)
|
||
✔ Vikunja 614: bundle and checkout copy leave an unreadable caller directory before find (1052.793746ms)
|
||
▶ T-I1 bootstrap --instance creates each instance's config, root and marker once, and refuses what it must not claim
|
||
✔ alpha and beta get a 0700 config dir, a config naming ~/.mosaic-NAME, a 0700 root and a 0644 marker (62.702884ms)
|
||
✔ under umask 077 the config and marker are 0600: the source honors the operator's umask (29.296712ms)
|
||
✔ a second bootstrap of each changes no byte, mode or mtime (113.994174ms)
|
||
✔ a non-empty root without its own marker refuses before anything is written, worktrees included (115.687924ms)
|
||
✔ an empty existing root is claimed, and an existing config whose root lost its marker refuses, not repairs (59.542183ms)
|
||
✔ a dangling symlink at the config path is never written through, named or default (56.591979ms)
|
||
✔ bad names and stray arguments exit 4 and write nothing (381.183257ms)
|
||
✔ --instance dev writes exactly what no flag writes (53.640419ms)
|
||
✔ T-I1 bootstrap --instance creates each instance's config, root and marker once, and refuses what it must not claim (874.370243ms)
|
||
▶ T-I2 selection: the four rows of D1 through the instance op and through an entry point
|
||
✔ row 1: no flag and no MOSAIC_CONFIG is the default; a missing default config leaves the data root empty (48.236489ms)
|
||
✔ row 2: MOSAIC_CONFIG alone is that config with the default names (24.672104ms)
|
||
✔ row 3: --instance NAME alone is NAME's config, root and suffix (51.545574ms)
|
||
✔ row 4: both must name one file; a symlink to it agrees, any other file exits 4 (340.85859ms)
|
||
✔ a named instance with no config exits 3 with its own bootstrap hint (25.840276ms)
|
||
✔ an entry point takes --instance in any position, once, and refuses a mismatch before it prints (168.181902ms)
|
||
✔ copy takes no --instance in either script: every instance shares the copies (15.900765ms)
|
||
✔ T-I2 selection: the four rows of D1 through the instance op and through an entry point (733.2392ms)
|
||
▶ T-I7 claims: the instance op refuses a root another instance claims, and a named root with no marker
|
||
✔ alpha's config pointing at beta's root refuses instance-root-mismatch in every op (122.780839ms)
|
||
✔ MOSAIC_CONFIG naming alpha's config with no flag refuses: the root is alpha's (26.158341ms)
|
||
✔ a default config whose root carries alpha's marker refuses; one naming dev, or none, passes (76.787909ms)
|
||
✔ a named root whose marker is missing, a symlink, unparsable or the wrong shape refuses instance-root-unclaimed (212.606594ms)
|
||
✔ T-I7 claims: the instance op refuses a root another instance claims, and a named root with no marker (497.564551ms)
|
||
✔ T-I5 two real bus hosts, one per instance, run at once and each answers from its own socket under its own root (1356.98967ms)
|
||
✔ T-I10 the guard protects every instance's config dir and data roots, even under a corrupt config (83.355511ms)
|
||
✔ row 232: confirm, revert, gate, --to and --expect-from need --units external; the user-only flags are usage under it, and so are row 273's --send and --no-sso (896.605115ms)
|
||
✔ row 232: pm-on and activate --pm-after-harness refuse external-pm (924.052884ms)
|
||
✔ row 232: units-running (N4) refuses while a unit is active and leaves the store, the log and TAKEN; failed counts as down (1851.562675ms)
|
||
✔ row 232: activate stages: the pointer stays, AWAITING-UNITS names TO, a backup of the stopped store, no directory in the set, no --user, no journal (1558.20053ms)
|
||
✔ row 232: A3 order: capture-failed and marker-failed refuse with exit 3 and leave no marker or FAILED (1642.339138ms)
|
||
✔ row 232: confirm and revert refuse open-activation with no marker, two, the wrong copy, or one the log holds closed; refusals name no activation (3367.392109ms)
|
||
✔ row 232: confirm polls: bus status good after 3 s fails with --timeout 1, writes FAILED and leaves the rest; FAILED then refuses activation-failed (2055.598212ms)
|
||
✔ row 232: confirm polls to a pass with --timeout 10: the pointer, an ok line that reads as the started run, no marker (5468.635824ms)
|
||
✔ row 232: stale-start: @1792540799 fails a start floor of 1792540800 with stale-start (2935.793963ms)
|
||
✔ row 232: stale-start is a gate code: an enter time that turns to @1792540800 after 2 s passes with --timeout 10 (4250.628822ms)
|
||
✔ row 232: gate (N2, A2f): --since 1792540800 passes @1792540800 and fails @1792540799; it writes nothing (2605.137268ms)
|
||
✔ row 232: the external PM check reads launches list: one live run of launch.by since the start passes (10691.16757ms)
|
||
✔ row 232: revert puts the wrapper back and leaves the store when nothing migrated (1427.536597ms)
|
||
✔ row 232: confirm --rollback refuses rollback-mismatch, and logs rollback-failed with exit 2 when OLD fails its gate (3453.927243ms)
|
||
✔ row 232: confirm --rollback after a --restore swap logs rollbackCode not-attempted; rollback --restore finds an external backup (3154.760774ms)
|
||
✔ row 232: sequence 1: activate, confirm times out, revert, confirm --rollback --cause A5: gate-failed rollback ok (4721.992669ms)
|
||
✔ row 232: sequence 2: activate --migrate, the wrapper install fails, revert restores TAKEN, confirm --rollback --cause A3 (2950.81541ms)
|
||
✔ row 232: sequence 3: activate, root's A4 fails, revert, confirm --rollback --cause A4: failed code units-start (2764.50291ms)
|
||
✔ row 232: sequence 4: a capture failure leaves nothing open, then A2f's gate OLD writes nothing (1851.579549ms)
|
||
✔ row 232: sequence 5: a confirm of the wrong copy is refused, and revert and confirm --rollback still close the activation (3245.942365ms)
|
||
✔ row 232: sequence 6: a revert that fails leaves the activation open, and the next --plan refuses interrupted-run (1729.249136ms)
|
||
✔ row 232: sequence 7: adopt, two confirmed activates, rollback --to the previous copy, confirmed, logs op rollback (7148.576104ms)
|
||
✔ row 232: sequence 8: a migration that writes and fails: revert restores the backup byte for byte, confirm --rollback --cause A3 (2790.712744ms)
|
||
✔ row 232: user mode: every systemctl call carries --user, and activate, rollback and check make the base's calls (6298.161023ms)
|
||
✔ row 232: user mode: a default activate --plan prints the base's bytes (2163.141107ms)
|
||
✔ T1 adopt writes the pointer from the units once; a failing check refuses check-failed (1223.375223ms)
|
||
✔ T2 activate installs exactly the pointer's pm, claude and Console flags (1868.891695ms)
|
||
▶ T3 a hand-edited unit refuses unit-flags-drift, names the difference and changes nothing
|
||
✔ pm (811.558039ms)
|
||
✔ claude (881.802811ms)
|
||
✔ console (811.560619ms)
|
||
✔ T3 a hand-edited unit refuses unit-flags-drift, names the difference and changes nothing (2505.69486ms)
|
||
▶ T4 each item 3 refusal changes nothing and logs one line with its code
|
||
✔ copy-missing (701.876924ms)
|
||
✔ copy-unreachable (708.244659ms)
|
||
✔ copy-schema-unknown (718.830913ms)
|
||
✔ already-active (724.278564ms)
|
||
✔ instance-busy (another business active) (728.62484ms)
|
||
✔ instance-busy (this business activating) (752.537703ms)
|
||
✔ drop-in-override (764.281067ms)
|
||
✔ no-pointer (399.325731ms)
|
||
✔ T4 each item 3 refusal changes nothing and logs one line with its code (5499.359167ms)
|
||
✔ T5 an activate with no migration stops the Console then the bus, installs, starts the bus then the Console (1851.855632ms)
|
||
✔ T6 a migration without --migrate rolls back with migration-needs-flag (1726.61819ms)
|
||
✔ T7 --migrate takes the backup before the migration runs (1905.603872ms)
|
||
✔ T8 a failed migration restores the backup and keeps the store it replaced (1916.096027ms)
|
||
✔ T9 a store outside the target's chain rolls back with store-newer (1724.296806ms)
|
||
▶ T10 each gate check failing alone rolls back and puts every file back
|
||
✔ units-inactive (5200.081875ms)
|
||
✔ bus-status (5588.784926ms)
|
||
✔ healthz (4709.683354ms)
|
||
✔ copy-check (4923.419495ms)
|
||
✔ pm-launch-unconfirmed (5078.800679ms)
|
||
✔ T10 each gate check failing alone rolls back and puts every file back (25501.690506ms)
|
||
▶ T10b the PM check needs exactly one launched line for a live run of this start
|
||
✔ no launched line (5091.504822ms)
|
||
✔ two lines (5052.951049ms)
|
||
✔ a changed word (5135.880426ms)
|
||
✔ run not in launches list (5305.033059ms)
|
||
✔ run started before the start (6498.218055ms)
|
||
✔ a human launch with no journal line (5013.702191ms)
|
||
✔ run for another business (5198.809355ms)
|
||
✔ run not live (5221.714485ms)
|
||
✔ one well-formed line and a live run pass (1915.02132ms)
|
||
✔ T10b the PM check needs exactly one launched line for a live run of this start (44434.370675ms)
|
||
✔ T11 a rollback whose gate fails too: rollback-failed, exit 2, both units stopped, no retry (7014.319781ms)
|
||
✔ T12 rollback takes the previous copy from the log (3284.316748ms)
|
||
✔ T13 a rollback across a migration needs --restore, then restores and goes live (3731.426254ms)
|
||
✔ T14 events written after the backup need --events N with the right N (4212.508257ms)
|
||
✔ T14b a rollback --restore whose gate fails stops both units and skips item 6 (5633.353942ms)
|
||
✔ T14c a rollback without --restore whose gate fails runs item 6 (5905.838533ms)
|
||
✔ T15 --plan names the migration and the restore and changes nothing (2451.026322ms)
|
||
✔ T26 --plan lists the commits an activate adds, after the migration lines (1404.317015ms)
|
||
✔ T27 --plan names each migration step, or says the steps cannot be read (1094.803331ms)
|
||
✔ T25 --plan refuses copies-unrelated when neither copy is an ancestor of the other (522.065691ms)
|
||
▶ T23 --plan reads the store without changing a file, stopped or held
|
||
✔ stopped store (606.641691ms)
|
||
✔ held store (625.595577ms)
|
||
✔ T23 --plan reads the store without changing a file, stopped or held (1232.771999ms)
|
||
✔ T24 business-mismatch and capture-failed refuse with exit 3; a short id is a usage error (1375.11563ms)
|
||
✔ T16 status prints the pointer, the log, the check, bus status and drift, and writes nothing (849.946449ms)
|
||
✔ T19 a started line with no final line: status shows it and every changing verb refuses (1186.6703ms)
|
||
✔ T20 a held run lock refuses run-locked without a log line; status and --plan still run (1295.84212ms)
|
||
✔ T21 a bus unit with no MOSAIC_CLAUDE_BIN: adopt and activate refuse no-claude-pin (1425.129783ms)
|
||
▶ T22 the stopped store read: a -wal or -shm refuses store-unclean and is left alone; a clean read adds no file
|
||
✔ bus.sqlite-wal (1753.751105ms)
|
||
✔ bus.sqlite-shm (1754.327081ms)
|
||
✔ clean (1912.188236ms)
|
||
✔ T22 the stopped store read: a -wal or -shm refuses store-unclean and is left alone; a clean read adds no file (5420.936241ms)
|
||
▶ T28 a unit path, drop-in directory or drop-in file that cannot be read, or a relative unit path, refuses drop-in-override before any stop
|
||
✔ unit path (788.92044ms)
|
||
✔ drop-in directory (811.414297ms)
|
||
✔ drop-in file (797.678707ms)
|
||
✔ relative unit path (903.178544ms)
|
||
✔ T28 a unit path, drop-in directory or drop-in file that cannot be read, or a relative unit path, refuses drop-in-override before any stop (3301.981298ms)
|
||
▶ T29 a bus that stops during the held-store read: --plan says so, rollback --restore refuses restore-mismatch
|
||
✔ --plan (854.887599ms)
|
||
✔ rollback --restore (2408.544894ms)
|
||
✔ T29 a bus that stops during the held-store read: --plan says so, rollback --restore refuses restore-mismatch (3263.91623ms)
|
||
✔ T30 a copy check that agrees on another copy fails the gate with copy-check and rolls back (4691.74826ms)
|
||
▶ T31 a quoted or escaped Environment= or ExecStart= is unreadable: refusals by name, nothing read from /a
|
||
✔ Environment double quotes (1662.681326ms)
|
||
✔ Environment single quotes (1673.508397ms)
|
||
✔ Environment backslash (1675.149649ms)
|
||
✔ ExecStart quotes (1654.001027ms)
|
||
✔ Console ExecStart quotes (1664.84021ms)
|
||
✔ T31 a quoted or escaped Environment= or ExecStart= is unreadable: refusals by name, nothing read from /a (8331.079522ms)
|
||
▶ T32 item 1: --pm-after-harness refuses a target without harness or a file that sets it, and passes without the PM
|
||
✔ usage: not with --pm, and only for activate (626.737914ms)
|
||
✔ pm-after-harness-target (890.656491ms)
|
||
✔ pm-after-harness-set (1260.203883ms)
|
||
✔ a pointer without pm (822.163134ms)
|
||
✔ phase 1 installs without --pm, skips pm_launched and writes the pending pointer (1945.410181ms)
|
||
✔ T32 item 1: --pm-after-harness refuses a target without harness or a file that sets it, and passes without the PM (5546.046813ms)
|
||
▶ T33 item 2: read_pointer takes pmPending only as true beside pm false; a pending pointer refuses activate and shows in status
|
||
✔ read_pointer (1490.110552ms)
|
||
✔ pm-pending, already-adopted and the status line (2744.998743ms)
|
||
✔ T33 item 2: read_pointer takes pmPending only as true beside pm false; a pending pointer refuses activate and shows in status (4235.600355ms)
|
||
▶ T34 item 3: pm-on refuses before any stop, passes with the PM, or puts the phase-1 bus back
|
||
✔ not-pending (706.432544ms)
|
||
✔ harness-unset (2316.91372ms)
|
||
✔ a launched line passes: the bus alone restarts with --pm (3227.480497ms)
|
||
✔ a failed pm_launched puts the phase-1 unit back: exit 1, still pending (5971.874376ms)
|
||
✔ a failed phase-1 gate too: pm-on-down, exit 2, both units stopped (10222.77064ms)
|
||
✔ T34 item 3: pm-on refuses before any stop, passes with the PM, or puts the phase-1 bus back (22446.448213ms)
|
||
▶ T35 item 4: rollback from pending installs --pm; a plug-in kind the target lacks refuses by name
|
||
✔ rollback from pending gates pm_launched on the old copy (3251.735778ms)
|
||
✔ after the harness set, rollback refuses until harness is gone (4621.937194ms)
|
||
✔ activate names every kind the target lacks (1165.433939ms)
|
||
✔ T35 item 4: rollback from pending installs --pm; a plug-in kind the target lacks refuses by name (9039.729543ms)
|
||
✔ T36 --plan shows the pending state and lists the row 169 refusals it can see (3281.667352ms)
|
||
✔ T37 tester-port activate writes pointer and unit, replaces the port, and supported re-pin and rollback keep it (6259.024745ms)
|
||
✔ T38 tester-port rollback to unsupported target drops flag in plan, steps, unit and pointer (3396.589967ms)
|
||
✔ T39 tester-port explicit unsupported target reads target copy and refuses before stopping either unit (718.571466ms)
|
||
✔ T40 tester-port invalid values refuse exit 4 before stopping, including tunnel and main ports (756.477153ms)
|
||
✔ T41 tester-port inherited activate to unsupported target drops it and retains drift refusal and failed-run recovery (8125.594722ms)
|
||
✔ T42 tester-port pm-on preserves pointer Console flags (2950.495624ms)
|
||
▶ T43 row 180 item 1: runs in one second get distinct activation ids, rollback sets and post-attempt stores
|
||
✔ activate then pm-on on the same copy (3019.812017ms)
|
||
✔ two restores: an old-form id and a suffixed one, each with its own post-attempt store (6148.990777ms)
|
||
✔ adopt takes the next free id too (593.324669ms)
|
||
✔ all ten names taken: capture-failed before anything stops, and the log line names no activation (923.41709ms)
|
||
✔ --restore takes an id with or without -1 to -9 and nothing else (963.68755ms)
|
||
✔ T43 row 180 item 1: runs in one second get distinct activation ids, rollback sets and post-attempt stores (11650.209576ms)
|
||
▶ T44 row 180 item 2: --plan lists tester-port-invalid and tester-port-target with its other refusals
|
||
✔ a bad tester port (2076.249675ms)
|
||
✔ without --plan a bad port is usage before any pointer read (350.092997ms)
|
||
✔ a target Console without --tester-port (965.5447ms)
|
||
✔ T44 row 180 item 2: --plan lists tester-port-invalid and tester-port-target with its other refusals (3392.541847ms)
|
||
▶ T45 row 181 items 2 and 3: the restore guard counts events and every COUNTED table
|
||
✔ both modes count events and each listed table, and a table the store lacks counts 0 (1121.525931ms)
|
||
✔ one instance_names row and no event refuses before any stop; --events 1 restores (4232.351272ms)
|
||
✔ one usage_records row and no event refuses before any stop; --events 1 restores (4220.912393ms)
|
||
✔ a listed table that cannot be read refuses restore-mismatch before any stop (2341.218249ms)
|
||
✔ the in-run recount counts the listed tables too (3253.783813ms)
|
||
✔ T45 row 181 items 2 and 3: the restore guard counts events and every COUNTED table (15170.761279ms)
|
||
✔ T46 row 181 item 4: every table in the bus schema is in exactly one of four lists (3.849039ms)
|
||
✔ T47 row 185 test 1: a same-schema activate leaves a whole backup and the log line names it (1870.524076ms)
|
||
✔ T48 row 185 test 2: a gate failure on a same-schema activate rolls back without a restore (5887.667015ms)
|
||
▶ T49 row 185 test 3: a same-schema rollback --restore restores, or refuses rows written after STAMP
|
||
✔ no rows after STAMP: restores and goes live (3322.518318ms)
|
||
✔ one instance_names row after STAMP refuses post-backup-events; --events 1 restores (3742.071036ms)
|
||
✔ T49 row 185 test 3: a same-schema rollback --restore restores, or refuses rows written after STAMP (7065.114075ms)
|
||
✔ T50 row 185 test 4: activate --plan prints the backup line and writes nothing (2416.184248ms)
|
||
✔ T51 row 185 test 5: an activate with no store file takes no backup (2005.837116ms)
|
||
▶ T52 row 186: the activate plan's backup line says what the run will do
|
||
✔ same schema (2194.145777ms)
|
||
✔ same schema with --migrate (2196.817061ms)
|
||
✔ in chain with --migrate (2428.502495ms)
|
||
✔ in chain without --migrate (2033.088187ms)
|
||
✔ outside the chain (2067.892947ms)
|
||
✔ outside the chain with --migrate (2234.893255ms)
|
||
✔ T52 row 186: the activate plan's backup line says what the run will do (13156.564467ms)
|
||
✔ T178 proxy proof header and path survive re-pin and rollback unchanged in the pointer and unit (3436.305599ms)
|
||
✔ T178 proxy proof pair survives a tester-port replacement as well (2056.970377ms)
|
||
▶ T53 row 187: activate sets, carries and drops the proof pair
|
||
✔ tests 1 and 9: the pair goes after the preview flags, before --send and the kept --tester-port, as the unit renders it; a new pair replaces it (5734.035686ms)
|
||
✔ tests 2 and 3: an activate of the live copy writes the pair; a later activate and a rollback carry it (5081.12075ms)
|
||
✔ test 2: only a pair change may name the live copy; the log keeps from and to, and rollback still goes to the earlier copy (6615.392064ms)
|
||
✔ test 2: a live-copy activate says only the Console flags change, and backs up the stopped store before it installs (4041.516975ms)
|
||
✔ test 3: pm-on keeps the pair (3081.392781ms)
|
||
✔ test 4: --no-proof drops the pair from the pointer and the unit and says so; with no pair it says so and passes (5658.277766ms)
|
||
✔ test 5: each refusal exits 3 before anything stops (3810.791622ms)
|
||
✔ tests 5 and 9: --plan lists every proof refusal with the others and writes nothing (886.091937ms)
|
||
✔ test 6: usage errors (802.216249ms)
|
||
✔ test 7: a rollback to a copy without proof support drops the pair and says so (3435.49001ms)
|
||
✔ test 7: an activate to a copy without proof support refuses proof-target without --no-proof and passes with it (3872.856718ms)
|
||
✔ T53 row 187: activate sets, carries and drops the proof pair (43021.284803ms)
|
||
▶ T54 row 188: a carried pair gets the proof file checks, and a proof file inside the repository refuses
|
||
✔ test 1: an activate that carries the pair refuses after chmod 644, in the plan and the run, before anything stops (2370.347465ms)
|
||
✔ test 1: an activate that carries the pair refuses after a symlink to a mode-600 file, in the plan and the run, before anything stops (2452.089225ms)
|
||
✔ test 1: an activate that carries the pair refuses after removal, in the plan and the run, before anything stops (2385.550707ms)
|
||
✔ test 2: a rollback that carries the pair refuses after chmod 644, in the plan and the run, before anything stops (2419.803919ms)
|
||
✔ test 3: a proof file inside the repository refuses, in the plan and the run, before anything stops (1084.199654ms)
|
||
✔ test 4: a path outside the repository through a directory symlink into it refuses on its realpath (1065.385411ms)
|
||
✔ T54 row 188: a carried pair gets the proof file checks, and a proof file inside the repository refuses (11778.59175ms)
|
||
▶ T55 row 189: activate --no-send drops --send, and rollback and pm-on carry it off
|
||
✔ test 1: a live-copy --no-send drops --send from the pointer and the unit, keeps the rest in order, logs the step and backs up the stopped store (2188.910782ms)
|
||
✔ test 2: a plain live-copy activate still refuses already-active, and so does --no-send once --send is gone (3201.18874ms)
|
||
✔ test 3: --plan prints one send: line in each case, with the live-copy note on a same-copy run (4721.558919ms)
|
||
✔ test 4: after --no-send, a rollback to the earlier copy leaves --send out of the pointer and the unit (3382.70946ms)
|
||
✔ test 4: pm-on after --no-send keeps --send off (3220.467059ms)
|
||
✔ test 5: --no-send on rollback, pm-on, status, adopt or rehearse is a usage error (664.378295ms)
|
||
✔ test 6: with both a pair and --send in the pointer, --no-send and --no-proof each drop what they name and keep the rest (10421.842413ms)
|
||
✔ T55 row 189: activate --no-send drops --send, and rollback and pm-on carry it off (27802.341188ms)
|
||
▶ T57 row 200: activate --sso, its refusals before any stop, and the rollback to a Console without --sso
|
||
✔ item 1: --sso drops the preview set and the pair, puts --sso before --send and the tester port, and the plan names what it drops and carries (3920.659872ms)
|
||
✔ item 1: --sso may re-pin the live copy once; later activates carry it; --no-send still drops --send (9133.916663ms)
|
||
✔ item 1: --sso with a pair or --no-proof, or on any verb but activate, is a usage error (740.714867ms)
|
||
✔ item 2: a target without --sso, a missing or bad console.sso, and each slot problem refuse before any stop (5815.60056ms)
|
||
✔ item 3: a config whose console key the target loader refuses stops an activate or a rollback before any stop, naming the first step (4459.830493ms)
|
||
✔ row 203: a config whose federation key the target loader refuses stops an activate or a rollback before any stop, naming the first step (3805.910465ms)
|
||
✔ item 3: a rollback from --sso to a Console without it takes the flags from the set of the activation onto the copy, past a same-copy re-pin (sage-1389) (11479.71026ms)
|
||
✔ item 3: a rollback set that is missing, fails its sums, holds no argv or already ran --sso refuses sso-rollback-flags (4482.959767ms)
|
||
✔ round 2 (webby-0028 N1): run through a symlinked repository path, a slot or a proof file inside the repository still refuses (2315.663344ms)
|
||
✔ round 2 (webby-0028 N2): a config.json that does not parse stops the run before anything is read or stopped (2084.526004ms)
|
||
✔ round 3 (sage-1556): a named instance turns --sso on with its own config, slot and Console unit, and rolls back from its own set (4327.3678ms)
|
||
✔ row 238 (#1744): on a named instance the sso-config first step names --instance NAME in both commands (1064.476645ms)
|
||
✔ T57 row 200: activate --sso, its refusals before any stop, and the rollback to a Console without --sso (53633.555899ms)
|
||
▶ T58 row 273: activate --send and --no-sso
|
||
✔ T1: --sso --send turns send on after --sso and before the tester port, and the plan says so (2675.104985ms)
|
||
✔ T1: --send beside a carried --sso re-pins the live copy once, and the plan names the carried --sso (4399.406557ms)
|
||
✔ T2: --send without --sso, given or carried, refuses before any stop, and --plan lists it (2002.689338ms)
|
||
✔ T2 (sage-2315 B1): a rollback from an --sso --send pointer to a Console without --sso ends with neither flag (3861.326335ms)
|
||
✔ T2 and T4: --send with --no-send, --no-sso with --sso, --send, a pair or --no-proof, and either flag on another verb, is a usage error (2215.124087ms)
|
||
✔ T3: --no-sso on the same copy returns the unit and the pointer to the flags from before --sso, without --send (5383.0107ms)
|
||
✔ T3: the set walk passes later re-pins that ran with --sso, and the tester follows the pointer (5253.1263ms)
|
||
✔ T3 (sage-2305 a): after --sso, two later re-pins that carry it, then --no-sso restores the flags from before --sso byte for byte (8019.672253ms)
|
||
✔ T4 (sage-2305 b): a log in which every set holds a Console with --sso refuses before any unit stops (3770.702351ms)
|
||
✔ T4: --no-sso refuses before any stop on a pointer without --sso, a tampered or missing set, a set that ran with --sso, an ok line with no activation, and a log with no set (5678.144025ms)
|
||
✔ T58 row 273: activate --send and --no-sso (43260.177035ms)
|
||
✔ R1 rehearse passes on the same schema; the scratch root holds its files and the live files stay byte-identical (2434.307557ms)
|
||
✔ R2 rehearse runs the migration checks when the schema differs; the live store stays at 3g (3553.003378ms)
|
||
✔ R3 a failing migration gives REHEARSAL_FAIL migrate and starts nothing (370.752708ms)
|
||
✔ R4 a host that does not start, does not answer status, reports another pid, launches anyway, makes a launches directory or keeps its lock each fails by name (25510.620694ms)
|
||
✔ R5 a host that ignores SIGTERM gets SIGKILL and FAIL host-stopped (4445.236727ms)
|
||
✔ R6 a Console that does not answer /healthz gives REHEARSAL_FAIL healthz (3530.801053ms)
|
||
✔ R7 a host on another copy fails copy-match (5644.146772ms)
|
||
✔ R8 a scratch port in use or reserved refuses, and the rehearsal takes no other port (513.409036ms)
|
||
✔ R9 mos-0963: a role reference left outside placeholders/, or left on an env variable, fails credential-ref-live before the host starts (738.100338ms)
|
||
✔ R10 mos-0962: a scratch business that still sets a tracker fails tracker-configured (353.076219ms)
|
||
✔ R11 mos-0961: a scratch config on the live data root or on any root but the scratch one, or a sessions.json naming a running pid, refuses by name (1432.469121ms)
|
||
✔ R12 mos-0962: a notifier config with a binding fails notify-off (352.627439ms)
|
||
✔ R13 the pre-checks: an old copy, a backup that fails its sums, a missing backup or pointer, and usage (488.322887ms)
|
||
✔ R14 a host that writes the live config, the live business file or the backup fails the end check by name (10319.676712ms)
|
||
✔ R15 a rehearsal stopped by TERM, INT or HUP fails signal and still stops the host and Console and runs the end checks (9999.254442ms)
|
||
✔ row 233: --backup last takes the newest backup the log records; a later line with backup null does not hide it, and the store line names it (2452.292573ms)
|
||
✔ row 233: --backup last with no backup in the log, or no log, exits 3 with no-backup and makes no rehearsal directory (201.075279ms)
|
||
✔ row 233: --backup last refuses a newest backup that is not an activation id, with exit 1 (119.92266ms)
|
||
▶ T56 row 190: named instances side by side on one unit directory, $BIN and set of stand-ins
|
||
✔ T-I3 each instance renders its own config, session env and Description, and nothing of another (1534.453269ms)
|
||
✔ T-I4 a Console port another installed Console takes refuses port-claimed, and a named instance keeps off the default ports (2012.693636ms)
|
||
✔ T-I6 alpha's activate and rollback reach nothing of beta's (4068.498285ms)
|
||
✔ T-I6 swapped: beta's reach nothing of alpha's (4065.562783ms)
|
||
✔ T-I7 MOSAIC_CONFIG naming alpha's config with no flag refuses instance-root-mismatch and changes nothing (687.673555ms)
|
||
✔ T-I9 another instance's bus active refuses nothing; one of this instance's does (6019.50343ms)
|
||
✔ T56 row 190: named instances side by side on one unit directory, $BIN and set of stand-ins (18389.716915ms)
|
||
✔ row196 explicit socket conversion refuses inherited TCP before stop and rollback disables socket (6103.352377ms)
|
||
✔ row196 SSO socket conversion pins pointer and unit argv order without send (2303.327026ms)
|
||
▶ row196 interpreter activation checks receipt, identity, plan and startup log
|
||
✔ plan and started log preserve the same interpreter JSON (2257.063649ms)
|
||
✔ interpreter-receipt-refuse fails at the gate and restores the pointer (3466.644996ms)
|
||
✔ interpreter-drift fails at the gate and restores the pointer (3383.653673ms)
|
||
✔ missing-verifier refuses before any start or stop (1060.181161ms)
|
||
✔ interpreter-unsafe refuses before any start or stop (1063.621128ms)
|
||
✔ row196 interpreter activation checks receipt, identity, plan and startup log (11232.520867ms)
|
||
▶ row196 rehearsal selects socket only for marked copies and uses scratch dataRoot
|
||
✔ socket copy (3432.798578ms)
|
||
✔ legacy copy (3435.642968ms)
|
||
✔ row196 rehearsal selects socket only for marked copies and uses scratch dataRoot (6869.079186ms)
|
||
✔ config-any-key: a non-console target refusal stops activate and rollback before any stop (2853.001844ms)
|
||
✔ config-any-key: a pre-270 target refuses each row 270 key on a full activate and rollback, naming the key (4547.170039ms)
|
||
✔ config-any-key: accepting loaders run validate with the selected config on activate and rollback (3141.470618ms)
|
||
✔ config-any-key: missing-loader copies accept only the four oldest keys (126.998602ms)
|
||
✔ config-any-key: missing config passes but malformed JSON refuses without calling the loader (46.157654ms)
|
||
✔ row 233: sequence 1: confirm fails healthz, the driver reverts, renders the old copy and confirm --rollback --cause A5 passes: exit 1 (6381.994653ms)
|
||
✔ row 233: sequence 2: activate --migrate fails at the wrapper, revert restores the store, confirm --rollback --cause A3: exit 1 (3397.721959ms)
|
||
✔ row 233: sequence 3: root's render of the new copy fails, the driver rolls back with --cause A4, and holds the lock to the end: exit 1 (3183.127607ms)
|
||
✔ row 233: sequence 4: a capture failure is exit 3 from the stage, and A2f restarts the old units and gates them: exit 1 (2385.565595ms)
|
||
✔ row 233: N1: a bus that outlives A2's timeout keeps its old start, so A2f's gate fails stale-start: exit 2, both units stopped (7142.144987ms)
|
||
✔ row 233: sequence 5: confirm of the wrong copy is refused, and the driver rolls back with --cause A5: exit 1 (3687.405189ms)
|
||
✔ row 233: sequence 6: a revert that fails stops both units at exit 2, and the next run refuses at its --plan with nothing stopped (2931.803084ms)
|
||
✔ row 233: sequence 7: two upgrades and a rollback --to the previous copy with --restore, the args file following each confirm (7521.076718ms)
|
||
✔ row 240: I3 N1: a failed args move after A5 exits 5 args-failed, the new copy live and confirmed and both args files kept (2887.532732ms)
|
||
✔ row 233: sequence 8: a migration that writes and fails: the driver reverts to the backup byte for byte, --cause A3: exit 1 (3276.448791ms)
|
||
✔ row 233: a second run while the lock is held refuses upgrade-running with one log line and no call (740.888427ms)
|
||
✔ row 233: A1 refuses open-activation on any AWAITING-UNITS file, through the stack's user's --plan, with nothing stopped (1143.099486ms)
|
||
✔ row 233: a target that migrates refuses migrate-required without --migrate, with nothing stopped (1126.679444ms)
|
||
✔ row 233: the rehearsal runs after the plan and before A2; a failed one refuses rehearsal-failed with nothing stopped (1176.144705ms)
|
||
✔ row 233: the rehearsal's BACKUP_STORE line goes to the step log after a match, a malformed one as none, the rest of its output never (3051.142631ms)
|
||
✔ row 233: a real rehearsal with no backup in the log refuses no-backup, and goes on only with --no-rehearsal, which logs the skip (3631.136331ms)
|
||
✔ row 233: a real rehearsal after an upgrade names the log's newest backup; --no-rehearsal with a backup refuses rehearsal-required (4020.960953ms)
|
||
✔ row 233: the args file must be the running user's, with no group or other write, one --copy, and the copy the units run (904.183444ms)
|
||
✔ row 233: hostcheck (row 240): a nonzero --check or a missing file refuses profile-drift before the plan (1033.25899ms)
|
||
✔ row 233: the checkout must be at --sha (head-mismatch), and a commit the clone can't fast-forward to refuses fetch-failed (1129.965812ms)
|
||
✔ row 233: usage exits 4 before any log or lock (706.460112ms)
|
||
✔ tester HTTP helper uses instance socket, logical origin and JSON without retrying (13.373501ms)
|
||
✔ tester HTTP timeout closes the socket and does not retry (23.520707ms)
|
||
organization: {"event":"reload-needs-restart","business":"acme"}
|
||
✔ row 175: each read with --tester inside an agent prints the human form's output, and refuses without --tester (85.257923ms)
|
||
✔ row 175: --tester on limits set, reset and migrate and every write form outside W1-W7 exits 4 before any call (34.313027ms)
|
||
✔ row 175: scripts/mosaic sends plugins, name, names, follow, threads and thread to packages/cli, not the seat CLI (523.048083ms)
|
||
✔ row 175 W7: project init --tester makes the repository under the project area, committed by tester (383.444485ms)
|
||
✔ row 175 W7: a repo outside the project area refuses tester-project-area before any bus call, and nothing changes (146.758239ms)
|
||
✔ row 175 W7: the tester bind refuses tester-off and tester-required before any directory (1008.065537ms)
|
||
✔ row 184: with --tester, thread create, threads, open, talk --thread and read run on the tester's own thread (44.946502ms)
|
||
organization: {"event":"reload-needs-restart","business":"acme"}
|
||
✔ row 184: talk --thread --follow and follow --thread with --tester print and read only that thread's messages, from message.receive (83.392017ms)
|
||
✔ row 184: with --tester a human thread refuses with the bus's code, and nothing is written (39.999704ms)
|
||
✔ row 184: without --tester the thread verbs stay the human's and never call the tester transport (28.232091ms)
|
||
✔ row 184: scripts/mosaic runs thread create, threads, talk --thread and thread read as the tester through tester-cli.mjs (2281.710179ms)
|
||
✔ talk --tester sends a message as tester from inside an agent and prints the role's reply (24.763753ms)
|
||
✔ talk --tester sends text with no prefix, and follow --tester reads (13.940906ms)
|
||
✔ the read verbs take --tester inside an agent, and the trail shows the tester as the sender (16.907268ms)
|
||
✔ decide, stop and launches take no --tester (13.01372ms)
|
||
✔ the tester transport runs tester-cli.mjs, and the tester's refusals exit 3 (0.305711ms)
|
||
✔ with no stand-in transport, --tester runs tester-cli.mjs on the data root's socket (0.473921ms)
|
||
✔ agents --tester makes one call; the human's agents also reads thread.claims, and --json is the agents array (13.231543ms)
|
||
✔ a refused thread.claims still prints the role rows and the refusal's code (12.859658ms)
|
||
✔ a thread.claims error without a bus code still throws and prints nothing (12.006078ms)
|
||
✔ talk --tester to a stopped role exits 3, prints no sent line and stores nothing (12.358955ms)
|
||
✔ only a --tester send refused tester-target-not-running is rewritten (11.389794ms)
|
||
✔ REQ-CLI-1 project create and list work on the bus record and refuse what the broker refuses (28.408271ms)
|
||
✔ REQ-CLI-1 thread create, list, open and read (47.657095ms)
|
||
✔ REQ-CLI-1 thread read pages through every message, oldest first (284.825295ms)
|
||
✔ REQ-CLI-1 the business needs exactly one threaded instance to create a thread (25.539583ms)
|
||
✔ REQ-CLI-1 a thread is its id, an id prefix of 8 characters or more, or <project>/<name>; anything else is refused before any write (41.184498ms)
|
||
✔ REQ-CLI-2 REQ-THREAD-2 talk --thread sends to the thread and prints only the reply to it; the rest stays unread (30.052254ms)
|
||
✔ REQ-CLI-2 talk --thread --wait gives up with exit 1 and leaves the thread's messages unread (1028.902099ms)
|
||
✔ REQ-CLI-2 talk --thread --follow and follow --thread print and read only that thread's messages (81.533493ms)
|
||
✔ REQ-CLI-2 plain talk to the assistant asks for a thread and exits 2 without a write (21.358017ms)
|
||
✔ REQ-USER-2 a thread of another user is refused for talk, open, read and follow, and nothing is written (39.212551ms)
|
||
✔ REQ-CLI-1 the new verbs refuse inside an agent run, as every human verb does (11.888346ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"re71ac086fdb2","instance":"assistant","turn":"0ca3c603-0b40-434d-84db-424ee16ba934","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r868d441e8ef8","instance":"assistant","turn":"58c01145-43db-4d33-b920-35774cb38953","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"re855baecb87c","instance":"assistant","turn":"62d6eeae-5b26-4fe9-b753-39866ada8576","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r472ba742010b","instance":"assistant","turn":"c46aef04-a188-4d78-bc24-a1e755d7382e","source":"@none","code":"baseline-unknown"}
|
||
✔ REQ-THREAD-2 REQ-LAUNCH-1 REQ-MSG-1 a thread message starts the thread's session, which stops when idle; its history survives the stop and a restart and no other thread sees it (5855.709849ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r525712ad7e52","instance":"assistant","turn":"9f35f63d-454a-4e15-9d5a-64b403580b8f","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r59c1c9781c19","instance":"assistant","turn":"c5d67849-e7d8-4185-b672-a38a6d5d3bc1","source":"@none","code":"baseline-unknown"}
|
||
✔ REQ-THREAD-2 REQ-LAUNCH-1 a running thread counts against its model's limit and an idle-stopped one doesn't (1694.027782ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r06d0800bbcf5","instance":"assistant","turn":"3991bd4b-8402-40a1-a0af-7e6ddcf5153c","source":"@none","code":"baseline-unknown"}
|
||
✔ REQ-THREAD-2 REQ-LAUNCH-1 a turn longer than the idle time isn't stopped, and the thread idles out after it (4412.92545ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"rc54b0b1bab75","instance":"assistant","turn":"4a2be7d5-474b-4f3e-804f-4727ad17fe53","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"rc54b0b1bab75","instance":"assistant","turn":"7dcf5492-a1c1-4261-8556-4435fe9e0354","source":"@none","code":"baseline-unknown"}
|
||
✔ REQ-THREAD-2 REQ-LAUNCH-1 a message sent after the idle snapshot keeps the session, which answers it (2846.884253ms)
|
||
✔ REQ-ROLE-2 REQ-LAUNCH-1 a thread held by a run the launcher didn't start gets no second session (80.125841ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"rcad4932a66cb","instance":"assistant","turn":"0e274309-df2e-4332-8411-9831de429e02","source":"@none","code":"baseline-unknown"}
|
||
✔ REQ-LAUNCH-1 a thread run's session file has no landing, even when landHolders names its instance (371.734895ms)
|
||
✔ REQ-LAUNCH-1 a run that ends without taking its thread's message isn't started again for that message (226.680688ms)
|
||
✔ REQ-THREAD-2 REQ-LAUNCH-1 a thread id that isn't a safe segment, or a thread of a non-thread instance, launches nothing (226.257836ms)
|
||
✔ REQ-THREAD-1 REQ-LAUNCH-1 the chief can't launch the assistant outside a thread (81.515416ms)
|
||
✔ C2-09a: fromSession refuses a creative instance outside a thread without a sandbox (75.793407ms)
|
||
limits: {"event":"limit-reached","business":"acme","check":"token-limit","export":"mayLaunch","subject":{"instance":"assistant","provider":"zai","model":"claude-sonnet-5-5","account":null},"path":["tokens","instances","assistant"],"limit":0,"count":0,"unknownTurns":0}
|
||
limits: {"event":"limit-reached","business":"acme","check":"token-limit","export":"mayLaunch","subject":{"instance":"assistant","provider":"zai","model":"claude-sonnet-5-5","account":null},"path":["tokens","instances","assistant"],"limit":0,"count":0,"unknownTurns":0}
|
||
✔ REQ-LIMIT-3 REQ-LIMIT-4 a thread start whose instance is at its token limit is refused, logged once with the limit and the count (192.454937ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"rba5faa10b26d","instance":"assistant","turn":"cc9b2106-da24-4acd-a2e9-e3dda9eb6e97","source":"@none","code":"baseline-unknown"}
|
||
limits: {"event":"limit-reached","business":"acme","check":"token-limit","export":"mustStop","subject":{"instance":"assistant","provider":"zai","model":"claude-sonnet-5-5","account":null},"path":["tokens","instances","assistant"],"limit":0,"count":0,"unknownTurns":1}
|
||
✔ REQ-LIMIT-4 a thread run at its token limit stops at the end of its turn: the reply lands, and the end record names the limit (352.015672ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"rf0d9acda4532","instance":"bean","turn":"e44cb5c1-a88e-4dd9-8fc7-8441fbcf7175","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r0ea0488d7646","instance":"chet","turn":"0b2c98bd-861a-4c49-a0fb-4ff5d8075d77","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"rf0d9acda4532","instance":"bean","turn":"12234a5c-278c-4e86-9cd2-8e7ba17b5aa8","source":"@none","code":"baseline-unknown"}
|
||
✔ C2-09a: creative thread messages start distinct runs and keep each instance history separate (748.018715ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r655b0591752d","instance":"bean","turn":"a1284737-ffa4-4156-8b00-faed5fd68239","source":"@none","code":"baseline-unknown"}
|
||
usage: {"event":"usage-unknown","business":"acme","run":"rf1978e4ea89e","instance":"bean","turn":"91e83e93-7584-43fb-955c-e55bf343c2d6","source":"@none","code":"baseline-unknown"}
|
||
✔ C2-09a: terminating one creative thread does not signal an unselected peer of the same instance (650.073745ms)
|
||
✔ REQ-LAUNCH-1 R4: a pending message on a revoked thread starts no run after a launcher restart (155.078302ms)
|
||
usage: {"event":"usage-unknown","business":"acme","run":"r83ead46a8fb2","instance":"assistant","turn":"cbc28309-9600-49b3-8634-a2cbe11d0a36","source":"@none","code":"baseline-unknown"}
|
||
✔ REQ-LAUNCH-1 R4: a running thread's run gets SIGTERM at the first tick after the hand edit, with no idle check (343.510659ms)
|
||
✔ REQ-LAUNCH-1 R4 D1: recover() rebinds an earlier host's run on a revoked thread and ends it, which ends its claim (135.824166ms)
|
||
✔ C2-04: a library-only business with tracker.baseUrl boots without a project tracker (229.001495ms)
|
||
task.close {} answered: invalid-request; fake saw 18 requests, first GET /info 200, GET /projects/1 200, GET /projects/1/views 200
|
||
task.close on a missing task answered: task-not-found; it made GET /tasks/999 404
|
||
✔ bootConfig trackers reach the S3 adapter in the real broker child, which goes ready against a fake Vikunja (368.613278ms)
|
||
✔ the transport writes {business, verb, args} to the child and reads its JSON (30.360053ms)
|
||
✔ a bus code on stderr becomes the exit code; garbage and timeouts are outcome problems (2124.457321ms)
|
||
✔ busExit and refuseInsideAgent (0.495401ms)
|
||
✔ REQ-LIMIT-4 mosaic usage shows each token kind and unknown turns beside every total (54.339312ms)
|
||
✔ usage is dispatched by scripts/mosaic and the shared read adapter (86.217281ms)
|
||
✔ talk sends a REQUEST, prints and reads only the reply to it, and leaves other messages unread (52.292037ms)
|
||
✔ talk --wait 0 only sends; no reply within --wait exits 1 and says where it will show (1029.878037ms)
|
||
✔ a late reply the Console has listed stays unread for mosaic inbox, and the next talk skips it (2049.110572ms)
|
||
✔ talk says when the role isn't running, whether launch.by was told, and how to start launch.by (33.095926ms)
|
||
✔ talk to a role launch.by can't launch says it isn't in the launch block (15.585126ms)
|
||
✔ talk to a stopped role prints the waiting line once, skips a non-reply and prints the reply (43.46065ms)
|
||
✔ talk, stop and launches off/on refuse inside an agent run; bad arguments are usage errors (14.121483ms)
|
||
✔ launches off and on go to the broker and change the business's launch state (14.349887ms)
|
||
✔ launches list reads sessions.json and marks a stale entry; stop reports it and refuses a non-runner (13.590244ms)
|
||
ℹ tests 990
|
||
ℹ suites 0
|
||
ℹ pass 989
|
||
ℹ fail 0
|
||
ℹ cancelled 0
|
||
ℹ skipped 1
|
||
ℹ todo 0
|
||
ℹ duration_ms 851062.776023
|