kayg/calternal
Watch
1
0
Fork
You've already forked calternal
 0
Code Issues 803 Pull requests Projects Releases Packages Wiki Activity Actions 472

Non-ASCII tags are truncated by the Log line reader ('#café' becomes tag 'caf' plus 'é' in the title) #473

New issue
Closed
opened 2026-09-30 02:47:18 +00:00 by kayg · 12 comments
kayg commented 2026-09-30 02:47:18 +00:00
Owner
Copy link

Found in the #468 adversarial round (tests/adversarial/log_batch.mjs, job/send-fast).

Observed. POST /api/v1/notes/journal/log/batch (and the single /journal/log, which uses the same parse_composer_entry) with the text café 🧪 #café stores the title café 🧪 é and the tag area/caf. The server line reader stops a tag at the first non-ASCII character. The web composer sends canonical text from the client NLP, so a Hebrew tag typed in the composer (#חיים in the composer e2e) also stays in the title.

Expected. One rule for tag characters in the client NLP, the server line reader and the Index (notes_index.rs, markdown.rs use is_ascii_alphanumeric). Either accept Unicode letters in tags everywhere, or reject/keep the whole #word as text; never split a word into a truncated tag plus a stray letter.

Severity. Not a merge blocker: no data is lost (the bytes stay in the title), but the tag is wrong and the title is changed.

Not fixed in #468 (out of scope: the batch path only reuses the existing parser).

Found in the #468 adversarial round (`tests/adversarial/log_batch.mjs`, job/send-fast). **Observed.** `POST /api/v1/notes/journal/log/batch` (and the single `/journal/log`, which uses the same `parse_composer_entry`) with the text `café 🧪 #café` stores the title `café 🧪 é` and the tag `area/caf`. The server line reader stops a tag at the first non-ASCII character. The web composer sends canonical text from the client NLP, so a Hebrew tag typed in the composer (`#חיים` in the composer e2e) also stays in the title. **Expected.** One rule for tag characters in the client NLP, the server line reader and the Index (`notes_index.rs`, `markdown.rs` use `is_ascii_alphanumeric`). Either accept Unicode letters in tags everywhere, or reject/keep the whole `#word` as text; never split a word into a truncated tag plus a stray letter. **Severity.** Not a merge blocker: no data is lost (the bytes stay in the title), but the tag is wrong and the title is changed. Not fixed in #468 (out of scope: the batch path only reuses the existing parser).
gate-output.txt
332 KiB
document-review-evidence.txt
4.3 KiB
kayg commented 2026-09-30 03:43:22 +00:00
Author
Owner
Copy link

Starting #473 on branch job/tag-unicode-473, based on dfb5964a2f. I’m tracing the shared tag vectors and all Rust/TypeScript parser callers before making the Unicode/NFC change.

Starting #473 on branch job/tag-unicode-473, based on dfb5964a2fcf13dc8b9a50a319eee09bc386f322. I’m tracing the shared tag vectors and all Rust/TypeScript parser callers before making the Unicode/NFC change.
kayg commented 2026-09-30 04:04:57 +00:00
Author
Owner
Copy link

Finding: the new decomposed-accent vector also exposed a Note-title splice bug: canonical dedup kept only the first tag span, so + combining acute remained in the title when it duplicated . I changed Note-title handling to scan every source span and dedupe only the returned NFC Tag values.

Finding: the new decomposed-accent vector also exposed a Note-title splice bug: canonical dedup kept only the first tag span, so + combining acute remained in the title when it duplicated . I changed Note-title handling to scan every source span and dedupe only the returned NFC Tag values.
kayg commented 2026-09-30 05:52:49 +00:00
Author
Owner
Copy link

Search verification finding: cargo test -p calternal-search compiled successfully. Its indexer suite passed 18/20 tests; a_file_trashed_during_its_add_never_appears_in_search and search_drops_a_hit_whose_file_is_gone_and_queues_its_removal each timed out in the shared wait_for_hit helper while looking for ordinary ASCII file contents (zebracorn, back). The helper retries for 5 seconds. The shared-vector tag operator test passed. The failure is outside the changed tag fields; I will do one isolated check and leave existing expectations unchanged.

Search verification finding: `cargo test -p calternal-search` compiled successfully. Its indexer suite passed 18/20 tests; `a_file_trashed_during_its_add_never_appears_in_search` and `search_drops_a_hit_whose_file_is_gone_and_queues_its_removal` each timed out in the shared `wait_for_hit` helper while looking for ordinary ASCII file contents (`zebracorn`, `back`). The helper retries for 5 seconds. The shared-vector tag operator test passed. The failure is outside the changed tag fields; I will do one isolated check and leave existing expectations unchanged.
kayg commented 2026-09-30 06:12:02 +00:00
Author
Owner
Copy link

Search follow-up: cargo clippy -p calternal-search --all-targets -- -D warnings passed. The parallel indexer suite had 2/20 timeout failures, but cargo test -p calternal-search --test indexer -- --test-threads=1 passed 20/20, including both cases. This confirms load-sensitive timing in the existing tests; expectations and behavior were not changed.

Search follow-up: `cargo clippy -p calternal-search --all-targets -- -D warnings` passed. The parallel indexer suite had 2/20 timeout failures, but `cargo test -p calternal-search --test indexer -- --test-threads=1` passed 20/20, including both cases. This confirms load-sensitive timing in the existing tests; expectations and behavior were not changed.
kayg commented 2026-09-30 07:01:07 +00:00
Author
Owner
Copy link

Web check finding: after installing the locked Bun dependencies, bun run check found a TypeScript error in the new Composer pass-through test fixture. Its empty tags: [] arrays inferred as never[], so assigning shared vector values failed. I am fixing the fixture types; production code is not implicated.

Web check finding: after installing the locked Bun dependencies, `bun run check` found a TypeScript error in the new Composer pass-through test fixture. Its empty `tags: []` arrays inferred as `never[]`, so assigning shared vector values failed. I am fixing the fixture types; production code is not implicated.
kayg commented 2026-09-30 07:17:58 +00:00
Author
Owner
Copy link

Web gate findings: bun run check now passes. The full bun run test run completed 842 tests and reported 15 existing tests timing out at Vitest's 5-second limit across unrelated UI suites while the shared host had competing test/build jobs. It also could not collect the modified Composer.svelte.test.ts: Vite gives that test a non-file import.meta.url, which readFileSync(URL) rejects. I am switching shared-vector reads in the three affected tests to the repository's existing process.cwd() path pattern, then I will run those changed tests directly. No existing expectations will change.

Web gate findings: `bun run check` now passes. The full `bun run test` run completed 842 tests and reported 15 existing tests timing out at Vitest's 5-second limit across unrelated UI suites while the shared host had competing test/build jobs. It also could not collect the modified `Composer.svelte.test.ts`: Vite gives that test a non-file `import.meta.url`, which `readFileSync(URL)` rejects. I am switching shared-vector reads in the three affected tests to the repository's existing `process.cwd()` path pattern, then I will run those changed tests directly. No existing expectations will change.
kayg commented 2026-09-30 07:20:47 +00:00
Author
Owner
Copy link

Web follow-up: all three changed test files pass serially (44/44 tests). The shared-vector read issue was resolved by using resolve(process.cwd(), '../../contracts/vectors/tags.v1.json'), matching the existing SidebarSectionHeader test pattern. The remaining full-suite failures were 15 unrelated tests timing out at 5 seconds; the other 842 tests passed.

Web follow-up: all three changed test files pass serially (44/44 tests). The shared-vector read issue was resolved by using `resolve(process.cwd(), '../../contracts/vectors/tags.v1.json')`, matching the existing SidebarSectionHeader test pattern. The remaining full-suite failures were 15 unrelated tests timing out at 5 seconds; the other 842 tests passed.
kayg commented 2026-09-30 07:44:22 +00:00
Author
Owner
Copy link

#473 implementation report

Head: c42843a48 (includes the required merge from origin/dev; no push).

Built: Shared tag parsing now accepts Unicode letters and digits, combining marks after the first character, namespaces, and NFC-equivalent spellings. Rust keeps original byte spans while returning NFC values. Notes, Composer, Tasks, Search, Tags, Calendar categories, and Money payee-tag boundaries use the shared grammar or canonical projections. Added the requested Unicode cases and caller vectors. Composer NLP still uses Rust as the source of truth; web tests pin transport and search-pill behavior.

Files: Cargo.lock; crates/calternal-notes-core/ parser, composer, dayfile, link, task, and vector parity files; crates/calternal-search/src/{index.rs,operators.rs}; crates/calternal-tags/src/lib.rs; crates/calternal-money/{Cargo.toml,src/edit.rs,src/ledger.rs}; crates/plugins/calendar/src/client/mod.rs; contracts/vectors/{README.md,tags.v1.json}; docs/tags.md; and the four Composer/Search web source and test files.

Decisions: A tag starts with a Unicode letter or _; later characters also allow Unicode numbers, combining marks, _, /, and -. Digit-first #42 remains plain text. Canonical values are NFC; source Note spelling stays intact. The Composer does not gain a TypeScript NLP parser.

Gate output:

cargo fmt --all --check
(exit 0, no output)

cargo clippy -p calternal-notes-core --all-targets -- -D warnings
Finished `dev` profile [unoptimized + debuginfo] target(s) in 19.59s

cargo test -p calternal-notes-core
504 passed; 0 failed
13 passed; 0 failed
5 passed; 0 failed
7 passed; 0 failed
12 passed; 0 failed

cargo clippy -p calternal-tags --all-targets -- -D warnings
Finished `dev` profile [unoptimized + debuginfo] target(s) in 1m 31s
cargo test -p calternal-tags
11 passed; 0 failed

cargo clippy -p calternal-money --all-targets -- -D warnings
Finished `dev` profile [unoptimized + debuginfo] target(s) in 9.70s
cargo test -p calternal-money
15 passed; 0 failed
11 passed; 0 failed
2 passed; 0 failed

cargo test -p calternal-plugin-calendar (pre-merge)
52 passed; 0 failed
1 passed; 0 failed
3 passed; 0 failed
cargo clippy -p calternal-plugin-calendar --all-targets -- -D warnings (pre-merge)
Finished `dev` profile [unoptimized + debuginfo] target(s) in 29m 02s

cargo clippy -p calternal-search --all-targets -- -D warnings (pre-merge)
Finished `dev` profile [unoptimized + debuginfo] target(s) in 12m 55s
cargo test -p calternal-search
33 passed; 0 failed; 1 ignored
18 passed; 2 failed (parallel indexer wait timeouts)
cargo test -p calternal-search --test indexer -- --test-threads=1
20 passed; 0 failed

bun run check (after the test path fix, pre-merge)
svelte-check found 0 errors and 0 warnings
bun run test (pre-merge)
Tests  15 failed | 842 passed (857)
error: script "test" exited with code 1
bun run test --maxWorkers=1 src/lib/composer/Composer.svelte.test.ts src/lib/composer/nlp.test.ts src/lib/search/query.test.ts
Test Files  3 passed (3)
Tests  44 passed (44)

Known gaps: The full web suite was not rerun after fixing its shared-vector path; 15 unrelated tests had hit Vitest's 5-second timeout under concurrent host load. The Search parallel run had two indexer hit-wait timeouts; both passed in the serial indexer run, with expectations unchanged. The post-merge Search clippy retry was stopped while waiting on the shared Cargo package-cache lock. Calendar and web checks passed before the required merge; only formatting, Notes core, Tags, and Money were rerun after it. No live-server adversarial round or screenshot set was produced; no route schema or layout changed. Target cleanup is in progress.

#473 implementation report **Head:** `c42843a48` (includes the required merge from `origin/dev`; no push). **Built:** Shared tag parsing now accepts Unicode letters and digits, combining marks after the first character, namespaces, and NFC-equivalent spellings. Rust keeps original byte spans while returning NFC values. Notes, Composer, Tasks, Search, Tags, Calendar categories, and Money payee-tag boundaries use the shared grammar or canonical projections. Added the requested Unicode cases and caller vectors. Composer NLP still uses Rust as the source of truth; web tests pin transport and search-pill behavior. **Files:** `Cargo.lock`; `crates/calternal-notes-core/` parser, composer, dayfile, link, task, and vector parity files; `crates/calternal-search/src/{index.rs,operators.rs}`; `crates/calternal-tags/src/lib.rs`; `crates/calternal-money/{Cargo.toml,src/edit.rs,src/ledger.rs}`; `crates/plugins/calendar/src/client/mod.rs`; `contracts/vectors/{README.md,tags.v1.json}`; `docs/tags.md`; and the four Composer/Search web source and test files. **Decisions:** A tag starts with a Unicode letter or `_`; later characters also allow Unicode numbers, combining marks, `_`, `/`, and `-`. Digit-first `#42` remains plain text. Canonical values are NFC; source Note spelling stays intact. The Composer does not gain a TypeScript NLP parser. **Gate output:** ```text cargo fmt --all --check (exit 0, no output) cargo clippy -p calternal-notes-core --all-targets -- -D warnings Finished `dev` profile [unoptimized + debuginfo] target(s) in 19.59s cargo test -p calternal-notes-core 504 passed; 0 failed 13 passed; 0 failed 5 passed; 0 failed 7 passed; 0 failed 12 passed; 0 failed cargo clippy -p calternal-tags --all-targets -- -D warnings Finished `dev` profile [unoptimized + debuginfo] target(s) in 1m 31s cargo test -p calternal-tags 11 passed; 0 failed cargo clippy -p calternal-money --all-targets -- -D warnings Finished `dev` profile [unoptimized + debuginfo] target(s) in 9.70s cargo test -p calternal-money 15 passed; 0 failed 11 passed; 0 failed 2 passed; 0 failed cargo test -p calternal-plugin-calendar (pre-merge) 52 passed; 0 failed 1 passed; 0 failed 3 passed; 0 failed cargo clippy -p calternal-plugin-calendar --all-targets -- -D warnings (pre-merge) Finished `dev` profile [unoptimized + debuginfo] target(s) in 29m 02s cargo clippy -p calternal-search --all-targets -- -D warnings (pre-merge) Finished `dev` profile [unoptimized + debuginfo] target(s) in 12m 55s cargo test -p calternal-search 33 passed; 0 failed; 1 ignored 18 passed; 2 failed (parallel indexer wait timeouts) cargo test -p calternal-search --test indexer -- --test-threads=1 20 passed; 0 failed bun run check (after the test path fix, pre-merge) svelte-check found 0 errors and 0 warnings bun run test (pre-merge) Tests 15 failed | 842 passed (857) error: script "test" exited with code 1 bun run test --maxWorkers=1 src/lib/composer/Composer.svelte.test.ts src/lib/composer/nlp.test.ts src/lib/search/query.test.ts Test Files 3 passed (3) Tests 44 passed (44) ``` **Known gaps:** The full web suite was not rerun after fixing its shared-vector path; 15 unrelated tests had hit Vitest's 5-second timeout under concurrent host load. The Search parallel run had two indexer hit-wait timeouts; both passed in the serial indexer run, with expectations unchanged. The post-merge Search clippy retry was stopped while waiting on the shared Cargo package-cache lock. Calendar and web checks passed before the required merge; only formatting, Notes core, Tags, and Money were rerun after it. No live-server adversarial round or screenshot set was produced; no route schema or layout changed. Target cleanup is in progress.
kayg commented 2026-09-30 07:46:12 +00:00
Author
Owner
Copy link

Final cleanup complete at head c42843a48935f5e4352d09720fe4076ae93315bc. cargo clean removed 14,150 files (7.6 GiB); the generated web dependencies and .svelte-kit output were removed. git status --short is empty.

Final cleanup complete at head `c42843a48935f5e4352d09720fe4076ae93315bc`. `cargo clean` removed 14,150 files (7.6 GiB); the generated web dependencies and `.svelte-kit` output were removed. `git status --short` is empty.
kayg commented 2026-09-30 09:36:36 +00:00
Author
Owner
Copy link

Merge round progress on job/merge-round-0930: both job branches and the one required origin/dev refresh are merged. Current committed head is 2ed9a9076; the worker and sandbox integration remain under test.

The real bubblewrap boundary test passes. It checks absent host paths, a read-only root, UID/GID 65534, stripped host environment, denied network sockets, inherited limits, denied native fork and permitted native threads. PDF stdin must have all four kernel seals and fit the 64 MiB cap. Explicit PDF and generated-SVG actions produce WebP; the PDF action rejects JPEG input. The source-inode concern in the older image/video modes is tracked separately in #501.

Contract regeneration has no diff. Rust per-crate gates continue on the shared host. Web checks pass. The full web suite had one 5-second font-menu timeout; that test passed alone. The real-server media round is running now. Production screenshots and the final gate report will follow.

Merge round progress on `job/merge-round-0930`: both job branches and the one required `origin/dev` refresh are merged. Current committed head is `2ed9a9076`; the worker and sandbox integration remain under test. The real bubblewrap boundary test passes. It checks absent host paths, a read-only root, UID/GID 65534, stripped host environment, denied network sockets, inherited limits, denied native fork and permitted native threads. PDF stdin must have all four kernel seals and fit the 64 MiB cap. Explicit PDF and generated-SVG actions produce WebP; the PDF action rejects JPEG input. The source-inode concern in the older image/video modes is tracked separately in #501. Contract regeneration has no diff. Rust per-crate gates continue on the shared host. Web checks pass. The full web suite had one 5-second font-menu timeout; that test passed alone. The real-server media round is running now. Production screenshots and the final gate report will follow.
kayg commented 2026-09-30 11:57:12 +00:00
Author
Owner
Copy link

Head: 40ccef12818eb27592994a2666021ee34b2b3cf5 on job/merge-round-0930.

Built: merged job/tag-unicode-473, then job/doc-stack, and merged the one required origin/dev refresh. Resolved Calendar token conflicts. Regenerated contracts without a diff. Refreshed the parity inventory for the merged batch Log caller.

Security verdict: the document renderer boundary passes the defensive audit after hardening. The native decoder has private namespaces, no network, a read-only root, UID/GID 65534, an inherited seccomp policy and bounded resources. Host Homes, data, secret-bearing host directories and extra parent descriptors are absent. The outer environment is cleared before bubblewrap starts, including its PID 1 monitor; monitor host-root and working-directory access are denied by the tested namespace. PDF input is a bounded, fully sealed memory file, not a Home inode. The fixed private symlink names only fd 0. Explicit PDF and generated-SVG actions select loaders. Native tools can create threads only. Complete Jobs and document renders have explicit wall budgets.

Files:

  • deploy/media-sandbox and deploy/media-sandbox-dropcaps.c: isolation, fixed actions, seals and native thread restrictions.
  • crates/calternal-fs/src/{lib.rs,thumbnails.rs}: bounded sealed input helper and regression tests.
  • crates/plugins/files/src/thumbnails.rs: early size/read bounds, shared media slot, fixed loaders, Job/render budgets and failure tests.
  • tests/adversarial/{media-sandbox-policy.c,test-document-sandbox.sh,prepare-media-runtime.sh,media_uploads.py,run.sh}: namespace, descriptor, input and bounded parser checks.
  • packages/ui/src/components/{calendar/GridColumn.svelte,files/FileThumb.svelte}: merged shared radius/Caption tokens.
  • apps/web/e2e/calendar-doc-stack.mjs: production Calendar, Files and Search evidence at 390/820/1440 in light/dark.
  • docs/{DESIGN.md,parity-exceptions.json,parity-matrix.md}: reasoning and the merged parity inventory.

Gates, verbatim:

cargo fmt --check: exit=0
cargo clippy -p calternal-notes-core --all-targets -- -D warnings: exit=0
cargo test -p calternal-notes-core: exit=0
cargo clippy -p calternal-tags --all-targets -- -D warnings: exit=0
cargo test -p calternal-tags: exit=0
cargo clippy -p calternal-fs --all-targets -- -D warnings: exit=0
cargo clippy -p calternal-money --all-targets -- -D warnings: exit=0
cargo test -p calternal-money: exit=0
cargo test -p calternal-fs: exit=0
cargo clippy -p calternal-plugin-calendar --all-targets -- -D warnings: exit=0
cargo test -p calternal-plugin-calendar: exit=0
cargo clippy -p calternal-plugin-files --all-targets -- -D warnings: exit=0
cargo test -p calternal-plugin-files: exit=0
cargo clippy -p calternal-plugin-notes --all-targets -- -D warnings: exit=0
cargo test -p calternal-plugin-notes: exit=0
cargo clippy -p calternal-search --all-targets -- -D warnings: exit=0
cargo test -p calternal-search: exit=101
cargo clippy -p calternal-server --all-targets -- -D warnings: exit=0
cargo test -p calternal-server: exit=0
cargo test -p calternal-search follow-up: exit=0

calternal-notes-core:

    Finished `dev` profile [unoptimized + debuginfo] target(s) in 25m 36s
    Finished `test` profile [unoptimized + debuginfo] target(s) in 2m 55s
test result: ok. 504 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.54s
test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.08s
test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.18s
test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.11s
test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

calternal-tags:

    Finished `dev` profile [unoptimized + debuginfo] target(s) in 22m 18s
    Finished `test` profile [unoptimized + debuginfo] target(s) in 33m 31s
test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 10.41s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

calternal-money:

    Finished `dev` profile [unoptimized + debuginfo] target(s) in 11m 23s
    Finished `test` profile [unoptimized + debuginfo] target(s) in 1m 57s
test result: ok. 15 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s
test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.16s
test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.49s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

calternal-plugin-calendar:

    Finished `dev` profile [unoptimized + debuginfo] target(s) in 11m 19s
    Finished `test` profile [unoptimized + debuginfo] target(s) in 12m 29s
test result: ok. 52 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.15s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s
test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.46s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

calternal-plugin-files:

    Finished `dev` profile [unoptimized + debuginfo] target(s) in 5m 29s
    Finished `test` profile [unoptimized + debuginfo] target(s) in 10m 46s
test result: ok. 134 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 385.38s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

calternal-plugin-notes:

    Finished `dev` profile [unoptimized + debuginfo] target(s) in 7m 53s
    Finished `test` profile [unoptimized + debuginfo] target(s) in 7m 46s
test result: ok. 126 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 142.82s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.61s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

calternal-search:

    Finished `dev` profile [unoptimized + debuginfo] target(s) in 12m 58s
    Finished `test` profile [unoptimized + debuginfo] target(s) in 9m 50s
test result: ok. 33 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 17.57s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.46s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s
test result: FAILED. 19 passed; 1 failed; 0 ignored; 0 measured; 0 filtered out; finished in 64.00s

calternal-server:

    Finished `dev` profile [unoptimized + debuginfo] target(s) in 11m 44s
    Finished `test` profile [unoptimized + debuginfo] target(s) in 12m 13s
test result: ok. 85 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 31.36s

calternal-fs:

    Finished `dev` profile [unoptimized + debuginfo] target(s) in 11m 43s
    Finished `test` profile [unoptimized + debuginfo] target(s) in 1m 50s
test result: ok. 41 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 35.08s
test result: ok. 42 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 45.87s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

The first Search suite failed while polling for the marker in the existing trash race test. The unchanged isolated test passed. The full follow-up passed (exit0) with RUST_TEST_THREADS=1, including every integration binary and doc tests. Both suite results are included above and in the attached raw logs.


running 1 test
test a_file_trashed_during_its_add_never_appears_in_search ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 19 filtered out; finished in 11.37s

test result: ok. 33 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 30.88s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 18.81s
test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.08s
test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 94.93s
test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s
test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s
test result: ok. 1 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 9.30s
test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s
test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

bun run check:

$ node scripts/check-type-tokens.mjs && svelte-kit sync && svelte-check --tsconfig ./tsconfig.json
Text sizes and UI shape values use shared role tokens.
Loading svelte-check in workspace: /home/kayg/Developer/calternal-wt/merge-check/apps/web
Getting Svelte diagnostics...

svelte-check found 0 errors and 0 warnings
exit=0

bun run test had one known 5-second font-menu timeout. The original suite and isolated rerun output are preserved. No expectation changed.

Error: Test timed out in 5000ms.
 Test Files  1 failed | 136 passed (137)
      Tests  1 failed | 891 passed (892)
 Test Files  1 passed (1)
      Tests  1 passed (1)

Generated-contract check exited 0; regenerated files have no diff. Parity, sandbox and production capture output:

Parity matrix: 187 web API actions, 113 shortcuts, 2 static commands, 131 menu actions, 30 settings groups, 169 actions with adapter gaps
document input must be a bounded sealed snapshot
document input must be a bounded sealed snapshot
document input must be a bounded sealed snapshot
width: 64
height: 64
PASS: document namespace, private input, inherited limits and network policy
PASS: PDF link/script metadata and bounded SVG references/entities stay isolated
PASS: explicit PDF and SVG loaders produce WebP; PDF action rejects JPEG
x86 policy build: exit=0
arm64 policy build: exit=0
CALENDAR DOC STACK SCREENSHOTS PASSED

The one real-server media round exited 1 for this SLOW-only finding. All other checks reported no finding. It was not repeated; the existing threshold is unchanged.

!! server health after crafted media uploads: status=200, elapsed=6.71s, body=b''
media upload findings: 1

Known gaps: #513 tracks the intermittent Search trash-race marker polling failure; the unchanged isolated test passed. #501 tracks the pre-existing image/video source-inode boundary; no native compromise was reproduced. #507 tracks a scheme preference inconsistency during multi-context review. #510 tracks rendering-kind ambiguity in shared thumbnail cache identity; it is a derived-preview finding. Blocking OS reads cannot be interrupted by async cancellation, although source reads/copies are byte-bounded. arm64 was cross-compiled; real sandbox execution was x86_64.

Decisions: fixed internal PDF/text actions; raw SVG uploads remain outside document mode; PDF snapshots are sealed and capped at 64 MiB; private /tmp is capped at 64 MiB. The complete thumbnail Job has 180 seconds, and document rendering has 60 seconds including snapshot/probe/both sizes. Minimal public addition in calternal-fs keeps all input filesystem work in that crate. Shared dev radius and Caption tokens win over literal values. These choices are recorded in DESIGN §39.

No push or deploy was issued. Issues remain open. Screenshots are attached to #410 for Claude; artifacts are not committed.

Cleanup output, verbatim:

     Removed 21798 files, 13.9GiB total
Job Rust, web and staged test outputs removed; artifacts retained.

Full raw gate output: #410 verbatim gate logs, #473 verbatim gate logs.

Head: `40ccef12818eb27592994a2666021ee34b2b3cf5` on `job/merge-round-0930`. **Built:** merged `job/tag-unicode-473`, then `job/doc-stack`, and merged the one required `origin/dev` refresh. Resolved Calendar token conflicts. Regenerated contracts without a diff. Refreshed the parity inventory for the merged batch Log caller. **Security verdict:** the document renderer boundary passes the defensive audit after hardening. The native decoder has private namespaces, no network, a read-only root, UID/GID 65534, an inherited seccomp policy and bounded resources. Host Homes, data, secret-bearing host directories and extra parent descriptors are absent. The outer environment is cleared before bubblewrap starts, including its PID 1 monitor; monitor host-root and working-directory access are denied by the tested namespace. PDF input is a bounded, fully sealed memory file, not a Home inode. The fixed private symlink names only fd 0. Explicit PDF and generated-SVG actions select loaders. Native tools can create threads only. Complete Jobs and document renders have explicit wall budgets. **Files:** - `deploy/media-sandbox` and `deploy/media-sandbox-dropcaps.c`: isolation, fixed actions, seals and native thread restrictions. - `crates/calternal-fs/src/{lib.rs,thumbnails.rs}`: bounded sealed input helper and regression tests. - `crates/plugins/files/src/thumbnails.rs`: early size/read bounds, shared media slot, fixed loaders, Job/render budgets and failure tests. - `tests/adversarial/{media-sandbox-policy.c,test-document-sandbox.sh,prepare-media-runtime.sh,media_uploads.py,run.sh}`: namespace, descriptor, input and bounded parser checks. - `packages/ui/src/components/{calendar/GridColumn.svelte,files/FileThumb.svelte}`: merged shared radius/Caption tokens. - `apps/web/e2e/calendar-doc-stack.mjs`: production Calendar, Files and Search evidence at 390/820/1440 in light/dark. - `docs/{DESIGN.md,parity-exceptions.json,parity-matrix.md}`: reasoning and the merged parity inventory. **Gates, verbatim:** ```text cargo fmt --check: exit=0 cargo clippy -p calternal-notes-core --all-targets -- -D warnings: exit=0 cargo test -p calternal-notes-core: exit=0 cargo clippy -p calternal-tags --all-targets -- -D warnings: exit=0 cargo test -p calternal-tags: exit=0 cargo clippy -p calternal-fs --all-targets -- -D warnings: exit=0 cargo clippy -p calternal-money --all-targets -- -D warnings: exit=0 cargo test -p calternal-money: exit=0 cargo test -p calternal-fs: exit=0 cargo clippy -p calternal-plugin-calendar --all-targets -- -D warnings: exit=0 cargo test -p calternal-plugin-calendar: exit=0 cargo clippy -p calternal-plugin-files --all-targets -- -D warnings: exit=0 cargo test -p calternal-plugin-files: exit=0 cargo clippy -p calternal-plugin-notes --all-targets -- -D warnings: exit=0 cargo test -p calternal-plugin-notes: exit=0 cargo clippy -p calternal-search --all-targets -- -D warnings: exit=0 cargo test -p calternal-search: exit=101 cargo clippy -p calternal-server --all-targets -- -D warnings: exit=0 cargo test -p calternal-server: exit=0 cargo test -p calternal-search follow-up: exit=0 ``` `calternal-notes-core`: ```text Finished `dev` profile [unoptimized + debuginfo] target(s) in 25m 36s Finished `test` profile [unoptimized + debuginfo] target(s) in 2m 55s test result: ok. 504 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.54s test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.08s test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.18s test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.11s test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ``` `calternal-tags`: ```text Finished `dev` profile [unoptimized + debuginfo] target(s) in 22m 18s Finished `test` profile [unoptimized + debuginfo] target(s) in 33m 31s test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 10.41s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ``` `calternal-money`: ```text Finished `dev` profile [unoptimized + debuginfo] target(s) in 11m 23s Finished `test` profile [unoptimized + debuginfo] target(s) in 1m 57s test result: ok. 15 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.16s test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.49s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s ``` `calternal-plugin-calendar`: ```text Finished `dev` profile [unoptimized + debuginfo] target(s) in 11m 19s Finished `test` profile [unoptimized + debuginfo] target(s) in 12m 29s test result: ok. 52 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.15s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.46s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ``` `calternal-plugin-files`: ```text Finished `dev` profile [unoptimized + debuginfo] target(s) in 5m 29s Finished `test` profile [unoptimized + debuginfo] target(s) in 10m 46s test result: ok. 134 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 385.38s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ``` `calternal-plugin-notes`: ```text Finished `dev` profile [unoptimized + debuginfo] target(s) in 7m 53s Finished `test` profile [unoptimized + debuginfo] target(s) in 7m 46s test result: ok. 126 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 142.82s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.61s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ``` `calternal-search`: ```text Finished `dev` profile [unoptimized + debuginfo] target(s) in 12m 58s Finished `test` profile [unoptimized + debuginfo] target(s) in 9m 50s test result: ok. 33 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 17.57s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.46s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s test result: FAILED. 19 passed; 1 failed; 0 ignored; 0 measured; 0 filtered out; finished in 64.00s ``` `calternal-server`: ```text Finished `dev` profile [unoptimized + debuginfo] target(s) in 11m 44s Finished `test` profile [unoptimized + debuginfo] target(s) in 12m 13s test result: ok. 85 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 31.36s ``` `calternal-fs`: ```text Finished `dev` profile [unoptimized + debuginfo] target(s) in 11m 43s Finished `test` profile [unoptimized + debuginfo] target(s) in 1m 50s test result: ok. 41 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 35.08s test result: ok. 42 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 45.87s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ``` The first Search suite failed while polling for the marker in the existing trash race test. The unchanged isolated test passed. The full follow-up passed (exit0) with RUST_TEST_THREADS=1, including every integration binary and doc tests. Both suite results are included above and in the attached raw logs. ```text running 1 test test a_file_trashed_during_its_add_never_appears_in_search ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 19 filtered out; finished in 11.37s ``` ```text test result: ok. 33 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 30.88s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 18.81s test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.08s test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 94.93s test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s test result: ok. 1 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 9.30s test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ``` `bun run check`: ```text $ node scripts/check-type-tokens.mjs && svelte-kit sync && svelte-check --tsconfig ./tsconfig.json Text sizes and UI shape values use shared role tokens. Loading svelte-check in workspace: /home/kayg/Developer/calternal-wt/merge-check/apps/web Getting Svelte diagnostics... svelte-check found 0 errors and 0 warnings exit=0 ``` `bun run test` had one known 5-second font-menu timeout. The original suite and isolated rerun output are preserved. No expectation changed. ```text Error: Test timed out in 5000ms. Test Files 1 failed | 136 passed (137) Tests 1 failed | 891 passed (892) Test Files 1 passed (1) Tests 1 passed (1) ``` Generated-contract check exited 0; regenerated files have no diff. Parity, sandbox and production capture output: ```text Parity matrix: 187 web API actions, 113 shortcuts, 2 static commands, 131 menu actions, 30 settings groups, 169 actions with adapter gaps document input must be a bounded sealed snapshot document input must be a bounded sealed snapshot document input must be a bounded sealed snapshot width: 64 height: 64 PASS: document namespace, private input, inherited limits and network policy PASS: PDF link/script metadata and bounded SVG references/entities stay isolated PASS: explicit PDF and SVG loaders produce WebP; PDF action rejects JPEG x86 policy build: exit=0 arm64 policy build: exit=0 CALENDAR DOC STACK SCREENSHOTS PASSED ``` The one real-server media round exited 1 for this SLOW-only finding. All other checks reported no finding. It was not repeated; the existing threshold is unchanged. ```text !! server health after crafted media uploads: status=200, elapsed=6.71s, body=b'' media upload findings: 1 ``` **Known gaps:** #513 tracks the intermittent Search trash-race marker polling failure; the unchanged isolated test passed. #501 tracks the pre-existing image/video source-inode boundary; no native compromise was reproduced. #507 tracks a scheme preference inconsistency during multi-context review. #510 tracks rendering-kind ambiguity in shared thumbnail cache identity; it is a derived-preview finding. Blocking OS reads cannot be interrupted by async cancellation, although source reads/copies are byte-bounded. arm64 was cross-compiled; real sandbox execution was x86_64. **Decisions:** fixed internal PDF/text actions; raw SVG uploads remain outside document mode; PDF snapshots are sealed and capped at 64 MiB; private `/tmp` is capped at 64 MiB. The complete thumbnail Job has 180 seconds, and document rendering has 60 seconds including snapshot/probe/both sizes. Minimal public addition in calternal-fs keeps all input filesystem work in that crate. Shared dev radius and Caption tokens win over literal values. These choices are recorded in DESIGN §39. No push or deploy was issued. Issues remain open. Screenshots are attached to #410 for Claude; artifacts are not committed. **Cleanup output, verbatim:** ```text Removed 21798 files, 13.9GiB total Job Rust, web and staged test outputs removed; artifacts retained. ``` Full raw gate output: [#410 verbatim gate logs](https://git.kayg.org/attachments/2399d8f5-d4b4-4f6c-a27f-b24a11c01e71), [#473 verbatim gate logs](https://git.kayg.org/attachments/80189bd0-1244-45a4-9094-954f887d8484).
kayg commented 2026-09-30 12:04:46 +00:00
Author
Owner
Copy link

Merged into dev at 8ac92b400 via merge round 1 (all per-crate gates; merged-tree web gates 0 errors, 892/892).

Merged into dev at 8ac92b400 via merge round 1 (all per-crate gates; merged-tree web gates 0 errors, 892/892).
kayg closed this issue 2026-09-30 12:04:47 +00:00
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
dev
wip/rev2-webperf
wip/rev2-money-ident
wip/restyle-notes
wip/previewcard-1098
wip/palette2-1123
wip/palette-1093
wip/onboard2-1141
wip/onboard-1141.aborted-early
wip/onboard-1141
wip/nlpchip-1127
wip/morph-1104
wip/merge-round-7c5
wip/merge-round-7c4
job/notifloop-1194
wip/merge-round-7c3
wip/merge-round-7c2
wip/merge-round-7c
wip/mchrome-1084
wip/mailghost2-1094
wip/mailghost-1094
wip/kbpreview2-1118
wip/kbpreview-1118
wip/kanban-1092
wip/importhang-1121
wip/hiderev-1153
wip/hide4-1153
wip/hide3-1153
wip/hide2-1153
wip/hide-1153
wip/editreg-1132
wip/editorrail3-1113
wip/editorrail2-1113
wip/editorrail-1113
wip/e2e-b2-1071
wip/e2e-b-1071
wip/draw4-1101
wip/draw3-1101
wip/draw2-1101
wip/draw-1101
wip/directory-1199-r
wip/directory-1199
wip/delete-1119
wip/collabrev-1197
wip/collabloss-1197
wip/cards2-1083
wip/cards-1083
wip/canvas-visual
wip/canvasvis2-976
wip/calhdr-1112
wip/calcards-1115
wip/browserfix
wip/blocks-1125
wip/allday-1107
wip/agenda-decks
wip/agenda-1086
wip/adv7c-1105
wip/txentry-1198
wip/trayicons2-1095
wip/trayicons-1095
job/onboard-1141
wip/sidebar3-1094
job/collabloss-1197
job/hide-1153
job/perf-1124
job/perf2-1124
job/tocrail-1191
job/restyle-settings
wip/restyle-settings
job/segmented-1200
wip/notifloop-1194
job/tagperf-1186
wip/tagperf-1186
wip/segmented-1200
job/restyle-files
job/tagdnd-1187
job/merge30
job/cards-1179
wip/cards2-1179
wip/cards-1179
wip/tocrail-1191
wip/tagdnd-1187
wip/restyle-files
wip/perf-1124
wip/merge30j
job/restyle-notes
job/wizchoices-1140
job/adv-1202
wip/wizchoices-1140
wip/restyle-1190
job/moneyfmt-1180
job/txentry-1198
wip/moneyfmt2-1180
wip/moneyfmt-1180-r
wip/moneyfmt-1180
job/pillglass-1189
job/flags-1181
wip/flags-1181
job/restyle-1190
job/restyle-mailmoney
job/restyle-search
job/settingsreg-1195
job/wizard-1140
site/website
wip/wizardrev2-1140
wip/wizardrev-1140
wip/wizard5-1140
wip/wizard4-1140
wip/wizard3-1140
wip/wizard2-1140
wip/wizard-1140
wip/pillglass-1189
wip/settingsreg-1195
job/merge29
job/fu-1171
wip/merge29j
wip/fu-1171
job/fu-1166
job/directory-1199
job/proflog-1204
job/txresearch-1188
wip/fu-1166
job/merge28
job/search-1066
wip/search-1066
wip/merge28j
job/gateslot-1182
job/bulkimport-1157
job/mailnet-1160
wip/mailnetrev-1160
wip/mailnet-1160
wip/bulkrev-1157
wip/bulkimport-1157
job/startup-1161
wip/startup-1161
job/merge27
job/linkcards-1151
wip/linkcards3-1151
wip/linkcards2-1151
wip/linkcards-1151
job/traydate-1144
wip/traydate3-1144
wip/traydate2-1144
wip/traydate-1144
job/draw-1101
wip/merge27j
job/blockpill-1152
wip/blockpill3-1152
wip/blockpill2-1152
wip/blockpill-1152
job/minihover-1149
wip/minihover2-1149
wip/minihover-1149
job/merge25
wip/merge25-r
wip/merge25b
wip/merge25
job/inspector-1129
job/tags-1110
wip/inspector3-1129
wip/inspector2-1129
wip/inspector-1129
wip/tagsrev-1110
wip/tags2-1110
wip/tags-1110
job/dates-1148
wip/datesrev-1148
wip/dates2-1148
wip/dates-1148
job/licence-1145
wip/licence2-1145
wip/licence-1145
job/selfhost-1156
job/merge23
wip/merge23
job/tagfilter-1109
wip/tagfilter2-1109
wip/tagfilter-1109
job/kbd-1134
wip/kbd2-1134
wip/kbd-1134
job/palfoot-1137
wip/selfhost-1156
wip/palfoot2-1137
wip/palfoot-1137
job/toggle-1158
wip/toggle-1158
job/kbpreview-1118
job/docratchet-1155
job/perflint-1133
job/devtests-1159
wip/docratchet-1155
wip/devtests-1159
job/segv-1136
wip/toast-1142
wip/segv-1136
job/toast-1142
job/blockreload-1147
wip/blockreload-1147
job/font-1150
wip/font-1150
job/importui-1120
job/minimonth-1149
wip/importui-1120
wip/minimonth-1149
job/depcheck-1146
wip/perflint-1133
wip/depcheck-1146
job/calcards-1115
job/blocks-1125
job/plus-1128
job/shift-1138
wip/plus2-1128
wip/plus-1128
wip/shift-1138
job/moneyfid-1130
job/editorrail-1113
wip/moneyrev-1130
wip/moneyfid-1130
job/noext-851
wip/noext-851
wip/noext3-851
wip/noext2-851
job/week-1135
wip/week-1135
job/editreg-1132
job/smoke-1122
wip/smoke-1122
job/docs-1143
job/palette2-1123
job/calhdr-1112
job/nlpchip-1127
job/mailghost-1094
job/reconnect-1131
wip/reconnect-1131
job/trayicons-1095
job/delete-1119
job/importhang-1121
job/cards-1083
job/palette-1093
job/mchrome-1084
job/e2e-a-1071
job/canvas-visual
job/previewcard-1098
job/allday-1107
wip/e2e-a2-1071
wip/e2e-a-1071
job/e2e-b-1071
job/adv7c-1105
job/kanban-1092
job/agenda-1086
job/merge-round-7c
job/morph-1104
wip/surfaces-p2
job/merge-round-9
wip/merge-round-9
job/7cfix-small
wip/7cfix-small
job/mailui-1078
job/merge-round-8
wip/merge-round-8
wip/mailui-1078
job/mailround-1038
job/applemail-accept
wip/settitle-1068
wip/mailround2-1038
wip/mailround-1038
wip/e2e-7b
job/crash-1069
wip/crash-1069
job/searchlost-1066
wip/searchlost-1066
job/7b-reconcile
job/flake-1065
wip/flake-1065
wip/merge-round-7b7
wip/merge-round-7b6
wip/merge-round-7b5
wip/merge-round-7b4
wip/7b-reconcile
job/appupdate-1059
job/nfd-1044
wip/appupdate-1059
job/e2e-7b
job/loop-1062
wip/loop-1062
job/pdfprev-1045
job/invtoggle-1053
wip/pdfprev-1045
wip/nfd-1044
wip/invtoggle-1053
job/7bfix-e2e
job/mailstress-b
wip/7bfix-e2e
wip/mailstress-b
job/7bfix-adv
wip/7bfix-adv
job/mailstress-a
job/stack-1054
wip/stack-1054
wip/mailstress-a
job/mailstress-1038
wip/mailstress-1038
job/upload500-1051
wip/upload500-1051
job/share-1034
wip/share-1034
job/syncerr-1037
job/7bfix-photos
wip/7bfix-photos
job/paste-1036
job/setside-1039
wip/setside-1039
wip/paste-1036
job/lease-1042
wip/syncerr-1037
wip/lease-1042
job/7bfix-data
job/passkeybind-1043
wip/apprevoke-1041
job/invite-1035
wip/invite-1035
job/merge-round-7b2
wip/merge-round-7b2
job/mailproxy-486
job/apprevoke-1041
job/rebuild-1033
job/pillborder-1029
wip/pillborder-1029
wip/mailproxy-486
wip/applemail-486
job/headless-998
wip/headless-998
job/groups-1028
wip/groups-1028
job/rebuildwarn-1016
wip/rebuildwarn-1016
job/startup-1011
wip/startup-1011
job/monthpill-1009
job/bgthumb-1025
job/sharetitle-1012
wip/monthpill-1009
wip/bgthumb-1025
wip/sharetitle-1012
job/canvas-cards-977
wip/canvas-cards-977
job/canvas-pencil-978
job/canvas-sketch-990
wip/canvas-sketch-990
wip/canvas-pencil-978
job/canvas-files-989
wip/canvas-files-989
job/canvas-collab-991
wip/canvas-collab-991
job/weekscroll-1018
wip/weekscroll-1018
wip/canvas-core-976
job/canvas-core-976
job/round-drag
wip/round-drag
job/round-settings
job/browserfix
wip/oapi-974
job/oapi-974
job/hist2-integrate
job/mailhtml-726
wip/mailhtml-726
wip/hist2-integrate
job/moneyfu-984
job/drag-1015
wip/drag-1015
job/rename-1017
wip/rename-1017
job/hist2-api
wip/hist2-api
job/oneacct-1014
wip/oneacct-1014
wip/moneyfu-984
job/hist2-bench
job/hist2-restore
wip/hist2-bench
job/hist2-write
job/hotfix-724
wip/hotfix-724
wip/hist2-write
wip/hist2-restore
job/hist2-store
job/hist2-ui
wip/hist2-ui
wip/hist2-store
job/searchstarve-965
job/shutdown-963
wip/shutdown-963
wip/pubedit-981
job/pubedit-981
job/analytics-973
wip/searchstarve-965
job/authflash-850
job/weeklane-969
job/pvtitle-1004
job/hist-975
wip/authflash-850
job/voicepill-617
wip/pvtitle-1004
job/headring-1003
wip/weeklane-969
wip/voicepill-617
wip/headring-1003
wip/analytics-973
job/agentscope-980
wip/thumbsandbox-988
job/thumbsandbox-988
wip/hist-975
job/links-856
wip/links-856
job/davetag-966
wip/davetag-966
job/filesstorm-1000
job/hoverpad-725
wip/filesstorm-1000
job/ffmpegblas-993
job/merge-round-7a
wip/hoverpad-725
wip/ffmpegblas-993
job/nowdot-1002
wip/verify-7a
job/noteid-857
wip/nowdot-1002
wip/noteid-857
wip/merge-round-7a
wip/agentscope-980
job/imapedge
job/a11yfix2
wip/imapedge-941
wip/imapedge
wip/a11yfix2
job/notetask-986
job/logheading
wip/logheading-998
job/textthumb-652
job/photolive-987
wip/photolive-987
job/davactive-983
job/savefix-985
job/tabicons-607
wip/davactive-983
wip/tabicons-607
wip/notetask-986
wip/savefix-985
job/dirid-627
job/buildspeed-1007
wip/dirid-627
job/agenda-decks
job/perfguards-impl
job/undo-a11y
wip/undo-a11y
job/mailperf
job/wal-824
wip/settings-50
job/settings-50
job/notesfilter-606
wip/notesfilter-606
job/surfaces-p2
wip/wal-824
job/maillayouts
wip/mailperf
wip/maillayouts
job/taskmeta-659
job/money-ident
wip/money-ident
wip/taskmeta-659
job/errstates
wip/perfguards-impl
job/headings-881
wip/headings-881
wip/errstates
job/voice-619
job/gaps-827
job/notesperf
wip/notesperf
wip/voice-619
job/hddsql-549
job/perf-stream-668
wip/perf-stream-668
wip/deeplinks-fix
job/deeplinks-fix
job/authfix
job/docsfix-rust
wip/docsfix-rust
job/webperf
job/docsfix-web
job/datafix2
job/webdav-lock-476
job/copyfix
wip/copyfix
wip/webperf
job/focus-658
wip/protofix
job/mediafix
job/protofix
wip/mediafix
job/agentfix
job/hhmm-724
wip/agentfix
job/undo-722
job/reuse
wip/webdav-lock-476
wip/reuse
job/scopefix
job/datafix
wip/hhmm-724
wip/undo-722
job/surfaces-p1
wip/hddsql-549
job/voicememos-618
wip/datafix2
wip/surfaces-p1
job/fix-940
wip/fix-940
job/blaze-surfaces
wip/datafix
wip/blaze-surfaces
job/taskday-655
job/linknav-639
wip/linknav-639
wip/gaps-827
job/isolation-707
job/audiophotos-720
wip/audiophotos-720
job/advfind-664
wip/voicememos-618
wip/taskday-655
wip/isolation-707
wip/advfind-664
wip/scopefix
wip/focus-658
job/testgaps
wip/testgaps
job/overscroll-718
wip/authfix
job/deps
wip/overscroll-718
job/rev2-agentfix
job/rev2-money-ident
job/rev2-mailperf
wip/deps
job/hardening-728
wip/hardening-728
job/searchgen-832
wip/searchgen-832
job/photopw-849
job/mailsql-825
wip/photopw-849
job/sharefix
wip/sharefix
job/rev2-mailhtml-726
job/rev2-perfguards
job/copyval-723
job/lightglass-r2
wip/lightglass-r2
wip/docsfix-web
job/copy-audit
job/macinterop-staging-r2
job/design-sync
job/rev2-taskmeta-659
job/rev2-webperf
job/docs-audit
job/rev2-advfind-664
job/rev2-mailproxy-486
job/states-audit
job/rev2-datafix
job/design-drift
job/test-gaps
job/rev2-voicememos-618
job/rev2-mediafix
job/rev2-deps
job/rev2-datafix2
job/licence-audit
job/issue-hygiene
job/rev2-protofix
job/rev2-voice-619
job/rev2-isolation-707
job/rev2-surfaces-p1
job/deeplink-audit2
job/rev2-audiophotos-720
wip/test-gaps
job/rev2-overscroll-718
job/rev2-undo-722
wip/states-audit
job/rev2-dropmd-719
job/rev2-linknav-639
job/merge-7b-plan
wip/merge-7b-plan
job/rev2-taskday-655
wip/mailsql-825
job/rev2-webdav-lock-476
job/rev2-browserfix
wip/design-drift
job/rev2-hddsql-549
wip/deeplink-audit2
job/rev2-scopefix
job/rev2-authfix
job/rev2-hardening-728
job/rev2-wal-824
job/rev2-sharefix
job/calsidebar-638
job/chrome-audit
job/ioperf
wip/ioperf
wip/chrome-audit
wip/calsidebar-638
job/dropmd-719
wip/dropmd-719
job/ocr-build
wip/ocr-build
job/blaze-settings
wip/copyval-723
job/toastring-721
wip/toastring-721
job/deployfix-732
wip/deployfix-732
wip/blaze-settings
job/money-import-recheck
job/rev-a11y
job/perf-arch-db
job/rev-7b-data
wip/textthumb-652
wip/perf-arch-db
job/sec-protocols
job/sidehdr-660
job/rev-7b-security
job/research-surfaces
job/rev-design-gaps
job/rev-mcp-api
wip/sidehdr-660
job/perf-arch-memory
wip/sec-protocols
job/perf-arch-bundle
job/snapedge-714
wip/rev-mcp-api
job/sec-supplychain
wip/research-surfaces
job/perf-arch-sync
job/rev-consistency
job/perf-arch-server
wip/perf-arch-server
wip/perf-arch-memory
job/perf-arch-io
job/perf-arch-client
job/sec-fs
job/sec-mcp-scopes
job/sec-sharing
job/perf-guards
job/sec-browser
job/sec-admin-deploy
job/sec-auth
wip/snapedge-714
job/bgpicker-717
wip/perf-arch-bundle
wip/money-import-recheck
job/advsetup-654
wip/bgpicker-717
wip/advsetup-654
job/burst-709
job/kbdcaps-710
job/app-pw-chooser
wip/burst-709
wip/app-pw-chooser
job/imaptest-625
wip/kbdcaps-710
job/fix-499
wip/fix-499
job/perf-mut-667
job/calimg-589
job/perf-snap-666
wip/calimg-589
wip/perf-snap-666
wip/perf-mut-667
job/perf-cache-665
wip/perf-cache-665
job/voicefiles-620
wip/voicefiles-620
job/admin-burst-705
wip/admin-burst-705
job/voicememos-review
wip/voicememos-review
wip/ryw-653
job/ryw-653
job/writeonopen-661
job/instant-663
wip/writeonopen-661
job/money-import-review
wip/money-import-review
wip/importjs-610
review/integrations-407-round6
wip/integrations-review
job/dragghost-612
wip/dragghost-612
job/integrations
wip/integrations
job/decider-656
job/merge-round-6
job/perf-rerun
wip/merge-round-6
job/integrations-review-round5
job/selalign-576
wip/selalign-576
job/mcp-events-491
job/files-631
job/cal-e2e-569
wip/cal-e2e-569
job/reload-423
wip/reload-423
wip/mcp-events-491
wip/files-631
job/notesbridge-644
wip/notesbridge-644
job/editor-series
job/calcard-series
wip/calcard-series
job/mcp-events-review-491
wip/mcp-events-review
wip/editor-series
job/quirks-546
job/integrations-recheck
job/tocrail-636
wip/tocrail-636
wip/quirks-546
wip/reminders-643
job/reminders-643
wip/davscale-573
job/davscale-573
job/integrations-review
wip/ocr-eval-584
job/ocr-eval-584
job/esc-537
wip/esc-537
job/toastname-586
wip/toastname-586
job/submenu-579
wip/submenu-579
job/tasks-mode
wip/tasks-mode
job/agentdocs-630
job/dupwrite-634
wip/agentdocs-630
wip/dupwrite-634
job/lightglass-588
wip/lightglass-588
job/tabswitch-549
job/ghosttask-623
wip/ghosttask-623
job/toaststack-616
job/weekstate-609
job/mailsync-613
wip/mailsync-613
wip/weekstate-609
job/maildup-626
wip/tabswitch-549
wip/maildup-626
wip/toaststack-616
job/motion-611
wip/motion-611
job/tlstest-601
wip/tlstest-601
job/perf-495
job/floating-sheet
wip/floating-sheet
job/remdup-585
wip/remdup-585
job/fix-502
wip/fix-502
job/attachplay-622
job/perf-batch
wip/perf-batch-563
wip/perf-495
hotfix/mail-sync-diag
job/mail-m3
wip/mail-m3
job/attach-poof-603
job/calhover-608
job/editorbar-604
job/mentions-605
job/merge-round-4
job/allday-514
wip/merge-round-4
wip/allday-514
job/merge-round-4a
wip/merge-round-4a
job/sharestack-580
job/fix-501
wip/sharestack-580
wip/fix-501
job/perf-batch-563
job/apw-cache-review
wip/apw-cache-review
job/probe-520
wip/probe-520
job/mac-393
wip/mac-393
job/header-571
job/flake-513
wip/flake-513
job/docs-thumb-547
wip/header-571
job/webcal-572
wip/webcal-572
wip/shortcuts-542
job/shortcuts-542
wip/docs-thumb-547
job/caldav-stress
wip/caldav-stress
wip/sweep-478
job/apw-cache-512
wip/apw-cache-512
job/money-empty-540
wip/restart-505
wip/money-empty-540
wip/fix-510
job/restart-505
job/fix-503
job/perf-496
wip/perf-496
job/fix-498
wip/fix-498
job/info-inspector-465
wip/info-inspector-465
job/fix-510
job/fix-507
wip/fix-507
wip/fix-503
job/fix-493
job/money-kinds
wip/money-kinds
job/hygiene-548
job/merge-round-3
wip/fix-493
job/drag-snap-536
wip/merge-round-3
wip/merge-round-0930
wip/drag-snap-536
job/align-538
wip/align-538
job/bg-flash
wip/bg-flash
job/money-import
job/search-count-544
wip/search-count-544
wip/money-import
job/settings-key-541
wip/settings-key-541
job/toast-539
job/preview-421
wip/preview-421
wip/toast-539
job/tasks-500-531
job/title-plain-526
wip/title-plain-526
wip/tasks-500-531
job/notes-bridge
wip/parity-484
job/parity-484
job/files-slow
job/crash-525
wip/notes-bridge
wip/files-slow
wip/crash-525
job/kbd-motion-527
wip/bg-422
job/analytics-504
wip/analytics-504
wip/kbd-motion-527
job/upload-pill-523
wip/upload-pill-523
wip/tray-order
job/tray-order
wip/overflow-mid
wip/merge-round-2
job/perf-494
wip/perf-494
wip/mcp-fast-492
wip/motion-477
wip/asr-ab-489
wip/theme-variants-506
wip/overflow-511
wip/week-header-508
wip/attach-427
job/dav-delete-471
job/iso-435
wip/iso-435
wip/files-sel-keys
wip/dav-delete-471
job/align-253
job/siwc-490
wip/siwc-490
job/money-kinds-review
wip/align-253
wip/money-kinds-review
job/small-bugs-3
wip/overlay-title-487
wip/multiget-500
wip/hidden-420
wip/webcal-ui
wip/webcal-431
job/perf-367
job/location
wip/small-bugs-3
wip/location
wip/perf-367
wip/admin-deny-483
job/tag-unicode-473
wip/tag-unicode-473
job/blur-436
wip/photos-470
wip/blur-436
wip/small-bugs-4
wip/hunt-20260930
wip/settings-hdr-482
wip/chips-416
job/dedup-375
wip/dedup-375
job/doc-stack
wip/doc-stack
job/tokens-literals
wip/tokens-literals
job/jobs-leftovers
wip/send-fast
wip/paste-467
wip/money-numbers
job/money-plugin
wip/money-plugin
job/break-dav
wip/merge-batch
wip/crossday-469
wip/mac-verify
wip/mail-m2
wip/break-dav
wip/money-review2
job/money-md
job/modes-424
wip/money-md
wip/jobs-leftovers
job/agenda-413
wip/agenda-413
wip/modes-424
job/recog-417
wip/recog-417
wip/bounce-425
wip/ab-384-luna
job/webdav-perf
wip/webdav-perf
job/toast-ring
wip/toast-ring
job/money-review
wip/money-review
wip/micro-motion
wip/settings-card
wip/minical
job/notes-imap-428
job/least-priv
wip/ui-small-2
wip/flaky-426
wip/drag-end-418
job/jank
wip/jank
wip/least-priv
wip/docs-site
job/agenda
job/sec-batch
wip/sec-batch
wip/per-user-index
job/area-calendars
wip/area-calendars
job/parity
wip/parity
job/documents-research
wip/documents-research
job/test-infra
job/reminders-sync
wip/small-bugs-2
wip/reminders-sync
wip/gestures
job/google-oauth
wip/tags-merge
wip/tags
job/e2e-theme
wip/e2e-theme
job/icon-align
wip/test-infra
wip/select-align
wip/editor-385
job/voice
wip/webdav
job/webdav
job/app-pw-ui
job/editor-integrity
wip/editor-integrity
wip/voice
wip/quota
wip/cal-followups
wip/icon-align
job/composer-scale
wip/composer-scale
job/jobs-page
wip/jobs-page
job/hig-type
wip/hig-type
wip/app-pw-ui
job/motion-spring
job/mcp
wip/motion-spring
wip/mcp
job/small-bugs
wip/push-hosts
job/profile-sign
wip/touch-369
wip/profile-sign
job/mobile-focus
wip/mobile-focus
wip/ui-polish-354
wip/small-bugs
wip/dup-task
job/toast-polish
job/app-pw-scopes
wip/toast-polish
wip/app-pw-scopes
wip/cli-agent
wip/selection-pills
job/preview-attach
wip/preview-attach
job/dav-proppatch
wip/dav-proppatch
wip/cal-switcher
job/atomic-race
wip/atomic-race
job/photos-shared
wip/photos-shared
wip/cal-grid
wip/note-rewrite
wip/search-rebuild
job/mail-m1
job/paperless-import
wip/paperless-import
wip/mail-m1
wip/hidden-activity
wip/search-d
wip/pricing-research
wip/cursors
wip/auto-scheme
job/single-pills
wip/single-pills
wip/xuser-matrix
wip/money-format
wip/app-pw-setup
wip/purge-dos
wip/vault-health
wip/caldav-apple
wip/xuser-audit
wip/e2e-green
wip/tabbar
wip/adv-harness
wip/maple-mono
job/search-fix
wip/search-fix
wip/search-perf-c
job/adv-harness
wip/sidebar-headers
job/glass
wip/temp-index
job/polish
wip/polish
wip/file-protocols
wip/money-research
wip/glass
wip/voice-models
wip/collab-redo
job/voice-research
wip/hunt-20260928
wip/notes-actions-research
wip/search-pad
wip/search-perf
wip/search-sticky
wip/editor-undo
wip/chrome-rules
wip/motion
wip/appearance-research
wip/appearance
wip/audit-bugs
wip/cal-glass
wip/block-actions
wip/authz-order
wip/event-stripes
wip/chrome-sidebar
wip/auth-flaky
wip/robust-2
wip/gate-fix
wip/menu-blur
wip/import-calternaljs
wip/tray-fix
job/import-calternaljs
wip/index-order
wip/audit-fixes
wip/search-chevrons
research/mail
wip/phone-chrome
wip/dedup-break
wip/csp
wip/ui-audit
wip/select-toast
wip/perf
wip/flat-layout
wip/fonts
wip/event-tint
wip/sync-converge
wip/data-split
wip/glass-audit
wip/robustness
wip/sync-chaos
wip/search-thumbs
wip/fuzz
wip/menu-icons
wip/search-pill
wip/sync-changing
wip/heading-links
wip/date-formats
wip/a11y
wip/break-editor
wip/e2e-fix
wip/settings-sections
wip/sync-root-guard
wip/search-palette
wip/share-edit
job/toasts
wip/toasts
wip/cont-analytics
wip/authz-review
wip/popovers
wip/overlay-glass
wip/change-feed
wip/editor-modes
wip/composer-align
wip/cont-agenda
wip/agenda-merge
job/agent-conventions
wip/agent-conventions
wip/backend-misc
job/route-audit
wip/route-audit
wip/ui-batch
wip/heif-hardening
wip/grid-resize
wip/ask-page
wip/webmcp
job/deeplink-audit
wip/deeplinks
wip/shortcuts
wip/cont-tz-days
main
No results found.
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
kayg/calternal#473
No description provided.