stack

0 Fork 1

Files

T

jason.woltje ef1d3a4583 fix(bus): CB4 review round, fire revokes after the write, archive and delete revoke at Gitea (#1873 )

Build review (changes 8) and security review (changes 4):
- P1-1: an owner-approved fire no longer writes the revoke before the
  apply (decision-stale). The fire stops the copy's runs, the fire is
  written, then the retire revoke starts for the fired instance.
- P2 (both): archive and delete from the CLI and the Console pass the
  organization's managed Gitea remote step (copyRemoteFor). A remote
  step that was not attempted or failed keeps the record revoking with
  failed remote, so the bus finishes it after restore; no done tombstone
  over a live token.
- Security P2-1: a bound server that cannot be read is a failed remote
  step, not not-managed. updateOrg refuses project-repo-bound when a
  project a copy binding grants loses or changes its remote or git.
- P3-1 (security): a delete whose organization file cannot be read says
  copiesUnreadable, never an empty copy list.
- P3-2 (security): the remote step requires the record's incarnation to
  equal the registry's live one.
- P3-5 (build): the archive's slot discard checks each parent directory
  (no symlink, own uid, private mode).
- P3-6 (build): resume keeps credential-revoke-failed as the gate code
  while a failed op runs again.
- P3-4 (build): a test pins the refused-begin reopen guard.

2026-11-12 16:08:08 -06:00

fixtures

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

access-boot.test.mjs

fix(organization,cli,discord,seat,control-board): refusals name the field or file by label, never a host path (#1873 )

2026-11-11 08:53:31 -06:00

access.test.mjs

fix(organization,cli): refusals name the file by label, never by host path

2026-11-11 01:04:15 -06:00

accounts.test.mjs

fix(organization,cli): refusals name the file by label, never by host path

2026-11-11 01:04:15 -06:00

agent-copies.test.mjs

fix(bus): CB3 review fixes, live registry state, read scope, revision to bind (#1873 )

2026-11-12 13:37:46 -06:00

agent-guard.test.mjs

fix(cli): autonomy set takes the bus's 64-hex revision (#1873 , P1-3)

2026-11-11 20:47:35 -06:00

agent-levels-cli.test.mjs

fix(agents): A2 review round: config check, name rule, drafts and test gaps (#1873 )

2026-11-10 18:25:54 -06:00

app.test.mjs

cli: terminal app follow-up, narrow-terminal guard test, hidden-box way out and width tests (#1562 )

2026-10-12 18:36:52 -05:00

boot-status.test.mjs

fix(organization,cli): refusals name the file by label, never by host path

2026-11-11 01:04:15 -06:00

business-imports.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

case1-accept.test.mjs

fix: preserve tester session identity through cleanup (#1873 )

2026-11-11 08:22:31 -06:00

case1-hostcheck.test.mjs

fix(installer): allow scoped Claude paths and leave unreadable cwd (#1816 , Vikunja 614). Untested

2026-10-23 16:37:24 -05:00

case2-install.test.mjs

feat(org): add per-class autonomy and guarded reversals (#1873 )

2026-11-11 10:27:41 -06:00

case2-persona-import.test.mjs

selector: --org and --business in case2 persona-import and precheck

2026-11-08 21:25:49 -06:00

case2-unit.test.mjs

fix: preserve tester session identity through cleanup (#1873 )

2026-11-11 08:22:31 -06:00

case-cleanup-time-fixture.mjs

test(cli): bound supervisor cleanup with a fixed process inventory (#1873 )

2026-11-11 03:20:27 -06:00

case-cleanup-time.test.mjs

fix: preserve tester session identity through cleanup (#1873 )

2026-11-11 08:22:31 -06:00

case-inner-timing-fixture.mjs

test(cli): bound supervisor cleanup with a fixed process inventory (#1873 )

2026-11-11 03:20:27 -06:00

case-inner-timing.test.mjs

test(cli): measure legacy and query inner timers at the supervisor (#1873 )

2026-11-11 02:11:48 -06:00

case-p10-timing-fixture.mjs

test(cli): band the P10 inner timer at the supervisor, not around cleanup (#1873 )

2026-11-11 00:30:10 -06:00

case-session-identity.test.mjs

fix: preserve tester session identity through cleanup (#1873 )

2026-11-11 08:22:31 -06:00

case-sudo-fixture.mjs

fix: redact remaining file and config refusal echoes (#1873 )

2026-11-10 17:06:54 -06:00

case-sudo-fixture.test.mjs

fix: redact remaining file and config refusal echoes (#1873 )

2026-11-10 17:06:54 -06:00

case-supervisor-cost.test.mjs

fix: preserve tester session identity through cleanup (#1873 )

2026-11-11 08:22:31 -06:00

case-supervisor-session-fixture.mjs

fix: preserve tester session identity through cleanup (#1873 )

2026-11-11 08:22:31 -06:00

channel-cli.test.mjs

plugins: channel kind for the CLI and Console chat paths (row 164, #1661 )

2026-10-18 14:24:42 -05:00

channel-fixture.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

channel-recovery.test.mjs

plugins: channel kind for the CLI and Console chat paths (row 164, #1661 )

2026-10-18 14:24:42 -05:00

cli-parity.test.mjs

fix(cli): build review fixes for the parity verbs (#1873 , P1-3)

2026-11-11 20:47:35 -06:00

cli.test.mjs

fix(tasks): U4a review fixes for the built-in task store (#1873 )

2026-11-09 19:55:25 -06:00

compactions-launch.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

config.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

console-actions.test.mjs

feat(console): dev-local-owner Console writes autonomy and restarts when detached (#1873 )

2026-11-11 14:16:09 -06:00

credentials.test.mjs

host access: agent host sudo through the credential store, host.run over broker.sock (row 210, #1707 )

2026-10-20 21:47:11 -05:00

definition-scan.test.mjs

fix(organization): bus start and launch check org definitions against the held credentials (#1873 )

2026-11-11 08:49:15 -06:00

deployment-boundary.test.mjs

feat(cli): require dedicated host uid for accounts system units (#1873 )

2026-11-10 21:38:17 -06:00

dev-fixture.test.mjs

dev fixture: take a stale record atomically so a concurrent init keeps a live record

2026-11-08 23:07:48 -06:00

federation-acceptance.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

follow.test.mjs

bus, cli, webui: every message to the human, read state, Messages page (#1588 )

2026-10-13 07:58:36 -05:00

format.test.mjs

feat(tasks): U4a, a task store built into each organization (#1873 )

2026-11-09 19:25:44 -06:00

gate-lane-auth.test.mjs

row 244: gate runs mount a 0600 fixture pi auth file, test-release activates on the mock adapter, and real-model test-task cases sit behind MOSAIC_LIVE_PROVIDER=1 (#1757 )

2026-10-21 16:44:37 -05:00

gate-lane-fixtures.test.mjs

Hold closed fixture ports for the test's life (Vikunja #781 )

2026-11-02 18:25:27 -06:00

gate-lane-image-base.test.mjs

fix(testing): bind image receipts to pinned build base (#470 )

2026-10-29 00:33:01 -05:00

gate-lane-image.test.mjs

fix(testing): bind image receipts to pinned build base (#470 )

2026-10-29 00:33:01 -05:00

gate-lane-state.test.mjs

test: resolve the real Docker binary inside lane fixtures

2026-10-21 13:28:40 -05:00

gate-lane.test.mjs

test: resolve the real Docker binary inside lane fixtures

2026-10-21 13:28:40 -05:00

git-socket.test.mjs

fix(organization,cli): refusals name the file by label, never by host path

2026-11-11 01:04:15 -06:00

grants-scope.test.mjs

row 298: Untested scope evidence, exact commands, spent narrowing and CLI coverage (#1804 )

2026-10-23 17:40:20 -05:00

grants.test.mjs

bus, cli: #436b Gitea grant path, schema 3j-3k (row 236, #1742 )

2026-10-22 03:42:05 -05:00

helpers.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

host.test.mjs

fix(organization,cli): refusals name the file by label, never by host path

2026-11-11 01:04:15 -06:00

hosts.test.mjs

row 235: machine grant row b, raise binding, executor, reconcile, revoke and sweep, creative roles refused at raise, recheck and host.run, N10 (#1741 )

2026-10-21 05:42:52 -05:00

idle-stop-race.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

instances.test.mjs

feat(organization): enforce arbiter domain resolve rights (#1873 )

2026-11-10 16:33:21 -06:00

json-redaction.test.mjs

fix(cli,seat,discord,organization,control-board,harness,plugins,webui): review round: launcher reasons, session, discord reads, mosaic-config and keys by label (#1873 )

2026-11-11 08:53:31 -06:00

last-values.test.mjs

fix(organization,cli,discord,seat,control-board): refusals name the field or file by label, never a host path (#1873 )

2026-11-11 08:53:31 -06:00

launch-account.test.mjs

fix(row 332): proxy first check runs every key-independent refusal; testProxy test option (Vikunja #774 )

2026-11-02 20:51:51 -06:00

launch-limit-checks.test.mjs

Keep launch recovery evidence when broker end is unconfirmed

2026-11-06 23:12:02 -06:00

launch-limits.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

launch-routes.test.mjs

fix(cli,seat,discord,organization,control-board,harness,plugins,webui): review round: launcher reasons, session, discord reads, mosaic-config and keys by label (#1873 )

2026-11-11 08:53:31 -06:00

launcher-final-race-probe.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

launcher-manifest-race-probe.test.mjs

fix: close project archive admission races (#797 )

2026-11-06 02:54:04 -06:00

launcher.test.mjs

fix(cli,seat,discord,organization,control-board,harness,plugins,webui): review round: launcher reasons, session, discord reads, mosaic-config and keys by label (#1873 )

2026-11-11 08:53:31 -06:00

lifecycle.test.mjs

fix(organization,cli,discord,seat,control-board): refusals name the field or file by label, never a host path (#1873 )

2026-11-11 08:53:31 -06:00

limits-tokens.test.mjs

limits: a daily token quota for the account the stack uses, and bus schema 3h to 3i (row 126, #1620 )

2026-10-18 20:35:02 -05:00

limits.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

mark-read.test.mjs

cli, webui: the human marks skipped messages read, and the Console says what talk prints (row 150, #1644 )

2026-10-16 15:46:40 -05:00

model-event-guard.test.mjs

fix(harness): mark first streamed model output (#797 )

2026-11-06 02:02:43 -06:00

model-managed-launch-fixture.mjs

feat(plugins): model providers as plugin modules, cliproxy catalogue on Routing (#1858 )

2026-11-06 19:11:13 -06:00

model-managed-launch.test.mjs

feat: integrate reviewed proxy page and managed model keys

2026-10-26 12:04:21 -05:00

model-proxy-guards.test.mjs

feat: integrate reviewed proxy page and managed model keys

2026-10-26 12:04:21 -05:00

model-proxy.test.mjs

Protect shared proxy organization keys

2026-11-07 11:42:56 -06:00

model-stall.test.mjs

feat: integrate reviewed proxy page and managed model keys

2026-10-26 12:04:21 -05:00

model-turn-clock.test.mjs

feat: integrate reviewed proxy page and managed model keys

2026-10-26 12:04:21 -05:00

model-turn-reader.test.mjs

feat: integrate reviewed proxy page and managed model keys

2026-10-26 12:04:21 -05:00

names.test.mjs

bus, cli: tester reads and the W1-W7 tester writes, recorded as tester; scripts/mosaic sends plugins, name and names to the CLI (row 175, #1673 )

2026-10-19 19:04:50 -05:00

north-star.test.mjs

feat(project,cli): onboarding interview template and north-star approval (F2)

2026-11-09 12:58:29 -06:00

notifier.test.mjs

fix(organization,cli): refusals name the file by label, never by host path

2026-11-11 01:04:15 -06:00

optional-tracker.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

org-archive-race.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

org-bus.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

org-console.test.mjs

fix(cli): bus and Console lifecycle verbs refuse inside an agent run (#1873 )

2026-11-11 16:15:51 -06:00

org-definitions.test.mjs

fix(organization): bus start and launch check org definitions against the held credentials (#1873 )

2026-11-11 08:49:15 -06:00

org-delete.test.mjs

fix(bus): CB4 review round, fire revokes after the write, archive and delete revoke at Gitea (#1873 )

2026-11-12 16:08:08 -06:00

org-paths.test.mjs

Bind organization identity into bus boot

2026-11-07 12:36:27 -06:00

org-recovery.test.mjs

fix(org): D2 security review: live identity refuses, clear only inspected entries, no revive from an agent run

2026-11-11 14:03:18 -06:00

org-repo-set.test.mjs

fix(org): repo set refuses under a copy binding that still grants the project (#1873 F7)

2026-11-12 13:39:26 -06:00

org-restore-bus.test.mjs

fix(org): restore names bus recover for a stale lock; receipt taken at mount; restore-then-dashboard test (#1873 )

2026-11-11 20:14:46 -06:00

org-revive.test.mjs

fix(org): D2 security review: live identity refuses, clear only inspected entries, no revive from an agent run

2026-11-11 14:03:18 -06:00

org-selector.test.mjs

selector: --org and --business in each CLI parser's own scope

2026-11-08 21:14:11 -06:00

org.test.mjs

feat(org): restore starts the bus; pages follow restart and quick setup (#1873 )

2026-11-11 20:03:35 -06:00

organization-imports.mjs

feat(plugins): install pinned instance packages and declared tools (#1873 )

2026-11-11 00:11:13 -06:00

organization-imports.test.mjs

feat(plugins): install pinned instance packages and declared tools (#1873 )

2026-11-11 00:11:13 -06:00

other-tree.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

owned-child.test.mjs

test: reap owned copy children on external gate termination

2026-10-26 10:44:35 -05:00

path-redaction-labels.test.mjs

fix(cli,seat,discord,organization,control-board,harness,plugins,webui): review round: launcher reasons, session, discord reads, mosaic-config and keys by label (#1873 )

2026-11-11 08:53:31 -06:00

path-redaction.test.mjs

fix(organization,cli): review round: raw fs and git errors, console entry, config, document and --vars refusals name labels

2026-11-11 01:04:15 -06:00

processing-cli.test.mjs

processing: inspectable per-run stop seam for lifecycle fire

2026-10-21 22:42:12 -05:00

project-name-repo.test.mjs

bus, cli, webui: a thread project named like a business-file repo refuses project-name-is-repo unless --repo matches, with a clearer CLI refusal (row 171, #1668 )

2026-10-19 14:31:36 -05:00

project.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

proxy-context-join.test.mjs

Row 332 R2 (#1830 ): hermetic pi launches in cli tests, pi bundle default, review F2 and F3

2026-11-02 15:22:17 -06:00

proxy-launch-order.test.mjs

fix(cli,seat,discord,organization,control-board,harness,plugins,webui): review round: launcher reasons, session, discord reads, mosaic-config and keys by label (#1873 )

2026-11-11 08:53:31 -06:00

proxy-setup-cli.test.mjs

fix(proxy): review fixes for the Console proxy setup page (#1873 )

2026-11-11 16:32:31 -06:00

publish-socket.test.mjs

feat(organization): enforce arbiter domain resolve rights (#1873 )

2026-11-10 16:33:21 -06:00

refusal-redaction.test.mjs

fix: preserve read error codes and launcher fixtures (#1873 )

2026-11-10 17:54:33 -06:00

rename-b-commands.test.mjs

fix(cli,seat,discord,organization,control-board,harness,plugins,webui): review round: launcher reasons, session, discord reads, mosaic-config and keys by label (#1873 )

2026-11-11 08:53:31 -06:00

reply-limits.test.mjs

row 217: citation runner retry and acceptance draft (Untested)

2026-10-24 05:39:26 -05:00

request-host-ops.mjs

fix: close project archive admission races (#797 )

2026-11-06 02:54:04 -06:00

request-launch.test.mjs

fix(bus): retry chief after processing resumes

2026-11-06 06:51:39 -06:00

request-lifecycle-fixture.mjs

feat(cli): require dedicated host uid for accounts system units (#1873 )

2026-11-10 21:38:17 -06:00

request-lifecycle-live.test.mjs

test(lifecycle): cover three delivery paths and crash recovery (#1839 )

2026-11-04 14:47:45 -06:00

request-lifecycle.test.mjs

test(lifecycle): cover three delivery paths and crash recovery (#1839 )

2026-11-04 14:47:45 -06:00

revoke-window.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

run-evidence.test.mjs

fix(organization,cli): refusals name the file by label, never by host path

2026-11-11 01:04:15 -06:00

session-clear.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

session-cli.test.mjs

row 272: fix session fixture authority and initial chat render

2026-10-23 08:53:07 -05:00

session-launch.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

stack-copy.test.mjs

feat(cli): M3 reconciliation: accounts units, stamped renders, rehearsal (#1873 )

2026-11-10 21:38:17 -06:00

stack-instances.test.mjs

fix(cli,seat,discord,organization,control-board,harness,plugins,webui): review round: launcher reasons, session, discord reads, mosaic-config and keys by label (#1873 )

2026-11-11 08:53:31 -06:00

stack-release-external.test.mjs

stack-release: activate --send and --no-sso (row 273, #1778 )

2026-10-21 22:15:36 -05:00

stack-release-fixture.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

stack-release.test.mjs

fix(cli): M3 re-check: provider denials answer 403; A2 test owner carries rootOwner (#1873 )

2026-11-10 21:38:17 -06:00

stack-upgrade.test.mjs

fix(cli): M3 review round: re-pin migration, rehearsal provider (#1873 )

2026-11-10 21:38:17 -06:00

system-type.test.mjs

fix(sys1): count project system types in the restore guard and admit the CLI verbs

2026-11-09 18:46:36 -06:00

tester-http.test.mjs

row 196: human boundary on peer credentials, interpreter receipt and the Console tester socket (#1694 )

2026-10-21 15:55:39 -05:00

tester-reads.test.mjs

feat(organization): enforce arbiter domain resolve rights (#1873 )

2026-11-10 16:33:21 -06:00

tester-threads.test.mjs

feat(organization): enforce arbiter domain resolve rights (#1873 )

2026-11-10 16:33:21 -06:00

tester.test.mjs

Update tester fixtures for organization transport

2026-11-07 13:18:34 -06:00

thread-cli.test.mjs

row 264a (#1769 , T1 item 7): bus schema 3k to 3l, sessions below a thread

2026-10-22 08:07:43 -05:00

thread-launch.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

thread-revoke.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

trackers-boot.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

transport.test.mjs

row 239 (#1745 ) b1: the fire's and the delete's revoke runs inside writer.write under the lock, after the revision check and the validations; an error after it carries revoked and the bus names it revision-conflict-revoked or outcome-unknown-revoked, with CLI, Console (OPEN, duckworth-0165 C1) and fire-notice texts; the mark sits in a catch around withLock (C2); tests T1-T6, channel-proof re-pins transport.mjs and webui bus.mjs; BUILD.md with mutants M1-M3g and the gate plan; untested, waits for a CLEAR (sage-2792)

2026-10-23 17:00:42 -05:00

usage.test.mjs

bus, cli, webui: token accounting per run, schema 3h usage_records (row 124, #1618 )

2026-10-18 11:08:17 -05:00

verbs.test.mjs

Restore scoped dev-owner launch checks

2026-11-07 12:45:13 -06:00