kayg/calternal
Watch
1
0
Fork
You've already forked calternal
 0
Code Issues 802 Pull requests Projects Releases Packages Wiki Activity Actions 462

CLI: exhaustive agent-grade test of the whole calternal CLI surface (machine output, exit codes, idempotency, failure modes) #350

New issue
Closed
opened 2026-09-28 15:11:38 +00:00 by kayg · 21 comments
kayg commented 2026-09-28 15:11:38 +00:00
Owner
Copy link

Owner (2026-09-28): 'please extensively test the CLI surface as it's something that will mostly be used by agents!' The CLI (crates/calternal-cli, binary calternal) exposes: login, logout, whoami, sync (add/remove/status/pause/resume/conflicts), ls, cat, put, get, mv, rm, trash, restore, versions, search, share, today, note (new/open/append), log. Agents (the per-user agent container, Codex/Claude, MCP later) will drive it non-interactively, so agent-grade means:
1. Contract for every command (write it into crates/calternal-cli/README.md and --help):

  • --json on EVERY command, with a documented, stable schema (version field), and no human text mixed into stdout when --json is set; diagnostics go to stderr only.
  • Documented exit codes (0 ok; distinct codes for usage error, not logged in, not found, conflict, permission/scope denied, quota exceeded, rate limited, network/transient, server error), identical across commands.
  • Non-interactive by default when stdin is not a TTY: never prompt; fail fast with a clear error. --yes for destructive confirmation where needed.
  • Idempotency: put of identical content = no-op success; mv/rm of an already-moved/removed path = defined result; retries safe; an --if-match <etag> / --if-none-match option for conditional writes.
  • Retries with backoff and jitter on transient errors (429/502/503/504, connection reset) for EVERY command, bounded, honouring Retry-After (fixes #348's login case generically); --timeout, --retries.
  • Paths: Unicode NFC/NFD, spaces, emoji, very long names, leading dashes (--), .. rejected client-side AND server-side; stdin/stdout streaming (put -, cat binary-safe, large files with bounded memory).
  • --server/env config (CALTERNAL_SERVER, token from env or keyring for headless agents; document the precedence); no secrets in logs or error messages.
    2. Test suite (crates/calternal-cli/tests/ against a real local server, not mocks): every command × happy path × each failure mode above; golden JSON schemas; a fault-injection proxy (drop, delay, 429/502/503, truncated body, TLS error) proving retries and exit codes; concurrency (two CLIs writing the same file → conflict, not corruption); sync edge cases (rename cycles, case-only renames on macOS/Linux, deletes during upload, 10k small files, a 2 GB file resumable across a kill -9); offline behaviour.
    3. Agent dogfood: script a realistic agent session (search → cat → edit → put with if-match → log → verify) and run it 100 times with random faults; zero corrupted files, zero unexplained exit codes.
    4. Cross-user (#331): the CLI can never touch another user's paths; scoped app passwords (#328) once merged.
    Report: a table of commands × (json, exit codes, retries, idempotent, tested), every bug fixed or filed. CLI bugs found by the paperless import (#342) go here too.
Owner (2026-09-28): 'please extensively test the CLI surface as it's something that will mostly be used by agents!' The CLI (`crates/calternal-cli`, binary `calternal`) exposes: login, logout, whoami, sync (add/remove/status/pause/resume/conflicts), ls, cat, put, get, mv, rm, trash, restore, versions, search, share, today, note (new/open/append), log. Agents (the per-user agent container, Codex/Claude, MCP later) will drive it non-interactively, so **agent-grade** means: **1. Contract for every command** (write it into `crates/calternal-cli/README.md` and `--help`): - `--json` on EVERY command, with a documented, stable schema (version field), and no human text mixed into stdout when --json is set; diagnostics go to stderr only. - **Documented exit codes** (0 ok; distinct codes for usage error, not logged in, not found, conflict, permission/scope denied, quota exceeded, rate limited, network/transient, server error), identical across commands. - **Non-interactive by default** when stdin is not a TTY: never prompt; fail fast with a clear error. `--yes` for destructive confirmation where needed. - **Idempotency:** `put` of identical content = no-op success; `mv`/`rm` of an already-moved/removed path = defined result; retries safe; an `--if-match <etag>` / `--if-none-match` option for conditional writes. - **Retries with backoff and jitter** on transient errors (429/502/503/504, connection reset) for EVERY command, bounded, honouring Retry-After (fixes #348's login case generically); `--timeout`, `--retries`. - Paths: Unicode NFC/NFD, spaces, emoji, very long names, leading dashes (`--`), `..` rejected client-side AND server-side; stdin/stdout streaming (`put -`, `cat` binary-safe, large files with bounded memory). - `--server`/env config (`CALTERNAL_SERVER`, token from env or keyring for headless agents; document the precedence); no secrets in logs or error messages. **2. Test suite** (`crates/calternal-cli/tests/` against a real local server, not mocks): every command × happy path × each failure mode above; golden JSON schemas; a **fault-injection proxy** (drop, delay, 429/502/503, truncated body, TLS error) proving retries and exit codes; concurrency (two CLIs writing the same file → conflict, not corruption); sync edge cases (rename cycles, case-only renames on macOS/Linux, deletes during upload, 10k small files, a 2 GB file resumable across a kill -9); offline behaviour. **3. Agent dogfood:** script a realistic agent session (search → cat → edit → put with if-match → log → verify) and run it 100 times with random faults; zero corrupted files, zero unexplained exit codes. **4. Cross-user** (#331): the CLI can never touch another user's paths; scoped app passwords (#328) once merged. Report: a table of commands × (json, exit codes, retries, idempotent, tested), every bug fixed or filed. CLI bugs found by the paperless import (#342) go here too.
kayg commented 2026-09-28 15:14:06 +00:00
Author
Owner
Copy link

Starting #350 on branch job/cli-agent, based on dev at eb4ff20a9862a627f6d0aea1ca617ca9a9491bce.

Initial evidence: the issue's #348 reproduction is confirmed by crates/calternal-cli/src/login.rs: device-token polling returns an error for any non-202 status. I am tracing command output, error mapping, shared HTTP paths, and existing local-server campaigns before adding failing tests.

Starting #350 on branch `job/cli-agent`, based on `dev` at `eb4ff20a9862a627f6d0aea1ca617ca9a9491bce`. Initial evidence: the issue's #348 reproduction is confirmed by `crates/calternal-cli/src/login.rs`: device-token polling returns an error for any non-202 status. I am tracing command output, error mapping, shared HTTP paths, and existing local-server campaigns before adding failing tests.
kayg commented 2026-09-28 15:14:28 +00:00
Author
Owner
Copy link

Owner correction (2026-09-28): human, pretty output is the default for every command; --json is an explicit flag on every command that switches to machine output. Do NOT auto-switch to JSON when stdout is not a TTY. (Plain text off-TTY is fine: no colours/escape codes when stdout is not a TTY, but the same human layout.) Everything else in the contract stays: stable JSON schemas behind --json, documented exit codes, diagnostics on stderr, non-interactive when stdin is not a TTY.

Owner correction (2026-09-28): **human, pretty output is the default for every command; `--json` is an explicit flag on every command** that switches to machine output. Do NOT auto-switch to JSON when stdout is not a TTY. (Plain text off-TTY is fine: no colours/escape codes when stdout is not a TTY, but the same human layout.) Everything else in the contract stays: stable JSON schemas behind --json, documented exit codes, diagnostics on stderr, non-interactive when stdin is not a TTY.
kayg commented 2026-09-28 15:18:25 +00:00
Author
Owner
Copy link

Finding: issue #350's newest comment requires explicit and human-readable defaults. Evidence in : non-JSON success currently uses , so it is still JSON; JSON success/error responses have no schema version. is absent. The existing real-server CLI probe in covers cursed AGENTS.md
CLAUDE.md
CONTEXT.md
CONTRIBUTING.md
Cargo.lock
Cargo.toml
Containerfile
LICENSE
NOTICE
README.md
apps
assets
bench
bun.lock
contracts
crates
deploy
docs
fuzz
package.json
packages
rust-toolchain.toml
scripts
target
tests names and a 40 MiB transfer, but not output versioning or a command contract matrix. I am adding those contract checks and documentation, then I will extend the real-server probe.

Finding: issue #350's newest comment requires explicit and human-readable defaults. Evidence in : non-JSON success currently uses , so it is still JSON; JSON success/error responses have no schema version. is absent. The existing real-server CLI probe in covers cursed AGENTS.md CLAUDE.md CONTEXT.md CONTRIBUTING.md Cargo.lock Cargo.toml Containerfile LICENSE NOTICE README.md apps assets bench bun.lock contracts crates deploy docs fuzz package.json packages rust-toolchain.toml scripts target tests names and a 40 MiB transfer, but not output versioning or a command contract matrix. I am adding those contract checks and documentation, then I will extend the real-server probe.
kayg commented 2026-09-28 15:20:03 +00:00
Author
Owner
Copy link

Correction: the previous progress comment was mangled by shell command substitution. Please ignore it.

Finding: issue #350's newest comment requires explicit --json and human-readable defaults. Evidence in crates/calternal-cli/src/main.rs: non-JSON success currently uses serde_json::to_string_pretty, so it is still JSON; JSON success and error responses have no schema version. crates/calternal-cli/README.md is absent. The existing real-server CLI probe in tests/adversarial/attack2.py covers cursed ls names and a 40 MiB transfer, but not output versioning or a command contract matrix. I am adding those contract checks and documentation, then I will extend the real-server probe.

Correction: the previous progress comment was mangled by shell command substitution. Please ignore it. Finding: issue #350's newest comment requires explicit `--json` and human-readable defaults. Evidence in `crates/calternal-cli/src/main.rs`: non-JSON success currently uses `serde_json::to_string_pretty`, so it is still JSON; JSON success and error responses have no schema version. `crates/calternal-cli/README.md` is absent. The existing real-server CLI probe in `tests/adversarial/attack2.py` covers cursed `ls` names and a 40 MiB transfer, but not output versioning or a command contract matrix. I am adding those contract checks and documentation, then I will extend the real-server probe.
kayg commented 2026-09-28 15:33:05 +00:00
Author
Owner
Copy link

Finding: the CLI read CALTERNAL_TOKEN directly and passed it to the requested server, bypassing calternal-sync::load_token's CALTERNAL_TOKEN_SERVER binding. The new subprocess test first failed with network exit code 9 against a different loopback server; after routing all CLI commands through Api::open/load_token, it fails fast with exit code 3 and does not print the credential. The real-server adversarial fixture must also set the matching server binding.

Finding: the CLI read `CALTERNAL_TOKEN` directly and passed it to the requested server, bypassing `calternal-sync::load_token`'s `CALTERNAL_TOKEN_SERVER` binding. The new subprocess test first failed with network exit code 9 against a different loopback server; after routing all CLI commands through `Api::open`/`load_token`, it fails fast with exit code 3 and does not print the credential. The real-server adversarial fixture must also set the matching server binding.
kayg commented 2026-09-28 16:10:00 +00:00
Author
Owner
Copy link

Finding: ls, cat, versions, share, and note new --folder sent .. paths to the server without local validation. The new path-boundary test first reached the closed loopback port for ls and returned a network error. Those commands now use the shared calternal-path::RelPath validator before network I/O; the regression test passes for all five paths.

Finding: `ls`, `cat`, `versions`, `share`, and `note new --folder` sent `..` paths to the server without local validation. The new path-boundary test first reached the closed loopback port for `ls` and returned a network error. Those commands now use the shared `calternal-path::RelPath` validator before network I/O; the regression test passes for all five paths.
kayg commented 2026-09-28 16:34:40 +00:00
Author
Owner
Copy link

Finding: issue #350 requires --timeout, bounded --retries, backoff with jitter, and Retry-After handling across CLI HTTP commands. I added a shared retry helper in calternal-sync, wired the CLI and login flow to it, and documented defaults of 120 seconds and 3 retries (maximum 5). The CLI retries 429/502/503/504 responses; connection failures retry only for safe methods because replaying an ambiguous mutation can duplicate a committed action. calternal-sync::RemoteClient::new() retains its existing behavior; the CLI uses the new policy constructor. Evidence: cargo test -p calternal-sync passed (54 library tests, 2 daemon tests); cargo test -p calternal-cli passed (17 unit tests, 10 integration tests), including Retry-After delay and dropped-connection coverage; clippy passed for both touched crates with warnings denied; cargo fmt --all -- --check passed. Commit: 0c38b723.

Finding: issue #350 requires `--timeout`, bounded `--retries`, backoff with jitter, and `Retry-After` handling across CLI HTTP commands. I added a shared retry helper in `calternal-sync`, wired the CLI and login flow to it, and documented defaults of 120 seconds and 3 retries (maximum 5). The CLI retries 429/502/503/504 responses; connection failures retry only for safe methods because replaying an ambiguous mutation can duplicate a committed action. `calternal-sync::RemoteClient::new()` retains its existing behavior; the CLI uses the new policy constructor. Evidence: `cargo test -p calternal-sync` passed (54 library tests, 2 daemon tests); `cargo test -p calternal-cli` passed (17 unit tests, 10 integration tests), including Retry-After delay and dropped-connection coverage; clippy passed for both touched crates with warnings denied; `cargo fmt --all -- --check` passed. Commit: `0c38b723`.
kayg commented 2026-09-28 17:48:30 +00:00
Author
Owner
Copy link

Final-gate finding: the first full workspace cargo clippy --all-targets -- -D warnings attempt failed in calternal-server because apps/web/build was absent. Frontend is embedded from that directory (crates/calternal-server/src/main.rs:63-65), and RustEmbed consequently emitted no get method; the diagnostics were at security.rs, main.rs and wire.rs. This is a missing generated build prerequisite, not a CLI source error. I am building the web bundle before rerunning final gates.

Final-gate finding: the first full workspace `cargo clippy --all-targets -- -D warnings` attempt failed in `calternal-server` because `apps/web/build` was absent. `Frontend` is embedded from that directory (`crates/calternal-server/src/main.rs:63-65`), and RustEmbed consequently emitted no `get` method; the diagnostics were at `security.rs`, `main.rs` and `wire.rs`. This is a missing generated build prerequisite, not a CLI source error. I am building the web bundle before rerunning final gates.
kayg commented 2026-09-28 18:00:31 +00:00
Author
Owner
Copy link

Final-gate test finding: the first workspace cargo test attempt stopped during compilation before tests ran. Its only errors were rustc failing to write dependency files in temporary directories under another worktree (/home/kayg/Developer/calternal-wt/search-d/target/tmp/sccache.../deps.d: No such file or directory). This environment has RUSTC_WRAPPER=/home/kayg/.nix-profile/bin/sccache; the CLI worktree TMPDIR itself resolved correctly to cli-agent/target/tmp. No test assertion failed. I am recording this as a shared-host build failure and continuing the remaining required checks.

Final-gate test finding: the first workspace `cargo test` attempt stopped during compilation before tests ran. Its only errors were rustc failing to write dependency files in temporary directories under another worktree (`/home/kayg/Developer/calternal-wt/search-d/target/tmp/sccache.../deps.d`: No such file or directory). This environment has `RUSTC_WRAPPER=/home/kayg/.nix-profile/bin/sccache`; the CLI worktree TMPDIR itself resolved correctly to `cli-agent/target/tmp`. No test assertion failed. I am recording this as a shared-host build failure and continuing the remaining required checks.
kayg commented 2026-09-28 18:03:05 +00:00
Author
Owner
Copy link

Findings from real use (Claude, 2026-09-28, CLI on o2 against calternal.cloud), add to this job's scope:

  1. calternal ls prints raw JSON without --json (owner rule: human pretty output by default; JSON only with --json). Check every command for the same.
  2. calternal ls <folder> silently stops at the first page: the response has total: 614 and a next_cursor, but the CLI shows 100 entries and no hint that more exist. An agent will believe the listing is complete. Default: follow next_cursor until done (streaming), with --limit N to cap it; when capped, pretty output prints 'showing N of TOTAL' and JSON keeps next_cursor and total.
  3. #371: put exits 1 after a successful upload when the server stores a canonically equivalent Unicode form (NFC vs NFD); verify by the returned item_id/hash, not by re-stat of the input path. Fix it here (same CLI), and add a regression test.
  4. put cannot set the modified date (paperless created dates were lost). Add --mtime <RFC3339> if the API supports it; otherwise file the API gap.
Findings from real use (Claude, 2026-09-28, CLI on o2 against calternal.cloud), add to this job's scope: 1. `calternal ls` prints raw JSON **without** `--json` (owner rule: human pretty output by default; JSON only with `--json`). Check every command for the same. 2. `calternal ls <folder>` silently stops at the first page: the response has `total: 614` and a `next_cursor`, but the CLI shows 100 entries and no hint that more exist. An agent will believe the listing is complete. Default: follow `next_cursor` until done (streaming), with `--limit N` to cap it; when capped, pretty output prints 'showing N of TOTAL' and JSON keeps `next_cursor` and `total`. 3. #371: `put` exits 1 after a successful upload when the server stores a canonically equivalent Unicode form (NFC vs NFD); verify by the returned item_id/hash, not by re-stat of the input path. Fix it here (same CLI), and add a regression test. 4. `put` cannot set the modified date (paperless created dates were lost). Add `--mtime <RFC3339>` if the API supports it; otherwise file the API gap.
kayg commented 2026-09-28 18:10:40 +00:00
Author
Owner
Copy link

Continuing #350 on job/cli-agent. Current HEAD: 40271a559b287a0da76430068c47ac68b20dec6a; current merge base with dev: cf919dd3bfb13e8bb09a923b61f359c861b20bd9. The worktree was clean at start.

I re-read the issue and all 10 comments, including the four real-use findings. Initial trace confirms ls fetches only one Files page, put verifies by re-statting the submitted path after upload, and the existing Files upload API already accepts source mtime metadata. I am adding targeted regression coverage for the reported output, pagination, Unicode normalization, and RFC3339 mtime behavior before changing implementation.

Continuing #350 on `job/cli-agent`. Current HEAD: `40271a559b287a0da76430068c47ac68b20dec6a`; current merge base with `dev`: `cf919dd3bfb13e8bb09a923b61f359c861b20bd9`. The worktree was clean at start. I re-read the issue and all 10 comments, including the four real-use findings. Initial trace confirms `ls` fetches only one Files page, `put` verifies by re-statting the submitted path after upload, and the existing Files upload API already accepts source mtime metadata. I am adding targeted regression coverage for the reported output, pagination, Unicode normalization, and RFC3339 mtime behavior before changing implementation.
kayg commented 2026-09-28 18:31:21 +00:00
Author
Owner
Copy link

Finding 1 and 2 evidence: before the fix, Api::ls sent one GET with only path; it did not request or follow next_cursor. The new subprocess regression first observed one request where two were required, and ls --limit 1 returned usage exit 2 because the option did not exist. The branch already had the shared human renderer, but the real-server ls check was the only route-specific human-output coverage; the new local-server test now asserts that default ls writes readable text. The focused listing tests pass after the change. I am also extending tests/adversarial/attack2.py to cover pagination against the real server.

Finding 1 and 2 evidence: before the fix, `Api::ls` sent one GET with only `path`; it did not request or follow `next_cursor`. The new subprocess regression first observed one request where two were required, and `ls --limit 1` returned usage exit 2 because the option did not exist. The branch already had the shared human renderer, but the real-server `ls` check was the only route-specific human-output coverage; the new local-server test now asserts that default `ls` writes readable text. The focused listing tests pass after the change. I am also extending `tests/adversarial/attack2.py` to cover pagination against the real server.
kayg commented 2026-09-28 18:45:34 +00:00
Author
Owner
Copy link

Upload findings with regression evidence:

  • #371: the local Files endpoint returned an installed NFD path in the successful TUS response. The current CLI then queried the original NFC input path, received HTTP 404, and exited 4 after the upload had completed. The regression asserts verification uses the server-returned path and returns its item ID and hash.
  • Mtime: put --mtime 2020-01-02T03:04:05+02:30 currently fails argument parsing with exit 2. The Files upload API already parses and applies source-mtime-ns; I am wiring the CLI option to that existing contract and checking its encoded upload metadata.
Upload findings with regression evidence: - #371: the local Files endpoint returned an installed NFD path in the successful TUS response. The current CLI then queried the original NFC input path, received HTTP 404, and exited 4 after the upload had completed. The regression asserts verification uses the server-returned path and returns its item ID and hash. - Mtime: `put --mtime 2020-01-02T03:04:05+02:30` currently fails argument parsing with exit 2. The Files upload API already parses and applies `source-mtime-ns`; I am wiring the CLI option to that existing contract and checking its encoded upload metadata.
kayg commented 2026-09-28 18:56:31 +00:00
Author
Owner
Copy link

The upload regressions are fixed in commit d85ee338.

  • Successful TUS responses provide the server-installed path. The CLI validates that path, resolves the installed Files item there, verifies its hash, and returns its item ID. This covers NFC input stored as NFD and zero-length uploads.
  • put --mtime <RFC3339> parses the offset timestamp to signed nanoseconds and sends the existing Files API source-mtime-ns metadata. An explicit mtime uploads identical bytes so it can update the modified date.

The small calternal-sync API addition returns the installed path from existing TUS response headers; existing upload methods keep their prior return values and behavior. Regression evidence: cargo test -p calternal-sync passed (55 library tests, 2 daemon tests); cargo test -p calternal-cli passed (18 unit tests, 15 integration tests). The real-server probe now checks 101-entry pagination, capped output, and initial and mtime-only uploads. Final gates and the single adversarial round remain.

The upload regressions are fixed in commit `d85ee338`. - Successful TUS responses provide the server-installed path. The CLI validates that path, resolves the installed Files item there, verifies its hash, and returns its item ID. This covers NFC input stored as NFD and zero-length uploads. - `put --mtime <RFC3339>` parses the offset timestamp to signed nanoseconds and sends the existing Files API `source-mtime-ns` metadata. An explicit mtime uploads identical bytes so it can update the modified date. The small `calternal-sync` API addition returns the installed path from existing TUS response headers; existing upload methods keep their prior return values and behavior. Regression evidence: `cargo test -p calternal-sync` passed (55 library tests, 2 daemon tests); `cargo test -p calternal-cli` passed (18 unit tests, 15 integration tests). The real-server probe now checks 101-entry pagination, capped output, and initial and mtime-only uploads. Final gates and the single adversarial round remain.
kayg commented 2026-09-28 20:43:18 +00:00
Author
Owner
Copy link

The adversarial CLI section did not reach product checks in the motion-spring round. tests/adversarial/attack2.py invokes the binary at the hard-coded path <repo>/target/debug/calternal; this job is required to use CARGO_TARGET_DIR=/mnt/hdd/targets/jobs/motion-spring, so the subprocess raised FileNotFoundError before the first CLI command. This is a harness path mismatch, not a CLI behavior result. The selected run continued into the remaining round-two sections.

The adversarial CLI section did not reach product checks in the motion-spring round. `tests/adversarial/attack2.py` invokes the binary at the hard-coded path `<repo>/target/debug/calternal`; this job is required to use `CARGO_TARGET_DIR=/mnt/hdd/targets/jobs/motion-spring`, so the subprocess raised `FileNotFoundError` before the first CLI command. This is a harness path mismatch, not a CLI behavior result. The selected run continued into the remaining round-two sections.
kayg commented 2026-09-28 21:29:37 +00:00
Author
Owner
Copy link

Real local adversarial round on job/cli-agent after the dev merge:

ADVERSARIAL_ROUND2_ONLY=1 ROUND2_SECTIONS=feed,cli ADVERSARIAL_SKIP_WEB_BUILD=1 tests/adversarial/run.sh

Result: exit 1, 3 findings, 0 SLOW findings. The feed section reported no finding. The three CLI reports are not confirmed product defects:

  • cli human ls: the fixture uploads names with newline, tab, and ESC, but ignores each upload response. calternal_fs::normalize_new_name rejects control characters. The CLI listed 2 accepted entries, so this fixture did not exercise escaping. The listing renderer passes names through human_scalar, which escapes newline and control characters. I left the existing fixture expectation unchanged.
  • cli retry after 503 and cli retry after connection reset: the probe documentation identifies bearer A as the owner, cli_env exports bearer A, and the fault proxy's second request reads /api/v1/auth/me using token A. Both requests reached the proxy (the probe did not report an unexpected request count), and the returned username was owner; the assertion expects agent. I left the existing assertion unchanged.

These two fixture mismatches are recorded for owner review under the rule against changing existing test expectations without an approved behavior change. The single adversarial round is complete; I did not rerun it.

Real local adversarial round on `job/cli-agent` after the `dev` merge: `ADVERSARIAL_ROUND2_ONLY=1 ROUND2_SECTIONS=feed,cli ADVERSARIAL_SKIP_WEB_BUILD=1 tests/adversarial/run.sh` Result: exit 1, 3 findings, 0 SLOW findings. The `feed` section reported no finding. The three CLI reports are not confirmed product defects: - `cli human ls`: the fixture uploads names with newline, tab, and ESC, but ignores each upload response. `calternal_fs::normalize_new_name` rejects control characters. The CLI listed 2 accepted entries, so this fixture did not exercise escaping. The listing renderer passes names through `human_scalar`, which escapes newline and control characters. I left the existing fixture expectation unchanged. - `cli retry after 503` and `cli retry after connection reset`: the probe documentation identifies bearer A as the owner, `cli_env` exports bearer A, and the fault proxy's second request reads `/api/v1/auth/me` using token A. Both requests reached the proxy (the probe did not report an unexpected request count), and the returned username was `owner`; the assertion expects `agent`. I left the existing assertion unchanged. These two fixture mismatches are recorded for owner review under the rule against changing existing test expectations without an approved behavior change. The single adversarial round is complete; I did not rerun it.
kayg commented 2026-09-28 21:37:14 +00:00
Author
Owner
Copy link

kayg/calternal#350 final report

Branch: job/cli-agent
Head: 7d64a5a78e2b81b4a2eab1b30e83d32c1b55aff0
Push: git push origin job/cli-agent completed successfully. The branch includes the required dev merge (8724942a).

Built

  • ls now defaults to readable human output and follows Files cursors in 100-entry pages. --limit N caps output, reports showing N of TOTAL in human mode, and preserves next_cursor and total in JSON.
  • put --mtime RFC3339 sends source mtime in the existing TUS metadata. A mtime-only change still uploads. Verification follows the server-reported installed path and returns the installed item identity and hash, so Unicode normalization does not cause a false failure.
  • Added renderer coverage for hostile names returned by a server. human_scalar escapes control characters in human ls output.

Files changed from dev:

  • Cargo.lock
  • crates/calternal-cli/Cargo.toml
  • crates/calternal-cli/README.md
  • crates/calternal-cli/src/login.rs
  • crates/calternal-cli/src/main.rs
  • crates/calternal-cli/src/remote_commands.rs
  • crates/calternal-cli/tests/output_contract.rs
  • crates/calternal-sync/src/lib.rs
  • crates/calternal-sync/src/remote.rs
  • tests/adversarial/attack2.py

Commits: 40657b50 (paged listings), d85ee338 (upload identity and mtime), 8724942a (merge dev), 7d64a5a7 (escaped-name renderer test).

Decisions

  • The Files page size is 100, matching the API default. A capped JSON listing keeps the server cursor and total. A later-page error leaves valid partial JSON and returns an error.
  • --mtime accepts RFC3339 and encodes signed nanoseconds. Supplying it forces an upload even when the local and remote content hashes match.
  • Upload verification uses the server-returned installed path because the server can normalize Unicode names.

Gates

These workspace gates ran after the dev merge and before the final test-only commit. The final commit adds no production code; its focused test and formatting check also passed.

cargo fmt --all -- --check: exit 0; no output.

cargo clippy --all-targets -- -D warnings: exit 0. Verbatim output:

   Compiling calternal-server v0.0.1 (/home/kayg/Developer/calternal-wt/cli-agent/crates/calternal-server)
    Checking calternal-plugin-video v0.0.1 (/home/kayg/Developer/calternal-wt/cli-agent/crates/plugins/video)
    Checking calternal-collab v0.0.1 (/home/kayg/Developer/calternal-wt/cli-agent/crates/calternal-collab)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 19.23s

cargo test: exit 0. Verbatim test-result lines from all 74 unit, integration, and doc-test suites:

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s
test result: ok. 53 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 55.03s
test result: ok. 18 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s
test result: ok. 15 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.68s
test result: ok. 15 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.65s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.00s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.06s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 117.25s
test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.87s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.48s
test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.31s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.47s
test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.16s
test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 30.86s
test result: ok. 15 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.19s
test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 43.48s
test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s
test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.39s
test result: ok. 9 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.85s
test result: ok. 17 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.39s
test result: ok. 37 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.43s
test result: ok. 40 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.36s
test result: ok. 489 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.42s
test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.60s
test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s
test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.80s
test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s
test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s
test result: ok. 21 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.39s
test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.65s
test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.24s
test result: ok. 48 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.71s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.37s
test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s
test result: ok. 122 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 152.45s
test result: ok. 103 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 67.82s
test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.56s
test result: ok. 42 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 5.72s
test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s
test result: ok. 30 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 1.91s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.86s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s
test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.12s
test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s
test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s
test result: ok. 1 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 5.36s
test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 68 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 8.29s
test result: ok. 55 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.56s
test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s
test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.60s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

After the test-only commit, cargo test -p calternal-cli human_listing_escapes_controls_in_server_names passed: test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s. The final cargo fmt --all -- --check and git diff --check both exited 0.

Adversarial round

One local round ran with ROUND2_SECTIONS=feed,cli. It exited 1 with 3 findings and 0 SLOW findings. The feed section reported no findings. Evidence for the three CLI reports is in the preceding issue comment: the hostile-name fixture ignores rejected uploads, and both retry assertions expect agent while the probe sends bearer A (the owner) and confirms two proxy requests. Existing expectations remain unchanged per the owner rule. A focused renderer test now verifies escaping on the listing code path. The adversarial round was not repeated.

Known gaps

The broader CLI coverage in the issue remains incomplete: a successful login/logout session flow, sync service installation, repeated randomized agent-session faults, and a 2 GiB resumable transfer still need coverage. The issue remains open.

# kayg/calternal#350 final report Branch: `job/cli-agent` Head: `7d64a5a78e2b81b4a2eab1b30e83d32c1b55aff0` Push: `git push origin job/cli-agent` completed successfully. The branch includes the required `dev` merge (`8724942a`). ## Built - `ls` now defaults to readable human output and follows Files cursors in 100-entry pages. `--limit N` caps output, reports `showing N of TOTAL` in human mode, and preserves `next_cursor` and `total` in JSON. - `put --mtime RFC3339` sends source mtime in the existing TUS metadata. A mtime-only change still uploads. Verification follows the server-reported installed path and returns the installed item identity and hash, so Unicode normalization does not cause a false failure. - Added renderer coverage for hostile names returned by a server. `human_scalar` escapes control characters in human `ls` output. Files changed from `dev`: - `Cargo.lock` - `crates/calternal-cli/Cargo.toml` - `crates/calternal-cli/README.md` - `crates/calternal-cli/src/login.rs` - `crates/calternal-cli/src/main.rs` - `crates/calternal-cli/src/remote_commands.rs` - `crates/calternal-cli/tests/output_contract.rs` - `crates/calternal-sync/src/lib.rs` - `crates/calternal-sync/src/remote.rs` - `tests/adversarial/attack2.py` Commits: `40657b50` (paged listings), `d85ee338` (upload identity and mtime), `8724942a` (merge `dev`), `7d64a5a7` (escaped-name renderer test). ## Decisions - The Files page size is 100, matching the API default. A capped JSON listing keeps the server cursor and total. A later-page error leaves valid partial JSON and returns an error. - `--mtime` accepts RFC3339 and encodes signed nanoseconds. Supplying it forces an upload even when the local and remote content hashes match. - Upload verification uses the server-returned installed path because the server can normalize Unicode names. ## Gates These workspace gates ran after the `dev` merge and before the final test-only commit. The final commit adds no production code; its focused test and formatting check also passed. `cargo fmt --all -- --check`: exit 0; no output. `cargo clippy --all-targets -- -D warnings`: exit 0. Verbatim output: ```text Compiling calternal-server v0.0.1 (/home/kayg/Developer/calternal-wt/cli-agent/crates/calternal-server) Checking calternal-plugin-video v0.0.1 (/home/kayg/Developer/calternal-wt/cli-agent/crates/plugins/video) Checking calternal-collab v0.0.1 (/home/kayg/Developer/calternal-wt/cli-agent/crates/calternal-collab) Finished `dev` profile [unoptimized + debuginfo] target(s) in 19.23s ``` `cargo test`: exit 0. Verbatim test-result lines from all 74 unit, integration, and doc-test suites: ```text test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s test result: ok. 53 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 55.03s test result: ok. 18 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s test result: ok. 15 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.68s test result: ok. 15 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.65s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.00s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.06s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 117.25s test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.87s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.48s test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.31s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.47s test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.16s test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 30.86s test result: ok. 15 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.19s test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 43.48s test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.39s test result: ok. 9 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.85s test result: ok. 17 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.39s test result: ok. 37 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.43s test result: ok. 40 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.36s test result: ok. 489 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.42s test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.60s test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.80s test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s test result: ok. 21 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.39s test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.65s test result: ok. 29 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.24s test result: ok. 48 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.71s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.37s test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s test result: ok. 122 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 152.45s test result: ok. 103 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 67.82s test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.56s test result: ok. 42 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 5.72s test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s test result: ok. 30 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 1.91s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.86s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.12s test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s test result: ok. 1 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 5.36s test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 68 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 8.29s test result: ok. 55 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.56s test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.60s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ``` After the test-only commit, `cargo test -p calternal-cli human_listing_escapes_controls_in_server_names` passed: `test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s`. The final `cargo fmt --all -- --check` and `git diff --check` both exited 0. ## Adversarial round One local round ran with `ROUND2_SECTIONS=feed,cli`. It exited 1 with 3 findings and 0 SLOW findings. The `feed` section reported no findings. Evidence for the three CLI reports is in the preceding issue comment: the hostile-name fixture ignores rejected uploads, and both retry assertions expect `agent` while the probe sends bearer A (the owner) and confirms two proxy requests. Existing expectations remain unchanged per the owner rule. A focused renderer test now verifies escaping on the listing code path. The adversarial round was not repeated. ## Known gaps The broader CLI coverage in the issue remains incomplete: a successful login/logout session flow, sync service installation, repeated randomized agent-session faults, and a 2 GiB resumable transfer still need coverage. The issue remains open.
kayg commented 2026-09-28 21:42:24 +00:00
Author
Owner
Copy link

Continuing #350 on job/cli-agent from the existing work. Current HEAD is 7d64a5a78e2b81b4a2eab1b30e83d32c1b55aff0; the current merge base with dev is fba83527f2cccf2334934bb1fd0932be7c0e209b. The worktree is clean. I am verifying the four real-use reports against the committed implementation and regression tests before the final gates.

Continuing #350 on `job/cli-agent` from the existing work. Current HEAD is `7d64a5a78e2b81b4a2eab1b30e83d32c1b55aff0`; the current merge base with `dev` is `fba83527f2cccf2334934bb1fd0932be7c0e209b`. The worktree is clean. I am verifying the four real-use reports against the committed implementation and regression tests before the final gates.
kayg commented 2026-09-28 22:56:26 +00:00
Author
Owner
Copy link

Post-merge adversarial triage (selected feed,cli,search_hidden pass is still running):

  • feed reported SLOW conditional replace fixture: 14.9s status 201. This is load-only under the job rule.
  • cli human ls reported unescaped terminal controls, but the fixture does not check responses from its five setup uploads (tests/adversarial/attack2.py, cli section). The server listing returned only two accepted names; the existing human_listing_escapes_controls_in_server_names regression exercises the renderer directly. This is the same fixture mismatch recorded earlier, not a confirmed product defect.

No confirmed non-SLOW CLI defect has appeared so far. I am letting the selected pass finish once.

Post-merge adversarial triage (selected `feed,cli,search_hidden` pass is still running): - `feed` reported `SLOW conditional replace fixture: 14.9s status 201`. This is load-only under the job rule. - `cli human ls` reported unescaped terminal controls, but the fixture does not check responses from its five setup uploads (`tests/adversarial/attack2.py`, `cli` section). The server listing returned only two accepted names; the existing `human_listing_escapes_controls_in_server_names` regression exercises the renderer directly. This is the same fixture mismatch recorded earlier, not a confirmed product defect. No confirmed non-SLOW CLI defect has appeared so far. I am letting the selected pass finish once.
kayg commented 2026-09-28 23:51:37 +00:00
Author
Owner
Copy link

Final report

Finished #350 on job/cli-agent. Merged dev into the job branch, then pushed it. No merge into dev was made.

Head: 3c4caab7bda4e5ff98aa87953a0614fb2d31d91d

Built

  • ls uses human output by default; --json keeps the versioned JSON envelope.
  • ls follows directory cursors across pages. --limit provides a capped listing and preserves its JSON cursor.
  • put --mtime accepts RFC3339 and sends the source mtime in nanoseconds.
  • Upload verification uses the path returned by the server, so NFC/NFD normalization does not create a false mismatch.
  • Added CLI output contract tests for defaults, pagination, Unicode paths, mtime, and retry behavior.

Files in the branch diff from dev: Cargo.lock; crates/calternal-cli/Cargo.toml; crates/calternal-cli/README.md; crates/calternal-cli/src/login.rs; crates/calternal-cli/src/main.rs; crates/calternal-cli/src/remote_commands.rs; crates/calternal-cli/tests/output_contract.rs; crates/calternal-sync/src/lib.rs; crates/calternal-sync/src/remote.rs; tests/adversarial/attack2.py.

Gates

cargo fmt --check produced no output and exited 0.

cargo clippy --all-targets -- -D warnings exited 0. Final output:

Finished `dev` profile [unoptimized + debuginfo] target(s) in 24m 05s

cargo test exited 101 at the existing 10,000-block collaboration timing test. CLI tests passed:

test result: ok. 19 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s
test result: ok. 15 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.12s
test session::public_edit_limit_tests::ten_thousand_markdown_blocks_open_and_sync_within_two_seconds ... FAILED
10,000-block collaboration phases: parse=2.071490926s, Yrs=622.136118ms, block-index=8.739956ms, first-sync=98.55126ms (616204 bytes), snapshot=27.095715ms (616199 bytes), total=2.828013975s
test result: FAILED. 14 passed; 1 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.33s
error: test failed, to rerun pass `-p calternal-collab --lib`

bun run check exited 0:

svelte-check found 0 errors and 0 warnings

bun run test exited 0:

 Test Files  114 passed (114)
      Tests  751 passed (751)
   Start at  01:43:06
   Duration  181.18s (transform 65%, environment 13%, import 11%, tests 8%, setup 2%)

Adversarial: the selected round kept the server alive. The CLI fixture reported three mismatches: its human-listing setup ignores upload statuses, and both retry checks expected username agent while receiving a valid Owner API response. The direct renderer regression passed. Slow uploads were 14.9s and 6.3s under host load. The Mail API probe passed anonymous access, hostile inputs, malformed and oversized payloads, hostile IDs/cursors, and 24 parallel reads. No confirmed hostile-input defect was found.

Known gaps

The README keeps these issue #350 cases open: successful end-to-end login/logout, sync service installation, 100 randomized agent sessions, and a 2 GB resumable sync transfer.

Decisions not specified in the design

  • Use 100 entries as the default page size; let --limit cap output without discarding the next cursor.
  • Parse put --mtime as RFC3339 and convert it to the existing signed nanosecond field. An explicit mtime forces the upload even when bytes match.
  • Verify uploads against the server-installed path returned by the upload API, rather than assuming local Unicode normalization.
# Final report Finished #350 on `job/cli-agent`. Merged `dev` into the job branch, then pushed it. No merge into `dev` was made. Head: `3c4caab7bda4e5ff98aa87953a0614fb2d31d91d` ## Built - `ls` uses human output by default; `--json` keeps the versioned JSON envelope. - `ls` follows directory cursors across pages. `--limit` provides a capped listing and preserves its JSON cursor. - `put --mtime` accepts RFC3339 and sends the source mtime in nanoseconds. - Upload verification uses the path returned by the server, so NFC/NFD normalization does not create a false mismatch. - Added CLI output contract tests for defaults, pagination, Unicode paths, mtime, and retry behavior. Files in the branch diff from `dev`: `Cargo.lock`; `crates/calternal-cli/Cargo.toml`; `crates/calternal-cli/README.md`; `crates/calternal-cli/src/login.rs`; `crates/calternal-cli/src/main.rs`; `crates/calternal-cli/src/remote_commands.rs`; `crates/calternal-cli/tests/output_contract.rs`; `crates/calternal-sync/src/lib.rs`; `crates/calternal-sync/src/remote.rs`; `tests/adversarial/attack2.py`. ## Gates `cargo fmt --check` produced no output and exited 0. `cargo clippy --all-targets -- -D warnings` exited 0. Final output: Finished `dev` profile [unoptimized + debuginfo] target(s) in 24m 05s `cargo test` exited 101 at the existing 10,000-block collaboration timing test. CLI tests passed: test result: ok. 19 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s test result: ok. 15 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.12s test session::public_edit_limit_tests::ten_thousand_markdown_blocks_open_and_sync_within_two_seconds ... FAILED 10,000-block collaboration phases: parse=2.071490926s, Yrs=622.136118ms, block-index=8.739956ms, first-sync=98.55126ms (616204 bytes), snapshot=27.095715ms (616199 bytes), total=2.828013975s test result: FAILED. 14 passed; 1 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.33s error: test failed, to rerun pass `-p calternal-collab --lib` `bun run check` exited 0: svelte-check found 0 errors and 0 warnings `bun run test` exited 0: Test Files 114 passed (114) Tests 751 passed (751) Start at 01:43:06 Duration 181.18s (transform 65%, environment 13%, import 11%, tests 8%, setup 2%) Adversarial: the selected round kept the server alive. The CLI fixture reported three mismatches: its human-listing setup ignores upload statuses, and both retry checks expected username `agent` while receiving a valid `Owner` API response. The direct renderer regression passed. Slow uploads were 14.9s and 6.3s under host load. The Mail API probe passed anonymous access, hostile inputs, malformed and oversized payloads, hostile IDs/cursors, and 24 parallel reads. No confirmed hostile-input defect was found. ## Known gaps The README keeps these issue #350 cases open: successful end-to-end login/logout, sync service installation, 100 randomized agent sessions, and a 2 GB resumable sync transfer. ## Decisions not specified in the design - Use 100 entries as the default page size; let `--limit` cap output without discarding the next cursor. - Parse `put --mtime` as RFC3339 and convert it to the existing signed nanosecond field. An explicit mtime forces the upload even when bytes match. - Verify uploads against the server-installed path returned by the upload API, rather than assuming local Unicode normalization.
kayg commented 2026-09-29 00:53:09 +00:00
Author
Owner
Copy link

Merged into dev by Claude after review; deployed to calternal.cloud. Closing.

Merged into dev by Claude after review; deployed to calternal.cloud. Closing.
kayg closed this issue 2026-09-29 00:53:10 +00:00
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
dev
wip/mchrome-1084
wip/mailghost2-1094
wip/mailghost-1094
wip/kbpreview2-1118
wip/kbpreview-1118
wip/kanban-1092
wip/importhang-1121
wip/hiderev-1153
wip/hide4-1153
wip/hide3-1153
wip/hide2-1153
wip/hide-1153
wip/editreg-1132
wip/editorrail3-1113
wip/editorrail2-1113
wip/editorrail-1113
wip/e2e-b2-1071
wip/e2e-b-1071
wip/draw4-1101
wip/draw3-1101
wip/draw2-1101
wip/draw-1101
wip/directory-1199
wip/delete-1119
wip/collabloss-1197
wip/cards2-1083
wip/cards-1083
wip/canvas-visual
wip/canvasvis2-976
wip/calhdr-1112
wip/calcards-1115
wip/browserfix
wip/blocks-1125
wip/allday-1107
wip/agenda-decks
wip/agenda-1086
wip/adv7c-1105
wip/txentry-1198
wip/trayicons2-1095
wip/trayicons-1095
wip/tagperf-1186
wip/sidebar3-1094
wip/segmented-1200
wip/rev2-webperf
wip/rev2-money-ident
wip/previewcard-1098
job/collabloss-1197
wip/palette2-1123
wip/palette-1093
wip/onboard2-1141
job/restyle-settings
wip/onboard-1141.aborted-early
wip/onboard-1141
wip/notifloop-1194
wip/nlpchip-1127
wip/morph-1104
wip/merge-round-7c5
wip/merge-round-7c4
wip/merge-round-7c3
wip/merge-round-7c2
wip/merge-round-7c
job/restyle-files
job/tagdnd-1187
job/merge30
job/perf-1124
job/tocrail-1191
job/cards-1179
wip/cards2-1179
wip/cards-1179
job/segmented-1200
wip/tocrail-1191
job/hide-1153
wip/tagdnd-1187
wip/restyle-files
wip/perf-1124
wip/merge30j
job/onboard-1141
job/restyle-notes
wip/restyle-notes
job/wizchoices-1140
job/adv-1202
job/notifloop-1194
wip/wizchoices-1140
wip/restyle-1190
job/moneyfmt-1180
job/txentry-1198
wip/moneyfmt2-1180
wip/moneyfmt-1180-r
wip/moneyfmt-1180
job/tagperf-1186
job/pillglass-1189
job/flags-1181
wip/flags-1181
job/restyle-1190
job/restyle-mailmoney
job/restyle-search
job/settingsreg-1195
job/wizard-1140
site/website
wip/wizardrev2-1140
wip/wizardrev-1140
wip/wizard5-1140
wip/wizard4-1140
wip/wizard3-1140
wip/wizard2-1140
wip/wizard-1140
wip/pillglass-1189
wip/settingsreg-1195
job/merge29
job/fu-1171
wip/merge29j
wip/fu-1171
job/fu-1166
job/directory-1199
job/txresearch-1188
wip/fu-1166
job/merge28
job/search-1066
wip/search-1066
wip/merge28j
job/gateslot-1182
job/bulkimport-1157
job/mailnet-1160
wip/mailnetrev-1160
wip/mailnet-1160
wip/bulkrev-1157
wip/bulkimport-1157
job/startup-1161
wip/startup-1161
job/merge27
job/linkcards-1151
wip/linkcards3-1151
wip/linkcards2-1151
wip/linkcards-1151
job/traydate-1144
wip/traydate3-1144
wip/traydate2-1144
wip/traydate-1144
job/draw-1101
wip/merge27j
job/blockpill-1152
wip/blockpill3-1152
wip/blockpill2-1152
wip/blockpill-1152
job/minihover-1149
wip/minihover2-1149
wip/minihover-1149
job/merge25
wip/merge25-r
wip/merge25b
wip/merge25
job/inspector-1129
job/tags-1110
wip/inspector3-1129
wip/inspector2-1129
wip/inspector-1129
wip/tagsrev-1110
wip/tags2-1110
wip/tags-1110
job/dates-1148
wip/datesrev-1148
wip/dates2-1148
wip/dates-1148
job/licence-1145
wip/licence2-1145
wip/licence-1145
job/selfhost-1156
job/merge23
wip/merge23
job/tagfilter-1109
wip/tagfilter2-1109
wip/tagfilter-1109
job/kbd-1134
wip/kbd2-1134
wip/kbd-1134
job/palfoot-1137
wip/selfhost-1156
wip/palfoot2-1137
wip/palfoot-1137
job/toggle-1158
wip/toggle-1158
job/kbpreview-1118
job/docratchet-1155
job/perflint-1133
job/devtests-1159
wip/docratchet-1155
wip/devtests-1159
job/segv-1136
wip/toast-1142
wip/segv-1136
job/toast-1142
job/blockreload-1147
wip/blockreload-1147
job/font-1150
wip/font-1150
job/importui-1120
job/minimonth-1149
wip/importui-1120
wip/minimonth-1149
job/depcheck-1146
wip/perflint-1133
wip/depcheck-1146
job/calcards-1115
job/blocks-1125
job/plus-1128
job/shift-1138
wip/plus2-1128
wip/plus-1128
wip/shift-1138
job/moneyfid-1130
job/editorrail-1113
wip/moneyrev-1130
wip/moneyfid-1130
job/noext-851
wip/noext-851
wip/noext3-851
wip/noext2-851
job/week-1135
wip/week-1135
job/editreg-1132
job/smoke-1122
wip/smoke-1122
job/docs-1143
job/palette2-1123
job/calhdr-1112
job/nlpchip-1127
job/mailghost-1094
job/reconnect-1131
wip/reconnect-1131
job/trayicons-1095
job/delete-1119
job/importhang-1121
job/cards-1083
job/palette-1093
job/mchrome-1084
job/e2e-a-1071
job/canvas-visual
job/previewcard-1098
job/allday-1107
wip/e2e-a2-1071
wip/e2e-a-1071
job/e2e-b-1071
job/adv7c-1105
job/kanban-1092
job/agenda-1086
job/merge-round-7c
job/morph-1104
wip/surfaces-p2
job/merge-round-9
wip/merge-round-9
job/7cfix-small
wip/7cfix-small
job/mailui-1078
job/merge-round-8
wip/merge-round-8
wip/mailui-1078
job/mailround-1038
job/applemail-accept
wip/settitle-1068
wip/mailround2-1038
wip/mailround-1038
wip/e2e-7b
job/crash-1069
wip/crash-1069
job/searchlost-1066
wip/searchlost-1066
job/7b-reconcile
job/flake-1065
wip/flake-1065
wip/merge-round-7b7
wip/merge-round-7b6
wip/merge-round-7b5
wip/merge-round-7b4
wip/7b-reconcile
job/appupdate-1059
job/nfd-1044
wip/appupdate-1059
job/e2e-7b
job/loop-1062
wip/loop-1062
job/pdfprev-1045
job/invtoggle-1053
wip/pdfprev-1045
wip/nfd-1044
wip/invtoggle-1053
job/7bfix-e2e
job/mailstress-b
wip/7bfix-e2e
wip/mailstress-b
job/7bfix-adv
wip/7bfix-adv
job/mailstress-a
job/stack-1054
wip/stack-1054
wip/mailstress-a
job/mailstress-1038
wip/mailstress-1038
job/upload500-1051
wip/upload500-1051
job/share-1034
wip/share-1034
job/syncerr-1037
job/7bfix-photos
wip/7bfix-photos
job/paste-1036
job/setside-1039
wip/setside-1039
wip/paste-1036
job/lease-1042
wip/syncerr-1037
wip/lease-1042
job/7bfix-data
job/passkeybind-1043
wip/apprevoke-1041
job/invite-1035
wip/invite-1035
job/merge-round-7b2
wip/merge-round-7b2
job/mailproxy-486
job/apprevoke-1041
job/rebuild-1033
job/pillborder-1029
wip/pillborder-1029
wip/mailproxy-486
wip/applemail-486
job/headless-998
wip/headless-998
job/groups-1028
wip/groups-1028
job/rebuildwarn-1016
wip/rebuildwarn-1016
job/startup-1011
wip/startup-1011
job/monthpill-1009
job/bgthumb-1025
job/sharetitle-1012
wip/monthpill-1009
wip/bgthumb-1025
wip/sharetitle-1012
job/canvas-cards-977
wip/canvas-cards-977
job/canvas-pencil-978
job/canvas-sketch-990
wip/canvas-sketch-990
wip/canvas-pencil-978
job/canvas-files-989
wip/canvas-files-989
job/canvas-collab-991
wip/canvas-collab-991
job/weekscroll-1018
wip/weekscroll-1018
wip/canvas-core-976
job/canvas-core-976
job/round-drag
wip/round-drag
job/round-settings
job/browserfix
wip/oapi-974
job/oapi-974
job/hist2-integrate
job/mailhtml-726
wip/mailhtml-726
wip/hist2-integrate
job/moneyfu-984
job/drag-1015
wip/drag-1015
job/rename-1017
wip/rename-1017
job/hist2-api
wip/hist2-api
job/oneacct-1014
wip/oneacct-1014
wip/moneyfu-984
job/hist2-bench
job/hist2-restore
wip/hist2-bench
job/hist2-write
job/hotfix-724
wip/hotfix-724
wip/hist2-write
wip/hist2-restore
job/hist2-store
job/hist2-ui
wip/hist2-ui
wip/hist2-store
job/searchstarve-965
job/shutdown-963
wip/shutdown-963
wip/pubedit-981
job/pubedit-981
job/analytics-973
wip/searchstarve-965
job/authflash-850
job/weeklane-969
job/pvtitle-1004
job/hist-975
wip/authflash-850
job/voicepill-617
wip/pvtitle-1004
job/headring-1003
wip/weeklane-969
wip/voicepill-617
wip/headring-1003
wip/analytics-973
job/agentscope-980
wip/thumbsandbox-988
job/thumbsandbox-988
wip/hist-975
job/links-856
wip/links-856
job/davetag-966
wip/davetag-966
job/filesstorm-1000
job/hoverpad-725
wip/filesstorm-1000
job/ffmpegblas-993
job/merge-round-7a
wip/hoverpad-725
wip/ffmpegblas-993
job/nowdot-1002
wip/verify-7a
job/noteid-857
wip/nowdot-1002
wip/noteid-857
wip/merge-round-7a
wip/agentscope-980
job/imapedge
job/a11yfix2
wip/imapedge-941
wip/imapedge
wip/a11yfix2
job/notetask-986
job/logheading
wip/logheading-998
job/textthumb-652
job/photolive-987
wip/photolive-987
job/davactive-983
job/savefix-985
job/tabicons-607
wip/davactive-983
wip/tabicons-607
wip/notetask-986
wip/savefix-985
job/dirid-627
job/buildspeed-1007
wip/dirid-627
job/agenda-decks
job/perfguards-impl
job/undo-a11y
wip/undo-a11y
job/mailperf
job/wal-824
wip/settings-50
job/settings-50
job/notesfilter-606
wip/notesfilter-606
job/surfaces-p2
wip/wal-824
job/maillayouts
wip/mailperf
wip/maillayouts
job/taskmeta-659
job/money-ident
wip/money-ident
wip/taskmeta-659
job/errstates
wip/perfguards-impl
job/headings-881
wip/headings-881
wip/errstates
job/voice-619
job/gaps-827
job/notesperf
wip/notesperf
wip/voice-619
job/hddsql-549
job/perf-stream-668
wip/perf-stream-668
wip/deeplinks-fix
job/deeplinks-fix
job/authfix
job/docsfix-rust
wip/docsfix-rust
job/webperf
job/docsfix-web
job/datafix2
job/webdav-lock-476
job/copyfix
wip/copyfix
wip/webperf
job/focus-658
wip/protofix
job/mediafix
job/protofix
wip/mediafix
job/agentfix
job/hhmm-724
wip/agentfix
job/undo-722
job/reuse
wip/webdav-lock-476
wip/reuse
job/scopefix
job/datafix
wip/hhmm-724
wip/undo-722
job/surfaces-p1
wip/hddsql-549
job/voicememos-618
wip/datafix2
wip/surfaces-p1
job/fix-940
wip/fix-940
job/blaze-surfaces
wip/datafix
wip/blaze-surfaces
job/taskday-655
job/linknav-639
wip/linknav-639
wip/gaps-827
job/isolation-707
job/audiophotos-720
wip/audiophotos-720
job/advfind-664
wip/voicememos-618
wip/taskday-655
wip/isolation-707
wip/advfind-664
wip/scopefix
wip/focus-658
job/testgaps
wip/testgaps
job/overscroll-718
wip/authfix
job/deps
wip/overscroll-718
job/rev2-agentfix
job/rev2-money-ident
job/rev2-mailperf
wip/deps
job/hardening-728
wip/hardening-728
job/searchgen-832
wip/searchgen-832
job/photopw-849
job/mailsql-825
wip/photopw-849
job/sharefix
wip/sharefix
job/rev2-mailhtml-726
job/rev2-perfguards
job/copyval-723
job/lightglass-r2
wip/lightglass-r2
wip/docsfix-web
job/copy-audit
job/macinterop-staging-r2
job/design-sync
job/rev2-taskmeta-659
job/rev2-webperf
job/docs-audit
job/rev2-advfind-664
job/rev2-mailproxy-486
job/states-audit
job/rev2-datafix
job/design-drift
job/test-gaps
job/rev2-voicememos-618
job/rev2-mediafix
job/rev2-deps
job/rev2-datafix2
job/licence-audit
job/issue-hygiene
job/rev2-protofix
job/rev2-voice-619
job/rev2-isolation-707
job/rev2-surfaces-p1
job/deeplink-audit2
job/rev2-audiophotos-720
wip/test-gaps
job/rev2-overscroll-718
job/rev2-undo-722
wip/states-audit
job/rev2-dropmd-719
job/rev2-linknav-639
job/merge-7b-plan
wip/merge-7b-plan
job/rev2-taskday-655
wip/mailsql-825
job/rev2-webdav-lock-476
job/rev2-browserfix
wip/design-drift
job/rev2-hddsql-549
wip/deeplink-audit2
job/rev2-scopefix
job/rev2-authfix
job/rev2-hardening-728
job/rev2-wal-824
job/rev2-sharefix
job/calsidebar-638
job/chrome-audit
job/ioperf
wip/ioperf
wip/chrome-audit
wip/calsidebar-638
job/dropmd-719
wip/dropmd-719
job/ocr-build
wip/ocr-build
job/blaze-settings
wip/copyval-723
job/toastring-721
wip/toastring-721
job/deployfix-732
wip/deployfix-732
wip/blaze-settings
job/money-import-recheck
job/rev-a11y
job/perf-arch-db
job/rev-7b-data
wip/textthumb-652
wip/perf-arch-db
job/sec-protocols
job/sidehdr-660
job/rev-7b-security
job/research-surfaces
job/rev-design-gaps
job/rev-mcp-api
wip/sidehdr-660
job/perf-arch-memory
wip/sec-protocols
job/perf-arch-bundle
job/snapedge-714
wip/rev-mcp-api
job/sec-supplychain
wip/research-surfaces
job/perf-arch-sync
job/rev-consistency
job/perf-arch-server
wip/perf-arch-server
wip/perf-arch-memory
job/perf-arch-io
job/perf-arch-client
job/sec-fs
job/sec-mcp-scopes
job/sec-sharing
job/perf-guards
job/sec-browser
job/sec-admin-deploy
job/sec-auth
wip/snapedge-714
job/bgpicker-717
wip/perf-arch-bundle
wip/money-import-recheck
job/advsetup-654
wip/bgpicker-717
wip/advsetup-654
job/burst-709
job/kbdcaps-710
job/app-pw-chooser
wip/burst-709
wip/app-pw-chooser
job/imaptest-625
wip/kbdcaps-710
job/fix-499
wip/fix-499
job/perf-mut-667
job/calimg-589
job/perf-snap-666
wip/calimg-589
wip/perf-snap-666
wip/perf-mut-667
job/perf-cache-665
wip/perf-cache-665
job/voicefiles-620
wip/voicefiles-620
job/admin-burst-705
wip/admin-burst-705
job/voicememos-review
wip/voicememos-review
wip/ryw-653
job/ryw-653
job/writeonopen-661
job/instant-663
wip/writeonopen-661
job/money-import-review
wip/money-import-review
wip/importjs-610
review/integrations-407-round6
wip/integrations-review
job/dragghost-612
wip/dragghost-612
job/integrations
wip/integrations
job/decider-656
job/merge-round-6
job/perf-rerun
wip/merge-round-6
job/integrations-review-round5
job/selalign-576
wip/selalign-576
job/mcp-events-491
job/files-631
job/cal-e2e-569
wip/cal-e2e-569
job/reload-423
wip/reload-423
wip/mcp-events-491
wip/files-631
job/notesbridge-644
wip/notesbridge-644
job/editor-series
job/calcard-series
wip/calcard-series
job/mcp-events-review-491
wip/mcp-events-review
wip/editor-series
job/quirks-546
job/integrations-recheck
job/tocrail-636
wip/tocrail-636
wip/quirks-546
wip/reminders-643
job/reminders-643
wip/davscale-573
job/davscale-573
job/integrations-review
wip/ocr-eval-584
job/ocr-eval-584
job/esc-537
wip/esc-537
job/toastname-586
wip/toastname-586
job/submenu-579
wip/submenu-579
job/tasks-mode
wip/tasks-mode
job/agentdocs-630
job/dupwrite-634
wip/agentdocs-630
wip/dupwrite-634
job/lightglass-588
wip/lightglass-588
job/tabswitch-549
job/ghosttask-623
wip/ghosttask-623
job/toaststack-616
job/weekstate-609
job/mailsync-613
wip/mailsync-613
wip/weekstate-609
job/maildup-626
wip/tabswitch-549
wip/maildup-626
wip/toaststack-616
job/motion-611
wip/motion-611
job/tlstest-601
wip/tlstest-601
job/perf-495
job/floating-sheet
wip/floating-sheet
job/remdup-585
wip/remdup-585
job/fix-502
wip/fix-502
job/attachplay-622
job/perf-batch
wip/perf-batch-563
wip/perf-495
hotfix/mail-sync-diag
job/mail-m3
wip/mail-m3
job/attach-poof-603
job/calhover-608
job/editorbar-604
job/mentions-605
job/merge-round-4
job/allday-514
wip/merge-round-4
wip/allday-514
job/merge-round-4a
wip/merge-round-4a
job/sharestack-580
job/fix-501
wip/sharestack-580
wip/fix-501
job/perf-batch-563
job/apw-cache-review
wip/apw-cache-review
job/probe-520
wip/probe-520
job/mac-393
wip/mac-393
job/header-571
job/flake-513
wip/flake-513
job/docs-thumb-547
wip/header-571
job/webcal-572
wip/webcal-572
wip/shortcuts-542
job/shortcuts-542
wip/docs-thumb-547
job/caldav-stress
wip/caldav-stress
wip/sweep-478
job/apw-cache-512
wip/apw-cache-512
job/money-empty-540
wip/restart-505
wip/money-empty-540
wip/fix-510
job/restart-505
job/fix-503
job/perf-496
wip/perf-496
job/fix-498
wip/fix-498
job/info-inspector-465
wip/info-inspector-465
job/fix-510
job/fix-507
wip/fix-507
wip/fix-503
job/fix-493
job/money-kinds
wip/money-kinds
job/hygiene-548
job/merge-round-3
wip/fix-493
job/drag-snap-536
wip/merge-round-3
wip/merge-round-0930
wip/drag-snap-536
job/align-538
wip/align-538
job/bg-flash
wip/bg-flash
job/money-import
job/search-count-544
wip/search-count-544
wip/money-import
job/settings-key-541
wip/settings-key-541
job/toast-539
job/preview-421
wip/preview-421
wip/toast-539
job/tasks-500-531
job/title-plain-526
wip/title-plain-526
wip/tasks-500-531
job/notes-bridge
wip/parity-484
job/parity-484
job/files-slow
job/crash-525
wip/notes-bridge
wip/files-slow
wip/crash-525
job/kbd-motion-527
wip/bg-422
job/analytics-504
wip/analytics-504
wip/kbd-motion-527
job/upload-pill-523
wip/upload-pill-523
wip/tray-order
job/tray-order
wip/overflow-mid
wip/merge-round-2
job/perf-494
wip/perf-494
wip/mcp-fast-492
wip/motion-477
wip/asr-ab-489
wip/theme-variants-506
wip/overflow-511
wip/week-header-508
wip/attach-427
job/dav-delete-471
job/iso-435
wip/iso-435
wip/files-sel-keys
wip/dav-delete-471
job/align-253
job/siwc-490
wip/siwc-490
job/money-kinds-review
wip/align-253
wip/money-kinds-review
job/small-bugs-3
wip/overlay-title-487
wip/multiget-500
wip/hidden-420
wip/webcal-ui
wip/webcal-431
job/perf-367
job/location
wip/small-bugs-3
wip/location
wip/perf-367
wip/admin-deny-483
job/tag-unicode-473
wip/tag-unicode-473
job/blur-436
wip/photos-470
wip/blur-436
wip/small-bugs-4
wip/hunt-20260930
wip/settings-hdr-482
wip/chips-416
job/dedup-375
wip/dedup-375
job/doc-stack
wip/doc-stack
job/tokens-literals
wip/tokens-literals
job/jobs-leftovers
wip/send-fast
wip/paste-467
wip/money-numbers
job/money-plugin
wip/money-plugin
job/break-dav
wip/merge-batch
wip/crossday-469
wip/mac-verify
wip/mail-m2
wip/break-dav
wip/money-review2
job/money-md
job/modes-424
wip/money-md
wip/jobs-leftovers
job/agenda-413
wip/agenda-413
wip/modes-424
job/recog-417
wip/recog-417
wip/bounce-425
wip/ab-384-luna
job/webdav-perf
wip/webdav-perf
job/toast-ring
wip/toast-ring
job/money-review
wip/money-review
wip/micro-motion
wip/settings-card
wip/minical
job/notes-imap-428
job/least-priv
wip/ui-small-2
wip/flaky-426
wip/drag-end-418
job/jank
wip/jank
wip/least-priv
wip/docs-site
job/agenda
job/sec-batch
wip/sec-batch
wip/per-user-index
job/area-calendars
wip/area-calendars
job/parity
wip/parity
job/documents-research
wip/documents-research
job/test-infra
job/reminders-sync
wip/small-bugs-2
wip/reminders-sync
wip/gestures
job/google-oauth
wip/tags-merge
wip/tags
job/e2e-theme
wip/e2e-theme
job/icon-align
wip/test-infra
wip/select-align
wip/editor-385
job/voice
wip/webdav
job/webdav
job/app-pw-ui
job/editor-integrity
wip/editor-integrity
wip/voice
wip/quota
wip/cal-followups
wip/icon-align
job/composer-scale
wip/composer-scale
job/jobs-page
wip/jobs-page
job/hig-type
wip/hig-type
wip/app-pw-ui
job/motion-spring
job/mcp
wip/motion-spring
wip/mcp
job/small-bugs
wip/push-hosts
job/profile-sign
wip/touch-369
wip/profile-sign
job/mobile-focus
wip/mobile-focus
wip/ui-polish-354
wip/small-bugs
wip/dup-task
job/toast-polish
job/app-pw-scopes
wip/toast-polish
wip/app-pw-scopes
wip/cli-agent
wip/selection-pills
job/preview-attach
wip/preview-attach
job/dav-proppatch
wip/dav-proppatch
wip/cal-switcher
job/atomic-race
wip/atomic-race
job/photos-shared
wip/photos-shared
wip/cal-grid
wip/note-rewrite
wip/search-rebuild
job/mail-m1
job/paperless-import
wip/paperless-import
wip/mail-m1
wip/hidden-activity
wip/search-d
wip/pricing-research
wip/cursors
wip/auto-scheme
job/single-pills
wip/single-pills
wip/xuser-matrix
wip/money-format
wip/app-pw-setup
wip/purge-dos
wip/vault-health
wip/caldav-apple
wip/xuser-audit
wip/e2e-green
wip/tabbar
wip/adv-harness
wip/maple-mono
job/search-fix
wip/search-fix
wip/search-perf-c
job/adv-harness
wip/sidebar-headers
job/glass
wip/temp-index
job/polish
wip/polish
wip/file-protocols
wip/money-research
wip/glass
wip/voice-models
wip/collab-redo
job/voice-research
wip/hunt-20260928
wip/notes-actions-research
wip/search-pad
wip/search-perf
wip/search-sticky
wip/editor-undo
wip/chrome-rules
wip/motion
wip/appearance-research
wip/appearance
wip/audit-bugs
wip/cal-glass
wip/block-actions
wip/authz-order
wip/event-stripes
wip/chrome-sidebar
wip/auth-flaky
wip/robust-2
wip/gate-fix
wip/menu-blur
wip/import-calternaljs
wip/tray-fix
job/import-calternaljs
wip/index-order
wip/audit-fixes
wip/search-chevrons
research/mail
wip/phone-chrome
wip/dedup-break
wip/csp
wip/ui-audit
wip/select-toast
wip/perf
wip/flat-layout
wip/fonts
wip/event-tint
wip/sync-converge
wip/data-split
wip/glass-audit
wip/robustness
wip/sync-chaos
wip/search-thumbs
wip/fuzz
wip/menu-icons
wip/search-pill
wip/sync-changing
wip/heading-links
wip/date-formats
wip/a11y
wip/break-editor
wip/e2e-fix
wip/settings-sections
wip/sync-root-guard
wip/search-palette
wip/share-edit
job/toasts
wip/toasts
wip/cont-analytics
wip/authz-review
wip/popovers
wip/overlay-glass
wip/change-feed
wip/editor-modes
wip/composer-align
wip/cont-agenda
wip/agenda-merge
job/agent-conventions
wip/agent-conventions
wip/backend-misc
job/route-audit
wip/route-audit
wip/ui-batch
wip/heif-hardening
wip/grid-resize
wip/ask-page
wip/webmcp
job/deeplink-audit
wip/deeplinks
wip/shortcuts
wip/cont-tz-days
main
No results found.
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
kayg/calternal#350
No description provided.