S1 tracer: minimal web client (passkey login, terminal over the real protocol) #21
Closed
opened 2026-10-06 11:48:16 +00:00 by kayg
·
35 comments
No Branch/Tag specified
main
j470b-server-mesh-rejoin
mesh-compat-382
j444b-d381-key-wins-flood
j461b-macos-utun-reader-thread
j475b-remove-host-motion
fix-reconnect-new-link
j481-d380
dev
j479-mesh-soak
fix/j476-host-facts
j475-motion-pill-split
j470-mac-node-join
root-upgrade-d376
j474-review-merge
latency-targets-120hz
nightly-suite-shards
gotatun-pin-j469
macos-utun-reader-thread
fix-flood-echo-stall
wip/j416
motion-fast-ease-out
mesh-addhost-j259
takeover-close-terminals-d368
kbd-instant-followups
fix-trust-key-double-click
nightly-suite-partial-report
appwin-icons-j207
rusqlite-slice1
swipe-content-first-d374
mesh-mtu-381
addhost-instant-open
glass-contrast-d365-mock
glass-contrast-d365
signout-followups-442
fix-startup-toast-red
research-gotatun-matrix-j317
themes-sync-j304
fix-load-flakes
fix-nix-zig-patch
fix-compute01-browser-baseline
ratchet-size-baseline-419
predict-auto-d130
revoke-coverage-d367
nightly-suite-queue-timeout
nightly-browser-suite
fix-rustsec-2026-0459
fonts-ioskeley-obel
log-retention-d375
fix-kbd-no-anim-427
fix-dev-red-specs-2
takeover-proof-305-j205
wip/j410-server-pump
ui-consistency-d372
fix-osc52-clipboard
libghostty-vt-1.0
forget-retired-host-d369
j404-merge-426
fix-setup-lock-race
fix-touch-select-426
revoke-access-report-ui
fix-predictive-echo-specs
fix-selinux-agent-exec
wip/j395-checkpoint2
wip/j395
j391-review-scratch
ui-consistency-j195-deferred-rebased
fix-rustc-paths-421
decisions-wording-341
fix-install-suite-red
fix-dev-rtt-specs
fix-pending-removal-align
fix-privileged-skip
fix-install-suite-404
review-j368
mesh-dns-j254
revoke-access-report-d356b
revoke-privilege-round5
fix-removal-confirm
review-j360
gotatun-rotation-367
deps-refresh-340
review-j354
review-J351
review-j350
addhost-takeover-d359
revoke-report-items-347
revoke-end-sessions-d362
review-j348
size-mesh-ssh-346
size-trim-337
revoke-access-diff-d356
j259-pre-rebase-b06c5a6
j305-ended-at-start-spec
addhost-sudo-consent
fix-layout-real-specs-411
fix-shell-open-411
fix-console-hosts-373
fix-shell-exit
fuzz-host-name-353
fix-host-details-410
macos-filter-j197
research-gotatun-tricks
revoke-p3-j216l
stale-state-pill
revoke-followups-j216k
revoke-progress-j216e
backup/macos01-20261106/lume/j197
backup/macos01-20261106/lume/appwin-icons-j207-stash0
backup/macos01-20261106/claude/stash-0
backup/macos01-20261106/claude/stash-1
backup/macos01-20261106/claude/J80-macos-s1
backup/macos01-20261106/claude/J80
backup/macos01-20261106/claude/J80-slice1-20261102
backup/macos01-20261106/claude/J16b-appwin-on-dev
backup/macos01-20261106/claude/appwin-launch-idle-146
backup/macos01-20261106/claude/J80-s1-run
wip/j259
trust-285-p3c
runtime-lock-j216f
mesh-ssh-p3-j175
tun-proof-p3b
trust-285-p3
terminal-polish-j271
tun-proof-p3
ssh-install-flakes-j216i
fuzz-fixes-j264
trust-285-a
trust-285-b
restart-oversized-fixture-j198
backup/macos01-20261106/lume/appwin-icons-j207
restart-bound-j216h
up-preflight-p3-j198
backup/macos01-20261106/lume/j251
up-preflight-j198
wip/up-preflight-j198-j245-p2
wip/up-preflight-j198-j245-p1
agent-fsync-offloop-j196
wip/up-preflight-j198-j245
settings-offscreen-j231
wip/up-preflight-j198-j226-inspection
wip/j103f
themes-j206
wip/up-preflight-j198-j226
flakes-j216c
backup/macos01-20261106/claude/j197
flakes-j216b
backup/macos01-20261106/claude/j197-red
wip/up-preflight-j198-review
flakes-j216
backup/macos01-20261106/claude/appwin-icons-j207
engineering-j208b
appwin-mock-j209
toast-stack-j165
engineering-j208
decisions-d351
decisions-d350
decisions-d349
appearance-presets-mock-j129
decisions-d348
docs-audit-spec
doc-coverage-baseline-raise
decisions-d347
decisions-d346b
decisions-d346
j88h-profile
ui-consistency-j195-deferred
ui-consistency-j195
engineering-practices-j194
preferred-login-ui-j166
signin-pools-263-j174
macos-node-265-s1
decisions-d345
decisions-d344
proxy-cgroup-j164
verify-quick-fuzz-329
proxy-start-io-j168
timing-flakes-j163
up-263-s1
mcp-events-j147
verify-quick-fuzz-j158
proxy-p3-j159
agent-resource-j157-detect
wip/j103d-final
remote-cancel-hang-j155
proxy-traefik-281-j62d
j149-verify-quick
proxy-traefik-281-j62b
j150-drop-unnamed
wip/j79d-red-r4
wip/j103d-d332
rootless-toast-j142
wip/j103d-head
wip/j103d
j125c-mcp
macos-build-j136
backup/macos01-20261106/claude/j136
wip/j79d-red-cli
wip/j79d-red-server
j121-link-liveness
j118c-tracer-failures
wip/j79c-head
release-desktop-j131
j124c-signed-macos
wip/j79c-red-p3
wip/j79c-red-p23
wip/j79c-red-p22
merge-j128-check
perf-deferred-j128
sidebar-toggle-260
j127-shortcut-changed-dot
j125-mcp
j118-tracer-failures
j126-account-summary
settings-sections-mock-j92
j120-pinch-lock
sidebar-292
backup/macos01-20261106/claude/j120
taste-2026-11-03
row-actions-242-215
backup/macos01-20261106/claude/stash-0-untracked
backup/macos01-20261106/claude/J80-265-s1-run
backup/macos01-20261106/claude/J80-macos-s1-20261102
j112-canvas-commands
ui-no-overshoot-scroll
fix-recovery-restart
backup/macos01-20261106/claude/stash-1-untracked
taste-2026-11-02
size-baseline-ratchet
machine-cards-structure-j108
j109-boot-copy-mockups
fix-dev-red
wip/up-263-s1
j95b-settings-rows
proxy-traefik-281
j95-option-rows
docs-human-j91
docs-keys-palette
fix-flood-1013-270-j38d
mesh-ssh-s1
mesh-ssh-s0
addhost-d291-tunnel
test-stability-load
mesh-relay-220
repro-296
shim-thp-off-24
mesh-pins-258-v2
mesh-dns
signin-d311-merged
docs-pages
ui-size-283
fix-ui-batch-specs
wip/j12b-edge-update
gate-on-arm
fix-rename-sync-293
trust-285-j60b
fix-focus-ring-clip
integ-ui-1101
edge-update-v2
signin-d311
taste-2026-11-01
layout-per-tab-250
ui-approved-splitopt-224
ui-approved-splitopt-224-on-dev
icon-text-centre-282
ui-approved-189-212-216
research-reverse-proxy
transfer-budget-320
review-mesh-pins-258-r2
sidebar-pill-259
review-mesh-relay-220
wip/j12-edge-update-v2
nix-package
status-crash-loop-237
fix-dev-test-failures
fix-fixture-socket-path
wip/mesh-relay-220-pre-dev-advance-rebase
fix-canvas-side-clip
research-head-to-head
frosted-real-256
review-mesh-pins-258
wip/mesh-relay-220-pre-final-rebase
review-layout-per-tab-250-r2
broad-suite-triage
nix-devshell
review-status-crash-loop-237-r3
wip/nix-devshell-pre-p3
taste-frosted-real
wip/code-serve-demo-2026-10-30
wip/code-serve-glass-2026-10-30
wip/code-serve-clusters-2026-10-30
wip/code-merge-release94-dev-2026-10-30
wip/rproxy-delta-scratch-2026-10-30
wip/stale-note-257-staged-2026-10-30
wip/d241-size-staged-2026-10-30
review-broad-suite-207
wip/mesh-pins-258-pre-split
wip/mesh-relay-220-pre-rebase
mesh-measure-220
plan-211-update
review-edge-autoupdate-r3
perf24-reconnect
review-stale-note-r2
release-prod-live
d241-shell-marker
review-mesh-pins-server-258
review-revocation-r3
review-setup-token-r2
review-sync-journal-r3
wip/review-mesh-pins-258-prune-review-1995fee46
frosted-scroll-256
sync-journal-r3
revocation-per-account-wip
review-tokio-asyncfd-0386
review-sync-p3s
wip/stash-8by64-stash0-2026-10-30
mesh-drag-r2
setup-token-data-wip
release-9-4
auth-busy-1013
mesh-view-overlap
sync-p3s
review-auth-busy-wake
review-readd-r8-wip
mesh-drag-bounds
audit-auth-93
app-windows-stream-start
review-authority-cap-r3
app-windows-r7-measure
readd-minimal-r6
readd-minimal-r5
app-windows-r7-soak
readd-minimal-r4
app-windows-r7
app-windows-r6
readd-minimal-r3
readd-minimal-r2
readd-minimal
merge-release8-dev
review-busy-page-liveness-r2
review-busy-page-liveness
mesh-view-trim
review-authority-read-retry-r2
review-remove-uninstall-r2
release-retry-reattach
release-retry
review-remove-uninstall
review-authority-read-retry
app-windows-ship
mesh-autoswitch-p2
mesh-ssh
mesh-relay
mesh-macos-node
screen-and-control
session-labels
review-real-logins-r5
review-real-logins-r4
review-real-logins-r3
shim-memory-r2
review-real-logins-r2
shim-memory
shadow-addhost-instant
shadow-real-logins
shadow-same-session-flood
shadow-prod-perf-fix
hosts-from-server
app-windows-real
app-windows-transport
release-prod-6w
mesh-policy-verify
quiet-close-toast
dev-merge-r4
review-mesh-agent-transport
review-app-windows-transport
settings-roundtrip
review-release-pipeline-r4
mesh-agent-transport
ended-strip-fix
review-audit-ca-update-d244
settings-rows
phone-width
signout-clear
fix-restart-tests
dev-merge-rp
signer-hardening
review-audit-ca-update
terminal-fidelity
review-audit-ca-update-wip
mesh-integrate
review-mesh-agent-transport-515d3712
review-mesh-dataplane-feec1988
mesh-dataplane
signout
research-canvas-node
wip/review-renderer-cost
wip/review-terminal-fidelity
padlock-glyph
review-release-pipeline-2e95b689
phone-polish
sidebar-polish
inbox-generic
review-mesh-dataplane-378d4055
prod-batch
ui-inbox
ui-ca-unlock
ui-machine-sections
review-mesh-dataplane-a5f744fb
tls-session-prod
session-bounds-prod
fix-dead-session
session-bounds
tls-session
palette-polish
shortcuts-d222
research-appmeta
phone-gutter
ui-centre-button
wip/ui-centre-button
wip/tls-session
review-addhost-breakit
ui-platform
renderer-cost
remote-agents
mesh-api
ssh-bootstrap
prod-hotfix2
prod-fixes
review-remote-agents
review-mesh-dataplane
session-life
research-browser
review-mesh-api
research-capture
review-mesh-api-round3
review-mesh-api-round1
gate-stability
review-gate-stability
review-relay-direct
review-mesh-api-findings
proto-sessions
font-picker
proto-addhost
proto-windows
mesh-core
latency-gate
research-bsd
research-discovery
keytray-mods
mock-core
ui-tweaks
fix-motion-sel
fix-motion
integrate2
fix-robust
t-web
t-server
vt-ghostty
fix-snap-echo
t-web-auth
review-vt2
t-agent
lane-protocol
lane-shim
lane-auth
s1-base
s1-contracts
s1-workspace
No results found.
No labels
launch-qa
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".
No due date set.
Dependencies
No dependencies set
Reference
kayg/infraternal#21
Loading…
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Part of #9. Base
dev7174d6b. A deliberately bare client (it is thrown away when the designed UI lands): passkey setup and login against #17, then one full-screen ghostty-web terminal through packages/protocol, with resume after a drop, credit, and the end-to-end latency probe (keystroke → painted echo) that becomes the S1 performance gate.Starting S1 tracer lane on branch t-web from base
7174d6bf6f. I am reading the protocol/auth contracts first and will keep all implementation changes inside apps/tracer/.Finding while reading the requested inputs: the task cites DECISIONS 87–88, but DECISIONS.md in this worktree ends at 86 (file tail confirms the last entry is 86). I’ll follow the present contracts and decisions 14, 41, 53, 63, 81, 84–86; this does not block the tracer lane.
Contract proposal for t-server (no shared contract files are changed in this lane): keep the wire action ID consistent with contracts/plugin.md as (the task’s shorthand), called on mux stream 0. The successful Result JSON needs as the server’s canonical lowercase UUID string; the client converts it to the 16 bytes required by AttachTerm. Input JSON should be the generated action schema, with a host UUID for a host-scoped shell. AttachTerm and subsequent terminal frames use client-opened mux stream 1. Please confirm/adjust the exact input and result fields on this issue before server integration.
Contract proposal for t-server (no shared contract files are changed in this lane): keep the wire action ID consistent with contracts/plugin.md as
ssh.session.open(the task shorthandterminal.open), called on mux stream 0. The successful Result JSON needssession_idas the server canonical lowercase UUID string; the client converts it to the 16 bytes required by AttachTerm. Input JSON should be the generated action schema, with a host UUID for a host-scoped shell. AttachTerm and subsequent terminal frames use client-opened mux stream 1. Please confirm or adjust the exact input and result fields on this issue before server integration.Playwright finding: the first-run browser flow returned 401 at /auth/setup-start because submitSetup disabled controls before constructing FormData. The test-double evidence was token-match=false and name-valid=false, without logging either submitted value. The failure screenshot also showed the login form still visible beside setup because the author form display rule overrode the hidden attribute. Fix: read FormData before disabling and enforce [hidden] display; rerunning the production-build browser scenario.
Follow-up browser finding: after fixing empty FormData and hidden-form display, Chromium WebAuthn rejected navigator.credentials.create with “This is an invalid domain.” The test server advertised the loopback IP as the relying-party ID. I’m moving the test origin to localhost so the virtual authenticator uses the accepted local RP domain.
Finding: the tracer test double reused one terminal session across fresh ssh.session.open calls. Evidence: the probe rendered all 36 characters, but its sequence inherited the earlier two-byte echo and reported only 34/36; test/mock-server.ts now creates a fresh session for each open while Resume keeps the original session.
Finished on t-web. HEAD:
db7f61c6a3. The tracer build and browser test pass; the test covers virtual-authenticator setup/login, output echo, dropped-Ack resume/deduplication, and forced-drop resume. Probe evidence (36 synthetic keys): p50 71.90 ms, p95 72.90 ms, p99 73.00 ms, resume 92.40 ms. Production-build screenshots: apps/tracer/test-results/terminal-first-run-passkey-29742-esume-and-the-latency-probe/tracer-terminal.png and tracer-probe.png. Real daemon integration remains for the server lane; this browser run uses the explicitly marked auth/WebSocket test double.\n\nscripts/verify fastsummary output (verbatim):\n\nadvisories ok, bans ok, licenses ok, sources ok\n\n+---------------------------+--------------+\n| Rust gate | Result |\n+---------------------------+--------------+\n| fmt | PASS |\n| clippy | PASS |\n| test | PASS |\n| cargo-deny | PASS |\n| static builds | PASS |\n+---------------------------+--------------+\n\n7 pass\n0 fail\n34390 expect() calls\nRan 7 tests across 2 files. [2.00s]\nFinished on t-web. HEAD:
db7f61c6a3. The tracer build and browser test pass; the test covers virtual-authenticator setup/login, output echo, dropped-Ack resume/deduplication, and forced-drop resume. Probe evidence (36 synthetic keys): p50 71.90 ms, p95 72.90 ms, p99 73.00 ms, resume 92.40 ms. Production-build screenshots: apps/tracer/test-results/terminal-first-run-passkey-29742-esume-and-the-latency-probe/tracer-terminal.png and tracer-probe.png. Real daemon integration remains for the server lane; this browser run uses the explicitly marked auth/WebSocket test double.scripts/verify fastsummary output (verbatim):Finding:
packages/uidoes not exist in this worktree (rg --files packages/uireports no such directory). The tracer therefore uses its requested static HTML controls and the existing terminal styling techniques from the mockup; there was no package component to extend.Orchestrator review of the web client (
db7f61c, 8 atomic commits): good structure. Two items before integration:t-web-latencyattributes it per hop.ssh.session.open(contracts/plugin.md). The agent lane usesterminal.openon leg B. Both are right at their own layer:ssh.session.openis the user-facing action (it is generated into the API, CLI and MCP), and the server maps it to the internal leg-B callterminal.open. The server lane (#19) must implement that mapping.Starting attribution work on branch t-web at base SHA
db7f61c6a3. I’ll instrument key-to-paint across the probe, client and test double, then compare headless and headed Chromium runs.Finding: baseline headless Playwright instrumentation at
db7f61cmeasured keydown→paint p50 74.60 / p99 75.90 ms. The browser's keydown/onData/encode/send work is <=0.10 ms p99; double receive→decode p99 0.24 ms, decode→echo encode p99 1.40 ms, and encode→send p99 0.02 ms. The budget is consumed after that: echo send→browser onmessage p50 11.85 ms; decode→term.write p50 27.60 ms because the synchronous 36-key probe creates a burst and TerminalClient serializes renderer writes; Ghostty's write callback arrives 16.80 ms after term.write; the following client rAF adds another 16.00 ms. Evidence: apps/tracer/src/terminal.ts drainOutput (one in-flight write and a second rAF), apps/tracer/node_modules/ghostty-web/dist/ghostty-web.js:2381-2390 (Ghostty schedules write callbacks via rAF). Current probe records the requestAnimationFrame timestamp and batches all 36 keys synchronously, so it includes queueing that an isolated keystroke would not.Chromium throttling check: headed in Xvfb measured p50 70.20 / p99 71.10 ms; headed with --disable-renderer-backgrounding --disable-background-timer-throttling measured 74.20 / 75.20 ms. The constant delay persists in both modes, so those background flags do not explain it. The double emits one Output frame per single-byte Input (); the synchronous probe queues subsequent frames while one Ghostty write is in flight (). ws 8.18.3 calls accepted socket.setNoDelay() with its default true argument (), so Nagle is disabled.
Chromium throttling check: headed in Xvfb measured p50 70.20 / p99 71.10 ms; headed with --disable-renderer-backgrounding --disable-background-timer-throttling measured 74.20 / 75.20 ms. The constant delay persists in both modes, so those background flags do not explain it. The double emits one Output frame per single-byte Input (apps/tracer/test/mock-server.ts lines 357-395); the synchronous probe queues subsequent frames while one Ghostty write is in flight (apps/tracer/src/terminal.ts lines 577-603). ws 8.18.3 calls accepted socket.setNoDelay() with its default true argument (apps/tracer/node_modules/ws/lib/websocket.js lines 237-242), so Nagle is disabled.
Confirmed extra-frame contribution: after consuming the write in Ghostty's write callback (which is already scheduled with requestAnimationFrame), the same 36-key headless run fell from p50 74.60 / p99 75.90 ms to p50 40.70 / p99 41.90 ms. The new callback→paint gap is 0.10 ms p50/p99, replacing the old second-frame gap of about 16 ms. Residual decode→term.write p50 8.00 / p99 10.90 ms and ws.send→ws.onmessage p50 16.60 / p99 18.00 ms remain inflated by the probe's synchronous burst; next I’m measuring keys one at a time.
Final per-hop attribution from the 500-key headless production-bundle run. The browser and test double were aligned with five HTTP clock samples; the minimum RTT was 3.1 ms, so split one-way estimates assume a symmetric local path.
Attribution and checks:
For an active iPhone or Mac terminal, renderer backgrounding should not apply. The measured path is still one display frame plus the actual network leg; refresh cadence and device/network conditions will differ from Xvfb. No physical iPhone or Mac was available for this run.
Finished on branch t-web at head
ed994420be. scripts/verify fast exited 0. Verbatim gate summaries:advisories ok, bans ok, licenses ok, sources ok
+---------------------------+--------------+
| Rust gate | Result |
+---------------------------+--------------+
| fmt | PASS |
| clippy | PASS |
| test | PASS |
| cargo-deny | PASS |
| static builds | PASS |
+---------------------------+--------------+
==> TypeScript protocol tests
bun test v1.4.2 (744846f84)
src/codec.test.ts:
(pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [4.20ms]
(pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.15ms]
(pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [0.75ms]
(pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.16ms]
(pass) split mux header preserves trailing Close [0.15ms]
src/stream.test.ts:
(pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [1836.90ms]
stream differential: 134 streams, 11439 schedules, zero divergences
(pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [6.15ms]
7 pass
0 fail
34390 expect() calls
Ran 7 tests across 2 files. [1.85s]
The separate tracer browser gate also passed: 500 keys, p50 15.10 ms / p99 16.30 ms.
Orchestrator: I accept the attribution (
ed99442). The 72 ms came from an extra rAF wait in the client plus background-renderer throttling in headless Chromium. Both are fixed or understood. What remains is 15.1 ms p50: almost all of it isterm.write → Ghostty write callback(14.3 ms). That is the time to the next display frame, and no web terminal can paint sooner. Our code plus the local network is about 1 ms.Gate definition, from now on: overhead = keydown → the echo bytes handed to the renderer (budget < 5 ms p99, DECISIONS 41), reported separately from arrival → painted, which must stay ≤ 1 frame (16.7 ms at 60 Hz, 8.3 ms at 120 Hz ProMotion). The probe already reports both hops.
Owner hit this on monitor01: "The server returned an invalid account id." Cause: the sign-in form asks for an Account ID (a UUID). The owner typed something else, and the client's message blames the server. The setup was never finished: there are 0 users and the setup token is still pending. Fix (job
auth-ux, server and client):statusaction ({setup_required}). The client shows only setup while no owner exists, and only sign-in after that.Starting client work on t-web at
1b4c907: status-first setup/sign-in screens and discoverable passkeys, resident-key browser tests and production screenshots. Coordinating additive status/login contract on #19. Decisions 24, 54, 80. Work will be committed separately on each lane; no deploy.Red browser evidence: target/passkey-job/status-red.log expects setup-form visible after loading unconfigured server; current UI returns hidden. New screen code reads status first, renders exactly one form, removes account/device inputs and recovery UUID copy, and distinguishes cancelled prompt, invalid setup token and server failure. Client auth module committed
38c0aa2with fast gate and tsc passing. Existing latency probe baseline failed p99 39.1 ms against its 20 ms gate during concurrent builds; will rerun without compilation load.Finding: production-build Chromium resident-key setup and usernameless sign-in succeed with localStorage cleared. Four explicit mobile screenshots (390x844) are apps/tracer/test-results/terminal-first-run-passkey-29742-esume-and-the-latency-probe/{setup,signin}-{light,dark}.png. Automatic trace/failure captures were disabled in
53bf408because they can retain auth secrets; generated trace archives removed. No visual-quality judgment claimed. Latency rerun under compilation load returned p99 25.7 ms; threshold remains unchanged.Owner decisions 97–98 (on top of the running
auth-uxjob, for its follow-up): accounts have an internal ID (the WebAuthn user handle), a unique username (lowercase[a-z0-9._-], 1–32 characters, can be renamed), a display name and an optional email. Passkey name = username, displayName = display name. The wizard asks for username + display name. Sign-in is one usernameless button plus "use a different passkey…" (cross-device QR or security key).Client lane finished on t-web at
0b18339cce. Full fast gate output verbatim, part 1/2:Client lane finished on t-web at
0b18339cce. Full fast gate output verbatim, part 2/2:Client verification: all three production-build Playwright tests pass; CTAP2.1 resident/UV/PRF authenticator, cookie and localStorage clearing, errors and 30 render samples per state. Build main.js 49,465 bytes; deferred terminal 662,827 bytes. Linux 6.12.111 x86_64, 8 vCPUs, i9-9900K 3.60 GHz. Review screenshots (390x844 light/dark): apps/tracer/test-results/terminal-first-run-passkey-29742-esume-and-the-latency-probe/{setup,signin}-{light,dark}.png. Self-review in apps/tracer/README.md; no phone, external visual approval or pinned perf-VM claim. Server API integration remains in t-server until orchestrator merges. No deploy or push. Browser output verbatim:
Additional cross-lane evidence: scripts/browser-auth/check-tracer.mjs in t-server serves the production t-web/dist read-only against the actual Rust auth router via private IPC. PASS: owner setup, 24-word acknowledgement, resident PRF sign-in with cookies/localStorage cleared, authenticated identity and DEK unwrap, Chromium 149.0.7827.55. Evidence: t-server/target/passkey-job/paired-browser.log. This supplements the client test double; no lane merge, push or deploy was performed.
Final client head: t-web
639ac27684(supersedes earlier completion SHA after assertion/copy hardening). Full fast gate output verbatim, part 1/2:Final client head: t-web
639ac27684(supersedes earlier completion SHA after assertion/copy hardening). Full fast gate output verbatim, part 2/2:Final client verification at
639ac27: strict TypeScript, production build and all three Playwright tests pass; current main.js 49,589 bytes and deferred terminal chunk 662,827 bytes. Final browser output verbatim:Final server head
7948ff00fb; client head639ac27. Atomic commits on separate branches, clean worktrees, no push/deploy/merge. Implemented discoverable login, exact public setup status, fresh ownerless restart token, stored per-user PRF input with legacy preservation, and status-first one-form client screens. PRF requires a second local prompt after signed identity resolution. Self-review and reproducible evidence are docs/verification/discoverable.md and apps/tracer/README.md. Screenshots are client apps/tracer/test-results/terminal-first-run-passkey-29742-esume-and-the-latency-probe/{setup,signin}-{light,dark}.png at 390x844; inherited CSS is dark-only. No physical iPhone, independent visual/security approval or perf-VM claim.Actual process restart output verbatim:
Paired production browser output verbatim:
Native browser output verbatim:
Release scale output verbatim (200 samples per operation, 2 passkeys, pending limit 1024; load and memory caveats in docs):
Independent audit started: t-web base
1b4c907, head639ac27684, paired with server t-server base6fa27a3head7948ff0. F1 (P1): failed local unwrap + logout 429 -> expected signed out; actual real Rust session 200 and production reload opens terminal. auth.ts:151 suppresses logout failure. Red test /tmp/review-auth-browser-test.mjs; /tmp/review-auth-unwrap-red.log. Original worktrees remain read-only.Independent audit verdict: REWORK (F1). Failed unwrap + logout 429 retains the session and production reload opens terminal. Real 120-action admission test blocks logout with 429/live session. Full findings and design reasoning posted on #19. Client tsc/build, real production setup/sign-in, restart, storage/traffic and error-copy checks passed. Independent audit finish evidence: client scripts/verify fast (exit 0). Server head
7948ff00fb; client head639ac27684. Original branches t-server/t-web remain clean; no commits, push or deploy. Disposable /tmp worktrees removed.Verbatim output:
Closed by the orchestrator during the 2026-10-28 handover (#254), on the owner's request to close finished issues. Evidence: Web client merged (
58040df,faa3154,ff505cbin dev and prod); audit F1 fixed in #29 round. Reopen if anything is still missing.kayg referenced this issue2026-10-28 17:53:54 +00:00