kayg/calternal
Watch
1
0
Fork
You've already forked calternal
 0
Code Issues 803 Pull requests Projects Releases Packages Wiki Activity Actions 430

Break the block editor: adversarial sweep of the note editor (web + collab + sync) #186

New issue
Closed
opened 2026-09-26 15:02:27 +00:00 by kayg · 32 comments
kayg commented 2026-09-26 15:02:27 +00:00
Owner
Copy link

Owner 2026-09-26: 'I want an agent trying to break our block editor in various ways.' Scope: packages/editor, apps/web/src/lib/notes, the collab room (crates/calternal-collab) and the notes routes. Build a scripted, seeded, repeatable attack harness (Playwright + direct collab clients) in tests/ and run it on a real local server:

  • Structure: deep nesting (50 levels), 10k blocks, huge single block (1 MB), empty/whitespace blocks, mixed lists/tasks/headings/code/tables/images/embeds, block ids missing/duplicated/malformed (^ids), frontmatter edge cases.
  • Interaction: rapid click/double-click (Craft block vs text modes, #182), drag-and-drop to every position including into itself/its children, multi-select + move/delete, undo/redo storms (⌘Z/⌘⇧Z 500x), paste of hostile HTML/Markdown/RTF/images/huge text, IME composition (Japanese, Korean), RTL/bidi, emoji ZWJ sequences, Unicode normalisation, zero-width chars.
  • Concurrency: 2-5 collab clients editing the same block, one deleting what another edits, offline edits reconciled later, the sync client rewriting the same .md file on disk while the editor is open, server restart mid-edit (collab epochs).
  • Features in flight: reminders on blocks (calternal-reminders), → make-note-from-block (atomic, undoable), copy link to block, heading links (#184).
    Invariants: no crash/exception, no data loss (every byte written by any client is in the final file or a conflict copy), no duplicated or lost blocks, file stays valid Markdown that round-trips byte-for-byte where untouched (#95), ^ids unique, undo restores exactly. Every failure: minimal seeded repro as a regression test, fix, commit atomically. Report seeds run and bugs fixed/filed.
Owner 2026-09-26: 'I want an agent trying to break our block editor in various ways.' Scope: packages/editor, apps/web/src/lib/notes, the collab room (crates/calternal-collab) and the notes routes. Build a scripted, seeded, repeatable attack harness (Playwright + direct collab clients) in tests/ and run it on a real local server: - Structure: deep nesting (50 levels), 10k blocks, huge single block (1 MB), empty/whitespace blocks, mixed lists/tasks/headings/code/tables/images/embeds, block ids missing/duplicated/malformed (^ids), frontmatter edge cases. - Interaction: rapid click/double-click (Craft block vs text modes, #182), drag-and-drop to every position including into itself/its children, multi-select + move/delete, undo/redo storms (⌘Z/⌘⇧Z 500x), paste of hostile HTML/Markdown/RTF/images/huge text, IME composition (Japanese, Korean), RTL/bidi, emoji ZWJ sequences, Unicode normalisation, zero-width chars. - Concurrency: 2-5 collab clients editing the same block, one deleting what another edits, offline edits reconciled later, the sync client rewriting the same .md file on disk while the editor is open, server restart mid-edit (collab epochs). - Features in flight: reminders on blocks (calternal-reminders), → make-note-from-block (atomic, undoable), copy link to block, heading links (#184). Invariants: no crash/exception, no data loss (every byte written by any client is in the final file or a conflict copy), no duplicated or lost blocks, file stays valid Markdown that round-trips byte-for-byte where untouched (#95), ^ids unique, undo restores exactly. Every failure: minimal seeded repro as a regression test, fix, commit atomically. Report seeds run and bugs fixed/filed.
kayg commented 2026-09-26 15:03:25 +00:00
Author
Owner
Copy link

Starting #186 on branch job/break-editor, based on 6e1e5656036eaeb060df3089043519aab206637 (dev merge-base). Worktree was clean at start.

Starting #186 on branch `job/break-editor`, based on `6e1e5656036eaeb060df3089043519aab206637` (dev merge-base). Worktree was clean at start.
kayg commented 2026-09-26 16:19:54 +00:00
Author
Owner
Copy link

Finding from the first harness run: ./tests/adversarial/run.sh fails in its cargo build step before starting the local server. The compiler reports crates/plugins/files/src/index.rs:620:19: return Ok(()) returns () where the function expects bool. git blame attributes the line to 70c847ea (perf(files): skip an Index upsert that would change nothing). The function returns Result<bool>, and the parallel Agenda worktree has return Ok(true) at this branch. This file is outside the #186 owned paths, so I have not changed it. I am checking a way to continue the editor probe against the current production UI without changing another job's source.

Finding from the first harness run: `./tests/adversarial/run.sh` fails in its `cargo build` step before starting the local server. The compiler reports `crates/plugins/files/src/index.rs:620:19`: `return Ok(())` returns `()` where the function expects `bool`. `git blame` attributes the line to `70c847ea` (`perf(files): skip an Index upsert that would change nothing`). The function returns `Result<bool>`, and the parallel Agenda worktree has `return Ok(true)` at this branch. This file is outside the #186 owned paths, so I have not changed it. I am checking a way to continue the editor probe against the current production UI without changing another job's source.
kayg commented 2026-09-26 16:34:40 +00:00
Author
Owner
Copy link

The first seeded editor sweep (seed=0x186c0de) passed the 50-level mixed-Markdown byte-stability case, the 10,000-block room load, and the 1 MiB paragraph case. The browser case found that Copy link reused ^duplicate-id on the second block carrying that ID, violating unique block anchors. In the same run, offline-edit reconciliation timed out; following room cases could not connect. I will isolate the room cases next because the later connection failures may depend on the earlier run state. No product changes have been made yet.

The first seeded editor sweep (`seed=0x186c0de`) passed the 50-level mixed-Markdown byte-stability case, the 10,000-block room load, and the 1 MiB paragraph case. The browser case found that Copy link reused `^duplicate-id` on the second block carrying that ID, violating unique block anchors. In the same run, offline-edit reconciliation timed out; following room cases could not connect. I will isolate the room cases next because the later connection failures may depend on the earlier run state. No product changes have been made yet.
kayg commented 2026-09-26 16:42:30 +00:00
Author
Owner
Copy link

The duplicate-anchor repro is fixed in 76c9fd6e. ensureAnchorAt now counts physical block-anchor tokens across the Note; it keeps a unique anchor and replaces the selected token when its ID is duplicated. The new apps/web/src/lib/notes/anchors.test.ts regression passes, and bun run --cwd apps/web check reports svelte-check found 0 errors and 0 warnings. I am rerunning the production browser repro now.

The duplicate-anchor repro is fixed in `76c9fd6e`. `ensureAnchorAt` now counts physical block-anchor tokens across the Note; it keeps a unique anchor and replaces the selected token when its ID is duplicated. The new `apps/web/src/lib/notes/anchors.test.ts` regression passes, and `bun run --cwd apps/web check` reports `svelte-check found 0 errors and 0 warnings`. I am rerunning the production browser repro now.
kayg commented 2026-09-26 16:47:08 +00:00
Author
Owner
Copy link

The production browser rerun no longer reports duplicate anchor reuse after 76c9fd6e. It still fails the browser area because the page emits eight Failed to load resource: 404 console errors. The harness currently omits those response URLs, so I am adding URL-level diagnostics and will isolate the 404 source before deciding whether it is in the application or the local test bridge.

The production browser rerun no longer reports duplicate anchor reuse after `76c9fd6e`. It still fails the browser area because the page emits eight `Failed to load resource: 404` console errors. The harness currently omits those response URLs, so I am adding URL-level diagnostics and will isolate the 404 source before deciding whether it is in the application or the local test bridge.
kayg commented 2026-09-26 16:50:22 +00:00
Author
Owner
Copy link

The browser response trace identifies the 404s as the test's deliberately hostile paste payload (<img src="x">). The Note image resolver maps that relative path to Notes/x; the Files API returns 404 because that test attachment does not exist. This is expected for the fixture and no script ran. The duplicate block link checks passed after 76c9fd6e. I will exclude only this exact expected missing-image response from browser error reporting; other 4xx/5xx remain reportable.

The browser response trace identifies the 404s as the test's deliberately hostile paste payload (`<img src="x">`). The Note image resolver maps that relative path to `Notes/x`; the Files API returns 404 because that test attachment does not exist. This is expected for the fixture and no script ran. The duplicate block link checks passed after `76c9fd6e`. I will exclude only this exact expected missing-image response from browser error reporting; other 4xx/5xx remain reportable.
kayg commented 2026-09-26 16:53:24 +00:00
Author
Owner
Copy link

The isolated production browser area now passes on seed=0x186c0de: Copy link creates a unique ID for a duplicate block, malformed/missing anchors are repaired, hostile HTML does not execute, and the 500-step undo/redo storm completes. The only suppressed response is the expected 404 for the deliberate <img src="x"> paste fixture; all other 4xx/5xx responses and runtime console/page errors remain failures. The harness change is committed as 7c9c388d.

The isolated production browser area now passes on `seed=0x186c0de`: Copy link creates a unique ID for a duplicate block, malformed/missing anchors are repaired, hostile HTML does not execute, and the 500-step undo/redo storm completes. The only suppressed response is the expected 404 for the deliberate `<img src="x">` paste fixture; all other 4xx/5xx responses and runtime console/page errors remain failures. The harness change is committed as `7c9c388d`.
kayg commented 2026-09-26 17:00:12 +00:00
Author
Owner
Copy link

The isolated two-client repro confirms a collab failure independent of other areas: after disconnecting one client and editing locally, it reconnects with the same room epoch and completes the sync handshake. Its document still contains offline-edit, but the peer never receives it; the resumed WebSocket then closes with code 1006. The client sent three SyncStep2 responses during the session and one ordinary update before going offline. I am checking the server's warning output and protocol frame sequence before changing the room or client.

The isolated two-client repro confirms a collab failure independent of other areas: after disconnecting one client and editing locally, it reconnects with the same room epoch and completes the sync handshake. Its document still contains `offline-edit`, but the peer never receives it; the resumed WebSocket then closes with code 1006. The client sent three SyncStep2 responses during the session and one ordinary update before going offline. I am checking the server's warning output and protocol frame sequence before changing the room or client.
kayg commented 2026-09-26 17:40:15 +00:00
Author
Owner
Copy link

The isolated offline-reconnect case exposed a probe framing defect, not a server failure. WebSocket trace showed the reconnecting Yjs client sent a 35-byte top-level message type 1 after receiving SyncStep1; the server expects Y-sync messages wrapped in top-level type 0. sync.readSyncMessage generated the inner SyncStep2, but the probe omitted the outer type byte. I added the missing wrapper and am rerunning the case. The earlier offline-reconciliation timeout should be treated as a false positive from the probe.

The isolated offline-reconnect case exposed a probe framing defect, not a server failure. WebSocket trace showed the reconnecting Yjs client sent a 35-byte top-level message type `1` after receiving SyncStep1; the server expects Y-sync messages wrapped in top-level type `0`. `sync.readSyncMessage` generated the inner SyncStep2, but the probe omitted the outer type byte. I added the missing wrapper and am rerunning the case. The earlier offline-reconciliation timeout should be treated as a false positive from the probe.
kayg commented 2026-09-26 17:42:11 +00:00
Author
Owner
Copy link

The framing correction is in place. Trace now shows the offline reconnecting client sending a top-level type 0, SyncStep2 frame (36 bytes), followed by the server forwarding that SyncStep2 to the peer. The remaining isolated failure was the harness reading the saved Note immediately after closing both clients, before the room's debounced save completed. The online peer had already received the offline edit. I added bounded polling for the saved Note body, with 250 ms intervals to keep REST checks light under shared-host load.

The framing correction is in place. Trace now shows the offline reconnecting client sending a top-level type `0`, SyncStep2 frame (`36` bytes), followed by the server forwarding that SyncStep2 to the peer. The remaining isolated failure was the harness reading the saved Note immediately after closing both clients, before the room's debounced save completed. The online peer had already received the offline edit. I added bounded polling for the saved Note body, with 250 ms intervals to keep REST checks light under shared-host load.
kayg commented 2026-09-26 17:44:31 +00:00
Author
Owner
Copy link

The separated concurrent-write area exposed a second probe readiness race. It asserted that both client documents contained the API-seeded paragraph immediately after each client's SyncStep2 callback; that callback only confirms one direction of the handshake. I changed the probe to wait up to 30 seconds for the seeded block to appear in both documents before mutating either one. This is probe synchronization coverage, not evidence of lost Note data.

The separated concurrent-write area exposed a second probe readiness race. It asserted that both client documents contained the API-seeded paragraph immediately after each client's SyncStep2 callback; that callback only confirms one direction of the handshake. I changed the probe to wait up to 30 seconds for the seeded block to appear in both documents before mutating either one. This is probe synchronization coverage, not evidence of lost Note data.
kayg commented 2026-09-26 17:45:55 +00:00
Author
Owner
Copy link

The offline reconnect and concurrent-write probe areas now pass after correcting the harness. The Y-sync response wrapper and readiness/save waits are committed at 132fb3ace42c2b2469addb8489be66fc0176c4d6.

Exact area output:

PASS editor concurrent same-block writes seed=25608414 ms=1300
PASS editor all areas seed=25608414
PASS editor same-epoch offline edit reconciliation seed=25608414 ms=1539
PASS editor all areas seed=25608414
The offline reconnect and concurrent-write probe areas now pass after correcting the harness. The Y-sync response wrapper and readiness/save waits are committed at `132fb3ace42c2b2469addb8489be66fc0176c4d6`. Exact area output: ``` PASS editor concurrent same-block writes seed=25608414 ms=1300 PASS editor all areas seed=25608414 PASS editor same-epoch offline edit reconciliation seed=25608414 ms=1539 PASS editor all areas seed=25608414 ```
kayg commented 2026-09-26 18:22:29 +00:00
Author
Owner
Copy link

The fresh full editor sweep reported two areas that need isolated reruns. In delete/edit, the probe reads the Note body immediately after closing the clients; the offline case showed that this can race the room's debounced save. I will add the same bounded saved-body poll before treating the edit as lost. In the live-editor restart area, the client gives the runner 30 seconds to restart, while the runner's ready loop allows up to 60 seconds; I will align those bounds and rerun the restart case.

Other areas in this sweep passed: depth-50 mixed Markdown, 10,000 blocks, 1 MiB paragraph, browser paste/history, same-block concurrent edits, offline reconciliation, and external Note writes.

The fresh full editor sweep reported two areas that need isolated reruns. In delete/edit, the probe reads the Note body immediately after closing the clients; the offline case showed that this can race the room's debounced save. I will add the same bounded saved-body poll before treating the edit as lost. In the live-editor restart area, the client gives the runner 30 seconds to restart, while the runner's ready loop allows up to 60 seconds; I will align those bounds and rerun the restart case. Other areas in this sweep passed: depth-50 mixed Markdown, 10,000 blocks, 1 MiB paragraph, browser paste/history, same-block concurrent edits, offline reconciliation, and external Note writes.
kayg commented 2026-09-26 20:03:53 +00:00
Author
Owner
Copy link

Seed 0x186c0de, isolated with EDITOR_AREA=delete-edit against the production web build and a real local server: both Y-sync clients complete their handshakes, then one deletes first-target while the other edits the same block. After closing both sockets, the saved-body poll does not find concurrent-edit-survivor within 30 seconds. This is a possible data-loss finding. I am adding state diagnostics and will determine whether the update reaches the peer and room snapshot before changing product code.

Seed `0x186c0de`, isolated with `EDITOR_AREA=delete-edit` against the production web build and a real local server: both Y-sync clients complete their handshakes, then one deletes `first-target` while the other edits the same block. After closing both sockets, the saved-body poll does not find `concurrent-edit-survivor` within 30 seconds. This is a possible data-loss finding. I am adding state diagnostics and will determine whether the update reaches the peer and room snapshot before changing product code.
kayg commented 2026-09-26 20:08:42 +00:00
Author
Owner
Copy link

Confirmed with a second isolated run after adding the same seeded-document readiness wait used by the concurrent-write area. The probe waits until both clients have first-target, performs the delete/edit race, then waits until both have received a Y-sync update from the other client. Both clients sent one update; both converged to second-target, and the saved Markdown after 30 seconds was # 186 delete edit race plus second-target. The edited block and concurrent-edit-survivor are absent. This is data loss after both updates reached both peers, not the room's debounced-save delay. I am tracing Yrs update ancestry to preserve the conflicting edit while keeping ordinary deletions clean.

Confirmed with a second isolated run after adding the same seeded-document readiness wait used by the concurrent-write area. The probe waits until both clients have `first-target`, performs the delete/edit race, then waits until both have received a Y-sync update from the other client. Both clients sent one update; both converged to `second-target`, and the saved Markdown after 30 seconds was `# 186 delete edit race` plus `second-target`. The edited block and `concurrent-edit-survivor` are absent. This is data loss after both updates reached both peers, not the room's debounced-save delay. I am tracing Yrs update ancestry to preserve the conflicting edit while keeping ordinary deletions clean.
kayg commented 2026-09-26 20:58:02 +00:00
Author
Owner
Copy link

Confirmed and fixed the delete/edit data-loss finding. On seed 25608414, both local Yjs clients received each other's updates, and the Note saved the concurrent edit after the server restored it through the existing block merge. The room keeps a pre-delete Yrs mirror only after a root block deletion; the block ID index avoids scanning every block for ordinary text deletes. The focused real-server adversarial run passed.

Confirmed and fixed the delete/edit data-loss finding. On seed 25608414, both local Yjs clients received each other's updates, and the Note saved the concurrent edit after the server restored it through the existing block merge. The room keeps a pre-delete Yrs mirror only after a root block deletion; the block ID index avoids scanning every block for ordinary text deletes. The focused real-server adversarial run passed.
kayg commented 2026-09-26 21:12:28 +00:00
Author
Owner
Copy link

The full editor sweep found a second data-integrity issue: opening the mixed Markdown Note triggered a save and changed untouched bytes (seed 25608414). The server treated every incoming sync update as a dirty edit, including an empty SyncStep2. The room now compares its serialized Yrs state before and after each accepted update and schedules a save only if the state changes. empty_sync_update_does_not_mark_the_room_document_changed passes; the focused real-server mixed-Markdown probe also passes and preserves the exact body bytes.

The same full sweep timed out waiting for the live-editor restart handshake. A focused restart rerun then passed in 10,048 ms on seed 25608414. This timeout is load-only; it did not reproduce when run alone.

The full editor sweep found a second data-integrity issue: opening the mixed Markdown Note triggered a save and changed untouched bytes (seed 25608414). The server treated every incoming sync update as a dirty edit, including an empty SyncStep2. The room now compares its serialized Yrs state before and after each accepted update and schedules a save only if the state changes. `empty_sync_update_does_not_mark_the_room_document_changed` passes; the focused real-server mixed-Markdown probe also passes and preserves the exact body bytes. The same full sweep timed out waiting for the live-editor restart handshake. A focused restart rerun then passed in 10,048 ms on seed 25608414. This timeout is load-only; it did not reproduce when run alone.
kayg commented 2026-09-26 21:42:18 +00:00
Author
Owner
Copy link

The full production sweep exposed false findings in the adversarial bridge. editor-proxy.mjs served the web build for every non-API path, so DAV/SPA probes bypassed the server router and response-security middleware; its WebSocket side also returned 101 before the upstream server authorized the request. I changed the bridge to proxy all HTTP routes to the server (which embeds the production web build) and changed the round-2 WebSocket probe to connect directly to the backend port, preserving the public Origin. The runner now starts the backend before checking the proxied root. I am validating these corrections with isolated production probes; no product finding is inferred from the bypassed checks.

The full production sweep exposed false findings in the adversarial bridge. `editor-proxy.mjs` served the web build for every non-API path, so DAV/SPA probes bypassed the server router and response-security middleware; its WebSocket side also returned 101 before the upstream server authorized the request. I changed the bridge to proxy all HTTP routes to the server (which embeds the production web build) and changed the round-2 WebSocket probe to connect directly to the backend port, preserving the public Origin. The runner now starts the backend before checking the proxied root. I am validating these corrections with isolated production probes; no product finding is inferred from the bypassed checks.
kayg commented 2026-09-26 22:02:03 +00:00
Author
Owner
Copy link

The harness correction is committed at 247ddfebe4c01ff957d3f2cc9d8b71a219e73864. The first filtered attack2 attempt omitted the normal photo fixture and reported an empty shared Photos timeline; that report was a test setup false positive. I updated the helper to run round-one fixture setup before isolation/collab checks and reran it against the production server. The corrected run reports HOSTILE BYTES FINDINGS 0 and ROUND 2 FINDINGS 0; it exercised Photos sharing, unauthorized WebSocket routes, malformed/oversized frames, external edits, block order, and 300-socket limits. The server stayed alive and accepted 59 sockets before the configured cap. Round-one setup printed 46 SLOW timing entries only; per owner rule these are load, not correctness findings.

The harness correction is committed at `247ddfebe4c01ff957d3f2cc9d8b71a219e73864`. The first filtered attack2 attempt omitted the normal photo fixture and reported an empty shared Photos timeline; that report was a test setup false positive. I updated the helper to run round-one fixture setup before isolation/collab checks and reran it against the production server. The corrected run reports `HOSTILE BYTES FINDINGS 0` and `ROUND 2 FINDINGS 0`; it exercised Photos sharing, unauthorized WebSocket routes, malformed/oversized frames, external edits, block order, and 300-socket limits. The server stayed alive and accepted 59 sockets before the configured cap. Round-one setup printed 46 `SLOW` timing entries only; per owner rule these are load, not correctness findings.
kayg commented 2026-09-26 22:51:09 +00:00
Author
Owner
Copy link

The first full cargo test run failed only in calternal-collab/tests/shared_notes.rs: the Bun probe waited exactly 3 seconds for the atomic-save hook, while the room's MAX_FLUSH_WAIT is also 3 seconds. Every earlier workspace test passed. cargo test -p calternal-collab --test shared_notes passed alone in 5.48 s. I changed the test-only readiness timeout to 10 seconds to allow scheduler and file-write time; the focused rerun passes in 15.72 s.

One browser run also emitted a saved-Markdown duplicate-anchor assertion with 159 ^duplicate-id tokens after the history storm. I could not reproduce it in two instrumented production-browser reruns: both kept four distinct anchor decorations across all interaction stages, 10 paragraphs and 4 list items, and saved Markdown passed the uniqueness assertion (12 ms anchor-save poll on the latest run). The probe now records per-stage anchor state and includes saved Markdown on any recurrence. This intermittent data-integrity report remains tracked here for the owner; no product fix was made without a reproducible case.

The first full `cargo test` run failed only in `calternal-collab/tests/shared_notes.rs`: the Bun probe waited exactly 3 seconds for the atomic-save hook, while the room's `MAX_FLUSH_WAIT` is also 3 seconds. Every earlier workspace test passed. `cargo test -p calternal-collab --test shared_notes` passed alone in 5.48 s. I changed the test-only readiness timeout to 10 seconds to allow scheduler and file-write time; the focused rerun passes in 15.72 s. One browser run also emitted a saved-Markdown duplicate-anchor assertion with 159 `^duplicate-id` tokens after the history storm. I could not reproduce it in two instrumented production-browser reruns: both kept four distinct anchor decorations across all interaction stages, 10 paragraphs and 4 list items, and saved Markdown passed the uniqueness assertion (12 ms anchor-save poll on the latest run). The probe now records per-stage anchor state and includes saved Markdown on any recurrence. This intermittent data-integrity report remains tracked here for the owner; no product fix was made without a reproducible case.
kayg commented 2026-09-27 07:47:41 +00:00
Author
Owner
Copy link

Resuming Forgejo #186 after the VM restart. Branch: job/break-editor; current merge-base with dev: f6418fc72d750d941f23554ad16381f6dd400fd6. Worktree is clean at checkpoint b8b8ae83c5d5983ee8ac192cf3f1f47384b47aab. I reviewed the prior report comments and am continuing the seeded production-server sweep from the remaining areas.

Resuming Forgejo #186 after the VM restart. Branch: `job/break-editor`; current merge-base with `dev`: `f6418fc72d750d941f23554ad16381f6dd400fd6`. Worktree is clean at checkpoint `b8b8ae83c5d5983ee8ac192cf3f1f47384b47aab`. I reviewed the prior report comments and am continuing the seeded production-server sweep from the remaining areas.
kayg commented 2026-09-27 08:03:07 +00:00
Author
Owner
Copy link

After merging current dev at bcaa673d, the isolated production browser area passed with seed 25608414. The unresolved duplicate-anchor report did not recur: all four anchors stayed distinct after the 500-step undo/redo storm, and the saved Note passed the uniqueness check. I added checks that copied block and heading URLs use the permanent Note ID and that opening each URL reveals its target.

Exact output:

PASS editor browser editor paste, Unicode, and history storm seed=25608414 ms=32077
PASS editor all areas seed=25608414
After merging current `dev` at `bcaa673d`, the isolated production browser area passed with seed `25608414`. The unresolved duplicate-anchor report did not recur: all four anchors stayed distinct after the 500-step undo/redo storm, and the saved Note passed the uniqueness check. I added checks that copied block and heading URLs use the permanent Note ID and that opening each URL reveals its target. Exact output: ``` PASS editor browser editor paste, Unicode, and history storm seed=25608414 ms=32077 PASS editor all areas seed=25608414 ```
kayg commented 2026-09-27 08:35:25 +00:00
Author
Owner
Copy link

The full run and a second fixture-complete ROUND2_SECTIONS=isolation run both got HTTP 200 with {"days":[]} for the recipient's opted-in Photos share during the 12-second visibility window. That second run also had an early proxy 502 and several explicitly SLOW results while other jobs were active on the host. I extended this asynchronous visibility window to 60 seconds in f17aa300 so the next isolated pass can distinguish indexing delay from a persistent missing item. I have not treated this as a confirmed Photos defect yet.

The full run and a second fixture-complete `ROUND2_SECTIONS=isolation` run both got HTTP 200 with `{"days":[]}` for the recipient's opted-in Photos share during the 12-second visibility window. That second run also had an early proxy 502 and several explicitly `SLOW` results while other jobs were active on the host. I extended this asynchronous visibility window to 60 seconds in `f17aa300` so the next isolated pass can distinguish indexing delay from a persistent missing item. I have not treated this as a confirmed Photos defect yet.
kayg commented 2026-09-27 08:38:39 +00:00
Author
Owner
Copy link

The full production sweep also reported a restart handoff timeout: restart-ready-3 was not followed by restart-go-3 within the browser probe's 90-second bound. The later direct epoch probe then reported its initial sync not reached within 20 seconds and several dependent checks failed. Other API probes in that run recorded 7.1-second calendar writes as SLOW, with several unrelated jobs active on the shared host. I am rerunning the browser restart area by itself before treating this as a product failure.

The full production sweep also reported a restart handoff timeout: `restart-ready-3` was not followed by `restart-go-3` within the browser probe's 90-second bound. The later direct epoch probe then reported its initial sync not reached within 20 seconds and several dependent checks failed. Other API probes in that run recorded 7.1-second calendar writes as `SLOW`, with several unrelated jobs active on the shared host. I am rerunning the browser restart area by itself before treating this as a product failure.
kayg commented 2026-09-27 08:41:14 +00:00
Author
Owner
Copy link

The isolated production browser rerun passed the live-editor restart area on seed 25608414 in 11,615 ms. It confirmed the runner restarted the server and the edited Note was saved exactly once. The earlier browser restart handoff timeout did not reproduce when this area ran alone.

Exact output:

PASS editor server restart with a live editor seed=25608414 ms=11615
PASS editor all areas seed=25608414
The isolated production browser rerun passed the live-editor restart area on seed `25608414` in 11,615 ms. It confirmed the runner restarted the server and the edited Note was saved exactly once. The earlier browser restart handoff timeout did not reproduce when this area ran alone. Exact output: ``` PASS editor server restart with a live editor seed=25608414 ms=11615 PASS editor all areas seed=25608414 ```
kayg commented 2026-09-27 09:05:20 +00:00
Author
Owner
Copy link

Focused adversarial rerun after the restart-probe fix:

  • ROOM_RESTART_ONLY=1 ADVERSARIAL_SKIP_AUTHZ=1 ... ./tests/adversarial/run.sh passed: restart probe: 0 findings.
  • ADVERSARIAL_ATTACK2_ONLY=1 ROUND2_SECTIONS=isolation,public ... ./tests/adversarial/run.sh completed with the Photos share check producing no finding. ZIP mid-stream reached the 30-second probe limit and was classified SLOW; the server remained alive.
  • The broad API phase in that run recorded 17 saved-search create timeouts and only 23 of 40 expected distinct searches. The server was alive at the end. This is outside the editor's owned behavior and occurred while several other adversarial jobs were active, so I have not attributed it to the editor or treated it as a confirmed product defect.

The direct backend socket change avoids the test proxy's client-side 101 before upstream authorization. Probe isolation commit: 00a022e5.

Focused adversarial rerun after the restart-probe fix: - `ROOM_RESTART_ONLY=1 ADVERSARIAL_SKIP_AUTHZ=1 ... ./tests/adversarial/run.sh` passed: `restart probe: 0 findings`. - `ADVERSARIAL_ATTACK2_ONLY=1 ROUND2_SECTIONS=isolation,public ... ./tests/adversarial/run.sh` completed with the Photos share check producing no finding. ZIP mid-stream reached the 30-second probe limit and was classified `SLOW`; the server remained alive. - The broad API phase in that run recorded 17 saved-search create timeouts and only 23 of 40 expected distinct searches. The server was alive at the end. This is outside the editor's owned behavior and occurred while several other adversarial jobs were active, so I have not attributed it to the editor or treated it as a confirmed product defect. The direct backend socket change avoids the test proxy's client-side 101 before upstream authorization. Probe isolation commit: `00a022e5`.
kayg commented 2026-09-27 09:22:43 +00:00
Author
Owner
Copy link

Forgejo #186 final report

Head: 578af5fd45c15bca4cf00a9d158ea0e72a607365 (job/break-editor). The worktree was clean after the required merge of the latest dev.

Built

  • Kept collaborative Markdown state consistent through concurrent block deletion/editing and avoided writes for empty sync updates.
  • Regenerated duplicate block anchors and added regression coverage for stable block and heading copy links.
  • Added seeded browser and live-server probes for deep nesting, 10,000 blocks, 1 MiB paragraphs, hostile paste, Unicode, undo/redo storms, concurrent edits, offline/restart flows, external writes, and copied deep links.
  • Isolated the room epoch restart probe from API load and connected its WebSocket clients directly to the backend so the test proxy cannot hide an upstream authorization rejection.
  • Extended the archive timeout handling and Photos share visibility window for shared-host runs.

Files

  • Collaboration: crates/calternal-collab/src/lib.rs, crates/calternal-collab/src/session.rs, crates/calternal-collab/tests/shared_notes.mjs.
  • Note anchors and web tests: apps/web/src/lib/notes/anchors.ts, apps/web/src/lib/notes/anchors.test.ts, apps/web/src/lib/notes/editor-types/anchor.d.ts, apps/web/src/lib/notes/NotesExplorer.svelte, apps/web/src/lib/themes.test.ts.
  • Adversarial harness: tests/adversarial/attack2.py, tests/adversarial/authz_matrix.py, tests/adversarial/bun.lock, tests/adversarial/editor-proxy.mjs, tests/adversarial/editor.mjs, tests/adversarial/package.json, tests/adversarial/restart.mjs, tests/adversarial/run.sh.
  • Other branch files: .forgejo/workflows/ci.yml, apps/web/e2e/a11y.mjs, apps/web/e2e/layout-sweep.mjs, apps/web/e2e/search.mjs, apps/web/package.json, apps/web/src/calternal-app.css, apps/web/src/lib/components/analytics/CalendarHeatmap.svelte, apps/web/src/lib/components/analytics/TimeOfDayHeatmap.svelte, apps/web/src/lib/components/search-dialog.svelte, apps/web/src/lib/files/FilesBrowser.svelte, apps/web/src/lib/files/transfer.ts, apps/web/src/lib/notes/NotesExplorer.svelte, bun.lock, packages/ui/src/components/TabBar.svelte, packages/ui/src/components/TagPill.svelte, packages/ui/src/components/calendar/MiniMonth.svelte, packages/ui/src/components/calendar/MonthGrid.svelte, packages/ui/src/components/calendar/YearHeatmap.svelte.

Adversarial findings and gaps

  • The isolated browser and room restart probes passed. In the focused API rerun, Photos share visibility produced no finding; the ZIP stream exceeded its 30-second cap and was classified SLOW, with the server still alive.
  • The broad API phase recorded 17 saved-search request timeouts and only 23 of 40 expected distinct searches; the server was alive at the end. Several other adversarial jobs were active on the shared host. I recorded this non-SLOW cross-API observation in the issue; saved-search behavior is outside this editor change.
  • The live Note UI still has no Make a note action, block reminder action, or multi-select. The browser run did not claim coverage of those absent controls.

Decisions where the design is silent

  • The restart probe uses direct backend WebSockets and retains the proxy URL as the HTTP Origin. The proxy can send a client-side 101 before upstream authorization, which made the earlier proxied check report a false connection.
  • I set the Photos share visibility wait to 60 seconds for asynchronous indexing on this shared host. ZIP stream completion after 30 seconds is reported as SLOW.

Gates

cargo fmt --check exited 0 with empty output.

cargo clippy --all-targets -- -D warnings output:

    Checking calternal-notes-core v0.1.0 (/home/kayg/Developer/calternal-wt/break-editor/crates/calternal-notes-core)
    Checking calternal-fs v0.1.0 (/home/kayg/Developer/calternal-wt/break-editor/crates/calternal-fs)
   Compiling calternal-server v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/calternal-server)
    Checking calternal-plugin v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/calternal-plugin)
    Checking calternal-dav v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/calternal-dav)
    Checking calternal-embed v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/calternal-embed)
    Checking calternal-sync v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/calternal-sync)
    Checking calternal-tags v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/calternal-tags)
    Checking calternal-plugin-notes v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/plugins/notes)
    Checking calternal-search v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/calternal-search)
    Checking calternal-cli v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/calternal-cli)
    Checking calternal-plugin-files v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/plugins/files)
    Checking calternal-collab v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/calternal-collab)
    Checking calternal-plugin-calendar v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/plugins/calendar)
    Checking calternal-plugin-photos v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/plugins/photos)
    Checking calternal-plugin-video v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/plugins/video)
    Checking calternal-plugin-ai v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/plugins/ai)
    Checking calternal-plugin-notifications v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/plugins/notifications)
    Checking calternal-plugin-analytics v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/plugins/analytics)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 35.51s

cargo test exited 0. Per-harness result lines copied verbatim:

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s
test result: ok. 49 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 30.28s
test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s
test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.43s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.74s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.14s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 56.18s
test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.20s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.92s
test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.37s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.84s
test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.50s
test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 39.78s
test result: ok. 15 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s
test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 21.60s
test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.50s
test result: ok. 9 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 1.61s
test result: ok. 17 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.40s
test result: ok. 33 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 22.10s
test result: ok. 35 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.34s
test result: ok. 477 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.36s
test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.67s
test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.59s
test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s
test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 19 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.02s
test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.28s
test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.53s
test result: ok. 42 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.35s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.48s
test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.43s
test result: ok. 101 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 36.87s
test result: ok. 90 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 106.15s
test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.19s
test result: ok. 38 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 5.04s
test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.18s
test result: ok. 24 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 1.68s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.33s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s
test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.15s
test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s
test result: ok. 1 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 6.49s
test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 41 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 4.83s
test result: ok. 45 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.16s
test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 9.89s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

bun run check output:

$ svelte-kit sync && svelte-check --tsconfig ./tsconfig.json
Loading svelte-check in workspace: /home/kayg/Developer/calternal-wt/break-editor/apps/web
Getting Svelte diagnostics...

svelte-check found 0 errors and 0 warnings

bun run test output:

$ vitest run

 RUN  v5.0.1 /home/kayg/Developer/calternal-wt/break-editor/apps/web

Could not parse CSS stylesheet
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method

 Test Files  72 passed (72)
      Tests  547 passed (547)
   Start at  11:17:26
   Duration  32.96s (transform 65%, environment 14%, import 13%, tests 6%, setup 2%)

  Transform  |component| transforming modules took 49.96s · 58% of tracked time, re-done on every run
             persist transforms across runs with fsModuleCache: true
             learn more: https://vitest.dev/guide/improving-performance#caching-between-reruns
# Forgejo #186 final report Head: `578af5fd45c15bca4cf00a9d158ea0e72a607365` (`job/break-editor`). The worktree was clean after the required merge of the latest `dev`. ## Built - Kept collaborative Markdown state consistent through concurrent block deletion/editing and avoided writes for empty sync updates. - Regenerated duplicate block anchors and added regression coverage for stable block and heading copy links. - Added seeded browser and live-server probes for deep nesting, 10,000 blocks, 1 MiB paragraphs, hostile paste, Unicode, undo/redo storms, concurrent edits, offline/restart flows, external writes, and copied deep links. - Isolated the room epoch restart probe from API load and connected its WebSocket clients directly to the backend so the test proxy cannot hide an upstream authorization rejection. - Extended the archive timeout handling and Photos share visibility window for shared-host runs. ## Files - Collaboration: `crates/calternal-collab/src/lib.rs`, `crates/calternal-collab/src/session.rs`, `crates/calternal-collab/tests/shared_notes.mjs`. - Note anchors and web tests: `apps/web/src/lib/notes/anchors.ts`, `apps/web/src/lib/notes/anchors.test.ts`, `apps/web/src/lib/notes/editor-types/anchor.d.ts`, `apps/web/src/lib/notes/NotesExplorer.svelte`, `apps/web/src/lib/themes.test.ts`. - Adversarial harness: `tests/adversarial/attack2.py`, `tests/adversarial/authz_matrix.py`, `tests/adversarial/bun.lock`, `tests/adversarial/editor-proxy.mjs`, `tests/adversarial/editor.mjs`, `tests/adversarial/package.json`, `tests/adversarial/restart.mjs`, `tests/adversarial/run.sh`. - Other branch files: `.forgejo/workflows/ci.yml`, `apps/web/e2e/a11y.mjs`, `apps/web/e2e/layout-sweep.mjs`, `apps/web/e2e/search.mjs`, `apps/web/package.json`, `apps/web/src/calternal-app.css`, `apps/web/src/lib/components/analytics/CalendarHeatmap.svelte`, `apps/web/src/lib/components/analytics/TimeOfDayHeatmap.svelte`, `apps/web/src/lib/components/search-dialog.svelte`, `apps/web/src/lib/files/FilesBrowser.svelte`, `apps/web/src/lib/files/transfer.ts`, `apps/web/src/lib/notes/NotesExplorer.svelte`, `bun.lock`, `packages/ui/src/components/TabBar.svelte`, `packages/ui/src/components/TagPill.svelte`, `packages/ui/src/components/calendar/MiniMonth.svelte`, `packages/ui/src/components/calendar/MonthGrid.svelte`, `packages/ui/src/components/calendar/YearHeatmap.svelte`. ## Adversarial findings and gaps - The isolated browser and room restart probes passed. In the focused API rerun, Photos share visibility produced no finding; the ZIP stream exceeded its 30-second cap and was classified `SLOW`, with the server still alive. - The broad API phase recorded 17 saved-search request timeouts and only 23 of 40 expected distinct searches; the server was alive at the end. Several other adversarial jobs were active on the shared host. I recorded this non-`SLOW` cross-API observation in the issue; saved-search behavior is outside this editor change. - The live Note UI still has no Make a note action, block reminder action, or multi-select. The browser run did not claim coverage of those absent controls. ## Decisions where the design is silent - The restart probe uses direct backend WebSockets and retains the proxy URL as the HTTP Origin. The proxy can send a client-side 101 before upstream authorization, which made the earlier proxied check report a false connection. - I set the Photos share visibility wait to 60 seconds for asynchronous indexing on this shared host. ZIP stream completion after 30 seconds is reported as `SLOW`. ## Gates `cargo fmt --check` exited 0 with empty output. `cargo clippy --all-targets -- -D warnings` output: ```text Checking calternal-notes-core v0.1.0 (/home/kayg/Developer/calternal-wt/break-editor/crates/calternal-notes-core) Checking calternal-fs v0.1.0 (/home/kayg/Developer/calternal-wt/break-editor/crates/calternal-fs) Compiling calternal-server v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/calternal-server) Checking calternal-plugin v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/calternal-plugin) Checking calternal-dav v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/calternal-dav) Checking calternal-embed v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/calternal-embed) Checking calternal-sync v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/calternal-sync) Checking calternal-tags v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/calternal-tags) Checking calternal-plugin-notes v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/plugins/notes) Checking calternal-search v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/calternal-search) Checking calternal-cli v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/calternal-cli) Checking calternal-plugin-files v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/plugins/files) Checking calternal-collab v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/calternal-collab) Checking calternal-plugin-calendar v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/plugins/calendar) Checking calternal-plugin-photos v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/plugins/photos) Checking calternal-plugin-video v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/plugins/video) Checking calternal-plugin-ai v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/plugins/ai) Checking calternal-plugin-notifications v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/plugins/notifications) Checking calternal-plugin-analytics v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/plugins/analytics) Finished `dev` profile [unoptimized + debuginfo] target(s) in 35.51s ``` `cargo test` exited 0. Per-harness result lines copied verbatim: ```text test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s test result: ok. 49 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 30.28s test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.43s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.74s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.14s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 56.18s test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.20s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.92s test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.37s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.84s test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.50s test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 39.78s test result: ok. 15 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 21.60s test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.50s test result: ok. 9 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 1.61s test result: ok. 17 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.40s test result: ok. 33 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 22.10s test result: ok. 35 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.34s test result: ok. 477 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.36s test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.67s test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.59s test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 19 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.02s test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.28s test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.53s test result: ok. 42 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.35s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.48s test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.43s test result: ok. 101 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 36.87s test result: ok. 90 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 106.15s test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.19s test result: ok. 38 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 5.04s test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.18s test result: ok. 24 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 1.68s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.33s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.15s test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s test result: ok. 1 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 6.49s test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 41 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 4.83s test result: ok. 45 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.16s test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 9.89s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ``` `bun run check` output: ```text $ svelte-kit sync && svelte-check --tsconfig ./tsconfig.json Loading svelte-check in workspace: /home/kayg/Developer/calternal-wt/break-editor/apps/web Getting Svelte diagnostics... svelte-check found 0 errors and 0 warnings ``` `bun run test` output: ```text $ vitest run RUN v5.0.1 /home/kayg/Developer/calternal-wt/break-editor/apps/web Could not parse CSS stylesheet Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Test Files 72 passed (72) Tests 547 passed (547) Start at 11:17:26 Duration 32.96s (transform 65%, environment 14%, import 13%, tests 6%, setup 2%) Transform |component| transforming modules took 49.96s · 58% of tracked time, re-done on every run persist transforms across runs with fsModuleCache: true learn more: https://vitest.dev/guide/improving-performance#caching-between-reruns ```
kayg commented 2026-09-27 09:56:55 +00:00
Author
Owner
Copy link

Forgejo #186 final report

Head: 67de33ac0eecf4c70e56abbaa942ea685329ba2b (job/break-editor). I merged dev through 65265f87 before the final gates. dev advanced to fbecfbc6 while those gates ran; this tested head is the fixed snapshot from the start of the final gate run.

Built

  • Preserved edits that race with collaborative block deletion and skipped saves for empty sync updates.
  • Regenerated duplicate block anchors and added copy-link deep-link coverage for blocks and headings.
  • Added seeded editor browser and direct-server probes for deep nesting, 10,000 blocks, 1 MiB paragraphs, hostile paste, Unicode, undo/redo storms, concurrent edits, offline/restart flows, external writes, and copied links.
  • Made the room restart probe connect directly to the backend so a proxy-side 101 cannot hide an upstream authorization rejection.
  • Extended the archive timeout handling and Photos share visibility window for shared-host adversarial runs.

Files

  • apps/web/src/lib/notes/anchors.test.ts
  • apps/web/src/lib/notes/anchors.ts
  • apps/web/src/lib/notes/editor-types/anchor.d.ts
  • crates/calternal-collab/src/lib.rs
  • crates/calternal-collab/src/session.rs
  • crates/calternal-collab/tests/shared_notes.mjs
  • tests/adversarial/attack2.py
  • tests/adversarial/authz_matrix.py
  • tests/adversarial/bun.lock
  • tests/adversarial/editor-proxy.mjs
  • tests/adversarial/editor.mjs
  • tests/adversarial/package.json
  • tests/adversarial/restart.mjs
  • tests/adversarial/run.sh

Adversarial findings and gaps

  • The isolated browser and room restart probes passed. The focused Photos share check produced no finding. The ZIP stream exceeded its 30-second cap and was classified SLOW; the server remained alive.
  • The broad API phase recorded 17 saved-search request timeouts and only 23 of 40 expected distinct searches; the server remained alive. Several other adversarial jobs were active on the shared host. I recorded this non-SLOW, cross-API observation on this issue. Saved-search behavior is outside this editor change.
  • The live Note UI still has no Make a note action, block reminder action, or multi-select. The browser run did not claim coverage of those absent controls.

Decisions where the design is silent

  • The restart probe uses direct backend WebSockets and retains the proxy URL as the HTTP Origin. The proxy can send a client-side 101 before upstream authorization.
  • I set the Photos share visibility wait to 60 seconds for asynchronous indexing on this shared host. ZIP stream completion after 30 seconds is reported as SLOW.
  • bun run build was required before the Rust gates because calternal-server embeds apps/web/build. The production build exited 0 and emitted existing bundler notices for vendor use client directives.

Gates

cargo fmt --check exited 0 with empty output.

cargo clippy --all-targets -- -D warnings output:

   Compiling calternal-server v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/calternal-server)
    Checking calternal-collab v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/calternal-collab)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 21.21s

cargo test exited 0. Per-harness result lines copied verbatim:

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 49 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 43.46s
test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s
test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.87s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.68s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.17s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 97.97s
test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.91s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.09s
test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.20s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.36s
test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.98s
test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 27.54s
test result: ok. 15 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s
test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 46.04s
test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s
test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.33s
test result: ok. 9 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 1.09s
test result: ok. 17 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.48s
test result: ok. 33 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 12.56s
test result: ok. 35 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.20s
test result: ok. 477 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.56s
test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.94s
test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.94s
test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s
test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 19 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.48s
test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s
test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.03s
test result: ok. 42 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.34s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.04s
test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.50s
test result: ok. 101 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 63.66s
test result: ok. 90 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 152.30s
test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.27s
test result: ok. 38 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 4.67s
test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s
test result: ok. 24 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 2.00s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.48s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s
test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 9.61s
test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s
test result: ok. 1 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 7.76s
test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s
test result: ok. 41 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 9.28s
test result: ok. 45 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.22s
test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.66s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

bun run check output:

$ svelte-kit sync && svelte-check --tsconfig ./tsconfig.json
Loading svelte-check in workspace: /home/kayg/Developer/calternal-wt/break-editor/apps/web
Getting Svelte diagnostics...

svelte-check found 0 errors and 0 warnings

bun run test output:

$ vitest run

 RUN  v5.0.1 /home/kayg/Developer/calternal-wt/break-editor/apps/web

Could not parse CSS stylesheet
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method
Not implemented: Window's scrollTo() method

 Test Files  72 passed (72)
      Tests  547 passed (547)
   Start at  11:52:29
   Duration  98.71s (transform 72%, environment 11%, import 8%, tests 6%, setup 2%)

  Transform  |component| transforming modules took 197.04s · 67% of tracked time, re-done on every run
             persist transforms across runs with fsModuleCache: true
             learn more: https://vitest.dev/guide/improving-performance#caching-between-reruns
# Forgejo #186 final report Head: `67de33ac0eecf4c70e56abbaa942ea685329ba2b` (`job/break-editor`). I merged `dev` through `65265f87` before the final gates. `dev` advanced to `fbecfbc6` while those gates ran; this tested head is the fixed snapshot from the start of the final gate run. ## Built - Preserved edits that race with collaborative block deletion and skipped saves for empty sync updates. - Regenerated duplicate block anchors and added copy-link deep-link coverage for blocks and headings. - Added seeded editor browser and direct-server probes for deep nesting, 10,000 blocks, 1 MiB paragraphs, hostile paste, Unicode, undo/redo storms, concurrent edits, offline/restart flows, external writes, and copied links. - Made the room restart probe connect directly to the backend so a proxy-side 101 cannot hide an upstream authorization rejection. - Extended the archive timeout handling and Photos share visibility window for shared-host adversarial runs. ## Files - `apps/web/src/lib/notes/anchors.test.ts` - `apps/web/src/lib/notes/anchors.ts` - `apps/web/src/lib/notes/editor-types/anchor.d.ts` - `crates/calternal-collab/src/lib.rs` - `crates/calternal-collab/src/session.rs` - `crates/calternal-collab/tests/shared_notes.mjs` - `tests/adversarial/attack2.py` - `tests/adversarial/authz_matrix.py` - `tests/adversarial/bun.lock` - `tests/adversarial/editor-proxy.mjs` - `tests/adversarial/editor.mjs` - `tests/adversarial/package.json` - `tests/adversarial/restart.mjs` - `tests/adversarial/run.sh` ## Adversarial findings and gaps - The isolated browser and room restart probes passed. The focused Photos share check produced no finding. The ZIP stream exceeded its 30-second cap and was classified `SLOW`; the server remained alive. - The broad API phase recorded 17 saved-search request timeouts and only 23 of 40 expected distinct searches; the server remained alive. Several other adversarial jobs were active on the shared host. I recorded this non-`SLOW`, cross-API observation on this issue. Saved-search behavior is outside this editor change. - The live Note UI still has no Make a note action, block reminder action, or multi-select. The browser run did not claim coverage of those absent controls. ## Decisions where the design is silent - The restart probe uses direct backend WebSockets and retains the proxy URL as the HTTP Origin. The proxy can send a client-side 101 before upstream authorization. - I set the Photos share visibility wait to 60 seconds for asynchronous indexing on this shared host. ZIP stream completion after 30 seconds is reported as `SLOW`. - `bun run build` was required before the Rust gates because `calternal-server` embeds `apps/web/build`. The production build exited 0 and emitted existing bundler notices for vendor `use client` directives. ## Gates `cargo fmt --check` exited 0 with empty output. `cargo clippy --all-targets -- -D warnings` output: ```text Compiling calternal-server v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/calternal-server) Checking calternal-collab v0.0.1 (/home/kayg/Developer/calternal-wt/break-editor/crates/calternal-collab) Finished `dev` profile [unoptimized + debuginfo] target(s) in 21.21s ``` `cargo test` exited 0. Per-harness result lines copied verbatim: ```text test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 49 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 43.46s test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.87s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.68s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.17s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 97.97s test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.91s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.09s test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.20s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.36s test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.98s test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 27.54s test result: ok. 15 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 46.04s test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.33s test result: ok. 9 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 1.09s test result: ok. 17 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.48s test result: ok. 33 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 12.56s test result: ok. 35 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.20s test result: ok. 477 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.56s test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.94s test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.94s test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 19 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.48s test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.03s test result: ok. 42 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.34s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.04s test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.50s test result: ok. 101 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 63.66s test result: ok. 90 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 152.30s test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.27s test result: ok. 38 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 4.67s test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s test result: ok. 24 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 2.00s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.48s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 9.61s test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s test result: ok. 1 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 7.76s test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s test result: ok. 41 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 9.28s test result: ok. 45 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.22s test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.66s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ``` `bun run check` output: ```text $ svelte-kit sync && svelte-check --tsconfig ./tsconfig.json Loading svelte-check in workspace: /home/kayg/Developer/calternal-wt/break-editor/apps/web Getting Svelte diagnostics... svelte-check found 0 errors and 0 warnings ``` `bun run test` output: ```text $ vitest run RUN v5.0.1 /home/kayg/Developer/calternal-wt/break-editor/apps/web Could not parse CSS stylesheet Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Not implemented: Window's scrollTo() method Test Files 72 passed (72) Tests 547 passed (547) Start at 11:52:29 Duration 98.71s (transform 72%, environment 11%, import 8%, tests 6%, setup 2%) Transform |component| transforming modules took 197.04s · 67% of tracked time, re-done on every run persist transforms across runs with fsModuleCache: true learn more: https://vitest.dev/guide/improving-performance#caching-between-reruns ```
kayg commented 2026-09-27 09:59:24 +00:00
Author
Owner
Copy link

Merged into dev at dfa8e85f (concurrent edit preserved during block deletion, no saves for empty sync updates, no duplicate anchors; seeded editor and restart probes). Deploy status on #203.

Merged into dev at dfa8e85f (concurrent edit preserved during block deletion, no saves for empty sync updates, no duplicate anchors; seeded editor and restart probes). Deploy status on #203.
kayg referenced this issue from a commit 2026-09-27 09:59:24 +00:00
Merge job/break-editor (#186)
kayg closed this issue 2026-09-27 09:59:25 +00:00
kayg commented 2026-09-27 10:34:16 +00:00
Author
Owner
Copy link

Adversarial regression from the post-merge editor run: I filed #225. On seed 25608414, Copy link initially repaired the duplicate anchor, but after hostile paste/IME and 500 undo plus 500 redo steps the saved Note contained dozens of repeated ^duplicate-id anchors and was missing expected repaired anchors. The browser probe timed out after 30 s waiting for persistence. The same run's concurrent, offline, delete/edit and external-write probes passed. Full evidence is in target/tmp/menu-icons-adversarial-latest.log in the menu-icons worktree.

Adversarial regression from the post-merge editor run: I filed #225. On seed `25608414`, Copy link initially repaired the duplicate anchor, but after hostile paste/IME and 500 undo plus 500 redo steps the saved Note contained dozens of repeated `^duplicate-id` anchors and was missing expected repaired anchors. The browser probe timed out after 30 s waiting for persistence. The same run's concurrent, offline, delete/edit and external-write probes passed. Full evidence is in `target/tmp/menu-icons-adversarial-latest.log` in the menu-icons worktree.
kayg commented 2026-09-27 10:36:01 +00:00
Author
Owner
Copy link

The same post-merge run also exposed a harness gap: issue #226 records that the live-editor restart probe's synchronous runner waits only 60 seconds for restart-ready-3, while the browser reaches that case after earlier editor attacks. In this run the ready marker appeared after the runner had returned, restart-go-3 was absent, and the browser reported a restart finding even though it did not request a restart. No product restart failure was established.

The same post-merge run also exposed a harness gap: issue #226 records that the live-editor restart probe's synchronous runner waits only 60 seconds for `restart-ready-3`, while the browser reaches that case after earlier editor attacks. In this run the ready marker appeared after the runner had returned, `restart-go-3` was absent, and the browser reported a restart finding even though it did not request a restart. No product restart failure was established.
kayg commented 2026-09-27 15:29:20 +00:00
Author
Owner
Copy link

Post-merge replay on job/fonts at ffcc5d2a117ebafd4d32df9968230b3803f25a32, seed 25608414: the 10,000 top-level block case reached 10,002 room nodes, preserved all 130,027 Markdown bytes, and passed in 5.7 s. The timeout from the earlier run did not reproduce under the later host load.

Post-merge replay on `job/fonts` at `ffcc5d2a117ebafd4d32df9968230b3803f25a32`, seed `25608414`: the 10,000 top-level block case reached 10,002 room nodes, preserved all 130,027 Markdown bytes, and passed in 5.7 s. The timeout from the earlier run did not reproduce under the later host load.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
dev
wip/editreg-1132
wip/editorrail3-1113
wip/editorrail2-1113
wip/editorrail-1113
wip/e2e-b2-1071
wip/e2e-b-1071
wip/draw4-1101
wip/draw3-1101
wip/draw2-1101
wip/draw-1101
wip/directory-1199-r
wip/directory-1199
wip/delete-1119
wip/collabrev-1197
wip/collabloss-1197
wip/cards2-1083
wip/cards-1083
wip/canvas-visual
wip/canvasvis2-976
wip/calhdr-1112
wip/calcards-1115
wip/browserfix
wip/blocks-1125
wip/allday-1107
wip/agenda-decks
wip/agenda-1086
wip/adv7c-1105
wip/txentry-1198
wip/trayicons2-1095
wip/trayicons-1095
wip/tagperf-1186
wip/sidebar3-1094
wip/rev2-webperf
wip/rev2-money-ident
job/adv-1202
wip/restyle-notes
wip/previewcard-1098
wip/palette2-1123
wip/palette-1093
wip/onboard2-1141
wip/onboard-1141.aborted-early
wip/onboard-1141
wip/nlpchip-1127
wip/morph-1104
wip/merge-round-7c5
wip/merge-round-7c4
job/notifloop-1194
wip/merge-round-7c3
wip/merge-round-7c2
wip/merge-round-7c
wip/mchrome-1084
wip/mailghost2-1094
wip/mailghost-1094
wip/kbpreview2-1118
wip/kbpreview-1118
wip/kanban-1092
wip/importhang-1121
wip/hiderev-1153
wip/hide4-1153
wip/hide3-1153
wip/hide2-1153
wip/hide-1153
job/collabloss-1197
job/onboard-1141
job/hide-1153
job/perf-1124
job/perf2-1124
job/tocrail-1191
job/restyle-settings
wip/restyle-settings
job/segmented-1200
wip/notifloop-1194
job/tagperf-1186
wip/segmented-1200
job/restyle-files
job/tagdnd-1187
job/merge30
job/cards-1179
wip/cards2-1179
wip/cards-1179
wip/tocrail-1191
wip/tagdnd-1187
wip/restyle-files
wip/perf-1124
wip/merge30j
job/restyle-notes
job/wizchoices-1140
wip/wizchoices-1140
wip/restyle-1190
job/moneyfmt-1180
job/txentry-1198
wip/moneyfmt2-1180
wip/moneyfmt-1180-r
wip/moneyfmt-1180
job/pillglass-1189
job/flags-1181
wip/flags-1181
job/restyle-1190
job/restyle-mailmoney
job/restyle-search
job/settingsreg-1195
job/wizard-1140
site/website
wip/wizardrev2-1140
wip/wizardrev-1140
wip/wizard5-1140
wip/wizard4-1140
wip/wizard3-1140
wip/wizard2-1140
wip/wizard-1140
wip/pillglass-1189
wip/settingsreg-1195
job/merge29
job/fu-1171
wip/merge29j
wip/fu-1171
job/fu-1166
job/directory-1199
job/proflog-1204
job/txresearch-1188
wip/fu-1166
job/merge28
job/search-1066
wip/search-1066
wip/merge28j
job/gateslot-1182
job/bulkimport-1157
job/mailnet-1160
wip/mailnetrev-1160
wip/mailnet-1160
wip/bulkrev-1157
wip/bulkimport-1157
job/startup-1161
wip/startup-1161
job/merge27
job/linkcards-1151
wip/linkcards3-1151
wip/linkcards2-1151
wip/linkcards-1151
job/traydate-1144
wip/traydate3-1144
wip/traydate2-1144
wip/traydate-1144
job/draw-1101
wip/merge27j
job/blockpill-1152
wip/blockpill3-1152
wip/blockpill2-1152
wip/blockpill-1152
job/minihover-1149
wip/minihover2-1149
wip/minihover-1149
job/merge25
wip/merge25-r
wip/merge25b
wip/merge25
job/inspector-1129
job/tags-1110
wip/inspector3-1129
wip/inspector2-1129
wip/inspector-1129
wip/tagsrev-1110
wip/tags2-1110
wip/tags-1110
job/dates-1148
wip/datesrev-1148
wip/dates2-1148
wip/dates-1148
job/licence-1145
wip/licence2-1145
wip/licence-1145
job/selfhost-1156
job/merge23
wip/merge23
job/tagfilter-1109
wip/tagfilter2-1109
wip/tagfilter-1109
job/kbd-1134
wip/kbd2-1134
wip/kbd-1134
job/palfoot-1137
wip/selfhost-1156
wip/palfoot2-1137
wip/palfoot-1137
job/toggle-1158
wip/toggle-1158
job/kbpreview-1118
job/docratchet-1155
job/perflint-1133
job/devtests-1159
wip/docratchet-1155
wip/devtests-1159
job/segv-1136
wip/toast-1142
wip/segv-1136
job/toast-1142
job/blockreload-1147
wip/blockreload-1147
job/font-1150
wip/font-1150
job/importui-1120
job/minimonth-1149
wip/importui-1120
wip/minimonth-1149
job/depcheck-1146
wip/perflint-1133
wip/depcheck-1146
job/calcards-1115
job/blocks-1125
job/plus-1128
job/shift-1138
wip/plus2-1128
wip/plus-1128
wip/shift-1138
job/moneyfid-1130
job/editorrail-1113
wip/moneyrev-1130
wip/moneyfid-1130
job/noext-851
wip/noext-851
wip/noext3-851
wip/noext2-851
job/week-1135
wip/week-1135
job/editreg-1132
job/smoke-1122
wip/smoke-1122
job/docs-1143
job/palette2-1123
job/calhdr-1112
job/nlpchip-1127
job/mailghost-1094
job/reconnect-1131
wip/reconnect-1131
job/trayicons-1095
job/delete-1119
job/importhang-1121
job/cards-1083
job/palette-1093
job/mchrome-1084
job/e2e-a-1071
job/canvas-visual
job/previewcard-1098
job/allday-1107
wip/e2e-a2-1071
wip/e2e-a-1071
job/e2e-b-1071
job/adv7c-1105
job/kanban-1092
job/agenda-1086
job/merge-round-7c
job/morph-1104
wip/surfaces-p2
job/merge-round-9
wip/merge-round-9
job/7cfix-small
wip/7cfix-small
job/mailui-1078
job/merge-round-8
wip/merge-round-8
wip/mailui-1078
job/mailround-1038
job/applemail-accept
wip/settitle-1068
wip/mailround2-1038
wip/mailround-1038
wip/e2e-7b
job/crash-1069
wip/crash-1069
job/searchlost-1066
wip/searchlost-1066
job/7b-reconcile
job/flake-1065
wip/flake-1065
wip/merge-round-7b7
wip/merge-round-7b6
wip/merge-round-7b5
wip/merge-round-7b4
wip/7b-reconcile
job/appupdate-1059
job/nfd-1044
wip/appupdate-1059
job/e2e-7b
job/loop-1062
wip/loop-1062
job/pdfprev-1045
job/invtoggle-1053
wip/pdfprev-1045
wip/nfd-1044
wip/invtoggle-1053
job/7bfix-e2e
job/mailstress-b
wip/7bfix-e2e
wip/mailstress-b
job/7bfix-adv
wip/7bfix-adv
job/mailstress-a
job/stack-1054
wip/stack-1054
wip/mailstress-a
job/mailstress-1038
wip/mailstress-1038
job/upload500-1051
wip/upload500-1051
job/share-1034
wip/share-1034
job/syncerr-1037
job/7bfix-photos
wip/7bfix-photos
job/paste-1036
job/setside-1039
wip/setside-1039
wip/paste-1036
job/lease-1042
wip/syncerr-1037
wip/lease-1042
job/7bfix-data
job/passkeybind-1043
wip/apprevoke-1041
job/invite-1035
wip/invite-1035
job/merge-round-7b2
wip/merge-round-7b2
job/mailproxy-486
job/apprevoke-1041
job/rebuild-1033
job/pillborder-1029
wip/pillborder-1029
wip/mailproxy-486
wip/applemail-486
job/headless-998
wip/headless-998
job/groups-1028
wip/groups-1028
job/rebuildwarn-1016
wip/rebuildwarn-1016
job/startup-1011
wip/startup-1011
job/monthpill-1009
job/bgthumb-1025
job/sharetitle-1012
wip/monthpill-1009
wip/bgthumb-1025
wip/sharetitle-1012
job/canvas-cards-977
wip/canvas-cards-977
job/canvas-pencil-978
job/canvas-sketch-990
wip/canvas-sketch-990
wip/canvas-pencil-978
job/canvas-files-989
wip/canvas-files-989
job/canvas-collab-991
wip/canvas-collab-991
job/weekscroll-1018
wip/weekscroll-1018
wip/canvas-core-976
job/canvas-core-976
job/round-drag
wip/round-drag
job/round-settings
job/browserfix
wip/oapi-974
job/oapi-974
job/hist2-integrate
job/mailhtml-726
wip/mailhtml-726
wip/hist2-integrate
job/moneyfu-984
job/drag-1015
wip/drag-1015
job/rename-1017
wip/rename-1017
job/hist2-api
wip/hist2-api
job/oneacct-1014
wip/oneacct-1014
wip/moneyfu-984
job/hist2-bench
job/hist2-restore
wip/hist2-bench
job/hist2-write
job/hotfix-724
wip/hotfix-724
wip/hist2-write
wip/hist2-restore
job/hist2-store
job/hist2-ui
wip/hist2-ui
wip/hist2-store
job/searchstarve-965
job/shutdown-963
wip/shutdown-963
wip/pubedit-981
job/pubedit-981
job/analytics-973
wip/searchstarve-965
job/authflash-850
job/weeklane-969
job/pvtitle-1004
job/hist-975
wip/authflash-850
job/voicepill-617
wip/pvtitle-1004
job/headring-1003
wip/weeklane-969
wip/voicepill-617
wip/headring-1003
wip/analytics-973
job/agentscope-980
wip/thumbsandbox-988
job/thumbsandbox-988
wip/hist-975
job/links-856
wip/links-856
job/davetag-966
wip/davetag-966
job/filesstorm-1000
job/hoverpad-725
wip/filesstorm-1000
job/ffmpegblas-993
job/merge-round-7a
wip/hoverpad-725
wip/ffmpegblas-993
job/nowdot-1002
wip/verify-7a
job/noteid-857
wip/nowdot-1002
wip/noteid-857
wip/merge-round-7a
wip/agentscope-980
job/imapedge
job/a11yfix2
wip/imapedge-941
wip/imapedge
wip/a11yfix2
job/notetask-986
job/logheading
wip/logheading-998
job/textthumb-652
job/photolive-987
wip/photolive-987
job/davactive-983
job/savefix-985
job/tabicons-607
wip/davactive-983
wip/tabicons-607
wip/notetask-986
wip/savefix-985
job/dirid-627
job/buildspeed-1007
wip/dirid-627
job/agenda-decks
job/perfguards-impl
job/undo-a11y
wip/undo-a11y
job/mailperf
job/wal-824
wip/settings-50
job/settings-50
job/notesfilter-606
wip/notesfilter-606
job/surfaces-p2
wip/wal-824
job/maillayouts
wip/mailperf
wip/maillayouts
job/taskmeta-659
job/money-ident
wip/money-ident
wip/taskmeta-659
job/errstates
wip/perfguards-impl
job/headings-881
wip/headings-881
wip/errstates
job/voice-619
job/gaps-827
job/notesperf
wip/notesperf
wip/voice-619
job/hddsql-549
job/perf-stream-668
wip/perf-stream-668
wip/deeplinks-fix
job/deeplinks-fix
job/authfix
job/docsfix-rust
wip/docsfix-rust
job/webperf
job/docsfix-web
job/datafix2
job/webdav-lock-476
job/copyfix
wip/copyfix
wip/webperf
job/focus-658
wip/protofix
job/mediafix
job/protofix
wip/mediafix
job/agentfix
job/hhmm-724
wip/agentfix
job/undo-722
job/reuse
wip/webdav-lock-476
wip/reuse
job/scopefix
job/datafix
wip/hhmm-724
wip/undo-722
job/surfaces-p1
wip/hddsql-549
job/voicememos-618
wip/datafix2
wip/surfaces-p1
job/fix-940
wip/fix-940
job/blaze-surfaces
wip/datafix
wip/blaze-surfaces
job/taskday-655
job/linknav-639
wip/linknav-639
wip/gaps-827
job/isolation-707
job/audiophotos-720
wip/audiophotos-720
job/advfind-664
wip/voicememos-618
wip/taskday-655
wip/isolation-707
wip/advfind-664
wip/scopefix
wip/focus-658
job/testgaps
wip/testgaps
job/overscroll-718
wip/authfix
job/deps
wip/overscroll-718
job/rev2-agentfix
job/rev2-money-ident
job/rev2-mailperf
wip/deps
job/hardening-728
wip/hardening-728
job/searchgen-832
wip/searchgen-832
job/photopw-849
job/mailsql-825
wip/photopw-849
job/sharefix
wip/sharefix
job/rev2-mailhtml-726
job/rev2-perfguards
job/copyval-723
job/lightglass-r2
wip/lightglass-r2
wip/docsfix-web
job/copy-audit
job/macinterop-staging-r2
job/design-sync
job/rev2-taskmeta-659
job/rev2-webperf
job/docs-audit
job/rev2-advfind-664
job/rev2-mailproxy-486
job/states-audit
job/rev2-datafix
job/design-drift
job/test-gaps
job/rev2-voicememos-618
job/rev2-mediafix
job/rev2-deps
job/rev2-datafix2
job/licence-audit
job/issue-hygiene
job/rev2-protofix
job/rev2-voice-619
job/rev2-isolation-707
job/rev2-surfaces-p1
job/deeplink-audit2
job/rev2-audiophotos-720
wip/test-gaps
job/rev2-overscroll-718
job/rev2-undo-722
wip/states-audit
job/rev2-dropmd-719
job/rev2-linknav-639
job/merge-7b-plan
wip/merge-7b-plan
job/rev2-taskday-655
wip/mailsql-825
job/rev2-webdav-lock-476
job/rev2-browserfix
wip/design-drift
job/rev2-hddsql-549
wip/deeplink-audit2
job/rev2-scopefix
job/rev2-authfix
job/rev2-hardening-728
job/rev2-wal-824
job/rev2-sharefix
job/calsidebar-638
job/chrome-audit
job/ioperf
wip/ioperf
wip/chrome-audit
wip/calsidebar-638
job/dropmd-719
wip/dropmd-719
job/ocr-build
wip/ocr-build
job/blaze-settings
wip/copyval-723
job/toastring-721
wip/toastring-721
job/deployfix-732
wip/deployfix-732
wip/blaze-settings
job/money-import-recheck
job/rev-a11y
job/perf-arch-db
job/rev-7b-data
wip/textthumb-652
wip/perf-arch-db
job/sec-protocols
job/sidehdr-660
job/rev-7b-security
job/research-surfaces
job/rev-design-gaps
job/rev-mcp-api
wip/sidehdr-660
job/perf-arch-memory
wip/sec-protocols
job/perf-arch-bundle
job/snapedge-714
wip/rev-mcp-api
job/sec-supplychain
wip/research-surfaces
job/perf-arch-sync
job/rev-consistency
job/perf-arch-server
wip/perf-arch-server
wip/perf-arch-memory
job/perf-arch-io
job/perf-arch-client
job/sec-fs
job/sec-mcp-scopes
job/sec-sharing
job/perf-guards
job/sec-browser
job/sec-admin-deploy
job/sec-auth
wip/snapedge-714
job/bgpicker-717
wip/perf-arch-bundle
wip/money-import-recheck
job/advsetup-654
wip/bgpicker-717
wip/advsetup-654
job/burst-709
job/kbdcaps-710
job/app-pw-chooser
wip/burst-709
wip/app-pw-chooser
job/imaptest-625
wip/kbdcaps-710
job/fix-499
wip/fix-499
job/perf-mut-667
job/calimg-589
job/perf-snap-666
wip/calimg-589
wip/perf-snap-666
wip/perf-mut-667
job/perf-cache-665
wip/perf-cache-665
job/voicefiles-620
wip/voicefiles-620
job/admin-burst-705
wip/admin-burst-705
job/voicememos-review
wip/voicememos-review
wip/ryw-653
job/ryw-653
job/writeonopen-661
job/instant-663
wip/writeonopen-661
job/money-import-review
wip/money-import-review
wip/importjs-610
review/integrations-407-round6
wip/integrations-review
job/dragghost-612
wip/dragghost-612
job/integrations
wip/integrations
job/decider-656
job/merge-round-6
job/perf-rerun
wip/merge-round-6
job/integrations-review-round5
job/selalign-576
wip/selalign-576
job/mcp-events-491
job/files-631
job/cal-e2e-569
wip/cal-e2e-569
job/reload-423
wip/reload-423
wip/mcp-events-491
wip/files-631
job/notesbridge-644
wip/notesbridge-644
job/editor-series
job/calcard-series
wip/calcard-series
job/mcp-events-review-491
wip/mcp-events-review
wip/editor-series
job/quirks-546
job/integrations-recheck
job/tocrail-636
wip/tocrail-636
wip/quirks-546
wip/reminders-643
job/reminders-643
wip/davscale-573
job/davscale-573
job/integrations-review
wip/ocr-eval-584
job/ocr-eval-584
job/esc-537
wip/esc-537
job/toastname-586
wip/toastname-586
job/submenu-579
wip/submenu-579
job/tasks-mode
wip/tasks-mode
job/agentdocs-630
job/dupwrite-634
wip/agentdocs-630
wip/dupwrite-634
job/lightglass-588
wip/lightglass-588
job/tabswitch-549
job/ghosttask-623
wip/ghosttask-623
job/toaststack-616
job/weekstate-609
job/mailsync-613
wip/mailsync-613
wip/weekstate-609
job/maildup-626
wip/tabswitch-549
wip/maildup-626
wip/toaststack-616
job/motion-611
wip/motion-611
job/tlstest-601
wip/tlstest-601
job/perf-495
job/floating-sheet
wip/floating-sheet
job/remdup-585
wip/remdup-585
job/fix-502
wip/fix-502
job/attachplay-622
job/perf-batch
wip/perf-batch-563
wip/perf-495
hotfix/mail-sync-diag
job/mail-m3
wip/mail-m3
job/attach-poof-603
job/calhover-608
job/editorbar-604
job/mentions-605
job/merge-round-4
job/allday-514
wip/merge-round-4
wip/allday-514
job/merge-round-4a
wip/merge-round-4a
job/sharestack-580
job/fix-501
wip/sharestack-580
wip/fix-501
job/perf-batch-563
job/apw-cache-review
wip/apw-cache-review
job/probe-520
wip/probe-520
job/mac-393
wip/mac-393
job/header-571
job/flake-513
wip/flake-513
job/docs-thumb-547
wip/header-571
job/webcal-572
wip/webcal-572
wip/shortcuts-542
job/shortcuts-542
wip/docs-thumb-547
job/caldav-stress
wip/caldav-stress
wip/sweep-478
job/apw-cache-512
wip/apw-cache-512
job/money-empty-540
wip/restart-505
wip/money-empty-540
wip/fix-510
job/restart-505
job/fix-503
job/perf-496
wip/perf-496
job/fix-498
wip/fix-498
job/info-inspector-465
wip/info-inspector-465
job/fix-510
job/fix-507
wip/fix-507
wip/fix-503
job/fix-493
job/money-kinds
wip/money-kinds
job/hygiene-548
job/merge-round-3
wip/fix-493
job/drag-snap-536
wip/merge-round-3
wip/merge-round-0930
wip/drag-snap-536
job/align-538
wip/align-538
job/bg-flash
wip/bg-flash
job/money-import
job/search-count-544
wip/search-count-544
wip/money-import
job/settings-key-541
wip/settings-key-541
job/toast-539
job/preview-421
wip/preview-421
wip/toast-539
job/tasks-500-531
job/title-plain-526
wip/title-plain-526
wip/tasks-500-531
job/notes-bridge
wip/parity-484
job/parity-484
job/files-slow
job/crash-525
wip/notes-bridge
wip/files-slow
wip/crash-525
job/kbd-motion-527
wip/bg-422
job/analytics-504
wip/analytics-504
wip/kbd-motion-527
job/upload-pill-523
wip/upload-pill-523
wip/tray-order
job/tray-order
wip/overflow-mid
wip/merge-round-2
job/perf-494
wip/perf-494
wip/mcp-fast-492
wip/motion-477
wip/asr-ab-489
wip/theme-variants-506
wip/overflow-511
wip/week-header-508
wip/attach-427
job/dav-delete-471
job/iso-435
wip/iso-435
wip/files-sel-keys
wip/dav-delete-471
job/align-253
job/siwc-490
wip/siwc-490
job/money-kinds-review
wip/align-253
wip/money-kinds-review
job/small-bugs-3
wip/overlay-title-487
wip/multiget-500
wip/hidden-420
wip/webcal-ui
wip/webcal-431
job/perf-367
job/location
wip/small-bugs-3
wip/location
wip/perf-367
wip/admin-deny-483
job/tag-unicode-473
wip/tag-unicode-473
job/blur-436
wip/photos-470
wip/blur-436
wip/small-bugs-4
wip/hunt-20260930
wip/settings-hdr-482
wip/chips-416
job/dedup-375
wip/dedup-375
job/doc-stack
wip/doc-stack
job/tokens-literals
wip/tokens-literals
job/jobs-leftovers
wip/send-fast
wip/paste-467
wip/money-numbers
job/money-plugin
wip/money-plugin
job/break-dav
wip/merge-batch
wip/crossday-469
wip/mac-verify
wip/mail-m2
wip/break-dav
wip/money-review2
job/money-md
job/modes-424
wip/money-md
wip/jobs-leftovers
job/agenda-413
wip/agenda-413
wip/modes-424
job/recog-417
wip/recog-417
wip/bounce-425
wip/ab-384-luna
job/webdav-perf
wip/webdav-perf
job/toast-ring
wip/toast-ring
job/money-review
wip/money-review
wip/micro-motion
wip/settings-card
wip/minical
job/notes-imap-428
job/least-priv
wip/ui-small-2
wip/flaky-426
wip/drag-end-418
job/jank
wip/jank
wip/least-priv
wip/docs-site
job/agenda
job/sec-batch
wip/sec-batch
wip/per-user-index
job/area-calendars
wip/area-calendars
job/parity
wip/parity
job/documents-research
wip/documents-research
job/test-infra
job/reminders-sync
wip/small-bugs-2
wip/reminders-sync
wip/gestures
job/google-oauth
wip/tags-merge
wip/tags
job/e2e-theme
wip/e2e-theme
job/icon-align
wip/test-infra
wip/select-align
wip/editor-385
job/voice
wip/webdav
job/webdav
job/app-pw-ui
job/editor-integrity
wip/editor-integrity
wip/voice
wip/quota
wip/cal-followups
wip/icon-align
job/composer-scale
wip/composer-scale
job/jobs-page
wip/jobs-page
job/hig-type
wip/hig-type
wip/app-pw-ui
job/motion-spring
job/mcp
wip/motion-spring
wip/mcp
job/small-bugs
wip/push-hosts
job/profile-sign
wip/touch-369
wip/profile-sign
job/mobile-focus
wip/mobile-focus
wip/ui-polish-354
wip/small-bugs
wip/dup-task
job/toast-polish
job/app-pw-scopes
wip/toast-polish
wip/app-pw-scopes
wip/cli-agent
wip/selection-pills
job/preview-attach
wip/preview-attach
job/dav-proppatch
wip/dav-proppatch
wip/cal-switcher
job/atomic-race
wip/atomic-race
job/photos-shared
wip/photos-shared
wip/cal-grid
wip/note-rewrite
wip/search-rebuild
job/mail-m1
job/paperless-import
wip/paperless-import
wip/mail-m1
wip/hidden-activity
wip/search-d
wip/pricing-research
wip/cursors
wip/auto-scheme
job/single-pills
wip/single-pills
wip/xuser-matrix
wip/money-format
wip/app-pw-setup
wip/purge-dos
wip/vault-health
wip/caldav-apple
wip/xuser-audit
wip/e2e-green
wip/tabbar
wip/adv-harness
wip/maple-mono
job/search-fix
wip/search-fix
wip/search-perf-c
job/adv-harness
wip/sidebar-headers
job/glass
wip/temp-index
job/polish
wip/polish
wip/file-protocols
wip/money-research
wip/glass
wip/voice-models
wip/collab-redo
job/voice-research
wip/hunt-20260928
wip/notes-actions-research
wip/search-pad
wip/search-perf
wip/search-sticky
wip/editor-undo
wip/chrome-rules
wip/motion
wip/appearance-research
wip/appearance
wip/audit-bugs
wip/cal-glass
wip/block-actions
wip/authz-order
wip/event-stripes
wip/chrome-sidebar
wip/auth-flaky
wip/robust-2
wip/gate-fix
wip/menu-blur
wip/import-calternaljs
wip/tray-fix
job/import-calternaljs
wip/index-order
wip/audit-fixes
wip/search-chevrons
research/mail
wip/phone-chrome
wip/dedup-break
wip/csp
wip/ui-audit
wip/select-toast
wip/perf
wip/flat-layout
wip/fonts
wip/event-tint
wip/sync-converge
wip/data-split
wip/glass-audit
wip/robustness
wip/sync-chaos
wip/search-thumbs
wip/fuzz
wip/menu-icons
wip/search-pill
wip/sync-changing
wip/heading-links
wip/date-formats
wip/a11y
wip/break-editor
wip/e2e-fix
wip/settings-sections
wip/sync-root-guard
wip/search-palette
wip/share-edit
job/toasts
wip/toasts
wip/cont-analytics
wip/authz-review
wip/popovers
wip/overlay-glass
wip/change-feed
wip/editor-modes
wip/composer-align
wip/cont-agenda
wip/agenda-merge
job/agent-conventions
wip/agent-conventions
wip/backend-misc
job/route-audit
wip/route-audit
wip/ui-batch
wip/heif-hardening
wip/grid-resize
wip/ask-page
wip/webmcp
job/deeplink-audit
wip/deeplinks
wip/shortcuts
wip/cont-tz-days
main
No results found.
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
kayg/calternal#186
No description provided.