Candidate on 96656dd21: broker split refuses invalid-recommendation after the
option checks, raise_decision text asks for one key and names the yes default,
bus README codes table, broker and tools tests. Mutants m1 (old shared line)
and m2 (order swapped) killed; full gate passed 15:42:03-15:47:36Z.
Co-Authored-By: Claude Opus 5.5 <[email protected]>
133 lines
13 KiB
Plaintext
133 lines
13 KiB
Plaintext
✔ explicit request, Seen, ordinary completion and a new request have distinct attention states (3.408839ms)
|
||
✔ attention convention ignores reasoning/quoted examples and permits leading blank lines (0.218892ms)
|
||
✔ completed smoke replies and ordinary questions are idle, not human blockers (0.685515ms)
|
||
✔ only an explicit first-line input request makes a finished reply waiting (0.150614ms)
|
||
✔ tool activity, user text, errors and unfinished turns override attention text (0.118387ms)
|
||
✔ STOP access failure is unknown, not absence, under a non-root identity (28.969763ms)
|
||
✔ connector Task never inherits Discord routing envelopes; ordinary Task still uses user text (2.534277ms)
|
||
✔ connector discovery keeps only safe identity; rejects modes, mismatches, links and traversal (1.185866ms)
|
||
✔ canonical owner identity and STOP are independent; no tmux fallback or forged registration (5.059911ms)
|
||
✔ connector reply refusal precedes forged live tmux registration; ordinary agent still sends (0.541237ms)
|
||
✔ server rescans connector discovery and refuses HTTP reply without transport (28.987191ms)
|
||
✔ connector session links and linked directories are not read (0.961901ms)
|
||
✔ newer live matching launch marks old activity, preserves history/attention/attribution, then clears on new activity (2.109228ms)
|
||
✔ CLI print uses the relaunch notice instead of old current preview (51.642695ms)
|
||
✔ connector owner and fixed task never inherit a native relaunch notice (1.718213ms)
|
||
✔ equality, stale/unknown/offline, mismatched registration and unknown activity do not assert relaunch (0.952025ms)
|
||
✔ loadConfig: missing file throws ConfigError (1.370827ms)
|
||
✔ loadConfig: invalid JSON throws ConfigError (0.30228ms)
|
||
✔ loadConfig: missing dataRoot throws ConfigError (0.222988ms)
|
||
✔ loadConfig: relative dataRoot throws ConfigError (0.303643ms)
|
||
✔ loadConfig: valid config returns dataRoot (0.606397ms)
|
||
✔ findNewestSession: picks the newest by mtime among two files (0.417388ms)
|
||
✔ findNewestSession: finds files in nested subdirectories (0.267235ms)
|
||
✔ findNewestSession: returns null for a missing dir (0.107709ms)
|
||
✔ readSession: extracts fields, collapses/truncates text, counts a truncated final line (0.576999ms)
|
||
✔ readSession: model and provider follow the latest model_change entry or assistant turn; null when the log names neither; scanAgent carries them (1.098489ms)
|
||
✔ readSession: lastError carries the assistant errorMessage only when the last assistant turn errored (0.419404ms)
|
||
✔ findNewestSession/scan: never read sibling auth or secrets next to a sessions dir (0.987036ms)
|
||
✔ deriveState: full state table (0.157364ms)
|
||
✔ rule: newest entry is an assistant message with a tool call, after a question-looking text, is working (0.279227ms)
|
||
✔ rule: newest entry is a tool result with no assistant text after it is working (0.247253ms)
|
||
✔ rule: a finished ordinary turn is idle, even if it says your move (0.236264ms)
|
||
✔ task: the first user message of the session, from text blocks (0.236462ms)
|
||
✔ task: a plain-string user content is accepted, whitespace collapsed and long text capped (0.220604ms)
|
||
✔ task: no user message in the log means null (shown as unknown), never a guess (0.238573ms)
|
||
✔ workspace: the live tmux pane path wins; the session cwd is the fallback; neither means null (0.34477ms)
|
||
✔ activeProject: basename of the nearest .git directory or .git file above the workspace; none means null (0.493067ms)
|
||
✔ scan: the written record carries task, workspace and activeProject (0.411666ms)
|
||
✔ registration: overrides task, project and workspace; every source says registration; registered carries the launch fields; the grouping column is untouched (0.500483ms)
|
||
✔ registration: empty task and null project/workspace leave the derived values in place; registered is still non-null (0.345534ms)
|
||
✔ registration: a record whose pid is gone is stale; derived values win, sources say derived, registered stays with alive false; a pid the probe cannot decide is not stale; pidAlive itself (0.881166ms)
|
||
✔ registration: no registration leaves the Gate A fields exactly as before, and registered is null (0.373364ms)
|
||
✔ loadRegistrations: a missing seatsDir gives empty lists (0.135014ms)
|
||
✔ loadRegistrations: one good record, one malformed JSON, one with an unknown field; a stray file under seatsDir is ignored (0.662477ms)
|
||
✔ matchRegistration: matches by sessionsDir, and by realpath through a symlink; sessionsDir null never matches; same seat name with a different sessionsDir does not match (fleet vs repo darkwing) (0.289691ms)
|
||
✔ scan: writes the registration override to disk; index.json carries registered and registrationErrors (1.120601ms)
|
||
✔ scan: a relative seatsDir throws ConfigError; an omitted seatsDir behaves as before (0.242564ms)
|
||
✔ scanAgent: waitingOnYou is true for waiting/error and false otherwise (0.433074ms)
|
||
✔ scanAgent: ageSeconds is computed from the injected now (0.23222ms)
|
||
✔ scanAgent: sessionFile null and state idle when sessions dir is empty but alive (0.139393ms)
|
||
✔ discoverRepoAgents: finds agents with a sessions dir, skips those without, sorted by name (0.314197ms)
|
||
✔ discoverFleetAgents: finds agents with a sessions dir, sorted by name, fleet tmux fields (0.328858ms)
|
||
✔ scan: writes per-agent files and index.json, rerun overwrites, no leftover tmp files (0.750677ms)
|
||
✔ scan: relative boardDir throws ConfigError (0.074042ms)
|
||
✔ CLI: scan with assume-alive liveness exits 0, prints board summary, writes board files (55.413641ms)
|
||
✔ CLI: missing config exits 2 with a refused: message (45.394009ms)
|
||
✔ CLI: unknown command exits 2 (45.341506ms)
|
||
✔ CLI: unknown --liveness value exits 2 (44.142193ms)
|
||
✔ panesRunPi: true when any trimmed line equals 'pi' (0.190247ms)
|
||
✔ panesRunPi: false for bash-only, claude, empty, or node-pi-style lines (0.06901ms)
|
||
✔ tmuxIsAlive: a pane running pi is alive (0.16777ms)
|
||
✔ tmuxIsAlive: session exists but pi has exited is not alive (0.066112ms)
|
||
✔ tmuxIsAlive: no such tmux session is not alive (0.04533ms)
|
||
✔ tmuxIsAlive: tmux could not be run at all is unknown (null), never assumed alive (0.062574ms)
|
||
✔ tmuxIsAlive: passes -L <socket> only when a socket is given (0.107228ms)
|
||
✔ parsePanes: one pane per line, command and optional tab-separated path (0.076164ms)
|
||
✔ tmuxInspect: reports the path of the pane running pi, not of a shell pane (0.070282ms)
|
||
✔ tmuxInspect: no pi pane, no session, or no tmux gives no workspace and the matching liveness (0.09115ms)
|
||
✔ loadSeen: missing file returns {} (0.12743ms)
|
||
✔ loadSeen: invalid JSON throws ConfigError (0.158541ms)
|
||
✔ loadSeen: a JSON array throws ConfigError (0.133498ms)
|
||
✔ loadSeen: a non-string value throws ConfigError (0.160928ms)
|
||
✔ markSeen: seen true adds the key and writes seen.json mode 0600, no leftover tmp files (0.29735ms)
|
||
✔ markSeen: seen false deletes the key (0.245109ms)
|
||
✔ markSeen: missing, empty, or non-string fields throw ConfigError (0.212701ms)
|
||
✔ markSeen: project containing '/' throws ConfigError (0.121799ms)
|
||
✔ markSeen: non-boolean seen throws ConfigError (0.10618ms)
|
||
✔ scanAgent: a seen mark matching the waiting session's lastTimestamp clears waitingOnYou (0.271981ms)
|
||
✔ scanAgent: a stale mark (agent wrote something newer) is not seen and waitingOnYou is true (0.210723ms)
|
||
✔ scanAgent: a working session with a matching mark is not seen (marks only apply to waiting/error) (0.200211ms)
|
||
✔ scanAgent: an error-state session with a matching mark is seen (0.203883ms)
|
||
✔ scan: index.seen and waitingOnYou reflect seen.json, which scan never rewrites or deletes (0.474704ms)
|
||
✔ scan: a corrupt seen.json makes scan throw ConfigError (fail closed) (0.183886ms)
|
||
✔ taskSetBy: a registered task carries the record's setter; a record without the field (pre-#1511) reads unknown; the value is not copied into registered (0.565144ms)
|
||
✔ taskSetBy: null whenever the task shown is not the registered one: no registration, an empty registered task, a stale registration; the field is always present (0.534157ms)
|
||
✔ taskSetBy: scan() reads the field from disk through the seat package (bounded there), writes it to the per-agent record and index, and an invalid on-disk value is a registrationError, never a row value (1.413857ms)
|
||
✔ isLoopbackHost: recognizes loopback hosts (1.275945ms)
|
||
✔ isLoopbackHost: rejects non-loopback hosts (3.983893ms)
|
||
✔ startServer: refuses a non-loopback host with ConfigError, never opens a socket (2.857276ms)
|
||
✔ startServer: serves page, healthz, and a rescanning /api/board (31.027321ms)
|
||
✔ startServer: a seatsDir registration overrides the row and index.registered reflects it (5.032496ms)
|
||
✔ startServer: /api/board returns 500 JSON with an error field when scan throws (2.012881ms)
|
||
✔ CLI: serve refuses a non-loopback host with exit 2 and a refused: message (48.395636ms)
|
||
✔ CLI: serve rejects a non-numeric --port with exit 2 (46.066628ms)
|
||
✔ CLI: scan still works after the async cli refactor (47.983189ms)
|
||
✔ CLI: live serve prints its URL and answers /healthz (57.306379ms)
|
||
✔ page.html: esc() escapes every HTML-significant character (0.676832ms)
|
||
✔ POST /api/seen marks a row; GET /api/board still shows it seen; seen:false clears it (7.416932ms)
|
||
✔ POST /api/seen without a JSON content-type returns 400 and does not write a mark (3.141646ms)
|
||
✔ POST /api/seen with invalid JSON returns 400 (1.620544ms)
|
||
✔ POST /api/seen with a body over 4096 bytes returns 400 (or resets the connection) and writes no mark (1.993602ms)
|
||
✔ POST /api/seen with a missing agent returns 400 (1.272975ms)
|
||
✔ POST /api/board returns 405; PUT /api/seen returns 405 (1.644513ms)
|
||
✔ CLI: scan --print marks a seen row with 's' and the summary line ends with 'N seen)' (50.08522ms)
|
||
✔ page.html: seenControl() escapes rec.project/agent/lastActivity, and the POST uses a JSON content-type (0.307688ms)
|
||
✔ page.html: has a collapsed Seen section that lists seen rows with the shared row builder (0.276434ms)
|
||
✔ page.html: each project has a Hide seen checkbox (default on) beside Hide offline, with a hidden-count note (0.163552ms)
|
||
✔ page.html: a project header reads "N of N" only while a checkbox hides rows (0.15445ms)
|
||
✔ page.html: every row shows Task and Active project, derived or the word unknown, with the workspace in the detail (0.282943ms)
|
||
✔ page.html: task and active project cells show their source via sourceTag(); the detail has a Registered row via registeredText(); SOURCE_LABEL maps registration to registered; every dynamic value in sourceTag/fromSource/registeredText is escaped (0.563306ms)
|
||
✔ POST /api/reply: runs agent-send.sh with -s from the registration, -S <host>:control-board, -m text plus the fixed trailer, no -L on the default socket, MOSAIC_TMUX_SOCKET stripped; answers delivered with the exit code and both streams (29.013493ms)
|
||
✔ POST /api/reply: a registration with a tmux socket adds -L <socket> (25.61149ms)
|
||
✔ POST /api/reply: a non-zero tool exit is a 200 with delivered false, the exit code and the stderr verbatim (24.639744ms)
|
||
✔ POST /api/reply: refusals before the tool runs: empty or blank or long text 400, unknown row 404, no registration 409, stale registration 409, no tmux session 409, bad JSON 400; the tool is never called (13.677087ms)
|
||
✔ POST /api/reply: a missing agent-send.sh is a 500 with the path in the error, not a crash (4.245343ms)
|
||
✔ replyToRow: DEFAULT_AGENT_SEND is the repository's tools/tmux/agent-send.sh and it is executable (0.135004ms)
|
||
✔ page.html: the reply box appears only where canReply() holds (live registration with a tmux session), the detail has a Reply row, the submit posts JSON to /api/reply, receipts and drafts survive a refresh, and every receipt value is escaped (0.56204ms)
|
||
✔ startServer: /api/board carries taskSetBy from a live registration and null for the derived rows (2.117497ms)
|
||
✔ page.html: the task cell and detail show who set a registered task via setByTag()/setByText(), both escaped, only from rec.taskSetBy; the reply gate does not read it (0.282149ms)
|
||
✔ Host/Origin guard: GET /api/board and POST /api/reply refuse a foreign Host, a wrong port and a cross-origin Origin with 403 JSON, before any scan or send, and never send CORS headers (7.516044ms)
|
||
✔ Host/Origin guard: loopback names on this port are accepted, with or without a same-origin Origin (35.608924ms)
|
||
✔ conversation routes (F16): a foreign Host, a wrong port and a cross-origin Origin get 403 before the reader runs, with no CORS headers (5.609074ms)
|
||
✔ every refusal code the reader can raise has an HTTP status (1.048162ms)
|
||
✔ conversation routes: catalogue, first page, next page and follow over HTTP; refusals map to 4xx with their code; nothing is written (46.338024ms)
|
||
ℹ tests 124
|
||
ℹ suites 0
|
||
ℹ pass 124
|
||
ℹ fail 0
|
||
ℹ cancelled 0
|
||
ℹ skipped 0
|
||
ℹ todo 0
|
||
ℹ duration_ms 591.314999
|