sync(desktop): propagate finalized transport into top epic

[integry]

Propagate the finalized desktop transport/API epic into the top-level cross-platform desktop epic.

This synchronization PR intentionally targets 1950-epic-cross-platform-dsk, not main. It will remain the integration boundary for the completed remote pairing, credential lifecycle, ProPR Connect transport, and secret-free Connect discovery work. Final top-level acceptance remains in draft PR #1970 and must not be merged to main by this PR.

[propr-dev]

Continue the existing task now from the successful clean staged merge. Do not wait on unavailable jq; use node for JSON checks. Verify the merge parents/invariants and relevant available tests, then commit and push the merge to the existing #2035 head. If the shared-object store blocks commit, use the already-created node-owned object/index directories or GitHub Git Data API. Do not start another task, do not invoke /merge, and do not add unrelated changes.

[integry]

Scoped Mac/Linux/shared correction only on exact transport head b494635c865883b65ce172afcd9437b8b34be02a: scripts/verify-platform-safe-connect.mjs runs 86 tests after the status-route public-identity + synthetic-agent test union; CI proves tests=86 pass=86 fail=0 skipped=0, but the wrapper still requires 85/85 and exits 1. Update every exact expected/report occurrence 85→86, retain the strict equality/fail-closed assertion and 90000ms budget, and add or adjust only the smallest focused self-check if one exists. Run the script to prove exact 86/86 and diff-check. No production, lockfile, workflow, release, UI, credential, transport, or Windows changes; do not merge the PR.

[propr-dev]

✅ Applied the requested follow-up changes in commit 6beeda9

Summary of Changes

Updated verify-platform-safe-connect.mjs:

• Changed all expected/report counts from 85 to 86.
• Preserved strict fail-closed equality checks.
• Preserved the 90,000ms timeout.
• No focused self-check existed to adjust.
• Script passes: tests=86 pass=86 fail=0 skipped=0.
• git diff --check passes; only the requested script changed.
• No commit, merge, or preview artifacts created.

---

🤖 Implementation Details

• Model: GPT-5.6 Sol (high)
• Requested By: @integry
• Time: 1m 47s
• Tokens: 145,312 (143,981 in / 1,331 out)
• Cost: $0.26

Undo Changes • View Task Execution

---

💡 ProPR Slash Commands

Command	Description	Example
/merge	Merge target branch into this PR and resolve conflicts	/merge
/review	Request an AI code review	/review or /review claude-sonnet
/fix	Implement fixes for issues found by /review	/fix or /fix address the null check issue
/switch	Change the AI model for this PR	/switch claude-opus
/use	Override the model for a single follow-up run	/use claude-sonnet
/ultrafix	Loop review→fix cycles until score goal is met	/ultrafix or /ultrafix goal=8 max=10

_{🤖 Generated by ProPR}
Processing comment ID: 5531518247✓

[integry]

Normal ProPR implementation follow-up; do not invoke the specialized /merge worker. On exact transport head 6beeda95cd9da99a40fe54c12d66767c1a2db33a, fetch corrected top head a2c7173790c34e2141043a9a49fec846ad12ac06 (which contains current main c895c1884fa30557c3d20ca24f6e6b7b07daae45), perform a true non-fast-forward merge of top into the existing #2035 head branch, resolve semantically, commit, and push only the transport branch. If linked-worktree git admin is root-owned, use a node-owned alternate index/object directory, standalone clone/worktree, or Git Data API; do not alter permissions or squash ancestry. Do not merge #2035 into top.

The audited merge has one expected conflict in root package.json: retain transport pretest:unit building @propr/shared plus @propr/local-setup; retain transport test:prepare with client/local-setup; use the current-main/top test:unit list including test/agentImagePreparation.test.ts. No duplicate or removed test.

Preserve #2086 strict parser/deadline/pre-abort/late-body disposal, unauthenticated identity discovery before bearer, identity/profile/origin/generation/scope fencing, mismatch detach, Connect rotation, exact 72 credential / 119 native counts, and all public desktop route ordering. Incorporate top/main preview auth/routes/setup changes including the corrected awaited client and secret-free reporter behavior. Preserve current-main lock updates (fast-uri@3.1.7, qs@6.16.0, humanfs updates), Electron/local-setup/client workspaces, deterministic webPush clock, desktop release/native workflows, and all runtime/UX/release files. No Windows-specific correction.

Run diff-check, lock/install validation, focused auth/status/Connect/setup tests, API/shared/client/desktop/CLI typechecks, platform-safe 86/86, native 119/119, and full suite where bounded. Report direct merge parents and the package resolution.

[propr-dev]

✅ Applied the requested follow-up changes in commit a2dfbf3

Summary of Changes

Prepared the exact resolved merge tree for the system-managed commit.

• Intended direct parents, in order:
  1. 6beeda95cd9da99a40fe54c12d66767c1a2db33a
  2. a2c7173790c34e2141043a9a49fec846ad12ac06
• Confirmed top contains main c895c1884fa30557c3d20ca24f6e6b7b07daae45.
• Only conflict: package.json
  • Retained transport pretest:unit for shared and local-setup.
  • Retained transport test:prepare including client and local-setup.
  • Used top’s test:unit, including test/agentImagePreparation.test.ts exactly once.
• Resolved tree: 6fca3fd525325d47d1727384f85d0fcee15bbb9e; verified identical between the standalone merge and mandated worktree.
• Lockfile retains fast-uri@3.1.7, qs@6.16.0, and current humanfs versions.

Validation passed:

• Clean npm ci and workspace preparation/build.
• Diff checks.
• API/shared/client/desktop/UI/CLI/root typechecks.
• Focused auth/status/Connect/setup suites.
• Desktop focused: 126/126.
• Platform-safe Connect: 86/86.
• Native durability: 119/119, including credentials 72/72.

The bounded full suite reached file 238/380. It encountered one environment-sensitive config-followup.test.ts assertion (400 versus expected 500 after Docker-backed model discovery was unavailable), then blocked on missing Redis at 127.0.0.1:6379.

Per the critical instruction that the system will commit, I did not manually commit or push. No preview was created because this is not a visual change.

---

🤖 Implementation Details

• Model: GPT-5.6 Sol (high)
• Requested By: @integry
• Time: 19m 43s
• Tokens: 4,285,501 (4,269,683 in / 15,818 out)
• Cost: $3.30

Undo Changes • View Task Execution

---

💡 ProPR Slash Commands

Command	Description	Example
/merge	Merge target branch into this PR and resolve conflicts	/merge
/review	Request an AI code review	/review or /review claude-sonnet
/fix	Implement fixes for issues found by /review	/fix or /fix address the null check issue
/switch	Change the AI model for this PR	/switch claude-opus
/use	Override the model for a single follow-up run	/use claude-sonnet
/ultrafix	Loop review→fix cycles until score goal is met	/ultrafix or /ultrafix goal=8 max=10

_{🤖 Generated by ProPR}
Processing comment ID: 5538342483✓

[github-actions]

Full Test Suite Results

Validation failed during: Full test suite.

• Dependency install: success
• Workspace build: success
• Docs validation: success
• Redis startup: success
• Full test suite: failure

View Test Output

> propr@0.8.15 test:full:prepared
> npm run test:server


> propr@0.8.15 test:server
> node scripts/run-test-suite.mjs


[1/380] apps/desktop/scripts/assert-windows-mvp-package.test.mjs
TAP version 13
# Subtest: Windows MVP ASAR main entry
    # Subtest: uses the rooted listPackage representation accepted by extractFile
    ok 1 - uses the rooted listPackage representation accepted by extractFile
      ---
      duration_ms: 23.570266
      type: 'test'
      ...
    # Subtest: preserves the Windows separator after removing the one archive root
    ok 2 - preserves the Windows separator after removing the one archive root
      ---
      duration_ms: 0.221724
      type: 'test'
      ...
    # Subtest: rejects traversal, duplicate entries, and case-colliding main paths
    ok 3 - rejects traversal, duplicate entries, and case-colliding main paths
      ---
      duration_ms: 0.658551
      type: 'test'
      ...
    1..3
ok 1 - Windows MVP ASAR main entry
  ---
  duration_ms: 25.352739
  type: 'suite'
  ...
1..1
# tests 3
# suites 1
# pass 3
# fail 0
# cancelled 0
# skipped 0
# todo 0
# duration_ms 224.033546

[2/380] apps/desktop/scripts/build-windows-machine-installer.test.mjs
TAP version 13
# Subtest: sets explicit Windows-1252 MSI and summary code pages in probe and production WXS
ok 1 - sets explicit Windows-1252 MSI and summary code pages in probe and production WXS
  ---
  duration_ms: 1.168028
  type: 'test'
  ...
# Subtest: accepts the exact MSI ProductVersion boundary and retains version and upgrade identity in WXS
ok 2 - accepts the exact MSI ProductVersion boundary and retains version and upgrade identity in WXS
  ---
  duration_ms: 0.329315
  type: 'test'
  ...
# Subtest: rejects every unsupported ProductVersion at the direct installer builder entry point
ok 3 - rejects every unsupported ProductVersion at the direct installer builder entry point
  ---
  duration_ms: 1.283232
  type: 'test'
  ...
# Subtest: uses per-machine scope without explicitly authoring the derived ALLUSERS property
ok 4 - uses per-machine scope without explicitly authoring the derived ALLUSERS property
  ---
  duration_ms: 0.384739
  type: 'test'
  ...
# Subtest: authors the complete per-machine Start Menu contract for x64 and ARM64
ok 5 - authors the complete per-machine Start Menu contract for x64 and ARM64
  ---
  duration_ms: 0.961437
  type: 'test'
  ...
# Subtest: selects only the installed x64 WiX directory or an explicit ARM64 build directory
ok 6 - selects only the installed x64 WiX directory or an explicit ARM64 build directory
  ---
  duration_ms: 0.517028
  type: 'test'
  ...
# Subtest: uses a ten-minute timeout only for production Light
ok 7 - uses a ten-minute timeout only for production Light
  ---
  duration_ms: 0.251259
  type: 'test'
  ...
# Subtest: keeps WiX processes and their emitted diagnostics bounded
ok 8 - keeps WiX processes and their emitted diagnostics bounded
  ---
  duration_ms: 0.131828
  type: 'test'
  ...
# Subtest: emits WiX v3 default registry values without empty Name attributes
ok 9 - emits WiX v3 default registry values without empty Name attributes
  ---
  duration_ms: 0.441255
  type: 'test'
  ...
1..9
# tests 9
# suites 0
# pass 9
# fail 0
# cancelled 0
# skipped 0
# todo 0
# duration_ms 193.128149

[3/380] apps/desktop/scripts/packaged-connect-lifecycle.test.mjs
TAP version 13
# Subtest: packaged Connect bounded child lifecycle
    # Subtest: accepts an exact ready proof followed by a clean exit
    ok 1 - accepts an exact ready proof followed by a clean exit
      ---
      duration_ms: 3.992368
      type: 'test'
      ...
    # Subtest: forces a ready app with a hung descendant through an exact bounded taskkill invocation
    ok 2 - forces a ready app with a hung descendant through an exact bounded taskkill invocation
      ---
      duration_ms: 6.280982
      type: 'test'
      ...
    # Subtest: keeps timeout-before-ready primary while terminating and draining the tree
    ok 3 - keeps timeout-before-ready primary while terminating and draining the tree
      ---
      duration_ms: 16.239118
      type: 'test'
      ...
    # Subtest: classifies asynchronous spawn errors without exposing their message
    ok 4 - classifies asynchronous spawn errors without exposing their message
      ---
      duration_ms: 5.524113
      type: 'test'
      ...
    # Subtest: settles close/timeout races once and never upgrades an early exit to success
    ok 5 - settles close/timeout races once and never upgrades an early exit to success
      ---
      duration_ms: 0.628595
      type: 'test'
      ...
    # Subtest: accepts a clean post-proof close racing a taskkill no-process result
    ok 6 - accepts a clean post-proof close racing a taskkill no-process result
      ---
      duration_ms: 6.716617
      type: 'test'
      ...
    # Subtest: rejects malformed, partial, truncated, and extra-field ready records
    ok 7 - rejects malformed, partial, truncated, and extra-field ready records
      ---
      duration_ms: 7.676653
      type: 'test'
      ...
    # Subtest: terminates an exact-event record whose platform proof is invalid
    ok 8 - terminates an exact-event record whose platform proof is invalid
      ---
      duration_ms: 0.958673
      type: 'test'
      ...
    # Subtest: fails after proof when Windows tree termination cannot be proven
    ok 9 - fails after proof when Windows tree termination cannot be proven
      ---
      duration_ms: 5.263681
      type: 'test'
      ...
    # Subtest: never returns secret-bearing raw output or non-allowlisted record fields
    ok 10 - never returns secret-bearing raw output or non-allowlisted record fields
      ---
      duration_ms: 1.073105
      type: 'test'
      ...
    # Subtest: revokes success when sensitive output arrives after the exact ready proof
    ok 11 - revokes success when sensitive output arrives after the exact ready proof
      ---
      duration_ms: 0.733824
      type: 'test'
      ...
    # Subtest: rejects a JSON-escaped Windows path in a non-allowlisted record before readiness
    ok 12 - rejects a JSON-escaped Windows path in a non-allowlisted record before readiness
      ---
      duration_ms: 1.012103
      type: 'test'
      ...
    # Subtest: revokes success for a JSON-escaped Windows path after the exact ready proof
    ok 13 - revokes success for a JSON-escaped Windows path after the exact ready proof
      ---
      duration_ms: 0.642426
      type: 'test'
      ...
    # Subtest: revokes success when a JSON-escaped Windows path follows the record-count cap
    ok 14 - revokes success when a JSON-escaped Windows path follows the record-count cap
      ---
      duration_ms: 1.904706
      type: 'test'
      ...
    # Subtest: revokes success when a JSON-escaped Windows path follows the byte cap
    ok 15 - revokes success when a JSON-escaped Windows path follows the byte cap
      ---
      duration_ms: 4.319019
      type: 'test'
      ...
    1..15
ok 1 - packaged Connect bounded child lifecycle
  ---
  duration_ms: 64.502768
  type: 'suite'
  ...
# Subtest: packaged Connect fixture cleanup
    # Subtest: retries a transient Windows EBUSY only inside the authorized fixture
    ok 1 - retries a transient Windows EBUSY only inside the authorized fixture
      ---
      duration_ms: 4.909769
      type: 'test'
      ...
    # Subtest: redacts cleanup failure and preserves the primary lifecycle outcome
    ok 2 - redacts cleanup failure and preserves the primary lifecycle outcome
      ---
      duration_ms: 0.89072
      type: 'test'
      ...
    # Subtest: bounds a never-settling removal and preserves the primary result
    ok 3 - bounds a never-settling removal and preserves the primary result
      ---
      duration_ms: 10.051096
      type: 'test'
      ...
    # Subtest: bounds a never-settling authorization call as a fixed cleanup failure
    ok 4 - bounds a never-settling authorization call as a fixed cleanup failure
      ---
      duration_ms: 9.696011
      type: 'test'
      ...
    # Subtest: isolates default Windows filesystem cleanup from the harness process
    ok 5 - isolates default Windows filesystem cleanup from the harness process
      ---
      duration_ms: 33.304139
      type: 'test'
      ...
    # Subtest: refuses a link, renamed leaf, or fixture outside the canonical temporary parent
    ok 6 - refuses a link, renamed leaf, or fixture outside the canonical temporary parent
      ---
      duration_ms: 0.660244
      type: 'test'
      ...
    1..6
ok 2 - packaged Connect fixture cleanup
  ---
  duration_ms: 59.814233
  type: 'suite'
  ...
1..2
# tests 21
# suites 2
# pass 21
# fail 0
# cancelled 0
# skipped 0
# todo 0
# duration_ms 303.185597

[4/380] apps/desktop/scripts/packaged-layout.test.mjs
TAP version 13
# Subtest: packaged desktop event parsing
    # Subtest: returns the first full record for the exact matching event
    ok 1 - returns the first full record for the exact matching event
      ---
      duration_ms: 1.004992
      type: 'test'
      ...
    # Subtest: returns undefined when the event is absent
    ok 2 - returns undefined when the event is absent
      ---
      duration_ms: 0.138028
      type: 'test'
      ...
    1..2
ok 1 - packaged desktop event parsing
  ---
  duration_ms: 1.804806
  type: 'suite'
  ...
# Subtest: packaged desktop layout assertions
    # Subtest: retains the exact 1280x820 Linux Xvfb proof
    ok 1 - retains the exact 1280x820 Linux Xvfb proof
      ---
      duration_ms: 0.709217
      type: 'test'
      ...
    # Subtest: accepts a safe 1024x720 Windows display clamp with intact contained content
    ok 2 - accepts a safe 1024x720 Windows display clamp with intact contained content
      ---
      duration_ms: 0.144958
      type: 'test'
      ...
    # Subtest: rejects unsafe Windows clamps and content outside the visible work area
    ok 3 - rejects unsafe Windows clamps and content outside the visible work area
      ---
      duration_ms: 0.164978
      type: 'test'
      ...
    1..3
ok 2 - packaged desktop layout assertions
  ---
  duration_ms: 1.242981
  type: 'suite'
  ...
1..2
# tests 5
# suites 2
# pass 5
# fail 0
# cancelled 0
# skipped 0
# todo 0
# duration_ms 176.736892

[5/380] apps/desktop/scripts/packaged-smoke-support.test.mjs
TAP version 13
# Subtest: packaged smoke native window layout
    # Subtest: accepts the preferred size while retaining responsive containment
    ok 1 - accepts the preferred size while retaining responsive containment
      ---
      duration_ms: 1.407277
      type: 'test'
      ...
    # Subtest: accepts the 1024x720-clamped size while retaining responsive containment
    ok 2 - accepts the 1024x720-clamped size while retaining responsive containment
      ---
      duration_ms: 0.12633
      type: 'test'
      ...
    # Subtest: accepts the configured minimum size while retaining responsive containment
    ok 3 - accepts the configured minimum size while retaining responsive containment
      ---
      duration_ms: 0.08606
      type: 'test'
      ...
    # Subtest: accepts the undersized work area while retaining responsive containment
    ok 4 - accepts the undersized work area while retaining responsive containment
      ---
      duration_ms: 0.102334
      type: 'test'
      ...
    # Subtest: rejects an unclamped window or a viewport inconsistent with native content chrome
    ok 5 - rejects an unclamped window or a viewport inconsistent with native content chrome
      ---
      duration_ms: 0.414383
      type: 'test'
      ...
    # Subtest: accepts actual reduced native sizing only when both minimum constraints are exercised
    ok 6 - accepts actual reduced native sizing only when both minimum constraints are exercised
      ---
      duration_ms: 0.204969
      type: 'test'
      ...
    1..6
ok 1 - packaged smoke native window layout
  ---
  duration_ms: 3.332214
  type: 'suite'
  ...
# Subtest: packaged smoke child environment
    # Subtest: defines four isolated launches with exact per-mode environment, argv, and marker contracts
    ok 1 - defines four isolated launches with exact per-mode environment, argv, and marker contracts
      ---
      duration_ms: 1.167366
      type: 'test'
      ...
    # Subtest: passes only platform launch inputs and private profile paths from a hostile parent
    ok 2 - passes only platform launch inputs and private profile paths from a hostile parent
      ---
      duration_ms: 18.463525
      type: 'test'
      ...
    # Subtest: keeps cleanup bounded to the generated profile root
    ok 3 - keeps cleanup bounded to the generated profile root
      ---
      duration_ms: 11.098101
      type: 'test'
      ...
    # Subtest: accepts only a normalized absolute Windows SystemRoot directory
    ok 4 - accepts only a normalized absolute Windows SystemRoot directory
      ---
      duration_ms: 1.254287
      type: 'test'
      ...
    # Subtest: contains no parent environment spread, enumeration, denylist, PATH, or shell launch
    ok 5 - contains no parent environment spread, enumeration, denylist, PATH, or shell launch
      ---
      duration_ms: 2.326111
      type: 'test'
      ...
    # Subtest: serves each named fixture identity paired with its persisted credential
    ok 6 - serves each named fixture identity paired with its persisted credential
      ---
      duration_ms: 1.624565
      type: 'test'
      ...
    # Subtest: requires the adjacent packaged spawn options with LF or CRLF source
    ok 7 - requires the adjacent packaged spawn options with LF or CRLF source
      ---
      duration_ms: 1.442731
      type: 'test'
      ...
    1..7
ok 2 - packaged smoke child environment
  ---
  duration_ms: 37.822108
  type: 'suite'
  ...
1..2
# tests 13
# suites 2
# pass 13
# fail 0
# cancelled 0
# skipped 0
# todo 0
# duration_ms 226.549734

[6/380] apps/desktop/scripts/release-architecture.test.mjs
TAP version 13
# Subtest: machine-wide Windows artifacts require a real MSI compound file
ok 1 - machine-wide Windows artifacts require a real MSI compound file
  ---
  duration_ms: 5.925637
  type: 'test'
  ...
# Subtest: administrative MSI payload inspection
    # Subtest: uses exact fixed native extractor argv and minimal environments
    ok 1 - uses exact fixed native extractor argv and minimal environments
      ---
      duration_ms: 0.83742
      type: 'test'
      ...
    # Subtest: accepts only the canonical application with the one administrative root prefix
    ok 2 - accepts only the canonical application with the one administrative root prefix
      ---
      duration_ms: 8.714399
      type: 'test'
      ...
    # Subtest: rejects path escapes and case collisions from the Linux listing before extraction
    ok 3 - rejects path escapes and case collisions from the Linux listing before extraction
      ---
      duration_ms: 0.592352
      type: 'test'
      ...
    # Subtest: uses fixed missing and duplicate canonical-app codes with bounded counts
    ok 4 - uses fixed missing and duplicate canonical-app codes with bounded counts
      ---
      duration_ms: 5.786268
      type: 'test'
      ...
    # Subtest: distinguishes authority resources, unsafe trees, and architecture mismatch without path data
    ok 5 - distinguishes authority resources, unsafe trees, and architecture mismatch without path data
      ---
      duration_ms: 10.457502
      type: 'test'
      ...
    # Subtest: maps extractor failures to one redacted tool code
    ok 6 - maps extractor failures to one redacted tool code
      ---
      duration_ms: 2.114542
      type: 'test'
      ...
    # Subtest: retains compound-file, per-machine scope, and canonical PE evidence across extraction
    ok 7 - retains compound-file, per-machine scope, and canonical PE evidence across extraction
      ---
      duration_ms: 3.195468
      type: 'test'
      ...
    # Subtest: fails closed on extractor nonzero, stderr, output overflow, and timeout
    ok 8 - fails closed on extractor nonzero, stderr, output overflow, and timeout
      ---
      duration_ms: 123.649942
      type: 'test'
      ...
    1..8
ok 2 - administrative MSI payload inspection
  ---
  duration_ms: 156.101897
  type: 'suite'
  ...
# Subtest: DEB and RPM executable layouts
    # Subtest: accept only the canonical regular ELF payload and documented launcher symlink
    ok 1 - accept only the canonical regular ELF payload and documented launcher symlink
      ---
      duration_ms: 13.875061
      type: 'test'
      ...
    # Subtest: reject missing and extra payload names for both package formats
    ok 2 - reject missing and extra payload names for both package formats
      ---
      duration_ms: 11.330155
      type: 'test'
      ...
    # Subtest: reject unexpected same-name file types and non-ELF or cross-architecture payloads
    ok 3 - reject unexpected same-name file types and non-ELF or cross-architecture payloads
      ---
      duration_ms: 12.553316
      type: 'test'
      ...
    # Subtest: reject launcher escapes, cycles, and targets other than the canonical payload
    ok 4 - reject launcher escapes, cycles, and targets other than the canonical payload
      ---
      duration_ms: 8.727219
      type: 'test'
      ...
    # Subtest: reject special files with the executable name
    ok 5 - reject special files with the executable name
      ---
      duration_ms: 7.771655
      type: 'test'
      ...
    1..5
ok 3 - DEB and RPM executable layouts
  ---
  duration_ms: 54.557328
  type: 'suite'
  ...
# Subtest: DMG application layout
    # Subtest: accepts the real Forge tree with its install link and nested Electron helper bundles
    ok 1 - accepts the real Forge tree with its install link and nested Electron helper bundles
      ---
      duration_ms: 11.900599
      type: 'test'
      ...
    # Subtest: rejects a symbolic-link canonical helper bundle
    ok 2 - rejects a symbolic-link canonical helper bundle
      ---
      duration_ms: 5.593617
      type: 'test'
      ...
    # Subtest: rejects a symbolic-link canonical helper executable ancestor
    ok 3 - rejects a symbolic-link canonical helper executable ancestor
      ---
      duration_ms: 5.431919
      type: 'test'
      ...
    # Subtest: rejects every symbolic link outside canonical framework internals
    ok 4 - rejects every symbolic link outside canonical framework internals
      ---
      duration_ms: 7.691069
      type: 'test'
      ...
    # Subtest: rejects escaping, cyclic, missing, and case-mismatched framework symbolic links
    ok 5 - rejects escaping, cyclic, missing, and case-mismatched framework symbolic links
      ---
      duration_ms: 34.053066
      type: 'test'
      ...
    # Subtest: never treats Linux 7z sanitized install-link output as native layout evidence
    ok 6 - never treats Linux 7z sanitized install-link output as native layout evidence
      ---
      duration_ms: 6.438594
      type: 'test'
      ...
    # Subtest: rejects wrong bundles, alternate same-name executables, and canonical symlink escapes
    ok 7 - rejects wrong bundles, alternate same-name executables, and canonical symlink escapes
      ---
      duration_ms: 11.869061
      type: 'test'
      ...
    # Subtest: rejects alternate top-level application bundles
    ok 8 - rejects alternate top-level application bundles
      ---
      duration_ms: 5.314913
      type: 'test'
      ...
    # Subtest: rejects unsafe links inside the canonical application bundle
    ok 9 - rejects unsafe links inside the canonical application bundle
      ---
      duration_ms: 7.265943
      type: 'test'
      ...
    # Subtest: rejects non-helper nested application bundles
    ok 10 - rejects non-helper nested application bundles
      ---
      duration_ms: 9.065973
      type: 'test'
      ...
    # Subtest: rejects case-colliding top-level entries when the filesystem permits them
    ok 11 - rejects case-colliding top-level entries when the filesystem permits them
      ---
      duration_ms: 8.369816
      type: 'test'
      ...
    # Subtest: rejects special files inside the canonical application bundle
    ok 12 - rejects special files inside the canonical application bundle
      ---
      duration_ms: 12.749847
      type: 'test'
      ...
    1..12
ok 4 - DMG application layout
  ---
  duration_ms: 126.303601
  type: 'suite'
  ...
1..4
# tests 26
# suites 3
# pass 26
# fail 0
# cancelled 0
# skipped 0
# todo 0
# duration_ms 512.001477

[7/380] apps/desktop/scripts/release-artifacts.test.mjs
TAP version 13
# Subtest: desktop release artifacts
    # Subtest: stages named artifacts and finalizes unsigned validation metadata
    ok 1 - stages named artifacts and finalizes unsigned validation metadata
      ---
      duration_ms: 81.058759
      type: 'test'
      ...
    # Subtest: rejects extensionless, doubled-extension, case-conflicting, duplicate, wrong-kind, stale, and mixed-target names
    ok 2 - rejects extensionless, doubled-extension, case-conflicting, duplicate, wrong-kind, stale, and mixed-target names
      ---
      duration_ms: 189.689158
      type: 'test'
      ...
    # Subtest: rejects altered DMG bytes even when fragment artifact metadata is rewritten
    ok 3 - rejects altered DMG bytes even when fragment artifact metadata is rewritten
      ---
      duration_ms: 15.757713
      type: 'test'
      ...
    # Subtest: rejects permanent DMG replacement or in-place mutation during held inspection without emitting evidence
    ok 4 - rejects permanent DMG replacement or in-place mutation during held inspection without emitting evidence
      ---
      duration_ms: 7.497923
      type: 'test'
      ...
    # Subtest: keeps held A bytes, evidence, and publication stable when original and public pathnames change during inspection
    ok 5 - keeps held A bytes, evidence, and publication stable when original and public pathnames change during inspection
      ---
      duration_ms: 6.579531
      type: 'test'
      ...
    # Subtest: continues to reject a mutable pathname passed directly to DMG inspection
    ok 6 - continues to reject a mutable pathname passed directly to DMG inspection
      ---
      duration_ms: 0.215154
      type: 'test'
      ...
    # Subtest: requires explicit fixture authority for Windows-hosted DMG evidence tests
    ok 7 - requires explicit fixture authority for Windows-hosted DMG evidence tests # SKIP
      ---
      duration_ms: 0.063445
      type: 'test'
      ...
    # Subtest: accepts real Darwin mode-0700 directory and mode-0600 single-link file authority
    ok 8 - accepts real Darwin mode-0700 directory and mode-0600 single-link file authority # SKIP
      ---
      duration_ms: 0.097276
      type: 'test'
      ...
    # Subtest: rejects native Darwin broad mode, foreign owner, extra link, replacement type, and symlink with fixed authority codes
    ok 9 - rejects native Darwin broad mode, foreign owner, extra link, replacement type, and symlink with fixed authority codes # SKIP
      ---
      duration_ms: 0.111458
      type: 'test'
      ...
    # Subtest: accepts native xattr/ctime-only change when held bytes and identity are unchanged
    ok 10 - accepts native xattr/ctime-only change when held bytes and identity are unchanged # SKIP
      ---
      duration_ms: 0.203206
      type: 'test'
      ...
    # Subtest: does not emit claimed DMG layout evidence without the native-validation marker
    ok 11 - does not emit claimed DMG layout evidence without the native-validation marker
      ---
      duration_ms: 5.546912
      type: 'test'
      ...
    # Subtest: strictly rejects missing, mixed, stale, malformed, or fabricated native DMG evidence
    ok 12 - strictly rejects missing, mixed, stale, malformed, or fabricated native DMG evidence
      ---
      duration_ms: 262.589129
      type: 'test'
      ...
    # Subtest: rejects native DMG evidence copied between x64 and arm64 fragments
    ok 13 - rejects native DMG evidence copied between x64 and arm64 fragments
      ---
      duration_ms: 19.620696
      type: 'test'
      ...
    # Subtest: rejects duplicate target fragments before aggregation
    ok 14 - rejects duplicate target fragments before aggregation
      ---
      duration_ms: 16.238742
      type: 'test'
      ...
    # Subtest: rejects either Windows fragment when the installed ordinary-user application gate was skipped
    ok 15 - rejects either Windows fragment when the installed ordinary-user application gate was skipped
      ---
      duration_ms: 62.456169
      type: 'test'
      ...
    # Subtest: fails closed when trusted update signing configuration is incomplete
    ok 16 - fails closed when trusted update signing configuration is incomplete
      ---
      duration_ms: 48.883399
      type: 'test'
      ...
    # Subtest: signs cryptographically bound feeds only in the trusted release phase
    ok 17 - signs cryptographically bound feeds only in the trusted release phase
      ---
      duration_ms: 45.066935
      type: 'test'
      ...
    # Subtest: refuses to sign a renamed extensionless distributable
    ok 18 - refuses to sign a renamed extensionless distributable
      ---
      duration_ms: 28.949095
      type: 'test'
      ...
    # Subtest: refuses to sign when artifact bytes changed after unsigned finalization
    ok 19 - refuses to sign when artifact bytes changed after unsigned finalization
      ---
      duration_ms: 31.394235
      type: 'test'
      ...
    # Subtest: rejects unsigned production metadata and actual signer mismatches
    ok 20 - rejects unsigned production metadata and actual signer mismatches
      ---
      duration_ms: 65.398055
      type: 'test'
      ...
    # Subtest: rejects mixed Windows signers and tampered fingerprint evidence
    ok 21 - rejects mixed Windows signers and tampered fingerprint evidence
      ---
      duration_ms: 38.57169
      type: 'test'
      ...
    # Subtest: parses x64 and arm64 ELF, PE, and Mach-O executable fixtures
    ok 22 - parses x64 and arm64 ELF, PE, and Mach-O executable fixtures
      ---
      duration_ms: 0.919724
      type: 'test'
      ...
    # Subtest: derives Windows target architecture from the full NUPKG independently of its supported bootstrapper
    ok 23 - derives Windows target architecture from the full NUPKG independently of its supported bootstrapper
      ---
      duration_ms: 13.125723
      type: 'test'
      ...
    # Subtest: binds ZIP and NUPKG executables to exact maker-specific canonical paths
    ok 24 - binds ZIP and NUPKG executables to exact maker-specific canonical paths
      ---
      duration_ms: 3.025513
      type: 'test'
      ...
    # Subtest: rejects missing, corrupt, mismatched, and ambiguous packaged Windows authority helpers
    ok 25 - rejects missing, corrupt, mismatched, and ambiguous packaged Windows authority helpers
      ---
      duration_ms: 4.416566
      type: 'test'
      ...
    # Subtest: accepts only the real Forge macOS framework-internal symbolic-link layout
    ok 26 - accepts only the real Forge macOS framework-internal symbolic-link layout
      ---
      duration_ms: 3.687299
      type: 'test'
      ...
    # Subtest: rejects hostile macOS ZIP symbolic links before trusting their payloads
    ok 27 - rejects hostile macOS ZIP symbolic links before trusting their payloads
      ---
      duration_ms: 13.291783
      type: 'test'
      ...
    # Subtest: rejects unsafe, duplicate, shadowed, forged, alternate, and noncanonical archive layouts
    ok 28 - rejects unsafe, duplicate, shadowed, forged, alternate, and noncanonical archive layouts
      ---
      duration_ms: 3.739092
      type: 'test'
      ...
    # Subtest: rejects cross-labeled package architectures at staging and finalization
    ok 29 - rejects cross-labeled package architectures at staging and finalization
      ---
      duration_ms: 28.146983
      type: 'test'
      ...
    1..29
ok 1 - desktop release artifacts
  ---
  duration_ms: 998.354162
  type: 'suite'
  ...
1..1
# tests 29
# suites 1
# pass 25
# fail 0
# cancelled 0
# skipped 4
# todo 0
# duration_ms 1189.170486

[8/380] apps/desktop/scripts/release-preflight.test.mjs
TAP version 13
# Subtest: desktop release preflight
    # Subtest: accepts only a new immutable tag reachable from protected main and a protected environment
    ok 1 - accepts only a new immutable tag reachable from protected main and a protected environment
      ---
      duration_ms: 3.054657
      type: 'test'
      ...
    # Subtest: accepts an authorization-visible bypass list and fails closed for hidden or denied ruleset details
    ok 2 - accepts an authorization-visible bypass list and fails closed for hidden or denied ruleset details
      ---
      duration_ms: 1.296561
      type: 'test'
      ...
    # Subtest: paginates repository rulesets and reads every full rule definition
    ok 3 - paginates repository rulesets and reads every full rule definition
      ---
      duration_ms: 3.604315
      type: 'test'
      ...
    # Subtest: requires an exact active bypass-free update and deletion tag ruleset
    ok 4 - requires an exact active bypass-free update and deletion tag ruleset
      ---
      duration_ms: 2.081853
      type: 'test'
      ...
    # Subtest: rejects ruleset mutation or deletion during preflight
    ok 5 - rejects ruleset mutation or deletion during preflight
      ---
      duration_ms: 1.247417
      type: 'test'
      ...
    # Subtest: requires the complete effective environment policy set to be exactly desktop-v* tags
    ok 6 - requires the complete effective environment policy set to be exactly desktop-v* tags
      ---
      duration_ms: 3.048969
      type: 'test'
      ...
    # Subtest: requires the separately protected preflight credential environment
    ok 7 - requires the separately protected preflight credential environment
      ---
      duration_ms: 0.543518
      type: 'test'
      ...
    # Subtest: paginates all environment policies and rejects a permissive policy on a later page
    ok 8 - paginates all environment policies and rejects a permissive policy on a later page
      ---
      duration_ms: 0.670839
      type: 'test'
      ...
    # Subtest: rejects missing or ambiguous environment protection and explicit API denial
    ok 9 - rejects missing or ambiguous environment protection and explicit API denial
      ---
      duration_ms: 1.007406
      type: 'test'
      ...
    # Subtest: rejects tags not created by this push, tags off main, and moved or existing releases
    ok 10 - rejects tags not created by this push, tags off main, and moved or existing releases
      ---
      duration_ms: 1.443873
      type: 'test'
      ...
    1..10
ok 1 - desktop release preflight
  ---
  duration_ms: 19.233955
  type: 'suite'
  ...
1..1
# tests 10
# suites 1
# pass 10
# fail 0
# cancelled 0
# skipped 0
# todo 0
# duration_ms 218.838624

[9/380] apps/desktop/scripts/release-publish.test.mjs
TAP version 13
# Subtest: atomic desktop release publication
    # Subtest: creates a draft, paginates and verifies the exact final assets, then publishes
    ok 1 - creates a draft, paginates and verifies the exact final assets, then publishes
      ---
      duration_ms: 126.787219
      type: 'test'
      ...
    # Subtest: leaves a partial upload as a recoverable draft and resumes only matching assets
    ok 2 - leaves a partial upload as a recoverable draft and resumes only matching assets
      ---
      duration_ms: 9.014431
      type: 'test'
      ...
    # Subtest: rejects unexpected, duplicate, size, and content-digest asset mismatches without publishing
    ok 3 - rejects unexpected, duplicate, size, and content-digest asset mismatches without publishing
      ---
      duration_ms: 6.470768
      type: 'test'
      ...
    # Subtest: rejects tag drift before publishing the verified draft
    ok 4 - rejects tag drift before publishing the verified draft
      ---
      duration_ms: 3.650133
      type: 'test'
      ...
    # Subtest: rejects local files outside or missing from finalized checksums
    ok 5 - rejects local files outside or missing from finalized checksums
      ---
      duration_ms: 1.848051
      type: 'test'
      ...
    1..5
ok 1 - atomic desktop release publication
  ---
  duration_ms: 148.877407
  type: 'suite'
  ...
1..1
# tests 5
# suites 1
# pass 5
# fail 0
# cancelled 0
# skipped 0
# todo 0
# duration_ms 328.45269

[10/380] apps/desktop/scripts/verify-darwin-image.test.mjs
TAP version 13
# Subtest: Darwin image verification retries only bounded documented resource states
ok 1 - Darwin image verification retries only bounded documented resource states
  ---
  duration_ms: 11.258663
  type: 'test'
  ...
# Subtest: Darwin image verification does not retry malformed/truncated images or accept mutation
ok 2 - Darwin image verification does not retry malformed/truncated images or accept mutation
  ---
  duration_ms: 7.692526
  type: 'test'
  ...
# Subtest: Darwin image verification holds a fixed hdiutil image behind a real mutation and replacement barrier
ok 3 - Darwin image verification holds a fixed hdiutil image behind a real mutation and replacement barrier # SKIP
  ---
  duration_ms: 0.206521
  type: 'test'
  ...
1..3
# tests 3
# suites 0
# pass 2
# fail 0
# cancelled 0
# skipped 1
# todo 0
# duration_ms 189.405391

[11/380] apps/desktop/scripts/windows-fixture-acl.test.mjs
TAP version 13
# Subtest: keeps the encoded Windows PowerShell 5.1 ACL helper fail-closed and byte-empty
ok 1 - keeps the encoded Windows PowerShell 5.1 ACL helper fail-closed and byte-empty # SKIP
  ---
  duration_ms: 0.504399
  type: 'test'
  ...
1..1
# tests 1
# suites 0
# pass 0
# fail 0
# cancelled 0
# skipped 1
# todo 0
# duration_ms 164.180836

[12/380] apps/desktop/scripts/windows-packaged-connect-staging.test.mjs
TAP version 13
# Subtest: capture redirection mismatch reporting is total and redacted for each launch predicate
ok 1 - capture redirection mismatch reporting is total and redacted for each launch predicate
  ---
  duration_ms: 3.184402
  type: 'test'
  ...
# Subtest: positive host Node producer failures expose only fixed allowlisted evidence
ok 2 - positive host Node producer failures expose only fixed allowlisted evidence
  ---
  duration_ms: 0.98314
  type: 'test'
  ...
# Subtest: hostile diagnostics reject uppercase PATH without matching fixed path subphases
ok 3 - hostile diagnostics reject uppercase PATH without matching fixed path subphases
  ---
  duration_ms: 0.140892
  type: 'test'
  ...
# Subtest: packaged Windows Connect staging contract
    # Subtest: accepts only the exact generated leaf below the fixed canonical staging parent
    ok 1 - accepts only the exact generated leaf below the fixed canonical staging parent
      ---
      duration_ms: 1.032724
      type: 'test'
      ...
    # Subtest: accepts one bounded parent-owned handoff and rejects every other input shape
    ok 2 - accepts one bounded parent-owned handoff and rejects every other input shape
      ---
      duration_ms: 0.418921
      type: 'test'
      ...
    # Subtest: emits only fixed staged-contract predicate evidence
    ok 3 - emits only fixed staged-contract predicate evidence
      ---
      duration_ms: 0.563859
      type: 'test'
      ...
    # Subtest: rejects missing, inaccessible, reparse, wrong-type, and noncanonical entries before preflight
    ok 4 - rejects missing, inaccessible, reparse, wrong-type, and noncanonical entries before preflight
      ---
      duration_ms: 1.075539
      type: 'test'
      ...
    # Subtest: proves target PE architecture and ordinary-user access before returning the executable
    ok 5 - proves target PE architecture and ordinary-user access before returning the executable
      ---
      duration_ms: 0.768176
      type: 'test'
      ...
    # Subtest: maps a hostile preflight callback throw totally and redacts all supplied evidence
    ok 6 - maps a hostile preflight callback throw totally and redacts all supplied evidence
      ---
      duration_ms: 0.500043
      type: 'test'
      ...
    # Subtest: keeps PE type and architecture failures distinct
    ok 7 - keeps PE type and architecture failures distinct
      ---
      duration_ms: 0.461845
      type: 'test'
      ...
    # Subtest: maps hostile exceptions to a fixed path-free allowlist
    ok 8 - maps hostile exceptions to a fixed path-free allowlist
      ---
      duration_ms: 0.361054
      type: 'test'
      ...
    # Subtest: classifies fixed phases without collapsing pre-spawn failures into spawn
    ok 9 - classifies fixed phases without collapsing pre-spawn failures into spawn
      ---
      duration_ms: 0.382535
      type: 'test'
      ...
    # Subtest: maps every preflight transport and exit result to fixed subphase evidence
    ok 10 - maps every preflight transport and exit result to fixed subphase evidence
      ---
      duration_ms: 0.899734
      type: 'test'
      ...
    # Subtest: preflight diagnostics exclude path, SID, account name, stdout, and stderr evidence
    ok 11 - preflight diagnostics exclude path, SID, account name, stdout, and stderr evidence
      ---
      duration_ms: 0.307032
      type: 'test'
      ...
    # Subtest: scopes staged-root and executable leak needles to Windows
    ok 12 - scopes staged-root and executable leak needles to Windows
      ---
      duration_ms: 0.180211
      type: 'test'
      ...
    1..12
ok 4 - packaged Windows Connect staging contract
  ---
  duration_ms: 7.620518
  type: 'suite'
  ...
# Subtest: the workflow stages before alternate credentials and the harness preflights before application spawn
ok 5 - the workflow stages before alternate credentials and the harness preflights before application spawn
  ---
  duration_ms: 20.7294
  type: 'test'
  ...
# Subtest: the PS5.1 child-failure parser accepts only the two exact bounded producer schemas
ok 6 - the PS5.1 child-failure parser accepts only the two exact bounded producer schemas # SKIP
  ---
  duration_ms: 0.124427
  type: 'test'
  ...
# Subtest: the PS5.1 capture parser enforces native owner ACL path and identity authority
ok 7 - the PS5.1 capture parser enforces native owner ACL path and identity authority # SKIP
  ---
  duration_ms: 0.05285
  type: 'test'
  ...
# Subtest: nominal reaches zero with exact protected stdout and stderr capture
ok 8 - nominal reaches zero with exact protected stdout and stderr capture # SKIP
  ---
  duration_ms: 0.047581
  type: 'test'
  ...
# Subtest: a forced nonzero capture producer maps only to redirect-child-exit
ok 9 - a forced nonzero capture producer maps only to redirect-child-exit # SKIP
  ---
  duration_ms: 0.030586
  type: 'test'
  ...
# Subtest: empty and hostile producer results map only to fixed bounded buckets
ok 10 - empty and hostile producer results map only to fixed bounded buckets # SKIP
  ---
  duration_ms: 0.148213
  type: 'test'
  ...
# Subtest: each host preflight failure transition emits one fixed redacted subphase
ok 11 - each host preflight failure transition emits one fixed redacted subphase # SKIP
  ---
  duration_ms: 0.038929
  type: 'test'
  ...
# Subtest: the PS5.1 host Node producer rejects zero command evidence
ok 12 - the PS5.1 host Node producer rejects zero command evidence # SKIP
  ---
  duration_ms: 0.050977
  type: 'test'
  ...
# Subtest: the PS5.1 host Node producer rejects duplicate command evidence
ok 13 - the PS5.1 host Node producer rejects duplicate command evidence # SKIP
  ---
  duration_ms: 0.027541
  type: 'test'
  ...
# Subtest: the PS5.1 host Node producer rejects multiple command evidence
ok 14 - the PS5.1 host Node producer rejects multiple command evidence # SKIP
  ---
  duration_ms: 0.028122
  type: 'test'
  ...
# Subtest: the PS5.1 host Node producer rejects mixed-types command evidence
ok 15 - the PS5.1 host Node producer rejects mixed-types command evidence # SKIP
  ---
  duration_ms: 0.023646
  type: 'test'
  ...
# Subtest: the PS5.1 host Node producer rejects case-collision command evidence
ok 16 - the PS5.1 host Node producer rejects case-collision command evidence # SKIP
  ---
  duration_ms: 0.038869
  type: 'test'
  ...
# Subtest: the PS5.1 host Node producer rejects non-application command evidence
ok 17 - the PS5.1 host Node producer rejects non-application command evidence # SKIP
  ---
  duration_ms: 0.032179
  type: 'test'
  ...
# Subtest: the PS5.1 host Node producer rejects missing-source command evidence
ok 18 - the PS5.1 host Node producer rejects missing-source command evidence # SKIP
  ---
  duration_ms: 0.023806
  type: 'test'
  ...
# Subtest: the PS5.1 host Node producer rejects non-scalar-source command evidence
ok 19 - the PS5.1 host Node producer rejects non-scalar-source command evidence # SKIP
  ---
  duration_ms: 0.024286
  type: 'test'
  ...
# Subtest: the PS5.1 host Node producer returns one validated scalar Source
ok 20 - the PS5.1 host Node producer returns one validated scalar Source # SKIP
  ---
  duration_ms: 0.082343
  type: 'test'
  ...
# Subtest: the host launcher accepts only a stable final ordinary-file identity
ok 21 - the host launcher accepts only a stable final ordinary-file identity # SKIP
  ---
  duration_ms: 0.07994
  type: 'test'
  ...
# Subtest: the bounded cleanup source requires proven child exit and bounded stream closure
ok 22 - the bounded cleanup source requires proven child exit and bounded stream closure
  ---
  duration_ms: 7.837079
  type: 'test'
  ...
# Subtest: the native timeout path terminates an actual child and descendant tree
ok 23 - the native timeout path terminates an actual child and descendant tree # SKIP
  ---
  duration_ms: 0.124767
  type: 'test'
  ...
# Subtest: a real never-settling cleanup is bounded, terminated, and remains secondary
ok 24 - a real never-settling cleanup is bounded, terminated, and remains secondary # SKIP
  ---
  duration_ms: 0.043796
  type: 'test'
  ...
1..24
# tests 35
# suites 1
# pass 17
# fail 0
# cancelled 0
# skipped 18
# todo 0
# duration_ms 239.357343

[13/380] apps/desktop/src/connect-discovery.test.ts
TAP version 13
# Subtest: desktop fixed-root Connect discovery
    # Subtest: projects only a stable opaque profile and canonical endpoint
    ok 1 - projects only a stable opaque profile and canonical endpoint
      ---
      duration_ms: 1.653899
      type: 'test'
      ...
    # Subtest: fences rediscovery to an existing managed profile and preserves its id and label
    ok 2 - fences rediscovery to an existing managed profile and preserves its id and label
      ---
      duration_ms: 0.700133
      type: 'test'
      ...
    # Subtest: discards rediscovery when the exact saved profile changes while native discovery awaits
    ok 3 - discards rediscovery when the exact saved profile changes while native discovery awaits
      ---
      duration_ms: 0.377158
      type: 'test'
      ...
    # Subtest: fails closed for unsupported hosts and malformed native results
    ok 4 - fails closed for unsupported hosts and malformed native results
      ---
      duration_ms: 0.443348
      type: 'test'
      ...
    # Subtest: generation-conditionally clears failed intents while keeping prior activations fenced
    ok 5 - generation-conditionally clears failed intents while keeping prior activations fenced
      ---
      duration_ms: 0.515155
      type: 'test'
      ...
    # Subtest: scopes discovery freshness per profile and only discards stale same-profile completions
    ok 6 - scopes discovery freshness per profile and only discards stale same-profile completions
      ---
      duration_ms: 1.280697
      type: 'test'
      ...
    1..6
ok 1 - desktop fixed-root Connect discovery
  ---
  duration_ms: 5.817435
  type: 'suite'
  ...
1..1
# tests 6
# suites 1
# pass 6
# fail 0
# cancelled 0
# skipped 0
# todo 0
# duration_ms 361.828396

[14/380] apps/desktop/src/credential-service.pairing-browser.test.ts
TAP version 13
# Subtest: DesktopCredentialService pairing browser sink
    # Subtest: binds the API base, pairing id, and response URL through the final shell validator
    ok 1 - binds the API base, pairing id, and response URL through the final shell validator
      ---
      duration_ms: 56.503561
      type: 'test'
      ...
    # Subtest: rejects a URL replaced after the credential service receives the API response
    ok 2 - rejects a URL replaced after the credential service receives the API response
      ---
      duration_ms: 14.212838
      type: 'test'
      ...
    1..2
ok 1 - DesktopCredentialService pairing browser sink
  ---
  duration_ms: 71.475051
  type: 'suite'
  ...
1..1
# tests 2
# suites 1
# pass 2
# fail 0
# cancelled 0
# skipped 0
# todo 0
# duration_ms 475.988502

[15/380] apps/desktop/src/credential-service.test.ts
TAP version 13
# Subtest: main-process desktop credential service
    # Subtest: fails a relaunched same-origin replacement closed before sending the stored bearer
    ok 1 - fails a relaunched same-origin replacement closed before sending the stored bearer
      ---
      duration_ms: 87.873968
      type: 'test'
      ...
    # Subtest: durably rejects malformed relaunch discovery without sending the stored bearer
    ok 2 - durably rejects malformed relaunch discovery without sending the stored bearer
      ---
      duration_ms: 32.815198
      type: 'test'
      ...
    # Subtest: revalidates an old Socket.IO reconnect and sends zero bearer requests after identity rotation
    ok 3 - revalidates an old Socket.IO reconnect and sends zero bearer requests after identity rotation
      ---
      duration_ms: 42.856889
      type: 'test'
      ...
    # Subtest: fences old and concurrently rotated Connect claims through pairing, commit, and transport activation
    ok 4 - fences old and concurrently rotated Connect claims through pairing, commit, and transport activation
      ---
      duration_ms: 181.931033
      type: 'test'
      ...
    # Subtest: injects the active bearer only for its bound profile origin and strips renderer identity
    ok 5 - injects the active bearer only for its bound profile origin and strips renderer identity
      ---
      duration_ms: 129.520966
      type: 'test'
      ...
    # Subtest: uses only the active bearer when profiles share an origin and never a cookie identity
    ok 6 - uses only the active bearer when profiles share an origin and never a cookie identity
      ---
      duration_ms: 50.490022
      type: 'test'
      ...
    # Subtest: detaches origin and identity mismatches before bearer use or early protocol exits
    ok 7 - detaches origin and identity mismatches before bearer use or early protocol exits
      ---
      duration_ms: 225.308531
      type: 'test'
      ...
    # Subtest: does not mint a ticket when a delayed B probe observes credential replacement with origin A
    ok 8 - does not mint a ticket when a delayed B probe observes credential replacement with origin A
      ---
      duration_ms: 30.402067
      type: 'test'
      ...
    # Subtest: atomically rejects a ticket when delayed activation races with profile B credential A
    ok 9 - atomically rejects a ticket when delayed activation races with profile B credential A
      ---
      duration_ms: 122.510657
      type: 'test'
      ...
    # Subtest: keeps a slow successful same-origin A probe status-only after fast B activates
    ok 10 - keeps a slow successful same-origin A probe status-only after fast B activates
      ---
      duration_ms: 54.967305
      type: 'test'
      ...
    # Subtest: keeps A active while B is only probed and if B selection persistence fails
    ok 11 - keeps A active while B is only probed and if B selection persistence fails
      ---
      duration_ms: 74.714787
      type: 'test'
      ...
    # Subtest: keeps B active during a direct same-origin A probe and rejects replayed activation tickets
    ok 12 - keeps B active during a direct same-origin A probe and rejects replayed activation tickets
      ---
      duration_ms: 56.991615
      type: 'test'
      ...
    # Subtest: rejects activation after candidate removal, selection drift, or exact credential replacement
    ok 13 - rejects activation after candidate removal, selection drift, or exact credential replacement
      ---
      duration_ms: 193.169826
      type: 'test'
      ...
    # Subtest: binds REST and Socket.IO work to one fresh scope and rejects stale or malformed markers
    ok 14 - binds REST and Socket.IO work to one fresh scope and rejects stale or malformed markers
      ---
      duration_ms: 54.940728
      type: 'test'
      ...
    # Subtest: passes through a realistic packaged-origin CORS preflight without renderer identity or bearer injection
    ok 15 - passes through a realistic packaged-origin CORS preflight without renderer identity or bearer injection
      ---
      duration_ms: 0.340182
      type: 'test'
      ...
    # Subtest: rotates scope on every same-profile reprobe and rejects a cold reconnect from the old activation
    ok 16 - rotates scope on every same-profile reprobe and rejects a cold reconnect from the old activation
      ---
      duration_ms: 55.077395
      type: 'test'
      ...
    # Subtest: never sends an A-origin bearer after the profile URL is edited to an attacker origin
    ok 17 - never sends an A-origin bearer after the profile URL is edited to an attacker origin
      ---
      duration_ms: 19.232693
      type: 'test'
      ...
    # Subtest: preserves a re-paired credential and current connection after a stale definitive probe response
    ok 18 - preserves a re-paired credential and current connection after a stale definitive probe response
      ---
      duration_ms: 60.44996
      type: 'test'
      ...
    # Subtest: preserves a replacement credential at a changed origin after a stale definitive probe response
    ok 19 - preserves a replacement credential at a changed origin after a stale definitive probe response
      ---
      duration_ms: 66.0786
      type: 'test'
      ...
    # Subtest: preserves the active profile and credential when an origin edit fails during browser-launch
    ok 20 - preserves the active profile and credential when an origin edit fails during browser-launch
      ---
      duration_ms: 40.306356
      type: 'test'
      ...
    # Subtest: preserves the active profile and credential when an origin edit fails during cancellation
    ok 21 - preserves the active profile and credential when an origin edit fails during cancellation
      ---
      duration_ms: 39.040031
      type: 'test'
      ...
    # Subtest: preserves the active profile and credential when an origin edit fails during expiry
    ok 22 - preserves the active profile and credential when an origin edit fails during expiry
      ---
      duration_ms: 44.553497
      type: 'test'
      ...
    # Subtest: preserves the active profile and credential when an origin edit fails during polling
    ok 23 - preserves the active profile and credential when an origin edit fails during polling
      ---
      duration_ms: 47.112924
      type: 'test'
      ...
    # Subtest: preserves the active profile and credential when an origin edit fails during secure-storage
    ok 24 - preserves the active profile and credential when an origin edit fails during secure-storage
      ---
      duration_ms: 45.597589
      type: 'test'
      ...
    # Subtest: commits an edited profile and replacement credential before revoking the old token
    ok 25 - commits an edited profile and replacement credential before revoking the old token
      ---
      duration_ms: 58.660661
      type: 'test'
      ...
# NATIVE_SCENARIO delivery
    # Subtest: durably journals a provisional delivery before server activation and local publication
    ok 26 - durably journals a provisional delivery before server activation and local publication
      ---
      duration_ms: 27.986616
      type: 'test'
      ...
    # Subtest: retries an encrypted pending A revocation across failure, restart, remote success, and local cleanup failure
    ok 27 - retries an encrypted pending A revocation across failure, restart, remote success, and local cleanup failure
      ---
      duration_ms: 155.243737
      type: 'test'
      ...
# NATIVE_SCENARIO revocation-crash
    # Subtest: recovers B and retries idempotently after a real process crash during-revoke
    ok 28 - recovers B and retries idempotently after a real process crash during-revoke
      ---
      duration_ms: 555.852282
      type: 'test'
      ...
# NATIVE_SCENARIO revocation-crash
    # Subtest: recovers B and retries idempotently after a real process crash after-remote-success
    ok 29 - recovers B and retries idempotently after a real process crash after-remote-success
      ---
      duration_ms: 413.439455
      type: 'test'
      ...
    # Subtest: cleans durable retry material only for endpoint-bound terminal 204 success
    ok 30 - cleans durable retry material only for endpoint-bound terminal 204 success
      ---
      duration_ms: 29.435077
      type: 'test'
      ...
    # Subtest: cleans durable retry material only for endpoint-bound terminal 404 TOKEN_NOT_FOUND
    ok 31 - cleans durable retry material only for endpoint-bound terminal 404 TOKEN_NOT_FOUND
      ---
      duration_ms: 34.66853
      type: 'test'
      ...
    # Subtest: cleans durable retry material only for endpoint-bound terminal 401 INSTANCE_TOKEN_REVOKED
    ok 32 - cleans durable retry material only for endpoint-bound terminal 401 INSTANCE_TOKEN_REVOKED
      ---
      duration_ms: 191.916087
      type: 'test'
      ...
    # Subtest: cleans durable retry material only for endpoint-bound terminal 401 INSTANCE_TOKEN_EXPIRED
    ok 33 - cleans durable retry material only for endpoint-bound terminal 401 INSTANCE_TOKEN_EXPIRED
      ---
      duration_ms: 39.648565
      type: 'test'
      ...
    # Subtest: retains encrypted retry material for empty 401
    ok 34 - retains encrypted retry material for empty 401
      ---
      duration_ms: 157.437166
      type: 'test'
      ...
    # Subtest: retains encrypted retry material for empty 404
    ok 35 - retains encrypted retry material for empty 404
      ---
      duration_ms: 23.243667
      type: 'test'
      ...
    # Subtest: retains encrypted retry material for HTML route 404
    ok 36 - retains encrypted retry material for HTML route 404
      ---
      duration_ms: 23.226602
      type: 'test'
      ...
    # Subtest: retains encrypted retry material for malformed JSON
    ok 37 - retains encrypted retry material for malformed JSON
      ---
      duration_ms: 25.853321
      type: 'test'
      ...
    # Subtest: retains encrypted retry material for wrong content type
    ok 38 - retains encrypted retry material for wrong content type
      ---
      duration_ms: 173.664236
      type: 'test'
      ...
    # Subtest: retains encrypted retry material for wrong schema version
    ok 39 - retains encrypted retry material for wrong schema version
      ---
      duration_ms: 24.236311
      type: 'test'
      ...
    # Subtest: retains encrypted retry material for wrong credential generation
    ok 40 - retains encrypted retry material for wrong credential generation
      ---
      duration_ms: 21.912453
      type: 'test'
      ...
    # Subtest: retains encrypted retry material for unknown terminal code
    ok 41 - retains encrypted retry material for unknown terminal code
      ---
      duration_ms: 155.554986
      type: 'test'
      ...
    # Subtest: retains encrypted retry material for status/code mismatch
    ok 42 - retains encrypted retry material for status/code mismatch
      ---
      duration_ms: 23.636779
      type: 'test'
      ...
    # Subtest: retains encrypted retry material for redirect
    ok 43 - retains encrypted retry material for redirect
      ---
      duration_ms: 23.600894
      type: 'test'
      ...
    # Subtest: retains encrypted retry material for redirected 204
    ok 44 - retains encrypted retry material for redirected 204
      ---
      duration_ms: 24.181919
      type: 'test'
      ...
    # Subtest: retains encrypted retry material for wrong endpoint 204
    ok 45 - retains encrypted retry material for wrong endpoint 204
      ---
      duration_ms: 141.898719
      type: 'test'
      ...
    # Subtest: retains encrypted retry material for server failure
    ok 46 - retains encrypted retry material for server failure
      ---
      duration_ms: 23.328359
      type: 'test'
      ...
    # Subtest: retains encrypted retry material for oversized JSON
    ok 47 - retains encrypted retry material for oversized JSON
      ---
      duration_ms: 21.924881
      type: 'test'
      ...
    # Subtest: accepts encrypted retry material for chunked 2048-byte terminal JSON
    ok 48 - accepts encrypted retry material for chunked 2048-byte terminal JSON
      ---
      duration_ms: 43.401084
      type: 'test'
      ...
    # Subtest: retains encrypted retry material for chunked 2049-byte terminal JSON
    ok 49 - retains encrypted retry material for chunked 2049-byte terminal JSON
      ---
      duration_ms: 221.620134
      type: 'test'
      ...
    # Subtest: accepts encrypted retry material for terminal JSON without Content-Length
    ok 50 - accepts encrypted retry material for terminal JSON without Content-Length
      ---
      duration_ms: 28.218275
      type: 'test'
      ...
    # Subtest: retains encrypted retry material for deceptive short Content-Length
    ok 51 - retains encrypted retry material for deceptive short Content-Length
      ---
      duration_ms: 212.399467
      type: 'test'
      ...
    # Subtest: retains encrypted retry material for extra chunk after declared Content-Length
    ok 52 - retains encrypted retry material for extra chunk after declared Content-Length
      ---
      duration_ms: 25.102421
      type: 'test'
      ...
    # Subtest: retains encrypted retry material for malformed UTF-8
    ok 53 - retains encrypted retry material for malformed UTF-8
      ---
      duration_ms: 197.241453
      type: 'test'
      ...
    # Subtest: retains encrypted retry material for premature body error
    ok 54 - retains encrypted retry material for premature body error
      ---
      duration_ms: 25.93619
      type: 'test'
      ...
    # Subtest: bounds a one-byte slowloris body and retains its encrypted retry material
    ok 55 - bounds a one-byte slowloris body and retains its encrypted retry material
      ---
      duration_ms: 47.438256
      type: 'test'
      ...
    # Subtest: dispose aborts a stalled header fetch, deduplicates its generation, and leaves no later activity
    ok 56 - dispose aborts a stalled header fetch, deduplicates its generation, and leaves no later activity
      ---
      duration_ms: 176.420982
      type: 'test'
      ...
    # Subtest: dispose cancels a headers-then-stall body and retains exact encrypted material
    ok 57 - dispose cancels a headers-then-stall body and retains exact encrypted material
      ---
      duration_ms: 41.797866
      type: 'test'
      ...
# NATIVE_SCENARIO dispose
    # Subtest: dispose waits for terminal journal cleanup and no file operation runs afterward
    ok 58 - dispose waits for terminal journal cleanup and no file operation runs afterward
      ---
      duration_ms: 47.073272
      type: 'test'
      ...
    # Subtest: bounds aggregate startup across stalled records and recovers all encrypted records later
    ok 59 - bounds aggregate startup across stalled records and recovers all encrypted records later
      ---
      duration_ms: 348.952869
      type: 'test'
      ...
# NATIVE_SCENARIO transient-revocation
# NATIVE_SCENARIO provisional
    # Subtest: retries a crash-left provisional pairing credential on startup
    ok 60 - retries a crash-left provisional pairing credential on s

...(truncated)

View Workflow

[github-actions]

Checks Failed

Validation failed during setup, tests, CLI packaging, linting, or build checks.

View Logs

Build check diagnostics for run 33877897923, attempt 1
Checkout outcome: success

--- GitHub Actions workflow lint ---
docker.io/rhysd/actionlint@sha256:b1934ee5f1c509618f2508e6eb47ee0d3520686341fec936f3b79331f9315667: Pulling from rhysd/actionlint
589002ba0eae: Pulling fs layer
c09af8888d6a: Pulling fs layer
4ccd7d76ca98: Pulling fs layer
b6b4b7b0e257: Pulling fs layer
b6b4b7b0e257: Waiting
589002ba0eae: Verifying Checksum
589002ba0eae: Download complete
4ccd7d76ca98: Verifying Checksum
4ccd7d76ca98: Download complete
c09af8888d6a: Verifying Checksum
c09af8888d6a: Download complete
b6b4b7b0e257: Verifying Checksum
b6b4b7b0e257: Download complete
589002ba0eae: Pull complete
c09af8888d6a: Pull complete
4ccd7d76ca98: Pull complete
b6b4b7b0e257: Pull complete
Digest: sha256:b1934ee5f1c509618f2508e6eb47ee0d3520686341fec936f3b79331f9315667
Status: Downloaded newer image for rhysd/actionlint@sha256:b1934ee5f1c509618f2508e6eb47ee0d3520686341fec936f3b79331f9315667
docker.io/rhysd/actionlint@sha256:b1934ee5f1c509618f2508e6eb47ee0d3520686341fec936f3b79331f9315667

--- Release shell script lint ---

--- Toolchain ---
v22.23.2
10.9.8

--- Dependency installation ---
npm warn deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
npm warn deprecated gar@1.0.4: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
npm warn deprecated glob@7.2.3: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me

added 1124 packages, and audited 1133 packages in 21s

323 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities

--- Fast unit tests ---
Running fast unit tests (no Redis/Docker dependencies)...

> propr@0.8.15 pretest:unit
> npm run build -w @propr/shared && npm run build -w @propr/local-setup


> @propr/shared@0.8.15 build
> tsc


> @propr/local-setup@0.8.15 build
> tsc


> propr@0.8.15 test:unit
> NODE_ENV=test npx tsx --experimental-test-module-mocks --test test/minimal.test.ts test/modelName.test.ts test/agentContainerResources.test.ts test/agentDockerfileSupplyChain.test.ts test/agentImagePreparation.test.ts test/daemonEventIntake.test.ts test/databaseMigrationGate.test.ts test/deployPrPreview.test.mjs test/generateContext.test.ts test/githubEventIntakeMode.test.ts test/intakeModePrerequisites.test.ts test/orchestratorMigrationPhase.test.mjs test/validateRoutingUrl.test.ts test/routingWebSocketProtocol.test.ts test/routingWebSocketIntakeService.test.ts test/routingStatusPublisher.test.ts test/releaseValidation.test.mjs test/sessionSecret.test.ts test/testSuiteRunner.test.mjs packages/api/test/connectAuth.test.ts packages/api/test/attachmentUploadCleanup.test.ts packages/api/test/configReloadSubscription.test.ts packages/api/test/desktopApiBoundary.test.ts packages/api/test/dockerCommandSafety.test.ts packages/api/test/listenAddress.test.ts packages/api/test/oauthState.test.ts packages/api/test/requestRateLimits.test.ts packages/api/test/statusRoutes.test.ts packages/api/test/agentRuntimeRoutes.test.ts packages/api/test/instanceAuthorization.test.ts packages/api/test/routeAuthorization.test.ts

TAP version 13
# Subtest: agent runtime package routes
    # Subtest: queues one validated package profile for the unified agent image
    ok 1 - queues one validated package profile for the unified agent image
      ---
      duration_ms: 7.000563
      type: 'test'
      ...
    # Subtest: persists a failed state when queue submission fails
    ok 2 - persists a failed state when queue submission fails
      ---
      duration_ms: 1.331761
      type: 'test'
      ...
    # Subtest: rejects a package missing from an effective runtime before queueing
    ok 3 - rejects a package missing from an effective runtime before queueing
      ---
      duration_ms: 1.271738
      type: 'test'
      ...
    # Subtest: times out slow runtime package validation before queueing
    ok 4 - times out slow runtime package validation before queueing
      ---
      duration_ms: 12.079543
      type: 'test'
      ...
    # Subtest: returns package suggestions from configured runtimes
    ok 5 - returns package suggestions from configured runtimes
      ---
      duration_ms: 1.516596
      type: 'test'
      ...
    # Subtest: enforces PROPR_ADMIN_USERS when configured
    ok 6 - enforces PROPR_ADMIN_USERS when configured
      ---
      duration_ms: 0.503081
      type: 'test'
      ...
    # Subtest: denies runtime package changes by default when no admin policy is configured
    ok 7 - denies runtime package changes by default when no admin policy is configured
      ---
      duration_ms: 0.440313
      type: 'test'
      ...
    # Subtest: requires runtime-management permission before returning runtime package state
    ok 8 - requires runtime-management permission before returning runtime package state
      ---
      duration_ms: 0.574224
      type: 'test'
      ...
    # Subtest: warms the package catalog when an admin loads runtime package state
    ok 9 - warms the package catalog when an admin loads runtime package state
      ---
      duration_ms: 0.886768
      type: 'test'
      ...
    # Subtest: does not warm the package catalog when a member is rejected
    ok 10 - does not warm the package catalog when a member is rejected
      ---
      duration_ms: 4.764762
      type: 'test'
      ...
    # Subtest: resolves the runtime build queue lazily when queueing
    ok 11 - resolves the runtime build queue lazily when queueing
      ---
      duration_ms: 1.048592
      type: 'test'
      ...
    # Subtest: reports apply load failures through the route response
    ok 12 - reports apply load failures through the route response
      ---
      duration_ms: 0.632072
      type: 'test'
      ...
    # Subtest: verifies the current effective images through the runtime-management boundary
    ok 13 - verifies the current effective images through the runtime-management boundary
      ---
      duration_ms: 0.846854
      type: 'test'
      ...
    # Subtest: rejects runtime verification without runtime-management permission
    ok 14 - rejects runtime verification without runtime-management permission
      ---
      duration_ms: 0.492452
      type: 'test'
      ...
    1..14
ok 1 - agent runtime package routes
  ---
  duration_ms: 35.963222
  type: 'suite'
  ...
# [2026-09-04 13:25:23.694 +0000] �[32mINFO�[39m: �[36mSQLite database connection established successfully�[39m
#     filename: "/home/runner/work/propr/propr/data/propr.test.sqlite"
#     environment: "test"
# [2026-09-04 13:25:23.726 +0000] �[32mINFO�[39m: �[36mSQLite database connection closed�[39m
# Subtest: upload handler removes Multer files rejected before attachment processing
ok 2 - upload handler removes Multer files rejected before attachment processing
  ---
  duration_ms: 11.330542
  type: 'test'
  ...
# Subtest: attachment processing removes temporary and final files when persistence fails
ok 3 - attachment processing removes temporary and final files when persistence fails
  ---
  duration_ms: 7.812431
  type: 'test'
  ...
# Subtest: temporary cleanup refuses paths outside its configured root
ok 4 - temporary cleanup refuses paths outside its configured root
  ---
  duration_ms: 1.027892
  type: 'test'
  ...
# Subtest: temporary cleanup rejects dot-segment paths that resolve above its root
ok 5 - temporary cleanup rejects dot-segment paths that resolve above its root
  ---
  duration_ms: 0.786642
  type: 'test'
  ...
# Subtest: attachment processing rejects path-like draft IDs and still cleans its temp file
ok 6 - attachment processing rejects path-like draft IDs and still cleans its temp file
  ---
  duration_ms: 5.953886
  type: 'test'
  ...
# [2026-09-04 13:25:23.149 +0000] �[32mINFO�[39m: �[36mCreated data directory for SQLite database�[39m
#     directory: "/home/runner/work/propr/propr/data"
# [2026-09-04 13:25:23.687 +0000] �[32mINFO�[39m: �[36mSQLite database connection established successfully�[39m
#     filename: "/home/runner/work/propr/propr/data/propr.test.sqlite"
#     environment: "test"
# [2026-09-04 13:25:23.713 +0000] �[32mINFO�[39m: �[36mSQLite database connection closed�[39m
# Subtest: API config subscription serializes the startup reload with settings updates
ok 7 - API config subscription serializes the startup reload with settings updates
  ---
  duration_ms: 6.868659
  type: 'test'
  ...
# Subtest: API config subscription reloads repository updates
ok 8 - API config subscription reloads repository updates
  ---
  duration_ms: 0.495357
  type: 'test'
  ...
# Subtest: API config subscription ignores unrelated and malformed events
ok 9 - API config subscription ignores unrelated and malformed events
  ---
  duration_ms: 0.392835
  type: 'test'
  ...
# Subtest: a failed API settings reload does not block the next notification
ok 10 - a failed API settings reload does not block the next notification
  ---
  duration_ms: 0.444251
  type: 'test'
  ...
# Subtest: relay tunnel mode uses Connect without local OAuth credentials
ok 11 - relay tunnel mode uses Connect without local OAuth credentials
  ---
  duration_ms: 5.132549
  type: 'test'
  ...
# Subtest: relay tunnel mode preserves Connect for operator-supplied service endpoints
ok 12 - relay tunnel mode preserves Connect for operator-supplied service endpoints
  ---
  duration_ms: 0.370944
  type: 'test'
  ...
# Subtest: local relay mode uses Connect without a per-instance OAuth App
ok 13 - local relay mode uses Connect without a per-instance OAuth App
  ---
  duration_ms: 0.604892
  type: 'test'
  ...
# Subtest: off-tunnel relay inference uses the shared canonical loopback rule
ok 14 - off-tunnel relay inference uses the shared canonical loopback rule
  ---
  duration_ms: 1.648804
  type: 'test'
  ...
# Subtest: off-tunnel custom relay enrollment does not infer hosted Connect auth
ok 15 - off-tunnel custom relay enrollment does not infer hosted Connect auth
  ---
  duration_ms: 0.236703
  type: 'test'
  ...
# Subtest: literal example OAuth placeholders do not enable GitHub web auth
ok 16 - literal example OAuth placeholders do not enable GitHub web auth
  ---
  duration_ms: 0.196287
  type: 'test'
  ...
# Subtest: explicit custom GitHub web auth remains supported
ok 17 - explicit custom GitHub web auth remains supported
  ---
  duration_ms: 0.179065
  type: 'test'
  ...
# Subtest: explicit custom GitHub web auth wins over relay inference off-tunnel
ok 18 - explicit custom GitHub web auth wins over relay inference off-tunnel
  ---
  duration_ms: 0.26746
  type: 'test'
  ...
# Subtest: Connect authorization URL carries the exact callback and CSRF state
ok 19 - Connect authorization URL carries the exact callback and CSRF state
  ---
  duration_ms: 0.803172
  type: 'test'
  ...
# Subtest: Connect authorization URL rejects configured query strings and fragments
ok 20 - Connect authorization URL rejects configured query strings and fragments
  ---
  duration_ms: 1.042189
  type: 'test'
  ...
# Subtest: redeems a Connect code server-to-server without exposing the relay token in the body
ok 21 - redeems a Connect code server-to-server without exposing the relay token in the body
  ---
  duration_ms: 152.532771
  type: 'test'
  ...
# Subtest: binds the Connect identity username to the validated token owner
ok 22 - binds the Connect identity username to the validated token owner
  ---
  duration_ms: 8.756728
  type: 'test'
  ...
# Subtest: preserves expiring OAuth grant fields returned by Connect
ok 23 - preserves expiring OAuth grant fields returned by Connect
  ---
  duration_ms: 1.384339
  type: 'test'
  ...
# Subtest: assembled desktop API authentication boundary
    # Subtest: keeps discovery and bounded pairing bootstrap ahead of the operational API guard
    ok 1 - keeps discovery and bounded pairing bootstrap ahead of the operational API guard
      ---
      duration_ms: 96.949154
      type: 'test'
      ...
    1..1
ok 24 - assembled desktop API authentication boundary
  ---
  duration_ms: 98.368868
  type: 'suite'
  ...
# [2026-09-04 13:25:25.195 +0000] �[32mINFO�[39m: �[36mSQLite database connection established successfully�[39m
#     filename: "/home/runner/work/propr/propr/data/propr.test.sqlite"
#     environment: "test"
# [2026-09-04 13:25:25.275 +0000] �[32mINFO�[39m: �[36mSQLite database connection closed�[39m
# Subtest: accepts Docker IDs and ProPR-generated container names
ok 25 - accepts Docker IDs and ProPR-generated container names
  ---
  duration_ms: 1.371314
  type: 'test'
  ...
# Subtest: rejects container references that could be parsed as options or shell syntax
ok 26 - rejects container references that could be parsed as options or shell syntax
  ---
  duration_ms: 0.245859
  type: 'test'
  ...
# Subtest: production subprocess call sites do not invoke a command shell
ok 27 - production subprocess call sites do not invoke a command shell
  ---
  duration_ms: 137.539866
  type: 'test'
  ...
# Subtest: no-shell guard rejects aliases and enabled shell options
ok 28 - no-shell guard rejects aliases and enabled shell options
  ---
  duration_ms: 3.618879
  type: 'test'
  ...
# Subtest: instance authorization
    # Subtest: defaults unassigned authenticated users to members on a new installation
    ok 1 - defaults unassigned authenticated users to members on a new installation
      ---
      duration_ms: 18.032586
      type: 'test'
      ...
    # Subtest: refuses startup until a bootstrap or durable administrator exists
    ok 2 - refuses startup until a bootstrap or durable administrator exists
      ---
      duration_ms: 7.461795
      type: 'test'
      ...
    # Subtest: grants full admin permissions to PROPR_ADMIN_USERS
    ok 3 - grants full admin permissions to PROPR_ADMIN_USERS
      ---
      duration_ms: 3.781663
      type: 'test'
      ...
    # Subtest: resolves durable roles by numeric GitHub ID after a username change
    ok 4 - resolves durable roles by numeric GitHub ID after a username change
      ---
      duration_ms: 4.012805
      type: 'test'
      ...
    # Subtest: resolves demo users without installation permissions
    ok 5 - resolves demo users without installation permissions
      ---
      duration_ms: 3.572571
      type: 'test'
      ...
    # Subtest: permission middleware rejects members with a stable error code
    ok 6 - permission middleware rejects members with a stable error code
      ---
      duration_ms: 3.17045
      type: 'test'
      ...
    # Subtest: current-user responses expose capabilities without OAuth credentials
    ok 7 - current-user responses expose capabilities without OAuth credentials
      ---
      duration_ms: 2.881258
      type: 'test'
      ...
    1..7
ok 29 - instance authorization
  ---
  duration_ms: 46.843331
  type: 'suite'
  ...
# Subtest: instance member service
    # Subtest: does not let an unassigned user claim the initial administrator role
    ok 1 - does not let an unassigned user claim the initial administrator role
      ---
      duration_ms: 5.245872
      type: 'test'
      ...
    # Subtest: stores a bootstrap administrator against their numeric GitHub ID
    ok 2 - stores a bootstrap administrator against their numeric GitHub ID
      ---
      duration_ms: 13.657046
      type: 'test'
      ...
    # Subtest: adds explicit members and writes an audit entry
    ok 3 - adds explicit members and writes an audit entry
      ---
      duration_ms: 6.138501
      type: 'test'
      ...
    # Subtest: keeps environment authority separate from durable role assignments
    ok 4 - keeps environment authority separate from durable role assignments
      ---
      duration_ms: 4.562914
      type: 'test'
      ...
    # Subtest: prevents removing the last durable administrator
    ok 5 - prevents removing the last durable administrator
      ---
      duration_ms: 4.864679
      type: 'test'
      ...
    # Subtest: allows role changes once another administrator exists
    ok 6 - allows role changes once another administrator exists
      ---
      duration_ms: 32.966887
      type: 'test'
      ...
    1..6
ok 30 - instance member service
  ---
  duration_ms: 68.082087
  type: 'suite'
  ...
# Subtest: instance catalog
    # Subtest: returns operational agent and repository fields without installation internals
    ok 1 - returns operational agent and repository fields without installation internals
      ---
      duration_ms: 5.047222
      type: 'test'
      ...
    # Subtest: projects indexing status only for enabled repository and branch entries
    ok 2 - projects indexing status only for enabled repository and branch entries
      ---
      duration_ms: 2.553146
      type: 'test'
      ...
    1..2
ok 31 - instance catalog
  ---
  duration_ms: 7.747233
  type: 'suite'
  ...
# Subtest: instance admin routes
    # Subtest: resolves a GitHub username and creates one durable member assignment
    ok 1 - resolves a GitHub username and creates one durable member assignment
      ---
      duration_ms: 4.491993
      type: 'test'
      ...
    # Subtest: rejects a non-numeric audit limit with a 400
    ok 2 - rejects a non-numeric audit limit with a 400
      ---
      duration_ms: 2.295344
      type: 'test'
      ...
    # Subtest: rejects GitHub usernames with trailing or consecutive hyphens
    ok 3 - rejects GitHub usernames with trailing or consecutive hyphens
      ---
      duration_ms: 3.886842
      type: 'test'
      ...
    1..3
ok 32 - instance admin routes
  ---
  duration_ms: 10.872429
  type: 'suite'
  ...
# [2026-09-04 13:25:27.350 +0000] �[32mINFO�[39m: �[36mSQLite database connection established successfully�[39m
#     filename: "/home/runner/work/propr/propr/data/propr.test.sqlite"
#     environment: "test"
# [2026-09-04 13:25:27.472 +0000] �[32mINFO�[39m: �[36mSQLite database connection closed�[39m
# Subtest: direct API execution binds to loopback by default
ok 33 - direct API execution binds to loopback by default
  ---
  duration_ms: 1.260778
  type: 'test'
  ...
# Subtest: containerized API execution remains reachable through its published port
ok 34 - containerized API execution remains reachable through its published port
  ---
  duration_ms: 0.261981
  type: 'test'
  ...
# Subtest: an explicit API listen host overrides environment defaults
ok 35 - an explicit API listen host overrides environment defaults
  ---
  duration_ms: 0.202298
  type: 'test'
  ...
# Subtest: GitHub OAuth authorization stores and sends a random state nonce
ok 36 - GitHub OAuth authorization stores and sends a random state nonce
  ---
  duration_ms: 9.801763
  type: 'test'
  ...
# Subtest: GitHub OAuth callback rejects a mismatched state before token exchange
ok 37 - GitHub OAuth callback rejects a mismatched state before token exchange
  ---
  duration_ms: 2.223993
  type: 'test'
  ...
# [2026-09-04 13:25:30.520 +0000] �[32mINFO�[39m: �[36mSQLite database connection established successfully�[39m
#     filename: "/home/runner/work/propr/propr/data/propr.test.sqlite"
#     environment: "test"
# [2026-09-04 13:25:30.521 +0000] �[32mINFO�[39m: �[36mSQLite database connection closed�[39m
# Subtest: returns a standard 429 response after the configured quota
ok 38 - returns a standard 429 response after the configured quota
  ---
  duration_ms: 159.812497
  type: 'test'
  ...
# Subtest: the real global API limiter keeps no-store headers when saturated
ok 39 - the real global API limiter keeps no-store headers when saturated
  ---
  duration_ms: 12.150435
  type: 'test'
  ...
# Subtest: route limiting, 503, and errors inherit the earliest API no-store boundary
ok 40 - route limiting, 503, and errors inherit the earliest API no-store boundary
  ---
  duration_ms: 16.31297
  type: 'test'
  ...
# Subtest: does not charge CORS preflight requests against the quota
ok 41 - does not charge CORS preflight requests against the quota
  ---
  duration_ms: 12.984665
  type: 'test'
  ...
# Subtest: route-level webhook limiting preserves alternate-case raw bodies and rejects excess requests before parsing
ok 42 - route-level webhook limiting preserves alternate-case raw bodies and rejects excess requests before parsing
  ---
  duration_ms: 17.279318
  type: 'test'
  ...
# Subtest: does not let an unconfigured private peer rotate quota buckets with X-Forwarded-For
ok 43 - does not let an unconfigured private peer rotate quota buckets with X-Forwarded-For
  ---
  duration_ms: 11.123124
  type: 'test'
  ...
# Subtest: tunnel trust does not let an unrelated private peer rotate quota buckets
ok 44 - tunnel trust does not let an unrelated private peer rotate quota buckets
  ---
  duration_ms: 19.75621
  type: 'test'
  ...
# Subtest: trusted TLS proxy preserves per-client quotas and secure session cookies
ok 45 - trusted TLS proxy preserves per-client quotas and secure session cookies
  ---
  duration_ms: 25.940998
  type: 'test'
  ...
# Subtest: resolves secure defaults and explicit positive-integer overrides
ok 46 - resolves secure defaults and explicit positive-integer overrides
  ---
  duration_ms: 0.755022
  type: 'test'
  ...
# Subtest: rejects invalid overrides instead of silently disabling protection
ok 47 - rejects invalid overrides instead of silently disabling protection
  ---
  duration_ms: 1.176821
  type: 'test'
  ...
# Subtest: assembled instance permission routes
    # Subtest: captures Express 5 named wildcard parameters as path segments
    ok 1 - captures Express 5 named wildcard parameters as path segments
      ---
      duration_ms: 39.659055
      type: 'test'
      ...
    # Subtest: members can read only the sanitized catalog endpoints
    ok 2 - members can read only the sanitized catalog endpoints
      ---
      duration_ms: 88.347307
      type: 'test'
      ...
    # Subtest: administrators pass every management guard in the route matrix
    ok 3 - administrators pass every management guard in the route matrix
      ---
      duration_ms: 54.019332
      type: 'test'
      ...
    # Subtest: demo users can read only the synthetic Agent Tank usage feed
    ok 4 - demo users can read only the synthetic Agent Tank usage feed
      ---
      duration_ms: 18.699063
      type: 'test'
      ...
    1..4
ok 48 - assembled instance permission routes
  ---
  duration_ms: 202.36051
  type: 'suite'
  ...
# [2026-09-04 13:25:31.061 +0000] �[32mINFO�[39m: �[36mSQLite database connection established successfully�[39m
#     filename: "/home/runner/work/propr/propr/data/propr.test.sqlite"
#     environment: "test"
# [2026-09-04 13:25:31.259 +0000] �[32mINFO�[39m: �[36mSQLite database connection closed�[39m
# Error loading summarization warnings: SqliteError: select * from `system_configs` where `key` = 'summarization_runtime_state' limit 1 - no such table: system_configs
#     at Database.prepare (/home/runner/work/propr/propr/node_modules/better-sqlite3/lib/methods/wrappers.js:5:21)
#     at Client_BetterSQLite3._query (/home/runner/work/propr/propr/node_modules/knex/lib/dialects/better-sqlite3/index.js:35:34)
#     at executeQuery (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/query-executioner.js:37:17)
#     at Client_BetterSQLite3.query (/home/runner/work/propr/propr/node_modules/knex/lib/client.js:154:12)
#     at Runner.query (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:141:36)
#     at ensureConnectionCallback (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/ensure-connection-callback.js:13:17)
#     at Runner.ensureConnection (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:318:20)
#     at async Runner.run (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:30:19)
#     at async getConfigWithClient (/home/runner/work/propr/propr/packages/core/src/config/configStore.ts:17:24)
#     at async loadSummarizationRuntimeState (/home/runner/work/propr/propr/packages/core/src/config/configManagerSummarization.ts:101:19) {
#   code: 'SQLITE_ERROR'
# }
# Subtest: /api/status omits disabled configured agents
ok 49 - /api/status omits disabled configured agents
  ---
  duration_ms: 2692.162915
  type: 'test'
  ...
# Subtest: /api/compatibility returns public version contract metadata
ok 50 - /api/compatibility returns public version contract metadata
  ---
  duration_ms: 2.852268
  type: 'test'
  ...
# Subtest: /api/desktop/discovery returns the bounded public identity and runtime origin
ok 51 - /api/desktop/discovery returns the bounded public identity and runtime origin
  ---
  duration_ms: 2.219133
  type: 'test'
  ...
# Subtest: /api/desktop/discovery redacts identity persistence failures
ok 52 - /api/desktop/discovery redacts identity persistence failures
  ---
  duration_ms: 1.137649
  type: 'test'
  ...
# Error loading summarization warnings: SqliteError: select * from `system_configs` where `key` = 'summarization_runtime_state' limit 1 - no such table: system_configs
#     at Database.prepare (/home/runner/work/propr/propr/node_modules/better-sqlite3/lib/methods/wrappers.js:5:21)
#     at Client_BetterSQLite3._query (/home/runner/work/propr/propr/node_modules/knex/lib/dialects/better-sqlite3/index.js:35:34)
#     at executeQuery (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/query-executioner.js:37:17)
#     at Client_BetterSQLite3.query (/home/runner/work/propr/propr/node_modules/knex/lib/client.js:154:12)
#     at Runner.query (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:141:36)
#     at ensureConnectionCallback (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/ensure-connection-callback.js:13:17)
#     at Runner.ensureConnection (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:318:20)
#     at async Runner.run (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:30:19)
#     at async getConfigWithClient (/home/runner/work/propr/propr/packages/core/src/config/configStore.ts:17:24)
#     at async loadSummarizationRuntimeState (/home/runner/work/propr/propr/packages/core/src/config/configManagerSummarization.ts:101:19) {
#   code: 'SQLITE_ERROR'
# }
# Subtest: /api/status returns default Claude fallback when no agents are configured
ok 53 - /api/status returns default Claude fallback when no agents are configured
  ---
  duration_ms: 3.002309
  type: 'test'
  ...
# Error loading summarization warnings: SqliteError: select * from `system_configs` where `key` = 'summarization_runtime_state' limit 1 - no such table: system_configs
#     at Database.prepare (/home/runner/work/propr/propr/node_modules/better-sqlite3/lib/methods/wrappers.js:5:21)
#     at Client_BetterSQLite3._query (/home/runner/work/propr/propr/node_modules/knex/lib/dialects/better-sqlite3/index.js:35:34)
#     at executeQuery (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/query-executioner.js:37:17)
#     at Client_BetterSQLite3.query (/home/runner/work/propr/propr/node_modules/knex/lib/client.js:154:12)
#     at Runner.query (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:141:36)
#     at ensureConnectionCallback (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/ensure-connection-callback.js:13:17)
#     at Runner.ensureConnection (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:318:20)
#     at async Runner.run (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:30:19)
#     at async getConfigWithClient (/home/runner/work/propr/propr/packages/core/src/config/configStore.ts:17:24)
#     at async loadSummarizationRuntimeState (/home/runner/work/propr/propr/packages/core/src/config/configManagerSummarization.ts:101:19) {
#   code: 'SQLITE_ERROR'
# }
# [notifications] Failed to project system health snapshot: Error: notification persistence unavailable
#     at projectSystemSnapshot (/home/runner/work/propr/propr/packages/api/test/statusRoutes.test.ts:308:13)
#     at Object.getStatus (/home/runner/work/propr/propr/packages/api/routes/statusRoutes.ts:224:14)
#     at async readStatus (/home/runner/work/propr/propr/packages/api/test/statusRoutes.test.ts:186:3)
#     at async TestContext.<anonymous> (/home/runner/work/propr/propr/packages/api/test/statusRoutes.test.ts:305:16)
#     at async Test.run (node:internal/test_runner/test:1054:7)
#     at async Test.processPendingSubtests (node:internal/test_runner/test:744:7)
# Subtest: /api/status isolates system notification projection failures
ok 54 - /api/status isolates system notification projection failures
  ---
  duration_ms: 5.17256
  type: 'test'
  ...
# Subtest: /api/status surfaces unified agent image outages
ok 55 - /api/status surfaces unified agent image outages
  ---
  duration_ms: 1.970991
  type: 'test'
  ...
# Subtest: /api/status includes warnings field in demo mode
ok 56 - /api/status includes warnings field in demo mode
  ---
  duration_ms: 1.388659
  type: 'test'
  ...
# Error loading summarization warnings: SqliteError: select * from `system_configs` where `key` = 'summarization_runtime_state' limit 1 - no such table: system_configs
#     at Database.prepare (/home/runner/work/propr/propr/node_modules/better-sqlite3/lib/methods/wrappers.js:5:21)
#     at Client_BetterSQLite3._query (/home/runner/work/propr/propr/node_modules/knex/lib/dialects/better-sqlite3/index.js:35:34)
#     at executeQuery (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/query-executioner.js:37:17)
#     at Client_BetterSQLite3.query (/home/runner/work/propr/propr/node_modules/knex/lib/client.js:154:12)
#     at Runner.query (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:141:36)
#     at ensureConnectionCallback (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/ensure-connection-callback.js:13:17)
#     at Runner.ensureConnection (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:318:20)
#     at async Runner.run (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:30:19)
#     at async getConfigWithClient (/home/runner/work/propr/propr/packages/core/src/config/configStore.ts:17:24)
#     at async loadSummarizationRuntimeState (/home/runner/work/propr/propr/packages/core/src/config/configManagerSummarization.ts:101:19) {
#   code: 'SQLITE_ERROR'
# }
# Error loading summarization warnings: SqliteError: select * from `system_configs` where `key` = 'summarization_runtime_state' limit 1 - no such table: system_configs
#     at Database.prepare (/home/runner/work/propr/propr/node_modules/better-sqlite3/lib/methods/wrappers.js:5:21)
#     at Client_BetterSQLite3._query (/home/runner/work/propr/propr/node_modules/knex/lib/dialects/better-sqlite3/index.js:35:34)
#     at executeQuery (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/query-executioner.js:37:17)
#     at Client_BetterSQLite3.query (/home/runner/work/propr/propr/node_modules/knex/lib/client.js:154:12)
#     at Runner.query (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:141:36)
#     at ensureConnectionCallback (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/ensure-connection-callback.js:13:17)
#     at Runner.ensureConnection (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:318:20)
#     at async Runner.run (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:30:19)
#     at async getConfigWithClient (/home/runner/work/propr/propr/packages/core/src/config/configStore.ts:17:24)
#     at async loadSummarizationRuntimeState (/home/runner/work/propr/propr/packages/core/src/config/configManagerSummarization.ts:101:19) {
#   code: 'SQLITE_ERROR'
# }
# Error loading summarization warnings: SqliteError: select * from `system_configs` where `key` = 'summarization_runtime_state' limit 1 - no such table: system_configs
#     at Database.prepare (/home/runner/work/propr/propr/node_modules/better-sqlite3/lib/methods/wrappers.js:5:21)
#     at Client_BetterSQLite3._query (/home/runner/work/propr/propr/node_modules/knex/lib/dialects/better-sqlite3/index.js:35:34)
#     at executeQuery (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/query-executioner.js:37:17)
#     at Client_BetterSQLite3.query (/home/runner/work/propr/propr/node_modules/knex/lib/client.js:154:12)
#     at Runner.query (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:141:36)
#     at ensureConnectionCallback (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/ensure-connection-callback.js:13:17)
#     at Runner.ensureConnection (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:318:20)
#     at async Runner.run (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:30:19)
#     at async getConfigWithClient (/home/runner/work/propr/propr/packages/core/src/config/configStore.ts:17:24)
#     at async loadSummarizationRuntimeState (/home/runner/work/propr/propr/packages/core/src/config/configManagerSummarization.ts:101:19) {
#   code: 'SQLITE_ERROR'
# }
# Error loading summarization warnings: SqliteError: select * from `system_configs` where `key` = 'summarization_runtime_state' limit 1 - no such table: system_configs
#     at Database.prepare (/home/runner/work/propr/propr/node_modules/better-sqlite3/lib/methods/wrappers.js:5:21)
#     at Client_BetterSQLite3._query (/home/runner/work/propr/propr/node_modules/knex/lib/dialects/better-sqlite3/index.js:35:34)
#     at executeQuery (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/query-executioner.js:37:17)
#     at Client_BetterSQLite3.query (/home/runner/work/propr/propr/node_modules/knex/lib/client.js:154:12)
#     at Runner.query (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:141:36)
#     at ensureConnectionCallback (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/ensure-connection-callback.js:13:17)
#     at Runner.ensureConnection (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:318:20)
#     at async Runner.run (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:30:19)
#     at async getConfigWithClient (/home/runner/work/propr/propr/packages/core/src/config/configStore.ts:17:24)
#     at async loadSummarizationRuntimeState (/home/runner/work/propr/propr/packages/core/src/config/configManagerSummarization.ts:101:19) {
#   code: 'SQLITE_ERROR'
# }
# Error loading summarization warnings: SqliteError: select * from `system_configs` where `key` = 'summarization_runtime_state' limit 1 - no such table: system_configs
#     at Database.prepare (/home/runner/work/propr/propr/node_modules/better-sqlite3/lib/methods/wrappers.js:5:21)
#     at Client_BetterSQLite3._query (/home/runner/work/propr/propr/node_modules/knex/lib/dialects/better-sqlite3/index.js:35:34)
#     at executeQuery (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/query-executioner.js:37:17)
#     at Client_BetterSQLite3.query (/home/runner/work/propr/propr/node_modules/knex/lib/client.js:154:12)
#     at Runner.query (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:141:36)
#     at ensureConnectionCallback (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/ensure-connection-callback.js:13:17)
#     at Runner.ensureConnection (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:318:20)
#     at async Runner.run (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:30:19)
#     at async getConfigWithClient (/home/runner/work/propr/propr/packages/core/src/config/configStore.ts:17:24)
#     at async loadSummarizationRuntimeState (/home/runner/work/propr/propr/packages/core/src/config/configManagerSummarization.ts:101:19) {
#   code: 'SQLITE_ERROR'
# }
# Subtest: /api/status caches agent health checks briefly
ok 57 - /api/status caches agent health checks briefly
  ---
  duration_ms: 9.710019
  type: 'test'
  ...
# Subtest: /api/status marks an unavailable synthetic pool degraded without downgrading direct agents
ok 58 - /api/status marks an unavailable synthetic pool degraded without downgrading direct agents
  ---
  duration_ms: 3.02998
  type: 'test'
  ...
# Subtest: /api/status reports resolved auth mode and event intake mode
ok 59 - /api/status reports resolved auth mode and event intake mode
  ---
  duration_ms: 2.349577
  type: 'test'
  ...
# Subtest: /api/status reports connected intake status when routing state is live
ok 60 - /api/status reports connected intake status when routing state is live
  ---
  duration_ms: 3.545085
  type: 'test'
  ...
# Error loading summarization warnings: SqliteError: select * from `system_configs` where `key` = 'summarization_runtime_state' limit 1 - no such table: system_configs
#     at Database.prepare (/home/runner/work/propr/propr/node_modules/better-sqlite3/lib/methods/wrappers.js:5:21)
#     at Client_BetterSQLite3._query (/home/runner/work/propr/propr/node_modules/knex/lib/dialects/better-sqlite3/index.js:35:34)
#     at executeQuery (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/query-executioner.js:37:17)
#     at Client_BetterSQLite3.query (/home/runner/work/propr/propr/node_modules/knex/lib/client.js:154:12)
#     at Runner.query (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:141:36)
#     at ensureConnectionCallback (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/ensure-connection-callback.js:13:17)
#     at Runner.ensureConnection (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:318:20)
#     at async Runner.run (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:30:19)
#     at async getConfigWithClient (/home/runner/work/propr/propr/packages/core/src/config/configStore.ts:17:24)
#     at async loadSummarizationRuntimeState (/home/runner/work/propr/propr/packages/core/src/config/configManagerSummarization.ts:101:19) {
#   code: 'SQLITE_ERROR'
# }
# Subtest: /api/status reports disconnected intake status when routing state is down
ok 61 - /api/status reports disconnected intake status when routing state is down
  ---
  duration_ms: 5.239876
  type: 'test'
  ...
# Error loading summarization warnings: SqliteError: select * from `system_configs` where `key` = 'summarization_runtime_state' limit 1 - no such table: system_configs
#     at Database.prepare (/home/runner/work/propr/propr/node_modules/better-sqlite3/lib/methods/wrappers.js:5:21)
#     at Client_BetterSQLite3._query (/home/runner/work/propr/propr/node_modules/knex/lib/dialects/better-sqlite3/index.js:35:34)
#     at executeQuery (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/query-executioner.js:37:17)
#     at Client_BetterSQLite3.query (/home/runner/work/propr/propr/node_modules/knex/lib/client.js:154:12)
#     at Runner.query (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:141:36)
#     at ensureConnectionCallback (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/ensure-connection-callback.js:13:17)
#     at Runner.ensureConnection (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:318:20)
#     at async Runner.run (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:30:19)
#     at async getConfigWithClient (/home/runner/work/propr/propr/packages/core/src/config/configStore.ts:17:24)
#     at async loadSummarizationRuntimeState (/home/runner/work/propr/propr/packages/core/src/config/configManagerSummarization.ts:101:19) {
#   code: 'SQLITE_ERROR'
# }
# Subtest: /api/status reports active intake status for polling when the daemon is running
ok 62 - /api/status reports active intake status for polling when the daemon is running
  ---
  duration_ms: 2.852238
  type: 'test'
  ...
# Error loading summarization warnings: SqliteError: select * from `system_configs` where `key` = 'summarization_runtime_state' limit 1 - no such table: system_configs
#     at Database.prepare (/home/runner/work/propr/propr/node_modules/better-sqlite3/lib/methods/wrappers.js:5:21)
#     at Client_BetterSQLite3._query (/home/runner/work/propr/propr/node_modules/knex/lib/dialects/better-sqlite3/index.js:35:34)
#     at executeQuery (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/query-executioner.js:37:17)
#     at Client_BetterSQLite3.query (/home/runner/work/propr/propr/node_modules/knex/lib/client.js:154:12)
#     at Runner.query (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:141:36)
#     at ensureConnectionCallback (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/ensure-connection-callback.js:13:17)
#     at Runner.ensureConnection (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:318:20)
#     at async Runner.run (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:30:19)
#     at async getConfigWithClient (/home/runner/work/propr/propr/packages/core/src/config/configStore.ts:17:24)
#     at async loadSummarizationRuntimeState (/home/runner/work/propr/propr/packages/core/src/config/configManagerSummarization.ts:101:19) {
#   code: 'SQLITE_ERROR'
# }
# Subtest: /api/status reports disconnected intake status for polling when the daemon is stopped
ok 63 - /api/status reports disconnected intake status for polling when the daemon is stopped
  ---
  duration_ms: 2.507282
  type: 'test'
  ...
# Error loading summarization warnings: SqliteError: select * from `system_configs` where `key` = 'summarization_runtime_state' limit 1 - no such table: system_configs
#     at Database.prepare (/home/runner/work/propr/propr/node_modules/better-sqlite3/lib/methods/wrappers.js:5:21)
#     at Client_BetterSQLite3._query (/home/runner/work/propr/propr/node_modules/knex/lib/dialects/better-sqlite3/index.js:35:34)
#     at executeQuery (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/query-executioner.js:37:17)
#     at Client_BetterSQLite3.query (/home/runner/work/propr/propr/node_modules/knex/lib/client.js:154:12)
#     at Runner.query (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:141:36)
#     at ensureConnectionCallback (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/ensure-connection-callback.js:13:17)
#     at Runner.ensureConnection (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:318:20)
#     at async Runner.run (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:30:19)
#     at async getConfigWithClient (/home/runner/work/propr/propr/packages/core/src/config/configStore.ts:17:24)
#     at async loadSummarizationRuntimeState (/home/runner/work/propr/propr/packages/core/src/config/configManagerSummarization.ts:101:19) {
#   code: 'SQLITE_ERROR'
# }
# Subtest: /api/status includes routing state published by the daemon
ok 64 - /api/status includes routing state published by the daemon
  ---
  duration_ms: 2.665919
  type: 'test'
  ...
# Error loading summarization warnings: SqliteError: select * from `system_configs` where `key` = 'summarization_runtime_state' limit 1 - no such table: system_configs
#     at Database.prepare (/home/runner/work/propr/propr/node_modules/better-sqlite3/lib/methods/wrappers.js:5:21)
#     at Client_BetterSQLite3._query (/home/runner/work/propr/propr/node_modules/knex/lib/dialects/better-sqlite3/index.js:35:34)
#     at executeQuery (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/query-executioner.js:37:17)
#     at Client_BetterSQLite3.query (/home/runner/work/propr/propr/node_modules/knex/lib/client.js:154:12)
#     at Runner.query (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:141:36)
#     at ensureConnectionCallback (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/ensure-connection-callback.js:13:17)
#     at Runner.ensureConnection (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:318:20)
#     at async Runner.run (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:30:19)
#     at async getConfigWithClient (/home/runner/work/propr/propr/packages/core/src/config/configStore.ts:17:24)
#     at async loadSummarizationRuntimeState (/home/runner/work/propr/propr/packages/core/src/config/configManagerSummarization.ts:101:19) {
#   code: 'SQLITE_ERROR'
# }
# Subtest: /api/status exposes only validated UI-safe Connect account fields
ok 65 - /api/status exposes only validated UI-safe Connect account fields
  ---
  duration_ms: 4.409421
  type: 'test'
  ...
# Error loading summarization warnings: SqliteError: select * from `system_configs` where `key` = 'summarization_runtime_state' limit 1 - no such table: system_configs
#     at Database.prepare (/home/runner/work/propr/propr/node_modules/better-sqlite3/lib/methods/wrappers.js:5:21)
#     at Client_BetterSQLite3._query (/home/runner/work/propr/propr/node_modules/knex/lib/dialects/better-sqlite3/index.js:35:34)
#     at executeQuery (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/query-executioner.js:37:17)
#     at Client_BetterSQLite3.query (/home/runner/work/propr/propr/node_modules/knex/lib/client.js:154:12)
#     at Runner.query (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:141:36)
#     at ensureConnectionCallback (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/ensure-connection-callback.js:13:17)
#     at Runner.ensureConnection (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:318:20)
#     at async Runner.run (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:30:19)
#     at async getConfigWithClient (/home/runner/work/propr/propr/packages/core/src/config/configStore.ts:17:24)
#     at async loadSummarizationRuntimeState (/home/runner/work/propr/propr/packages/core/src/config/configManagerSummarization.ts:101:19) {
#   code: 'SQLITE_ERROR'
# }
# Error loading summarization warnings: SqliteError: select * from `system_configs` where `key` = 'summarization_runtime_state' limit 1 - no such table: system_configs
#     at Database.prepare (/home/runner/work/propr/propr/node_modules/better-sqlite3/lib/methods/wrappers.js:5:21)
#     at Client_BetterSQLite3._query (/home/runner/work/propr/propr/node_modules/knex/lib/dialects/better-sqlite3/index.js:35:34)
#     at executeQuery (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/query-executioner.js:37:17)
#     at Client_BetterSQLite3.query (/home/runner/work/propr/propr/node_modules/knex/lib/client.js:154:12)
#     at Runner.query (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:141:36)
#     at ensureConnectionCallback (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/ensure-connection-callback.js:13:17)
#     at Runner.ensureConnection (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:318:20)
#     at async Runner.run (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:30:19)
#     at async getConfigWithClient (/home/runner/work/propr/propr/packages/core/src/config/configStore.ts:17:24)
#     at async loadSummarizationRuntimeState (/home/runner/work/propr/propr/packages/core/src/config/configManagerSummarization.ts:101:19) {
#   code: 'SQLITE_ERROR'
# }
# Error loading summarization warnings: SqliteError: select * from `system_configs` where `key` = 'summarization_runtime_state' limit 1 - no such table: system_configs
#     at Database.prepare (/home/runner/work/propr/propr/node_modules/better-sqlite3/lib/methods/wrappers.js:5:21)
#     at Client_BetterSQLite3._query (/home/runner/work/propr/propr/node_modules/knex/lib/dialects/better-sqlite3/index.js:35:34)
#     at executeQuery (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/query-executioner.js:37:17)
#     at Client_BetterSQLite3.query (/home/runner/work/propr/propr/node_modules/knex/lib/client.js:154:12)
#     at Runner.query (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:141:36)
#     at ensureConnectionCallback (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/ensure-connection-callback.js:13:17)
#     at Runner.ensureConnection (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:318:20)
#     at async Runner.run (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:30:19)
#     at async getConfigWithClient (/home/runner/work/propr/propr/packages/core/src/config/configStore.ts:17:24)
#     at async loadSummarizationRuntimeState (/home/runner/work/propr/propr/packages/core/src/config/configManagerSummarization.ts:101:19) {
#   code: 'SQLITE_ERROR'
# }
# Error loading summarization warnings: SqliteError: select * from `system_configs` where `key` = 'summarization_runtime_state' limit 1 - no such table: system_configs
#     at Database.prepare (/home/runner/work/propr/propr/node_modules/better-sqlite3/lib/methods/wrappers.js:5:21)
#     at Client_BetterSQLite3._query (/home/runner/work/propr/propr/node_modules/knex/lib/dialects/better-sqlite3/index.js:35:34)
#     at executeQuery (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/query-executioner.js:37:17)
#     at Client_BetterSQLite3.query (/home/runner/work/propr/propr/node_modules/knex/lib/client.js:154:12)
#     at Runner.query (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:141:36)
#     at ensureConnectionCallback (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/ensure-connection-callback.js:13:17)
#     at Runner.ensureConnection (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:318:20)
#     at async Runner.run (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:30:19)
#     at async getConfigWithClient (/home/runner/work/propr/propr/packages/core/src/config/configStore.ts:17:24)
#     at async loadSummarizationRuntimeState (/home/runner/work/propr/propr/packages/core/src/config/configManagerSummarization.ts:101:19) {
#   code: 'SQLITE_ERROR'
# }
# Subtest: /api/status rejects impossible account dates and preserves valid leap-day instants
ok 66 - /api/status rejects impossible account dates and preserves valid leap-day instants
  ---
  duration_ms: 7.437519
  type: 'test'
  ...
# Error loading summarization warnings: SqliteError: select * from `system_configs` where `key` = 'summarization_runtime_state' limit 1 - no such table: system_configs
#     at Database.prepare (/home/runner/work/propr/propr/node_modules/better-sqlite3/lib/methods/wrappers.js:5:21)
#     at Client_BetterSQLite3._query (/home/runner/work/propr/propr/node_modules/knex/lib/dialects/better-sqlite3/index.js:35:34)
#     at executeQuery (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/query-executioner.js:37:17)
#     at Client_BetterSQLite3.query (/home/runner/work/propr/propr/node_modules/knex/lib/client.js:154:12)
#     at Runner.query (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:141:36)
#     at ensureConnectionCallback (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/ensure-connection-callback.js:13:17)
#     at Runner.ensureConnection (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:318:20)
#     at async Runner.run (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:30:19)
#     at async getConfigWithClient (/home/runner/work/propr/propr/packages/core/src/config/configStore.ts:17:24)
#     at async loadSummarizationRuntimeState (/home/runner/work/propr/propr/packages/core/src/config/configManagerSummarization.ts:101:19) {
#   code: 'SQLITE_ERROR'
# }
# Error loading summarization warnings: SqliteError: select * from `system_configs` where `key` = 'summarization_runtime_state' limit 1 - no such table: system_configs
#     at Database.prepare (/home/runner/work/propr/propr/node_modules/better-sqlite3/lib/methods/wrappers.js:5:21)
#     at Client_BetterSQLite3._query (/home/runner/work/propr/propr/node_modules/knex/lib/dialects/better-sqlite3/index.js:35:34)
#     at executeQuery (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/query-executioner.js:37:17)
#     at Client_BetterSQLite3.query (/home/runner/work/propr/propr/node_modules/knex/lib/client.js:154:12)
#     at Runner.query (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:141:36)
#     at ensureConnectionCallback (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/ensure-connection-callback.js:13:17)
#     at Runner.ensureConnection (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:318:20)
#     at async Runner.run (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:30:19)
#     at async getConfigWithClient (/home/runner/work/propr/propr/packages/core/src/config/configStore.ts:17:24)
#     at async loadSummarizationRuntimeState (/home/runner/work/propr/propr/packages/core/src/config/configManagerSummarization.ts:101:19) {
#   code: 'SQLITE_ERROR'
# }
# Error loading summarization warnings: SqliteError: select * from `system_configs` where `key` = 'summarization_runtime_state' limit 1 - no such table: system_configs
#     at Database.prepare (/home/runner/work/propr/propr/node_modules/better-sqlite3/lib/methods/wrappers.js:5:21)
#     at Client_BetterSQLite3._query (/home/runner/work/propr/propr/node_modules/knex/lib/dialects/better-sqlite3/index.js:35:34)
#     at executeQuery (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/query-executioner.js:37:17)
#     at Client_BetterSQLite3.query (/home/runner/work/propr/propr/node_modules/knex/lib/client.js:154:12)
#     at Runner.query (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:141:36)
#     at ensureConnectionCallback (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/ensure-connection-callback.js:13:17)
#     at Runner.ensureConnection (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:318:20)
#     at async Runner.run (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:30:19)
#     at async getConfigWithClient (/home/runner/work/propr/propr/packages/core/src/config/configStore.ts:17:24)
#     at async loadSummarizationRuntimeState (/home/runner/work/propr/propr/packages/core/src/config/configManagerSummarization.ts:101:19) {
#   code: 'SQLITE_ERROR'
# }
# Subtest: /api/status drops malformed or disconnected Connect account state without assuming Community
ok 67 - /api/status drops malformed or disconnected Connect account state without assuming Community
  ---
  duration_ms: 3.922531
  type: 'test'
  ...
# Subtest: /api/status does not expose Connect account state for a non-Connect intake mode
ok 68 - /api/status does not expose Connect account state for a non-Connect intake mode
  ---
  duration_ms: 1.626394
  type: 'test'
  ...
# Error loading summarization warnings: SqliteError: select * from `system_configs` where `key` = 'summarization_runtime_state' limit 1 - no such table: system_configs
#     at Database.prepare (/home/runner/work/propr/propr/node_modules/better-sqlite3/lib/methods/wrappers.js:5:21)
#     at Client_BetterSQLite3._query (/home/runner/work/propr/propr/node_modules/knex/lib/dialects/better-sqlite3/index.js:35:34)
#     at executeQuery (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/query-executioner.js:37:17)
#     at Client_BetterSQLite3.query (/home/runner/work/propr/propr/node_modules/knex/lib/client.js:154:12)
#     at Runner.query (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:141:36)
#     at ensureConnectionCallback (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/ensure-connection-callback.js:13:17)
#     at Runner.ensureConnection (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:318:20)
#     at async Runner.run (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:30:19)
#     at async getConfigWithClient (/home/runner/work/propr/propr/packages/core/src/config/configStore.ts:17:24)
#     at async loadSummarizationRuntimeState (/home/runner/work/propr/propr/packages/core/src/config/configManagerSummarization.ts:101:19) {
#   code: 'SQLITE_ERROR'
# }
# Error loading summarization warnings: SqliteError: select * from `system_configs` where `key` = 'summarization_runtime_state' limit 1 - no such table: system_configs
#     at Database.prepare (/home/runner/work/propr/propr/node_modules/better-sqlite3/lib/methods/wrappers.js:5:21)
#     at Client_BetterSQLite3._query (/home/runner/work/propr/propr/node_modules/knex/lib/dialects/better-sqlite3/index.js:35:34)
#     at executeQuery (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/query-executioner.js:37:17)
#     at Client_BetterSQLite3.query (/home/runner/work/propr/propr/node_modules/knex/lib/client.js:154:12)
#     at Runner.query (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:141:36)
#     at ensureConnectionCallback (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/ensure-connection-callback.js:13:17)
#     at Runner.ensureConnection (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:318:20)
#     at async Runner.run (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:30:19)
#     at async getConfigWithClient (/home/runner/work/propr/propr/packages/core/src/config/configStore.ts:17:24)
#     at async loadSummarizationRuntimeState (/home/runner/work/propr/propr/packages/core/src/config/configManagerSummarization.ts:101:19) {
#   code: 'SQLITE_ERROR'
# }
# Error loading summarization warnings: SqliteError: select * from `system_configs` where `key` = 'summarization_runtime_state' limit 1 - no such table: system_configs
#     at Database.prepare (/home/runner/work/propr/propr/node_modules/better-sqlite3/lib/methods/wrappers.js:5:21)
#     at Client_BetterSQLite3._query (/home/runner/work/propr/propr/node_modules/knex/lib/dialects/better-sqlite3/index.js:35:34)
#     at executeQuery (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/query-executioner.js:37:17)
#     at Client_BetterSQLite3.query (/home/runner/work/propr/propr/node_modules/knex/lib/client.js:154:12)
#     at Runner.query (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:141:36)
#     at ensureConnectionCallback (/home/runner/work/propr/propr/node_modules/knex/lib/execution/internal/ensure-connection-callback.js:13:17)
#     at Runner.ensureConnection (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:318:20)
#     at async Runner.run (/home/runner/work/propr/propr/node_modules/knex/lib/execution/runner.js:30:19)
#     at async getConfigWithClient (/home/runner/work/propr/propr/packages/core/src/config/configStore.ts:17:24)
#     at async loadSummarizationRuntimeState (/home/runner/work/propr/propr/packages/core/src/config/configManagerSummarization.ts:101:19) {
#   code: 'SQLITE_ERROR'
# }
# Error loading summarization warnings: SqliteError: select * from `system_configs` where `key` = 'summarization_runtime_state' limit 1 - no such table: system_configs
#     at Database.prepare (/home/runner/wor

...(truncated)

View Workflow